Warning: Permanently added '[localhost]:1288' (ECDSA) to the list of known hosts. 2025/04/27 11:51:08 fuzzer started 2025/04/27 11:51:09 dialing manager at localhost:46629 syzkaller login: [ 95.222351] cgroup: Unknown subsys name 'net' [ 95.361857] cgroup: Unknown subsys name 'cpuset' [ 95.405214] cgroup: Unknown subsys name 'rlimit' 2025/04/27 11:51:24 syscalls: 209 2025/04/27 11:51:24 code coverage: enabled 2025/04/27 11:51:24 comparison tracing: enabled 2025/04/27 11:51:24 extra coverage: enabled 2025/04/27 11:51:24 setuid sandbox: enabled 2025/04/27 11:51:24 namespace sandbox: enabled 2025/04/27 11:51:24 Android sandbox: enabled 2025/04/27 11:51:24 fault injection: enabled 2025/04/27 11:51:24 leak checking: enabled 2025/04/27 11:51:24 net packet injection: enabled 2025/04/27 11:51:24 net device setup: enabled 2025/04/27 11:51:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 11:51:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 11:51:24 USB emulation: enabled 2025/04/27 11:51:24 hci packet injection: enabled 2025/04/27 11:51:24 wifi device emulation: enabled 2025/04/27 11:51:24 802.15.4 emulation: enabled 2025/04/27 11:51:24 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 11:51:26 starting 8 fuzzer processes 11:51:26 executing program 0: sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xc0, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4a}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x800}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004041) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x4001) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10800}, 0x20048804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}}, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) r1 = accept(0xffffffffffffffff, &(0x7f00000005c0)=@in, &(0x7f0000000640)=0x80) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000680)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000700)=""/43, 0x2b}, {&(0x7f0000000740)=""/165, 0xa5}, {&(0x7f0000000800)=""/161, 0xa1}], 0x3, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x40000002) r3 = accept(0xffffffffffffffff, &(0x7f00000009c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000a40)=0x80) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000b40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x60, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xd8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) r4 = accept$unix(r3, &(0x7f0000000b80), &(0x7f0000000c00)=0x6e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x128, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0xa8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x98, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x26}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = fsmount(r4, 0x1, 0x4cabc9079c45ec94) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, r8, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x890) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000001240)={&(0x7f00000010c0), 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 11:51:26 executing program 2: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, 0x20010, 0xffffffffffffffff, 0x10000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000012c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r1, 0x0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000000)=""/80, 0x50}, {&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x4, &(0x7f00000011c0)=""/191, 0xbf}, 0x0, 0x42, 0x1, {0x1}}, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x80) syz_io_uring_submit(0x0, r0, &(0x7f0000001480)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r1, &(0x7f0000001440), 0x0, 0x0, 0x80000, 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000002640)={&(0x7f0000001500), 0x6e, &(0x7f0000002580)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1, &(0x7f00000025c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x58}, 0x20) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x30, r2, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x840) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000002780), 0xcc2, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f00000027c0)='\\$[!@.!:_}\x00', &(0x7f0000002800)='./file0\x00', r4) openat$full(0xffffffffffffff9c, &(0x7f0000002840), 0x101, 0x0) pidfd_open(r7, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x80, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r5}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r10 = syz_open_dev$vcsu(&(0x7f00000029c0), 0x0, 0x400102) ioctl$HIDIOCGRDESCSIZE(r10, 0x80044801, &(0x7f0000002a00)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000002ac0)={'sit0\x00', &(0x7f0000002a40)={'sit0\x00', 0x0, 0x2f, 0x4, 0x20, 0xfffff000, 0x2c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x700, 0x4, 0x1}}) r11 = syz_open_dev$vcsu(&(0x7f0000002b00), 0x3, 0x81) accept4$unix(r11, 0x0, &(0x7f0000002b40), 0x800) 11:51:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x60004001}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xa757d1bad5036a14}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24040841) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x24}}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd8, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x60, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3ff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008100}, 0x800) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x81509cb6f5ae8080}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x4008084) [ 111.868906] audit: type=1400 audit(1745754686.110:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:51:26 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@private1, @in6=@private2}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000140)='illinois\x00', 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in6=@initdev}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) r0 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@rc, &(0x7f0000000340)=0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x84018008}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) process_mrelease(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x124, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x9c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xcc8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf05}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r4, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x60, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) 11:51:26 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x414000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x19c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17023db2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb6ad50a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x617a18c9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x277c38a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e40cc50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3798cb34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b29f2d0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5192f00a}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49a50cec}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf8, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f9474d3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73b9f49d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f2d2b1c}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12cf5a60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64d6d630}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e26cd36}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cb29357}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b7f88e5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x245c8558}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2adf7744}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a0b7166}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x19c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24008884) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r1, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3ff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffbff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x4000011) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1008040}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x34}}, 0x20000104) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000700), r3) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xc0, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfb}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3f}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0xc0}}, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x15) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24004800) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000cc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x68, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x24}}, 0x10800) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000811) 11:51:26 executing program 5: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000000)='big_key\x00', &(0x7f0000000040)='\x00') keyctl$restrict_keyring(0x1d, 0xfffffffffffffff8, &(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)='\x00') keyctl$clear(0x7, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$reject(0x13, 0x0, 0x5, 0x0, r0) r1 = request_key(&(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='/-.]^(++/&\x00', r0) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)='!\'%{-+)%/#%\x00') r2 = request_key(&(0x7f0000000380)='blacklist\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='+$/:\x00', r1) r3 = request_key(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='#d!\x00', r2) keyctl$clear(0x7, r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}]}, 0x4c}}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/-.]^(++/&\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '+*:}+[!\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x8040040) request_key(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)='/-.]^(++/&\x00', r2) request_key(&(0x7f0000000780)='pkcs7_test\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)='encrypted\x00', 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000980)='rxrpc\x00', 0x0) add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @desc1}, &(0x7f0000000ac0)={0x0, "32ae118e00ae5ff5e98690dc7db916ed86aa5d68735ce2c7d4e2a5823aba650c73351e492641d49fd3a7477c76a28c57a3423b3fa716fb78692633a077e8427f", 0x34}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r5, r3) 11:51:26 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffffecf9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000000) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000006c0), 0x1cd340, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r5, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x110, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xfc, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e0b8fc2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4062}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8998}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa47a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4afe98ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65ac09e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6aeaf8f}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea6b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a6d0d2f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3463cacf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdeb7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x26a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x324674d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4256}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e0e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ea3ab4a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4720f345}]}, {0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c52}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b61fb32}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1edd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8254}]}, {0x4}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ddec59d}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0xeaffc57de30bb5e5) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x15c, 0x0, 0x920, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x128, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bc5db96}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58acb0cf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16ffb571}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ac85cb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4392f7d4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70eaba46}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74e143d3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bc63163}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b4884ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f93839f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45f3797c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51a73da7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x387a07d2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x783aab95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bedefdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) accept4$unix(r4, &(0x7f0000000cc0)=@abs, &(0x7f0000000d40)=0x6e, 0x80800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r5, 0x20, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x20, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40800) pselect6(0x40, &(0x7f0000000f80)={0xb71, 0x7, 0x0, 0x4e09, 0x6, 0xb9, 0x280000}, &(0x7f0000000fc0)={0x8, 0x7f, 0x9461, 0x2, 0x2, 0x7f, 0x0, 0x6}, &(0x7f0000001000)={0x0, 0x2, 0x0, 0xfffffffffffffffb, 0x3, 0x1e5a40000000000, 0x4, 0x1}, &(0x7f0000001040), &(0x7f00000010c0)={&(0x7f0000001080)={[0x667f]}, 0x8}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), r6) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x34, r7, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}}, 0x4000) 11:51:26 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8014) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x480c0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x520d1b18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29b2e995}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r6, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000001}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r10, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30000804}, 0x0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r2) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r11, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008041}, 0x4000001) [ 113.189946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.197481] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.199089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.206048] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.212425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.313168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.327013] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.333151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.339931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.345030] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.428526] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.445221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.460097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.463090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.465231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.469839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.473211] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.479239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.488843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.490435] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.514379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.516334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.521920] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.531275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.534799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.554902] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.562526] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.575479] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.595041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.614571] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.705566] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.717511] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.726302] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.730013] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.731832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.737279] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.739438] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.740895] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.782426] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.808874] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.271247] Bluetooth: hci0: command tx timeout [ 115.400689] Bluetooth: hci1: command tx timeout [ 115.526755] Bluetooth: hci2: command tx timeout [ 115.528168] Bluetooth: hci3: command tx timeout [ 115.654811] Bluetooth: hci4: command tx timeout [ 115.718880] Bluetooth: hci5: command tx timeout [ 115.847173] Bluetooth: hci7: command tx timeout [ 115.974695] Bluetooth: hci6: command tx timeout [ 117.318886] Bluetooth: hci0: command tx timeout [ 117.446770] Bluetooth: hci1: command tx timeout [ 117.574933] Bluetooth: hci3: command tx timeout [ 117.575436] Bluetooth: hci2: command tx timeout [ 117.702766] Bluetooth: hci4: command tx timeout [ 117.766943] Bluetooth: hci5: command tx timeout [ 117.894966] Bluetooth: hci7: command tx timeout [ 118.022889] Bluetooth: hci6: command tx timeout [ 119.368740] Bluetooth: hci0: command tx timeout [ 119.495122] Bluetooth: hci1: command tx timeout [ 119.623683] Bluetooth: hci2: command tx timeout [ 119.624194] Bluetooth: hci3: command tx timeout [ 119.750743] Bluetooth: hci4: command tx timeout [ 119.816090] Bluetooth: hci5: command tx timeout [ 119.943072] Bluetooth: hci7: command tx timeout [ 120.070713] Bluetooth: hci6: command tx timeout [ 121.414913] Bluetooth: hci0: command tx timeout [ 121.542824] Bluetooth: hci1: command tx timeout [ 121.670704] Bluetooth: hci2: command tx timeout [ 121.671218] Bluetooth: hci3: command tx timeout [ 121.799151] Bluetooth: hci4: command tx timeout [ 121.862732] Bluetooth: hci5: command tx timeout [ 121.990697] Bluetooth: hci7: command tx timeout [ 122.119441] Bluetooth: hci6: command tx timeout [ 173.186525] syz-executor.3 (286) used greatest stack depth: 25072 bytes left [ 173.559293] syz-executor.7 (287) used greatest stack depth: 24952 bytes left [ 173.626225] syz-executor.4 (290) used greatest stack depth: 24904 bytes left [ 175.572361] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.574791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.576134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.578973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.580897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.649046] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.653250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.654813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.655387] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.661538] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.662910] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.663062] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.666375] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.678964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.680591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.733749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.752091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.778419] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.780167] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.793021] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.806722] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.809723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.819538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.827573] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.871089] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.883190] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.888557] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.903947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.906342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.918102] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.921338] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.925078] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.933164] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.937935] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.939931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.949006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.974971] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.993459] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.038030] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.047887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.607183] Bluetooth: hci0: command tx timeout [ 177.734750] Bluetooth: hci2: command tx timeout [ 177.735278] Bluetooth: hci1: command tx timeout [ 177.991727] Bluetooth: hci3: command tx timeout [ 178.118918] Bluetooth: hci7: command tx timeout [ 178.119705] Bluetooth: hci5: command tx timeout [ 178.120024] Bluetooth: hci4: command tx timeout [ 178.183056] Bluetooth: hci6: command tx timeout [ 179.655650] Bluetooth: hci0: command tx timeout [ 179.783669] Bluetooth: hci1: command tx timeout [ 179.784125] Bluetooth: hci2: command tx timeout [ 180.038884] Bluetooth: hci3: command tx timeout [ 180.166857] Bluetooth: hci4: command tx timeout [ 180.167312] Bluetooth: hci5: command tx timeout [ 180.167782] Bluetooth: hci7: command tx timeout [ 180.231978] Bluetooth: hci6: command tx timeout [ 181.702678] Bluetooth: hci0: command tx timeout [ 181.832710] Bluetooth: hci2: command tx timeout [ 181.832833] Bluetooth: hci1: command tx timeout [ 182.087130] Bluetooth: hci3: command tx timeout [ 182.214720] Bluetooth: hci7: command tx timeout [ 182.215190] Bluetooth: hci5: command tx timeout [ 182.215587] Bluetooth: hci4: command tx timeout [ 182.278956] Bluetooth: hci6: command tx timeout [ 183.750751] Bluetooth: hci0: command tx timeout [ 183.880053] Bluetooth: hci1: command tx timeout [ 183.881084] Bluetooth: hci2: command tx timeout [ 184.134819] Bluetooth: hci3: command tx timeout [ 184.262730] Bluetooth: hci5: command tx timeout [ 184.263804] Bluetooth: hci4: command tx timeout [ 184.264103] Bluetooth: hci7: command tx timeout [ 184.326713] Bluetooth: hci6: command tx timeout [ 238.242355] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.248999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.252102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.254465] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.262378] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.265833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.268311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.287200] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.303873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.317822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.335027] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.341267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.345735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.353726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.359472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.361724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.367203] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.371558] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.379929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.385894] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.430158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.434277] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.438019] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.454006] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.462273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.502968] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.508795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.521751] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.538753] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.551846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.597967] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.619796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.632768] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.635076] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.656047] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.662093] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.667481] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.670237] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.725802] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.737790] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.328503] Bluetooth: hci1: command tx timeout [ 240.390794] Bluetooth: hci0: command tx timeout [ 240.392126] Bluetooth: hci2: command tx timeout [ 240.455019] Bluetooth: hci3: command tx timeout [ 240.520753] Bluetooth: hci4: command tx timeout [ 240.646915] Bluetooth: hci5: command tx timeout [ 240.775138] Bluetooth: hci6: command tx timeout [ 240.840120] Bluetooth: hci7: command tx timeout [ 242.374954] Bluetooth: hci1: command tx timeout [ 242.440916] Bluetooth: hci2: command tx timeout [ 242.441378] Bluetooth: hci0: command tx timeout [ 242.505134] Bluetooth: hci3: command tx timeout [ 242.568837] Bluetooth: hci4: command tx timeout [ 242.694713] Bluetooth: hci5: command tx timeout [ 242.823813] Bluetooth: hci6: command tx timeout [ 242.888202] Bluetooth: hci7: command tx timeout [ 244.423856] Bluetooth: hci1: command tx timeout [ 244.488836] Bluetooth: hci0: command tx timeout [ 244.488866] Bluetooth: hci2: command tx timeout [ 244.550903] Bluetooth: hci3: command tx timeout [ 244.614819] Bluetooth: hci4: command tx timeout [ 244.743106] Bluetooth: hci5: command tx timeout [ 244.872639] Bluetooth: hci6: command tx timeout [ 244.934762] Bluetooth: hci7: command tx timeout [ 246.472545] Bluetooth: hci1: command tx timeout [ 246.536676] Bluetooth: hci0: command tx timeout [ 246.537126] Bluetooth: hci2: command tx timeout [ 246.600196] Bluetooth: hci3: command tx timeout [ 246.666133] Bluetooth: hci4: command tx timeout [ 246.793646] Bluetooth: hci5: command tx timeout [ 246.919885] Bluetooth: hci6: command tx timeout [ 246.983721] Bluetooth: hci7: command tx timeout [ 301.034827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.039964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.045660] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.055241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.064362] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.141582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.146255] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.151450] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.166344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.172321] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.231311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.244952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.254177] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.269500] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.280078] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.418222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.429314] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.433772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.446495] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.462327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.491110] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.508217] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.514085] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.517431] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.521278] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.528919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.535105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.541844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.548956] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.552209] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.557396] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.582460] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.586288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.623418] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.655119] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.670090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.690230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.695265] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.705131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.731350] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.110906] Bluetooth: hci0: command tx timeout [ 303.240696] Bluetooth: hci1: command tx timeout [ 303.366972] Bluetooth: hci2: command tx timeout [ 303.558834] Bluetooth: hci3: command tx timeout [ 303.686903] Bluetooth: hci6: command tx timeout [ 303.687653] Bluetooth: hci5: command tx timeout [ 303.751011] Bluetooth: hci4: command tx timeout [ 303.815202] Bluetooth: hci7: command tx timeout [ 305.159161] Bluetooth: hci0: command tx timeout [ 305.289084] Bluetooth: hci1: command tx timeout [ 305.415385] Bluetooth: hci2: command tx timeout [ 305.606714] Bluetooth: hci3: command tx timeout [ 305.734880] Bluetooth: hci5: command tx timeout [ 305.735558] Bluetooth: hci6: command tx timeout [ 305.798754] Bluetooth: hci4: command tx timeout [ 305.863320] Bluetooth: hci7: command tx timeout [ 307.206744] Bluetooth: hci0: command tx timeout [ 307.335858] Bluetooth: hci1: command tx timeout [ 307.462684] Bluetooth: hci2: command tx timeout [ 307.654757] Bluetooth: hci3: command tx timeout [ 307.782701] Bluetooth: hci6: command tx timeout [ 307.783136] Bluetooth: hci5: command tx timeout [ 307.846712] Bluetooth: hci4: command tx timeout [ 307.912653] Bluetooth: hci7: command tx timeout [ 309.256202] Bluetooth: hci0: command tx timeout [ 309.382828] Bluetooth: hci1: command tx timeout [ 309.510927] Bluetooth: hci2: command tx timeout [ 309.702885] Bluetooth: hci3: command tx timeout [ 309.830842] Bluetooth: hci5: command tx timeout [ 309.831295] Bluetooth: hci6: command tx timeout [ 309.894881] Bluetooth: hci4: command tx timeout [ 309.958789] Bluetooth: hci7: command tx timeout [ 363.306528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.315410] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.318758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.332314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.339860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.482707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.488125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.494109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.510119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.515068] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.630436] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.637256] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.643161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.650107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.660690] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.765090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.778252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.798290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.815546] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.820352] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.836794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.847284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.858309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.913299] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.938318] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.940829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.948195] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.959114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.963879] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.971410] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.977348] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.994277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.996522] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.000286] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.014466] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.019706] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.025103] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.042888] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.080441] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.092999] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 365.382775] Bluetooth: hci0: command tx timeout [ 365.576191] Bluetooth: hci1: command tx timeout [ 365.702697] Bluetooth: hci2: command tx timeout [ 365.960385] Bluetooth: hci3: command tx timeout [ 366.087002] Bluetooth: hci6: command tx timeout [ 366.278841] Bluetooth: hci5: command tx timeout [ 366.344659] Bluetooth: hci7: command tx timeout [ 366.345346] Bluetooth: hci4: command tx timeout [ 367.431706] Bluetooth: hci0: command tx timeout [ 367.623646] Bluetooth: hci1: command tx timeout [ 367.750703] Bluetooth: hci2: command tx timeout [ 368.006682] Bluetooth: hci3: command tx timeout [ 368.136794] Bluetooth: hci6: command tx timeout [ 368.326779] Bluetooth: hci5: command tx timeout [ 368.390692] Bluetooth: hci7: command tx timeout [ 368.391150] Bluetooth: hci4: command tx timeout [ 369.478974] Bluetooth: hci0: command tx timeout [ 369.671682] Bluetooth: hci1: command tx timeout [ 369.798674] Bluetooth: hci2: command tx timeout [ 370.055786] Bluetooth: hci3: command tx timeout [ 370.184816] Bluetooth: hci6: command tx timeout [ 370.374728] Bluetooth: hci5: command tx timeout [ 370.439999] Bluetooth: hci7: command tx timeout [ 370.440437] Bluetooth: hci4: command tx timeout [ 371.527663] Bluetooth: hci0: command tx timeout [ 371.718663] Bluetooth: hci1: command tx timeout [ 371.846677] Bluetooth: hci2: command tx timeout [ 372.103732] Bluetooth: hci3: command tx timeout [ 372.230656] Bluetooth: hci6: command tx timeout [ 372.423945] Bluetooth: hci5: command tx timeout [ 372.488407] Bluetooth: hci7: command tx timeout [ 372.489766] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 11:56:27 Registers: info registers vcpu 0 RAX=0000000000000005 RBX=0000000000000200 RCX=ffffffff87a4eb80 RDX=0000000000000008 RSI=ffff8880340e2640 RDI=ffff8880340e1bc0 RBP=ffff8880340e1bc0 RSP=ffff8880259b7ac8 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000000 R11=0000000000000000 R12=0000000000000009 R13=0000000000000001 R14=ffff8880340e2640 R15=ffff8880340e2618 RIP=ffffffff81515854 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f27721bd540 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdacd82ee0 CR3=00000000349f6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a3a XMM01=ffff000000000000ffff000000000000 XMM02=ffff000000000000ffff000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=000056537d123c1f00007ffdacd83f70 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88802d0af6c8 RCX=ffff88802d0af61c RDX=1ffff11005a15ee4 RSI=ffffffff85c1bac0 RDI=ffffffff81b27ad2 RBP=ffff88802d0af720 RSP=ffff88802d0af6b0 R8 =0000000000000001 R9 =ffff88802d0af708 R10=000000000003b0c2 R11=0000000000025fe0 R12=ffff88802d0af790 R13=0000000000000000 R14=ffff888031e70000 R15=0000000000000cc0 RIP=ffffffff813505f2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f23a8c6c540 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6cf67c9620 CR3=000000002d126000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000