Warning: Permanently added '[localhost]:53589' (ECDSA) to the list of known hosts. 2024/11/11 13:07:24 fuzzer started 2024/11/11 13:07:24 dialing manager at localhost:46317 syzkaller login: [ 71.187090] cgroup: Unknown subsys name 'net' [ 71.312649] cgroup: Unknown subsys name 'cpuset' [ 71.325541] cgroup: Unknown subsys name 'rlimit' 2024/11/11 13:07:41 syscalls: 203 2024/11/11 13:07:41 code coverage: enabled 2024/11/11 13:07:41 comparison tracing: enabled 2024/11/11 13:07:41 extra coverage: enabled 2024/11/11 13:07:41 setuid sandbox: enabled 2024/11/11 13:07:41 namespace sandbox: enabled 2024/11/11 13:07:41 Android sandbox: enabled 2024/11/11 13:07:41 fault injection: enabled 2024/11/11 13:07:41 leak checking: enabled 2024/11/11 13:07:41 net packet injection: enabled 2024/11/11 13:07:41 net device setup: enabled 2024/11/11 13:07:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/11 13:07:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/11 13:07:41 USB emulation: enabled 2024/11/11 13:07:41 hci packet injection: enabled 2024/11/11 13:07:41 wifi device emulation: enabled 2024/11/11 13:07:41 802.15.4 emulation: enabled 2024/11/11 13:07:42 fetching corpus: 0, signal 0/0 (executing program) 2024/11/11 13:07:43 starting 8 fuzzer processes 13:07:43 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x800) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0xc004}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040010}, 0x48000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2011884}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r4, 0x200, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4c}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0xda26e4774941624d) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1002024}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x74, r6, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x1c}}, 0x20004c81) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000bc0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x50, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000080) 13:07:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x96}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x82000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xac, r7, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000040) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20080020}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r9, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1aaba}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3e5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r11, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd}}}}, [@NL80211_ATTR_MESH_SETUP={0x3c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_IE={0xf, 0x3, "d44acac214a90fee802c7e"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x801) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000c00)={&(0x7f0000000a40), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, r7, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x93989b38295f04c6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040051) 13:07:43 executing program 2: sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0xfffffffffffffffd, 0x4000084) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x76}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xb}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000044}, 0x40080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}]}, 0x68}}, 0x40) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r2) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x24044014) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000980)='ns/ipc\x00') r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, r0, 0xa18, 0x70bd2c, 0x5, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8880}, 0x2000001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ac0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x9c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:xen_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x40064) 13:07:43 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40041) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8800) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xf}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}]}, 0x44}}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x90, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000880}, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000740)=""/42, 0x2a}, {&(0x7f0000000780)=""/178, 0xb2}, {&(0x7f0000000840)=""/135, 0x87}, {&(0x7f0000000900)=""/78, 0x4e}], 0x4, &(0x7f00000009c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x40) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000bc0)={0x44, 0x0, &(0x7f0000000a80)=[@release, @decrefs={0x40046307, 0x3}, @acquire_done={0x40106309, 0x2}, @increfs={0x40046304, 0x2}, @increfs_done, @exit_looper], 0xb7, 0x0, &(0x7f0000000b00)="99e48f933d081f52e7103ba21159399cb3dc03cce517bcb58769c4b77bcafbaf0480aa74fe21d05dbd80821e274bbe033e2e3b3d3a79bc8598c82fb48004a945904f3b1a34b1e09605f8f7006c19c1ebd079f276fce5acf85f8e28d57e6ea0f82f56e5666c805271aec2f60f1d0be635334bab512730799ac5b6d68e168e64fb88e707e0b3ecece4f77a888d77bd5f1d6bec5c1685914f7313ae06a714008332814cd84fe367588a90063fd1808b28aee1d5cabbe540e4"}) accept4$unix(r7, &(0x7f0000000c00)=@abs, &(0x7f0000000c80)=0x6e, 0x800) r8 = inotify_add_watch(r7, &(0x7f0000000cc0)='./file0\x00', 0x224) inotify_rm_watch(r6, r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004010}, 0x800) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x24000000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x50, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x34, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0xa0}, 0x40008a0) 13:07:43 executing program 4: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x6, 0x40) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000080)={0x2, 0x2, 0x8000, 0x63cc, 0x6, 0x4, 0x8, 0x8, 0x101, 0x1f, 0x4, 0xfffffc47, 0x4, 0x3}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f00000000c0)) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000100)=0x2) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000140)={0x7, 0xffffffff, 0x400, 0xf831, 0x1398, 0x6}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/159, 0x9f, 0x1, 0x35}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/159, 0x9f, 0x1, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/218, 0xda, 0x2, 0x23}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x400}], 0xc4, 0x0, &(0x7f0000000580)="abaa58799a8a7f0bfe47afe45330199fab57db1e5de26072a99559ae9d5280c6bf6f8d4bdb8e1a1c1ea688db7e69d5c1c106120bae34aec6f26828d5c42a22933411ab832de862a82e2452e0d12c4ac27435dd0107e673024a7b8c568863a1cab7b914bc5c85b78983c40c4d04654f1606e36b0af970e88e44ac7ff17150acc789e1a3bc944c98f4458205926a8c02ff6e538e856f5c08e4adfed5a3f509810915331275e47d0a6fcff093286f74725be36a26b41ca79d3ada7274eb8289d751df0071a2"}) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000006c0)={0x1, 0x3, 0x5, 0x7, 0x1000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "88877f6abc"}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "e67920a6a36fead7b9dc200ea8"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c65ea26e2d"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "141165a1ce2b189adfb6da14ff"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44041}, 0x1) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000840)) ioctl$RTC_AIE_OFF(r3, 0x7002) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$HIDIOCGSTRING(r5, 0x81044804, &(0x7f0000000880)={0x72, "082ee2ff5016bcf1ddc8e7346beb9bafafde40bde841a1c480089a59d9dd44c54fe45e3bd64f31dd2071ee6181cade38de8e6e912a47dc481d328cbdaa170f3cb94b2a513ff1981d10d97d3dc1b24c5723974e5c312c7cbf76f2177f657afd6cb5a816868fc272297583b3eef729e9aa1d09"}) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000900)={0xfff, 0x2, 0x4, 0x8}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000940)={0x8, 0x1, 'client0\x00', 0x5, "dfff65244866922b", "64756dd1f633a63ab019d12adec72657da90b472ec417f178bde901e02a7fcc1", 0x5, 0x3ff}) [ 89.381805] audit: type=1400 audit(1731330463.799:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:07:43 executing program 5: inotify_init1(0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x508, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x30}}, 0x4801) r2 = inotify_init1(0x80000) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x40000208) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) r5 = io_uring_setup(0x418b, &(0x7f0000000180)={0x0, 0x7ce7, 0x1, 0x0, 0x38d}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, r5, 0x0) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r7 = inotify_init1(0x800) r8 = inotify_add_watch(r6, &(0x7f0000000580)='./file0\x00', 0x10000200) inotify_rm_watch(r7, r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r9) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000600)=""/22, 0x16, 0x0, 0x0, 0x0) mkdirat$cgroup(r6, &(0x7f0000000640)='syz1\x00', 0x1ff) 13:07:43 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x188, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe0e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x250d48b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd53a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x619660a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5af244fb}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x562ea279}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38d93c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb69}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x620c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf604}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39664d69}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3472145c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66f5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7293e7da}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x459d731a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29f34be1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb992975}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2457c367}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c05b8c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d00542c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x491dc1a3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f233d8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5515497b}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x400) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x178, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x148, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xa4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb4ca}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x40}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8a}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x810) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r0, 0x200, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x4014) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r8, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c844}, 0x4c0c4) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e00)={0x298, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x70e4, 0x39}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x2, 0x0, 0x0, {0x8, 0xc24, 0x0, 0x3ca, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x7ff, 0x5}}, @NL80211_ATTR_KEYS={0x130, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x6, 0x4, "99b0"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "815975c3e434d478958f32f7e4"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "de0fe915ea8d0d212712a6b975"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e6108c02b78c521dc000f81609"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0x6, 0x4, "3ed5"}, @NL80211_KEY_SEQ={0x7, 0x4, "a2b48f"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8c316c9904"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "bee5de0798"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_KEYS={0xec, 0x51, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a3d0677e5bb0d195c1f68652a1"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5df1a76ca32f6bfb8e485865b2"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "02a989a2db"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "0baa7ebf51"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a63a04ef2e"}]}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0xfff, 0x2ae}}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x361, 0x0, 0x6, 0x0, {0x1, 0x0, 0x0, 0x3f, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x2, 0x6}}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffff9}]}, 0x298}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 13:07:43 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) r1 = socket(0xb, 0x1, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001380), 0x78f8c0, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x20000080) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001500), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000180}, 0x24048001) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001640), r0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, r5, 0x200, 0x70bd29, 0x2, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x8080) r6 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0xaa) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001980)={0x68, 0x0, &(0x7f0000001800)=[@register_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001740)={@flat=@handle={0x73682a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @flat=@binder={0x73622a85, 0x1101, 0x2}}, &(0x7f00000017c0)={0x0, 0x18, 0x30}}}, @exit_looper, @register_looper, @free_buffer={0x40086303, r6}, @exit_looper], 0xd2, 0x0, &(0x7f0000001880)="df98a582759e9602d9df30f65cc70c333068db2366cbe9a547c0b89f1fb6d3bc8ae5dce811e5415ed4463448740332d880a7e1611e952f479d74c292ad96b43a092cd2f6a57e4f3bd482bbb1205e1b0a83055752bc2b4c9667fb8fc91c7ea0c2d687a7523b40bd8fbd37f1c60349e31367e6fdad88224538ef5faa8faef8fb1e7c82a1d9ee8d186851a940304f0b1836ea45c913109f49a7f72f701a0afde47d67933cc73d8349ac01baf02f0b095478e74769d232acf9e18c73218b49b0ee5dfb0d5a1767805bc66160efe1379d46dbea1e"}) openat$pidfd(0xffffffffffffff9c, &(0x7f00000019c0), 0x600000, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a40)={0x104, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfe}]}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3f}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x104}, 0x1, 0x0, 0x0, 0x48000}, 0x85) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001c80)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x50, r7, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c091}, 0x4011) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e00), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, r9, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) [ 90.780780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.784780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.787741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.796940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.798941] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.800169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.813489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.820523] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.833770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.835205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.838282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.840646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.845596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.847128] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.849885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.850851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.855495] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.862257] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.870090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.882889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.884459] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.897627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.899822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.902665] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.907679] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.909835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.909967] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.912661] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.914132] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.939630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.940685] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.946662] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.946783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.950598] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.952789] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.955806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.961603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.963033] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.975645] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.976449] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.978820] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.980089] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.990921] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.005771] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.007748] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.012776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.019736] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.021909] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.836907] Bluetooth: hci0: command tx timeout [ 92.900494] Bluetooth: hci1: command tx timeout [ 92.963514] Bluetooth: hci2: command tx timeout [ 93.027557] Bluetooth: hci7: command tx timeout [ 93.027702] Bluetooth: hci6: command tx timeout [ 93.028472] Bluetooth: hci3: command tx timeout [ 93.028962] Bluetooth: hci5: command tx timeout [ 93.092596] Bluetooth: hci4: command tx timeout [ 94.883539] Bluetooth: hci0: command tx timeout [ 94.948469] Bluetooth: hci1: command tx timeout [ 95.013410] Bluetooth: hci2: command tx timeout [ 95.075653] Bluetooth: hci3: command tx timeout [ 95.076186] Bluetooth: hci6: command tx timeout [ 95.077463] Bluetooth: hci7: command tx timeout [ 95.077486] Bluetooth: hci5: command tx timeout [ 95.139618] Bluetooth: hci4: command tx timeout [ 96.933251] Bluetooth: hci0: command tx timeout [ 96.997420] Bluetooth: hci1: command tx timeout [ 97.059621] Bluetooth: hci2: command tx timeout [ 97.124194] Bluetooth: hci5: command tx timeout [ 97.124232] Bluetooth: hci6: command tx timeout [ 97.124823] Bluetooth: hci3: command tx timeout [ 97.125211] Bluetooth: hci7: command tx timeout [ 97.187816] Bluetooth: hci4: command tx timeout [ 98.980590] Bluetooth: hci0: command tx timeout [ 99.044556] Bluetooth: hci1: command tx timeout [ 99.107487] Bluetooth: hci2: command tx timeout [ 99.171607] Bluetooth: hci7: command tx timeout [ 99.174517] Bluetooth: hci3: command tx timeout [ 99.175056] Bluetooth: hci6: command tx timeout [ 99.175117] Bluetooth: hci5: command tx timeout [ 99.235652] Bluetooth: hci4: command tx timeout [ 153.334205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.338690] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.340937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.346768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.354503] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.354630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.356638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.362328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.362444] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.365010] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.366510] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.367307] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.504813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.524891] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.548416] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.549801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.550827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.555653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.597883] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.600211] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.602674] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.603679] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.606341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.608971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.610856] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.611092] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.613730] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.614035] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.617866] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.620325] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.625741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.627796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.666559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.669528] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.679917] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.682195] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.684882] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.688696] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.694817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.697074] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.707539] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.713730] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.729703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.732309] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.733969] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.756048] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.768665] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.770669] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.427508] Bluetooth: hci0: command tx timeout [ 155.427525] Bluetooth: hci1: command tx timeout [ 155.683543] Bluetooth: hci3: command tx timeout [ 155.747478] Bluetooth: hci2: command tx timeout [ 155.811474] Bluetooth: hci5: command tx timeout [ 155.811497] Bluetooth: hci7: command tx timeout [ 155.811674] Bluetooth: hci4: command tx timeout [ 156.003476] Bluetooth: hci6: command tx timeout [ 157.475537] Bluetooth: hci1: command tx timeout [ 157.476434] Bluetooth: hci0: command tx timeout [ 157.732662] Bluetooth: hci3: command tx timeout [ 157.796749] Bluetooth: hci2: command tx timeout [ 157.859445] Bluetooth: hci4: command tx timeout [ 157.861494] Bluetooth: hci5: command tx timeout [ 157.862424] Bluetooth: hci7: command tx timeout [ 158.051516] Bluetooth: hci6: command tx timeout [ 159.523454] Bluetooth: hci1: command tx timeout [ 159.524561] Bluetooth: hci0: command tx timeout [ 159.781340] Bluetooth: hci3: command tx timeout [ 159.843423] Bluetooth: hci2: command tx timeout [ 159.909419] Bluetooth: hci4: command tx timeout [ 159.910850] Bluetooth: hci5: command tx timeout [ 159.912215] Bluetooth: hci7: command tx timeout [ 160.100483] Bluetooth: hci6: command tx timeout [ 161.571570] Bluetooth: hci0: command tx timeout [ 161.572101] Bluetooth: hci1: command tx timeout [ 161.828431] Bluetooth: hci3: command tx timeout [ 161.892434] Bluetooth: hci2: command tx timeout [ 161.955537] Bluetooth: hci4: command tx timeout [ 161.958389] Bluetooth: hci5: command tx timeout [ 161.958873] Bluetooth: hci7: command tx timeout [ 162.147664] Bluetooth: hci6: command tx timeout [ 215.543160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.547069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.549210] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.553678] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.557838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.563221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.726715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.729252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.731277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.733877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.735630] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.736876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.790725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.795695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.797805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.801955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.804732] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.806985] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.860010] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.862752] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.864584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.868738] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.879631] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.882805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.887824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.915563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.918632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.953531] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.959560] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.971241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.973000] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.979996] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.983291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.987783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.988885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.996677] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.003182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.041837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.042836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.049042] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.055084] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.062544] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.065534] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.074711] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.080553] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.093840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.095590] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.096771] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.571473] Bluetooth: hci0: command tx timeout [ 217.763464] Bluetooth: hci1: command tx timeout [ 217.829556] Bluetooth: hci2: command tx timeout [ 217.955464] Bluetooth: hci4: command tx timeout [ 218.084457] Bluetooth: hci3: command tx timeout [ 218.150938] Bluetooth: hci6: command tx timeout [ 218.151628] Bluetooth: hci7: command tx timeout [ 218.212517] Bluetooth: hci5: command tx timeout [ 219.620502] Bluetooth: hci0: command tx timeout [ 219.811432] Bluetooth: hci1: command tx timeout [ 219.875470] Bluetooth: hci2: command tx timeout [ 220.005386] Bluetooth: hci4: command tx timeout [ 220.132478] Bluetooth: hci3: command tx timeout [ 220.196814] Bluetooth: hci7: command tx timeout [ 220.197438] Bluetooth: hci6: command tx timeout [ 220.261392] Bluetooth: hci5: command tx timeout [ 221.668400] Bluetooth: hci0: command tx timeout [ 221.859507] Bluetooth: hci1: command tx timeout [ 221.923462] Bluetooth: hci2: command tx timeout [ 222.051460] Bluetooth: hci4: command tx timeout [ 222.179566] Bluetooth: hci3: command tx timeout [ 222.243554] Bluetooth: hci6: command tx timeout [ 222.243667] Bluetooth: hci7: command tx timeout [ 222.308496] Bluetooth: hci5: command tx timeout [ 223.717603] Bluetooth: hci0: command tx timeout [ 223.908542] Bluetooth: hci1: command tx timeout [ 223.972525] Bluetooth: hci2: command tx timeout [ 224.102412] Bluetooth: hci4: command tx timeout [ 224.230409] Bluetooth: hci3: command tx timeout [ 224.291509] Bluetooth: hci6: command tx timeout [ 224.291575] Bluetooth: hci7: command tx timeout [ 224.355474] Bluetooth: hci5: command tx timeout [ 277.845135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.848141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.853694] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.854189] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.859077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.859961] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.863955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.867564] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.869524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.879924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.883257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.885087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.890622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.893849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.896057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.906783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.909573] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.913267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.950895] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.969645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.975120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.985104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.989644] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.993614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.063972] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.073715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.085114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.089277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.092117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.094127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.099007] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.103267] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.106524] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.116544] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.123824] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.126684] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.210411] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.225428] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.232139] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.245707] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.263556] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.282559] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.284296] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.286391] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.312593] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.316573] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.337545] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.338566] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.907510] Bluetooth: hci1: command tx timeout [ 279.971546] Bluetooth: hci0: command tx timeout [ 279.973197] Bluetooth: hci2: command tx timeout [ 280.035606] Bluetooth: hci3: command tx timeout [ 280.164034] Bluetooth: hci5: command tx timeout [ 280.165726] Bluetooth: hci4: command tx timeout [ 280.420420] Bluetooth: hci6: command tx timeout [ 280.486895] Bluetooth: hci7: command tx timeout [ 281.955662] Bluetooth: hci1: command tx timeout [ 282.019493] Bluetooth: hci0: command tx timeout [ 282.019978] Bluetooth: hci2: command tx timeout [ 282.083390] Bluetooth: hci3: command tx timeout [ 282.211490] Bluetooth: hci4: command tx timeout [ 282.211993] Bluetooth: hci5: command tx timeout [ 282.467446] Bluetooth: hci6: command tx timeout [ 282.531394] Bluetooth: hci7: command tx timeout [ 284.003412] Bluetooth: hci1: command tx timeout [ 284.067490] Bluetooth: hci0: command tx timeout [ 284.068138] Bluetooth: hci2: command tx timeout [ 284.131514] Bluetooth: hci3: command tx timeout [ 284.259438] Bluetooth: hci4: command tx timeout [ 284.261443] Bluetooth: hci5: command tx timeout [ 284.515384] Bluetooth: hci6: command tx timeout [ 284.580078] Bluetooth: hci7: command tx timeout [ 286.051421] Bluetooth: hci1: command tx timeout [ 286.115568] Bluetooth: hci0: command tx timeout [ 286.116052] Bluetooth: hci2: command tx timeout [ 286.179456] Bluetooth: hci3: command tx timeout [ 286.307903] Bluetooth: hci4: command tx timeout [ 286.308667] Bluetooth: hci5: command tx timeout [ 286.564508] Bluetooth: hci6: command tx timeout [ 286.628365] Bluetooth: hci7: command tx timeout [ 340.159986] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.161865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.162671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.163943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.165059] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.167092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.168478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.175241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.176593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.177512] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.179489] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.180547] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.292084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.295161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.306524] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.310452] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.312965] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.314344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.341221] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.346560] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.352566] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.353840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.355173] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.359200] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.368705] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.372432] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.389272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.395873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.409622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.410916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.412557] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.419650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.464661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.471288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.482235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.493254] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.528913] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.530864] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.568840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.584606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.592224] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.594725] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.595835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.597705] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.613187] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.631409] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.634831] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.642610] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.243559] Bluetooth: hci1: command tx timeout [ 342.244610] Bluetooth: hci0: command tx timeout [ 342.372563] Bluetooth: hci2: command tx timeout [ 342.436445] Bluetooth: hci4: command tx timeout [ 342.500479] Bluetooth: hci3: command tx timeout [ 342.627458] Bluetooth: hci5: command tx timeout [ 342.820389] Bluetooth: hci7: command tx timeout [ 343.075411] Bluetooth: hci6: command tx timeout [ 344.292598] Bluetooth: hci1: command tx timeout [ 344.293139] Bluetooth: hci0: command tx timeout [ 344.419649] Bluetooth: hci2: command tx timeout [ 344.484376] Bluetooth: hci4: command tx timeout [ 344.548446] Bluetooth: hci3: command tx timeout [ 344.676344] Bluetooth: hci5: command tx timeout [ 344.867478] Bluetooth: hci7: command tx timeout [ 345.123421] Bluetooth: hci6: command tx timeout [ 346.341413] Bluetooth: hci1: command tx timeout [ 346.341954] Bluetooth: hci0: command tx timeout [ 346.467369] Bluetooth: hci2: command tx timeout [ 346.533403] Bluetooth: hci4: command tx timeout [ 346.596349] Bluetooth: hci3: command tx timeout [ 346.723430] Bluetooth: hci5: command tx timeout [ 346.916378] Bluetooth: hci7: command tx timeout [ 347.172482] Bluetooth: hci6: command tx timeout [ 348.388427] Bluetooth: hci1: command tx timeout [ 348.388961] Bluetooth: hci0: command tx timeout [ 348.516358] Bluetooth: hci2: command tx timeout [ 348.582325] Bluetooth: hci4: command tx timeout [ 348.643637] Bluetooth: hci3: command tx timeout [ 348.772377] Bluetooth: hci5: command tx timeout [ 348.964371] Bluetooth: hci7: command tx timeout [ 349.222410] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 13:12:54 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000004 RCX=ffffffff816a3ca2 RDX=ffff8880349b0000 RSI=0000000000000004 RDI=0000000000000000 RBP=ffffea00001c7574 RSP=ffff888016517b08 R8 =0000000000000001 R9 =fffff94000038eae R10=ffffea00001c7577 R11=0000000000000001 R12=0000000000000004 R13=0000000000000004 R14=0000000000000000 R15=ffff888016517d98 RIP=ffffffff8151dc80 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9ec1f1a540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9ec21fff00 CR3=000000003574c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff816a1bfc RDX=ffff8880349b3700 RSI=ffffffff816a1c0a RDI=0000000000000007 RBP=ffff8880266c7c58 RSP=ffff8880266c7ac8 R8 =0000000000000001 R9 =fffff940000443ae R10=0000000000000000 R11=0000000000000001 R12=0000000000000012 R13=0000000000000014 R14=ffff8880090a3700 R15=ffff8880266c7d98 RIP=ffffffff8485d8c0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ffb99e74540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e7c738f2b0 CR3=0000000033eb0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000