Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 65.990278] sshd (228) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:46271' (ECDSA) to the list of known hosts. 2025/01/29 04:31:02 fuzzer started 2025/01/29 04:31:02 dialing manager at localhost:40187 [ 69.024818] cgroup: Unknown subsys name 'net' [ 69.264078] cgroup: Unknown subsys name 'cpuset' [ 69.277595] cgroup: Unknown subsys name 'rlimit' [ 86.361092] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/29 04:31:21 syscalls: 201 2025/01/29 04:31:21 code coverage: enabled 2025/01/29 04:31:21 comparison tracing: enabled 2025/01/29 04:31:21 extra coverage: enabled 2025/01/29 04:31:21 setuid sandbox: enabled 2025/01/29 04:31:21 namespace sandbox: enabled 2025/01/29 04:31:21 Android sandbox: enabled 2025/01/29 04:31:21 fault injection: enabled 2025/01/29 04:31:21 leak checking: enabled 2025/01/29 04:31:21 net packet injection: enabled 2025/01/29 04:31:21 net device setup: enabled 2025/01/29 04:31:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 04:31:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 04:31:21 USB emulation: enabled 2025/01/29 04:31:21 hci packet injection: enabled 2025/01/29 04:31:21 wifi device emulation: enabled 2025/01/29 04:31:21 802.15.4 emulation: enabled 2025/01/29 04:31:21 fetching corpus: 0, signal 0/0 (executing program) 2025/01/29 04:31:23 starting 8 fuzzer processes 04:31:23 executing program 0: r0 = epoll_create(0x1f) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000080)={[0xffff]}, 0x8) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x4001}) r2 = syz_io_uring_setup(0x7a26, &(0x7f0000000180)={0x0, 0xeb6f, 0x20, 0x80, 0x3db}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) epoll_pwait2(r3, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x3a3]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x3}}, './file1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x10010, r4, 0x0) epoll_wait(r4, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8000) r5 = openat(r4, &(0x7f0000000480)='./file1\x00', 0x10200, 0x10) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r3) r6 = geteuid() getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000001a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r6, r7}}, './file0\x00'}) io_uring_setup(0x6906, &(0x7f0000001a80)={0x0, 0x7721, 0x2, 0x3, 0x14b, 0x0, r2}) recvmsg$unix(r3, &(0x7f00000020c0)={&(0x7f0000001b00)=@abs, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001b80)=""/82, 0x52}, {&(0x7f0000001c00)=""/215, 0xd7}, {&(0x7f0000001d00)=""/3, 0x3}, {&(0x7f0000001d40)=""/170, 0xaa}, {&(0x7f0000001e00)=""/6, 0x6}, {&(0x7f0000001e40)=""/180, 0xb4}, {&(0x7f0000001f00)=""/204, 0xcc}], 0x7, &(0x7f0000002080)=[@cred={{0x1c}}], 0x20}, 0x40010141) r8 = socket(0x5, 0x80000, 0x9) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000002100)=@gcm_128={{0x304}, "9c5ba861fee83cd9", "8f35954d0522c43783d3d160e9a149f2", "f5e869cb", "1a8f4afa633c4448"}, 0x28) 04:31:23 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0xc0000d4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, r0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x6c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "246817c18bc9ba742aa09680e00d1d41"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c6044e14ba515c77802874d0876174bf27629f621ffec54c368cbcb06fa42b71"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "316256ecc8d5ad5019ffcab89d9a7856"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b98eab3c3d83eeddf00359d0086e6ef4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004090) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r2) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r6, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xc800}, 0x8001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r5) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r8, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x101}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x64}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb0, r9, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8d7a}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x68, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x7f58f2b898fd6a3f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x20004840) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r11, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004) 04:31:23 executing program 2: sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0xe04, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}]}, 0x44}}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x54}}, 0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008088}, 0x46800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r6, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008804) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x380000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000040) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r6, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x37}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x85) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x6c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1ff}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x91020}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) [ 89.551821] audit: type=1400 audit(1738125083.915:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:31:23 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}]}, 0x1c}}, 0x40000c1) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xb8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x4c}, 0x1, 0x0, 0x0, 0x805}, 0x42880) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000044) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffe5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000044) chroot(&(0x7f0000000680)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44034}, 0x40) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x2000005) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000900)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r4) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r6, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000094}, 0x40000) syz_genetlink_get_family_id$fou(&(0x7f0000000c00), r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000c40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) 04:31:23 executing program 4: sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004005}, 0x4040881) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7ff}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0xe9}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44081}, 0x20000001) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r0, 0x22e, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x48040) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r0, 0x100, 0x70bd26, 0x4, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r0, 0x100, 0x7, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}}, 0x8891) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xe}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008004}, 0x4000001) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x20044000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r1, 0x1, 0x7, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000a004}, 0x4000000) recvfrom(0xffffffffffffffff, &(0x7f0000000b80)=""/162, 0xa2, 0x20, &(0x7f0000000c40)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d00)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40820}, 0x4040880) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000010c0)={&(0x7f0000000e80), 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x160, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x11}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffe00}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x2404c004}, 0xc1c58ae4c46d1096) 04:31:24 executing program 5: r0 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x8}) r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002380)={0xd4, 0x0, &(0x7f0000001280)=[@free_buffer, @clear_death={0x400c630f, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x5, 0x0, 0xa}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000011c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/175, 0xaf, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/4096, 0x1000, 0x0, 0x7}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000001240)={0x0, 0x28, 0x50}}, 0x40}, @register_looper, @free_buffer={0x40086303, r1}, @release={0x40046306, 0x1}, @free_buffer, @register_looper], 0x1000, 0x0, &(0x7f0000001380)="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"}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000023c0), 0xffffffffffffffff) r3 = epoll_create(0x8d91) epoll_pwait(r3, &(0x7f0000002400)=[{}], 0x1, 0x8, &(0x7f0000002440)={[0x80000000]}, 0x8) r4 = fork() r5 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, r0, &(0x7f0000002480)={r5, r0}) r6 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r6, &(0x7f00000024c0)) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000002500)={{0x1, 0x1, 0x18, r7, {r3}}, './file0\x00'}) open$dir(&(0x7f0000002540)='./file0\x00', 0x80000, 0x100) waitid(0x0, r4, &(0x7f0000002580), 0x40000000, &(0x7f0000002600)) socket$inet_tcp(0x2, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000026c0), 0x12880) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x24, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0xc0) 04:31:24 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x166}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000014) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8200101}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r1, 0x4966020b3c005c88, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x34, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x7601a3b76e95c664}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x74}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x54}}, 0x20008010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4000080) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x40}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000880), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xa0, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x40008084) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) 04:31:24 executing program 7: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x134, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe0}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x134}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x15}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x805}, 0x40004) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x800) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x8401}, 0x400c1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000b40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000700)={0x3ec, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_KEY={0x88, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "aa043597805edcca73dcb7cbf4f7f8480f45e1ae78782d8c3781b45828929ce4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1dafc46c3b0959e28a5314bb3b595c193157eaaddd39ccf79b92f666dfc1cc9f"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "08d703f73b935db58dd404701f74a2d8"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x803}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x160, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d9c04c73c014f52daf0230d9022c05841906dd4944face545d519e8c6e8c56a3"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "22edfb4f6373a2cc76073340bbd6d361"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ff96bd32d03166d4ae1a56f2bf706862"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b7431c1dff31c7a7657b0ee721f0a97fb26b6b935d2d94f3cbce608b6f478d80"}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b7f2f3a8f3c953bae2da573a96371f24"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_KEY={0xdc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6ce46b3323a332578c757ab1b010adb4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3758bd562c1f8ac26f9a18f004b9a6b902418b0d1a918c241291fd05d131444a"}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f1d5a9ce6ab0ad2a6519b28571c0b26f04933cf4ddfd5376baadf0ad82e87919"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x48}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}]}, @NL802154_ATTR_SEC_KEY={0xdc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e1b089af4e1f93e5f8cb6f7dc81de22a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b82f1155c1cdd4eaa540b03ec57276c5e0995e42129dc7e38b080b8f7227a151"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000000}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "67ac9dff4c9d17810ec5b870d1725cb5"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a1b15ebfa376db4e42e83f1feefabebb"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "52e0a2dca8361136619f8763595e42dbe51ff452f5a9de9b5f371deac4438b61"}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000030) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000c00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x7c, r7, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x20084) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r9, 0x2, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40804}, 0x90) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ec0), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r10, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) [ 91.056528] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.059416] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.062499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.064325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.066971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.069615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.076118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.078224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.090183] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.097333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.098458] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.099758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.102265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.106186] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.110319] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.120156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.127126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.133004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.180089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.184926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.185159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.187096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.189167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.193892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.196472] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.200137] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.201004] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.202057] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.204285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.220223] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.226767] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.228297] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.230913] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.235530] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.235528] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.236930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.238273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.241467] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.243694] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.246290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.248214] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.250575] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.252354] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.252531] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.260858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.261137] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.262291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.304204] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.127781] Bluetooth: hci0: command tx timeout [ 93.190764] Bluetooth: hci2: command tx timeout [ 93.190862] Bluetooth: hci1: command tx timeout [ 93.318755] Bluetooth: hci4: command tx timeout [ 93.384853] Bluetooth: hci3: command tx timeout [ 93.385173] Bluetooth: hci5: command tx timeout [ 93.385952] Bluetooth: hci7: command tx timeout [ 93.386403] Bluetooth: hci6: command tx timeout [ 95.177726] Bluetooth: hci0: command tx timeout [ 95.238830] Bluetooth: hci1: command tx timeout [ 95.239970] Bluetooth: hci2: command tx timeout [ 95.367030] Bluetooth: hci4: command tx timeout [ 95.430920] Bluetooth: hci7: command tx timeout [ 95.431816] Bluetooth: hci3: command tx timeout [ 95.432579] Bluetooth: hci5: command tx timeout [ 95.433453] Bluetooth: hci6: command tx timeout [ 97.222827] Bluetooth: hci0: command tx timeout [ 97.286793] Bluetooth: hci2: command tx timeout [ 97.288065] Bluetooth: hci1: command tx timeout [ 97.415544] Bluetooth: hci4: command tx timeout [ 97.479022] Bluetooth: hci3: command tx timeout [ 97.480109] Bluetooth: hci7: command tx timeout [ 97.481481] Bluetooth: hci5: command tx timeout [ 97.482381] Bluetooth: hci6: command tx timeout [ 99.273561] Bluetooth: hci0: command tx timeout [ 99.334881] Bluetooth: hci1: command tx timeout [ 99.336144] Bluetooth: hci2: command tx timeout [ 99.464166] Bluetooth: hci4: command tx timeout [ 99.526946] Bluetooth: hci7: command tx timeout [ 99.528204] Bluetooth: hci5: command tx timeout [ 99.529261] Bluetooth: hci3: command tx timeout [ 99.530330] Bluetooth: hci6: command tx timeout [ 151.467513] syz-executor.5 (287) used greatest stack depth: 23808 bytes left [ 154.129852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.136688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.139990] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.152831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.158739] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.163819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.255382] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.258032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.260926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.269958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.274079] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.276400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.279238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.281852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.283838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.287970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.289518] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.290604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.315553] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.323469] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.329896] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.331334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.336582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.342823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.348539] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.351883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.352981] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.356884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.358552] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.359981] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.363513] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.365202] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.366300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.377970] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.388597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.392943] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.396304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.400691] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.404105] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.454767] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.457428] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.463209] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.477887] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.485402] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.509840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.522824] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.528926] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.533780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.231701] Bluetooth: hci0: command tx timeout [ 156.358956] Bluetooth: hci2: command tx timeout [ 156.359282] Bluetooth: hci1: command tx timeout [ 156.423731] Bluetooth: hci6: command tx timeout [ 156.486893] Bluetooth: hci3: command tx timeout [ 156.486999] Bluetooth: hci4: command tx timeout [ 156.614996] Bluetooth: hci7: command tx timeout [ 156.615011] Bluetooth: hci5: command tx timeout [ 158.279751] Bluetooth: hci0: command tx timeout [ 158.406831] Bluetooth: hci2: command tx timeout [ 158.406883] Bluetooth: hci1: command tx timeout [ 158.471718] Bluetooth: hci6: command tx timeout [ 158.534783] Bluetooth: hci4: command tx timeout [ 158.537341] Bluetooth: hci3: command tx timeout [ 158.662701] Bluetooth: hci5: command tx timeout [ 158.662820] Bluetooth: hci7: command tx timeout [ 160.326749] Bluetooth: hci0: command tx timeout [ 160.454708] Bluetooth: hci2: command tx timeout [ 160.456730] Bluetooth: hci1: command tx timeout [ 160.518719] Bluetooth: hci6: command tx timeout [ 160.583700] Bluetooth: hci3: command tx timeout [ 160.583735] Bluetooth: hci4: command tx timeout [ 160.710818] Bluetooth: hci7: command tx timeout [ 160.710999] Bluetooth: hci5: command tx timeout [ 162.374728] Bluetooth: hci0: command tx timeout [ 162.502693] Bluetooth: hci1: command tx timeout [ 162.503147] Bluetooth: hci2: command tx timeout [ 162.566776] Bluetooth: hci6: command tx timeout [ 162.630750] Bluetooth: hci3: command tx timeout [ 162.631756] Bluetooth: hci4: command tx timeout [ 162.758732] Bluetooth: hci5: command tx timeout [ 162.759712] Bluetooth: hci7: command tx timeout [ 216.169300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.171009] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.173232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.182934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.186403] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.189906] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.291952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.294429] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.296245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.299955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.301632] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.302809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.359127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.360861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.362569] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.377701] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.381313] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.382446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.464929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.472294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.475014] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.479257] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.482154] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.484096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.487290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.498477] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.516162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.532268] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.540844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.546744] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.548199] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.550204] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.555008] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.562942] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.569879] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.570795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.577457] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.587858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.621020] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.647067] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.647647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.655779] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.659799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.669029] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.680935] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.695079] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.728479] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.731432] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.247779] Bluetooth: hci0: command tx timeout [ 218.374759] Bluetooth: hci1: command tx timeout [ 218.439841] Bluetooth: hci2: command tx timeout [ 218.503707] Bluetooth: hci3: command tx timeout [ 218.630762] Bluetooth: hci4: command tx timeout [ 218.695694] Bluetooth: hci6: command tx timeout [ 218.759702] Bluetooth: hci5: command tx timeout [ 218.822780] Bluetooth: hci7: command tx timeout [ 220.295755] Bluetooth: hci0: command tx timeout [ 220.424731] Bluetooth: hci1: command tx timeout [ 220.487685] Bluetooth: hci2: command tx timeout [ 220.551678] Bluetooth: hci3: command tx timeout [ 220.678706] Bluetooth: hci4: command tx timeout [ 220.743641] Bluetooth: hci6: command tx timeout [ 220.807663] Bluetooth: hci5: command tx timeout [ 220.871729] Bluetooth: hci7: command tx timeout [ 222.344648] Bluetooth: hci0: command tx timeout [ 222.471669] Bluetooth: hci1: command tx timeout [ 222.534844] Bluetooth: hci2: command tx timeout [ 222.599665] Bluetooth: hci3: command tx timeout [ 222.727975] Bluetooth: hci4: command tx timeout [ 222.790679] Bluetooth: hci6: command tx timeout [ 222.854880] Bluetooth: hci5: command tx timeout [ 222.918729] Bluetooth: hci7: command tx timeout [ 224.390718] Bluetooth: hci0: command tx timeout [ 224.518780] Bluetooth: hci1: command tx timeout [ 224.584896] Bluetooth: hci2: command tx timeout [ 224.646817] Bluetooth: hci3: command tx timeout [ 224.774714] Bluetooth: hci4: command tx timeout [ 224.839696] Bluetooth: hci6: command tx timeout [ 224.903707] Bluetooth: hci5: command tx timeout [ 224.966741] Bluetooth: hci7: command tx timeout [ 278.494401] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.496570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.500141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.500263] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.505188] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.511384] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.520527] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.527483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.527532] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.532206] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.535117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.539383] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.683719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.694477] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.697716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.698683] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.703184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.704310] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.711887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.713730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.715645] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.717149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.718885] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.721922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.734470] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.736377] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.743405] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.757285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.759172] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.765043] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.808189] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.816549] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.819015] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.820913] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.827873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.845190] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.846889] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.849467] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.853493] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.854500] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.863263] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.867377] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.868439] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.876362] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.905807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.942740] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.954805] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.958778] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.582802] Bluetooth: hci0: command tx timeout [ 280.583183] Bluetooth: hci1: command tx timeout [ 280.774702] Bluetooth: hci2: command tx timeout [ 280.774731] Bluetooth: hci3: command tx timeout [ 280.839154] Bluetooth: hci4: command tx timeout [ 280.903965] Bluetooth: hci5: command tx timeout [ 280.968161] Bluetooth: hci6: command tx timeout [ 281.030933] Bluetooth: hci7: command tx timeout [ 282.632666] Bluetooth: hci0: command tx timeout [ 282.633380] Bluetooth: hci1: command tx timeout [ 282.823759] Bluetooth: hci3: command tx timeout [ 282.824072] Bluetooth: hci2: command tx timeout [ 282.886852] Bluetooth: hci4: command tx timeout [ 282.950728] Bluetooth: hci5: command tx timeout [ 283.014865] Bluetooth: hci6: command tx timeout [ 283.078662] Bluetooth: hci7: command tx timeout [ 284.678684] Bluetooth: hci0: command tx timeout [ 284.679180] Bluetooth: hci1: command tx timeout [ 284.870803] Bluetooth: hci3: command tx timeout [ 284.871290] Bluetooth: hci2: command tx timeout [ 284.935645] Bluetooth: hci4: command tx timeout [ 284.999823] Bluetooth: hci5: command tx timeout [ 285.063728] Bluetooth: hci6: command tx timeout [ 285.126757] Bluetooth: hci7: command tx timeout [ 286.727730] Bluetooth: hci1: command tx timeout [ 286.727777] Bluetooth: hci0: command tx timeout [ 286.918697] Bluetooth: hci2: command tx timeout [ 286.918734] Bluetooth: hci3: command tx timeout [ 286.984657] Bluetooth: hci4: command tx timeout [ 287.046694] Bluetooth: hci5: command tx timeout [ 287.110966] Bluetooth: hci6: command tx timeout [ 287.174700] Bluetooth: hci7: command tx timeout [ 340.954061] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.957550] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.962209] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.967910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.975035] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.977352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.085797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.092269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.094935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.103947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.107225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.112229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.283857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.286983] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.290008] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.295835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.300179] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.301976] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.340986] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.368754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.379376] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.383985] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.395983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.398023] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.414249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.424375] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.426141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.429727] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.440992] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.452356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.459294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.462317] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.464383] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.489118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.510896] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.520118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.530308] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.548816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.563166] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.565690] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.568730] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.614110] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.620327] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.664117] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.675115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.680063] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.690786] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.705051] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.046721] Bluetooth: hci0: command tx timeout [ 343.174655] Bluetooth: hci1: command tx timeout [ 343.431363] Bluetooth: hci2: command tx timeout [ 343.558680] Bluetooth: hci3: command tx timeout [ 343.624077] Bluetooth: hci4: command tx timeout [ 343.624917] Bluetooth: hci5: command tx timeout [ 343.751887] Bluetooth: hci7: command tx timeout [ 343.878765] Bluetooth: hci6: command tx timeout [ 345.095201] Bluetooth: hci0: command tx timeout [ 345.222651] Bluetooth: hci1: command tx timeout [ 345.478670] Bluetooth: hci2: command tx timeout [ 345.607076] Bluetooth: hci3: command tx timeout [ 345.670790] Bluetooth: hci4: command tx timeout [ 345.671302] Bluetooth: hci5: command tx timeout [ 345.798886] Bluetooth: hci7: command tx timeout [ 345.926795] Bluetooth: hci6: command tx timeout [ 347.145635] Bluetooth: hci0: command tx timeout [ 347.272243] Bluetooth: hci1: command tx timeout [ 347.527674] Bluetooth: hci2: command tx timeout [ 347.655664] Bluetooth: hci3: command tx timeout [ 347.719967] Bluetooth: hci4: command tx timeout [ 347.720411] Bluetooth: hci5: command tx timeout [ 347.846970] Bluetooth: hci7: command tx timeout [ 347.976615] Bluetooth: hci6: command tx timeout [ 349.190695] Bluetooth: hci0: command tx timeout [ 349.321631] Bluetooth: hci1: command tx timeout [ 349.575628] Bluetooth: hci2: command tx timeout [ 349.702740] Bluetooth: hci3: command tx timeout [ 349.766720] Bluetooth: hci5: command tx timeout [ 349.767168] Bluetooth: hci4: command tx timeout [ 349.895614] Bluetooth: hci7: command tx timeout [ 350.023622] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 04:36:31 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00007f4b30591901 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff85c18d40 RDI=ffff888034e2bb7c RBP=ffff88806ce09a98 RSP=ffff88806ce09a18 R8 =0000000000000001 R9 =ffff888034e2c1c8 R10=ffffffff864044d7 R11=0000000000000000 R12=ffff88806ce09b08 R13=0000000000000000 R14=ffff888034e2b780 R15=ffff8880355ee000 RIP=ffffffff81421fdf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4b30583540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4b305ab3c0 CR3=000000002f6b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c18c80 RDI=ffff88800c418a78 RBP=00000000000e5794 RSP=ffff88806cf09ce0 R8 =0000000000000000 R9 =1ffff110027f2c03 R10=ffffffff864044d7 R11=0000000000000001 R12=ffff88806cf3b940 R13=ffff88806cf3ba00 R14=ffff88800c418080 R15=ffffffff85c56520 RIP=ffffffff81479bb1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd42414569 CR3=00000000225b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fec6684947000007fec66848f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000