Warning: Permanently added '[localhost]:26300' (ECDSA) to the list of known hosts. 2025/01/25 07:09:15 fuzzer started 2025/01/25 07:09:15 dialing manager at localhost:40883 syzkaller login: [ 69.279177] cgroup: Unknown subsys name 'net' [ 69.389420] cgroup: Unknown subsys name 'cpuset' [ 69.416044] cgroup: Unknown subsys name 'rlimit' [ 74.723368] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 86.960023] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 07:09:33 syscalls: 200 2025/01/25 07:09:33 code coverage: enabled 2025/01/25 07:09:33 comparison tracing: enabled 2025/01/25 07:09:33 extra coverage: enabled 2025/01/25 07:09:33 setuid sandbox: enabled 2025/01/25 07:09:33 namespace sandbox: enabled 2025/01/25 07:09:33 Android sandbox: enabled 2025/01/25 07:09:33 fault injection: enabled 2025/01/25 07:09:33 leak checking: enabled 2025/01/25 07:09:33 net packet injection: enabled 2025/01/25 07:09:33 net device setup: enabled 2025/01/25 07:09:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 07:09:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 07:09:33 USB emulation: enabled 2025/01/25 07:09:33 hci packet injection: enabled 2025/01/25 07:09:33 wifi device emulation: enabled 2025/01/25 07:09:33 802.15.4 emulation: enabled 2025/01/25 07:09:33 fetching corpus: 0, signal 0/0 (executing program) 2025/01/25 07:09:35 starting 8 fuzzer processes 07:09:35 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x124, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x108, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0006fa44c3506015510b59fcf26f150d67cc3b9d48a09e67e8972d0328916827"}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x841}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xce5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6d966e5c6a655c845f4429332f6d69529eed8ec8e26fce359e60b30100d97720"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x78}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "772d430ca2b35f81b1b97c84adaf060b"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7ddfe662e8ae9c208e2f6431e039ff405cff7e225457cb7a7600a0114c77924f"}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40400c1}, 0x44440) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x4040084) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), r1) r6 = syz_open_dev$vcsa(&(0x7f0000000880), 0xda55, 0x151cc1) write$tun(r6, &(0x7f00000008c0)={@void, @val={0x0, 0x0, 0x2, 0x7, 0x8, 0x1}, @ipv6=@icmpv6={0x0, 0x6, "041703", 0x298, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, {[@dstopts={0x62, 0x1f, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x1ca57c70}, @generic={0x6, 0xea, "6140eb1c4a15953b74711498fc95c146db5be747769de3bd15f16be9d1a1402eb622a8524238e1a97f0ed8c9b9ed3027043eb2395be5f8c1f5bcff6d0e22155b1394bf3572f4bef2377f389f09ae00fb3970aa2b21703ecd870b82af560a738a3d951c3e177e029cfccab39dc6a90c20a628322da4d93bec7cf27cbf82f55f9125a0edc8fdc791aed0b6c1f994fc65d1f2caeb1fe511ce3a9d315c5b94767933bdf11e337cf5545dd09bc83be678b2d9548331ff0b56681362ade32022e7436b25d1a797772ff5b2702448016bc63baf2648ea0cd2aa13631bc87627834b9eb68a87489d377a3019d0da"}, @pad1]}, @fragment={0x0, 0x0, 0x40, 0x1, 0x0, 0x6, 0x67}, @hopopts={0xc, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}]}, @routing={0x87, 0x12, 0x1, 0x0, 0x0, [@mcast2, @mcast1, @private0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private2, @private1]}, @routing={0x89, 0xc, 0x0, 0x9, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @fragment={0x88, 0x0, 0x8, 0x0, 0x0, 0x15, 0x66}, @dstopts={0x84, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x5b}, @pad1, @calipso={0x7, 0x20, {0x2, 0x6, 0x3, 0x400, [0x1, 0x4, 0x5]}}, @ra={0x5, 0x2, 0xf8}, @pad1, @generic={0xfc, 0x15, "911df9eb0eda2593787af93b247633a396c4bddb54"}]}], @mld={0x84, 0x0, 0x0, 0x2, 0x1ff, @mcast1}}}}, 0x2ca) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000804) r8 = add_key(&(0x7f0000000dc0)='syzkaller\x00', &(0x7f0000000e00)={'syz', 0x1}, &(0x7f0000000e40)="dd5eb97dcda273a5ebbd83841c7204a4d0efa4a481362eef1cf3df7258eea176093bc8f0832734a971c1dddd8fe48a99de91e68d0d765f0c17411fc27cd58c16f2ce29cd0995564d6b7145b45d7ef2f0222c37e19cfcd5615e76574b1ae8bc", 0x5f, 0xfffffffffffffffd) keyctl$clear(0x7, r8) 07:09:35 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x40000) r1 = memfd_create(&(0x7f0000000040)='/dev/vcs#\x00', 0x1) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x8d, 0x40040) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x20000000, 0x18000) r4 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[r0, r0, r0, r0, r1, r0, r2, r3, r4, r0]}, 0xa) r5 = syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x4000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r7, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0xc0802, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000380), 0x7f, 0x58000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000003c0)=[r3, r8, r9, r5], 0x4) epoll_create(0x7b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x1, 0x10, 0x100, 0x3, {{0x3a, 0x4, 0x0, 0x0, 0xe8, 0x65, 0x0, 0xcf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @remote, {[@timestamp_addr={0x44, 0xc, 0x65, 0x1, 0x7, [{@loopback, 0x6}]}, @timestamp={0x44, 0x2c, 0xf3, 0x0, 0xf, [0x4, 0x7ff, 0x7, 0x6, 0xd3, 0x3fa, 0x8, 0xffff, 0x0, 0x1ff]}, @noop, @timestamp={0x44, 0x8, 0x35, 0x0, 0x3, [0x5acc]}, @noop, @rr={0x7, 0x23, 0x36, [@broadcast, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @loopback, @multicast1]}, @cipso={0x86, 0x4f, 0x7, [{0x1, 0xe, "844e1284b2b9ad0cff381ab7"}, {0x0, 0x7, "70d460e66a"}, {0x2, 0x3, 'R'}, {0x7, 0x5, "14de04"}, {0x0, 0x11, "ce910c38706296fa08cb3d0c43ecb2"}, {0x0, 0xf, "f278778acd6c032c4db41c7ca5"}, {0x6, 0xc, "fee5930e12452cc6d009"}]}, @ssrr={0x89, 0x1f, 0xc7, [@local, @loopback, @multicast1, @empty, @multicast2, @multicast1, @multicast1]}, @noop]}}}}}) syz_open_dev$vcsa(&(0x7f0000000580), 0x5, 0x4080) r10 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000005c0)="326ec8667a0426001737c1d314c530fd3d51c76ef3e145b7ea3d95744d6522d7f0bc2c625680b48f03123ad69183b53c88d383436301895ef0e4fd233c0bdcd4", 0x40, r10}, 0x68) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000680)="2357b152e733efdfab64dbbafddc104e4bb636a21e070a7bd41aa4c11c8efabc92356b6c5ad47f815148ac8a8198e3bf7a4b8bd6ff8de586d64908c9cafb0868571284beed720bdb0895bbf093b020e9a47935ec853ede59ee758c5ba091f65e52f43a9a488c10bf7aeef2", 0x6b}, 0x68) 07:09:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x6fca8b5, 0x3, {{0xf, 0x4, 0x1, 0x9, 0x3c, 0x68, 0x0, 0x3f, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x8c, 0x0, 0x9, [0x9, 0x0, 0x2, 0x4, 0x7fff, 0xffffffff, 0x4]}, @noop, @end]}}}}}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x7, 0x80, 0x3, 0x0, {{0x1c, 0x4, 0x2, 0x8, 0x70, 0x68, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast, {[@noop, @noop, @cipso={0x86, 0x57, 0x1, [{0x2, 0x7, "4ef276cbc0"}, {0x1, 0x11, "51d87dba5e8c5b51d6fa1e926c4eb6"}, {0x7, 0x2}, {0x2, 0x12, "dcc19cbd7feafcbd63d62fa28c6169fa"}, {0x0, 0xb, "6180ccd66a2a7ef639"}, {0x3, 0x10, "a48542423bd7aac59d3ad85108f3"}, {0x1, 0xa, "7e51a15cfbd54f4f"}]}, @end]}}}}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40981) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40014) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ac0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) [ 89.087060] audit: type=1400 audit(1737788975.740:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:09:35 executing program 3: syz_io_uring_setup(0x1cc0, &(0x7f0000000000)={0x0, 0x4e91, 0x20, 0x2, 0x1cc}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x48840) mount_setattr(r0, &(0x7f0000000140)='./file0\x00', 0x800, &(0x7f0000000180)={0x1, 0x80, 0x10000}, 0x20) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x80000001) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x101042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r1, 0x0) r2 = socket(0x29, 0x5, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r4 = syz_open_dev$vcsa(&(0x7f0000000340), 0x1, 0x200a01) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r4) madvise(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000380)) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000003c0)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000440)={'syztnl2\x00', r3, 0x1, 0x1, 0x200, 0x80000000, {{0xa, 0x4, 0x3, 0x3e, 0x28, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0xa8, 0x3, 0x2, [{@private=0xa010101, 0x70}, {@loopback, 0x9}]}]}}}}}) syz_io_uring_setup(0x2abe, &(0x7f0000000540)={0x0, 0xdc9a, 0x20, 0x2, 0x1a6}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 07:09:35 executing program 4: r0 = shmget(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/163) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/150) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000180)=""/155) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10051) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'erspan0\x00', 0xfffffffffffffffe}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r1, 0x47976000) r2 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x800) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x2) r3 = shmget(0x3, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f00000003c0)=""/181) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x810, 0xffffffffffffffff, 0x8000000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000480)=""/118) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x500, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) 07:09:35 executing program 5: r0 = io_uring_setup(0x5dc, &(0x7f0000000000)={0x0, 0x5b27, 0x4, 0x3, 0x114}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080), 0x1) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x5, 0x1a, 0x1c, 0x14, "74f5d0aae05c53a415749543789b28147a8b834422c43bafd196cce0f2686e3e642576688accd2f82758c468770f756ff0cbe60d7b0e3b81be5d1f2e2efa3024", "942ebc31f8e7098bb5db45cbe4d25e49baf656cab78a10d2fd25205f6c3f2101", [0x80000001, 0x7b]}) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000180)) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/pid\x00') io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[r1], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x13, 0x1, ']$\x97--,\'u#{;%@{\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x20}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x158, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x110, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x9c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0xae2564c695a0f2c}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf000000000000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 07:09:35 executing program 6: getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200800, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', r0, 0x7, 0x7800, 0x7, 0x3, {{0xc, 0x4, 0x1, 0x3, 0x30, 0x67, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp={0x44, 0x1c, 0xfe, 0x0, 0x3, [0xa79, 0x0, 0x8c, 0x80000001, 0x9, 0xfffffff8]}]}}}}}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0xbd9e000) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) io_uring_setup(0x236e, &(0x7f0000000240)={0x0, 0x3a5d, 0x10, 0x3, 0x213, 0x0, r1}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000002c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1a) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1fffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4010000) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r3) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0xc084) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x620, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000006}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004800}, 0x40) syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44004) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x20004000) 07:09:35 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008050}, 0xc0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3b4bb2ba8be85f7b}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}}, 0x4000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff]}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r5, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408d0}, 0x2804800c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_dev$vcsn(&(0x7f0000000580), 0x340, 0x4040) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r5, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x4040881) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x200}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}]}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r10, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) [ 90.576332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.583177] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.587493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.594272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.598386] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.603955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.633951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.648906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.653184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.655830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.657743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.661469] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.663496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.665148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.669922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.673436] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.676025] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.679813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.681753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.686829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.691857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.695888] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.699892] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.702343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.704720] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.709071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.713913] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.720032] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.724102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.738538] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.743168] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.747168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.749387] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.754665] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.756272] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.758259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.769966] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.772304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.774078] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.794439] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.818110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.819935] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.830701] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.833412] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.851869] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.853909] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.858040] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.859785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.661134] Bluetooth: hci0: command tx timeout [ 92.788753] Bluetooth: hci2: command tx timeout [ 92.789776] Bluetooth: hci1: command tx timeout [ 92.852685] Bluetooth: hci4: command tx timeout [ 92.853502] Bluetooth: hci3: command tx timeout [ 92.854099] Bluetooth: hci6: command tx timeout [ 92.917654] Bluetooth: hci5: command tx timeout [ 92.918422] Bluetooth: hci7: command tx timeout [ 94.708759] Bluetooth: hci0: command tx timeout [ 94.836810] Bluetooth: hci2: command tx timeout [ 94.838017] Bluetooth: hci1: command tx timeout [ 94.900808] Bluetooth: hci4: command tx timeout [ 94.902659] Bluetooth: hci3: command tx timeout [ 94.902809] Bluetooth: hci6: command tx timeout [ 94.964735] Bluetooth: hci7: command tx timeout [ 94.965146] Bluetooth: hci5: command tx timeout [ 96.756900] Bluetooth: hci0: command tx timeout [ 96.885720] Bluetooth: hci1: command tx timeout [ 96.886893] Bluetooth: hci2: command tx timeout [ 96.948887] Bluetooth: hci6: command tx timeout [ 96.948922] Bluetooth: hci4: command tx timeout [ 96.948989] Bluetooth: hci3: command tx timeout [ 97.012963] Bluetooth: hci7: command tx timeout [ 97.014142] Bluetooth: hci5: command tx timeout [ 98.805683] Bluetooth: hci0: command tx timeout [ 98.932677] Bluetooth: hci2: command tx timeout [ 98.932697] Bluetooth: hci1: command tx timeout [ 98.996731] Bluetooth: hci3: command tx timeout [ 98.997699] Bluetooth: hci6: command tx timeout [ 98.998021] Bluetooth: hci4: command tx timeout [ 99.060709] Bluetooth: hci7: command tx timeout [ 99.062485] Bluetooth: hci5: command tx timeout [ 125.255028] modprobe (2258) used greatest stack depth: 23120 bytes left [ 153.348080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.351967] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.354750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.366986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.371787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.374996] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.429921] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.432395] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.433469] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.434359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.438022] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.439395] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.440354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.442563] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.444336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.449646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.452623] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.454490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.493319] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.495438] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.511754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.512821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.520783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.523897] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.526658] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.527369] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.532985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.551239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.559287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.562355] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.565754] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.568505] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.569783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.586946] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.588039] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.589107] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.619823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.624038] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.629094] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.630578] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.631310] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.637912] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.639996] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.641406] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.654194] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.675870] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.680884] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.684779] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.445808] Bluetooth: hci0: command tx timeout [ 155.509689] Bluetooth: hci2: command tx timeout [ 155.510366] Bluetooth: hci1: command tx timeout [ 155.637715] Bluetooth: hci4: command tx timeout [ 155.638426] Bluetooth: hci3: command tx timeout [ 155.700695] Bluetooth: hci6: command tx timeout [ 155.702086] Bluetooth: hci5: command tx timeout [ 155.764744] Bluetooth: hci7: command tx timeout [ 157.492798] Bluetooth: hci0: command tx timeout [ 157.557618] Bluetooth: hci1: command tx timeout [ 157.558176] Bluetooth: hci2: command tx timeout [ 157.684751] Bluetooth: hci3: command tx timeout [ 157.685338] Bluetooth: hci4: command tx timeout [ 157.749599] Bluetooth: hci5: command tx timeout [ 157.750197] Bluetooth: hci6: command tx timeout [ 157.813644] Bluetooth: hci7: command tx timeout [ 159.540845] Bluetooth: hci0: command tx timeout [ 159.605589] Bluetooth: hci2: command tx timeout [ 159.606080] Bluetooth: hci1: command tx timeout [ 159.732794] Bluetooth: hci4: command tx timeout [ 159.733292] Bluetooth: hci3: command tx timeout [ 159.797589] Bluetooth: hci5: command tx timeout [ 159.798077] Bluetooth: hci6: command tx timeout [ 159.860757] Bluetooth: hci7: command tx timeout [ 161.588667] Bluetooth: hci0: command tx timeout [ 161.652705] Bluetooth: hci1: command tx timeout [ 161.653481] Bluetooth: hci2: command tx timeout [ 161.780770] Bluetooth: hci3: command tx timeout [ 161.781652] Bluetooth: hci4: command tx timeout [ 161.844715] Bluetooth: hci5: command tx timeout [ 161.845503] Bluetooth: hci6: command tx timeout [ 161.908689] Bluetooth: hci7: command tx timeout [ 215.633068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.637753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.639012] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.644336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.646038] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.647414] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.764043] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.768919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.770637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.773451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.775268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.779951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.785996] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.787616] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.788701] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.790069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.801778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.804059] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.830880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.837025] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.839324] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.840358] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.849852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.849913] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.855516] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.882937] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.885006] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.887034] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.888234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.891083] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.892768] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.892842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.895367] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.896511] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.917855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.920068] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.973857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.977264] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.990134] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.996751] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.015164] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.019808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.028796] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.030268] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.032366] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.033310] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.047746] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.053664] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.716679] Bluetooth: hci0: command tx timeout [ 217.845640] Bluetooth: hci2: command tx timeout [ 217.975756] Bluetooth: hci4: command tx timeout [ 217.976120] Bluetooth: hci5: command tx timeout [ 217.976701] Bluetooth: hci1: command tx timeout [ 218.036804] Bluetooth: hci3: command tx timeout [ 218.101177] Bluetooth: hci6: command tx timeout [ 218.102043] Bluetooth: hci7: command tx timeout [ 219.764611] Bluetooth: hci0: command tx timeout [ 219.892651] Bluetooth: hci2: command tx timeout [ 220.022601] Bluetooth: hci5: command tx timeout [ 220.022671] Bluetooth: hci4: command tx timeout [ 220.023145] Bluetooth: hci1: command tx timeout [ 220.084678] Bluetooth: hci3: command tx timeout [ 220.148657] Bluetooth: hci7: command tx timeout [ 220.149659] Bluetooth: hci6: command tx timeout [ 221.812598] Bluetooth: hci0: command tx timeout [ 221.940949] Bluetooth: hci2: command tx timeout [ 222.069612] Bluetooth: hci5: command tx timeout [ 222.070120] Bluetooth: hci1: command tx timeout [ 222.071612] Bluetooth: hci4: command tx timeout [ 222.132627] Bluetooth: hci3: command tx timeout [ 222.198574] Bluetooth: hci6: command tx timeout [ 222.199015] Bluetooth: hci7: command tx timeout [ 223.861616] Bluetooth: hci0: command tx timeout [ 223.988652] Bluetooth: hci2: command tx timeout [ 224.116717] Bluetooth: hci1: command tx timeout [ 224.117276] Bluetooth: hci4: command tx timeout [ 224.118089] Bluetooth: hci5: command tx timeout [ 224.181681] Bluetooth: hci3: command tx timeout [ 224.244660] Bluetooth: hci7: command tx timeout [ 224.245615] Bluetooth: hci6: command tx timeout [ 278.099428] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.102845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.105853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.114986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.124981] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.129407] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.401761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.405415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.411363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.418367] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.428233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.432383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.453016] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.468041] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.472447] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.479219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.483448] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.486086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.597028] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.615790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.620884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.631925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.634009] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.644063] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.645486] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.666349] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.668961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.673902] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.683500] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.683932] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.688995] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.689864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.710740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.743123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.746112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.748307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.750140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.756226] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.759908] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.761989] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.770225] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.791277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.820921] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.842030] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.866219] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.907131] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.923030] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.936432] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.181745] Bluetooth: hci0: command tx timeout [ 280.501636] Bluetooth: hci2: command tx timeout [ 280.564692] Bluetooth: hci1: command tx timeout [ 280.820795] Bluetooth: hci3: command tx timeout [ 280.821820] Bluetooth: hci7: command tx timeout [ 280.948610] Bluetooth: hci4: command tx timeout [ 281.076644] Bluetooth: hci5: command tx timeout [ 281.462617] Bluetooth: hci6: command tx timeout [ 282.229584] Bluetooth: hci0: command tx timeout [ 282.549746] Bluetooth: hci2: command tx timeout [ 282.612602] Bluetooth: hci1: command tx timeout [ 282.868768] Bluetooth: hci7: command tx timeout [ 282.870578] Bluetooth: hci3: command tx timeout [ 282.996612] Bluetooth: hci4: command tx timeout [ 283.124718] Bluetooth: hci5: command tx timeout [ 283.508630] Bluetooth: hci6: command tx timeout [ 284.276759] Bluetooth: hci0: command tx timeout [ 284.598594] Bluetooth: hci2: command tx timeout [ 284.660634] Bluetooth: hci1: command tx timeout [ 284.916734] Bluetooth: hci3: command tx timeout [ 284.917259] Bluetooth: hci7: command tx timeout [ 285.046592] Bluetooth: hci4: command tx timeout [ 285.172606] Bluetooth: hci5: command tx timeout [ 285.556592] Bluetooth: hci6: command tx timeout [ 286.324769] Bluetooth: hci0: command tx timeout [ 286.644675] Bluetooth: hci2: command tx timeout [ 286.708758] Bluetooth: hci1: command tx timeout [ 286.964608] Bluetooth: hci7: command tx timeout [ 286.965689] Bluetooth: hci3: command tx timeout [ 287.093584] Bluetooth: hci4: command tx timeout [ 287.220807] Bluetooth: hci5: command tx timeout [ 287.604602] Bluetooth: hci6: command tx timeout [ 340.353407] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.359580] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.361430] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.370832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.374297] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.376594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.684474] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.688439] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.693118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.698804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.703913] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.706107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.744006] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.747104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.753899] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.758323] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.759966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.765320] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.769112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.771556] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.774944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.797482] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.809560] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.817401] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.819568] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.822207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.825061] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.830964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.835011] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.837150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.892950] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.899812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.903898] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.905241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.909940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.913986] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.917840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.918001] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.924836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.938811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.941001] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.942957] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.949866] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.953125] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.956565] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.957819] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.959847] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.961897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.454638] Bluetooth: hci0: command tx timeout [ 342.773714] Bluetooth: hci1: command tx timeout [ 342.836653] Bluetooth: hci2: command tx timeout [ 342.900598] Bluetooth: hci3: command tx timeout [ 342.901384] Bluetooth: hci4: command tx timeout [ 343.029092] Bluetooth: hci7: command tx timeout [ 343.029842] Bluetooth: hci5: command tx timeout [ 343.030386] Bluetooth: hci6: command tx timeout [ 344.501216] Bluetooth: hci0: command tx timeout [ 344.821531] Bluetooth: hci1: command tx timeout [ 344.884598] Bluetooth: hci2: command tx timeout [ 344.948621] Bluetooth: hci4: command tx timeout [ 344.949143] Bluetooth: hci3: command tx timeout [ 345.076709] Bluetooth: hci6: command tx timeout [ 345.077210] Bluetooth: hci5: command tx timeout [ 345.077718] Bluetooth: hci7: command tx timeout [ 346.548604] Bluetooth: hci0: command tx timeout [ 346.868605] Bluetooth: hci1: command tx timeout [ 346.932683] Bluetooth: hci2: command tx timeout [ 346.996611] Bluetooth: hci3: command tx timeout [ 346.997115] Bluetooth: hci4: command tx timeout [ 347.124825] Bluetooth: hci7: command tx timeout [ 347.125318] Bluetooth: hci5: command tx timeout [ 347.125793] Bluetooth: hci6: command tx timeout [ 348.596857] Bluetooth: hci0: command tx timeout [ 348.916714] Bluetooth: hci1: command tx timeout [ 348.980798] Bluetooth: hci2: command tx timeout [ 349.044948] Bluetooth: hci4: command tx timeout [ 349.046028] Bluetooth: hci3: command tx timeout [ 349.172846] Bluetooth: hci6: command tx timeout [ 349.173933] Bluetooth: hci5: command tx timeout [ 349.175077] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 07:14:44 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff815ec480 RCX=ffffffff8684b701 RDX=ffff88802ae1f5e0 RSI=0000000000000000 RDI=ffff88802ae1f288 RBP=ffff88802ae1f310 RSP=ffff88802ae1f278 R8 =ffffffff8684b766 R9 =ffff88802ae1f2b8 R10=000000000003ab7c R11=00000000000241a1 R12=ffff88802ae1f340 R13=0000000000000000 R14=ffff88803166d340 R15=0000000000092cc0 RIP=ffffffff812d1b0d RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f74cbc5b8e0 CR3=000000002e12a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffea00001d4100 RCX=ffffffff8199b38a RDX=ffff888013305340 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff88802e7df870 R8 =0000000000000000 R9 =fffff9400003a820 R10=0000000000000000 R11=0000000000000001 R12=8000000007504025 R13=00007efc5761a000 R14=ffff88802e7dfce8 R15=ffff88802e7df9d0 RIP=ffffffff8199b38d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0161da1020 CR3=0000000034bbe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000