Warning: Permanently added '[localhost]:47237' (ECDSA) to the list of known hosts. 2025/05/24 19:49:45 fuzzer started 2025/05/24 19:49:45 dialing manager at localhost:46087 syzkaller login: [ 94.053667] cgroup: Unknown subsys name 'net' [ 94.213775] cgroup: Unknown subsys name 'cpuset' [ 94.252708] cgroup: Unknown subsys name 'rlimit' 2025/05/24 19:49:59 syscalls: 221 2025/05/24 19:49:59 code coverage: enabled 2025/05/24 19:49:59 comparison tracing: enabled 2025/05/24 19:49:59 extra coverage: enabled 2025/05/24 19:49:59 setuid sandbox: enabled 2025/05/24 19:49:59 namespace sandbox: enabled 2025/05/24 19:49:59 Android sandbox: enabled 2025/05/24 19:49:59 fault injection: enabled 2025/05/24 19:49:59 leak checking: enabled 2025/05/24 19:49:59 net packet injection: enabled 2025/05/24 19:49:59 net device setup: enabled 2025/05/24 19:49:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/24 19:49:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/24 19:49:59 USB emulation: enabled 2025/05/24 19:49:59 hci packet injection: enabled 2025/05/24 19:49:59 wifi device emulation: enabled 2025/05/24 19:49:59 802.15.4 emulation: enabled 2025/05/24 19:49:59 fetching corpus: 0, signal 0/0 (executing program) 2025/05/24 19:50:01 starting 8 fuzzer processes 19:50:02 executing program 0: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x400cc}, 0x4000010) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, r1, 0xc00, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x41}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x14c, r2, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x80}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x80}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x800c014) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0xffff, 0x1a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}]}, 0x38}, 0x1, 0x0, 0x0, 0x18001}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x94, r0, 0x81a, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x94}}, 0x40008a1) syz_genetlink_get_family_id$smc(&(0x7f0000000880), 0xffffffffffffffff) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x400000, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x168, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff7e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x168}, 0x1, 0x0, 0x0, 0x20004010}, 0x40814) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000804) prlimit64(r3, 0x6, 0x0, &(0x7f0000000dc0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1f}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x3}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000f40)={'\x00', 0x84c9, 0x3, 0xfffffff8, 0x40, 0x5, r3}) 19:50:02 executing program 1: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/64) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x1) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xfc, 0x0, &(0x7f0000000480)=[@enter_looper, @decrefs, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x8, 0x1, 0x2e}, @fda={0x66646185, 0x4, 0x0, 0x24}, @fd}, &(0x7f0000000100)={0x0, 0x20, 0x40}}}, @enter_looper, @decrefs={0x40046307, 0x1}, @request_death={0x400c630e, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/66, 0x42, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/255, 0xff, 0x0, 0x20}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0xa, 0x0, 0x8}, @fda={0x66646185, 0x3, 0x0, 0x1f}, @fd}, &(0x7f0000000440)={0x0, 0x20, 0x40}}, 0x40}], 0x73, 0x0, &(0x7f0000000580)="2029bd14a77ad70d70007fa8aa92885b30ca73c0b7d1c86136f7e3e40ea751b0dda0f189be28376054e0981e61e54b298caff49fe3030837e22ea7bc038d6cf5dd1d0ea9e8148fde8c2f3154c979cb180f76e8a556d5ad6535e609a4f61044b90b1d9407046d54eb6cb92ffee74c8cd31c56db"}) add_key(&(0x7f0000000640)='id_resolver\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="3a49d4bd64854addfb893b181c464205aaaddcf5eae015e8cfa735dd310760596676e0410dac327e2da695e4d7e9c8f902dd6048c85f145ab4531b980e162c64441887c401e1c3ba20a124de53d7fc380f1584d34d3d341b366af143b1c076ee68381865ca427119222379dfea66b9f527069c5008dc9ae01181d911e4cb918507409d3fdef323f7cf65b097dfb84f3e13a5fcfd97abb8a2975280513479651204c9d450d18314893c6042d61ff842387da94442f5cb73243b95f6e0b429d9c54fd77be2615aaabc0175070ea1e4e844bda039e82a3ea05ef4", 0xd9, 0xfffffffffffffffc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80008084}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000084}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1c8, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0xac, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0xe4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xe0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaab0407}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xadfb0b599804c973}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x80) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000b80)=',{,\x00', &(0x7f0000000bc0)='./file0\x00', 0xffffffffffffff9c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, r3, 0x220, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x4d}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x42}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000e00), 0x8000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000dc0), r5) r6 = syz_open_dev$evdev(&(0x7f0000000e40), 0x1, 0x40) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000e80)=""/100) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 19:50:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x4901, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x20048000) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x6010a0}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf4, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xdd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x28e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}}]}, 0xf4}}, 0x2040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x288, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x723}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0xcd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x8d48}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5b7}, {0xc, 0x90, 0x1000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x1b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffffb}, {0xc, 0x90, 0x80000001}}]}, 0x288}, 0x1, 0x0, 0x0, 0x24004040}, 0x48040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040015) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc69c}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa0, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000f00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000fc0)={&(0x7f0000000e80), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x4010) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x16c, r2, 0xd00, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x16c}}, 0x20000000) [ 110.349838] audit: type=1400 audit(1748116202.077:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:50:02 executing program 3: getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @multicast1, @local}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x1, 0x8000, 0x0, 0x8, {{0x23, 0x4, 0x1, 0x0, 0x8c, 0x67, 0x0, 0x0, 0x4, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0x23, 0xa4, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0xcc, 0x3, 0x1, [{@multicast1, 0x3f}, {@loopback, 0x401}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x3ff}, {@private=0xa010102, 0x6}, {@multicast2, 0x401}, {@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@broadcast}]}, @noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x41, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@private0, @in=@multicast1, 0x4e22, 0x3, 0x4e20, 0x595e, 0x2, 0x20, 0x80, 0x16, r0, 0xee00}, {0x1, 0x80000001, 0x8, 0x8001, 0xffffffffffffffc0, 0x5, 0x6, 0x10001}, {0x1, 0x3, 0x9, 0x80}, 0x2, 0x6e6bb9, 0x0, 0x0, 0x0, 0x3}, {{@in=@private=0xa010102, 0x4d2, 0x33}, 0xa, @in=@local, 0x0, 0x3, 0x3, 0x8, 0x5, 0x6, 0x3}}, 0xe8) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev}, &(0x7f00000002c0)=0x10) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000300)={@private, @empty, @multicast1}, &(0x7f0000000340)=0xc) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000480)={'filter\x00', 0x0, 0x4, 0xbb, [0x1000, 0x4, 0x8, 0x5, 0x2, 0x401], 0x3, &(0x7f0000000380)=[{}, {}, {}], &(0x7f00000003c0)=""/187}, &(0x7f0000000500)=0x78) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000540)={'syztnl1\x00', r0, 0x789f, 0x1, 0x4, 0x1, {{0x6, 0x4, 0x3, 0x34, 0x18, 0x65, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'syztnl2\x00', r2, 0x2f, 0x0, 0x8b, 0x1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x8080, 0x40, 0x1ff, 0x9}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000780)=0xe8) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000007c0)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000800)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x3}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000008c0)={0x0, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @multicast1}, 0x208, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)='veth1_virt_wifi\x00', 0x2, 0xffffffffffffff68, 0xfff}) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000940)={{0x4, @rand_addr=0x64010100, 0x4e21, 0x4, 'wrr\x00', 0x3c, 0x7fff, 0x29}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x4, 0x100, 0x7, 0x8}}, 0x44) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000009c0), 0x50141, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000a00)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x80, 0x0, 0x0, 0x0, 0x800, 0x0, 0x9, 0xffffffffffff0001, 0x8000}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000b00)={'erspan0\x00', &(0x7f0000000a80)={'syztnl0\x00', r2, 0x80, 0x80, 0x8, 0x1, {{0x17, 0x4, 0x1, 0x8, 0x5c, 0x68, 0x0, 0x56, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0xc, 0xaa, 0x0, 0x0, [0x40000000, 0x8]}, @noop, @timestamp={0x44, 0x20, 0x27, 0x0, 0x9, [0x0, 0x6, 0x400, 0x994d, 0x7f, 0x9, 0xfff]}, @timestamp={0x44, 0x10, 0x6a, 0x0, 0x5, [0x2, 0x0, 0x4]}, @generic={0x7, 0xa, "b3a89710a2bea2a6"}]}}}}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40), 0x412500, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000b80)={0x40, 0x5, 0x0, 0x4, "86fe4b4c5008ce93b449ed72390ee79eea6ebb6b299e47dd5476e22f94aa4317"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000d80)={'tunl0\x00', &(0x7f0000000c40)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0x401, 0x3, {{0x46, 0x4, 0x0, 0x8, 0x118, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x74, 0x1, 0x7, [{@multicast1, 0x2}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x29, 0x2, [{0x6, 0x3, "b9"}, {0x1, 0x10, "98339b8c308dfcaf5d7b0f341117"}, {0x2, 0x10, "fbd069f2d841c43802a8476d3443"}]}, @timestamp_prespec={0x44, 0x3c, 0x68, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@remote, 0x7}, {@rand_addr=0x64010101, 0x101}, {@empty}, {@empty, 0x88}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x40}, {@local}]}, @lsrr={0x83, 0x27, 0x21, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, @private=0x3, @rand_addr=0x64010102, @multicast1, @local, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x3c, 0xcd, 0x3, 0x0, [{@remote, 0x4}, {@private=0xa010101, 0x1ff}, {@multicast2, 0x6}, {@local, 0x8}, {@private=0xa010100, 0x7fffffff}, {@empty, 0x32a}, {@multicast2, 0x120a}]}, @lsrr={0x83, 0x3, 0xee}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0xef, [@rand_addr=0x64010100, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x36}]}, @rr={0x7, 0xf, 0x88, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2]}]}}}}}) 19:50:02 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x90) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c00) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x52}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a000}, 0x40000) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x74}}, 0x5c17c7fc2d1613ac) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x540000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x2b}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48014}, 0x40) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xabe5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc811}, 0x4) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4814) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x50, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000810}, 0xc004) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r6, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x40000) 19:50:02 executing program 5: sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x40}}, 0x4000855) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3e}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}}, 0x64040854) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "7ea541079b4f0290551c8d2e038dad041df6709ce20aed6081b8c264b0a4c8aa"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6f9}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20040890) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r2, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xf1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000011) r6 = socket$inet(0x2, 0x2, 0xa83a) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@empty, @in=@remote, 0x5, 0x0, 0x4e21, 0x5a, 0x2, 0x20, 0xa0, 0x11}, {0x3c, 0x80000000, 0x100000000, 0x1, 0x3, 0x3, 0x3, 0x1}, {0xfffffffffffffffe, 0x5, 0x7, 0x4}, 0xbabc, 0x6e6bb6, 0x2, 0x0, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0xd5}, 0xa, @in=@local, 0x3502, 0x3, 0x0, 0x4d, 0x6, 0x0, 0x10001}}, 0xe8) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000c80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x6c, r7, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40801}, 0x40010) 19:50:02 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004840) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x154, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9b}, {0x6, 0x11, 0x1000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf0e}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x401}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0xfff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x8}}]}, 0x154}}, 0x24000085) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x38}}, 0x805) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000007}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40080a}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x100) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, r7, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040105}, 0x24048810) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r5) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000cc0)={'\x00', 0x1, 0x7ff, 0x7, 0x5, 0x4, 0xffffffffffffffff}) 19:50:02 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x32b) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x9) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0xdc, [0x7, 0x800, 0x0, 0x0, 0x1, 0x20], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/220}, &(0x7f0000000240)=0x78) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000002c0)={0x3}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xbb}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private0, @in=@local}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000580)) r5 = syz_open_dev$evdev(&(0x7f00000005c0), 0xff, 0x10023) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000600)=""/218) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7) r6 = syz_open_dev$evdev(&(0x7f0000000700), 0x7fff, 0x204000) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000000740)={0x2, 0x1, 0x4, 0x7fff, 0x6, 0x1}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0x100, 0x0, 0x809, 0x1, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x88, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x80001}, 0x20884) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000}, 0x20000000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x111, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c850}, 0x800) [ 111.810654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.817697] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.820979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.827788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.836868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.881702] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.889402] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.891380] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.893871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.900160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.902661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.911507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.914779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.920102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.920592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.990433] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.031665] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 112.034378] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.036964] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 112.039775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.041497] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.047844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 112.050746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.053971] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.058372] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 112.064876] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 112.081823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 112.085069] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 112.087508] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 112.092317] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.095775] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.097147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.100885] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.108974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.109865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.135550] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.141758] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.142469] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.157930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.162847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.891831] Bluetooth: hci0: command tx timeout [ 114.019911] Bluetooth: hci1: command tx timeout [ 114.019981] Bluetooth: hci2: command tx timeout [ 114.147359] Bluetooth: hci7: command tx timeout [ 114.148583] Bluetooth: hci6: command tx timeout [ 114.211367] Bluetooth: hci3: command tx timeout [ 114.276620] Bluetooth: hci4: command tx timeout [ 114.277579] Bluetooth: hci5: command tx timeout [ 115.940787] Bluetooth: hci0: command tx timeout [ 116.067456] Bluetooth: hci2: command tx timeout [ 116.068316] Bluetooth: hci1: command tx timeout [ 116.196343] Bluetooth: hci6: command tx timeout [ 116.197336] Bluetooth: hci7: command tx timeout [ 116.259373] Bluetooth: hci3: command tx timeout [ 116.325289] Bluetooth: hci4: command tx timeout [ 116.325373] Bluetooth: hci5: command tx timeout [ 117.987429] Bluetooth: hci0: command tx timeout [ 118.116426] Bluetooth: hci1: command tx timeout [ 118.116924] Bluetooth: hci2: command tx timeout [ 118.243316] Bluetooth: hci7: command tx timeout [ 118.243408] Bluetooth: hci6: command tx timeout [ 118.307934] Bluetooth: hci3: command tx timeout [ 118.371337] Bluetooth: hci4: command tx timeout [ 118.371479] Bluetooth: hci5: command tx timeout [ 120.036022] Bluetooth: hci0: command tx timeout [ 120.164339] Bluetooth: hci2: command tx timeout [ 120.164776] Bluetooth: hci1: command tx timeout [ 120.291332] Bluetooth: hci6: command tx timeout [ 120.292578] Bluetooth: hci7: command tx timeout [ 120.355975] Bluetooth: hci3: command tx timeout [ 120.419489] Bluetooth: hci4: command tx timeout [ 120.420463] Bluetooth: hci5: command tx timeout [ 174.131893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.133284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.135543] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.138642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.140742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.304785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.308313] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.310075] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.313110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.332762] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.340910] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.342555] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.344001] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.346808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.349798] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.351590] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.353546] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.355286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.361051] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.362810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.366628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.368163] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.374010] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.374097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.380892] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.387699] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.393084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.433083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.442105] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.445633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.454771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.457625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.482728] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.489137] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.500543] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.622993] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.644736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.716927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.766869] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.818732] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.163752] Bluetooth: hci0: command tx timeout [ 176.419391] Bluetooth: hci7: command tx timeout [ 176.547763] Bluetooth: hci2: command tx timeout [ 176.547947] Bluetooth: hci1: command tx timeout [ 176.549662] Bluetooth: hci3: command tx timeout [ 176.611334] Bluetooth: hci5: command tx timeout [ 176.611881] Bluetooth: hci4: command tx timeout [ 177.059677] Bluetooth: hci6: command tx timeout [ 178.214308] Bluetooth: hci0: command tx timeout [ 178.467350] Bluetooth: hci7: command tx timeout [ 178.595592] Bluetooth: hci1: command tx timeout [ 178.596367] Bluetooth: hci3: command tx timeout [ 178.596855] Bluetooth: hci2: command tx timeout [ 178.659653] Bluetooth: hci5: command tx timeout [ 178.660157] Bluetooth: hci4: command tx timeout [ 179.107550] Bluetooth: hci6: command tx timeout [ 180.260381] Bluetooth: hci0: command tx timeout [ 180.516397] Bluetooth: hci7: command tx timeout [ 180.643349] Bluetooth: hci2: command tx timeout [ 180.643852] Bluetooth: hci3: command tx timeout [ 180.644615] Bluetooth: hci1: command tx timeout [ 180.707534] Bluetooth: hci4: command tx timeout [ 180.708029] Bluetooth: hci5: command tx timeout [ 181.157307] Bluetooth: hci6: command tx timeout [ 182.307315] Bluetooth: hci0: command tx timeout [ 182.564566] Bluetooth: hci7: command tx timeout [ 182.691390] Bluetooth: hci1: command tx timeout [ 182.691902] Bluetooth: hci3: command tx timeout [ 182.692683] Bluetooth: hci2: command tx timeout [ 182.757512] Bluetooth: hci5: command tx timeout [ 182.758028] Bluetooth: hci4: command tx timeout [ 183.203446] Bluetooth: hci6: command tx timeout [ 236.410762] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.414884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.417881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.424964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.432593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.468024] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.478078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.480797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.486028] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.489006] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.495850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.534820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.539901] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.557954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.571104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.612957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.616207] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.620789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.627047] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.634507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.663995] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.689589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.691122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.698183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.703758] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.771864] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.790270] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.806564] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.810068] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.810859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.814776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.818529] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.819999] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.823749] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.839501] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.853758] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.865657] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 236.869894] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.878603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.895881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.500319] Bluetooth: hci0: command tx timeout [ 238.564326] Bluetooth: hci1: command tx timeout [ 238.627862] Bluetooth: hci2: command tx timeout [ 238.819751] Bluetooth: hci4: command tx timeout [ 238.820592] Bluetooth: hci3: command tx timeout [ 238.947787] Bluetooth: hci7: command tx timeout [ 238.948474] Bluetooth: hci5: command tx timeout [ 239.907740] Bluetooth: hci6: command tx timeout [ 240.547305] Bluetooth: hci0: command tx timeout [ 240.613317] Bluetooth: hci1: command tx timeout [ 240.675362] Bluetooth: hci2: command tx timeout [ 240.867502] Bluetooth: hci4: command tx timeout [ 240.867961] Bluetooth: hci3: command tx timeout [ 240.995430] Bluetooth: hci7: command tx timeout [ 240.995883] Bluetooth: hci5: command tx timeout [ 241.955337] Bluetooth: hci6: command tx timeout [ 242.595373] Bluetooth: hci0: command tx timeout [ 242.659371] Bluetooth: hci1: command tx timeout [ 242.724580] Bluetooth: hci2: command tx timeout [ 242.916344] Bluetooth: hci4: command tx timeout [ 242.916845] Bluetooth: hci3: command tx timeout [ 243.043397] Bluetooth: hci5: command tx timeout [ 243.043865] Bluetooth: hci7: command tx timeout [ 244.003665] Bluetooth: hci6: command tx timeout [ 244.643311] Bluetooth: hci0: command tx timeout [ 244.707437] Bluetooth: hci1: command tx timeout [ 244.773286] Bluetooth: hci2: command tx timeout [ 244.963444] Bluetooth: hci4: command tx timeout [ 244.963938] Bluetooth: hci3: command tx timeout [ 245.091817] Bluetooth: hci5: command tx timeout [ 245.092345] Bluetooth: hci7: command tx timeout [ 246.051435] Bluetooth: hci6: command tx timeout [ 298.690168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.693838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.696381] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.706883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.713746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.869693] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.875964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.879342] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.887686] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.894030] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.954088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.977121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.991696] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.015025] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.025633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.037479] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.040917] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.046939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.093191] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.097862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.158178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.171916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.174769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.197747] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.250964] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.254702] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.258841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.266136] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.273636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.291554] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.390085] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.403817] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.414844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.430700] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.457555] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.497740] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.497823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.511072] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.559730] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.574676] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.771633] Bluetooth: hci0: command tx timeout [ 300.963374] Bluetooth: hci1: command tx timeout [ 301.091347] Bluetooth: hci2: command tx timeout [ 301.220366] Bluetooth: hci3: command tx timeout [ 301.347368] Bluetooth: hci4: command tx timeout [ 301.348888] Bluetooth: hci5: command tx timeout [ 301.603440] Bluetooth: hci6: command tx timeout [ 301.732102] Bluetooth: hci7: command tx timeout [ 302.819325] Bluetooth: hci0: command tx timeout [ 303.012412] Bluetooth: hci1: command tx timeout [ 303.139366] Bluetooth: hci2: command tx timeout [ 303.268280] Bluetooth: hci3: command tx timeout [ 303.395522] Bluetooth: hci5: command tx timeout [ 303.396019] Bluetooth: hci4: command tx timeout [ 303.651333] Bluetooth: hci6: command tx timeout [ 303.779373] Bluetooth: hci7: command tx timeout [ 304.867627] Bluetooth: hci0: command tx timeout [ 305.059307] Bluetooth: hci1: command tx timeout [ 305.188275] Bluetooth: hci2: command tx timeout [ 305.315509] Bluetooth: hci3: command tx timeout [ 305.443345] Bluetooth: hci4: command tx timeout [ 305.443839] Bluetooth: hci5: command tx timeout [ 305.699734] Bluetooth: hci6: command tx timeout [ 305.827466] Bluetooth: hci7: command tx timeout [ 306.915547] Bluetooth: hci0: command tx timeout [ 307.108379] Bluetooth: hci1: command tx timeout [ 307.235466] Bluetooth: hci2: command tx timeout [ 307.363351] Bluetooth: hci3: command tx timeout [ 307.491489] Bluetooth: hci5: command tx timeout [ 307.491990] Bluetooth: hci4: command tx timeout [ 307.747310] Bluetooth: hci6: command tx timeout [ 307.875320] Bluetooth: hci7: command tx timeout [ 361.537080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.544350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.547905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.557194] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.565891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.925790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.932877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.935053] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.941724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.948935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.965761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.975832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.980132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.007659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.013910] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.097731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.106019] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.108930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.114851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.120013] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.193956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.227988] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.242398] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.244744] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.257006] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.262158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.267774] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.301706] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.326936] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.337189] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.355867] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.360685] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.370669] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.377289] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 362.382126] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.406684] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.408593] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 362.422780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 362.477562] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 362.487740] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.619794] Bluetooth: hci0: command tx timeout [ 364.068556] Bluetooth: hci2: command tx timeout [ 364.068830] Bluetooth: hci1: command tx timeout [ 364.196315] Bluetooth: hci3: command tx timeout [ 364.452650] Bluetooth: hci4: command tx timeout [ 364.579575] Bluetooth: hci7: command tx timeout [ 364.580744] Bluetooth: hci6: command tx timeout [ 364.708380] Bluetooth: hci5: command tx timeout [ 365.667404] Bluetooth: hci0: command tx timeout [ 366.117470] Bluetooth: hci2: command tx timeout [ 366.117642] Bluetooth: hci1: command tx timeout [ 366.244983] Bluetooth: hci3: command tx timeout [ 366.500557] Bluetooth: hci4: command tx timeout [ 366.629480] Bluetooth: hci6: command tx timeout [ 366.629968] Bluetooth: hci7: command tx timeout [ 366.758581] Bluetooth: hci5: command tx timeout [ 367.716415] Bluetooth: hci0: command tx timeout [ 368.163462] Bluetooth: hci1: command tx timeout [ 368.164095] Bluetooth: hci2: command tx timeout [ 368.291285] Bluetooth: hci3: command tx timeout [ 368.547566] Bluetooth: hci4: command tx timeout [ 368.676759] Bluetooth: hci7: command tx timeout [ 368.677056] Bluetooth: hci6: command tx timeout [ 368.804406] Bluetooth: hci5: command tx timeout [ 369.765257] Bluetooth: hci0: command tx timeout [ 370.211402] Bluetooth: hci2: command tx timeout [ 370.211980] Bluetooth: hci1: command tx timeout [ 370.339384] Bluetooth: hci3: command tx timeout [ 370.597327] Bluetooth: hci4: command tx timeout [ 370.723909] Bluetooth: hci7: command tx timeout [ 370.724295] Bluetooth: hci6: command tx timeout [ 370.852427] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 19:55:03 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff888027adfdc0 RCX=0000000000000001 RDX=ffff888027ae0001 RSI=ffff888027adfd90 RDI=ffff88806ce08a88 RBP=ffff888027ad8000 RSP=ffff88806ce08a08 R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b67d R11=00000000000282f3 R12=ffff88806ce08a01 R13=ffff88806ce08ac0 R14=ffff888027adfd90 R15=ffff88806ce08a78 RIP=ffffffff81353f1e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa5f1149008 CR3=0000000032335000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88806cf08b10 RCX=ffffffff813560fe RDX=ffffed100d9e115d RSI=0000000000000070 RDI=ffff88806cf08a78 RBP=ffff88806cf08a78 RSP=ffff88806cf08a08 R8 =0000000000000001 R9 =ffffed100d9e115c R10=ffff88806cf08ae7 R11=0000000000000000 R12=0000000000000070 R13=0000000000000000 R14=ffff8880359eb700 R15=ffff88806cf08a78 RIP=ffffffff81aef586 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc2f73a98e0 CR3=0000000026438000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000