Warning: Permanently added '[localhost]:45995' (ECDSA) to the list of known hosts.
2025/06/06 01:39:40 fuzzer started
2025/06/06 01:39:40 dialing manager at localhost:39689
syzkaller login: [   97.823549] cgroup: Unknown subsys name 'net'
[   98.010559] cgroup: Unknown subsys name 'cpuset'
[   98.110363] cgroup: Unknown subsys name 'rlimit'
2025/06/06 01:40:04 syscalls: 206
2025/06/06 01:40:04 code coverage: enabled
2025/06/06 01:40:04 comparison tracing: enabled
2025/06/06 01:40:04 extra coverage: enabled
2025/06/06 01:40:04 setuid sandbox: enabled
2025/06/06 01:40:04 namespace sandbox: enabled
2025/06/06 01:40:04 Android sandbox: enabled
2025/06/06 01:40:04 fault injection: enabled
2025/06/06 01:40:04 leak checking: enabled
2025/06/06 01:40:04 net packet injection: enabled
2025/06/06 01:40:04 net device setup: enabled
2025/06/06 01:40:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/06 01:40:04 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/06 01:40:04 USB emulation: enabled
2025/06/06 01:40:04 hci packet injection: enabled
2025/06/06 01:40:04 wifi device emulation: enabled
2025/06/06 01:40:04 802.15.4 emulation: enabled
2025/06/06 01:40:04 fetching corpus: 0, signal 0/0 (executing program)
2025/06/06 01:40:06 starting 8 fuzzer processes
01:40:06 executing program 0:
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x6, {0x4000, {0x40, 0x3, 0x2}, 0x106, 0xee01, 0x0, 0x2, 0x7, 0xfffffffeffffffff, 0x3f, 0x7, 0x2, 0x2, 0x9, 0x100, 0x80000001, 0x100000001, 0x2, 0xc25, 0x7, 0x2}}, 0xa0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
r0 = syz_io_uring_complete(0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0xfa, 0x7f, 0x7, 0x0, 0x9, 0x40, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0xaa}, 0x180, 0x800, 0xfd, 0x9, 0x8, 0xfff, 0xffff, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x45b4, &(0x7f0000000240)={0x0, 0x58a1, 0x1, 0x1b, 0x211})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x6, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}, 0x4)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1)
fcntl$dupfd(r2, 0x0, r1)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r4, 0x208, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xb0}, 0x24008010)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/leds', 0x40000, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000540)={0xbc3, 0x0, &(0x7f0000000500)=[r5, r2, r0, r6]}, 0x4)
ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000580)={'\x00', 0x7fffffff, 0x3, 0x3c})
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x555c}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000007c0)={0x3, &(0x7f0000000780)=[{0x8001, 0x4, 0x5, 0x1}, {0x3, 0x55, 0x1, 0x2}, {0x4, 0xff, 0x9}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000800)={<r9=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000880)={r9, 0x3, r0, 0x1, 0x80000})

01:40:06 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x40040)
fspick(r2, &(0x7f0000000200)='./file0\x00', 0x1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xf4a5447f1df1ec4}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "270b2a1bb642a81e83d71f9584ee8ae3f76c354c5718fe889eb8ebceb3f3f75f"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x801)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000840}, 0x24040010)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000780)={'wg2\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000009c0)={'wg2\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'batadv0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000b00)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80901}, 0xc, &(0x7f0000001940)={&(0x7f0000000e40)={0xaf0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x22}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f85845c}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7657}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x100, 0x1, 0x2, 0x1}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0xaf0}, 0x1, 0x0, 0x0, 0x40048810}, 0x40800)

01:40:06 executing program 2:
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x10000, 0x5, 0x151, 0x100000001}, &(0x7f0000000080))
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000100)=[r0]}, 0x1)
mq_timedsend(r1, &(0x7f0000000180)="17986c", 0x3, 0x2, &(0x7f00000001c0)={0x77359400})
r2 = syz_io_uring_complete(0x0)
write$tcp_mem(r2, &(0x7f0000000200)={0x590, 0x20, 0x8, 0x20, 0x1000}, 0x48)
r3 = syz_io_uring_complete(0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0xec2cc2f5e54d2f28}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40045}, 0x80)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000540)={0x9, &(0x7f00000004c0)=[{0xb38f, 0xa, 0x1f, 0x872b}, {0x1, 0xff, 0x3f, 0x75a9}, {0x80, 0x9, 0x9, 0xec000}, {0x1, 0x2, 0x8, 0xfff}, {0x6, 0x80, 0x0, 0x1}, {0x289a, 0x0, 0x8, 0x1000}, {0xff, 0x7, 0x1, 0x401}, {0x5, 0x9, 0x8, 0x3}, {0x9, 0x4, 0x0, 0x81}]})
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}]}, 0x64}, 0x1, 0x0, 0x0, 0xc080}, 0x5d)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x800, 0x70bd29, 0x98f02fb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040800}, 0x84)
r6 = io_uring_setup(0x53dc, &(0x7f0000000a40)={0x0, 0x32cc, 0x10, 0x3, 0x371})
io_uring_setup(0x187e, &(0x7f0000000ac0)={0x0, 0xe18f, 0x4, 0x2, 0x92, 0x0, r6})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000b40)={0x0, 0xfffffffffffffff9, 0x7})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c081}, 0x4000)

01:40:06 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044080)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x80040}, 0x80)
waitid(0x0, 0x0, &(0x7f00000002c0), 0x2, &(0x7f0000000340))
sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8040000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x37}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "06916aae445c634ecb686847dbd1b48fc32d9fce7c4550bb9a0a746972d27e8c"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x443126b8c5e2ee98}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24000084)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r7, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004804)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
wait4(0x0, &(0x7f0000000b00), 0x40000000, &(0x7f0000000b40))
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r6)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1f}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000)

01:40:06 executing program 3:
ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_loaded', 0x41, 0x40)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x7ff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2]}, 0x6)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfa}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x328, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x198, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xe4, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf48e}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3f}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x11c, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @private=0x7fffffff}, 0x5}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2c77f406d871e608c1a3e0e5e7520054a67eb09ba2e0b60dec8e5c63552af8bb"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b507bb5ddeaa3f25291e657e825c9ab9b12669e1bc7e7c19a1de5923e945f303"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}, {0x4}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1ff, @private0, 0x42a8b23b}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xee}}]}]}]}, 0x328}}, 0x20008004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r4)
openat$cgroup_int(r1, &(0x7f0000000680)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
r5 = syz_open_dev$rtc(&(0x7f00000006c0), 0x5, 0x10000)
ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000700)={0x8, 0x1d, 0x15, 0x2, 0x7, 0x5, 0x2, 0x49, 0xffffffffffffffff})
mq_getsetattr(r1, &(0x7f0000000740)={0x1f, 0xfffffffffffffff8}, 0x0)
pipe2$9p(&(0x7f0000000780)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
syz_open_dev$loop(&(0x7f00000007c0), 0x7, 0x2880)
syz_open_dev$rtc(&(0x7f0000000800), 0x71, 0x400)
r7 = fcntl$dupfd(r6, 0x0, r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r3, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x44040)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080000}, 0x40810)

01:40:06 executing program 5:
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0xe, 0x81, {0x81, 0xa, "4db78c620d016b1cb4f95984ea00ea8e29fcbd6df1b28bdefe8652260f4761841c9d777cf6879fb6eb6c86efbb1dafc2079438a50f887d979627c7672695c927d1695ddb3af5c393a89413995f8df05f03985751babcc9ec0fd7437009686a2e3dfc3134a8ef954113a85820367e57293ffe6f6c1d929a5fc83fc448691935"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x20, 0xd, 0x9f, "34602028df41b11f428a8afead6d27ee4d9fc30304c3560ea979088ed097d67039ca153740dd643d28eb005c17e314a70f41132d338dc5e64b41bc6115df898aabacf91275ea77f08bec7e6fe8e12fcffc272ec6ef200d60bda935ffe28560392bc518b64dd7d9546b174e47c327b6e59e7fcdcb51215c908dbaf1152a38bee2b5afd2f55567470d1314758e486f126bb5108fcb85262fcdb76fdf7fcc2d41"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x9, 0x1, 0xffffffe1, 0x9, 0x3ff, 0x4, 0x9, 0x7, 0xb2c6, 0x638, 0xfff, 0x8}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x98d7}, &(0x7f0000000380)={0x20, 0x89, 0x2}})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x20, 0x21, 0xa3, {0xa3, 0xc, "727bcf1507b0bb777b6848916336b140a195ae67660fe7e1839967bb0a507355cffd59903f91e3dffff799938a2aaad32fdca7d96575f3c509ff8e12b00a7301f68dbce2d816c7fafde09239454decd1c4bd5a2374aa64e0ca84c63f6a879468ae6494b6c327d357d03f9ebeae6ae23a6a97752c21e132674036d0bf24cad668a2e7ca77d25b199850e25171cc01ddbd6faa28b7da8596a7f250395e8463bbd54d"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x0, 0x9, 0x9c, "cebc19ca9e0e5b7246aff75b7166bb26ebfaf25530d6d69a5dcbe5f7b50d63952717466668f83b026aeb69c4b3c130931423fb599d2ab5dc6dffc5d3cd0196b4b6ce86efb6d932a38bee54ca2b51c2889cbca24ad96253fad72be1ea53da0b5eaad7de9961b06679fa3bc4d161c7bbfbb2afe95884a2df7e8005a8026c4eaf18b799f51592e6033f173f202078d53b49ec5ebadb54468d644064cc02"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x6, 0x6, 0xa631, 0xed, 0x7, 0x8, 0x1f, 0x5, 0x81, 0x7}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000000740)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000007c0)={0x20, 0x89, 0x2, 0x1}})
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/module/ehci_hcd', 0x0, 0x91)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0xebc89f979e37baed}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}}, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000ac0)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, r2, 0x102, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4080)
r4 = dup2(r0, r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r1, 0x812, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6}]}, 0x44}}, 0x4005040)
r6 = fcntl$dupfd(r0, 0x406, r4)
r7 = eventfd(0x166)
io_submit(0x0, 0x3, &(0x7f0000000fc0)=[&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4, &(0x7f0000000d80)="6bd29716321787405745262207fa37427a8730b058b3e370ae203c5b346e4ac7f4a53cc2b989764834de21a0e8f0e7b794146be8ccb580f4f10d74cd8be9a90ebc79076356aff9dd9a55f5b66d19a470177759e7df18d6020f04add24f7811bc0ee477e4840a253b1a470157650067949ebdb8f67ce44826437c9122e53214e1e384fe76d9fc2d7f8584216c67388fc237", 0x91, 0x40}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x1e57, r4, &(0x7f0000000e80)="8f14664f2e5cfaac334847649daca8d34bf13efef98e6633b3b0", 0x1a, 0x2, 0x0, 0x1, r6}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000f00)="92b0e4b2374dbb7cb69d6a6dd94cdaa8dd3fcfa0cc135e7c5b5d36b5d71562d9226f08f835609969944d30014ab8cc8273a3f2a009a122d65abcc41eae27320b3bbdd2f5087a0705165b865ad7e3a1aaa9842768", 0x54, 0x5, 0x0, 0x1, r7}])
syz_usb_connect$cdc_ncm(0x3, 0x132, &(0x7f0000001000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x120, 0x2, 0x1, 0x20, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ef6b78e7fc"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x1, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0x6f50, 0x22}, [@mdlm_detail={0x7, 0x24, 0x13, 0x1f, "fa3a5e"}, @mdlm={0x15, 0x24, 0x12, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x7f, 0x0, 0x80}, @mdlm_detail={0x9b, 0x24, 0x13, 0xdf, "e0ab3e32f81b29c8f119e6788784c1fb17da84a153150e9a33c326ba6098a9c2b75495c8e76315430205720569d93aa4fae9519af6146b70b6efd0fd0cb8f490d7012245cb39d4149693960359efc58aea828196822e1d7009fa29ea01c94e8b1e5cc1b1a9e6cfe552ba96a3f9176039f4dbe0dc9b481ec140df4702b71d64ea1059d46008b2b97489f489851ef84833fd16c484a73d9f"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1f, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x20, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x7, 0x1f}}}}}}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x300, 0x45, 0x12, 0x9, 0x10, 0xa8}, 0x10, &(0x7f0000001180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x180, 0x3f, 0x7, 0x4, 0x2}]}, 0x2, [{0x66, &(0x7f00000011c0)=@string={0x66, 0x3, "32679ea71eb4fe8564b2977f0395a6f049fc1e7038212dcda880701d28ea2646e80c27134566391f01ef086a4bb2d869baa19661ea9bb71ee75fbde4472bdc05acf24cc0d25d702e0c9c92d68dc352eaf45727050ce7b490252661e1a6952f47581300c2"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x3801}}]})
r8 = fcntl$dupfd(r7, 0x406, r0)
syz_genetlink_get_family_id$gtp(&(0x7f00000012c0), r8)
mq_getsetattr(r4, &(0x7f0000001300)={0x1ff, 0x52, 0x4, 0x4}, &(0x7f0000001340))
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001500)={0x24, &(0x7f0000001380)={0x0, 0x21, 0x89, {0x89, 0xe, "7c41c1dc22dae77eda39e5da7cf6ab4d057a4b4cd6e919a0b1eb1d036d505c1d1697748a6b91090a285a52e3b039c73941551d7ee9536dcf467819baaf79ab27c5ae7539e36eb88e043ada99cabbd6c686b68d67cb8ba08d7b979e4dfa0127bfe1fe1b775325e8d14861370f63aecaa9073eedca088d34108a3b2d716d380264644db67f639f82"}}, &(0x7f0000001440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, &(0x7f0000001480)={0x0, 0x22, 0x13, {[@main=@item_012={0x2, 0x0, 0xb, '\rI'}, @local=@item_012={0x2, 0x2, 0x8, '/,'}, @global=@item_012={0x2, 0x1, 0x9, "361d"}, @local=@item_4={0x3, 0x2, 0x5, "1e7d621d"}, @main=@item_4={0x3, 0x0, 0xa, "4b86f35c"}]}}, &(0x7f00000014c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x67da, 0x3, 0x1, {0x22, 0xbc4}}}}, &(0x7f0000001740)={0x2c, &(0x7f0000001540)={0x20, 0xe, 0xf4, "a185a49ad04fee233a8651dfb0208c7db7298878e1722971bee132c54a6b35b6219881a299a1503560c204a9a75a4dca14b197aed097ebc3c68d270e2788923e3a0b35c00552c56ee423742f53ff0e3f56ab85677696b4b282bf4f7a2f4813a761c5b0178c47f93759682477dc21ce5e9e3d5bd26907378df2f5cb712b210573f4b64592a5a49a628b6f89d10f42f90ae0b7288fe62bb477cfe48da7951ac48767ade23581ce53d142e53b8ad72b7c565bc93b63ad7c8eb5fba9a95d1ad9f810de6c4f095cc259202033fdd5ff3a1663e29b8380955d31e4517fdc9a9f5692bed155cbd885f3ffe9c0d8fe583c086b3b871793e0"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000016c0)={0x20, 0x1, 0x9, "6c4f6972fa61efeced"}, &(0x7f0000001700)={0x20, 0x3, 0x1, 0x3f}})
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000017c0)={0x2, 0x6, "ec7371", 0x5, 0x3})

01:40:06 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_intel_sdw_acpi', 0x101000, 0x98)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/acpi', 0x800, 0x60)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40004)
io_uring_setup(0x624f, &(0x7f0000000280)={0x0, 0x42b3, 0x6, 0x0, 0xd3})
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x220, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3053a746}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11b72f90}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d4cb64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x318b4281}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d0c1079}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21c29c97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76b55e31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33ae53fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x773d24dc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59e247d2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6292b3d0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb0a0a0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3beae616}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xce3a44f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x159f6e19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ca7383}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1decea30}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x249a557}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2605923}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3633f532}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ae2e73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bada4d0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75b2cacd}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x220}}, 0x4)
r4 = fcntl$dupfd(r2, 0x406, r1)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x54}}, 0x8054)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r4, 0x8000000)
r6 = fcntl$dupfd(r3, 0x0, r3)
ioctl$LOOP_SET_FD(r3, 0x4c00, r6)
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000780), 0x107600, 0x0)
r8 = perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0x9, 0x1f, 0x6, 0xa4, 0x0, 0x4, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x81, 0x2, @perf_bp={&(0x7f00000007c0), 0x3}, 0x200, 0x80, 0x4a2, 0x9, 0x8000, 0xff, 0x2, 0x0, 0xf632, 0x0, 0x5}, 0x0, 0xc, r4, 0x8)
dup2(r7, r8)
bind$bt_hci(r2, &(0x7f0000000880)={0x1f, 0x2, 0x4}, 0x6)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x404aba9d380e686a)
pipe2$9p(&(0x7f00000009c0), 0x4800)
tee(r2, r7, 0xc834, 0x1)

[  123.068629] audit: type=1400 audit(1749174006.235:7): avc:  denied  { execmem } for  pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
01:40:06 executing program 7:
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x211, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1a}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x40800)
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x20004801)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4004)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff)
socketpair(0x10, 0x3, 0x401, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x80)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000}, 0x8010)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r2)
sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000980)={0x14, &(0x7f0000000880)={0x20, 0x21, 0x80, {0x80, 0x21, "1a281abe768a5cb095022cd2609bd0c3220ee00bd9dfc36861c7689ebb44b5c792288a4dc475279b01dce6c25650f73b772e836ba6417f0db5bf27e4fcf05601afee9f10987d2fcbca452f65d989a413b3f3edb394ce862975ec4aef262eaccc3ff49a77caf7224c2e3ea06b2b2b4266ab5dec078f07d2537d5d62309d14"}}, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x44, &(0x7f00000009c0)={0x0, 0xe, 0x29, "73a45e9766ec2d6fb6ab64d1e5f486602734beb04582bf1fb0e619b68fdc38e935146405a26301b9b9"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x73}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a80)={0x20, 0x80, 0x1c, {0x8001, 0x4, 0x80000000, 0x6, 0x400, 0xcc, 0x0, 0xeed, 0x3, 0x0, 0x7f, 0x8001}}, &(0x7f0000000ac0)={0x20, 0x85, 0x4, 0x1f0000}, &(0x7f0000000b00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b40)={0x20, 0x87, 0x2, 0x401}, &(0x7f0000000b80)={0x20, 0x89, 0x2, 0x1}})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000c40), 0x80100, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wpan1\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan1\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x58, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x5)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x4)

[  124.699158] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.704952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.711567] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  124.718530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  124.723290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  124.780054] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  124.784165] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  124.790186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  124.799515] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  124.814611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  124.817472] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  124.821174] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  124.828524] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  124.832563] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  124.836289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  124.838448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  124.841761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  124.843500] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  124.871314] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  124.876542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  124.879526] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  124.884488] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  124.889333] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  124.895312] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  124.910599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  124.917369] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  124.925539] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  124.944615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  124.946771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  124.955060] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  124.961536] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  124.985290] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  124.989611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  125.011144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  125.028825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  125.042734] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  125.046807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  125.053009] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  125.077477] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  125.109441] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  126.769506] Bluetooth: hci0: command tx timeout
[  126.961145] Bluetooth: hci3: command tx timeout
[  126.961934] Bluetooth: hci2: command tx timeout
[  127.026105] Bluetooth: hci1: command tx timeout
[  127.153371] Bluetooth: hci5: command tx timeout
[  127.154156] Bluetooth: hci6: command tx timeout
[  127.154177] Bluetooth: hci4: command tx timeout
[  127.154294] Bluetooth: hci7: command tx timeout
[  128.818459] Bluetooth: hci0: command tx timeout
[  129.009323] Bluetooth: hci3: command tx timeout
[  129.011102] Bluetooth: hci2: command tx timeout
[  129.074123] Bluetooth: hci1: command tx timeout
[  129.201062] Bluetooth: hci5: command tx timeout
[  129.201538] Bluetooth: hci6: command tx timeout
[  129.202321] Bluetooth: hci7: command tx timeout
[  129.202748] Bluetooth: hci4: command tx timeout
[  130.865984] Bluetooth: hci0: command tx timeout
[  131.056970] Bluetooth: hci3: command tx timeout
[  131.057439] Bluetooth: hci2: command tx timeout
[  131.121969] Bluetooth: hci1: command tx timeout
[  131.250274] Bluetooth: hci4: command tx timeout
[  131.250741] Bluetooth: hci7: command tx timeout
[  131.252448] Bluetooth: hci6: command tx timeout
[  131.252922] Bluetooth: hci5: command tx timeout
[  132.913969] Bluetooth: hci0: command tx timeout
[  133.106149] Bluetooth: hci2: command tx timeout
[  133.106627] Bluetooth: hci3: command tx timeout
[  133.169948] Bluetooth: hci1: command tx timeout
[  133.297821] Bluetooth: hci7: command tx timeout
[  133.298802] Bluetooth: hci5: command tx timeout
[  133.299618] Bluetooth: hci6: command tx timeout
[  133.300407] Bluetooth: hci4: command tx timeout
[  187.083152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  187.088285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  187.091033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  187.104397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  187.110588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  187.288179] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  187.298438] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  187.300703] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  187.306086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  187.311120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  187.335280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  187.353049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  187.357845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  187.366371] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  187.368015] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  187.371132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  187.372077] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  187.403444] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  187.409220] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  187.412280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  187.434385] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  187.446076] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  187.448400] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  187.462451] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  187.476728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  187.483543] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  187.491798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  187.498616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  187.500422] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  187.503474] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  187.504521] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  187.512606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  187.538352] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  187.543005] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  187.550317] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  187.555398] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  187.557187] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  187.598680] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  187.618102] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  187.625203] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  189.171293] Bluetooth: hci0: command tx timeout
[  189.361029] Bluetooth: hci1: command tx timeout
[  189.491168] Bluetooth: hci2: command tx timeout
[  189.616963] Bluetooth: hci5: command tx timeout
[  189.617035] Bluetooth: hci4: command tx timeout
[  189.617776] Bluetooth: hci3: command tx timeout
[  189.681212] Bluetooth: hci6: command tx timeout
[  189.745070] Bluetooth: hci7: command tx timeout
[  191.218921] Bluetooth: hci0: command tx timeout
[  191.409168] Bluetooth: hci1: command tx timeout
[  191.537047] Bluetooth: hci2: command tx timeout
[  191.665068] Bluetooth: hci4: command tx timeout
[  191.665540] Bluetooth: hci3: command tx timeout
[  191.666783] Bluetooth: hci5: command tx timeout
[  191.728963] Bluetooth: hci6: command tx timeout
[  191.792968] Bluetooth: hci7: command tx timeout
[  193.264960] Bluetooth: hci0: command tx timeout
[  193.456933] Bluetooth: hci1: command tx timeout
[  193.584949] Bluetooth: hci2: command tx timeout
[  193.713161] Bluetooth: hci5: command tx timeout
[  193.715925] Bluetooth: hci3: command tx timeout
[  193.716363] Bluetooth: hci4: command tx timeout
[  193.777031] Bluetooth: hci6: command tx timeout
[  193.841537] Bluetooth: hci7: command tx timeout
[  195.312947] Bluetooth: hci0: command tx timeout
[  195.505126] Bluetooth: hci1: command tx timeout
[  195.633230] Bluetooth: hci2: command tx timeout
[  195.761199] Bluetooth: hci4: command tx timeout
[  195.761230] Bluetooth: hci3: command tx timeout
[  195.761288] Bluetooth: hci5: command tx timeout
[  195.826112] Bluetooth: hci6: command tx timeout
[  195.889591] Bluetooth: hci7: command tx timeout
[  249.412470] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  249.416493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  249.420147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  249.428114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  249.433501] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  249.560036] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  249.564663] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  249.566717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  249.573368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  249.582753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  249.624288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  249.628189] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  249.631755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  249.644359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  249.648537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  249.668119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  249.690401] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  249.704602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  249.707197] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  249.709316] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  249.721380] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  249.734416] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  249.745330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  249.785392] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  249.787510] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  249.792504] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  249.800177] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  249.805848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  249.808634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  249.817118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  249.818761] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  249.839105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  249.842284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  249.858774] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  249.865316] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  249.894100] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  249.921762] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  249.924208] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  249.971048] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  249.987491] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  251.505952] Bluetooth: hci0: command tx timeout
[  251.632991] Bluetooth: hci1: command tx timeout
[  251.697189] Bluetooth: hci2: command tx timeout
[  251.826110] Bluetooth: hci4: command tx timeout
[  251.889246] Bluetooth: hci3: command tx timeout
[  251.952946] Bluetooth: hci6: command tx timeout
[  252.016958] Bluetooth: hci5: command tx timeout
[  252.848993] Bluetooth: hci7: command tx timeout
[  253.552925] Bluetooth: hci0: command tx timeout
[  253.681145] Bluetooth: hci1: command tx timeout
[  253.745552] Bluetooth: hci2: command tx timeout
[  253.872986] Bluetooth: hci4: command tx timeout
[  253.936951] Bluetooth: hci3: command tx timeout
[  254.001158] Bluetooth: hci6: command tx timeout
[  254.066229] Bluetooth: hci5: command tx timeout
[  254.897021] Bluetooth: hci7: command tx timeout
[  255.600951] Bluetooth: hci0: command tx timeout
[  255.729106] Bluetooth: hci1: command tx timeout
[  255.793231] Bluetooth: hci2: command tx timeout
[  255.920977] Bluetooth: hci4: command tx timeout
[  255.985897] Bluetooth: hci3: command tx timeout
[  256.049584] Bluetooth: hci6: command tx timeout
[  256.112952] Bluetooth: hci5: command tx timeout
[  256.945153] Bluetooth: hci7: command tx timeout
[  257.651371] Bluetooth: hci0: command tx timeout
[  257.776930] Bluetooth: hci1: command tx timeout
[  257.841211] Bluetooth: hci2: command tx timeout
[  257.969153] Bluetooth: hci4: command tx timeout
[  258.032933] Bluetooth: hci3: command tx timeout
[  258.097897] Bluetooth: hci6: command tx timeout
[  258.160952] Bluetooth: hci5: command tx timeout
[  258.993182] Bluetooth: hci7: command tx timeout
[  311.556271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  311.561494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  311.564680] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  311.581231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  311.588978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  311.711023] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  311.720081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  311.723370] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  311.742963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  311.749685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  311.759136] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  311.767944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  311.772947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  311.782796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  311.799657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  311.889748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  311.912436] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  311.921483] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.941486] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.951741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  311.975715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  312.013240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  312.016488] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  312.018196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  312.020171] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  312.028320] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  312.038536] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  312.061811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  312.066539] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  312.068941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  312.076630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  312.092737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  312.107565] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  312.114457] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  312.135374] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  312.205837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  312.224755] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  312.237156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  312.278407] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  312.297406] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  313.650308] Bluetooth: hci0: command tx timeout
[  313.841192] Bluetooth: hci2: command tx timeout
[  313.841274] Bluetooth: hci1: command tx timeout
[  314.033274] Bluetooth: hci3: command tx timeout
[  314.161224] Bluetooth: hci5: command tx timeout
[  314.224986] Bluetooth: hci6: command tx timeout
[  314.225094] Bluetooth: hci4: command tx timeout
[  314.417145] Bluetooth: hci7: command tx timeout
[  315.699010] Bluetooth: hci0: command tx timeout
[  315.888972] Bluetooth: hci1: command tx timeout
[  315.889006] Bluetooth: hci2: command tx timeout
[  316.080964] Bluetooth: hci3: command tx timeout
[  316.209104] Bluetooth: hci5: command tx timeout
[  316.272954] Bluetooth: hci6: command tx timeout
[  316.272976] Bluetooth: hci4: command tx timeout
[  316.466891] Bluetooth: hci7: command tx timeout
[  317.745217] Bluetooth: hci0: command tx timeout
[  317.937218] Bluetooth: hci2: command tx timeout
[  317.937253] Bluetooth: hci1: command tx timeout
[  318.129026] Bluetooth: hci3: command tx timeout
[  318.256991] Bluetooth: hci5: command tx timeout
[  318.321096] Bluetooth: hci6: command tx timeout
[  318.323899] Bluetooth: hci4: command tx timeout
[  318.514053] Bluetooth: hci7: command tx timeout
[  319.793947] Bluetooth: hci0: command tx timeout
[  319.985886] Bluetooth: hci1: command tx timeout
[  319.986118] Bluetooth: hci2: command tx timeout
[  320.176939] Bluetooth: hci3: command tx timeout
[  320.305090] Bluetooth: hci5: command tx timeout
[  320.368991] Bluetooth: hci4: command tx timeout
[  320.369142] Bluetooth: hci6: command tx timeout
[  320.562102] Bluetooth: hci7: command tx timeout
[  374.402400] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  374.406054] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  374.408689] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  374.415512] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  374.420571] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  374.591552] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  374.597246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  374.601280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  374.614561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  374.618808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  374.691538] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  374.696399] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  374.704196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  374.737000] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  374.743327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  374.747689] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  374.751430] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  374.759774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  374.767841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  374.777547] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  374.858997] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  374.864407] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  374.867634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  374.875397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  374.881513] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  374.988608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  374.994125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  374.997636] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  375.003315] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  375.007524] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  375.009647] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  375.045213] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  375.045428] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  375.051378] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  375.073409] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  375.089787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  375.100408] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  375.115482] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  375.170333] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  375.213446] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  376.497980] Bluetooth: hci0: command tx timeout
[  376.690124] Bluetooth: hci1: command tx timeout
[  376.817307] Bluetooth: hci2: command tx timeout
[  376.882894] Bluetooth: hci3: command tx timeout
[  377.010683] Bluetooth: hci4: command tx timeout
[  377.137973] Bluetooth: hci7: command tx timeout
[  377.200942] Bluetooth: hci5: command tx timeout
[  377.329150] Bluetooth: hci6: command tx timeout
[  378.546899] Bluetooth: hci0: command tx timeout
[  378.738120] Bluetooth: hci1: command tx timeout
[  378.866250] Bluetooth: hci2: command tx timeout
[  378.930954] Bluetooth: hci3: command tx timeout
[  379.057999] Bluetooth: hci4: command tx timeout
[  379.184996] Bluetooth: hci7: command tx timeout
[  379.250957] Bluetooth: hci5: command tx timeout
[  379.379269] Bluetooth: hci6: command tx timeout
[  380.593934] Bluetooth: hci0: command tx timeout
[  380.786885] Bluetooth: hci1: command tx timeout
[  380.914251] Bluetooth: hci2: command tx timeout
[  380.978032] Bluetooth: hci3: command tx timeout
[  381.104979] Bluetooth: hci4: command tx timeout
[  381.234089] Bluetooth: hci7: command tx timeout
[  381.296997] Bluetooth: hci5: command tx timeout
[  381.424937] Bluetooth: hci6: command tx timeout
[  382.640959] Bluetooth: hci0: command tx timeout
[  382.834200] Bluetooth: hci1: command tx timeout
[  382.961261] Bluetooth: hci2: command tx timeout
[  383.025095] Bluetooth: hci3: command tx timeout
[  383.153061] Bluetooth: hci4: command tx timeout
[  383.281940] Bluetooth: hci7: command tx timeout
[  383.345205] Bluetooth: hci5: command tx timeout
[  383.472953] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
01:45:09  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffffff81604840 RCX=ffff88802434781c RDX=1ffff11004868f43
RSI=ffffffff81aeba58 RDI=ffff88802434799c RBP=ffff888024347960 RSP=ffff8880243478c8
R8 =ffffffff86875a04 R9 =ffff888024347908 R10=000000000003b6bd R11=0000000000024bc4
R12=ffff888024347990 R13=0000000000000000 R14=ffff888016df3700 R15=ffff88800c6d0720
RIP=ffffffff812d9798 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd1432ba000 CR3=000000003070a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000005 RBX=ffff88800ec85280 RCX=0000000000000200 RDX=0000000000000008
RSI=ffff88800ec85cd8 RDI=ffff88800ec85cd8 RBP=ffff88800ec85cd8 RSP=ffff888029747738
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff88800ec85cd8 R13=ffffffffffffffff R14=0000000000000000 R15=0000000000000000
RIP=ffffffff815147c3 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f60aef7f620 CR3=000000002bef5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff0000000000ff00000000000000ff00
XMM02=000000000000000000ff000000000000 XMM03=000000000000000000ff0000000000ff
XMM04=0000ff00000000000000ff0000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000