Warning: Permanently added '[localhost]:35168' (ECDSA) to the list of known hosts. 2024/11/09 06:51:40 fuzzer started 2024/11/09 06:51:40 dialing manager at localhost:46317 syzkaller login: [ 64.368649] cgroup: Unknown subsys name 'net' [ 64.463615] cgroup: Unknown subsys name 'cpuset' [ 64.479712] cgroup: Unknown subsys name 'rlimit' 2024/11/09 06:51:57 syscalls: 218 2024/11/09 06:51:57 code coverage: enabled 2024/11/09 06:51:57 comparison tracing: enabled 2024/11/09 06:51:57 extra coverage: enabled 2024/11/09 06:51:57 setuid sandbox: enabled 2024/11/09 06:51:57 namespace sandbox: enabled 2024/11/09 06:51:57 Android sandbox: enabled 2024/11/09 06:51:57 fault injection: enabled 2024/11/09 06:51:57 leak checking: enabled 2024/11/09 06:51:57 net packet injection: enabled 2024/11/09 06:51:57 net device setup: enabled 2024/11/09 06:51:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/09 06:51:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/09 06:51:57 USB emulation: enabled 2024/11/09 06:51:57 hci packet injection: enabled 2024/11/09 06:51:57 wifi device emulation: enabled 2024/11/09 06:51:57 802.15.4 emulation: enabled 2024/11/09 06:51:57 fetching corpus: 0, signal 0/0 (executing program) 2024/11/09 06:51:59 starting 8 fuzzer processes 06:51:59 executing program 0: r0 = gettid() write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x37, 0x1, {0x0, 0x4, 0x3, r0, 0xa, '\xa3%{]+a\',[)'}}, 0x28) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x521000, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) write$P9_RLOPEN(r1, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x8, 0x1, 0x3}, 0xfffff9ee}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) write$P9_RSYMLINK(r2, &(0x7f0000000140)={0x14, 0x11, 0x1, {0x10, 0x0, 0x5}}, 0x14) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) write$P9_RMKDIR(r3, &(0x7f00000001c0)={0x14, 0x49, 0x2, {0x0, 0x2, 0x7}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) write$P9_RMKNOD(r4, &(0x7f0000000240)={0x14, 0x13, 0x2, {0xf371b29fadc601f, 0x4}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xdd2, 0x51}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x81}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x81}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xc6}]}, 0x50}, 0x1, 0x0, 0x0, 0x7c247f918078c3d1}, 0x40) r6 = syz_io_uring_complete(0x0) r7 = getegid() write$P9_RGETATTR(r6, &(0x7f0000000440)={0xa0, 0x19, 0x2, {0x816, {0x8, 0x1, 0x5}, 0x41, 0xffffffffffffffff, r7, 0x2, 0x2, 0x3f, 0x1, 0x1, 0x100, 0x6, 0x622c, 0x8, 0x0, 0x8, 0xb2, 0x82d8, 0x1, 0x3f}}, 0xa0) r8 = msgget$private(0x0, 0x14) r9 = getuid() msgctl$IPC_SET(r8, 0x1, &(0x7f0000000740)={{0x0, 0xee00, r7, r9, 0x0, 0x25, 0x101}, 0x0, 0x0, 0x8, 0x9, 0x0, 0x458, 0x887, 0x9, 0x0, 0x3, r0}) 06:51:59 executing program 1: mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8100, &(0x7f0000000040)={0x100080, 0x5, 0xa0000}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000001200)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, &(0x7f0000001140)=""/188, 0xbc}, 0xfffffff9}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000027c0)=[{{&(0x7f0000001240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000012c0)=""/59, 0x3b}, {&(0x7f0000001300)=""/173, 0xad}], 0x2, &(0x7f0000001400)=""/101, 0x65}, 0x4}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001480)=""/103, 0x67}, {&(0x7f0000001500)=""/63, 0x3f}], 0x2, &(0x7f0000001580)=""/162, 0xa2}, 0x10001}, {{&(0x7f0000001640)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000016c0)}, 0x4}, {{&(0x7f0000001700)=@x25, 0x80, &(0x7f0000001780), 0x0, &(0x7f00000017c0)=""/4096, 0x1000}, 0x8}], 0x4, 0x20000000, &(0x7f00000028c0)) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000029c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x81, 0x69}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x20002800) sched_rr_get_interval(0x0, &(0x7f0000002a00)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002a40), 0x206000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002ac0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x7, 0x0, r1, &(0x7f0000002a80)={0x3}, r0}, 0x1) getpeername(r1, &(0x7f0000002b00)=@rc={0x1f, @none}, &(0x7f0000002b80)=0x80) pselect6(0x40, &(0x7f0000002bc0)={0x9, 0x1, 0xc193, 0x3, 0x1, 0x82d0, 0xcc8, 0x5}, &(0x7f0000002c00)={0x5, 0x0, 0x81, 0x1, 0x81, 0x10, 0x749, 0x200}, &(0x7f0000002c40)={0x4, 0x7f, 0x1, 0x100000000, 0x71db, 0x6, 0x7, 0x20}, &(0x7f0000002c80)={0x77359400}, &(0x7f0000002d00)={&(0x7f0000002cc0)={[0x1]}, 0x8}) clock_getres(0x6, &(0x7f0000002d40)) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000002d80)={0xf, 0x1f, 0x1, 0x1000}, 0xf) r2 = epoll_create(0xffff) epoll_pwait2(r2, &(0x7f0000002dc0)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000002e00), &(0x7f0000002e40)={[0x1]}, 0x8) clock_gettime(0x2, &(0x7f0000002e80)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000002ec0)={{0x1, 0x1, 0x18, r2, {0x2f}}, './file0\x00'}) inotify_add_watch(r3, &(0x7f0000002f00)='./file0\x00', 0x3000204) clock_gettime(0x0, &(0x7f0000007cc0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000007a40)=[{{&(0x7f0000002f40)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002fc0)=""/134, 0x86}, {&(0x7f0000003080)=""/52, 0x34}], 0x2, &(0x7f0000003100)=""/216, 0xd8}, 0x5}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003200)=""/78, 0x4e}, {&(0x7f0000003280)=""/149, 0x95}, {&(0x7f0000003340)=""/99, 0x63}, {&(0x7f00000033c0)=""/128, 0x80}, {&(0x7f0000003440)=""/4, 0x4}], 0x5, &(0x7f0000003500)=""/95, 0x5f}, 0x7}, {{&(0x7f0000003580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000003680)=[{&(0x7f0000003600)=""/68, 0x44}], 0x1, &(0x7f00000036c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000046c0)=@phonet, 0x80, &(0x7f0000004980)=[{&(0x7f0000004740)=""/160, 0xa0}, {&(0x7f0000004800)=""/115, 0x73}, {&(0x7f0000004880)=""/249, 0xf9}], 0x3}, 0x31}, {{&(0x7f00000049c0)=@isdn, 0x80, &(0x7f0000005c80)=[{&(0x7f0000004a40)=""/53, 0x35}, {&(0x7f0000004a80)=""/32, 0x20}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/182, 0xb6}, {&(0x7f0000005b80)=""/235, 0xeb}], 0x5, &(0x7f0000005d00)=""/54, 0x36}, 0x3f}, {{&(0x7f0000005d40)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005dc0)=""/133, 0x85}, {&(0x7f0000005e80)=""/57, 0x39}, {&(0x7f0000005ec0)=""/109, 0x6d}], 0x3, &(0x7f0000005f80)=""/4096, 0x1000}}, {{&(0x7f0000006f80)=@sco, 0x80, &(0x7f0000007080)=[{&(0x7f0000007000)=""/93, 0x5d}], 0x1, &(0x7f00000070c0)=""/196, 0xc4}}, {{&(0x7f00000071c0)=@isdn, 0x80, &(0x7f0000007300)=[{&(0x7f0000007240)=""/163, 0xa3}], 0x1, &(0x7f0000007340)=""/87, 0x57}, 0x7}, {{&(0x7f00000073c0)=@isdn, 0x80, &(0x7f00000075c0)=[{&(0x7f0000007440)=""/25, 0x19}, {&(0x7f0000007480)=""/83, 0x53}, {&(0x7f0000007500)=""/168, 0xa8}], 0x3, &(0x7f0000007600)=""/175, 0xaf}, 0x6}, {{&(0x7f00000076c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}}, 0x80, &(0x7f0000007980)=[{&(0x7f0000007740)=""/196, 0xc4}, {&(0x7f0000007840)=""/122, 0x7a}, {&(0x7f00000078c0)=""/35, 0x23}, {&(0x7f0000007900)=""/61, 0x3d}, {&(0x7f0000007940)}], 0x5, &(0x7f0000007a00)=""/29, 0x1d}, 0xfff}], 0xa, 0x21, &(0x7f0000007d00)={r4, r5+10000000}) syz_io_uring_setup(0x53c8, &(0x7f0000007d40)={0x0, 0xfd5f, 0x0, 0x0, 0xbc, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000007dc0), &(0x7f0000007e00)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000007e40)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10, 0x1}, 0x1) 06:51:59 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xb0}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x87f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffd}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c844}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffa}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2fd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x41) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x101000, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x58, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="92719dcee3009136dcfe9c03"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x200}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xc968}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000404) syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r6, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}}, 0x60481) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), r1) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r8, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c001}, 0x48001) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 06:51:59 executing program 3: msgsnd(0x0, &(0x7f0000000000)={0x0, "8484191841374424ce404e600a7874bfef8ac1242d438a1fba274a1ae9b65b2754708a24638cc88a74aad80e0f3aa9ba781a38e1dd6d83404b83ca0042339b1e2e320db77036ae758c6f26cd210ee02305c8a0af976ec5ffc073e00f026a4a05a0aec72101563a45000e51622e1bd4991254d41c63218f4f69f95dd5f739ee8ad33c747fed81506871317d0b0888df7eae5d1890fc5f80b569ef2a0fb67f4ce43f2a475c9de21ddfcdee7cabd9f6ccb2d9038fb43bfe847245a5071bcae5"}, 0xc6, 0x0) r0 = msgget$private(0x0, 0x8) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000100)=""/147) r1 = msgget$private(0x0, 0x6a5) msgctl$IPC_RMID(r1, 0x0) r2 = msgget$private(0x0, 0x248) msgsnd(r2, &(0x7f00000001c0)={0x1, "6dd8b2dbeee5c0bccbccab777e3ebe281262e7e1c3741130ef9bea4a5cd5a1e6ebc7354c3b137a11b341558757f815908b804d25236f42c05dc53a1e9e4b4d166ebbcffeb4e18fb7ab4be426daa13ea7ec758673f21b0ba48c09cf337aa4b8e92cc952814a632bb6327dad89ecc7369a158ef590cbc9c5c688ef8b76319fd9b951b5d4c6b07b28f65eca8f3387795b5f02025a8ef732c810d374d38f244e8bc8417c2450d0bf841912ee55e21bc7752d86d671f276702e0e5879e2ceadfa68a530cdd52230b5d46125d2c29b45fd804bac5122b990a02f5e33334b00fbcc6b730f9f6daf97d535f7e19ee075760775cca4cb942bd7643bec6565b869bb5d9388f6135a217051bd6d84757d2023ba2e9a92f95fe45c26b2d27edde38245c4e40583201ab805c7a0c65158613cff958ee99fd7e1b880da2b5be7f28b75183d6da0c94f01b086c4f49be0a57968dd23d0662eaff213238221de18b6c359e5ca2cffcc1ab81092ad4256be76bf2b5bce15430e8f551a0bbf0e03c541b7564364e26e7bf3fb78d0164c8fc6cb2227945fd2e670c1eb833c3deb4ec47fd96f568c41fc0e9971208db8a6a91fd5de1e95c5fd52e943d25e96d1ced57b410a297c2e1c4949e9f80041e06a8be450b3d0598137dd251d4e268ba2e7526d2e5aa219f35b98dba9b1a36ffa90596eeab298e53bf6b3d0ad828a8f65c3b2a2bb94ac28500a0481dfc9189e1c0a4208304a191b6d8303c94c51f4bc5a8c621f6c71fc06b61fc9d325a9061602c2980b0d7d40ca9b79095913be30cce5231e1193276ad83e48e8c59d6260670336027a16590c8e3e44c8b79de019061924331e37fa379a64b53e3ee08be0f8e33fedaac42e4298a3f23f61b3fc7c85a3de32f2a8c01b01fcb4010a43dc902e86d0c2451ac80f4e59f46deec9191fe813d7aa5500eac173e27640a23fc09f64cbf4969aa8a6b31195342e72940c633b995c32b2ee0959c34eaf291c3cc41dc1c187005229caf6f1b3c931d73f7ac4c906a6f37a70c6e470323a8892fae4ffa1b398451dfc62e21b75525d9b3637a8d6380a64ce427ad7e770033830f4fd534a137ed6a0f89eb0749e7e91dbf2d24088cc2a63bceafff8138413b3d09f6f82aa91bbb234e207b6fa8702cc1bf6de3aa74561f6cb560e780d360f89a9c6c3550502dd05bdf2099d714d0bedb459c939c5a3ef9b68327f156921c63adb11bf516ac486a8a89b571df2c9fe48379ec5e806aab6beca8e4673067ca9765f7c6b0144256a2f8a53e5c0b18fe553d8ebfc5c6b5ae1b8b4d08fe14dbcf9bebdef79a0e3ddafb74fce69c7e44348a4f09452e32285aa0d4d5e028b7d3e9401482ba59f117eef1ba8721a6427d892bdb97156d0dcd0c54c420a7f0d5bd3214425d3b74bdb16966cbe9d975b444219ab4a7e7d203c8d025dc5f66cb96f5d7161f60c56c5617ce12a39ac60109de4c3ed7c0253932419e9fa18ab221bdf90e7c87ad3f31420f3570fb36fba58794b6239d11fc5fa2491e328e18f8421aa551fde75cc994e35389ecfe07eeef3b304e9df362b5153bac9b47fc1529f31ee7c528ccd7d726755cfe6f7ccb34c9b82ec2490872c067babf726a6141a985ed41292d26de1a5dbeac943c1cb47cf110e808602891eac38e767447cc3b1bebefefa78abf13a4c645fa25c5bcf0edc1d209184b05b9d097fb90710cdee4a06032c998187857b754bc6627355d17ba09a2f707df6b445a72a43efb0e2c4698e1b60dcd99c0195028456ad920a670b1ace665041100e3ef3a05eb2c0ec6da95e0a3dba83bbeb0a1de2ec31239c056baa7d4ea38be4f60370915ebdae94194306235f4d0edf2940201455ac1a3c23e2a214cea8c2bf07f598bc1bc7e6d27f7a532b8bb4d4f533b51e67adbdd700254371a096fdb2bb15ad757086409c6d115b56d664b63d19d4347e9b6739a055785f0314cf6d0d2d7f9fbefb338032a2e2cbac6020969ff430f6afb00d67a95a881bd192e5d6deadc94c1c4d204bbf0f18dac0dc471d0930c84c74b23ac56d026fcc4f2f0c0ae82c05ba7311074f3dc58e4f23463ee6cc5fc21aef744440afb9694667f9cc2be2b9264a637cf67d203de318efa617d8e6dd722047eb50ad1f3b35a9293faa4630b288fdf26ede386646dbf7ec678b5f0efe0087ded67d0e6910bbd770434e865f73503dee4068963e71fa08f727bbe2a4d40f9ba381104ed9570733a72efcf10bc7518011fce51bf85c46a3effde7f0ece893bf4073d2b134a56f16d5986da45f1e73b0d65bf4b01a9cf691fce0fd085ea9c76b73d6ec686ad519726bf3ba28a3b91c27c7a3b45034b8019a7be2a4b735880172b4dfee8a8fe6119d2325ab82cf7113f6f0d342f0908ae90d3d7be704b5547a639a5185bf1aa08e07cd73e030fd405c199f2f7bef442e540efe3eac5e96b5a97721c9e0ed460a78dbeaa5326377538cc9969b6b6ae6c4d301a43b0b5ffd4f9bcb254e453a3eec85b229fd269eda70fb1e582f53952ae2ecf368283a22f122ecd46151103b943554b8150cf910106a9c090797de8ddc585ac1da9dddd00de4efc589b5a2dbec10ec9ba2269839d85919b6c6e671c0309dc1954e080ad58e0c5d530468aa772560676072564e2900fb26865f9e25939ea14ecd211352f0604a299192c28c184d2008a00f4a8489ec54ad38fdd1949bfc84192096ca40c808cdfa3c3c1d4fce8c579aa3ae498a67773d7d992fcfa6d45c0f6065c8aed980780226325d9e9119f0b5ce5baed3799ac0ca02efd32092212c2cfbe4dd322a1d4ad274dbb506681c45bd8d5722ceabb98b16556873554a138f29d5243b0a3cd257a7493b7aa30315c56fe0a5948912e90dc69bb7194699044957c6458f701b30cea3bd6fd093f4c09799af3c237432224ef7dd60e569a04e00228477fe54f3c570d3848b7e4bd88e46459fc1baa7c8bf89342f53417f32c319cf29dc41b9ff7f164a7960a2179491fb6647ead5f94e3b88170a4fc2e3a110be015754c8fdb65d270082055ddcad8fa35979bf106f99b264b18817d1fb59cb8a4828ffc8cb2d285dfbf050ba0e206df303b7c04e92bb4b90594d0b392138482bd3fb8aa19639774f0bfcbd0c0181da79cb2536fd3553399eebb3fc8d524fabb6e747ca3babdcd743883675c6bf88fcf7469f66d7985acdd667f93c7e6a579cd44658083ac786e1418c88094761dfdaf9a1c6f94ae78d0b436b9d390fbc9393a0af7c1d217b8ec73e872935099e06b4a5d75e94b970a119702bbd5d9e4c8339eeeca8ae7bcfd2c9d8f86efe2ac656e75879fd6f1d30b76a18fc9c1a27eab6be521a4743fdc506c50e25ff55a187b971af9e8253da6858daef1169d28ff5acbf73e85aaf13101b405d74eb6ca1d21f354512b96c61c10dc7c7c3098a9d3b6a89e8fe1a545ced40a796547612cc74d645dc77e3cb266004058276b2b7372cce510ab49906c958684a58eead5274e3985ea892346de1f0bf3a7276915c5c32951f7cc89947495026b484c87d46bf1a6b9cccbe885614bf34c82cf0c034475a5b8480106635311860639bd1a33559cd39e3f46fe90652c52ffd1fbf25b8d8ed363ce959068ea82467050e6a9dfbd8a0d684496e0a2af09a154e914077fd559bbf32e1a0bb3cc6e38decebe40673640768c8f67c44ca7c26895ddf2d61e15374dae6102e9e39795a030e12613816be2aff7b2d32c0dbcd0faf148ca9dd199b3b8b03c875e412c3f598277dad813a6683b6445823257e2345326a373bd5d1d542212058ca8ab7c054867d9b4b4f88d675cab1ce87bfd5fb24accadbc6a7b891ff37ef150653248525df1b50fcd655cfcbbdcab7529e6fff1894f061623d703615f4565fffe6fc6b984de73af57bef3809c23978f587a9b7e3028b650ce04e4118e6f5e4f5be512141e892c41d417a4267c74e8838d1b4c8ed64f1bde8dddd57921564b7f0f98b9d8c3c7e081b7c32ba59c7b0080e9004c4fc5d06f0c2662a4e274c8d6c913945d6cc7259d6c8b53dbcdd98b779800793d421b16453e42084ddbba43d0e4e847e920208cbea6837a843334ed387d628e82006664679af9b47d352bea02aaa4fe1575cd6ee9bb6dfe7b7a2ef31da270a9d82650f08523b0a1f86e9bca43000d1a04df50f0a63a639ff982c2979995639a7e877bf9e7a376677728c341ccc15cbbd9b02eabbefdb1b493f4b70e68e98592d8ddd00cf2cb9ce664a7b8a30b31101b27f1b59f2654dcfdf42554a3969196c47bd795f14ab4480182ba392aa379249e497f78a99dfdc1eadc3175ec36dc8c0e5b126476a0876d478a710b8d202223e9a0d3137bcdf6a3a51c1eff1bef6eb5dda7b5dc6aff59a78d9644f784378a156d954eab0e1ce6e082645bac3184cf5e74e050b959e4a97fcfc97186219c7e0b538ac35844c36f71a7a52169f98acf855d743c100278a10200f957970372d8d65d00c870c74b017ab74e8aad6070f34d5407b6dab682e13b3348377d5d0d19663d0811051faec58ae6e26efb1b32074cb4dc7d653ee38c4888d7372123aa8388fb301eb86d200b24e24a17208614e8cf199cc4a167764ccf4b784cb4f395c72aa1d2325047e7caef334ea00c0e354d98f24f7b185902d3a1ea5216375a204f3d02d9c44f6fa60facc568df5546032f768450944c266608794b0acfa0773c9c0ec450b91419767dfcca34464db6f24a1913db2a222991f1ddb7066b54650bedde7c973c84501a57089b1e22788f139004b0dbc577515eeafbc4a3e2bb0a80d0a460990ee9d59bb8b123e645f66eb5198957d251026413413d4710c677a5788a583f364804008430742db695d297846bd9129cd6a8dfd371742f99b34384399487aab0dedc68230e45070121b2e4e50d82a37f23275a5df0ddc8b2aca2cc001a5f25d50d0a23d576f6ccbc1c2469911d021afba673200829cfa22765f12320c9e6d48f5a339b22d43b4ac5974fc2a6066102c82322d56b987cd7a1da7a5f0e32579dd1a06bce937673ab7d14bdd0ff83d9bb9a55ce27132c7723fe3c1112076fdb40347f3ffb1417bd1d4fc1ce1950b22ed7a230b616e513545161fce948f81255310580b9487e6eefc1dc6b1efb06a2a25a542d2ddf0452589b45474d1bf8482e5e30547f155f10d5c80629dee1d70cef0f82fd758a5d09003b94f1c31690d9033a2af5ccd06ac6f649661fd267142e680fe512b2f35a3bbe0a72ae2a1a21a9c97e6147d4c5c6b3f3e87b45f4d8438809680b7a28c10192ce1e8897535f62e0611d76d767fab9cfa872fa2ca63d8b8577d361e50f72c4d787f024431f9742776a12d36c6dce2172d10e3cd4d672267e1dee9b5a10b67c5e17837242e44cec0c437913cd42d1aae68f5f46acf5ac564af7341b46ef5f5adbff5ae2ae485864888f19da42b2ee32481eb13b1eb2360ad6897804e5e6a647e363355a04b563e07b63f109f2789dd1c44693017dfb2e968114a4bc1de9cc1c205931d813b54f3a43a57c2e939cd3deb127c17aaa9d504b7ecc7ee27c7ad51dd86be097b6910b8dd5d14fb89716fc0859c34471d2a8c560a9ecde644d1f5ed2487dfcb4ba84ee44f2ab0f3c7962cd4a62c6cc2ceb3d3daa365aa543e89933a0b288a7db364075a8f7e8a266e54fb489b2c6a4548ef61868ec48436e894b8b4be716c93971d21ec7e3b4ae1b65f583b339053e95f6eaa4032b8a06f98c4c313fa5927ab170590006ae18debd77c233c4c16528b53527d95a7ebfc29c4b17a0d278bf320bf968f5c6b570cc31156ac4d651a"}, 0x1008, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wpan3\x00', 0x0}) select(0x40, &(0x7f0000001240)={0x8, 0x8, 0x9, 0x0, 0x6, 0x0, 0x15, 0x8}, &(0x7f0000001280)={0x2, 0x3ff, 0x2, 0x7ff, 0x5, 0x9, 0xea, 0x9}, &(0x7f00000012c0)={0x2, 0x100000001, 0x780b, 0x7, 0x206, 0x4d38, 0xffff, 0x5}, &(0x7f0000001300)) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0x8c, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "f714377dcc0111c4dcca9fb4ece4202e5338e1db0a6489c9810061448e648c3d"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "ac9bb8c269a0435d1607aebb96ea226f"}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "216a07bb0e6b367addaa1f9770e72dab"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r5 = msgget(0x2, 0x404) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000001500)=""/200) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001600), 0x20081, 0x0) sendmsg$nl_netfilter(r6, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001680)={0xdc, 0x3, 0x6, 0x201, 0x70bd2d, 0x25dfdbfc, {0xc, 0x0, 0x1}, [@generic, @generic="0489a3beec03ee5276dfa1de8e83f2013239bb3a2964d706319fdbb52a871edd3e801e2c57ddb5943f12bf19480b26d0998aac2869d37447ca620fd7701feeaafd59f71b87744252b30c0fed83fec9448a6c45b68a19ce7c3e92aa175eae682f3335f6b49e053c197741dc50689ec9dce2516b3ceecbacbd5938a3122276076ed1117e0fb99f7b9ec0e68eee8c524435fa8094d88e1ed41b57c7853dfd0dcee36f55ff30ed2753e5c76a2d", @typed={0xc, 0x9, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x8d, 0x0, 0x0, @u32=0xd4}, @typed={0x8, 0x37, 0x0, 0x0, @u32}, @generic]}, 0xdc}, 0x1, 0x0, 0x0, 0x90}, 0x4000080) msgsnd(r2, &(0x7f0000001800)={0x3, "657fdf92a96b8dcf97af535d75b9a6b8abb66a0a250fa6a4f7383d7336ba0c1d056694ffcad037c189e898bfc52497945684c84e8dd6c123d0269ad652816097be1b3d8f42d30f4270e2ecbe9ad62b1f683ccbc2979b7d505787e1fd"}, 0x64, 0x800) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000001880)=""/227) r7 = msgget$private(0x0, 0x202) msgctl$IPC_INFO(r7, 0x3, &(0x7f0000001980)=""/102) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x8}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24040004) [ 82.586539] audit: type=1400 audit(1731135119.597:7): avc: denied { execmem } for pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:51:59 executing program 4: sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40041) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/clockevents', 0x1, 0x1a8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x18, 0x34, @random="13827c6de29466f7f12956f85e4c207b5d60c64e"}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x8, 0x4, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000401d}, 0x8000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc8, r2, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xaa}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x286d}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfd}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) r3 = gettid() kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r0, &(0x7f00000005c0)={r0, r0, 0x59}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfff9}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000880)={0xdc, 0x75, 0x2, {0xd1, "3b55940440e31dc5d0c8196316b454eefa4b53f9184f587350ac49d953b537992e55dc68afa3c02200b1f98724ae955b8e4e1740ac4b594c6ec03325c8269373e2596d14204f73a70f804778b3df43661621e56bdc1f41bfb467d273d5162910c2cb37a26c69591a0cf9c3415b585f658a237cee1bbb6b94a3a9b4e4f614088fc5497b2570848cec3f4605a95e7f8d6ba7e1c857a3dfb813a9f5a8167c957673092e291aebc39a0a418ad43b081524751d3d6e97dd34b56976310ea35c51e40b9ea5379d65fd658364dc1b24e73727766d"}}, 0xdc) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a40)={0x328, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x30, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "368f5410bfc6473c3e776dc3a910b93baa4549504df1a66ddd05b4e298020050"}]}, @NL802154_ATTR_SEC_KEY={0x128, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9bb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c83ef1a264a43382605cf1b547a059c82bfa700a6f5dd86b1308076af4e5b314"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "94fd3ecacdedefedd52b08e084031582"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9023c1374a4f0692b787aba2fa4f1a91d1fba172b151a956a951ff268282f92e"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cec706182156de1aa7717bec20f19e39aa6b5e83bbe308ec3409d209b90ad8b4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "770f6759f025a15adff9e46ce5836578b8ebec8aa48cf36c840da19b36c82cc3"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xd2}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a8eea36ef4d2185717135ee692ffff66"}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x41}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c7bde8d4a0f71a2c569e2b68e4b8b08a"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x900000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x100, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xbc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c2a5e81c2b158efbb647b1fbbe652e1c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cba3e0f18397a71373ffc7f8b31bb6890dcc23355c932d7b10bdcb5070f40f6b"}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r9, 0x402, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x28044) 06:51:59 executing program 5: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x0, 0x0, 0x1}}, 0x14) write$hidraw(0xffffffffffffffff, &(0x7f0000000080)="466a15bd6f83021aec425193d7bec6ad8420f4917e35e25f518f3e6c8e822ea7f74628679b3f84a55005ec322dcb99d7", 0x30) write$P9_RCREATE(r0, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x1, 0x1, 0x2}, 0x5}}, 0x18) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x35}, @val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2689e74558c34da3224a32805b2eca37ef9df43245594a71"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x811) socketpair(0x0, 0x5, 0x7f, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa0000011}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1b4, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7d4}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x70, 0xac, "7247b1c78b7b028cf782339defd5703f469d911e4846c5f0adca2cea548a10da0a72d0dab6f741419387ae7017f521f656f5b2d70ea06b82d7a6b958257454a15c4a821b76477d5b15daa74d68de0034293930e22d0b30c453d6ff3d42e6ef43a3bbafd443ce342af993d52a"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xb000}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xfe, 0xbe, "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"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5e2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8081}, 0x20000001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000005c0)={0x20000000}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0/file0\x00'}) write$cgroup_pressure(r4, &(0x7f0000000640)={'full', 0x20, 0x1, 0x20, 0x8}, 0x2f) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000680), 0xc0, 0x0) write$P9_RREADLINK(r5, &(0x7f00000006c0)={0x16, 0x17, 0x2, {0xd, './file0/file0'}}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x4b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x48}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, '.\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r6) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 06:51:59 executing program 6: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc200, 0x26}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000018, 0x4000010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) r2 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x61, 0x2a}}}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x0, 0x6, 0x0, {0x7fffffff, 0x1ffc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x4, 0x39}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x2, 0x1, 0x0, {0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x7, 0x81}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044004}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x110, &(0x7f0000000340)=0x9, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xf5a7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4040884) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x8a}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4040040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x10) syz_io_uring_submit(r0, 0x0, &(0x7f0000000700)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x9, @fd=r2, 0x40, 0x0, 0x0, 0x2}, 0xd6) syz_io_uring_setup(0x4e48, &(0x7f0000000740)={0x0, 0x160a, 0x4, 0x1, 0x8, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000840), 0x200, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd3, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x8890) syz_io_uring_setup(0x7b88, &(0x7f0000000a80)={0x0, 0x5e9d, 0x10, 0x2, 0x2df, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000b00), &(0x7f0000000b40)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3eeb}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) syz_open_dev$hidraw(&(0x7f0000000c80), 0x5, 0x20900) 06:51:59 executing program 7: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f0000000080)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7474}]}, 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x20004091) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r2, 0x733b577a0099402f, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x10044) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000801) io_uring_setup(0xeb7, &(0x7f0000000500)={0x0, 0xd658, 0x0, 0x0, 0x321}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, r4, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x78}}, 0x800) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20008001}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x8}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x9}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x20}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xfd}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8881}, 0x800) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r8, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0a0}, 0x40) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r10, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20009800}, 0x10) [ 83.964245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.966798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.968071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.972816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.974870] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.976094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.036030] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.039230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.047106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.050659] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.052943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.053901] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.055166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.061067] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.062934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.063725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.065738] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.068965] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.073692] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.087791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.089812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.121021] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.123776] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.126287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.130891] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.138685] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.141858] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.144064] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.149473] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.152930] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.156685] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.164826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.164828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.166104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.170713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.181993] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.188719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.191000] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.191895] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.203939] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.207671] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.209629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.209833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.215704] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.219106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.242696] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.253664] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.256799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.051865] Bluetooth: hci0: command tx timeout [ 86.114526] Bluetooth: hci2: command tx timeout [ 86.114543] Bluetooth: hci3: command tx timeout [ 86.243539] Bluetooth: hci7: command tx timeout [ 86.306719] Bluetooth: hci4: command tx timeout [ 86.307392] Bluetooth: hci6: command tx timeout [ 86.307655] Bluetooth: hci5: command tx timeout [ 86.371611] Bluetooth: hci1: command tx timeout [ 88.099549] Bluetooth: hci0: command tx timeout [ 88.162768] Bluetooth: hci3: command tx timeout [ 88.163341] Bluetooth: hci2: command tx timeout [ 88.292484] Bluetooth: hci7: command tx timeout [ 88.354622] Bluetooth: hci5: command tx timeout [ 88.355638] Bluetooth: hci6: command tx timeout [ 88.356202] Bluetooth: hci4: command tx timeout [ 88.418515] Bluetooth: hci1: command tx timeout [ 90.146624] Bluetooth: hci0: command tx timeout [ 90.210830] Bluetooth: hci3: command tx timeout [ 90.211320] Bluetooth: hci2: command tx timeout [ 90.338662] Bluetooth: hci7: command tx timeout [ 90.402675] Bluetooth: hci6: command tx timeout [ 90.403174] Bluetooth: hci4: command tx timeout [ 90.403216] Bluetooth: hci5: command tx timeout [ 90.466851] Bluetooth: hci1: command tx timeout [ 92.194511] Bluetooth: hci0: command tx timeout [ 92.259515] Bluetooth: hci2: command tx timeout [ 92.260003] Bluetooth: hci3: command tx timeout [ 92.386500] Bluetooth: hci7: command tx timeout [ 92.450568] Bluetooth: hci5: command tx timeout [ 92.450647] Bluetooth: hci6: command tx timeout [ 92.451050] Bluetooth: hci4: command tx timeout [ 92.514512] Bluetooth: hci1: command tx timeout [ 146.607911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.610992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.612111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.614722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.620661] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.621774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.804773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.807950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.809384] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.813632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.816109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.817653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.868868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.873705] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.879970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.881229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.886217] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.887848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.892126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.893321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.905823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.924255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.937163] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.956308] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.959737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.959849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.962834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.967894] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.983948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.998562] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.008724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.012296] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.014804] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.018654] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.018704] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.022572] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.024949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.025286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.031993] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.033738] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.042898] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.046381] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.071909] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.076853] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.078993] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.101652] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.108295] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.110847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.707545] Bluetooth: hci0: command tx timeout [ 148.902724] Bluetooth: hci1: command tx timeout [ 148.962525] Bluetooth: hci2: command tx timeout [ 149.027712] Bluetooth: hci3: command tx timeout [ 149.091861] Bluetooth: hci5: command tx timeout [ 149.154817] Bluetooth: hci6: command tx timeout [ 149.155804] Bluetooth: hci4: command tx timeout [ 149.218539] Bluetooth: hci7: command tx timeout [ 150.754538] Bluetooth: hci0: command tx timeout [ 150.946514] Bluetooth: hci1: command tx timeout [ 151.010545] Bluetooth: hci2: command tx timeout [ 151.074511] Bluetooth: hci3: command tx timeout [ 151.138553] Bluetooth: hci5: command tx timeout [ 151.202510] Bluetooth: hci6: command tx timeout [ 151.203718] Bluetooth: hci4: command tx timeout [ 151.267501] Bluetooth: hci7: command tx timeout [ 152.804465] Bluetooth: hci0: command tx timeout [ 152.995132] Bluetooth: hci1: command tx timeout [ 153.059568] Bluetooth: hci2: command tx timeout [ 153.122654] Bluetooth: hci3: command tx timeout [ 153.186566] Bluetooth: hci5: command tx timeout [ 153.252482] Bluetooth: hci4: command tx timeout [ 153.252510] Bluetooth: hci6: command tx timeout [ 153.315581] Bluetooth: hci7: command tx timeout [ 154.850588] Bluetooth: hci0: command tx timeout [ 155.042660] Bluetooth: hci1: command tx timeout [ 155.107743] Bluetooth: hci2: command tx timeout [ 155.170810] Bluetooth: hci3: command tx timeout [ 155.235510] Bluetooth: hci5: command tx timeout [ 155.299498] Bluetooth: hci4: command tx timeout [ 155.300029] Bluetooth: hci6: command tx timeout [ 155.362786] Bluetooth: hci7: command tx timeout [ 209.039274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.042640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.044009] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.046324] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.047752] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.048795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.094722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.097569] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.098817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.101334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.104766] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.105993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.132948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.136996] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.138047] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.141652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.144959] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.151692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.208023] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.210739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.215820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.223696] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.234159] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.235494] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.338534] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.342154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.349970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.357998] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.364960] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.369681] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.371364] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.373662] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.375803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.400913] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.414079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.416652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.422352] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.424832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.429815] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.431698] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.450637] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.454232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.589257] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.593763] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.596714] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.600197] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.602006] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.604873] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.107507] Bluetooth: hci0: command tx timeout [ 211.171487] Bluetooth: hci1: command tx timeout [ 211.234712] Bluetooth: hci2: command tx timeout [ 211.298649] Bluetooth: hci3: command tx timeout [ 211.490503] Bluetooth: hci4: command tx timeout [ 211.491495] Bluetooth: hci6: command tx timeout [ 211.618708] Bluetooth: hci5: command tx timeout [ 211.682503] Bluetooth: hci7: command tx timeout [ 213.154511] Bluetooth: hci0: command tx timeout [ 213.219771] Bluetooth: hci1: command tx timeout [ 213.282582] Bluetooth: hci2: command tx timeout [ 213.346468] Bluetooth: hci3: command tx timeout [ 213.540376] Bluetooth: hci6: command tx timeout [ 213.540433] Bluetooth: hci4: command tx timeout [ 213.666572] Bluetooth: hci5: command tx timeout [ 213.732445] Bluetooth: hci7: command tx timeout [ 215.202605] Bluetooth: hci0: command tx timeout [ 215.266554] Bluetooth: hci1: command tx timeout [ 215.330494] Bluetooth: hci2: command tx timeout [ 215.396561] Bluetooth: hci3: command tx timeout [ 215.586563] Bluetooth: hci6: command tx timeout [ 215.588073] Bluetooth: hci4: command tx timeout [ 215.715590] Bluetooth: hci5: command tx timeout [ 215.779673] Bluetooth: hci7: command tx timeout [ 217.251481] Bluetooth: hci0: command tx timeout [ 217.315482] Bluetooth: hci1: command tx timeout [ 217.378478] Bluetooth: hci2: command tx timeout [ 217.443605] Bluetooth: hci3: command tx timeout [ 217.634509] Bluetooth: hci4: command tx timeout [ 217.634527] Bluetooth: hci6: command tx timeout [ 217.763573] Bluetooth: hci5: command tx timeout [ 217.827749] Bluetooth: hci7: command tx timeout [ 271.347001] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.351632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.352803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.360118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.363746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.365933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.368238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.372659] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.375235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.378548] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.387542] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.392758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.545857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.549063] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.551285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.555521] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.560001] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.568657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.592939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.595525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.600016] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.604784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.607329] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.611232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.690971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.715454] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.720578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.730060] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.743705] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.745842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.756797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.758793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.761993] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.764179] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.766938] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.790667] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.795176] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.801345] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.804467] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.808201] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.811121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.830752] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.835671] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.836738] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.844774] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.852029] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.853992] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.855066] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.443503] Bluetooth: hci1: command tx timeout [ 273.443587] Bluetooth: hci0: command tx timeout [ 273.634614] Bluetooth: hci3: command tx timeout [ 273.634623] Bluetooth: hci2: command tx timeout [ 273.827469] Bluetooth: hci4: command tx timeout [ 273.890606] Bluetooth: hci5: command tx timeout [ 273.890800] Bluetooth: hci6: command tx timeout [ 273.957129] Bluetooth: hci7: command tx timeout [ 275.490513] Bluetooth: hci0: command tx timeout [ 275.493472] Bluetooth: hci1: command tx timeout [ 275.682607] Bluetooth: hci3: command tx timeout [ 275.682660] Bluetooth: hci2: command tx timeout [ 275.874466] Bluetooth: hci4: command tx timeout [ 275.938801] Bluetooth: hci5: command tx timeout [ 275.938820] Bluetooth: hci6: command tx timeout [ 276.002497] Bluetooth: hci7: command tx timeout [ 277.538615] Bluetooth: hci1: command tx timeout [ 277.539957] Bluetooth: hci0: command tx timeout [ 277.730560] Bluetooth: hci3: command tx timeout [ 277.732342] Bluetooth: hci2: command tx timeout [ 277.923697] Bluetooth: hci4: command tx timeout [ 278.006535] Bluetooth: hci5: command tx timeout [ 278.007894] Bluetooth: hci6: command tx timeout [ 278.050545] Bluetooth: hci7: command tx timeout [ 279.586505] Bluetooth: hci0: command tx timeout [ 279.587014] Bluetooth: hci1: command tx timeout [ 279.779518] Bluetooth: hci2: command tx timeout [ 279.780027] Bluetooth: hci3: command tx timeout [ 279.973436] Bluetooth: hci4: command tx timeout [ 280.034630] Bluetooth: hci5: command tx timeout [ 280.035114] Bluetooth: hci6: command tx timeout [ 280.098634] Bluetooth: hci7: command tx timeout [ 333.748323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.751243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.753251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.759226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.762355] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.802177] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.820161] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.827110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.828570] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.833334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.835292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.836685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.066625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.072764] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.080572] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.099774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.103025] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.105823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.107554] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.108589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.110185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.112323] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.116081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.116106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.118243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.119471] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.121104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.122164] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.123747] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.133257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.157985] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.159316] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.162227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.166967] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.168534] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.188354] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.200619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.222242] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.223946] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.232981] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.242215] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.248524] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.268174] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.280112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.285606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.294236] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.298117] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.301913] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.844507] Bluetooth: hci0: command tx timeout [ 335.906465] Bluetooth: hci1: command tx timeout [ 336.162624] Bluetooth: hci3: command tx timeout [ 336.162838] Bluetooth: hci2: command tx timeout [ 336.227695] Bluetooth: hci4: command tx timeout [ 336.290530] Bluetooth: hci6: command tx timeout [ 336.355430] Bluetooth: hci5: command tx timeout [ 336.420474] Bluetooth: hci7: command tx timeout [ 337.890539] Bluetooth: hci0: command tx timeout [ 337.954473] Bluetooth: hci1: command tx timeout [ 338.210463] Bluetooth: hci3: command tx timeout [ 338.211694] Bluetooth: hci2: command tx timeout [ 338.275648] Bluetooth: hci4: command tx timeout [ 338.338723] Bluetooth: hci6: command tx timeout [ 338.402653] Bluetooth: hci5: command tx timeout [ 338.467493] Bluetooth: hci7: command tx timeout [ 339.939493] Bluetooth: hci0: command tx timeout [ 340.003433] Bluetooth: hci1: command tx timeout [ 340.258492] Bluetooth: hci2: command tx timeout [ 340.258516] Bluetooth: hci3: command tx timeout [ 340.322495] Bluetooth: hci4: command tx timeout [ 340.386448] Bluetooth: hci6: command tx timeout [ 340.452449] Bluetooth: hci5: command tx timeout [ 340.514513] Bluetooth: hci7: command tx timeout [ 341.986450] Bluetooth: hci0: command tx timeout [ 342.052318] Bluetooth: hci1: command tx timeout [ 342.306454] Bluetooth: hci3: command tx timeout [ 342.307944] Bluetooth: hci2: command tx timeout [ 342.370511] Bluetooth: hci4: command tx timeout [ 342.434448] Bluetooth: hci6: command tx timeout [ 342.498485] Bluetooth: hci5: command tx timeout [ 342.562438] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 06:57:09 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000354 RCX=ffffffff81155647 RDX=ffff88802dddd280 RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88802be6ff58 RSP=ffff88802be6fed0 R8 =0000000000000001 R9 =ffff88802ddddcb8 R10=0000000000000005 R11=0000000000000001 R12=0000000000000014 R13=00007f3fe2d8d000 R14=0000000000000000 R15=ffff8880287a9300 RIP=ffffffff8151dc88 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3fe2d8b540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3fe2d8d000 CR3=000000002ef5c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=1ffff110050d0f5c RDX=1ffff110050f04b7 RSI=0000000000000001 RDI=000000003898f65d RBP=ffffea0000d3dd80 RSP=ffff888028687c68 R8 =0000000000000000 R9 =fffffbfff0fdc5e4 R10=ffffffff87ee2f27 R11=0000000000000001 R12=0000000000000001 R13=0000000000000011 R14=ffff88807ffdc680 R15=0000000000000001 RIP=ffffffff8485d8c0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f107dec5540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff37727ff8 CR3=000000002adea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000