Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:16527' (ECDSA) to the list of known hosts.
2023/08/20 12:28:29 fuzzer started
2023/08/20 12:28:29 dialing manager at localhost:46849
syzkaller login: [   99.775465] cgroup: Unknown subsys name 'net'
[   99.996405] cgroup: Unknown subsys name 'rlimit'
[  112.355345] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2023/08/20 12:28:43 syscalls: 206
2023/08/20 12:28:43 code coverage: enabled
2023/08/20 12:28:43 comparison tracing: enabled
2023/08/20 12:28:43 extra coverage: enabled
2023/08/20 12:28:43 setuid sandbox: enabled
2023/08/20 12:28:43 namespace sandbox: enabled
2023/08/20 12:28:43 Android sandbox: enabled
2023/08/20 12:28:43 fault injection: enabled
2023/08/20 12:28:43 leak checking: enabled
2023/08/20 12:28:43 net packet injection: enabled
2023/08/20 12:28:43 net device setup: enabled
2023/08/20 12:28:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/08/20 12:28:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/08/20 12:28:43 USB emulation: enabled
2023/08/20 12:28:43 hci packet injection: enabled
2023/08/20 12:28:43 wifi device emulation: enabled
2023/08/20 12:28:43 802.15.4 emulation: enabled
2023/08/20 12:28:43 fetching corpus: 0, signal 0/0 (executing program)
2023/08/20 12:28:45 starting 8 fuzzer processes
12:28:45 executing program 0:
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x7e99c1896e586657, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x48}}, 0x40050)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', <r0=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x23ed7958a5cc0161}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44040)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xa4}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x40080, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x2400, 0x0)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb8, 0x0, 0x600, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffff9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x940}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000080)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008840}, 0x40000)
sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8005)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000880)={'wpan1\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x15540}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20004080)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', <r9=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}]}, 0x54}}, 0x8001)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

12:28:45 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x33}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000031)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x400, 0x4, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe99}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4044044}, 0x24000040)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4850}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, r5, 0x121, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x20}}, 0x18008)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x4890)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan4\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '/$\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x200080c0}, 0xc0)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b40), r1)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000800)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000f00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000010)

12:28:45 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', <r1=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x96}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x48010)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r2)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20048010}, 0x69b22ed3fb8fa658)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r0)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r7, 0x30d, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4004000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r8)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), r2)
sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r10, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, ']]\'..\xf2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x40d5)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r11, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r4, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "0d08d9c1f9b695753a58df144564bd0b40efee360e19aca0b42b0d4cc951f731"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x4c}}, 0x4800)

[  114.279678] audit: type=1400 audit(1692534525.325:6): avc:  denied  { execmem } for  pid=268 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:28:45 executing program 3:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x88}, 0x8a5cd246df52e529)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan3\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40040)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004081}, 0x40)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r5)
sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r7, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x18}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1f}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x60000841}, 0x20000001)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r3, 0x700, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xe03}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x800)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000009c0), r6)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r9, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x800)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40010)

12:28:45 executing program 4:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400403}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3f}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xf0}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000400))
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r3, 0x500, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r5)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8094)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:user_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x70}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3f}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x20000)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a00)={'wpan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a40)={'wpan0\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r8, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x980}, 0x4)

12:28:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x45}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "9a7b9dfc84950ee9599dfa"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4080)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/nf_conntrack_irc', 0x2fa631e65350a60, 0x1)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc0}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x40}}, 0x40)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x10)
ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f00000003c0)={0x401, 0x75})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x108, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xe97a9e9aa779372a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x137}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x16}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}], @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x10}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x989}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xff}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xf7}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xfa}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x4d}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff76}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x24000004}, 0x8000)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9ef, 0x40}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008891}, 0x40040800)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000840)={'erspan0\x00', &(0x7f00000007c0)={'gre0\x00', <r5=>0x0, 0x7, 0x7800, 0x5, 0x8, {{0x10, 0x4, 0x3, 0x3b, 0x40, 0x67, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x30}, {[@rr={0x7, 0x17, 0x46, [@rand_addr=0x64010101, @private=0xa010102, @empty, @remote, @rand_addr=0x64010101]}, @lsrr={0x83, 0x13, 0x7b, [@dev={0xac, 0x14, 0x14, 0x3f}, @empty, @rand_addr=0x64010100, @empty]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000880)={'ip6tnl0\x00', <r6=>0x0, 0x2f, 0x5d, 0x4, 0xffffff0b, 0x38, @mcast2, @local, 0x40, 0x1, 0x737f, 0x200}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a40)={'tunl0\x00', &(0x7f0000000940)={'syztnl0\x00', <r7=>0x0, 0x10, 0xc0, 0x800, 0x80000000, {{0x2f, 0x4, 0x1, 0x17, 0xbc, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x13, 0x3, 0xd, [{@broadcast, 0x9}, {@loopback, 0x3}]}, @end, @cipso={0x86, 0x17, 0x1, [{0x1, 0x3, '\r'}, {0x2, 0xe, "b55cc21169eb67759882798d"}]}, @timestamp_addr={0x44, 0x24, 0xe, 0x1, 0x8, [{@empty, 0xc2}, {@empty, 0x9}, {@local, 0x80000000}, {@loopback}]}, @cipso={0x86, 0x41, 0x22c0777dc109342, [{0x6, 0xa, "396e132048042f3d"}, {0x5, 0xc, "ec57eae359bacf5f59ce"}, {0xbc8e77b27d359424, 0x7, "e71c8d5b12"}, {0x7, 0x4, 'l('}, {0x7, 0x3, "03"}, {0x4, 0x2}, {0x7, 0x7, "ac198a260a"}, {0x0, 0xe, "1f06821b1b7103ba6d2f6b3c"}]}, @ssrr={0x89, 0x7, 0x67, [@broadcast]}, @lsrr={0x83, 0x7, 0x1, [@dev={0xac, 0x14, 0x14, 0x41}]}, @timestamp={0x44, 0x8, 0x9d, 0x0, 0x2, [0xcdbc]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000b00)={'gretap0\x00', &(0x7f0000000a80)={'syztnl1\x00', <r8=>0x0, 0x10, 0x1, 0xb7, 0x2, {{0x16, 0x4, 0x1, 0x5, 0x58, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xe3, 0x3, 0x0, [{@private=0xa010102, 0x101}]}, @end, @end, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0x7, [{@multicast2, 0x4}, {@loopback, 0x32}, {@empty, 0x10001}, {@rand_addr=0x64010100, 0xffff}, {@rand_addr=0x64010100, 0x1}, {@local, 0x359}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c00)={'team0\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d00)={'gre0\x00', &(0x7f0000000c40)={'gre0\x00', <r10=>0x0, 0x40, 0x8, 0x6, 0x2d, {{0x27, 0x4, 0x3, 0xa, 0x9c, 0x66, 0x0, 0x6, 0x29, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x1c, 0xef, 0x1, 0x3, [{@multicast1, 0x1}, {@multicast1, 0x9}, {@rand_addr=0x64010102, 0x1}]}, @end, @lsrr={0x83, 0xf, 0x80, [@multicast1, @private=0xa010102, @remote]}, @cipso={0x86, 0x13, 0x0, [{0x2, 0xd, "87f1dd997ed342f83f8f9f"}]}, @ra={0x94, 0x4}, @noop, @end, @timestamp_addr={0x44, 0x1c, 0x12, 0x1, 0x2, [{@private=0xa010102, 0x3f}, {@multicast1}, {@private=0xa010102, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x66, 0x3, 0x7, [{@private=0xa010102, 0x6}, {@broadcast, 0xffff0000}, {@empty, 0x200}, {@rand_addr=0x64010100, 0x1}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d40)={'tunl0\x00', <r11=>0x0, 0x10, 0x20, 0x5, 0x1, {{0x25, 0x4, 0x3, 0x2, 0x94, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @broadcast, {[@cipso={0x86, 0x7d, 0xffffffffffffffff, [{0x7, 0xb, "f50c9cafb5a569eb09"}, {0x6, 0x10, "2979670ed94a7b65d00db04082f6"}, {0x0, 0x5, "df5f27"}, {0x0, 0xc, "9b552f7516dd7b207927"}, {0x5, 0xc, "4977f66bd57e75834126"}, {0x6, 0x11, "3def86a1a40dd69c222a4bb888293d"}, {0x5, 0x8, "22842ab59c7a"}, {0x2, 0x11, "e6272cc4086236cd6340c148a9c59d"}, {0x5, 0x6, "69ba87ee"}, {0x2, 0xf, "82b96e8c2ed098335a8dd60a21"}]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001ac0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001000)={0xa64, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x2c8, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x100, 0x1f, 0x5, 0x7}, {0x7fff, 0x9, 0x39, 0x49}, {0x4e7, 0xff, 0x2c, 0x3}, {0x5, 0x1, 0x68, 0x9d}, {0xa2, 0x5, 0x9, 0x6}, {0x5, 0x12, 0x3, 0xcf}, {0x7f, 0x2, 0x3, 0x7ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1, 0x4, 0x6}, {0x9, 0x8b, 0x0, 0x8}, {0x7fff, 0x9, 0xfa, 0x4}, {0x81, 0x8, 0x7, 0x2}, {0x9, 0x81, 0x40, 0x2}, {0x3, 0x80, 0x8, 0xa791}, {0x3, 0x90, 0x80}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x5, 0x9}, {0x7f, 0x32, 0x1e, 0x800}, {0xeea, 0x0, 0x6, 0x2}, {0x9, 0x1f, 0x2, 0x5}, {0x4, 0x3f, 0x6, 0x3}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3, 0xf8, 0x3f, 0x2}, {0x3, 0x4, 0x3, 0x3}, {0x8, 0xa6, 0x0, 0x81}, {0xff7f, 0x8, 0x8, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff89d}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa1d6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x3, 0x0, 0x4}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf252}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0xa64}, 0x1, 0x0, 0x0, 0x24000840}, 0x0)

12:28:45 executing program 6:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$cgroup_devices(r0, &(0x7f0000000040)={'a', ' *:* ', 'wm\x00'}, 0x9)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000051}, 0x8004)
openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}}, 0x0)
pipe2$9p(&(0x7f0000000300), 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', <r4=>0x0, 0x10, 0x20, 0x2, 0x800, {{0x27, 0x4, 0x1, 0x4, 0x9c, 0x67, 0x0, 0xff, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2d}, {[@timestamp={0x44, 0x24, 0xd6, 0x0, 0x2, [0xfffff001, 0x802, 0x9, 0x40000000, 0xfb, 0xd74, 0x3, 0x8000]}, @cipso={0x86, 0x64, 0x3, [{0x5, 0x3, "e9"}, {0x0, 0x10, "9d2347b4f069b354a6d4c7437454"}, {0x2, 0x10, "becd917f5c063d1defc0ba7e77df"}, {0x7, 0xd, "93e0c13c85a0cc221f9915"}, {0x2, 0x6, "daa3d183"}, {0xf, 0xc, "cbc48479cffc77131789"}, {0x6, 0xc, "dc58c72d05fa5e0244ad"}, {0x5, 0x10, "961aff6f5c5ef89609f382473d6a"}]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000008c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x288, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x2, 0x2, 0x4, 0x9}, {0x7, 0x5e, 0x0, 0x9}, {0x3f, 0x0, 0x3, 0xffff}, {0xffff, 0x7, 0x7f, 0x2}, {0x7, 0x1, 0xff, 0x3}, {0x6, 0x7f, 0x81, 0x3}, {0x8, 0x3f, 0x0, 0x81}, {0x70e, 0x2, 0x1f, 0x2}, {0xff, 0x7f, 0x81, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xed63, 0x2c, 0xfa, 0x200}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x55f9, 0x0, 0x8, 0x7ff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x288}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x111000, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r5)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r3, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x32}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080)
r7 = memfd_secret(0x80000)
sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, r6, 0x402, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x48004}, 0x48010)
r8 = memfd_secret(0x0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r6, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x233}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2000a004)

12:28:45 executing program 7:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x93}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048010}, 0x40)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000c1}, 0x40000885)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c850}, 0x881)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r1)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "2b69e604e9558ebc60436040e3ad8a27399fdfcb65e10e995b757b8536c6e248"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000880)={'wpan4\x00'})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r4)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r7, 0x20, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x800)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x10)

[  115.628804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  115.631368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  115.633310] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  115.638685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  115.644354] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  115.646020] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  115.745394] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  115.748717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  115.751458] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  115.755915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  115.771585] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  115.775667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  115.847845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.851805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  115.853555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.856067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.867012] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.868241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  115.881444] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  115.896966] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  115.900787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.907021] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  115.909808] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  115.911777] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.927466] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  115.951611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  115.955469] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  115.966666] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  115.974605] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  115.978790] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  117.706023] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  117.708543] Bluetooth: hci0: command 0x0409 tx timeout
[  117.832248] Bluetooth: hci2: command 0x0409 tx timeout
[  117.833836] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  117.896611] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  118.024683] Bluetooth: hci5: command 0x0409 tx timeout
[  118.025997] Bluetooth: hci4: command 0x0409 tx timeout
[  118.026699] Bluetooth: hci7: command 0x0409 tx timeout
[  119.753432] Bluetooth: hci0: command 0x041b tx timeout
[  119.880194] Bluetooth: hci2: command 0x041b tx timeout
[  120.072282] Bluetooth: hci7: command 0x041b tx timeout
[  120.075129] Bluetooth: hci5: command 0x041b tx timeout
[  120.075216] Bluetooth: hci4: command 0x041b tx timeout
[  121.801201] Bluetooth: hci0: command 0x040f tx timeout
[  121.929619] Bluetooth: hci2: command 0x040f tx timeout
[  122.120202] Bluetooth: hci4: command 0x040f tx timeout
[  122.121379] Bluetooth: hci5: command 0x040f tx timeout
[  122.121761] Bluetooth: hci7: command 0x040f tx timeout
[  122.824278] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  122.890336] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  122.954313] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  123.849488] Bluetooth: hci0: command 0x0419 tx timeout
[  123.978161] Bluetooth: hci2: command 0x0419 tx timeout
[  124.170040] Bluetooth: hci5: command 0x0419 tx timeout
[  124.170507] Bluetooth: hci7: command 0x0419 tx timeout
[  124.170557] Bluetooth: hci4: command 0x0419 tx timeout
[  126.203454] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.205042] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.209442] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.214717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.217242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  126.218719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  126.312958] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  126.348562] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  126.355429] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  126.365616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  126.391369] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  126.400563] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  128.136223] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  128.266198] Bluetooth: hci3: command 0x0409 tx timeout
[  128.458312] Bluetooth: hci6: command 0x0409 tx timeout
[  130.312169] Bluetooth: hci3: command 0x041b tx timeout
[  130.504370] Bluetooth: hci6: command 0x041b tx timeout
[  130.928050] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.933360] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.935769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.946551] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.950585] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  130.951566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  132.360186] Bluetooth: hci3: command 0x040f tx timeout
[  132.552664] Bluetooth: hci6: command 0x040f tx timeout
[  133.064389] Bluetooth: hci1: command 0x0409 tx timeout
[  134.408824] Bluetooth: hci3: command 0x0419 tx timeout
[  134.600171] Bluetooth: hci6: command 0x0419 tx timeout
[  135.112420] Bluetooth: hci1: command 0x041b tx timeout
[  137.160219] Bluetooth: hci1: command 0x040f tx timeout
[  139.210155] Bluetooth: hci1: command 0x0419 tx timeout
[  175.573924] syz-executor.7 (280) used greatest stack depth: 23688 bytes left
[  177.757673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.760443] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.763344] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.768319] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.769683] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  177.770586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.009876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  178.016354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  178.018235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  178.040935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  178.043941] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  178.048444] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  179.848197] Bluetooth: hci0: command 0x0409 tx timeout
[  180.104190] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  180.104737] Bluetooth: hci2: command 0x0409 tx timeout
[  180.168211] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  180.233333] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  181.897296] Bluetooth: hci0: command 0x041b tx timeout
[  182.152209] Bluetooth: hci2: command 0x041b tx timeout
[  183.356819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  183.358483] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  183.368271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  183.404369] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  183.427552] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  183.433488] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  183.586366] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  183.597700] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  183.617450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  183.633385] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  183.668295] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  183.681860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.945391] Bluetooth: hci0: command 0x040f tx timeout
[  184.201198] Bluetooth: hci2: command 0x040f tx timeout
[  185.480781] Bluetooth: hci4: command 0x0409 tx timeout
[  185.609355] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  185.800224] Bluetooth: hci5: command 0x0409 tx timeout
[  185.992669] Bluetooth: hci0: command 0x0419 tx timeout
[  186.248164] Bluetooth: hci2: command 0x0419 tx timeout
[  187.528208] Bluetooth: hci4: command 0x041b tx timeout
[  187.613842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  187.615430] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  187.623254] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  187.631936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  187.659377] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  187.667420] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  187.849143] Bluetooth: hci5: command 0x041b tx timeout
[  188.210659] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  188.215397] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  188.217493] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  188.255436] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  188.266402] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  188.269438] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  189.577152] Bluetooth: hci4: command 0x040f tx timeout
[  189.578360] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  189.770431] Bluetooth: hci3: command 0x0409 tx timeout
[  189.897694] Bluetooth: hci5: command 0x040f tx timeout
[  190.344265] Bluetooth: hci7: command 0x0409 tx timeout
[  191.624313] Bluetooth: hci4: command 0x0419 tx timeout
[  191.816717] Bluetooth: hci3: command 0x041b tx timeout
[  191.945144] Bluetooth: hci5: command 0x0419 tx timeout
[  192.392153] Bluetooth: hci7: command 0x041b tx timeout
[  193.864320] Bluetooth: hci3: command 0x040f tx timeout
[  194.440227] Bluetooth: hci7: command 0x040f tx timeout
[  194.632189] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  194.889160] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  195.912409] Bluetooth: hci3: command 0x0419 tx timeout
[  196.489171] Bluetooth: hci7: command 0x0419 tx timeout
[  197.381971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  197.392737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  197.401962] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  197.416537] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  197.454607] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  197.478529] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  199.562468] Bluetooth: hci1: command 0x0409 tx timeout
[  200.136736] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  201.608420] Bluetooth: hci1: command 0x041b tx timeout
[  203.657175] Bluetooth: hci1: command 0x040f tx timeout
[  205.128419] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  205.705295] Bluetooth: hci1: command 0x0419 tx timeout
[  209.928341] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  212.731026] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  212.739497] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  212.741718] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  212.769462] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  212.784273] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  212.796453] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  214.856610] Bluetooth: hci6: command 0x0409 tx timeout
[  216.904396] Bluetooth: hci6: command 0x041b tx timeout
[  218.952667] Bluetooth: hci6: command 0x040f tx timeout
[  221.001883] Bluetooth: hci6: command 0x0419 tx timeout
[  241.547427] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  241.800206] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  245.019613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  245.021270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.027364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.035342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  245.046459] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  245.047651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  245.366787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  245.372349] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  245.374961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  245.388345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  245.397373] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  245.407384] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  245.483493] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  245.523362] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  245.537069] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  245.542441] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  245.544590] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  245.551061] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  247.112212] Bluetooth: hci0: command 0x0409 tx timeout
[  247.498254] Bluetooth: hci2: command 0x0409 tx timeout
[  247.560733] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  247.689276] Bluetooth: hci4: command 0x0409 tx timeout
[  249.160303] Bluetooth: hci0: command 0x041b tx timeout
[  249.544183] Bluetooth: hci2: command 0x041b tx timeout
[  249.738789] Bluetooth: hci4: command 0x041b tx timeout
[  251.107737] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  251.110913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  251.112399] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  251.119719] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  251.137656] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  251.150032] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  251.208252] Bluetooth: hci0: command 0x040f tx timeout
[  251.229033] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  251.233601] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  251.235929] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  251.289781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  251.296406] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  251.298006] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  251.592183] Bluetooth: hci2: command 0x040f tx timeout
[  251.720396] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  251.784167] Bluetooth: hci4: command 0x040f tx timeout
[  253.258681] Bluetooth: hci5: command 0x0409 tx timeout
[  253.258690] Bluetooth: hci0: command 0x0419 tx timeout
[  253.384235] Bluetooth: hci7: command 0x0409 tx timeout
[  253.642138] Bluetooth: hci2: command 0x0419 tx timeout
[  253.832610] Bluetooth: hci4: command 0x0419 tx timeout
[  255.304263] Bluetooth: hci5: command 0x041b tx timeout
[  255.433204] Bluetooth: hci7: command 0x041b tx timeout
[  256.520682] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  257.354197] Bluetooth: hci5: command 0x040f tx timeout
[  257.480488] Bluetooth: hci7: command 0x040f tx timeout
[  259.303999] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  259.310725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  259.313515] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  259.328354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  259.355003] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  259.368762] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  259.400543] Bluetooth: hci5: command 0x0419 tx timeout
[  259.528300] Bluetooth: hci7: command 0x0419 tx timeout
[  259.658312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  259.668372] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  259.672789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  259.691082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  259.717690] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  259.720446] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  261.449733] Bluetooth: hci1: command 0x0409 tx timeout
[  261.769163] Bluetooth: hci3: command 0x0409 tx timeout
[  263.498683] Bluetooth: hci1: command 0x041b tx timeout
[  263.818404] Bluetooth: hci3: command 0x041b tx timeout
[  265.544623] Bluetooth: hci1: command 0x040f tx timeout
[  265.864965] Bluetooth: hci3: command 0x040f tx timeout
[  267.593210] Bluetooth: hci1: command 0x0419 tx timeout
[  267.912833] Bluetooth: hci3: command 0x0419 tx timeout
[  276.488823] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  281.417355] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  284.261873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  284.267569] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  284.271061] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  284.313497] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  284.316376] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  284.341492] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  286.409379] Bluetooth: hci6: command 0x0409 tx timeout
[  288.457130] Bluetooth: hci6: command 0x041b tx timeout
[  290.505516] Bluetooth: hci6: command 0x040f tx timeout
[  292.552422] Bluetooth: hci6: command 0x0419 tx timeout
[  308.873326] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  309.385406] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  309.513201] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  312.092601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  312.102408] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  312.108396] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  312.122347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  312.131466] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  312.133645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  312.311083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  312.313481] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  312.318466] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  312.323070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  312.331374] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  312.335390] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  312.405857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  312.411376] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  312.415346] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  312.438438] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  312.463693] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  312.465072] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  312.491983] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  312.498727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  312.503516] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  312.525700] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  312.527525] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  312.529059] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  313.352161] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  314.184547] Bluetooth: hci2: command 0x0409 tx timeout
[  314.441371] Bluetooth: hci4: command 0x0409 tx timeout
[  314.570189] Bluetooth: hci5: command 0x0409 tx timeout
[  314.633229] Bluetooth: hci7: command 0x0409 tx timeout
[  316.232659] Bluetooth: hci2: command 0x041b tx timeout
[  316.488527] Bluetooth: hci4: command 0x041b tx timeout
[  316.616170] Bluetooth: hci5: command 0x041b tx timeout
[  316.680588] Bluetooth: hci7: command 0x041b tx timeout
[  318.281501] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  318.282563] Bluetooth: hci2: command 0x040f tx timeout
[  318.537359] Bluetooth: hci4: command 0x040f tx timeout
[  318.665145] Bluetooth: hci5: command 0x040f tx timeout
[  318.728641] Bluetooth: hci7: command 0x040f tx timeout
[  320.330143] Bluetooth: hci2: command 0x0419 tx timeout
[  320.585396] Bluetooth: hci4: command 0x0419 tx timeout
[  320.713864] Bluetooth: hci5: command 0x0419 tx timeout
[  320.777307] Bluetooth: hci7: command 0x0419 tx timeout
[  320.982615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  320.987058] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  320.988246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  321.018470] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  321.027474] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  321.030370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  323.081173] Bluetooth: hci0: command 0x0409 tx timeout
[  323.401520] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  323.465331] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  325.129737] Bluetooth: hci0: command 0x041b tx timeout
[  327.177160] Bluetooth: hci0: command 0x040f tx timeout
[  328.521169] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  328.587264] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  329.225373] Bluetooth: hci0: command 0x0419 tx timeout
[  333.705372] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  333.896332] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  336.553601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  336.559850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  336.572760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  336.586944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  336.600368] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  336.605368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  336.889822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  336.904294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  336.909371] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  336.950529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  336.987468] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  336.999601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  338.697194] Bluetooth: hci1: command 0x0409 tx timeout
[  339.081408] Bluetooth: hci3: command 0x0409 tx timeout
[  340.748149] Bluetooth: hci1: command 0x041b tx timeout
[  341.129380] Bluetooth: hci3: command 0x041b tx timeout
[  342.793364] Bluetooth: hci1: command 0x040f tx timeout
[  343.177324] Bluetooth: hci3: command 0x040f tx timeout
2023/08/20 12:32:35 executor 0 failed 11 times:
executor 0: not serving
[  344.841379] Bluetooth: hci1: command 0x0419 tx timeout

VM DIAGNOSIS:
12:32:36  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff888008d1fa38 RCX=0000000000000000 RDX=1ffff110011a3f52
RSI=ffffffff8113b359 RDI=ffffffff836ac213 RBP=0000000000000001 RSP=ffff888008d1fa18
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff888008d1fa90 R13=ffff888008d1fb08 R14=ffff888008c50000 R15=ffff888008d1fad8
RIP=ffffffff8113b37d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f3c67d77900 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd8a298000 CR3=000000000c126000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=6b66722d646d65747379733d74696e75 XMM01=62696c2f7273752f223d657865202264
XMM02=616e696d726574203f3d72646461203f XMM03=79732f646d65747379732f62696c2f72
XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=00000000000000000000000000000000
XMM06=697665000065006563697665642e3169 XMM07=00000000000000000000000000000000
XMM08=63612073253d706f0000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806cf09a48 RCX=0000000000000100 RDX=ffff8880156d9b40
RSI=ffffffff8113d394 RDI=ffff88806cf09a58 RBP=ffff888015b07f40 RSP=ffff88806cf099c8
R8 =0000000000000004 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001
R12=ffff888015b00000 R13=ffff888015b08000 R14=ffff888015b07f48 R15=0000000000000001
RIP=ffffffff8113d394 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fbeed277900 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbeed82c650 CR3=000000000b9e2000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff00ffffffffffffffffffffff XMM01=707465675f6c697475646f6d6d61705f
XMM02=ff000000000000ff0000000000ff0000 XMM03=66207463656e6e6f6373696420646576
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000
XMM08=000a0d732a2e25006c61746166003367 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000