Warning: Permanently added '[localhost]:4104' (ECDSA) to the list of known hosts. 2025/05/26 16:15:05 fuzzer started 2025/05/26 16:15:06 dialing manager at localhost:46087 syzkaller login: [ 103.327518] cgroup: Unknown subsys name 'net' [ 103.467004] cgroup: Unknown subsys name 'cpuset' [ 103.512793] cgroup: Unknown subsys name 'rlimit' 2025/05/26 16:15:29 syscalls: 201 2025/05/26 16:15:29 code coverage: enabled 2025/05/26 16:15:29 comparison tracing: enabled 2025/05/26 16:15:29 extra coverage: enabled 2025/05/26 16:15:29 setuid sandbox: enabled 2025/05/26 16:15:29 namespace sandbox: enabled 2025/05/26 16:15:29 Android sandbox: enabled 2025/05/26 16:15:29 fault injection: enabled 2025/05/26 16:15:29 leak checking: enabled 2025/05/26 16:15:29 net packet injection: enabled 2025/05/26 16:15:29 net device setup: enabled 2025/05/26 16:15:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/26 16:15:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/26 16:15:29 USB emulation: enabled 2025/05/26 16:15:29 hci packet injection: enabled 2025/05/26 16:15:29 wifi device emulation: enabled 2025/05/26 16:15:29 802.15.4 emulation: enabled 2025/05/26 16:15:29 fetching corpus: 0, signal 0/0 (executing program) 2025/05/26 16:15:30 starting 8 fuzzer processes 16:15:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x996) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x8014) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0xd, 0x6, 0x604, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xe}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048094}, 0x200000c0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040840) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, 0x0, 0x202, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x37}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0xc010}, 0x4010) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x13c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xec, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fdf4732dea79299737650a430b132880030ddd2db300c3a018498c30cb72e864"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0b6fb01c7214f2a8b0b23cb1037439ea"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "73c89bcf615321b1aa9d2bb6a0db35240e3de8099af74697b25f4e9746976b8b"}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6c}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xdb3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6c167042f85c31d02f9c5d2f40725b423feac60058186210cf90043f69890276"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x20008845) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x40880) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) r5 = memfd_secret(0x80000) ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f0000000b80)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, r1, 0x2aa0e409135e5b, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000006}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 16:15:30 executing program 1: r0 = memfd_secret(0x0) read$usbmon(r0, &(0x7f0000000000)=""/54, 0x36) syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x244200) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000000c0)={0x710, 0x1, 0x5, 0x101, 0x0, 0x0, {0x8, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x2}, 0x5, 0x5, 0x7, 0x1, 0x7, 'syz1\x00', "157e70a1119884b2c728c0d11113551d7bcf46f88a76c8e2820a243929c770ce", "c355ca4259c4b32700aa23612bed8e73a189ac4ffebfa2febe2debdb08da5e74", [{0xf117, 0x0, {0x2, 0xe2}}, {0x3ff, 0x0, {0x0, 0x1}}, {0xffff, 0xff, {0x3, 0x4}}, {0x802d, 0x8000, {0x0, 0xde5}}, {0x2, 0xfffb, {0x1}}, {0x5, 0x0, {0x2, 0x6}}, {0x7, 0xb15, {0x3, 0x1}}, {0x2, 0x0, {0x3, 0xfff}}, {0x9, 0xff, {0x0, 0xa47b}}, {0x9, 0x1, {0x3, 0x8}}, {0x4, 0x0, {0x1, 0x7ff}}, {0xfffd, 0x6, {0x3, 0x10001}}, {0x4, 0x5, {0x0, 0x20}}, {0x205d, 0x6, {0x1, 0xb4}}, {0xffff, 0x0, {0x3, 0xb0}}, {0xe21, 0x8, {0x0, 0x40}}, {0x2, 0x5}, {0x7ff, 0x1, {0x1, 0xfffffffd}}, {0x2, 0x8, {0x0, 0x3}}, {0x8, 0x81, {0x3}}, {0xff80, 0xfff, {0x2, 0x7}}, {0x7ff, 0xffff, {0x1, 0x1}}, {0x72, 0x9, {0x1, 0xffff}}, {0xfb7f, 0x3, {0x1, 0x7}}, {0x20, 0x2, {0x0, 0x7fffffff}}, {0x7f, 0xfffb, {0x1, 0x7f}}, {0xfff, 0xa8, {0x0, 0x1}}, {0x8, 0x3, {0x3, 0x80}}, {0xbdf, 0x1, {0x1, 0x81}}, {0x1f, 0x5, {0x0, 0xe4}}, {0x4, 0x1000, {0x0, 0x20}}, {0x6, 0x5, {0x3, 0xff}}, {0x1, 0x0, {0x3}}, {0x8, 0x8, {0x1, 0x9}}, {0x8000, 0x400, {0x0, 0x9}}, {0x0, 0x6, {0x1, 0x1}}, {0x1, 0x6, {0x0, 0x200}}, {0xae18, 0x8, {0x0, 0xffff}}, {0x80, 0x6, {0x1, 0x4}}, {0xd383, 0x5, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x81, 0x1, 0x2, 0x7, 0x16, 'syz1\x00', "4d89bb549145918c49ef4dd5db9757bcd24410b084bda96155c8912a8ac79670", "58164d9815a32095d03d2046d627333b993a8390f541539f6dbc8244229a7375", [{0xc00, 0x5, {0x0, 0x3f}}, {0xa18, 0x2, {0x3, 0x1ff}}, {0x7fff, 0x7, {0x3, 0x5}}, {0x200, 0x2079, {0x1, 0x81}}, {0x87, 0x2, {0x1, 0x8000}}, {0x100, 0x7, {0x1, 0x8000}}, {0x1, 0x6, {0x3, 0x5}}, {0x9, 0x3ff, {0x2, 0xfffeffff}}, {0x101, 0x3, {0x3, 0x7ff}}, {0x8001, 0x3, {0x1, 0x1688}}, {0x534, 0x3, {0x2, 0x20}}, {0x2, 0x81, {0x1, 0x5}}, {0x1, 0x9, {0x1, 0xffffffff}}, {0x1, 0x5, {0x0, 0xffffffff}}, {0x91f9, 0x400, {0x1, 0x72e}}, {0x3, 0xff, {0x2, 0x8}}, {0x9, 0x1, {0x2, 0x8000}}, {0xffff, 0x1, {0x2}}, {0xa, 0x7, {0x3, 0x8}}, {0xe76, 0x8000, {0x2, 0x3}}, {0x8, 0x1ff, {0x1, 0x1}}, {0xfa3, 0x7, {0x2, 0x1}}, {0x8, 0xffff, {0x3, 0x3}}, {0x400, 0x3, {0x0, 0x2}}, {0x81, 0x8, {0x0, 0x8}}, {0x800, 0x5, {0x0, 0x6}}, {0x0, 0x4, {0x1, 0x8}}, {0x561f, 0x8, {0x1, 0x8}}, {0xfff, 0x2, {0x0, 0x3f}}, {0x1000, 0x2, {0x3, 0x5}}, {0xffff, 0x3, {0x3, 0x80000000}}, {0x5, 0x2, {0x1, 0x5}}, {0x60fe, 0x1, {0x0, 0x4}}, {0xb8, 0x3}, {0x1, 0x2, {0x0, 0x8000}}, {0x8, 0x9, {0x2, 0x2}}, {0x8, 0x1, {0x1, 0x40}}, {0x9, 0x8001, {0x1}}, {0x9, 0x800, {0x3}}, {0x9, 0x7ddb, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x37f671079f17583b, 0x1}, 0x4, 0x9, 0xffff, 0xe6, 0x1d, 'syz0\x00', "b9bc4a4890603f0bfff515c2353149c54dc9e0385ca001736f464f9d72608eb7", "e98cccc3b853374b5c286f0423c5159ecde28309fee0b25d777a757cf549a772", [{0x2, 0x6, {0x2, 0xfffffffb}}, {0x7f, 0xff, {0x2}}, {0x6, 0x7ff, {0x1, 0x100}}, {0x3, 0x8, {0x1, 0x5}}, {0x8, 0x8, {0x1}}, {0x100, 0x2b0, {0x1, 0x4}}, {0x0, 0x1000, {0x2, 0x6}}, {0x101, 0xa45, {0x2, 0x6a4a}}, {0x1, 0x3, {0x3, 0x1}}, {0x8, 0x0, {0x2, 0x9}}, {0x1, 0xca5, {0x1, 0x5}}, {0x200, 0x2, {0x0, 0x6}}, {0x1, 0x0, {0x2, 0xfffffffb}}, {0x3ff, 0x9, {0x1, 0x7ff}}, {0x64, 0xb, {0x1, 0x1}}, {0x401, 0x81, {0x3, 0x7f}}, {0x2, 0x1}, {0x4, 0x9, {0x2, 0x101}}, {0x5, 0x8000, {0x0, 0x8}}, {0xaf, 0x0, {0x3, 0x9}}, {0x6, 0xa, {0x0, 0x9}}, {0x0, 0x4, {0x0, 0xc17}}, {0x0, 0x3, {0x2, 0x6}}, {0x1ff, 0x6, {0x1, 0x8}}, {0x8, 0xcea, {0x2, 0x7}}, {0x6, 0x8, {0x3, 0x1ff}}, {0x0, 0x9, {0x0, 0x400}}, {0xff, 0xca97, {0x1, 0x3}}, {0x200, 0x3, {0x2, 0x800}}, {0x6, 0x8, {0x3, 0x800}}, {0x6, 0x4, {0x3, 0x3}}, {0x4, 0x7, {0x0, 0x7}}, {0x6, 0x6, {0x1, 0x2}}, {0x424, 0x101, {0x3, 0x40000}}, {0x5, 0x1be3, {0x0, 0x1ff}}, {0x7f, 0x20, {0x2, 0x7fff}}, {0xffff, 0x2, {0x0, 0x5}}, {0x7f, 0x9, {0x3, 0x1}}, {0x7f, 0x3, {0x2, 0xc30}}, {0xfffd, 0x7f, {0x2, 0x6}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000400}, 0x801) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x101) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000320}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8b}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000) write$vga_arbiter(r0, &(0x7f0000000ac0)=@target={'target ', {'PCI:', '13', ':', '18', ':', '10', '.', '9'}}, 0x16) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b00), 0x40, 0x0) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) r3 = memfd_secret(0x0) read$usbmon(r3, &(0x7f0000000b40)=""/146, 0x92) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004855}, 0x40080) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x100000001) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x120, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ce39b2588928bd7ec8eea3dee273a2de646d8004d4e7a6882df6f0773fcf7e55"}]}, @NL802154_ATTR_SEC_KEY={0xac, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "307f334f196fc49d43113ec7a0e32c96"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e0cd453fed14b58f56985857661b9045f3001423f1e9bb2adb1460ea7ebca77b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6c7c40ad24704d4e6dca787a4e4e9c061c65487ed7bacd60835bbe3b289d7456"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1f30d5601eac5ab1d8117b137693d4690cf41fca0fd217612768bedc2ff3f170"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8}, 0x1) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000001040)={&(0x7f0000000f80), &(0x7f0000000fc0)=""/126, 0x7e}) 16:15:31 executing program 2: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000000)="1f3b6b87f94c1e0b3b16ce46a717df5b83c45c7e5a57966119f49a12b62d817579a92abf39984e4ce534e8172d2153a74f94ef3e302a69b72577b39d0fef9c89bd17e6cb34bd8b82909c8c97f763f2b901bb47ed9c862807501f183aca04dc7566cef157c3039c4a4793dfca342a632214f928a3f134e8a2422a7f4b83e662e0ed23986adbd4ddbfb9d4ef8c4c7f8b35fb63c8fa5f4a6617e2d4a3") ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x2, 0x6, "513b8d", 0x5f, 0x4}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)={0x10001, [0x80000000, 0xffffffff], 0x200}, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1, @read_auth_payload_to={{0xc7b, 0x2}, {0xc9}}}, 0x6) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000200)=0x9018, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x24201, 0x0) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0x3}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000300)=0x1, 0x4) write$bt_hci(r2, &(0x7f0000000340)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc8, 0x3, 0x64}}}, 0xa) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000380)={0x4}) openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) timer_gettime(0x0, &(0x7f0000000400)) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000500)={{0x77359400}, {0x77359400}}, &(0x7f0000000540)) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x2, 0x7, 0x201, 0x0, 0x0, {0x9, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffc00}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x59a8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x811}, 0x40000c0) [ 127.902241] audit: type=1400 audit(1748276131.033:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:15:31 executing program 3: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) clock_gettime(0x1, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)=0xff, 0x4) r1 = semget$private(0x0, 0x0, 0x100) semtimedop(r1, &(0x7f00000000c0)=[{0x0, 0x8000}, {0x4, 0x6a6e, 0x800}, {0x1, 0x3, 0x1000}, {0x4, 0x1, 0x800}], 0x4, &(0x7f0000000100)={0x0, 0x989680}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000240)="9b2c17f6dc28e336c5c0851e031d176d52f433fd296b1aa1d22712dc38c725218859a314be32f969e76d2ff35b103b") r2 = memfd_secret(0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xfffffffffffffffe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x1f4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xffffffff}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x20}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x4000) semtimedop(r1, &(0x7f0000000500)=[{0x0, 0x9, 0x1000}], 0x1, &(0x7f0000000540)={0x77359400}) r4 = semget(0x0, 0x3, 0x260) semctl$IPC_INFO(r4, 0x3, 0x3, &(0x7f0000000580)=""/173) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x8000, 0x0) getrandom(&(0x7f0000000880)=""/37, 0x25, 0x3) 16:15:31 executing program 4: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000080)=r0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000100)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x2}, 0x4, 0x8, 0x6, 0x7b3, 0x22, 'syz1\x00', "390a66f45d19ca4d431dbd50cc3de027a825a652cf4c8281bb6e999b7a482ab7", "babf4d71af25b01d3e43092b82ef544be35be9486f0922ec72bfe050a4faf6df", [{0x7, 0x874, {0x2}}, {0x4, 0x20, {0x3, 0x4}}, {0x9, 0x101, {0x2, 0x1}}, {0x8, 0x9, {0x0, 0xff}}, {0xd8, 0x4, {0x0, 0x8001}}, {0x7, 0x0, {0x2, 0x5}}, {0x5, 0x2, {0x3, 0xffffffff}}, {0x873, 0x3ff, {0x3, 0x4}}, {0x9b9e, 0x7f, {0x2, 0x100}}, {0x1, 0xf800, {0x2, 0x6}}, {0x7ff, 0x990, {0x2, 0x1}}, {0x3, 0x0, {0x3, 0x2}}, {0x5ee7, 0x9, {0x1, 0x7}}, {0x6e4, 0x0, {0x2, 0xffffffc1}}, {0x3, 0x80, {0x0, 0x6}}, {0x3, 0x0, {0x3, 0x9}}, {0xfff7, 0x2, {0x0, 0x3f}}, {0x0, 0x40}, {0x4080, 0x40, {0x2, 0x5}}, {0x1ff, 0xffc0, {0x1, 0x7}}, {0x2, 0x9, {0x3, 0x9}}, {0x3f5, 0x5, {0x3, 0x1}}, {0x38, 0x6, {0x1, 0x3}}, {0xff00, 0x0, {0x1, 0xc30}}, {0xfb, 0x2, {0x3, 0x1}}, {0x80, 0xffff, {0x1}}, {0x5, 0x8, {0x2, 0x8d}}, {0x1, 0x100, {0x3, 0x800}}, {0x3ff, 0x8, {0x3, 0x6}}, {0x7, 0xefac, {0x3, 0x4}}, {0x2, 0x7ff, {0x0, 0x3}}, {0x1, 0x9fdc, {0x3, 0x8}}, {0x6, 0x800}, {0xb7f, 0x6, {0x2, 0xed3d}}, {0xc84a, 0xfffc, {0x2, 0x5e9}}, {0x5, 0xaae4, {0x0, 0x5}}, {0x9, 0x90, {0x3, 0x10001}}, {0x22, 0x100, {0x1}}, {0x400, 0x36, {0x0, 0x7}}, {0x2, 0x4210, {0x3, 0x10001}}]}}}, {{0x254, 0x1, {{0x0, 0xa8ad}, 0x1, 0x1, 0x8001, 0x6, 0x16, 'syz1\x00', "a269a59854baf00a83652cfb761aae3902a62684afce092cfec68c52c812ebda", "e4e42210557b7ba291ffe20d6911aa4ac50003db50536f0a099181d923c880d0", [{0xffff, 0x1ff, {0x3, 0x3}}, {0x6, 0x4, {0x0, 0x7fffffff}}, {0xf4, 0xf09, {0x2, 0x7f}}, {0x7ff, 0x90, {0x0, 0x1}}, {0xff, 0x6, {0x0, 0x6}}, {0x7f, 0x4, {0x2, 0x353a}}, {0x8, 0x0, {0x2, 0x1}}, {0xff81, 0xea, {0x2, 0x5}}, {0x5, 0x6fb, {0x1, 0x4}}, {0xe8c, 0x6c3, {0x3, 0x2}}, {0x81, 0x3, {0x0, 0x7f}}, {0x81, 0x4, {0x3, 0x1f}}, {0xfeff, 0x1000, {0x1, 0x6}}, {0x0, 0x6, {0x1, 0x5}}, {0x0, 0x7, {0x2, 0xffffb015}}, {0x8, 0xed, {0x2, 0x20}}, {0x9, 0x4, {0x3, 0x80000000}}, {0xf049, 0x2, {0x3, 0x6}}, {0x2, 0x100, {0x3, 0x5}}, {0x7, 0x7, {0x2, 0x1}}, {0x4e8, 0x8, {0x1, 0x1000}}, {0x3ff, 0x100, {0x3}}, {0x7fff, 0xc0, {0x1, 0x8000}}, {0x5, 0x8f, {0x0, 0x1}}, {0xfff8, 0x4, {0x2, 0x9}}, {0x80, 0x80, {0x2, 0x6}}, {0x6, 0x0, {0x3, 0x800}}, {0x59e, 0x9400, {0x3, 0x1}}, {0x40, 0x97a1, {0x2, 0x2}}, {0x1, 0x9, {0x0, 0x6}}, {0x4, 0x1f, {0x1, 0x8}}, {0x2, 0x1, {0x3, 0x10001}}, {0x3, 0xfff8, {0x1, 0xc69}}, {0x20, 0x2, {0x0, 0xd93d}}, {0x7e7, 0x1, {0x2, 0x6}}, {0xb1, 0x3f43, {0x0, 0x8000}}, {0x6, 0x0, {0x3, 0x2}}, {0x2, 0x9, {0x0, 0x4}}, {0x400, 0xfff7, {0x2, 0xdd2}}, {0x0, 0x4, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0xfffffffe}, 0x89, 0x8, 0x6c0, 0x7, 0x16, 'syz0\x00', "463f04fa2c9738255c27887db955d57847e42b9df9c243a9a875ab5d2a499ff4", "fb64f24e6b84c535ca5bde6d71559b88fd185dd5616ce0022d8c590e527d943f", [{0xa000, 0x5, {0x0, 0x6}}, {0x2, 0x6, {0x0, 0x7}}, {0x5, 0xc0d, {0x0, 0x7f}}, {0x9, 0x3ff, {0x1, 0x8001}}, {0x0, 0x5, {0x1, 0x1}}, {0x8000, 0x7fff, {0x1, 0x3f}}, {0x7, 0x80, {0x2, 0x7}}, {0x8, 0x5, {0x3, 0x4}}, {0x7, 0xa436, {0x2, 0x7f}}, {0x257, 0x0, {0x1, 0x6}}, {0x5, 0x8, {0x1, 0x200}}, {0x1, 0xe9d, {0x2, 0x61e4}}, {0x3ff, 0x0, {0x0, 0x5}}, {0x4, 0x30de, {0x1, 0x7}}, {0x6, 0xffff, {0x1, 0xa0}}, {0x9258, 0x1, {0x3}}, {0x20, 0x1, {0x3, 0x3}}, {0x81, 0x3, {0x3, 0x4}}, {0x6, 0x101, {0x2, 0x8}}, {0x2, 0x0, {0x3, 0x4}}, {0x24, 0x0, {0x0, 0xf14}}, {0x800, 0x0, {0x2, 0x7}}, {0xd3, 0x6, {0x0, 0x2}}, {0x7, 0x2e, {0x0, 0x5}}, {0x3, 0x8000, {0x1, 0x2}}, {0x7, 0x100, {0x1, 0x1c83}}, {0x3, 0x7fd7, {0x2}}, {0x9, 0xbc, {0x2, 0xff}}, {0x0, 0x7, {0x1, 0x1}}, {0x7fff, 0x2, {0x2, 0x400}}, {0x9, 0x0, {0x3, 0x71}}, {0x8, 0x100, {0x0, 0x1}}, {0x2, 0xe8c, {0x3, 0x78c}}, {0xf52, 0x8, {0x0, 0x81}}, {0x1, 0x8, {0x0, 0x80}}, {0x9, 0x1, {0x2, 0x99}}, {0xfff7, 0xc7f, {0x0, 0x1ff}}, {0x4, 0x7, {0x3, 0x6}}, {0x3, 0x3, {0x3}}, {0x7, 0x1, {0x0, 0xe4}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0xaa, 0x1, 0x3ff, 0x8, 0x4, 'syz0\x00', "8aaec142e3bf542665c51750cbc2861a0290d3dba0e9a6a056301ea1b1c72071", "3597aa291fdaf7453e3c5248716a7ae2cf9b00a6b7686bc18e5e5d1c78613522", [{0x2, 0x0, {0x0, 0x6}}, {0x8000, 0x5, {0x0, 0x1000}}, {0x3ff, 0x4, {0x1, 0x800}}, {0x81, 0x0, {0x2, 0xffffffff}}, {0x884f, 0x7, {0x0, 0x3}}, {0x7, 0x7fff, {0x0, 0x7}}, {0x1, 0x7, {0x2, 0x408}}, {0x6, 0x101, {0x1, 0x49}}, {0xd9, 0x2, {0x2, 0x6}}, {0x2, 0xffc1, {0x3, 0xfffffff7}}, {0xf9, 0x6, {0x0, 0x7f42}}, {0x6, 0x200, {0x2, 0x2}}, {0x100, 0x6, {0x3, 0xd4c3}}, {0x29, 0x3, {0x1, 0x1}}, {0x7f, 0x6, {0x0, 0xfff}}, {0x99, 0x7, {0x0, 0xbbb}}, {0x1, 0x6, {0x0, 0xffffff00}}, {0x4, 0x400, {0x0, 0x2}}, {0x7, 0x4, {0x1, 0xfffffffc}}, {0xe8eb, 0x8, {0x1, 0x100}}, {0x3, 0xde40, {0x3, 0x8a5}}, {0x6, 0x2, {0x0, 0xe67}}, {0x7fff, 0xfff, {0x1, 0x7}}, {0xa3, 0x7, {0x0, 0x5}}, {0x7ff, 0xff, {0x3, 0x2}}, {0x4, 0x6ec, {0x2, 0x2}}, {0x8000, 0x5, {0x1, 0x7ff}}, {0x7c, 0xff00, {0x0, 0x8001}}, {0x5, 0x9, {0x3, 0x7}}, {0x3, 0xd9, {0x0, 0x3a9}}, {0x1000, 0x1, {0x0, 0x1}}, {0xdf, 0xffff, {0x3, 0x4}}, {0x7f, 0x5, {0x2, 0xf1}}, {0xe53c, 0x8, {0x3}}, {0x100, 0x100, {0x2, 0xffff}}, {0x3, 0x4, {0x2, 0x2}}, {0x800, 0x9, {0x1, 0x4}}, {0x80, 0x8, {0x1, 0x8}}, {0xffff, 0x6, {0x1, 0x200}}, {0x697, 0xf0c7, {0x0, 0x3}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x11}, 0x4841) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000c80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000f00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x200, r3, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4ff1058d66c66ac643bf8cc024f64b97"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_SEC_KEY={0x1b4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xb0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x856}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa13}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0aed21c137ac5fdf62eb5a76b297baa1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "862c1ffb24a28ff9bf56a7d2a7b4dc97"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9e3286308b00e762b4598f74c2e94f381ece80cc80d4561b72fc7208c043a865"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8720faee8872bdfcb19d5da3d27be093"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7318d1dde4a4cf84dd96c4b063a76b57"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f53eb62f8765e3f05c7247d8e1917e5a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6056ea0309b2f662dee478b1a7be3858"}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3a3d6c5b}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9628}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x10040}, 0x20040000) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000f40), 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000f80)={0x40000004}) openat$zero(0xffffffffffffff9c, &(0x7f0000000fc0), 0x30000, 0x0) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c4}, 0x20000000) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x50, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r6 = syz_open_dev$usbmon(&(0x7f0000001240), 0x40, 0x280) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f00000012c0)={&(0x7f0000001280)=[0x0], 0x1, 0x400}) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x10e37d) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}}, 0x4004) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) 16:15:31 executing program 5: r0 = memfd_secret(0x80000) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000040)) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)=r1) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040891}, 0x4040000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x42180220}, 0xc, &(0x7f0000000280)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x8050}, 0x840) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x101040, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000f80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000380)={0xbb8, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [{{0x254, 0x1, {{0x0, 0xffffff01}, 0xe9, 0x1, 0x6, 0x40, 0xb, 'syz0\x00', "2063c3afceadc724903aecdf41f07ce4028e0134dbf1fa0e4e105e5301e18e74", "72112577c41f595dbc84ad3dd0967b19d945d6fefbd115583bfa16fd00661e6d", [{0x7, 0xaa, {0x2, 0x1}}, {0x3f, 0x4, {0x1, 0x8}}, {0x1000, 0x81, {0x2, 0x1}}, {0xeef7, 0x6, {0x2, 0x6}}, {0x7, 0x7, {0x1, 0xffff}}, {0x2, 0x7, {0x1, 0x2}}, {0x3f, 0x7ea, {0x0, 0x6}}, {0x401, 0xd8b6}, {0x1, 0x0, {0x0, 0x2}}, {0x400, 0x1, {0x0, 0xff}}, {0x8d8, 0x3, {0x3, 0xb60}}, {0x1000, 0x1, {0x2, 0x4}}, {0x0, 0x7fff, {0x3, 0xfff}}, {0x9, 0x81, {0x2, 0x5}}, {0x6, 0x800, {0x2, 0xffffff80}}, {0x2, 0x6, {0x0, 0xfffff800}}, {0x8, 0x0, {0x2, 0x3}}, {0x2, 0x4, {0x1, 0x1ff}}, {0x7, 0x5, {0x2, 0x80}}, {0x2, 0x4, {0x1, 0x4}}, {0x9, 0x4, {0x0, 0x3}}, {0x1, 0x40, {0x3, 0x20}}, {0x40, 0x5, {0xffb99229ac2fe02, 0x5}}, {0x81, 0x1ff, {0x1, 0x80000001}}, {0xa2, 0x1000, {0x1, 0x1}}, {0x4, 0x536, {0x3, 0x10001}}, {0x80, 0x4, {0x1, 0xfffffb30}}, {0x1, 0x3f, {0x1, 0x5}}, {0x800, 0x4e8, {0x3, 0x9}}, {0x8000, 0x7, {0x0, 0x7}}, {0x4, 0x0, {0x2, 0x8}}, {0xff, 0x1000, {0x0, 0x6}}, {0x3, 0x873, {0x3, 0x6}}, {0x8001, 0x6b88, {0x0, 0x7}}, {0x4, 0xc22, {0x1, 0x7fffffff}}, {0x6, 0x5, {0x3, 0xb8}}, {0x3, 0x1ff}, {0x1000, 0x6, {0x3, 0x7}}, {0x7, 0x8, {0x2, 0x4}}, {0xfffa, 0x20, {0x90fc0d3af64445e3, 0x81}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x9, 0x20, 0x400, 0x8, 0xa, 'syz1\x00', "fd3cf85dce598bbc5deab4e70762423f5c747e6ff5eed5ff2d12017ff5c59c38", "9137286c4aaee1ad28019831f0e6fbd45bc96420744228dd68dfac3d161065f2", [{0x400, 0xa499, {0x2, 0x9}}, {0x1f, 0x7, {0x5, 0x1}}, {0xfffb, 0x75c7, {0x2, 0x400}}, {0x5d, 0x3ff, {0x1, 0x5}}, {0x8, 0x40, {0x2, 0x8}}, {0xb4, 0x2, {0x1, 0xaa6}}, {0x9, 0x7fff, {0x0, 0x2}}, {0xfffb, 0x401, {0x2, 0xf46e}}, {0x8, 0x6d8, {0x2, 0x4}}, {0x9, 0x5, {0x3, 0x1f}}, {0x6, 0xaf5, {0x2}}, {0x7f, 0xae14, {0x3, 0x4d}}, {0xbd, 0x6f1, {0x0, 0x6}}, {0x1f, 0xe2, {0x2, 0x3}}, {0x20, 0xaf, {0x1, 0x8}}, {0x81, 0x7, {0x3, 0x8001}}, {0xee, 0x7, {0x0, 0x8}}, {0x9, 0x5, {0x0, 0x6}}, {0x1c0a, 0x6, {0x1, 0x2}}, {0x6, 0xffff, {0x0, 0x3}}, {0x2, 0x8, {0x3, 0x1ff}}, {0x5, 0x1, {0x2, 0x111}}, {0x1cbf, 0x3ff, {0x2, 0x80000001}}, {0x0, 0xfffa, {0x3, 0x5}}, {0xd39, 0x2, {0x2}}, {0x3, 0x4, {0x0, 0x3}}, {0x95, 0x9, {0x0, 0xff}}, {0xe9f, 0x1, {0x0, 0xfff}}, {0x81, 0x7, {0x3, 0x3}}, {0x6, 0x40, {0x0, 0x8}}, {0x7ff, 0x3, {0x1, 0x5}}, {0x8710, 0x41ae, {0x0, 0x7}}, {0x81, 0x1f, {0x0, 0x7fffffff}}, {0x4, 0x5, {0x1, 0x1}}, {0xfff, 0x1, {0x1, 0xffffff1a}}, {0x6000, 0x1, {0x1, 0x4d2}}, {0x100, 0xfff, {0x1, 0x400}}, {0x1, 0x4, {0x3, 0x1}}, {0x7, 0x1, {0x0, 0x6}}, {0x4, 0x3ed, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x3ff}, 0x40, 0x2, 0x2fea, 0x7f, 0x6, 'syz0\x00', "ec3b53cd56c8831d42606c58f30998a6c2567e66c111b956bebff701b6f576df", "4f0abac0e04953f2d7b5c382831785c56d80162bd412aac3540fe0af7e002cec", [{0x1, 0x1, {0x0, 0x4}}, {0x3, 0x3, {0x0, 0xa3}}, {0x0, 0x2, {0x1, 0x6}}, {0x8000, 0x2, {0x0, 0x9}}, {0x1, 0x4}, {0x7, 0x7, {0x0, 0x3ff}}, {0x1f, 0x6, {0x2, 0xfffffffb}}, {0x6, 0x9, {0x1, 0x10000}}, {0x401, 0x7, {0x1, 0x9}}, {0x5, 0x0, {0x1, 0xfaa9}}, {0x2, 0x6, {0x2, 0xfff}}, {0x9, 0x0, {0x2, 0xfffffff9}}, {0x5, 0x6, {0x1, 0x6}}, {0x8, 0x3000, {0x1, 0xfffffbff}}, {0x800, 0x6, {0x3, 0x1f}}, {0x1, 0xe0, {0x1, 0x9b3c}}, {0xffff, 0xe63, {0x3, 0x7fffffff}}, {0x9, 0x2c54, {0x3, 0x7}}, {0x44f, 0x1000, {0x3, 0x3}}, {0x2, 0x3, {0x3, 0x3}}, {0x0, 0xffff, {0x3, 0x78725e2e}}, {0x4df9, 0x5, {0x2, 0x6}}, {0xffff, 0x9, {0x2, 0x6}}, {0x1ff, 0x8, {0x1, 0x9}}, {0x1, 0xea3f, {0x1, 0xff}}, {0x3d00, 0x1, {0x3, 0x7}}, {0x5, 0x80, {0x0, 0x9}}, {0x6, 0x5a82, {0x1, 0x7f}}, {0x6, 0x6, {0x0, 0xffff}}, {0x0, 0x4, {0x1, 0xcbc8}}, {0x8001, 0x80, {0x0, 0x6400}}, {0x6, 0x9, {0x1, 0x401}}, {0x0, 0x800, {0x0, 0x7fff}}, {0x20f3, 0x2e, {0x2, 0x3ff}}, {0x2, 0x1f, {0x3, 0x7}}, {0x0, 0x9, {0x3, 0x5}}, {0x8000, 0x6, {0x3, 0x18ba183d}}, {0x0, 0x7fff, {0x0, 0x2000}}, {0x0, 0x8a, {0x1, 0x4}}, {0x400, 0x2083, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0xf0, 0x2, 0x7, 0x1, 0xa, 'syz0\x00', "434ada99cae1309767f81b12632643ce0e00f95756665d6ac25699940ecb8c98", "d64f96fde385ea5250c9bee0dcc565137e1a28feddf13c0ffed409bbb04c2e92", [{0x2, 0x7fff, {0x3, 0x8}}, {0x1, 0x400, {0x0, 0x1}}, {0x5, 0x5, {0x2, 0x9}}, {0x0, 0x2, {0x2, 0x10001}}, {0x56, 0x0, {0x0, 0x6}}, {0x3, 0x6, {0x1, 0xfff}}, {0xfa71, 0x0, {0x0, 0x9}}, {0x71, 0x0, {0x1, 0xfffffffd}}, {0xe08, 0x2, {0x3, 0x4}}, {0xf801, 0x82f8, {0x0, 0x2}}, {0xeaf, 0xf0, {0x3, 0x7fffffff}}, {0x4, 0x3, {0x3, 0x3}}, {0xdd01, 0x4, {0x0, 0xfffffffc}}, {0x4, 0xffff, {0x2}}, {0xfff, 0x0, {0x3, 0x4}}, {0x6, 0x9, {0x1}}, {0x7fff, 0x7, {0x0, 0x7}}, {0x5, 0xd9f, {0x1, 0x8}}, {0x2, 0x1ff, {0x1, 0x8a2}}, {0xfc01, 0x7f, {0x0, 0x1}}, {0xb122, 0x4, {0x1, 0x767f}}, {0x4, 0x8, {0x1, 0xff}}, {0x1, 0x2b9, {0x1, 0x4}}, {0x5, 0xc8f, {0x3, 0x7}}, {0x6, 0xc0, {0x2, 0x8}}, {0x3f, 0x7f, {0x2, 0x8caa}}, {0xfff7, 0x4, {0x3, 0x2}}, {0x7, 0x5, {0x2, 0xfffffffa}}, {0x6, 0x1, {0x1, 0x2}}, {0x7ff, 0xf4f7, {0x1, 0x3}}, {0x0, 0xb6, {0x0, 0x5}}, {0x1, 0x0, {0x0, 0x81}}, {0x345b, 0xffff, {0x0, 0x7f}}, {0x80, 0x94d, {0x2, 0x48}}, {0x7, 0x3, {0x3, 0x18e9}}, {0x1, 0x0, {0x3, 0xfffff801}}, {0x8, 0x8001, {0x7}}, {0xac99, 0xffff, {0x2, 0x800}}, {0x1, 0x4, {0x0, 0x10001}}, {0xffff, 0xf303, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x3f, 0xff, 0xff8e, 0x1f, 0x1c, 'syz0\x00', "2bcf88c15cdf5be96f55bcb6ecc4a80eeaed444e446083576bd68699a8d4b6b9", "858347e6bb4f48eea9a98158870b3d6a8a55a4415b213d5c9bb651263b9fa010", [{0x5, 0x8001, {0x1, 0x4}}, {0x8001, 0x8, {0x0, 0x7b}}, {0x7fff, 0x20, {0x3, 0x5}}, {0x9d44, 0x4c, {0x3, 0x401}}, {0x7f, 0x8, {0x2, 0x6}}, {0x5, 0x7, {0x0, 0x3}}, {0x2, 0x3, {0x3, 0xf2ac}}, {0x9, 0x61d2, {0x3, 0x63}}, {0x7ff, 0xc6, {0x0, 0x7}}, {0x3, 0x7fff, {0x3, 0x800}}, {0x4, 0x7, {0x0, 0x480000}}, {0x2, 0x5, {0x0, 0x83c4}}, {0x81, 0xfffb, {0x3, 0x5}}, {0x7, 0x3, {0x0, 0xb1}}, {0x8, 0x700, {0x1, 0x2}}, {0x0, 0x401, {0x2, 0xab9f}}, {0x7, 0x50bb, {0x3, 0x3af}}, {0x8, 0x1000, {0x0, 0x800}}, {0xa2, 0x5, {0x1, 0x80000000}}, {0x9, 0x6, {0x0, 0x100}}, {0x9416, 0x6, {0x1, 0x81}}, {0x7ff, 0x36b, {0x0, 0x4}}, {0x7, 0x0, {0x0, 0x80000000}}, {0x0, 0x4, {0x2, 0x3ff}}, {0x6, 0x800, {0x2}}, {0x9, 0xfff, {0x0, 0x7}}, {0x9b, 0x8, {0x3, 0x5}}, {0x7, 0x7, {0x2, 0x7}}, {0x0, 0x7f, {0x3, 0xdbb5}}, {0x9, 0x9, {0x3, 0x4}}, {0x3ff, 0x800, {0x3, 0x820}}, {0xac, 0x5, {0x3, 0x365}}, {0x8, 0x1, {0x3, 0x3ff}}, {0x101, 0x1, {0x3, 0xccb}}, {0x6, 0x9, {0x3, 0x200}}, {0x3f, 0x5, {0x0, 0x5}}, {0x385d, 0x3, {0x2, 0x9}}, {0x7, 0x7f, {0x2, 0x2}}, {0x7fff, 0x3e, {0x0, 0x8000}}, {0x4, 0x5, {0x0, 0x3}}]}}}]}, 0xbb8}}, 0x8004) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001c00)={&(0x7f0000000fc0), 0xc, &(0x7f0000001bc0)={&(0x7f0000001000)={0xbb8, 0x1, 0x5, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x8}, 0x6, 0x3, 0x4, 0xffff, 0x11, 'syz1\x00', "6f6fe590876890525e5802dc79adc874fcbc2cfd23dd8870cd30b6df15ffe81c", "9e6f1b9dabfa184bdde98fc3ad60d1574a0760854243377465bfe82df455eae1", [{0x86, 0xc, {0x2, 0x6}}, {0x6, 0xfbb, {0x1, 0x3}}, {0x8001, 0x1, {0x0, 0xe000}}, {0x1000, 0x1ff, {0x0, 0x3}}, {0x7, 0xe49f, {0x3, 0x6d}}, {0x8, 0x4, {0x2, 0x10000}}, {0x8, 0xf001, {0x1, 0x7}}, {0x7, 0x2, {0x3, 0x9}}, {0x9, 0xfffb, {0x1, 0x5}}, {0xf5, 0x4, {0x0, 0x4}}, {0x400, 0x1000, {0x3, 0x7}}, {0x1, 0xb0, {0x1, 0xfffffffa}}, {0x0, 0x200, {0x1}}, {0x0, 0xffff, {0x3, 0x77ce9682}}, {0x4, 0x7ff, {0x2, 0xffff0001}}, {0x9, 0x7f, {0x3, 0x1}}, {0x3ff, 0x8e, {0x3, 0x4}}, {0x1, 0x1, {0x0, 0x40}}, {0x9f4, 0x280, {0x1, 0x4a7}}, {0x81, 0x80, {0x2, 0x80000000}}, {0xfffa, 0x599a, {0x3, 0x3}}, {0xb9, 0x4, {0x0, 0x400}}, {0x8, 0x6, {0x2, 0x9}}, {0x4, 0xffff, {0x0, 0x6}}, {0x9, 0x5b7a, {0x0, 0x8}}, {0x100, 0x2, {0x1}}, {0x0, 0x1, {0x3}}, {0x24, 0xffff, {0x3, 0xfff}}, {0x80, 0x7, {0x1, 0x97fc}}, {0x6, 0x5, {0x0, 0x10000}}, {0xfffa, 0x0, {0x3, 0xa8f}}, {0x100, 0x0, {0x2}}, {0x0, 0x0, {0x3, 0x7}}, {0x110, 0xff7f, {0x6dfe5132fcb29bda, 0x10000}}, {0xfffe, 0xcf, {0x1, 0x5}}, {0x401, 0x6, {0x0, 0xfff}}, {0x3, 0x8, {0x3, 0x2}}, {0x8, 0x2, {0x2, 0x1}}, {0x40fe, 0x9, {0x1, 0x8}}, {0x8c4e, 0x1, {0x3, 0xfffffff8}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0xd, 0x0, 0x9, 0x9b6f, 0x24, 'syz0\x00', "c284d8a1c3da1c60c955cfb111d947e1ef7ba45822572ede550f48d700082625", "3787caa20afad0ce042ff8c8b60270bc5cbd3988a060df4734d97c72a424d527", [{0x9, 0xad10, {0x3, 0x80000001}}, {0x6, 0x1, {0x0, 0x4}}, {0x0, 0x8c1, {0x0, 0x80}}, {0x1, 0x23f3, {0x1, 0x8}}, {0xfff8, 0x8, {0x1, 0x8}}, {0x1, 0x6, {0x3}}, {0x40, 0x4, {0x2, 0x5}}, {0xffff, 0xffff, {0x3, 0x7}}, {0x40, 0x0, {0x0, 0x5f}}, {0x2, 0x8000, {0x0, 0xffffffff}}, {0xfff, 0xaa, {0x1, 0xeae}}, {0x4, 0x0, {0x3, 0xffffffff}}, {0x2, 0x401, {0x2, 0x6}}, {0x7, 0x7, {0x0, 0x1}}, {0x8, 0x7f, {0x2, 0xfffff821}}, {0x7, 0x8}, {0xff, 0x3ff, {0x0, 0x40000000}}, {0x3fab, 0x2, {0x0, 0x7}}, {0x40, 0x3, {0x1, 0x8000}}, {0x4, 0x20, {0x0, 0x81}}, {0x400, 0xe409, {0x1, 0x9a}}, {0x401, 0x1ff, {0x1, 0x5}}, {0x3, 0x1, {0x3, 0x3}}, {0x2, 0x100, {0x2, 0x7fffffff}}, {0x4, 0x80e2, {0x3, 0x400}}, {0x1000, 0x401, {0x3, 0x245dd507}}, {0x8000, 0x1, {0x2, 0x81}}, {0x3ff, 0x8, {0x2}}, {0x3, 0x7b, {0x3, 0x80000000}}, {0x3, 0xf5b9, {0x1, 0xfffffffd}}, {0x4, 0x8, {0x1, 0x7}}, {0x8001, 0x7f, {0x3, 0x9}}, {0x9, 0x20, {0x0, 0x3}}, {0x39, 0x7ff, {0x1, 0x9}}, {0x81, 0x1ff, {0x3, 0x4}}, {0x40, 0xfe00, {0x2, 0xfffffffd}}, {0x7ff, 0x1f, {0x3}}, {0xd9f, 0x400, {0x0, 0x800}}, {0x8001, 0x4, {0x3, 0x4}}, {0x0, 0x8, {0x3, 0x1ff}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x3f, 0x0, 0xf8d2, 0x7, 0x12, 'syz1\x00', "4fb1298308a6a5ed76a9e3fe77ab9f6d67834905f4985f328fa24dff96bc2686", "2e51700e88726957ca3b2dfef335f1ed001d32c00ec394fd9e0e3223d800d797", [{0x2, 0xfff, {0x3, 0x2}}, {0x200, 0x2, {0x2, 0x10000}}, {0x0, 0x7, {0x3, 0x80}}, {0x7, 0x331, {0x1, 0x1f}}, {0x318e, 0xffff, {0x0, 0x80000001}}, {0x3, 0x2, {0x2, 0x2}}, {0x0, 0x80, {0x3, 0x6}}, {0x7f, 0xcde2, {0x1, 0xfffffffa}}, {0x8, 0x5, {0x2, 0x2}}, {0x9, 0x9, {0x1, 0x4}}, {0x0, 0x724, {0x0, 0x8}}, {0x6, 0x3, {0x0, 0x1d67}}, {0x7fff, 0x2, {0x2, 0xf8e}}, {0x1, 0x827, {0x3, 0x6}}, {0x401, 0x20, {0x1, 0x30e}}, {0xc6d, 0x4, {0x2, 0x10000}}, {0x2, 0x4, {0x2}}, {0x2, 0xff4b, {0x7fb38558b7714053, 0x4}}, {0x7f, 0x8, {0x1, 0x3}}, {0x9, 0x0, {0x2}}, {0x4599, 0x4, {0x3, 0x3ff}}, {0x5, 0x1f, {0x3, 0x65800}}, {0x8, 0x9, {0x1, 0x100}}, {0x0, 0x7ff, {0x1, 0x7}}, {0x6, 0x5c03, {0x0, 0x7}}, {0x6, 0x8, {0x3, 0xffffffff}}, {0x7, 0xf5be, {0x2, 0x4ccf}}, {0x9, 0x7, {0x3, 0x1}}, {0x1, 0x1, {0x3, 0x81}}, {0x3, 0xfffc, {0x3, 0x7}}, {0x101, 0x7f}, {0x9, 0x800, {0x2, 0xd6f}}, {0xc380, 0x3b2, {0x3, 0x6}}, {0x5600, 0x7f, {0x1}}, {0x80, 0x5, {0x2, 0x7}}, {0x7, 0xe90d, {0x1, 0x7}}, {0x0, 0x5, {0x1, 0x80}}, {0x4, 0xd3c, {0x3, 0x100}}, {0x5, 0x8a, {0x2, 0x2}}, {0x4, 0x346, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x4, 0x7, 0x7ff, 0x9, 0x1c, 'syz1\x00', "5162ac6ca1afc0298e030c60e3cb4fcbd99db57c482f1adea522cebb8573dc04", "ce5b71d454b4d4aef26a344cbbc3b1b78eaffc891c551490a10a4da1309cf56e", [{0x401, 0x3, {0x1}}, {0x8dc, 0x7fff, {0x2, 0x6}}, {0x64b, 0x7, {0x2, 0x5}}, {0x9, 0x3, {0x3, 0x8000}}, {0xc0c, 0x3, {0x0, 0x4}}, {0x2, 0x4, {0x3, 0x7}}, {0x1, 0x9, {0x2, 0x164}}, {0x8, 0x9, {0x0, 0x7fffffff}}, {0x4, 0x9, {0x0, 0x5}}, {0x0, 0x1, {0x3, 0x6}}, {0x1c8, 0x0, {0x2, 0x5}}, {0x5, 0x1ff, {0x1, 0x1}}, {0x8, 0x1, {0x1, 0x80000001}}, {0x1, 0x6, {0x0, 0x80000001}}, {0x4c, 0x40, {0x2, 0x8000}}, {0x4, 0x9, {0x1, 0x8}}, {0x1, 0xff, {0x1, 0x9}}, {0x1, 0x4, {0x3, 0x2}}, {0x0, 0x5, {0x1, 0x1ff}}, {0x9, 0x8d5, {0x0, 0x7}}, {0xf4, 0x65, {0x0, 0x8de7}}, {0x8000, 0x100, {0x2, 0x4}}, {0xeb56, 0x9, {0x3, 0xffffff55}}, {0xf4, 0x4, {0x2, 0x55c0eec}}, {0x9f57, 0x0, {0x0, 0xbf9}}, {0x8766, 0x5, {0x3, 0x7}}, {0xef7c, 0x8, {0x0, 0x7}}, {0x1, 0x1000, {0x1, 0x4}}, {0xfffe, 0x8, {0x0, 0x9}}, {0x7f, 0x8, {0x3, 0xaa2b}}, {0x3f, 0x0, {0x1, 0x1}}, {0x4, 0x8, {0x0, 0x1f}}, {0x5, 0x2, {0x0, 0x3}}, {0x8, 0x0, {0x0, 0x5}}, {0x4, 0xd3, {0x3, 0xfffffffa}}, {0x7fff, 0x101, {0x0, 0x7}}, {0x9, 0x7, {0x2, 0x8aa4}}, {0x101, 0x11, {0x0, 0xfffffff9}}, {0x4, 0xfff, {0x1, 0x9}}, {0x20, 0x5, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{}, 0x80, 0x80, 0x200, 0xb8, 0x1e, 'syz1\x00', "f75d22af25c736314f8869e5094a9cd14bd3da495deed72169ac1d6a5fab282b", "ae1bddd891c11df613147b0642086f19a8723e56347220f3f02990b371faea5c", [{0x7, 0x40, {0x3, 0xffffffff}}, {0x9, 0x0, {0x0, 0x2}}, {0xffff, 0x9, {0x1, 0x7}}, {0x6, 0x3f, {0x1, 0x9}}, {0x6, 0x6, {0x1, 0x400}}, {0x200, 0x7, {0x1}}, {0xfffb, 0x0, {0x2, 0x9}}, {0x5, 0x0, {0x1, 0x1}}, {0x1, 0x1, {0x1, 0x4f9}}, {0x8000, 0x9, {0x2, 0xe8}}, {0x800, 0x1, {0x1, 0x7}}, {0x800, 0x7, {0x1, 0x5}}, {0x1, 0x0, {0x0, 0x7}}, {0x1, 0xdaae, {0x2, 0x8}}, {0x7f, 0x2, {0x2, 0x69}}, {0x9c00, 0x0, {0x2, 0x7}}, {0x400, 0xfff8, {0x2, 0xa2e4}}, {0x0, 0x401, {0x1, 0xa297}}, {0x101, 0x5, {0x3, 0x7fff}}, {0x1, 0x6, {0x2, 0x6}}, {0x4, 0x0, {0x2, 0xac08}}, {0x6, 0x8, {0x1, 0xffffffff}}, {0xf6b, 0x3, {0x0, 0xf912}}, {0x8, 0x3, {0x0, 0x10000}}, {0x1, 0x9, {0x3, 0x493b1ec2}}, {0xe2, 0x7, {0x0, 0x3f}}, {0x8, 0x20, {0x1, 0xa0}}, {0x101, 0x0, {0x3, 0x101}}, {0x7fff, 0x4, {0x0, 0x3}}, {0x67e, 0xffe1, {0x1, 0x30000}}, {0x2d, 0x5, {0x3, 0x9}}, {0x2, 0x5, {0x3, 0x1}}, {0x200, 0x1ff, {0x1, 0x8}}, {0x1b45, 0xc57, {0x1, 0x1b20000}}, {0x8, 0x1000, {0x0, 0x9}}, {0x4, 0x2, {0x1, 0x2}}, {0x5, 0x3ff, {0x2, 0x1b1e66c0}}, {0x0, 0x5, {0x3, 0xfffffff9}}, {0x7109, 0x6, {0x1, 0x2}}, {0x2, 0xfff, {0x2, 0x7}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x80}, 0x40840) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001c40), 0x600081, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x9c, 0x4, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x78193e65}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x42fca387}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x74, 0x1, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0xefb4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x84}, 0x4800) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001fc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x23300202}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000020c0), r6) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x50, r3, 0x101) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002100), 0x280c0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0x0, 0x9, 0x500, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x810) 16:15:31 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1f}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x10008004}, 0x40000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2800}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r3, 0x700, 0x2, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x91}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xe0d4}, 0x400c001) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r3, 0x200, 0x2, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000084}, 0x1) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004884}, 0x8000) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000001}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}]}, 0x4c}}, 0x4000055) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x81}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) 16:15:31 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x5}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/79, 0x4f}) syslog(0x9, &(0x7f0000000200)=""/179, 0xb3) r3 = memfd_secret(0x80000) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000340)={&(0x7f00000002c0), &(0x7f0000000300)=""/24, 0x18}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x6) write$cgroup_type(r3, &(0x7f0000000380), 0x9) epoll_create1(0x0) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xe, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = memfd_secret(0x80000) timerfd_settime(r4, 0x1, &(0x7f00000004c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000500)) waitid$P_PIDFD(0x3, r4, &(0x7f0000000540), 0x2, &(0x7f00000005c0)) openat$cgroup_subtree(r3, &(0x7f0000000680), 0x2, 0x0) bind$bt_hci(r3, &(0x7f00000006c0)={0x1f, 0x1, 0x2}, 0x6) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000700)={0x7fff, [0x1000, 0xffffff01], 0x7f}, 0x10) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x44) [ 129.436172] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 129.441326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 129.446280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.455815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 129.463067] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.510159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.519013] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.522714] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.529947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.534411] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.545019] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.554021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.562842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.568790] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 129.571381] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.574009] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.577408] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.580877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 129.583701] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.595012] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.600520] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.604389] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.607100] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.612291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.617338] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 129.618861] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.621685] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.625020] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.631253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 129.633414] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.636402] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.639934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.654351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.663145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.687363] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.690310] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.697986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.698944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.705153] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.728347] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 131.512100] Bluetooth: hci0: command tx timeout [ 131.639778] Bluetooth: hci3: command tx timeout [ 131.705016] Bluetooth: hci5: command tx timeout [ 131.768748] Bluetooth: hci2: command tx timeout [ 131.831578] Bluetooth: hci7: command tx timeout [ 131.832170] Bluetooth: hci4: command tx timeout [ 131.832751] Bluetooth: hci1: command tx timeout [ 131.833246] Bluetooth: hci6: command tx timeout [ 133.559684] Bluetooth: hci0: command tx timeout [ 133.689772] Bluetooth: hci3: command tx timeout [ 133.752827] Bluetooth: hci5: command tx timeout [ 133.815892] Bluetooth: hci2: command tx timeout [ 133.879748] Bluetooth: hci1: command tx timeout [ 133.880809] Bluetooth: hci7: command tx timeout [ 133.881239] Bluetooth: hci6: command tx timeout [ 133.881819] Bluetooth: hci4: command tx timeout [ 135.607688] Bluetooth: hci0: command tx timeout [ 135.735517] Bluetooth: hci3: command tx timeout [ 135.800506] Bluetooth: hci5: command tx timeout [ 135.864884] Bluetooth: hci2: command tx timeout [ 135.927607] Bluetooth: hci4: command tx timeout [ 135.928050] Bluetooth: hci6: command tx timeout [ 135.928509] Bluetooth: hci7: command tx timeout [ 135.928931] Bluetooth: hci1: command tx timeout [ 137.657762] Bluetooth: hci0: command tx timeout [ 137.784936] Bluetooth: hci3: command tx timeout [ 137.847602] Bluetooth: hci5: command tx timeout [ 137.912512] Bluetooth: hci2: command tx timeout [ 137.975587] Bluetooth: hci6: command tx timeout [ 137.975773] Bluetooth: hci7: command tx timeout [ 137.976068] Bluetooth: hci4: command tx timeout [ 137.976504] Bluetooth: hci1: command tx timeout [ 192.014953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.020072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.022727] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.031939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.037706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.097844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.107999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.112832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.118872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.125892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 192.157547] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.173026] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.206005] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.227773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.231419] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.234260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.243613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.255616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.257794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.259709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.275937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.279838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.289225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.295196] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.298638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.305183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.313355] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.397876] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.400238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 192.404819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.411226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.419036] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 192.437256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.439793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.489178] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 192.490826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.505068] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 192.531258] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.532788] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 192.549809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.103959] Bluetooth: hci0: command tx timeout [ 194.167755] Bluetooth: hci1: command tx timeout [ 194.359853] Bluetooth: hci3: command tx timeout [ 194.360935] Bluetooth: hci4: command tx timeout [ 194.489503] Bluetooth: hci2: command tx timeout [ 194.615738] Bluetooth: hci7: command tx timeout [ 194.616569] Bluetooth: hci5: command tx timeout [ 194.807790] Bluetooth: hci6: command tx timeout [ 196.153730] Bluetooth: hci0: command tx timeout [ 196.217057] Bluetooth: hci1: command tx timeout [ 196.409526] Bluetooth: hci3: command tx timeout [ 196.410239] Bluetooth: hci4: command tx timeout [ 196.535995] Bluetooth: hci2: command tx timeout [ 196.663664] Bluetooth: hci5: command tx timeout [ 196.664259] Bluetooth: hci7: command tx timeout [ 196.855524] Bluetooth: hci6: command tx timeout [ 198.199632] Bluetooth: hci0: command tx timeout [ 198.264838] Bluetooth: hci1: command tx timeout [ 198.455625] Bluetooth: hci4: command tx timeout [ 198.456740] Bluetooth: hci3: command tx timeout [ 198.583540] Bluetooth: hci2: command tx timeout [ 198.713226] Bluetooth: hci7: command tx timeout [ 198.714600] Bluetooth: hci5: command tx timeout [ 198.903553] Bluetooth: hci6: command tx timeout [ 200.247611] Bluetooth: hci0: command tx timeout [ 200.311547] Bluetooth: hci1: command tx timeout [ 200.503777] Bluetooth: hci3: command tx timeout [ 200.504718] Bluetooth: hci4: command tx timeout [ 200.631543] Bluetooth: hci2: command tx timeout [ 200.760031] Bluetooth: hci7: command tx timeout [ 200.761265] Bluetooth: hci5: command tx timeout [ 200.951560] Bluetooth: hci6: command tx timeout [ 254.023760] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.028629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.030583] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.037247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.039896] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.305660] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.309314] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.311344] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.314350] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.321196] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.324350] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.329592] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.334971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.342165] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.349354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.374917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.379859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.382882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.390229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.405547] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.413582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.444018] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.447156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.448794] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.461664] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.464113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.480950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.530297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.531784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.536181] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.539756] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.544578] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.550714] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.556754] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.558817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.560934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.588780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.589583] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.597847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.600161] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.119669] Bluetooth: hci0: command tx timeout [ 256.377494] Bluetooth: hci2: command tx timeout [ 256.439517] Bluetooth: hci1: command tx timeout [ 256.503720] Bluetooth: hci3: command tx timeout [ 256.633493] Bluetooth: hci4: command tx timeout [ 256.634217] Bluetooth: hci5: command tx timeout [ 256.695579] Bluetooth: hci7: command tx timeout [ 256.696198] Bluetooth: hci6: command tx timeout [ 258.168637] Bluetooth: hci0: command tx timeout [ 258.423540] Bluetooth: hci2: command tx timeout [ 258.487649] Bluetooth: hci1: command tx timeout [ 258.551959] Bluetooth: hci3: command tx timeout [ 258.679564] Bluetooth: hci4: command tx timeout [ 258.680056] Bluetooth: hci5: command tx timeout [ 258.743842] Bluetooth: hci7: command tx timeout [ 258.744312] Bluetooth: hci6: command tx timeout [ 260.215647] Bluetooth: hci0: command tx timeout [ 260.471524] Bluetooth: hci2: command tx timeout [ 260.536457] Bluetooth: hci1: command tx timeout [ 260.599845] Bluetooth: hci3: command tx timeout [ 260.727521] Bluetooth: hci5: command tx timeout [ 260.728005] Bluetooth: hci4: command tx timeout [ 260.791608] Bluetooth: hci6: command tx timeout [ 260.792078] Bluetooth: hci7: command tx timeout [ 262.263825] Bluetooth: hci0: command tx timeout [ 262.520511] Bluetooth: hci2: command tx timeout [ 262.583667] Bluetooth: hci1: command tx timeout [ 262.649466] Bluetooth: hci3: command tx timeout [ 262.776370] Bluetooth: hci4: command tx timeout [ 262.776886] Bluetooth: hci5: command tx timeout [ 262.840783] Bluetooth: hci7: command tx timeout [ 262.841250] Bluetooth: hci6: command tx timeout [ 316.619051] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.622357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.629130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.642801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.651842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.709863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.715965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.722630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.728589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.741086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.014077] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 317.016995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 317.020194] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 317.037874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.044238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.085851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.104738] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.115782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.118162] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.135679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.138842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.159920] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.190781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.195947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.198217] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.202047] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.214756] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.221977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.248332] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.283865] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 317.288921] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.296084] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.297291] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 317.308925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.310084] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.314963] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 317.331196] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.360765] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 317.377701] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.406947] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.711716] Bluetooth: hci0: command tx timeout [ 318.839869] Bluetooth: hci1: command tx timeout [ 319.095751] Bluetooth: hci2: command tx timeout [ 319.351552] Bluetooth: hci3: command tx timeout [ 319.351579] Bluetooth: hci4: command tx timeout [ 319.481087] Bluetooth: hci6: command tx timeout [ 319.481113] Bluetooth: hci5: command tx timeout [ 319.545678] Bluetooth: hci7: command tx timeout [ 320.760564] Bluetooth: hci0: command tx timeout [ 320.887904] Bluetooth: hci1: command tx timeout [ 321.143636] Bluetooth: hci2: command tx timeout [ 321.399659] Bluetooth: hci3: command tx timeout [ 321.400723] Bluetooth: hci4: command tx timeout [ 321.527677] Bluetooth: hci6: command tx timeout [ 321.528622] Bluetooth: hci5: command tx timeout [ 321.591986] Bluetooth: hci7: command tx timeout [ 322.807899] Bluetooth: hci0: command tx timeout [ 322.935535] Bluetooth: hci1: command tx timeout [ 323.191762] Bluetooth: hci2: command tx timeout [ 323.447822] Bluetooth: hci4: command tx timeout [ 323.447842] Bluetooth: hci3: command tx timeout [ 323.575635] Bluetooth: hci6: command tx timeout [ 323.575669] Bluetooth: hci5: command tx timeout [ 323.639514] Bluetooth: hci7: command tx timeout [ 324.856030] Bluetooth: hci0: command tx timeout [ 324.984031] Bluetooth: hci1: command tx timeout [ 325.239622] Bluetooth: hci2: command tx timeout [ 325.495686] Bluetooth: hci4: command tx timeout [ 325.496583] Bluetooth: hci3: command tx timeout [ 325.624006] Bluetooth: hci5: command tx timeout [ 325.625878] Bluetooth: hci6: command tx timeout [ 325.688187] Bluetooth: hci7: command tx timeout [ 379.593850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.598988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.605130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.620122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.624804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.860891] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.865491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.875604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.883100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.886264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.888086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.894167] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.894320] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.913638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.918142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.963585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.967976] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.976328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.986958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.993399] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.016146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.023110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.034064] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.052681] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.056526] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.063782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.082097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.095010] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.112319] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.124575] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.284834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 380.303067] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 380.322559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 380.351120] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 380.355115] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 380.357696] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 380.363682] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 380.367712] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 380.378955] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 380.415743] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.687715] Bluetooth: hci0: command tx timeout [ 381.945587] Bluetooth: hci1: command tx timeout [ 382.071533] Bluetooth: hci2: command tx timeout [ 382.135532] Bluetooth: hci4: command tx timeout [ 382.199515] Bluetooth: hci3: command tx timeout [ 382.265107] Bluetooth: hci5: command tx timeout [ 382.455810] Bluetooth: hci7: command tx timeout [ 382.520584] Bluetooth: hci6: command tx timeout [ 383.735567] Bluetooth: hci0: command tx timeout [ 383.991681] Bluetooth: hci1: command tx timeout [ 384.119552] Bluetooth: hci2: command tx timeout [ 384.183626] Bluetooth: hci4: command tx timeout [ 384.247755] Bluetooth: hci3: command tx timeout [ 384.313133] Bluetooth: hci5: command tx timeout [ 384.503576] Bluetooth: hci7: command tx timeout [ 384.568800] Bluetooth: hci6: command tx timeout [ 385.784072] Bluetooth: hci0: command tx timeout [ 386.040521] Bluetooth: hci1: command tx timeout [ 386.167791] Bluetooth: hci2: command tx timeout [ 386.231973] Bluetooth: hci4: command tx timeout [ 386.297476] Bluetooth: hci3: command tx timeout [ 386.360501] Bluetooth: hci5: command tx timeout [ 386.551578] Bluetooth: hci7: command tx timeout [ 386.616091] Bluetooth: hci6: command tx timeout [ 387.831513] Bluetooth: hci0: command tx timeout [ 388.088651] Bluetooth: hci1: command tx timeout [ 388.216745] Bluetooth: hci2: command tx timeout [ 388.280271] Bluetooth: hci4: command tx timeout [ 388.344925] Bluetooth: hci3: command tx timeout [ 388.408538] Bluetooth: hci5: command tx timeout [ 388.600584] Bluetooth: hci7: command tx timeout [ 388.665574] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 16:20:34 Registers: info registers vcpu 0 RAX=0000000000010001 RBX=ffff88806ce289d8 RCX=ffffffff84b00960 RDX=ffff888015b7d280 RSI=ffff88806ce378c8 RDI=0000000000000006 RBP=ffff88806ce28150 RSP=ffff88806ce08e00 R8 =0000000000000000 R9 =fffffbfff0c83eca R10=ffff88806ce289d8 R11=0000000000000001 R12=ffff88806ce378c8 R13=ffff88806ce28100 R14=ffff88806ce28080 R15=dffffc0000000000 RIP=ffffffff84b00963 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1201707540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563a530194c8 CR3=0000000017ff1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88806cf31850 RBP=ffffffff85c1d1c0 RSP=ffff8880165f74c0 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b67d R11=0000000000024a79 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff8880165f75a8 RIP=ffffffff8151b09e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa1d7b328e0 CR3=0000000028e6c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000