Warning: Permanently added '[localhost]:65397' (ECDSA) to the list of known hosts. 2025/04/23 15:34:04 fuzzer started 2025/04/23 15:34:04 dialing manager at localhost:42253 syzkaller login: [ 119.895035] cgroup: Unknown subsys name 'net' [ 120.059908] cgroup: Unknown subsys name 'cpuset' [ 120.107875] cgroup: Unknown subsys name 'rlimit' 2025/04/23 15:34:19 syscalls: 213 2025/04/23 15:34:19 code coverage: enabled 2025/04/23 15:34:19 comparison tracing: enabled 2025/04/23 15:34:19 extra coverage: enabled 2025/04/23 15:34:19 setuid sandbox: enabled 2025/04/23 15:34:19 namespace sandbox: enabled 2025/04/23 15:34:19 Android sandbox: enabled 2025/04/23 15:34:19 fault injection: enabled 2025/04/23 15:34:19 leak checking: enabled 2025/04/23 15:34:19 net packet injection: enabled 2025/04/23 15:34:19 net device setup: enabled 2025/04/23 15:34:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/23 15:34:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/23 15:34:19 USB emulation: enabled 2025/04/23 15:34:19 hci packet injection: enabled 2025/04/23 15:34:19 wifi device emulation: enabled 2025/04/23 15:34:19 802.15.4 emulation: enabled 2025/04/23 15:34:19 fetching corpus: 0, signal 0/0 (executing program) 2025/04/23 15:34:21 starting 8 fuzzer processes 15:34:21 executing program 0: getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x109100, 0x0) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x3) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f00000000c0)={@lba=0x2, 0x1, 0x2}) ioperm(0x7, 0x38774000000000, 0x7fff) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000100)) ioctl$CDROMRESUME(r0, 0x5302) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000140)) socket$inet6(0xa, 0x80000, 0x80000001) socket$inet6(0xa, 0x2, 0x7) r1 = syz_open_dev$vcsn(&(0x7f0000000bc0), 0x7fffffff, 0x80000) ioctl$CDROMPAUSE(r1, 0x5301) r2 = gettid() process_vm_readv(r2, &(0x7f0000000c40)=[{&(0x7f0000000c00)=""/32, 0x20}], 0x1, &(0x7f0000000e80)=[{&(0x7f0000000c80)=""/130, 0x82}, {&(0x7f0000000d40)=""/45, 0x2d}, {&(0x7f0000000d80)=""/249, 0xf9}], 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xc) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000f00), 0x200, 0x0) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000000f40)) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000f80)={0x401, 0x81}) 15:34:21 executing program 1: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x6, 0x6, 0x804, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x80) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffffffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8045}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40881}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x19c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x128}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x0, 0x4, 0xfffff0af, 0x1, 0x4, 0x0]}, @CTA_ID={0x8}, @CTA_TUPLE_MASTER={0x50, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x401}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_NAT_SRC={0xbc, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x8}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x35}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0xc, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x58}}, 0x40) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x810) syz_open_dev$rtc(&(0x7f0000000ac0), 0x7fffffff, 0x288040) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, 0x3, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7f}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0xd6ff}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0xaaf3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x84a72850909753eb) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000c40)) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8000000) r5 = syz_open_dev$vcsn(&(0x7f0000000dc0), 0x3ff, 0x20800) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e40)={0x118, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_NAT={0x4c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASTER={0x98, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x118}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x74cf8640e0c1fb0e}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x58, 0x3, 0x6, 0x301, 0x0, 0x0, {0x8, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000000) 15:34:21 executing program 2: sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x24000041) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x408, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x40001) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r1, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x48001}, 0x801) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r9 = fork() ptrace$getregs(0xc, r9, 0x3, &(0x7f0000000840)=""/224) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x20}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) 15:34:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x44) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = syz_open_dev$vcsn(&(0x7f0000000200), 0xffffffff, 0x200000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}]}, 0x98}, 0x1, 0x0, 0x0, 0x2}, 0x1) r6 = io_uring_setup(0x3d1c, &(0x7f00000003c0)={0x0, 0x2a1b, 0x19, 0x1, 0x2cc, 0x0, r4}) syz_io_uring_setup(0x5b57, &(0x7f0000000440)={0x0, 0xeb34, 0x10, 0x1, 0x336, 0x0, r6}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000540)={0x9}, 0x4) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000580)) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r7, 0x4, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x1) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40001d08}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r8, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000850}, 0x40000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r9, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x80040) r10 = socket(0x1, 0x6, 0x9) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0xb, 0x0, 0x0, 0x0, {0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) [ 136.030216] audit: type=1400 audit(1745422461.204:7): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:34:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x7}, 0x4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fib={{0x8}, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24004000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x2, @none}, 0xe) r1 = socket(0x27, 0x1, 0xffffff7f) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0xf58}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c081}, 0x4000000) r2 = syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) socket(0x2e, 0x6, 0xfffffffd) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0xc01, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x24201206}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, 0x9, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x9, 0x1a, '\xf3%!)\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000882}, 0x20004040) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0xb0b41, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {}, ["", ""]}, 0x14}}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000006c0)={0x10001, 0x8, 0x10001, 0x2, 0x200}, 0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7f}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xbb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xbe736d617783c211}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$CDROMSUBCHNL(r3, 0x530b, &(0x7f0000000840)={0x0, 0xc1, 0x7, 0x0, 0x0, 0x7, @lba, @msf={0x1, 0x4, 0x1}}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000940)=0xe, 0x80000) 15:34:21 executing program 5: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4c040) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x3, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000041) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$CDROMREADTOCHDR(r1, 0x5305, &(0x7f0000000280)={0x5c, 0xd3}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x3, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x100}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7f}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x26004000}, 0x4000840) r4 = syz_open_dev$vcsn(&(0x7f0000000540), 0xffffffffffffffa7, 0x121b00) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000580)={0x40, 0x8, 0x7, 0x5, 0x4, 0x9}) ioctl$CDROMVOLREAD(r4, 0x5313, &(0x7f0000001000)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001080), r2) sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, r6, 0x10, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x3cfc181a182c3e02}, 0xc5) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001280)={&(0x7f0000001180), 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48802}, 0x880) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, r6, 0x730, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40010) 15:34:21 executing program 6: sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220008}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7f}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20040081) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8002c14}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r5, 0x20, 0x70bd26, 0x3, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x2, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffb}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1f}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xf4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r6) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r2, 0x100, 0x7, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x5) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c840}, 0x800) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) 15:34:21 executing program 7: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000040)={@lba=0x7, 0x0, 0x1}) ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0xa2) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$CDROMREADALL(r1, 0x5318, &(0x7f00000000c0)) ioctl$CDROMREADTOCHDR(r1, 0x5305, &(0x7f0000000b40)={0x38, 0x7}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b80), 0x200280, 0x0) ioctl$CDROMRESUME(r2, 0x5302) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000000c00)={0x7f, 0x80, 0xfd, 0x5, 0x5, 0x1}) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x7ff, 0x14000) ioctl$CDROM_LAST_WRITTEN(r4, 0x5395, &(0x7f0000000c80)) ioctl$CDROM_DISC_STATUS(r3, 0x5327) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x904000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x50, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, 0x13, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r5 = syz_open_dev$vcsn(&(0x7f0000000f40), 0x40e, 0x400) ioctl$CDROM_SELECT_DISK(r5, 0x5322, 0x1) ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x48, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) [ 137.457225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.463124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.465891] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.466864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.469929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.471413] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.477897] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.482700] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.485402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.493716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.513401] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.544883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.549873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.571570] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.577645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.601326] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.620043] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.623488] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.635632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.644075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.645871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.650013] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.655993] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 137.658761] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.665883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.678760] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 137.678990] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 137.688010] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 137.691140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.700916] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 137.701404] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.712240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 137.718180] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.718909] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.734708] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.736258] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 137.740717] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 137.764910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 137.772812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.808244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 139.537832] Bluetooth: hci0: command tx timeout [ 139.600521] Bluetooth: hci1: command tx timeout [ 139.663608] Bluetooth: hci2: command tx timeout [ 139.791845] Bluetooth: hci4: command tx timeout [ 139.855619] Bluetooth: hci5: command tx timeout [ 139.856587] Bluetooth: hci3: command tx timeout [ 139.856644] Bluetooth: hci7: command tx timeout [ 139.919949] Bluetooth: hci6: command tx timeout [ 141.583802] Bluetooth: hci0: command tx timeout [ 141.648577] Bluetooth: hci1: command tx timeout [ 141.713550] Bluetooth: hci2: command tx timeout [ 141.841516] Bluetooth: hci4: command tx timeout [ 141.903557] Bluetooth: hci7: command tx timeout [ 141.903759] Bluetooth: hci5: command tx timeout [ 141.904083] Bluetooth: hci3: command tx timeout [ 141.967804] Bluetooth: hci6: command tx timeout [ 143.631753] Bluetooth: hci0: command tx timeout [ 143.695779] Bluetooth: hci1: command tx timeout [ 143.759828] Bluetooth: hci2: command tx timeout [ 143.887651] Bluetooth: hci4: command tx timeout [ 143.952139] Bluetooth: hci3: command tx timeout [ 143.953553] Bluetooth: hci5: command tx timeout [ 143.953603] Bluetooth: hci7: command tx timeout [ 144.015800] Bluetooth: hci6: command tx timeout [ 145.679566] Bluetooth: hci0: command tx timeout [ 145.743604] Bluetooth: hci1: command tx timeout [ 145.807549] Bluetooth: hci2: command tx timeout [ 145.936768] Bluetooth: hci4: command tx timeout [ 146.000031] Bluetooth: hci7: command tx timeout [ 146.001388] Bluetooth: hci3: command tx timeout [ 146.001939] Bluetooth: hci5: command tx timeout [ 146.063546] Bluetooth: hci6: command tx timeout [ 200.686263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.696976] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.700367] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.706654] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.708714] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.711340] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.718854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.720264] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.721389] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.722433] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.728971] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.729799] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.730751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.733361] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.735365] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.738939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.741958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.743213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.746714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.762775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.764758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.767818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.780938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.782429] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.784956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.791685] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.794085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.804731] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.805603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.806425] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.808152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 200.811390] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 200.813626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 200.814879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.820069] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 200.821553] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.829118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.831181] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.861579] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 200.866124] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 202.769123] Bluetooth: hci3: command tx timeout [ 202.832517] Bluetooth: hci2: command tx timeout [ 202.895703] Bluetooth: hci0: command tx timeout [ 202.895736] Bluetooth: hci4: command tx timeout [ 202.897095] Bluetooth: hci5: command tx timeout [ 202.959704] Bluetooth: hci6: command tx timeout [ 202.960748] Bluetooth: hci7: command tx timeout [ 202.960805] Bluetooth: hci1: command tx timeout [ 204.815670] Bluetooth: hci3: command tx timeout [ 204.879985] Bluetooth: hci2: command tx timeout [ 204.943668] Bluetooth: hci4: command tx timeout [ 204.943859] Bluetooth: hci5: command tx timeout [ 204.944163] Bluetooth: hci0: command tx timeout [ 205.007579] Bluetooth: hci6: command tx timeout [ 205.008116] Bluetooth: hci1: command tx timeout [ 205.008523] Bluetooth: hci7: command tx timeout [ 206.864703] Bluetooth: hci3: command tx timeout [ 206.927536] Bluetooth: hci2: command tx timeout [ 206.991993] Bluetooth: hci5: command tx timeout [ 206.992033] Bluetooth: hci0: command tx timeout [ 206.993370] Bluetooth: hci4: command tx timeout [ 207.055700] Bluetooth: hci7: command tx timeout [ 207.055857] Bluetooth: hci1: command tx timeout [ 207.057004] Bluetooth: hci6: command tx timeout [ 208.911547] Bluetooth: hci3: command tx timeout [ 208.976144] Bluetooth: hci2: command tx timeout [ 209.039867] Bluetooth: hci0: command tx timeout [ 209.039904] Bluetooth: hci4: command tx timeout [ 209.040372] Bluetooth: hci5: command tx timeout [ 209.103552] Bluetooth: hci6: command tx timeout [ 209.105250] Bluetooth: hci1: command tx timeout [ 209.105673] Bluetooth: hci7: command tx timeout [ 263.362963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.364963] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.367776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.368900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.371756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.372780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.373661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.374721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.376746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.379920] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.380827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.384405] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.386419] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.387782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.389380] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.389532] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.393906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.403113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.406786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.417047] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.421921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.424535] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 263.429160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.443939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.451030] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.475912] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.483789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.486055] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.486247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.499127] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.502793] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.515365] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.518792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.541872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.543859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.547577] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.561280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.568842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.569007] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.583119] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 265.423645] Bluetooth: hci3: command tx timeout [ 265.496501] Bluetooth: hci1: command tx timeout [ 265.497563] Bluetooth: hci0: command tx timeout [ 265.498219] Bluetooth: hci6: command tx timeout [ 265.499833] Bluetooth: hci2: command tx timeout [ 265.616688] Bluetooth: hci4: command tx timeout [ 265.679704] Bluetooth: hci7: command tx timeout [ 265.680745] Bluetooth: hci5: command tx timeout [ 267.473640] Bluetooth: hci3: command tx timeout [ 267.536672] Bluetooth: hci2: command tx timeout [ 267.536712] Bluetooth: hci6: command tx timeout [ 267.537214] Bluetooth: hci0: command tx timeout [ 267.537767] Bluetooth: hci1: command tx timeout [ 267.665673] Bluetooth: hci4: command tx timeout [ 267.727965] Bluetooth: hci7: command tx timeout [ 267.729647] Bluetooth: hci5: command tx timeout [ 269.519833] Bluetooth: hci3: command tx timeout [ 269.583589] Bluetooth: hci2: command tx timeout [ 269.584124] Bluetooth: hci1: command tx timeout [ 269.584666] Bluetooth: hci0: command tx timeout [ 269.585119] Bluetooth: hci6: command tx timeout [ 269.711705] Bluetooth: hci4: command tx timeout [ 269.775862] Bluetooth: hci5: command tx timeout [ 269.775967] Bluetooth: hci7: command tx timeout [ 271.567548] Bluetooth: hci3: command tx timeout [ 271.632234] Bluetooth: hci6: command tx timeout [ 271.632754] Bluetooth: hci0: command tx timeout [ 271.632821] Bluetooth: hci1: command tx timeout [ 271.633237] Bluetooth: hci2: command tx timeout [ 271.759552] Bluetooth: hci4: command tx timeout [ 271.823630] Bluetooth: hci7: command tx timeout [ 271.824553] Bluetooth: hci5: command tx timeout [ 325.668762] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.671846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.674933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.681943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.693744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.792798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.795797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.799986] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.806374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.812767] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.921219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.924581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.927340] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.933943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.937526] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.982856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.988065] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.990939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.012557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.016125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.033910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.034635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.046022] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.050081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.051424] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.053816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.093153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 326.095166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.107616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 326.108704] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.124191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.132123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.146121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 326.165530] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 326.171091] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 326.227836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 326.236368] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 326.269814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 326.369758] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 326.373893] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 327.759676] Bluetooth: hci0: command tx timeout [ 327.887549] Bluetooth: hci1: command tx timeout [ 328.015563] Bluetooth: hci2: command tx timeout [ 328.080537] Bluetooth: hci3: command tx timeout [ 328.209790] Bluetooth: hci4: command tx timeout [ 328.271596] Bluetooth: hci6: command tx timeout [ 328.275690] Bluetooth: hci5: command tx timeout [ 328.463564] Bluetooth: hci7: command tx timeout [ 329.807884] Bluetooth: hci0: command tx timeout [ 329.935678] Bluetooth: hci1: command tx timeout [ 330.063850] Bluetooth: hci2: command tx timeout [ 330.128873] Bluetooth: hci3: command tx timeout [ 330.255900] Bluetooth: hci4: command tx timeout [ 330.319584] Bluetooth: hci6: command tx timeout [ 330.321510] Bluetooth: hci5: command tx timeout [ 330.511819] Bluetooth: hci7: command tx timeout [ 331.856566] Bluetooth: hci0: command tx timeout [ 331.984953] Bluetooth: hci1: command tx timeout [ 332.112551] Bluetooth: hci2: command tx timeout [ 332.175515] Bluetooth: hci3: command tx timeout [ 332.305476] Bluetooth: hci4: command tx timeout [ 332.367590] Bluetooth: hci6: command tx timeout [ 332.369009] Bluetooth: hci5: command tx timeout [ 332.560532] Bluetooth: hci7: command tx timeout [ 333.905114] Bluetooth: hci0: command tx timeout [ 334.032115] Bluetooth: hci1: command tx timeout [ 334.160021] Bluetooth: hci2: command tx timeout [ 334.224719] Bluetooth: hci3: command tx timeout [ 334.352684] Bluetooth: hci4: command tx timeout [ 334.415512] Bluetooth: hci5: command tx timeout [ 334.416754] Bluetooth: hci6: command tx timeout [ 334.608585] Bluetooth: hci7: command tx timeout [ 388.377048] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.378785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.379977] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.388054] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.390106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.397375] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.401638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.408939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.413589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.416093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.467293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.474217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.475743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.482714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.485113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.605354] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.617138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.626975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.628087] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.636353] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.636786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.638340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.642824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.648353] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.654767] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.655924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.659617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.663856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.676868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.685781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.722426] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.731890] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 388.769224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 388.783662] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 388.804050] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 388.839049] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 388.857081] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 388.882924] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 388.914007] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 388.921844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 390.479677] Bluetooth: hci1: command tx timeout [ 390.479994] Bluetooth: hci0: command tx timeout [ 390.543577] Bluetooth: hci2: command tx timeout [ 390.869964] Bluetooth: hci5: command tx timeout [ 390.869998] Bluetooth: hci3: command tx timeout [ 390.870511] Bluetooth: hci4: command tx timeout [ 390.927792] Bluetooth: hci6: command tx timeout [ 390.992572] Bluetooth: hci7: command tx timeout [ 392.527602] Bluetooth: hci1: command tx timeout [ 392.528164] Bluetooth: hci0: command tx timeout [ 392.593503] Bluetooth: hci2: command tx timeout [ 392.911834] Bluetooth: hci5: command tx timeout [ 392.912424] Bluetooth: hci4: command tx timeout [ 392.912967] Bluetooth: hci3: command tx timeout [ 392.975864] Bluetooth: hci6: command tx timeout [ 393.039554] Bluetooth: hci7: command tx timeout [ 394.575800] Bluetooth: hci1: command tx timeout [ 394.576353] Bluetooth: hci0: command tx timeout [ 394.639718] Bluetooth: hci2: command tx timeout [ 394.959666] Bluetooth: hci3: command tx timeout [ 394.960234] Bluetooth: hci4: command tx timeout [ 394.960260] Bluetooth: hci5: command tx timeout [ 395.023729] Bluetooth: hci6: command tx timeout [ 395.089494] Bluetooth: hci7: command tx timeout [ 396.624595] Bluetooth: hci0: command tx timeout [ 396.624659] Bluetooth: hci1: command tx timeout [ 396.687534] Bluetooth: hci2: command tx timeout [ 397.007912] Bluetooth: hci4: command tx timeout [ 397.008105] Bluetooth: hci3: command tx timeout [ 397.008977] Bluetooth: hci5: command tx timeout [ 397.071733] Bluetooth: hci6: command tx timeout [ 397.135533] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:39:23 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88806ce08a50 RCX=ffff888025fb0000 RDX=0000000000000001 RSI=0000000000000001 RDI=ffff88806ce08a60 RBP=ffff888025faf1b0 RSP=ffff88806ce089a8 R8 =0000000000000000 R9 =ffff88806ce08a90 R10=000000000003b0b4 R11=00000000000c3c0c R12=0000000000000008 R13=ffff888025fa8000 R14=ffff888025fb0000 R15=ffff88806ce08a50 RIP=ffffffff81350799 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564d000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f79ffbd2260 CR3=0000000029e7a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000200 RCX=ffffffff817afe06 RDX=0000000000000000 RSI=0000000000000006 RDI=ffffffff8135ccc8 RBP=ffff8880270c7f58 RSP=ffff8880270c7ec8 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff8640ed17 R11=0000000000000000 R12=0000000000000004 R13=00007ff471a92b80 R14=00007ff471a92b80 R15=ffff8880345f6b40 RIP=ffffffff817aff2a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574d000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff471a92b80 CR3=00000000327a2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000