Warning: Permanently added '[localhost]:43026' (ECDSA) to the list of known hosts. 2025/01/13 20:07:51 fuzzer started 2025/01/13 20:07:52 dialing manager at localhost:35571 syzkaller login: [ 63.056804] cgroup: Unknown subsys name 'net' [ 63.148797] cgroup: Unknown subsys name 'cpuset' [ 63.182929] cgroup: Unknown subsys name 'rlimit' [ 68.808776] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/13 20:08:10 syscalls: 200 2025/01/13 20:08:10 code coverage: enabled 2025/01/13 20:08:10 comparison tracing: enabled 2025/01/13 20:08:10 extra coverage: enabled 2025/01/13 20:08:10 setuid sandbox: enabled 2025/01/13 20:08:10 namespace sandbox: enabled 2025/01/13 20:08:10 Android sandbox: enabled 2025/01/13 20:08:10 fault injection: enabled 2025/01/13 20:08:10 leak checking: enabled 2025/01/13 20:08:10 net packet injection: enabled 2025/01/13 20:08:10 net device setup: enabled 2025/01/13 20:08:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/13 20:08:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/13 20:08:10 USB emulation: enabled 2025/01/13 20:08:10 hci packet injection: enabled 2025/01/13 20:08:10 wifi device emulation: enabled 2025/01/13 20:08:10 802.15.4 emulation: enabled 2025/01/13 20:08:10 fetching corpus: 0, signal 0/0 (executing program) 2025/01/13 20:08:11 starting 8 fuzzer processes 20:08:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x7}}, '.\x00'}) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x42e, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2176}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6ff4c4d3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff0000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7c100e4b}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5e}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000280)) mount_setattr(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1000, &(0x7f00000002c0)={0x100000, 0x9, 0x80000, {r1}}, 0x20) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000300), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)={0x5, {{0x2, 0x4e24, @broadcast}}, 0x4f98a331ca593cca, 0x6, [{{0x2, 0x4e23, @remote}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}]}, 0x390) openat$cgroup_freezer_state(r3, &(0x7f0000000740), 0x2, 0x0) truncate(&(0x7f0000000780)='./file0\x00', 0x14b) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000800)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x1, 0x8, 0x4, 0x0, 0x800]}, &(0x7f0000000880)=0x78) r5 = syz_io_uring_setup(0x76ea, &(0x7f00000008c0)={0x0, 0x296a, 0x10, 0x0, 0x29}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000940), &(0x7f0000000980)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r5, {0x1, 0x2}}, './file0\x00'}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000a00)={'syz_tun\x00'}) accept4$inet(r4, 0x0, &(0x7f0000000a40), 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x5d}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb24}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe10}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r7, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x18}]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x84) 20:08:11 executing program 4: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x5ed, 0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x2, 0x8000}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x181000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x3, 0x80}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r2, &(0x7f0000004200)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000480)=""/126, 0x7e}, {&(0x7f0000000500)=""/166, 0xa6}, {&(0x7f00000005c0)=""/56, 0x38}, {&(0x7f0000000600)=""/169, 0xa9}], 0x6, &(0x7f0000000740)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/91, 0x5b}, {&(0x7f0000000900)=""/78, 0x4e}, {&(0x7f0000000980)=""/99, 0x63}, {&(0x7f0000000a00)=""/197, 0xc5}], 0x4, &(0x7f0000000b40)}}, {{&(0x7f0000000b80), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000c00)=""/217, 0xd9}, {&(0x7f0000000d00)=""/114, 0x72}, {&(0x7f0000000d80)=""/166, 0xa6}], 0x3, &(0x7f0000000e80)}}, {{&(0x7f0000000ec0), 0x6e, &(0x7f0000001240)=[{&(0x7f0000000f40)=""/206, 0xce}, {&(0x7f0000001040)=""/250, 0xfa}, {&(0x7f0000001140)=""/162, 0xa2}, {&(0x7f0000001200)=""/61, 0x3d}], 0x4, &(0x7f0000001280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001340)=""/49, 0x31}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/187, 0xbb}, {&(0x7f0000002440)=""/111, 0x6f}, {&(0x7f00000024c0)=""/2, 0x2}, {&(0x7f0000002500)=""/109, 0x6d}, {&(0x7f0000002580)=""/66, 0x42}, {&(0x7f0000002600)=""/151, 0x97}, {&(0x7f00000026c0)=""/244, 0xf4}], 0x9, &(0x7f0000002880)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000002980), 0x6e, &(0x7f0000003c00)=[{&(0x7f0000002a00)=""/220, 0xdc}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/189, 0xbd}, {&(0x7f0000003bc0)=""/17, 0x11}], 0x4, &(0x7f0000003c40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003cc0), 0x6e, &(0x7f0000004180)=[{&(0x7f0000003d40)=""/115, 0x73}, {&(0x7f0000003dc0)=""/252, 0xfc}, {&(0x7f0000003ec0)=""/49, 0x31}, {&(0x7f0000003f00)=""/141, 0x8d}, {&(0x7f0000003fc0)=""/142, 0x8e}, {&(0x7f0000004080)=""/235, 0xeb}], 0x6}}], 0x7, 0x40002022, &(0x7f00000043c0)={0x0, 0x989680}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000004400)=0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000004480)={0x2, &(0x7f0000004440)=[{0x5, 0xff, 0x13, 0x7}, {0xfc0, 0x3, 0x0, 0x3}]}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f00000044c0)={{0x21, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e22, 0x1, 'none\x00', 0x20, 0x400, 0x69}, {@private=0xa010102, 0x4e20, 0x1, 0x20, 0x80000001, 0x2}}, 0x44) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004540), 0x1000) r7 = io_uring_setup(0xab0, &(0x7f0000004580)={0x0, 0x3076, 0x10, 0x2, 0x211, 0x0, r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x20010, r7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000046c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004600)="98be4f53d1c7d7aa906a812ba701b501b1c4cbffde88c2daf93304d20ac97c16e396ead2208ba6f7ae2348f05341e3a8bd2495986fda088a2d18051701a12e46e571e2db27fe409971c2cd95414288ccf5610662566304e8c2e99a582df0f5b9ab47e229bfe94ffda256f6b3955c184c3b1c61a5ccc40fd3fa08bdde0e2a6e5b352c3eb1416ccec519d874276e0ec4fdf42189f6dcfa5808ea4e17765c64417691517047", 0xa4, r3}, 0x68) 20:08:11 executing program 1: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xd5faf86172c62cf8}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x6c18853f29ceae72}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0xb0e6185e1ae8e8fd, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x20048814) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan4\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8090800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x40000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x800, 0x8001, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000811}, 0x20000000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x9c, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "6a7942eb7238db3ca09b2620867885fe"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "def95d962a2d9fa8880df0c020341fe3"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "8bb2c1d97422772642c3618378e0b5edac9a5d3795d7bb55eb9b45971d7559f8"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4004850) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40840) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000b00)={'wpan4\x00'}) 20:08:11 executing program 3: ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="f434d0f46f116871e0046a7b0f5c1ddf118bb2ddb16625e26f547ef640c08b3ad4714846a29dcfcecc16e74b", 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, @xdp={0x2c, 0x5, 0x0, 0x32}, @can, @vsock={0x28, 0x0, 0x2711, @local}, 0x8000, 0x0, 0x0, 0x0, 0xffff, &(0x7f00000000c0)='wg2\x00', 0xfffffffffffff001, 0x1, 0x3}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x31d003) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) recvmmsg$unix(r1, &(0x7f0000003b80)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)=""/78, 0x4e}], 0x1, &(0x7f0000000440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/16, 0x10}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/155, 0x9b}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000880)=""/123, 0x7b}, {&(0x7f0000000900)=""/139, 0x8b}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/65, 0x41}], 0x9, &(0x7f0000000b80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c40)=""/248, 0xf8}, {&(0x7f0000000d40)=""/237, 0xed}], 0x2, &(0x7f0000000e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000000f40)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000000fc0)=""/197, 0xc5}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/33, 0x21}, {&(0x7f0000003100)=""/67, 0x43}], 0x5, &(0x7f0000003200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000003300)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000003380)=""/172, 0xac}], 0x1, &(0x7f0000003480)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003540)=""/58, 0x3a}, {&(0x7f0000003580)=""/80, 0x50}, {&(0x7f0000003600)=""/148, 0x94}, {&(0x7f00000036c0)=""/255, 0xff}, {&(0x7f00000037c0)=""/94, 0x5e}, {&(0x7f0000003840)=""/62, 0x3e}, {&(0x7f0000003880)=""/147, 0x93}, {&(0x7f0000003940)=""/15, 0xf}, {&(0x7f0000003980)=""/77, 0x4d}], 0x9, &(0x7f0000003ac0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x6, 0x12042, 0x0) recvmmsg$unix(r1, &(0x7f0000008880)=[{{&(0x7f0000003d00)=@abs, 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000003d80)=""/59, 0x3b}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004e00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004e40), 0x6e, &(0x7f0000006180)=[{&(0x7f0000004ec0)=""/118, 0x76}, {&(0x7f0000004f40)=""/129, 0x81}, {&(0x7f0000005000)=""/85, 0x55}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)}, {&(0x7f00000060c0)=""/187, 0xbb}], 0x6, &(0x7f0000006200)}}, {{&(0x7f0000006240), 0x6e, &(0x7f0000006780)=[{&(0x7f00000062c0)=""/129, 0x81}, {&(0x7f0000006380)=""/69, 0x45}, {&(0x7f0000006400)=""/162, 0xa2}, {&(0x7f00000064c0)=""/94, 0x5e}, {&(0x7f0000006540)=""/199, 0xc7}, {&(0x7f0000006640)=""/84, 0x54}, {&(0x7f00000066c0)=""/176, 0xb0}], 0x7, &(0x7f0000006800)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f00000068c0), 0x6e, &(0x7f0000007b80)=[{&(0x7f0000006940)}, {&(0x7f0000006980)=""/130, 0x82}, {&(0x7f0000006a40)=""/4096, 0x1000}, {&(0x7f0000007a40)=""/121, 0x79}, {&(0x7f0000007ac0)=""/83, 0x53}, {&(0x7f0000007b40)=""/60, 0x3c}], 0x6, &(0x7f0000007c00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000007d00)=@abs, 0x6e, &(0x7f0000008300)=[{&(0x7f0000007d80)=""/131, 0x83}, {&(0x7f0000007e40)=""/255, 0xff}, {&(0x7f0000007f40)=""/167, 0xa7}, {&(0x7f0000008000)=""/229, 0xe5}, {&(0x7f0000008100)=""/77, 0x4d}, {&(0x7f0000008180)=""/176, 0xb0}, {&(0x7f0000008240)=""/116, 0x74}, {&(0x7f00000082c0)=""/12, 0xc}], 0x8, &(0x7f0000008380)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000008580)=[{&(0x7f00000083c0)=""/164, 0xa4}, {&(0x7f0000008480)=""/152, 0x98}, {&(0x7f0000008540)=""/2, 0x2}], 0x3, &(0x7f00000085c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000008680), 0x6e, &(0x7f0000008840)=[{&(0x7f0000008700)=""/128, 0x80}, {&(0x7f0000008780)=""/176, 0xb0}], 0x2}}], 0x7, 0x40000102, &(0x7f0000008a40)={0x0, 0x3938700}) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000008a80)={{}, {}, [{0x2, 0x0, 0xee01}, {0x2, 0x5, r4}, {0x2, 0x4, r7}, {0x2, 0x6}], {0x4, 0xc}, [{0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x1}], {0x10, 0x4}, {0x20, 0x1}}, 0x5c, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000008b00)={{0x1, 0x1, 0x18, r2, {0x3e7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000008b40)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000008b80)={0x0, @llc={0x1a, 0xf, 0x9, 0x10, 0x4, 0x2}, @tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, @vsock={0x28, 0x0, 0x2711, @host}, 0x90, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800, 0x523e418f, 0x4}) socketpair(0xa, 0x800, 0x7, &(0x7f0000008c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000008c40)={@multicast1, @remote}, &(0x7f0000008c80)=0xc) getpeername$inet(r6, &(0x7f0000008cc0)={0x2, 0x0, @empty}, &(0x7f0000008d00)=0x10) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000008d40)=[0x9, 0xfffffffc]) setsockopt$inet_mtu(r9, 0x0, 0xa, &(0x7f0000008d80), 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000008ec0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000008dc0)="8ba6c8d35f5f135253f46a2101b5009a5b38fc8d6c83696723ce0a75fafc3f3671015de5ee8d7e87eb953a14ab33a00bcb80f5a3adb3c681e1c60c733ca10399427cd394ab6b5927b0cb1527d75ab96e6434a0a2e1285a29931fdf0662586c9be7ac81dcb6f18e79ba684ea4cbf6a68454bb2b7a633edf23652f42062639d158f0de292b306deb32bdd91030506255ff6aa9760ec4f9454161c5cef5d1e8836491ee808c7f9b3126cfd1d2cbb997047aa2332722acb19587e32ad82568b1d59d191ac7a386af902ef97b19cfec6fcbd907ad9751a0528a", 0xd7, r10}, 0x68) 20:08:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x410, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xe5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x80000001}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x4}]}, 0x54}}, 0x10000840) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000018}, 0x1) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x840) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x40040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0xa, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8400}, 0x2004080) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x400c804) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x80}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x43}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x20048000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, r8, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x200000c0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) [ 81.347383] audit: type=1400 audit(1736798891.736:7): avc: denied { execmem } for pid=271 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:08:11 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000fef000/0x8000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)="c92904e19ecbd5349204a9181dc6906ec452fcb59bb065dab68faa8b44c8f9dc64e8bd7e46e5dacade791a02f5b88c2114c9ba67a82e66c429199471f8889bafeef0707c8e178ba30951d7492f24e0e44a2bbbc2c132a76a3a8528b38731739a63f721460f922ab070d754fd47d5ddc7149008f19e5b685bc554dfdb73a5ac4abc4255b556800ee42fa2a7ba315ae590d894205a142c30ba1183765453354cc24a5a561bb5f037bd808de6b22cd8041932f928ba2a968aea", 0xb8, r0}, 0x68) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{0x2, 0x6, 0x8, 0x8}, {0x9, 0x1e, 0x2, 0x80000000}, {0x7ff, 0xaa, 0x3, 0x7}, {0x2, 0x3b, 0x7, 0x200}, {0xff, 0x6, 0xfc, 0x548}, {0x800, 0xe, 0x7, 0xffffffff}, {0x3, 0x5, 0x0, 0x2}, {0xd51, 0xc6, 0x1, 0x1c35}, {0xfffb, 0x9, 0x0, 0x8001}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x40}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x44004) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @empty}, &(0x7f00000003c0)=0x10, 0x80000) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000400)={0x8, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x3, [{{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}}]}, 0x210) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r2, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffd5b, 0x40}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8011) msync(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x5) clock_gettime(0x0, &(0x7f0000001340)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000780)=""/202, 0xca}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=""/162, 0xa2}, {&(0x7f0000000a80)=""/72, 0x48}, {&(0x7f0000000b00)=""/172, 0xac}, {&(0x7f0000000bc0)=""/202, 0xca}], 0x7, &(0x7f0000000d40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000e00)=""/233, 0xe9}, {&(0x7f0000000f00)=""/49, 0x31}, {&(0x7f0000000f40)=""/57, 0x39}, {&(0x7f0000000f80)=""/163, 0xa3}, {&(0x7f0000001040)=""/99, 0x63}, {&(0x7f00000010c0)=""/104, 0x68}, {&(0x7f0000001140)=""/32, 0x20}, {&(0x7f0000001180)=""/23, 0x17}], 0x8, &(0x7f0000001240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x2, 0x41, &(0x7f0000001380)={r4, r5+60000000}) clock_getres(0x1, &(0x7f00000013c0)) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000001400)=0x3) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x82010002}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, r7, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4b}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r8, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x5c, r9, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9d}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xa}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x35}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) 20:08:11 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20101, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1f, 0x34, @random="db775a7deff079391b9bfc1db7c91643505489eacd1db6be4624b7"}, @NL80211_ATTR_PMKID={0x14, 0x55, "f2c3781a64d82c8474810387a4161ced"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x3e}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa9}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x326}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xab}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}], @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x1f, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0xfa5, 0x2]}]}, @chandef_params]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa8, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x70, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @mcast1, 0xffffffff}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8050}, 0x5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r5, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdc8}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc10}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x93a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa0, r5, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffffe1, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x40018) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x138, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d9b484d00886b2f0411f948e6b61d26039750a165b32f6d8"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1de6d99c6aa6998a66d441dc95017ee7ecd403cfed3aeacf"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fb149a9cc4d6e037596eaaf06cd89cc2e39f2cade705c035"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x138}, 0x1, 0x0, 0x0, 0x40080}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000a80)={0x21, @broadcast, 0x4e20, 0x4, 'ovf\x00', 0x0, 0x0, 0x1a}, 0x2c) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000ac0)=""/98, &(0x7f0000000b40)=0x62) epoll_create(0x200) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004480)=[{{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/183, 0xb7}, {&(0x7f0000000d00)=""/170, 0xaa}, {&(0x7f0000000dc0)=""/32, 0x20}, {&(0x7f0000000e00)=""/112, 0x70}, {&(0x7f0000000e80)=""/142, 0x8e}, {&(0x7f0000000f40)=""/138, 0x8a}, {&(0x7f0000001000)=""/71, 0x47}, {&(0x7f0000001080)=""/49, 0x31}, {&(0x7f00000010c0)=""/67, 0x43}], 0xa}}, {{&(0x7f0000001200), 0x6e, &(0x7f0000002340)=[{&(0x7f0000001280)=""/152, 0x98}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000002400), 0x6e, &(0x7f0000002640)=[{&(0x7f0000002480)=""/166, 0xa6}, {&(0x7f0000002540)=""/93, 0x5d}, {&(0x7f00000025c0)=""/14, 0xe}, {&(0x7f0000002600)=""/29, 0x1d}], 0x4, &(0x7f0000002680)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f00000027c0)=@abs, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002840)=""/66, 0x42}, {&(0x7f00000028c0)=""/253, 0xfd}], 0x2}}, {{&(0x7f0000002a00)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002a80)=""/10, 0xa}, {&(0x7f0000002ac0)=""/214, 0xd6}, {&(0x7f0000002bc0)=""/11, 0xb}, {&(0x7f0000002c00)=""/43, 0x2b}, {&(0x7f0000002c40)=""/89, 0x59}], 0x5, &(0x7f0000002d40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000002ec0)=""/7, 0x7}, {&(0x7f0000002f00)=""/4096, 0x1000}], 0x2, &(0x7f0000003f40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000004080)=""/205, 0xcd}, {&(0x7f0000004180)=""/141, 0x8d}, {&(0x7f0000004240)}, {&(0x7f0000004280)=""/252, 0xfc}, {&(0x7f0000004380)=""/47, 0x2f}], 0x5, &(0x7f0000004440)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x7, 0x180, &(0x7f0000004640)={0x77359400}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000004740)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000004700)={&(0x7f00000046c0)={0x14, r1, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000004840)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x810100}, 0xc, &(0x7f0000004800)={&(0x7f00000047c0)={0x30, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x31}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x24000004) 20:08:11 executing program 7: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x3ff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x2042810) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x301941, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200448c1}, 0x820) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xcc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008804}, 0x1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r2) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4814}, 0x8811) r7 = socket$inet(0x2, 0xa, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000700)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x80045400, &(0x7f0000000780)) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8050}, 0x5) [ 82.810491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.814993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.817575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.820512] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.821989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.822935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.858760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.867492] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.870115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.871208] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.873958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.875315] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.877961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.878765] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.879758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.897010] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.899218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.902959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.937968] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.939247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.943195] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.948516] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.951097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.953352] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.955146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.956834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.961205] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.969050] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.969560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.973381] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.980873] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.986352] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.986835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.003242] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.004897] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.005592] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.008488] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.010193] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.011179] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.036175] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.038347] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.039172] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.062396] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.066758] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.069271] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.076170] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.080521] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.096121] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.884130] Bluetooth: hci0: command tx timeout [ 85.010782] Bluetooth: hci3: command tx timeout [ 85.075135] Bluetooth: hci4: command tx timeout [ 85.075946] Bluetooth: hci5: command tx timeout [ 85.076211] Bluetooth: hci1: command tx timeout [ 85.076246] Bluetooth: hci2: command tx timeout [ 85.138931] Bluetooth: hci7: command tx timeout [ 85.138965] Bluetooth: hci6: command tx timeout [ 86.930774] Bluetooth: hci0: command tx timeout [ 87.058844] Bluetooth: hci3: command tx timeout [ 87.124880] Bluetooth: hci4: command tx timeout [ 87.124935] Bluetooth: hci5: command tx timeout [ 87.125689] Bluetooth: hci2: command tx timeout [ 87.125801] Bluetooth: hci1: command tx timeout [ 87.186912] Bluetooth: hci6: command tx timeout [ 87.187221] Bluetooth: hci7: command tx timeout [ 88.979767] Bluetooth: hci0: command tx timeout [ 89.109692] Bluetooth: hci3: command tx timeout [ 89.171490] Bluetooth: hci1: command tx timeout [ 89.171584] Bluetooth: hci5: command tx timeout [ 89.171706] Bluetooth: hci2: command tx timeout [ 89.171769] Bluetooth: hci4: command tx timeout [ 89.234869] Bluetooth: hci7: command tx timeout [ 89.235597] Bluetooth: hci6: command tx timeout [ 91.027014] Bluetooth: hci0: command tx timeout [ 91.154821] Bluetooth: hci3: command tx timeout [ 91.219725] Bluetooth: hci4: command tx timeout [ 91.219865] Bluetooth: hci2: command tx timeout [ 91.220022] Bluetooth: hci5: command tx timeout [ 91.220157] Bluetooth: hci1: command tx timeout [ 91.282847] Bluetooth: hci6: command tx timeout [ 91.283929] Bluetooth: hci7: command tx timeout [ 146.865128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.868947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.870966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.899332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.903103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.905204] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.906996] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.911119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.914534] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.925169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.928279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.930258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.975095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.979163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.981814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.986294] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.989193] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.991320] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.993579] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.001877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.003824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.018865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.030749] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.034321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.049750] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.067563] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.075059] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.091239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.094898] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.098063] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.100390] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.108107] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.119163] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.123798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.123961] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.127804] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.131959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.135921] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.146790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.150072] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.151368] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.156809] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.167469] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.182159] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.219899] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.237979] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.258388] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.271060] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.946834] Bluetooth: hci0: command tx timeout [ 149.010761] Bluetooth: hci1: command tx timeout [ 149.074818] Bluetooth: hci3: command tx timeout [ 149.138909] Bluetooth: hci2: command tx timeout [ 149.202809] Bluetooth: hci5: command tx timeout [ 149.202885] Bluetooth: hci6: command tx timeout [ 149.203467] Bluetooth: hci4: command tx timeout [ 149.330761] Bluetooth: hci7: command tx timeout [ 150.996671] Bluetooth: hci0: command tx timeout [ 151.058729] Bluetooth: hci1: command tx timeout [ 151.123280] Bluetooth: hci3: command tx timeout [ 151.188185] Bluetooth: hci2: command tx timeout [ 151.251320] Bluetooth: hci4: command tx timeout [ 151.251524] Bluetooth: hci5: command tx timeout [ 151.251554] Bluetooth: hci6: command tx timeout [ 151.378773] Bluetooth: hci7: command tx timeout [ 153.043722] Bluetooth: hci0: command tx timeout [ 153.106772] Bluetooth: hci1: command tx timeout [ 153.171086] Bluetooth: hci3: command tx timeout [ 153.234843] Bluetooth: hci2: command tx timeout [ 153.298775] Bluetooth: hci4: command tx timeout [ 153.299123] Bluetooth: hci5: command tx timeout [ 153.299284] Bluetooth: hci6: command tx timeout [ 153.427211] Bluetooth: hci7: command tx timeout [ 155.090759] Bluetooth: hci0: command tx timeout [ 155.158766] Bluetooth: hci1: command tx timeout [ 155.218758] Bluetooth: hci3: command tx timeout [ 155.283663] Bluetooth: hci2: command tx timeout [ 155.346824] Bluetooth: hci6: command tx timeout [ 155.346931] Bluetooth: hci5: command tx timeout [ 155.347040] Bluetooth: hci4: command tx timeout [ 155.475849] Bluetooth: hci7: command tx timeout [ 209.250048] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.255108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.257706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.276049] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.279468] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.282274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.444490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.447205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.451137] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.456073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.468277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.472027] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.518567] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.527691] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.529970] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.534775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.545219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.550072] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.568011] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.568663] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.575322] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.593643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.594276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.597186] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.629944] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.633724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.644539] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.651063] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.651881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.659001] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.659127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.682465] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.685461] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.686850] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.687571] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.696864] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.699408] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.700991] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.701783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.714525] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.717496] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.721403] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.727326] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.731199] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.735079] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.742395] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.764063] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.775799] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.346865] Bluetooth: hci0: command tx timeout [ 211.539698] Bluetooth: hci1: command tx timeout [ 211.666739] Bluetooth: hci3: command tx timeout [ 211.730790] Bluetooth: hci2: command tx timeout [ 211.796693] Bluetooth: hci4: command tx timeout [ 211.859693] Bluetooth: hci6: command tx timeout [ 211.860691] Bluetooth: hci7: command tx timeout [ 211.860858] Bluetooth: hci5: command tx timeout [ 213.395675] Bluetooth: hci0: command tx timeout [ 213.586842] Bluetooth: hci1: command tx timeout [ 213.714930] Bluetooth: hci3: command tx timeout [ 213.780044] Bluetooth: hci2: command tx timeout [ 213.844677] Bluetooth: hci4: command tx timeout [ 213.906782] Bluetooth: hci5: command tx timeout [ 213.906958] Bluetooth: hci7: command tx timeout [ 213.907123] Bluetooth: hci6: command tx timeout [ 215.444116] Bluetooth: hci0: command tx timeout [ 215.634923] Bluetooth: hci1: command tx timeout [ 215.763776] Bluetooth: hci3: command tx timeout [ 215.827779] Bluetooth: hci2: command tx timeout [ 215.892870] Bluetooth: hci4: command tx timeout [ 215.955706] Bluetooth: hci6: command tx timeout [ 215.955781] Bluetooth: hci7: command tx timeout [ 215.955885] Bluetooth: hci5: command tx timeout [ 217.492723] Bluetooth: hci0: command tx timeout [ 217.682773] Bluetooth: hci1: command tx timeout [ 217.810784] Bluetooth: hci3: command tx timeout [ 217.875081] Bluetooth: hci2: command tx timeout [ 217.938788] Bluetooth: hci4: command tx timeout [ 218.003898] Bluetooth: hci7: command tx timeout [ 218.004121] Bluetooth: hci5: command tx timeout [ 218.004319] Bluetooth: hci6: command tx timeout [ 271.406798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.414207] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.419373] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.429040] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.435078] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.437085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.659901] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.664541] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.667014] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.669366] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.672162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.677826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.685784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.689054] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.691025] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.721014] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.723194] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.723893] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.730041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.748629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.750292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.753123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.754564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.766995] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.767389] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.779256] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.799937] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.810175] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.811758] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.816031] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.817540] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.820149] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.823996] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.826008] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.847502] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.849078] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.849384] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.862867] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.865108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.874090] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.883028] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.884916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.891036] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.902708] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.903225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.942822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.963373] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.976019] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.490809] Bluetooth: hci0: command tx timeout [ 273.746700] Bluetooth: hci2: command tx timeout [ 273.810849] Bluetooth: hci1: command tx timeout [ 273.874663] Bluetooth: hci7: command tx timeout [ 273.938781] Bluetooth: hci4: command tx timeout [ 274.003826] Bluetooth: hci3: command tx timeout [ 274.004147] Bluetooth: hci5: command tx timeout [ 274.069620] Bluetooth: hci6: command tx timeout [ 275.538729] Bluetooth: hci0: command tx timeout [ 275.794766] Bluetooth: hci2: command tx timeout [ 275.859684] Bluetooth: hci1: command tx timeout [ 275.924665] Bluetooth: hci7: command tx timeout [ 275.986659] Bluetooth: hci4: command tx timeout [ 276.050746] Bluetooth: hci3: command tx timeout [ 276.050868] Bluetooth: hci5: command tx timeout [ 276.115818] Bluetooth: hci6: command tx timeout [ 277.586658] Bluetooth: hci0: command tx timeout [ 277.842693] Bluetooth: hci2: command tx timeout [ 277.907698] Bluetooth: hci1: command tx timeout [ 277.970672] Bluetooth: hci7: command tx timeout [ 278.035795] Bluetooth: hci4: command tx timeout [ 278.098857] Bluetooth: hci5: command tx timeout [ 278.099020] Bluetooth: hci3: command tx timeout [ 278.163730] Bluetooth: hci6: command tx timeout [ 279.635772] Bluetooth: hci0: command tx timeout [ 279.891710] Bluetooth: hci2: command tx timeout [ 279.956622] Bluetooth: hci1: command tx timeout [ 280.019703] Bluetooth: hci7: command tx timeout [ 280.083828] Bluetooth: hci4: command tx timeout [ 280.149259] Bluetooth: hci5: command tx timeout [ 280.149376] Bluetooth: hci3: command tx timeout [ 280.210785] Bluetooth: hci6: command tx timeout [ 334.177180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.183748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.186436] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.197902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.203190] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.205749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.371379] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.376016] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.390153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.400423] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.408289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.410114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.431990] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.458688] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.460535] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.488042] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.496703] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.497069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.510805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.510836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.520248] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.541345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.544918] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.549924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.579542] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.580804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.603901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.603927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.632401] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.633431] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.653257] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.654788] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.657140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.674300] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.689374] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.696973] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.711004] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.711359] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.714941] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.722774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.764064] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.770233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.791922] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.828428] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.831985] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.868163] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.903000] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.904972] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.275789] Bluetooth: hci0: command tx timeout [ 336.467770] Bluetooth: hci1: command tx timeout [ 336.594697] Bluetooth: hci2: command tx timeout [ 336.786892] Bluetooth: hci3: command tx timeout [ 336.850717] Bluetooth: hci5: command tx timeout [ 336.978876] Bluetooth: hci4: command tx timeout [ 337.042905] Bluetooth: hci7: command tx timeout [ 337.235650] Bluetooth: hci6: command tx timeout [ 338.324784] Bluetooth: hci0: command tx timeout [ 338.514706] Bluetooth: hci1: command tx timeout [ 338.644166] Bluetooth: hci2: command tx timeout [ 338.834678] Bluetooth: hci3: command tx timeout [ 338.899322] Bluetooth: hci5: command tx timeout [ 339.026758] Bluetooth: hci4: command tx timeout [ 339.091788] Bluetooth: hci7: command tx timeout [ 339.282776] Bluetooth: hci6: command tx timeout [ 340.372608] Bluetooth: hci0: command tx timeout [ 340.562768] Bluetooth: hci1: command tx timeout [ 340.690760] Bluetooth: hci2: command tx timeout [ 340.882718] Bluetooth: hci3: command tx timeout [ 340.947602] Bluetooth: hci5: command tx timeout [ 341.074792] Bluetooth: hci4: command tx timeout [ 341.138667] Bluetooth: hci7: command tx timeout [ 341.332681] Bluetooth: hci6: command tx timeout [ 342.418949] Bluetooth: hci0: command tx timeout [ 342.610743] Bluetooth: hci1: command tx timeout [ 342.738855] Bluetooth: hci2: command tx timeout [ 342.930692] Bluetooth: hci3: command tx timeout [ 342.994852] Bluetooth: hci5: command tx timeout [ 343.122737] Bluetooth: hci4: command tx timeout [ 343.188772] Bluetooth: hci7: command tx timeout [ 343.378684] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 20:13:21 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000003e7 RCX=00000000000000b8 RDX=000000003b8b9656 RSI=0000000000000236 RDI=000000c00003d880 RBP=000000c00003de40 RSP=000000c00003d7f8 R8 =0000000000000002 R9 =0000000000000000 R10=000000c000014070 R11=0000000000000001 R12=0000000000000003 R13=000000c000001200 R14=0000005b6ac6d3fa R15=ffffffffffffffff RIP=000000000042fe17 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c0002d6b10 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f29a8f58368 CR3=000000000dd50000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=001a016c6c6f502e726567616e614d0c XMM02=696d696e696d20636578650d0a010001 XMM03=0e006873616d7320636578650a00657a XMM04=11006574616469646e61632063657865 XMM05=7472617473657220726f747563657865 XMM06=65786509006e65672063657865080073 XMM07=69727420636578650b007a7a75662063 XMM08=20636578650a00657a696d696e696d20 XMM09=646e616320636578650e006873616d73 XMM10=20726f74756365786511006574616469 XMM11=67206365786508007374726174736572 XMM12=650b007a7a7566206365786509006e65 XMM13=636578650a0065676169727420636578 XMM14=65657320636578650a0073746e696820 XMM15=00006c61746f7420636578650a007364 info registers vcpu 1 RAX=ffffffff864d6880 RBX=ffffffff864d686c RCX=ffffffff81b2f0fc RDX=0000000000000000 RSI=ffffffff86854608 RDI=ffffffff864d685c RBP=ffffffff864d6870 RSP=ffff888034997b40 R8 =ffffffff86854608 R9 =ffff888034997c38 R10=000000000003aa0c R11=00000000000267ec R12=ffffffff864d6880 R13=ffffffff864d685c R14=ffffffff864d686c R15=dffffc0000000000 RIP=ffffffff8134866a RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc7190cf68 CR3=0000000027ebc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000ff00000000000000ff0000 XMM02=0000ff00000000000000000000ff0000 XMM03=000000000000ff000000000000000000 XMM04=00ff0000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000