Warning: Permanently added '[localhost]:5752' (ECDSA) to the list of known hosts.
2025/06/17 21:59:04 fuzzer started
2025/06/17 21:59:05 dialing manager at localhost:34087
syzkaller login: [   93.932048] cgroup: Unknown subsys name 'net'
[   94.085063] cgroup: Unknown subsys name 'cpuset'
[   94.139352] cgroup: Unknown subsys name 'rlimit'
2025/06/17 21:59:30 syscalls: 205
2025/06/17 21:59:30 code coverage: enabled
2025/06/17 21:59:30 comparison tracing: enabled
2025/06/17 21:59:30 extra coverage: enabled
2025/06/17 21:59:30 setuid sandbox: enabled
2025/06/17 21:59:30 namespace sandbox: enabled
2025/06/17 21:59:30 Android sandbox: enabled
2025/06/17 21:59:30 fault injection: enabled
2025/06/17 21:59:30 leak checking: enabled
2025/06/17 21:59:30 net packet injection: enabled
2025/06/17 21:59:30 net device setup: enabled
2025/06/17 21:59:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/17 21:59:30 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/17 21:59:30 USB emulation: enabled
2025/06/17 21:59:30 hci packet injection: enabled
2025/06/17 21:59:30 wifi device emulation: enabled
2025/06/17 21:59:30 802.15.4 emulation: enabled
2025/06/17 21:59:30 fetching corpus: 0, signal 0/0 (executing program)
2025/06/17 21:59:32 starting 8 fuzzer processes
21:59:32 executing program 0:
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x0, 0x900, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xbc, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32092fe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x213fb1c8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f756a5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d2dfc06}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fbd99b4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56cb2682}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43a23e2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c75eb8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fe5ba0c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76b2d36d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ca6cf4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e846059}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000010}, 0x4040000)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x78}}, 0x40)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4090)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x2b6, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x24004880)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan4\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r8, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x40004)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

21:59:32 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x408c5}, 0x1)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x9, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r1, 0x4, 0x7, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x20}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xc2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3c77}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x408d0)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x804)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4440000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r2, 0x45c708e15c0125ba, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x25}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x48044)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r2, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4004000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x88001}, 0x40001)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x60e}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048810}, 0x8001)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x80}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x24004800)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xd}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004000)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc002)

21:59:32 executing program 2:
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x6, 0x4, 0xcd1, 0x8, 0x1, 0x401})
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x2, 0x3c2, 0x1, 0x60, 0x1f, 0x1})
r0 = semget$private(0x0, 0x2, 0x500)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000100)=""/4096)
syz_usb_ep_write(0xffffffffffffffff, 0x8, 0xc7, &(0x7f0000001100)="5d486f2824a12683c0576373950ca1d6ae4e0360a457f6644bd323ef1573519eda1bfd1f0e18b44672f9b2d5816235097a6c7c8f3d848fb2ef36b464c9c78e0672a750ddc86d1e01c6f86a427f8df155326cad70ef488dc67ea233268f30113bacb9b9a215f4d377a8c7264848505e49cd1529cd7751c3cfe44d690a3dbe5f76d33b1a7d89a2a69c4068c56f520729e324a9f9e170f8f944e7c2564983b776606eabf6a136a9e53ab532fa399056f4c42fe118d13ed587d4518d7c4a5772c66fb5105a8e78dcbb")
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x80)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x40)
r1 = semget(0x2, 0x4, 0x101)
semctl$SEM_STAT(r1, 0x2, 0x12, &(0x7f0000001300)=""/85)
semget$private(0x0, 0x2, 0x6a3)
shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000001380)=""/161)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4006000}, 0x7f81f6320bc06af4)
prctl$PR_SET_NAME(0xf, &(0x7f0000001540)='-%*-}^\x00')
r3 = gettid()
semctl$SEM_STAT(r0, 0x2, 0x12, &(0x7f0000001580)=""/79)
sched_getscheduler(r3)
migrate_pages(r3, 0x10001, &(0x7f0000001600)=0x3, &(0x7f0000001640)=0x8)
syz_open_dev$usbmon(&(0x7f0000001680), 0x0, 0x8000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f00000016c0))

21:59:32 executing program 3:
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0xc090)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r0=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4001)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan3\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000811}, 0x20000804)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xb}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1ff}]}, 0x38}}, 0x8884)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xb1db}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x54)
syz_open_dev$usbmon(&(0x7f00000009c0), 0x800, 0x841)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000004}, 0x80)

21:59:32 executing program 4:
r0 = getegid()
r1 = getegid()
r2 = getegid()
setgroups(0x5, &(0x7f0000000000)=[r0, r1, 0x0, 0xffffffffffffffff, r2])
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
getegid()
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201)
r4 = getegid()
setregid(r4, r0)
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
getegid()
getegid()
read$rfkill(r3, &(0x7f0000000080), 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000240)={&(0x7f0000000100), &(0x7f0000000140)=""/199, 0xc7})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x34}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x95}, 0x24040855)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000440)={0x1f, @none}, 0x8)

21:59:32 executing program 6:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r0=>0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040808}, 0x4000000)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r4, 0x314, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x85)
r6 = syz_open_dev$usbmon(&(0x7f0000000440), 0x4, 0x21)
ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1800000})
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8081)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r7, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80, 0x75}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x317}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffff86}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24000891)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000900)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x60}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x4010)
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x9, 0x2]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x8810)

21:59:32 executing program 5:
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x811}, 0x4)
socketpair(0xb, 0x3, 0x1, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x400c081)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x300000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x42)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c040)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4004084)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x140084}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x37}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x28, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000001}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x40}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080001}, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb4, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x58, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x1, 0x81, 0x8}}, @supported_rates={0x1, 0x3, [{0x12}, {0x16}, {0x5, 0x1}]}, @ibss={0x6, 0x2, 0x8000}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x56, 0xab, 0x4}}, @ibss={0x6, 0x2, 0xffff}, @chsw_timing={0x68, 0x4, {0x1, 0x3ff}}, @prep={0x83, 0x25, @ext={{}, 0x2, 0x2a, @device_b, 0x9, @device_a, 0xbe, 0x8, @broadcast, 0xa8bd}}, @mesh_chsw={0x76, 0x6, {0x5, 0xe4, 0x15}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="6687011bd0a8e714dcc029d59b146bf0f259bb63cd980788d9"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d26269c6ec07"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40800}, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r3)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x44010)
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xe8, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a7b2ab8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc145ae6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5860bd75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22b6237a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6142dac7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x790956da}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}]}]}]}, 0xe8}}, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000c40)={&(0x7f0000000b80), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000d00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x7bf06d9b000dbed5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000d80)={'batadv0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000dc0)={'batadv0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000e00)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x60, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4)

[  120.789031] audit: type=1400 audit(1750197572.620:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
21:59:32 executing program 7:
get_thread_area(&(0x7f0000000000)={0x80000000, 0x1000, 0x2000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1})
unshare(0x40000000)
unshare(0x20040880)
socketpair(0x9, 0x5, 0x3, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c8095}, 0x8000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ff, 0x2, &(0x7f0000000180)=0x1)
modify_ldt$write2(0x11, &(0x7f00000001c0)={0x7, 0x20001000, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
setreuid(0xee00, 0xee00)
sched_setparam(0x0, &(0x7f0000000240)=0x400)
modify_ldt$write2(0x11, &(0x7f0000000280)={0x8, 0x1000, 0xffffffffffffbbff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2f0, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xec, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56805ed6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95f1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46f25f23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ab1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dc81ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b407551}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c3dbeea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb889}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa24e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12378886}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa024}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47eee85f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11c80cc5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd017}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9065}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30a06fa4}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6346}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89d2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12fc62c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68491cf8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e6f7c74}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4434e10a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x138, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58b6a7ea}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4723}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56ee0825}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6700}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf18d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x334}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b7ef91}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9785}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc60b63b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8bbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8906}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47f8}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x303b8d2f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed06}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34327912}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7167}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa733}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x363f45a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x128c51af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x542a1604}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32882577}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45fb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58dec6a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x274b9bdd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32e5bc6b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c1f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c9821d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30766552}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6dded5f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc13f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1685bdd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50212c48}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x714f46e4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fbb8699}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ec009e7}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b34a5dc}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55263060}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0a8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3cc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26e63dc7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5529b9bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1904}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x2f0}, 0x1, 0x0, 0x0, 0xa0}, 0x20018040)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c051}, 0x24000084)
get_thread_area(&(0x7f0000000800)={0x100, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000004)
socketpair(0x2b, 0x800, 0xb8f, &(0x7f0000000940))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040894}, 0x4000800)

[  122.221551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  122.224949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.228458] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.232564] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  122.236300] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.241220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.243436] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  122.251465] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.261599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  122.266703] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.277047] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.281447] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  122.287431] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  122.317337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  122.319315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  122.331674] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  122.334320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  122.348996] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  122.354624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  122.363975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  122.378551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  122.383251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  122.385525] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  122.396226] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  122.400065] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  122.434615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  122.444567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  122.463807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  122.466242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  122.479419] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  122.481513] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  122.485306] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  122.498381] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  122.499842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  122.501184] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  122.504474] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  122.527275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  122.529834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  122.545210] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  122.568946] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  124.294437] Bluetooth: hci1: command tx timeout
[  124.359814] Bluetooth: hci2: command tx timeout
[  124.422236] Bluetooth: hci3: command tx timeout
[  124.487789] Bluetooth: hci4: command tx timeout
[  124.488375] Bluetooth: hci0: command tx timeout
[  124.551652] Bluetooth: hci5: command tx timeout
[  124.614156] Bluetooth: hci6: command tx timeout
[  124.678094] Bluetooth: hci7: command tx timeout
[  126.342848] Bluetooth: hci1: command tx timeout
[  126.406549] Bluetooth: hci2: command tx timeout
[  126.469840] Bluetooth: hci3: command tx timeout
[  126.533826] Bluetooth: hci0: command tx timeout
[  126.534255] Bluetooth: hci4: command tx timeout
[  126.598057] Bluetooth: hci5: command tx timeout
[  126.662058] Bluetooth: hci6: command tx timeout
[  126.725995] Bluetooth: hci7: command tx timeout
[  128.390160] Bluetooth: hci1: command tx timeout
[  128.454912] Bluetooth: hci2: command tx timeout
[  128.517845] Bluetooth: hci3: command tx timeout
[  128.581898] Bluetooth: hci4: command tx timeout
[  128.582328] Bluetooth: hci0: command tx timeout
[  128.645859] Bluetooth: hci5: command tx timeout
[  128.709809] Bluetooth: hci6: command tx timeout
[  128.774350] Bluetooth: hci7: command tx timeout
[  130.438253] Bluetooth: hci1: command tx timeout
[  130.502157] Bluetooth: hci2: command tx timeout
[  130.566912] Bluetooth: hci3: command tx timeout
[  130.629848] Bluetooth: hci4: command tx timeout
[  130.630294] Bluetooth: hci0: command tx timeout
[  130.695213] Bluetooth: hci5: command tx timeout
[  130.757824] Bluetooth: hci6: command tx timeout
[  130.822028] Bluetooth: hci7: command tx timeout
[  184.796515] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  184.799340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  184.811490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  184.814009] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  184.817337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  184.821947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  184.828493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  184.829580] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  184.834548] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  184.844493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  184.903320] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  184.906781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  184.912620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  184.916163] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  184.925120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  184.928844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  184.937025] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  184.972113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  184.973984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  184.987368] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  185.007249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  185.014187] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  185.016313] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  185.017609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  185.019550] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  185.023643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  185.030852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  185.035534] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  185.040523] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  185.044347] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  185.044537] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  185.048958] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  185.050969] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  185.084487] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  185.092307] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  185.098516] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  185.133522] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  185.152554] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  185.160212] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  185.183357] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  186.885879] Bluetooth: hci0: command tx timeout
[  186.949957] Bluetooth: hci1: command tx timeout
[  187.015053] Bluetooth: hci2: command tx timeout
[  187.079196] Bluetooth: hci4: command tx timeout
[  187.143095] Bluetooth: hci3: command tx timeout
[  187.205832] Bluetooth: hci5: command tx timeout
[  187.269980] Bluetooth: hci7: command tx timeout
[  187.334028] Bluetooth: hci6: command tx timeout
[  188.934870] Bluetooth: hci0: command tx timeout
[  188.998881] Bluetooth: hci1: command tx timeout
[  189.063122] Bluetooth: hci2: command tx timeout
[  189.127539] Bluetooth: hci4: command tx timeout
[  189.191154] Bluetooth: hci3: command tx timeout
[  189.254855] Bluetooth: hci5: command tx timeout
[  189.319963] Bluetooth: hci7: command tx timeout
[  189.383961] Bluetooth: hci6: command tx timeout
[  190.983168] Bluetooth: hci0: command tx timeout
[  191.046238] Bluetooth: hci1: command tx timeout
[  191.110452] Bluetooth: hci2: command tx timeout
[  191.174903] Bluetooth: hci4: command tx timeout
[  191.237882] Bluetooth: hci3: command tx timeout
[  191.301893] Bluetooth: hci5: command tx timeout
[  191.365869] Bluetooth: hci7: command tx timeout
[  191.429857] Bluetooth: hci6: command tx timeout
[  193.029860] Bluetooth: hci0: command tx timeout
[  193.093888] Bluetooth: hci1: command tx timeout
[  193.157929] Bluetooth: hci2: command tx timeout
[  193.221875] Bluetooth: hci4: command tx timeout
[  193.286121] Bluetooth: hci3: command tx timeout
[  193.351072] Bluetooth: hci5: command tx timeout
[  193.413837] Bluetooth: hci7: command tx timeout
[  193.478523] Bluetooth: hci6: command tx timeout
[  246.687535] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  246.692331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  246.696101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  246.703468] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  246.715371] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  246.939618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  246.942536] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  246.946427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  246.958209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  246.961087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  246.962716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  246.965418] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  246.968258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  246.975897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  246.993430] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  247.060432] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  247.069580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  247.075418] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  247.082164] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  247.089267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  247.090812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  247.092991] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  247.098361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  247.109234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  247.131363] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  247.202281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  247.206520] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  247.222357] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  247.229224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  247.231552] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  247.236270] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  247.238505] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  247.244710] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  247.248974] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  247.266170] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  247.269577] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  247.273801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  247.291431] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  247.302501] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  247.326672] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  248.774100] Bluetooth: hci0: command tx timeout
[  249.094198] Bluetooth: hci2: command tx timeout
[  249.095336] Bluetooth: hci1: command tx timeout
[  249.158817] Bluetooth: hci3: command tx timeout
[  249.221969] Bluetooth: hci4: command tx timeout
[  249.286822] Bluetooth: hci5: command tx timeout
[  249.413827] Bluetooth: hci6: command tx timeout
[  249.477837] Bluetooth: hci7: command tx timeout
[  250.822015] Bluetooth: hci0: command tx timeout
[  251.141880] Bluetooth: hci1: command tx timeout
[  251.142370] Bluetooth: hci2: command tx timeout
[  251.206176] Bluetooth: hci3: command tx timeout
[  251.270126] Bluetooth: hci4: command tx timeout
[  251.334790] Bluetooth: hci5: command tx timeout
[  251.461811] Bluetooth: hci6: command tx timeout
[  251.525994] Bluetooth: hci7: command tx timeout
[  252.870539] Bluetooth: hci0: command tx timeout
[  253.190087] Bluetooth: hci2: command tx timeout
[  253.190674] Bluetooth: hci1: command tx timeout
[  253.254002] Bluetooth: hci3: command tx timeout
[  253.317830] Bluetooth: hci4: command tx timeout
[  253.381819] Bluetooth: hci5: command tx timeout
[  253.510274] Bluetooth: hci6: command tx timeout
[  253.574130] Bluetooth: hci7: command tx timeout
[  254.917923] Bluetooth: hci0: command tx timeout
[  255.237970] Bluetooth: hci1: command tx timeout
[  255.239106] Bluetooth: hci2: command tx timeout
[  255.301863] Bluetooth: hci3: command tx timeout
[  255.365898] Bluetooth: hci4: command tx timeout
[  255.430381] Bluetooth: hci5: command tx timeout
[  255.558814] Bluetooth: hci6: command tx timeout
[  255.621864] Bluetooth: hci7: command tx timeout
[  309.912866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  309.917573] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  309.920479] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  309.931372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  309.939568] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  310.111926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  310.117966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  310.122271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  310.129797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  310.134333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  310.212967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  310.225293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  310.248990] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  310.263903] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  310.266639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  310.269802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  310.272713] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  310.276841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  310.282295] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  310.290278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  310.292581] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  310.295539] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  310.303831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  310.310077] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  310.348328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  310.378338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  310.384353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  310.415028] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  310.441370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  310.453292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  310.684259] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  310.728737] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  310.777414] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  310.791168] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  310.801939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  310.806978] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  310.814181] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  310.819640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  310.837717] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  310.897291] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  312.007936] Bluetooth: hci0: command tx timeout
[  312.198869] Bluetooth: hci1: command tx timeout
[  312.390994] Bluetooth: hci6: command tx timeout
[  312.391674] Bluetooth: hci3: command tx timeout
[  312.455214] Bluetooth: hci2: command tx timeout
[  312.646144] Bluetooth: hci4: command tx timeout
[  312.902026] Bluetooth: hci5: command tx timeout
[  313.029885] Bluetooth: hci7: command tx timeout
[  314.053807] Bluetooth: hci0: command tx timeout
[  314.246817] Bluetooth: hci1: command tx timeout
[  314.438845] Bluetooth: hci3: command tx timeout
[  314.439296] Bluetooth: hci6: command tx timeout
[  314.501792] Bluetooth: hci2: command tx timeout
[  314.697007] Bluetooth: hci4: command tx timeout
[  314.949816] Bluetooth: hci5: command tx timeout
[  315.079114] Bluetooth: hci7: command tx timeout
[  316.103268] Bluetooth: hci0: command tx timeout
[  316.293816] Bluetooth: hci1: command tx timeout
[  316.486025] Bluetooth: hci3: command tx timeout
[  316.486474] Bluetooth: hci6: command tx timeout
[  316.550956] Bluetooth: hci2: command tx timeout
[  316.741800] Bluetooth: hci4: command tx timeout
[  316.997817] Bluetooth: hci5: command tx timeout
[  317.125829] Bluetooth: hci7: command tx timeout
[  318.149926] Bluetooth: hci0: command tx timeout
[  318.342980] Bluetooth: hci1: command tx timeout
[  318.533984] Bluetooth: hci6: command tx timeout
[  318.534437] Bluetooth: hci3: command tx timeout
[  318.598765] Bluetooth: hci2: command tx timeout
[  318.792216] Bluetooth: hci4: command tx timeout
[  319.046034] Bluetooth: hci5: command tx timeout
[  319.174827] Bluetooth: hci7: command tx timeout
[  372.000300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  372.006401] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  372.009530] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  372.018456] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  372.028577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  372.435903] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  372.442674] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  372.449207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  372.455559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  372.458331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  372.461240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  372.462703] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  372.465225] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  372.471648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  372.478371] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  372.547552] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  372.557644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  372.566338] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  372.567499] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  372.577461] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  372.580380] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  372.597083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  372.606047] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  372.608193] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  372.614057] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  372.930235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  372.950456] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  372.977138] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  372.979554] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  372.984052] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  372.987405] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  373.003782] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  373.020574] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  373.027329] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  373.031723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  373.034466] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  373.039594] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  373.065296] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  373.122287] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  373.130211] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  374.087189] Bluetooth: hci0: command tx timeout
[  374.534162] Bluetooth: hci2: command tx timeout
[  374.535140] Bluetooth: hci1: command tx timeout
[  374.726881] Bluetooth: hci3: command tx timeout
[  374.727454] Bluetooth: hci4: command tx timeout
[  375.109890] Bluetooth: hci5: command tx timeout
[  375.174023] Bluetooth: hci7: command tx timeout
[  375.237796] Bluetooth: hci6: command tx timeout
[  376.135987] Bluetooth: hci0: command tx timeout
[  376.582839] Bluetooth: hci2: command tx timeout
[  376.583294] Bluetooth: hci1: command tx timeout
[  376.775908] Bluetooth: hci3: command tx timeout
[  376.776340] Bluetooth: hci4: command tx timeout
[  377.159820] Bluetooth: hci5: command tx timeout
[  377.222972] Bluetooth: hci7: command tx timeout
[  377.286812] Bluetooth: hci6: command tx timeout
[  378.183466] Bluetooth: hci0: command tx timeout
[  378.629858] Bluetooth: hci1: command tx timeout
[  378.630306] Bluetooth: hci2: command tx timeout
[  378.822810] Bluetooth: hci4: command tx timeout
[  378.823252] Bluetooth: hci3: command tx timeout
[  379.206950] Bluetooth: hci5: command tx timeout
[  379.271068] Bluetooth: hci7: command tx timeout
[  379.334886] Bluetooth: hci6: command tx timeout
[  380.230846] Bluetooth: hci0: command tx timeout
[  380.677839] Bluetooth: hci1: command tx timeout
[  380.678292] Bluetooth: hci2: command tx timeout
[  380.871924] Bluetooth: hci4: command tx timeout
[  380.872351] Bluetooth: hci3: command tx timeout
[  381.254909] Bluetooth: hci5: command tx timeout
[  381.318957] Bluetooth: hci7: command tx timeout
[  381.381948] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
22:04:33  Registers:
info registers vcpu 0
RAX=ffff8880329c5d78 RBX=ffff888025fbfc08 RCX=ffff88806ce089cc RDX=0000000000000005
RSI=ffffffff85c1cc40 RDI=ffff8880329c5d78 RBP=ffffffff85c1cc40 RSP=ffff88806ce089c0
R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b53d R11=00000000000210a9
R12=ffffffff81354012 R13=0000000000000202 R14=ffff8880329c5280 R15=0000000000000005
RIP=ffffffff8151ac7b RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe9935e5d5c CR3=000000000dd4b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff819cedbd RDX=ffff8880329c0000
RSI=ffffffff819cee85 RDI=0000000000000007 RBP=80000000076f3025 RSP=ffff8880329ffb10
R8 =00007f615e740000 R9 =fffff9400003b798 R10=0000000000000000 R11=0000000000000001
R12=ffff8880329ffd88 R13=ffff88802453a280 R14=0000000000000000 R15=ffffea00001dbcc0
RIP=ffffffff81738d98 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f615e743c48 CR3=00000000289fc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000