Warning: Permanently added '[localhost]:36536' (ECDSA) to the list of known hosts.
2025/06/26 06:04:32 fuzzer started
2025/06/26 06:04:32 dialing manager at localhost:41253
syzkaller login: [  104.801848] cgroup: Unknown subsys name 'net'
[  104.899663] cgroup: Unknown subsys name 'cpuset'
[  104.937131] cgroup: Unknown subsys name 'rlimit'
2025/06/26 06:04:48 syscalls: 203
2025/06/26 06:04:48 code coverage: enabled
2025/06/26 06:04:48 comparison tracing: enabled
2025/06/26 06:04:48 extra coverage: enabled
2025/06/26 06:04:48 setuid sandbox: enabled
2025/06/26 06:04:48 namespace sandbox: enabled
2025/06/26 06:04:48 Android sandbox: enabled
2025/06/26 06:04:48 fault injection: enabled
2025/06/26 06:04:48 leak checking: enabled
2025/06/26 06:04:48 net packet injection: enabled
2025/06/26 06:04:48 net device setup: enabled
2025/06/26 06:04:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/26 06:04:48 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/26 06:04:48 USB emulation: enabled
2025/06/26 06:04:48 hci packet injection: enabled
2025/06/26 06:04:48 wifi device emulation: enabled
2025/06/26 06:04:48 802.15.4 emulation: enabled
2025/06/26 06:04:48 fetching corpus: 0, signal 0/0 (executing program)
06:04:49 executing program 0:
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000))
r0 = inotify_init()
r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x30ae822b53c1b9a9)
inotify_rm_watch(r0, r1)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0xa3, 0x4, 0x101, "e0c9cb20047a4423eba97177c30cb665fcc3b567a1eb7c22b6c476ae4e8468782687fc6ec8276fc4c30d860fb50b4673b261158cd010ab74a4d3311ec48d8c4218ee18e2ba68794a4a98057c5f905186135922f85759e719b3916256811cde3e406b74e4dee0b44723a87c7f8a11e42babf29d8eca0d15ae91281107fb02aac43a217c3d067277aedefee04be313592cff6051e768bd91d9d16db31b93e308d564b5be"})
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000140))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"85d948aecacd0502d045050e99236e70", <r2=>0x0, <r3=>0x0, {0x6, 0x4}, {0x5, 0xcb}, 0xfffffffffffffffa, [0x10000, 0x0, 0x0, 0x68, 0x8, 0x3, 0x8c0, 0x1, 0x80000001, 0x1, 0xffffffffffffffff, 0x0, 0x6, 0x80, 0x1, 0x200]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"238d113d580157efa0fc741daf9e090d", r2, 0x0, {0x7ff, 0xfffff495}, {0x101, 0x3}, 0x1, [0x8, 0x9, 0x1550, 0x6, 0x1, 0xffffffffffffffd4, 0x8, 0x9, 0x5, 0x1f, 0x5, 0x10001, 0x0, 0x804, 0x5, 0x71]})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x74}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x803, 0x3, 0x2, 0x0, {0x8, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, 0x7, 0x7, 0x3f}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x80)
r5 = syz_open_dev$sg(&(0x7f0000000500), 0x4, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000580)={"880d2a412418e763ebfd812970cfa2e5", <r7=>r2, r3, {0xff, 0x2}, {0x3ff, 0x9}, 0x46, [0x2ab, 0x3, 0xed8, 0x3, 0x800, 0x1, 0x800, 0x40, 0x0, 0x6, 0x5, 0x0, 0x7f, 0x5, 0x5, 0x100]})
ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000000680)=r7)
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000006c0))
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0xc11)
ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f0000000800)=0x1)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x1, 0x12, 0x0, "91afd92a6452d04fdb14c492f004ec1ed3ff500ddf61187bdc7dbb89afb67d1b3fe4af7b1ab4478093715d5f252cf71bdce0295b4702fbe6751fc4b955614aee", "0169259becd835f9fe3861254d4c85f84693b5e943924d578153fb62e36381c59c5f9cf6f6f6735ce109787cfd197c6348db1681655d1b036142f18c72411107", "2edaf56b2a2f7fdc813903f65230a1325ced647d6dc29391cd1d8ed46c2b81d6", [0xffffffff, 0x6]})
inotify_init1(0x800)
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000980))

2025/06/26 06:04:49 starting 8 fuzzer processes
06:04:49 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004850}, 0x90)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x110, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ca2ce8e1e790ef24472b4dbc9076dc58a965dd8387f41a01f4c98604bb0144c1"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4b3eaf02122b361e8ab252a5bfbf83030af1efdfbf57337e04e37981d0878726"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_SEC_KEY={0xa4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c5e377c5235f201add5175311b0e09d395fadbfe99ba50bf9b33a1f2239d2e75"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1680e00d9d0f347e79ba812170f1ee116c099d7fdd7dc3529af058cbd020e8d1"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5fa3c2a32f149d1d5818bb54d9407c649103c724a70845c543daf01eac4259ae"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "776088eb7f2ce3e9e4e6ba18a951b2edeee51840bb78ec1be2a22092413b55f1"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x3}, 0x200000c0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000540)={'wpan3\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000580)={'wpan4\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan3\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x64010840)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname$netlink(r10, &(0x7f0000000800), &(0x7f0000000840)=0xc)
sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x8004044)
syz_usb_connect$hid(0x4, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xeef, 0x7207, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x571}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x3, 0x9}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x110, 0x35, 0x8, 0x3, 0x8, 0x82}, 0x26, &(0x7f0000000a40)={0x5, 0xf, 0x26, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "90fb2785f27249ad8df0f97d4699f42b"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x50, 0x5, 0x101}]}, 0x5, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x459}}, {0x7d, &(0x7f0000000b00)=@string={0x7d, 0x3, "4427c7e6972f377a585f30a18be2674c8249a9fa7b8c68ebe03c55486445efd84c40c8bca32148713f079696fa850a176a13e88ef79cc19795b2e3caa1386bc3a905182fa0aa1dd6f58f527cb356dc15108c4e71951a46ad38b4146128d4bcda1fcb1d635c63e4dc92fa91b9a47e30f65d16cf6d516eda2e7e0822"}}, {0x38, &(0x7f0000000b80)=@string={0x38, 0x3, "84c23ba15c530cd44ee2067b3ce373fc6be41968c6bb73e9129f6a6c66f2b794857a95bdb276c33bce1a497085a8b266fe74a5beb74f"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x1401}}]})
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4004040)

06:04:49 executing program 5:
ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x9)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x1a9c2)
write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="d08d4cf99045816b7ce0f0", 0xb)
r0 = syz_open_dev$hidraw(&(0x7f0000000040), 0x9, 0x80000)
ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000080))
r1 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x4, 0xd2180)
write$hidraw(r1, &(0x7f0000000100)="c8a325ed92d23acb25a94d28df18ec438b430d994e5342fb596cfdbac5cf7db351a61d6691b52af81ae8fd7f9f5ee42cf791986d068b3a29881443bee1d19a98", 0x40)
write$hidraw(r1, &(0x7f0000000140)="43558fbe92ee44bed43f558a82da76186eb221dbb5a71535b077f3bd2aa2e0ba3ef66408717137a1d69db58e0b71999b0cb6e07c52c4c554ab0a0b19a1b0621d1974d09be219eb89df7a70080fa1d3f85f7dbed6a485889bc1970715a68d4e717df553de6577fc8cc71237c62433fdf46f466e7b34", 0x75)
ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000001c0))
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f0000000240))
ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000280))
r4 = socket(0x29, 0x1, 0x2)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x128, r5, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0xd4, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0xc8, 0x1}}, @supported_rates={0x1, 0x3, [{0x30}, {0x9, 0x1}, {0x16, 0x1}]}, @fast_bss_trans={0x37, 0xc0, {0x8, 0x4, "2023b3e540c5c4b5890b8d4c033daf2a", "b6a0f5590ecc7808d50593404f70586942ed2859e7feec95aecb9feb121e5f98", "a1f9a4ecf677c302d8020799a9de443076eff2fe6f1bd35af8589b007f272b51", [{0x4, 0x1b, "180720a0318cfe4b77c430953e86b8765f742c315964e4cdfdff70"}, {0x3, 0x13, "8fcb1eac73190c02f32bdde5b97f356e30bb66"}, {0x1, 0x17, "fb4fe62af19ac82aab78ed44e88f8387951451b59e66c0"}, {0x1, 0x21, "9bd696103a3d4585edf65b3ca58021a4ab81c6d3aa8f9bf2a0c91f0c64ae6eea68"}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x128}, 0x1, 0x0, 0x0, 0x81}, 0x4004890)
syz_open_dev$usbmon(&(0x7f0000000500), 0x7, 0x111040)
pipe(&(0x7f0000000540)={<r6=>0xffffffffffffffff})
ioctl$BLKBSZGET(r6, 0x80081270, &(0x7f0000000580))
r7 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x3f, 0x4000)
write$hidraw(r7, &(0x7f0000000600)="c46f0a1c3f372cb6ad6b43d063e61760220b8f6224b32520c1f614dffa22ffc001ac4e53f180091361f74f9ba5f33643631a743f7df3692f5eb7880a935e7a21e31bb51d2adc0edba04284571fee32b983085cd7562152a619cfea3799c63a", 0x5f)

06:04:49 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x10000)
ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x0, 0x1f, 0x6, 0x400}, {0x100, 0x0, 0x1, 0x3}, {0x8, 0x0, 0x1, 0x4}, {0x2, 0x0, 0x5, 0x3}, {0x8, 0x3f, 0x1, 0xffff8667}, {0x5, 0x8, 0x3, 0x6}, {0x7ff, 0x8, 0x4, 0x57c8}, {0x5, 0x5, 0x0, 0x3b4}, {0x81, 0x81, 0xea, 0x81}]})
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
r2 = syz_open_dev$sg(&(0x7f0000000140), 0x2, 0x915200)
ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3)
getrusage(0x1, &(0x7f0000000180))
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000240))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x32, 0x4, 0x6, 0x8000000}, {0x4, 0x3, 0x9, 0x3f}, {0x15eb, 0x0, 0x1, 0x358}, {0x800, 0x80, 0x5d, 0x1ff}, {0x57d5, 0x1, 0x4, 0x200}, {0x60, 0x40, 0xfb, 0x1f}]})
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
syz_open_dev$sg(&(0x7f0000000400), 0x8001, 0x105000)
r3 = syz_open_dev$sg(&(0x7f0000000440), 0x3, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x707, 0x3, 0x0, 0x0, 0x1f, 0xc, "dddd818dd21c4514e549837659e990600269cdda8ba2af3bd78c1f715dab9ef85e2c39760fac516b33b316ff28811c8892f2b9dc5dcfdb119505044f728eca8f", "8c8a412b2b914e5345b7e39ea513d23faecee39feda197ad2338fb8d29ebf440732f536a30a373980b1bb25384f1c212d9816a6f7eabd7515edd36f6d9ba5bf9", "870f1c625d526a79a33d4162efd877bc9640927793cfb80641dd89aa215b0ead", [0x2, 0x3]})
ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000580))
ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000005c0))
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000600)={0xf4, 0x6, 0x2, "81a3b6c8fbf72ea729d445801d1b2fecb2f31916e0615747f6ae5a30d4df56a632c7e91f747fe577f97e77b9ce37ce26e31397a8347b6dec81e4d499c39a31531c6299da3f51aada8cfb8b757cfef353ba3f0a54b8a0943ce0fcacc985e0566723f1b3eb1fad6403d53e32a7feb859f8708082a4e736ca965748158524e7b1e768ac5daba740d646d0515b4d773cc894a354e325bd92beace844015b22d476eec18a8093edcd7c4073ef35456bcebbda92e4bb4b6ef21b2c2df450c262c8fb8a9b954caee250e3c5e5932ea4200297529971c17c75d75a560506689e4132575061e3c0d04a0b8bd034101d583ec7db1089dfa451"})

06:04:49 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4a6, 0x101000)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x1ff, 0x6, 0x0]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xf0, 0x6]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x2]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000880)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000180)={0xf3, 0x4, 0x1})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$hidraw(&(0x7f0000000200), 0x80, 0x20200)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r1)
r5 = syz_open_dev$hidraw(&(0x7f0000000280), 0x8, 0x1)
ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f00000002c0))
ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r6 = syz_open_dev$hidraw(&(0x7f0000000440), 0x0, 0xa600)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000480))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0x2, 0x7, 0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1d}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c884}, 0x4004)

[  121.492540] audit: type=1400 audit(1750917889.545:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
06:04:49 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1bc, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x0, 0x7, 0x0, {0x9, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2}, 0x1, 0x8, 0x7f}}, @NL80211_ATTR_BSS_SELECT={0x34, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x9, 0x1f}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4, 0x7}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x2}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x7f}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xdf22}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xfffffbff}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xc, 0x20}}]}, @NL80211_ATTR_KEYS={0x10c, 0x51, 0x0, 0x1, [{0x4}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0x11, 0x4, "d998d79f61922500f04391ca1e"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0xf, 0x4, "b3e2b1a56244a38d081b6e"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x10, 0x4, "b89148e69c8ec408fc118d67"}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "630355493b"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "08721ee3543a1126bf01f7b808"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x976}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4040004}, 0x85)
r2 = socket$netlink(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000380)={0x560, r4, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x54}}}}, [@NL80211_ATTR_TID_CONFIG={0x3ac, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x140, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6, 0x12, 0x1b, 0x6, 0x30, 0x4, 0x4, 0x2, 0x9, 0x4, 0x5, 0x2, 0x1, 0x1b, 0x78, 0x36, 0x16, 0xc, 0x1, 0xa, 0x6b, 0x36, 0x48, 0x48, 0x6c, 0x12, 0x36, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0xff87, 0x1, 0x0, 0x200, 0xfff, 0xfffd]}}]}, @NL80211_BAND_5GHZ={0x104, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x5}, {0x0, 0x6}, {0x5, 0x8}, {0x2, 0x5}, {0x3, 0x3}, {0x6}, {0x0, 0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x9}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x7}, {0x3, 0x7}, {0x6, 0x4}, {0x7, 0x10}, {0x2, 0x5}, {0x2, 0x1}, {0x1, 0x2}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x9}, {0x4, 0x8}, {0x7, 0x7}, {0x2, 0x5}, {0x4, 0x2}, {0x3, 0x9}, {}, {0x1, 0x7}, {0x4}, {0x6}, {0x5, 0x3}, {0x0, 0xa}, {0x6, 0x8}, {0x5, 0x2}, {0x3}, {0x4, 0x9}, {0x5, 0xa}, {0x6}, {0x1, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x2, 0x3}, {0x7, 0x7}, {0x1, 0xa}, {0x7, 0x8}, {0x5, 0x1}, {0x4, 0x1b}, {0x6, 0x6}, {0x3, 0x6}, {0x2, 0x9}, {0x7, 0x4}, {0x4, 0x8}, {0x5, 0x7}, {0x4, 0x2}, {0x1}, {0x6, 0x6}, {0x0, 0xa}, {0x4}, {0x1, 0x5}, {0x5, 0x6}, {0x5, 0x5}, {0x6, 0x5}, {0x4, 0x5}, {0x3}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x8}, {0x7, 0x3}, {0x2, 0x7}, {0x4, 0x6}, {0x4, 0x2}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff80, 0x7, 0x392, 0x4, 0x8, 0x1, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x3, 0xffff, 0x4, 0x4, 0xffff, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0x8, 0x7fff, 0x3, 0x5, 0x7, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x80, 0x3f, 0x20, 0x0, 0x0, 0x5]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x7}, {0x1, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x2, 0x5}, {0x6, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {}, {0x6, 0x6}, {0x4, 0x9}, {0x3, 0x2}, {0x0, 0x2}, {0x3, 0x1}, {0x6, 0x1}, {0x5}, {0x2, 0x6}, {0x3, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x1}, {0x4, 0x5}, {0x4, 0x5}, {0x0, 0xa}, {0x5, 0x7}, {0x3, 0x9}, {0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x2, 0xa}, {0x3, 0x4}, {0x5, 0x1}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x5}, {0x3, 0x9}, {0x5, 0x8}, {0x5, 0x6}, {0x2, 0x7}, {0x2, 0x3}, {0x1, 0x2}, {0x3, 0x6}, {0x1, 0x5}, {0x4, 0x1}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x6}, {0x4, 0x1}, {0x2, 0x9}, {0x5, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x4, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x5, 0x6}, {0x5, 0xa}, {0x4, 0x1}, {0x7, 0xa}, {0x0, 0x4}, {0x3, 0x3}, {0x1, 0x7}, {0x7, 0x3}, {0x3, 0xa}, {0x1, 0xa}, {0x7, 0x8}, {0x5, 0x3}, {0x7, 0x6}, {0x7, 0xa}, {0x4, 0x3}, {0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xee}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc5, 0x3, 0x0, 0x100, 0x401, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4c6, 0x3, 0x2, 0x1, 0x1, 0x1, 0x120]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x6, 0x3, 0x1, 0x3, 0xff, 0x3, 0xfff8]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x1}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0x8}, {0x7, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x9}, {0x7, 0x5}, {0x2, 0xa}, {0x5, 0x1}, {0x3, 0x5}, {0x2, 0x9}, {0x3, 0x8}, {0x4, 0x6}, {0x0, 0x8}, {0x2, 0x4}, {0x7, 0x9}, {0x6}, {0x2}, {0x6, 0x4}, {0x2, 0x7}, {0x3, 0x8}, {0x2}, {0x4, 0x3}, {0x0, 0x8}, {0x5, 0x4}, {0x7, 0x9}, {0x1, 0x2}, {0x0, 0x6}, {0x2, 0x1}, {0x7, 0x6}, {0x1}, {0x2, 0x8}, {0x0, 0x3}, {0x5}, {}, {0x7}, {0x2, 0x3}, {0x3, 0x4}, {0x6, 0xa}, {0x5, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x2, 0x7, 0x5, 0x2, 0x6, 0xff]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x4, 0x5, 0x81, 0x1000, 0x8001, 0xffff]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x8}, {0x4, 0xa}, {0x1, 0x4}, {0x5}, {0x0, 0x8}, {0x4, 0xa}, {0x3, 0x7}, {0x6, 0x3}, {0x4, 0x9}, {0x5, 0x9}, {0x5, 0x2}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x8}, {0x3, 0x7}, {0x2, 0x9}, {0x7, 0x7}, {0x7, 0x5}, {0x3}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0x5}, {0x0, 0x7}, {0x7, 0x8}, {0x0, 0x6}, {0x4, 0x5}, {0x4}, {0x3, 0x6}, {0x5, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x7, 0x2}, {0x1, 0x1}, {0x3, 0x8}, {0x2, 0x3}, {0x2, 0x9}, {0x6, 0xa}, {0x3, 0x4}, {0x5, 0x5}, {0x5, 0x4}, {0x5}, {}, {0x2, 0xa}, {}, {0x2, 0x8}, {0x0, 0x9}, {0x5, 0x3}, {0x4}, {0x1, 0x5}, {0x3, 0x2}, {0x3, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffff, 0xfffa, 0x100, 0xa76, 0x81, 0x1, 0x8]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x6c, 0x18, 0x16, 0x60, 0x48, 0x30, 0x38, 0x4]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x24, 0xb, 0x3, 0x4, 0xc, 0x48, 0x48, 0x4, 0x36, 0x18, 0x6c, 0x4, 0x30, 0x6c]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x7, 0x2, 0x472, 0x7, 0x59]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7ce, 0x9, 0x4, 0xed68, 0xdc70, 0x3ff]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0xfffa, 0x3, 0x3, 0x4, 0x5, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc6c6, 0x7, 0x3, 0xef31, 0x81, 0xfff, 0x8]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x3, 0x8}, {0x5, 0x5}, {0x0, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x2, 0x6}, {0x7, 0x3}, {0x2, 0x9}, {0x2, 0x9}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0xa}, {0x2, 0x4}, {0x3, 0x1}, {0x7, 0x6}, {0x3, 0x7}, {0x2, 0x7}, {0x3, 0x3}, {0x7, 0x6}, {0x1, 0xa}, {0x1, 0x1}, {0x1, 0x5}, {0x5, 0x2}, {0x4, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x66}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x12c, 0x11d, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6438}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x14}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbe}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}]}]}, 0x560}, 0x1, 0x0, 0x0, 0x40}, 0x48880)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048094)
r5 = socket(0x10, 0x0, 0xfffffffc)
sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x1, 0x9, 0x5, 0x0, 0x0, {0xe, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x4010)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8c, 0x9}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x53}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000051}, 0x8000010)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x27, 0x3, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xdc}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x40080)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x401, 0x9, 0x5]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000081)
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000f00))
ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000f40))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f0000001380)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f0000001000)={0x32c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0xeb, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x5, @device_a, 0x4, "", 0x800100, 0x20, @broadcast, 0x8b}}, @measure_req={0x26, 0x7d, {0x7, 0x5, 0x20, "d726c8e377240ef08ec4f8f339f8783a2d736388ad5ce19bd5c2453aa094de21bfacc392d6ee89194d95aaafba7334186873d466445c24b84a7a29be9604b1d2bd2a224919873e4f94425d920be7b24763a56ee9dcbcd6a3d74daa3451de222f483ac20893ae83b6cf74240ba4ef00038def965c8967cc1900ac"}}, @tim={0x5, 0x3, {0xff, 0x1a, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x30}, 0x0, 0x1, @device_b, 0x606, 0x7, 0x40}}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0x20, 0x8, @device_a, 0x9, 0x8, 0x40}}]}, @NL80211_ATTR_IE={0x183, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4, 0x7f, 0xf, 0x7}}, @fast_bss_trans={0x37, 0x153, {0x1f, 0x8, "4dace7e76bbd75990c6070177c992037", "62391143f27658f1dd9bf2e5e8fc19db62ef0703cef45e8dc19ddac936104f10", "de9be699f67dbd2737caa5410df85928e9b7d7a66fbdf16282140b58ef087d68", [{0x1, 0x1b, "ae62b6755b9e79629d6ee262a32971b1768a8f86e39ee59681c57f"}, {0x1, 0x16, "c28eb6eb74dcdbd0051e9840263c739d4ef12f771c83"}, {0x4, 0x1d, "3adfd97d4d64126f3d9531b904ada1170f427713a816815cb8c1efc965"}, {0x2, 0x20, "5134ef9965b9af42d1f414f8d7909f0a4bf29f0041ad245316bfa059022d0c26"}, {0x4, 0x27, "bf7aeb2903f02350db158e109ea185e872572ad9cc60c2b6ee14433d999b3eb44e7c06a4b37b88"}, {0x3, 0x23, "0deb129d336cdbf0ace9fc7768442c82ff47372f26fd1a312703a844ca81a4135a56ca"}, {0x1, 0x1b, "517e9586d4d9a622fbe6b40170a16416e717d6ddbd0651098e8325"}, {0x4, 0x1e, "17facac42039359d111aafea3953972dbee5169d4526dc25447361741696"}]}}, @rann={0x7e, 0x15, {{0x0, 0x7a}, 0x7, 0x7, @device_a, 0x3ff, 0x401, 0x80000000}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x0, 0xd, 0xf44e}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_IE={0x4b, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xc1, 0x0, 0x4}}, @cf={0x4, 0x6, {0x4, 0x1, 0xbcd9, 0x2}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x40}}, @mesh_chsw={0x76, 0x6, {0x7, 0x71, 0x8, 0x1}}, @ibss={0x6, 0x2, 0xcd}, @channel_switch={0x25, 0x3, {0x0, 0xd7350e5231f1b40, 0x89}}, @gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x11, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x9, 0x41}}, @ibss={0x6, 0x2, 0xfffe}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x100}, @NL80211_ATTR_IE={0x19, 0x2a, [@cf={0x4, 0x6, {0x1, 0x4, 0x7fff, 0x1ff}}, @channel_switch={0x25, 0x3, {0x0, 0x40, 0x81}}, @mesh_id={0x72, 0x6}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

06:04:49 executing program 7:
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0xffffffffffffffc1)
write$nbd(0xffffffffffffffff, &(0x7f0000000040)={0x67446698, 0x0, 0x1, 0x2, 0x1, "2cb1912b4c1774beea5f249f194b782c8bc91b1a6b9b13c265c5de7b6b0e31d6682820f6b70e6329c4196bb0576014262a07a138dfdb2e0370f6d2e4899a0ed598064c56f6e13eeb39404e9b7a11aa25d6d9dd520b7b0c14048e"}, 0x6a)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80)
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000200)=0x9)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240))
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000280)=0x4)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x2c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x2405c000}, 0x0)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000440))
r1 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x401)
ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, 0x0, 0x324, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x49}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x3}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x3, 0x3, 0x0, {0x8, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x200, 0x1}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x170c}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0x4000)
r2 = syz_open_dev$loop(&(0x7f0000000600), 0x400, 0x8000)
ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000640)=0x6)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000680))
r3 = syz_open_dev$loop(&(0x7f00000006c0), 0xbf, 0x88401)
ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000700))
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x69b3167e327fe537}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x24000000)
syz_open_dev$loop(&(0x7f0000000880), 0x80, 0x80000)

06:04:49 executing program 6:
clone(0x80000000, &(0x7f0000000000)="9f34472c8729c2a07203aab557700a838efea073e612fe55bbb74af485dd187d4c63f51869d30675b532ebd1f09cc6a4416b7bb14ad820a81c1616ec87f14771fd1769d2f9ef835d2b1ab3d45ab3dfd7e319e9d371ee25cec89f00000ce7b05287924505a2bacfe9b8e3bcc8db2e4f9af95bb67e76080b27b9a6ab5560c6c1cca81f1aa73933f64d76361b87d4d8516a198b0e8f8e9f6127df6019a8d5805ead5025fdd40e8b30a0319fa72514c19a49dcb29c06a906e826ae662c4d62599d17da4397f48f218f20f0876cef0ee54848a82841ff464b72cb9a40bfabc7627c754619528e5c36425a59eb412e19e3e5d17b64cd", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="507780b75ed798f07ab533170049e3697748ea9a939b4112312ee67f0b9245f0b9f482d622b45749c20205af3025aa8bdc4d07fbcbfcd1112a835bdb2ed60e5da6b20c26c76125224e8dd08eed81fcc5ef0e08fdf53ac831bb1dd068fa042cc09686d11120")
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r0, &(0x7f0000000240)={0x6, 0x20, 0x1, 0x20, 0x3}, 0x48)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x16c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x138, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2207c82774a08faa5149067a28f7837ab30af8cad2fc02de19d85bffac818e3d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x7c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1e45f9b0cf91cca323661b692768ea9f"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$hidraw(0xffffffffffffffff, &(0x7f0000000580)="2982f2dcd289693c8daf2708a511cf31492928d2ae5369ead237ed4ff35892e44dba3c1c3f5a8695b494cfea7482274b7f10f922306eebfd5250651d27188a7cbc4462a6e1c1025ceafa9afe13f14ab62f29da717bec5f964d8254ead7ae5e9346185eddd87453571b6b5146d7d869a66a2328407b95891ebc29b0154a87788ca1e5165d0670793b88c1da298b67d30a24b4b65d4d5b0b12a106aa90a28da7b8a658c948878806d921e4ed042f8d52d44b1405a3e127fc20c683e0fe7c5709066bcbb96adaf1c84d1dc0ec70741f7c971b613f07e6eea2145df13bf3b4d8d9cd91da22e1ecf046e6c5cb249042fbf00754cfd92005133cab67", 0xf9)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x21, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000840)={0xc68, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1d0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x4}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x9, 0x30, 0x36, 0x36, 0x5, 0x30, 0x24, 0x2, 0x16, 0x4, 0x4, 0x6c, 0x1, 0x2d, 0x3, 0x69e92ba3ed334302, 0x12, 0x6a, 0x5, 0x1b, 0x60, 0x6, 0x18, 0x9, 0xc]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5e, 0x1b, 0x4, 0x24, 0x60, 0xc, 0x6c, 0x18, 0x5, 0x1b, 0xc, 0x2, 0x18, 0x48, 0x30, 0x4, 0x9, 0x1b, 0x3, 0x9, 0x9, 0x5, 0xc, 0xb, 0xc, 0x16, 0x16, 0xf, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2e, 0x3, 0x5, 0xdb, 0x9, 0x401, 0x8]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x0, 0x30, 0x2c, 0x30, 0x16, 0x6c, 0x1b, 0x30, 0x0, 0x6c, 0x30, 0x1b, 0x12, 0x24, 0x6, 0xa1]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0xc, 0x6c, 0x60, 0x16, 0x30, 0x6c, 0x24, 0x4, 0x48, 0x48, 0x16, 0xa, 0x18, 0x6, 0x1, 0x2, 0x9, 0x12, 0x7a, 0x4, 0x1, 0x3, 0xc, 0x12, 0x60, 0x6c, 0x95cac176f831bb5, 0x6, 0x19, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x5}, {0x2, 0x1}, {0x3, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x6, 0x4}, {0x7, 0xa}, {0x7, 0xa}, {0x1, 0xa}, {0x3, 0x6}, {0x3, 0x4}, {0x1, 0x6}, {0x2, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0xb, 0x48, 0x12, 0x6, 0x18, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7, 0x2, 0x4, 0x8001, 0xffff, 0xa4af, 0x1f]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x5}, {0x7, 0x3}, {0x3, 0x8}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0x5}, {0x7, 0x8}, {0x2, 0x5}, {0x0, 0xa}, {0x1}, {0x2, 0x9}, {0x3, 0xa}, {0x7, 0x8}, {0x4, 0x7}, {0x3, 0x5}, {0x2, 0x2}, {0x2, 0x5}, {0x1}, {0x3, 0x6}, {0x3, 0x4}, {0x7, 0x1}, {0x5, 0x2}, {0x3, 0xa}, {0x4, 0x7}, {0x3, 0x6}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x8}, {0x3, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x3, 0x7}, {0x4, 0x3}, {0x0, 0x8}, {0x2, 0xa}, {0x6, 0x9}, {0x6, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0x8}, {0x7, 0xa}, {0x3, 0xa}, {0x2}, {0x3, 0x7}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0x9}, {0x6, 0x1}, {0x3, 0x7}, {0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0x5}, {0x6, 0x1}, {0x6}, {0x2}, {0x1, 0x4}, {0x7, 0x5}, {0x5, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x74}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x30, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x1ff, 0x1000, 0x3, 0xffff, 0x1, 0x1]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4f872e8c}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x1b0, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x20}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x401, 0x5c88, 0x20, 0x1, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x67}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000001}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x33}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x3f}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaa}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x84}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x5ac, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x86}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}]}, {0x280, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x228, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0xc, 0x30, 0x63, 0x12, 0x30, 0x9, 0x5, 0x0, 0x1b, 0x60, 0x3, 0x12, 0x3, 0x5, 0x1, 0x60, 0xc, 0x9, 0x2, 0x60, 0x16, 0x12, 0x6c, 0x30, 0x1, 0x3]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x6, 0xb860, 0x7ff, 0x1065, 0x6, 0x1]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x1, 0x12, 0x16, 0x6, 0xb, 0x6, 0x60, 0x592752ae303b24fb, 0xb, 0xc, 0x2, 0x60, 0x60, 0x16, 0x24, 0x1, 0x1]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0x2]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x2}, {0x5, 0x4}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x8}, {0x3, 0x8}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x8}, {0x7, 0x4}, {0x3, 0x3}, {0x5, 0x4}, {}, {0x1, 0x1}, {0x1}, {0x6, 0x7}, {0x4, 0x1}, {0x0, 0x4}, {0x4, 0x8}, {0x6, 0x1}, {0x0, 0x4}, {0x5, 0x9}, {0x1, 0x7}, {0x1}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x1, 0x5}, {}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x1}, {0x4, 0x9}, {0x6, 0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x9}, {0x7, 0xa}, {0x4, 0x3}, {}, {0x4, 0x7}, {0x3, 0x4}, {0x1, 0x8}, {0x7, 0x6}, {0x2, 0x9}, {0x7, 0x3}, {0x2, 0xa}, {0x2, 0x2}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0x3}, {0x2, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x0, 0x4, 0x5, 0x18, 0x48, 0x36, 0x24, 0x2, 0x3, 0x48, 0x30, 0x30, 0x16, 0x5, 0x9, 0x9, 0xc, 0xc]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x1, 0x2, 0x6c, 0x4, 0x0, 0x6, 0xc, 0x1e, 0x6c, 0x6c, 0xc, 0x18, 0x48, 0x0, 0x30, 0xc]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x1, 0x5, 0x16, 0x36, 0x36, 0xc, 0x24, 0x4, 0x48, 0x6, 0x55, 0x16, 0x6, 0x24, 0x3b, 0x60, 0x1, 0x5, 0x3, 0x12, 0x18, 0x36, 0x3f2db552017b6e49, 0x1d, 0x36, 0x9, 0x6c, 0xb]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7, 0x1}, {0x0, 0x3}, {0x5, 0x6}, {0x3, 0x6}, {0x1, 0x4}, {0x4, 0x7}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x9, 0x3, 0x7fee, 0x9, 0x441, 0x3f, 0x7]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x3}, {0x0, 0xa}, {0x6, 0x4}]}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x9, 0x24, 0x12, 0x3, 0xc, 0x2, 0x5c, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x8000, 0x5693, 0x1f, 0x1f, 0xffff, 0x68c]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0x9}, {0x1, 0x7}, {0x5, 0x6}, {0x1, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x0, 0x9}, {0x3, 0x4}, {0x5, 0x5}, {0x5, 0xa}, {0x7, 0x6}, {0x0, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x6, 0x8}, {0x5, 0x9}, {0x0, 0x1}, {0x7, 0x6}, {0x3, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x6}, {0x6, 0x1}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x8}, {0x7}, {0x4, 0x8}, {0x2}, {0x4, 0x5}, {0x1, 0x3}, {0x7, 0x1}, {0x6, 0x7}, {0x6, 0x9}, {0x4, 0x8}, {0x3, 0x4}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x2, 0x41, 0x12, 0x60, 0x4, 0x36, 0x5, 0x1e, 0x2, 0x6, 0x16, 0x9, 0x6, 0x1b, 0x3, 0x3, 0x6c, 0x2, 0x4, 0x36]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0xa}, {0x0, 0x1}, {0x1, 0x3}, {0x1, 0x4}, {0x5, 0x6}, {0x5, 0x5}, {0x3, 0x9}, {0x2, 0xa}, {0x0, 0x5}, {0x1, 0xa}, {0x6, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x5}, {0x0, 0x5}, {0x1, 0x7}, {0x2, 0x2}, {0x1, 0x9}, {0x5, 0x5}, {}, {0x1, 0x9}, {0x3, 0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0x4}, {0x5, 0x2}, {0x7}, {0x1, 0x3}, {0x1}, {0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0x6}, {0x5, 0x2}, {0x6, 0x7}, {0x2, 0x2}, {0x7, 0x7}, {0x2}, {0x6, 0x5}, {0x1, 0xa}, {0x5, 0x6}, {0x5, 0x8}, {0x5, 0x9}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x1f, 0x5, 0x33, 0x6c, 0xb, 0x7e, 0x39, 0x48, 0x12, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x70}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xab}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x60}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x224, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x208, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x100, 0x8, 0x41b1, 0x400, 0xffff, 0x59]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x3, 0x401, 0x0, 0xe3d8, 0xcd]}}]}, @NL80211_BAND_6GHZ={0xfc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x3}, {0x4}, {0x4, 0x2}, {0x0, 0x4}, {0x7, 0xa}, {0x4, 0x8}, {0x3, 0x7}, {0x0, 0x1}, {0x6, 0x4}, {0x1, 0x2}, {0x3, 0x1}, {0x5, 0x3}, {0x5, 0x4}, {0x3, 0x6}, {0x1, 0x5}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x1}, {0x4, 0x4}, {0x0, 0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x4, 0x1}, {0x3, 0x7}, {0x2}, {0x4, 0x2}, {0x0, 0x2}, {0x1, 0x8}, {0x6, 0x4}, {0x5, 0x7}, {0x5, 0x8}, {0x6, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x2, 0x3}, {0x5, 0x1}, {0x6, 0x9}, {0x0, 0x2}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0xa}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0xa}, {0x0, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0x5}, {0x4, 0x6}, {0x6, 0x1}, {0x4, 0xa}, {0x7, 0x2}, {0x7, 0x7}, {0x5, 0x7}, {0x4, 0x2}, {0x2, 0x5}, {0x5, 0x2}, {0x7, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x7, 0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x3, 0x3}, {0x5, 0xa}, {0x5, 0x5}, {0x6, 0x7}, {0x2, 0x7}, {0x7, 0xa}, {0x3, 0x8}, {0x3, 0x2}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x3, 0x9}, {0x0, 0x1}, {0x4, 0x5}, {0x4, 0xa}, {0x7, 0x3}, {0x5, 0x6}, {0x0, 0x3}, {0x2, 0x2}, {0x1}, {0x6, 0x8}, {0x4, 0x8}, {0x2, 0x2}, {0x5, 0x6}, {0x0, 0x6}, {0x6, 0x6}, {0x2}, {0x1, 0x6}, {0x7, 0xa}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x5, 0xa}, {0x6, 0x2}, {0x4, 0x7}, {0x2, 0x4}, {0x2, 0x9}, {0x2, 0xa}, {0x5, 0x6}, {0x1, 0x6}, {0x7}, {0x6, 0x9}, {0x1, 0x6}, {0x6}, {0x6, 0x5}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x2}, {0x3, 0x4}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x2}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x9}, {0x2, 0xa}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x4}, {0x2, 0x5}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x30, 0x6c, 0x6c, 0x6, 0x48, 0x60, 0x19, 0x2, 0x36, 0x12, 0x36, 0x9, 0x3, 0x36, 0x3, 0x16, 0x24, 0x1b, 0x18, 0x1e, 0x48, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x7, 0xa}, {0x2, 0x2}, {0x7, 0x4}, {0x3, 0x6}, {0x0, 0xa}, {0x7, 0x2}, {0x3}, {0x3, 0x2}, {0x6, 0xa}, {0x6}, {0x3, 0x2}, {0x5, 0x7}, {0x2, 0x8}, {0x1, 0x6}, {0x0, 0x7}, {0x3, 0x4}, {0x7, 0x6}, {0x2, 0x7}, {0x3, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x3, 0x3}, {0x7, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x2}, {0x0, 0x6}, {0x5, 0x1}, {0x3, 0x1d}, {0x7, 0x6}, {0x0, 0x7}, {0x7, 0x8}, {0x4, 0x9}, {0x3}, {0x1, 0x1}, {0x4, 0x6}, {0x5, 0x8}, {0x6, 0x8}, {0x7, 0x5}, {0x5, 0x7}, {0x4, 0x3}, {0x1, 0x5}, {0x6, 0xa}, {0x3, 0x2}, {0x4, 0x5}, {0x6, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x8}, {0x2, 0x8}, {0x3}, {0x4, 0x2}, {0x2, 0xa}, {0x5, 0x5}]}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x11638a1d1eae90ef}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x4}, {0x4}, {0x1, 0x7}, {0x3}, {0x4, 0x7}, {0x3, 0x2}, {0x6, 0x7}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x6}, {0x7, 0x5}, {0x0, 0x8}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0x6}, {0x4, 0x8}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0xa}, {0x6}, {0x3, 0x3}, {}, {0x4, 0x9}, {0x4, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x3, 0x5}, {0x7, 0x6}, {0x2, 0x1}, {0x7, 0xa}, {0x5, 0x4}, {0x2, 0x4}, {0x1, 0xa}, {0x7, 0x9}, {0x7, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0x4}, {0x2, 0x9}, {0x2, 0x6}, {0x1, 0x7}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0x4}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x4, 0xa}, {0x5}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x1}, {0x7, 0x7}, {0x7, 0xa}, {0x1, 0x5}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x8}, {0x2, 0x2}, {}, {0x3, 0x3}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0x8}, {0x1, 0x4}, {0x3, 0x9}, {0x2, 0x1}, {0x7, 0x5}, {0x6, 0xa}, {0x0, 0xa}, {0x6, 0x6}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x4, 0x3, 0x4, 0x7, 0x71e, 0x9]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x18, 0x30, 0x18, 0x48, 0x30, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x2, 0x5, 0x6, 0xc, 0x9, 0x12, 0x16, 0x30, 0x0]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0xb, 0x16, 0x60, 0x85931c68bb2a407d, 0x3, 0x13, 0x48, 0x9, 0x30, 0x24, 0x6, 0x4f, 0x6, 0x24, 0xb, 0x12, 0x48, 0xb, 0x1, 0x60, 0x0, 0x0, 0x2, 0x1b, 0x60, 0x1b, 0x16, 0x6, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x200, 0xb239, 0x0, 0x9, 0x0, 0x1800, 0x7ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x50}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x85}]}]}, @NL80211_ATTR_TID_CONFIG={0x2d8, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x6c, 0x6, 0x36, 0x18, 0x3, 0x60, 0x36, 0x2, 0x0, 0x1, 0x18, 0x36, 0x60]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6}, {0x5}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0xa}, {0x4, 0x1}, {0x4, 0xa}, {0x7, 0x2}, {0x5, 0x2}, {0x3, 0x6}, {0x2, 0x4}, {}, {0x4, 0x1}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x4, 0x7}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x6}, {0x6, 0x5}, {0x6}, {0x6, 0x1}, {0x0, 0x2}, {0x5}, {0x5, 0x1}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0xa}, {0x1, 0x3}, {0x7, 0xa}, {}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x48, 0xc, 0x48, 0x2, 0x36, 0x4, 0x3, 0x1b, 0x36, 0x12, 0xe21acef43d7a9709, 0x5, 0x12, 0x30, 0xc, 0x36, 0x30, 0x6c, 0x18, 0x5, 0x1b, 0x5, 0x6c, 0x9, 0x36, 0x30, 0x36]}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x1}, {0x7, 0xa}, {0x5, 0x2}, {0x1, 0x1}, {0x0, 0x7}, {0x7, 0x7}, {0x4, 0x9}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x6}, {0x7}, {0x7}, {0x3, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x7, 0x8}, {0x6, 0x1}, {0x2, 0xa}, {0x5, 0x1}, {0x4, 0x8}, {0x2, 0x4}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0xa}, {0x3, 0x8}, {0x4, 0x9}, {0x4, 0x9}, {0x5, 0x6}, {0x2, 0x8}, {0x7, 0xa}, {0x3}, {0x7, 0x9}, {0x6, 0x7}, {0x1, 0x9}, {0x3, 0x4}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x5}, {0x3, 0x8}, {0x0, 0x4}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0x5}, {0x1, 0x8}, {0x0, 0x5}, {0x2, 0x8}, {0x5}, {0x7}, {0x4}, {0x6, 0x1a}, {0x6, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xf421, 0x1, 0x2, 0x100, 0x1f, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x97f4, 0x40, 0x0, 0xef, 0x80, 0x9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x3, 0xa, 0x3, 0x1, 0x3, 0x3, 0x36, 0xc, 0x6c, 0x6c, 0x5, 0x5, 0x12, 0x2783bef7a5e47b6f, 0x12]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x3, 0xfe01, 0xc015, 0x40, 0x80]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x4, 0x6}, {0x7}, {0x4, 0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x3, 0x9}, {0x4, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x4, 0x9}, {0x6, 0x3}, {0x5, 0x5}, {0x4, 0xa}, {0x3, 0x8}, {0x5, 0x1}, {0x2, 0x8}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x6}, {0x7}, {0x4, 0x1}, {0x7, 0x1}, {0x5, 0x9}, {0x7, 0x4}, {0x1, 0x7}, {0x2, 0x8}, {0x6, 0x6}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x1}, {0x6, 0x3}, {0x0, 0x1}, {0x6, 0x7}, {0x4, 0xa}, {0x4, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x5, 0x6, 0x8255, 0xa90, 0x1, 0x7f]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffb}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x89}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x40}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2c0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0xc68}, 0x1, 0x0, 0x0, 0x400c04c}, 0x24004801)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001580)={0x4, 0x80, 0x5, 0xe7, 0x40, 0x9, 0x0, 0x8000, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x39, 0x2, @perf_bp={&(0x7f0000001540), 0xbfacd6023eeea691}, 0x104, 0x2, 0x401, 0x5, 0x676, 0x1, 0x400, 0x0, 0x9, 0x0, 0xfffffffffffffffd})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001640), r3)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001680)={0xec, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x805d}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x495}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x2000c804)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001840), r3)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x5c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4e}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0xa4, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x44}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8001}, 0x8885)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x74, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x40c0}, 0x24002801)

[  122.907386] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  122.909993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  122.914575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  122.923676] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  122.929869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  122.975297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.987759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.993885] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  123.002143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  123.011692] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  123.052010] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  123.055119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  123.059685] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  123.061061] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  123.064023] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  123.070541] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  123.078319] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  123.091485] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  123.092798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  123.099737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  123.165673] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  123.171697] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  123.182718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  123.197057] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  123.227941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  123.237896] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  123.245300] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  123.247750] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  123.250527] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  123.253960] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  123.258095] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  123.259793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  123.263142] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  123.271780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  123.302539] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  123.314077] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  123.323689] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  123.326917] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  123.351863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  123.377174] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  124.982882] Bluetooth: hci0: command tx timeout
[  125.109596] Bluetooth: hci1: command tx timeout
[  125.173418] Bluetooth: hci3: command tx timeout
[  125.174617] Bluetooth: hci2: command tx timeout
[  125.301345] Bluetooth: hci7: command tx timeout
[  125.301451] Bluetooth: hci4: command tx timeout
[  125.365265] Bluetooth: hci6: command tx timeout
[  125.429350] Bluetooth: hci5: command tx timeout
[  127.029376] Bluetooth: hci0: command tx timeout
[  127.157371] Bluetooth: hci1: command tx timeout
[  127.221322] Bluetooth: hci2: command tx timeout
[  127.221733] Bluetooth: hci3: command tx timeout
[  127.349317] Bluetooth: hci7: command tx timeout
[  127.351310] Bluetooth: hci4: command tx timeout
[  127.413368] Bluetooth: hci6: command tx timeout
[  127.477282] Bluetooth: hci5: command tx timeout
[  129.077295] Bluetooth: hci0: command tx timeout
[  129.206826] Bluetooth: hci1: command tx timeout
[  129.269446] Bluetooth: hci3: command tx timeout
[  129.269658] Bluetooth: hci2: command tx timeout
[  129.397834] Bluetooth: hci4: command tx timeout
[  129.397894] Bluetooth: hci7: command tx timeout
[  129.464401] Bluetooth: hci6: command tx timeout
[  129.525426] Bluetooth: hci5: command tx timeout
[  131.125535] Bluetooth: hci0: command tx timeout
[  131.253243] Bluetooth: hci1: command tx timeout
[  131.319236] Bluetooth: hci2: command tx timeout
[  131.319718] Bluetooth: hci3: command tx timeout
[  131.445543] Bluetooth: hci4: command tx timeout
[  131.446373] Bluetooth: hci7: command tx timeout
[  131.509788] Bluetooth: hci6: command tx timeout
[  131.573495] Bluetooth: hci5: command tx timeout
[  185.995160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  185.997958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  186.000228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  186.005539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  186.007986] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  186.066982] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  186.090798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  186.090822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  186.095474] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  186.098494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  186.101142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  186.107458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  186.115459] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  186.116574] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  186.119787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  186.130587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  186.135837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  186.137790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  186.151464] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  186.157793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  186.185063] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  186.186429] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  186.194721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  186.200542] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  186.214496] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  186.227762] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  186.232757] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  186.234107] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  186.239553] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  186.244000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  186.250576] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  186.251951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  186.254227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  186.255451] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  186.262621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  186.268632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  186.274938] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  186.282023] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  186.295423] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  186.297669] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  188.085400] Bluetooth: hci0: command tx timeout
[  188.213340] Bluetooth: hci4: command tx timeout
[  188.213384] Bluetooth: hci1: command tx timeout
[  188.214307] Bluetooth: hci2: command tx timeout
[  188.405276] Bluetooth: hci6: command tx timeout
[  188.469459] Bluetooth: hci5: command tx timeout
[  188.470472] Bluetooth: hci3: command tx timeout
[  188.662455] Bluetooth: hci7: command tx timeout
[  190.135312] Bluetooth: hci0: command tx timeout
[  190.261619] Bluetooth: hci1: command tx timeout
[  190.262116] Bluetooth: hci4: command tx timeout
[  190.262896] Bluetooth: hci2: command tx timeout
[  190.454388] Bluetooth: hci6: command tx timeout
[  190.517310] Bluetooth: hci5: command tx timeout
[  190.517756] Bluetooth: hci3: command tx timeout
[  190.710278] Bluetooth: hci7: command tx timeout
[  192.182617] Bluetooth: hci0: command tx timeout
[  192.309325] Bluetooth: hci1: command tx timeout
[  192.309795] Bluetooth: hci4: command tx timeout
[  192.310641] Bluetooth: hci2: command tx timeout
[  192.502372] Bluetooth: hci6: command tx timeout
[  192.565422] Bluetooth: hci3: command tx timeout
[  192.565868] Bluetooth: hci5: command tx timeout
[  192.757438] Bluetooth: hci7: command tx timeout
[  194.230283] Bluetooth: hci0: command tx timeout
[  194.358276] Bluetooth: hci2: command tx timeout
[  194.358699] Bluetooth: hci4: command tx timeout
[  194.359105] Bluetooth: hci1: command tx timeout
[  194.550584] Bluetooth: hci6: command tx timeout
[  194.614285] Bluetooth: hci5: command tx timeout
[  194.614699] Bluetooth: hci3: command tx timeout
[  194.806566] Bluetooth: hci7: command tx timeout
[  246.104488] syz-executor.3 (2779) used greatest stack depth: 23840 bytes left
[  248.276279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  248.282785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  248.287824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  248.298829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  248.304962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  248.454886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  248.459899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  248.462773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  248.480135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  248.485299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  248.591168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  248.607772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  248.617982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  248.638547] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  248.644335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  248.671454] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  248.687126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  248.691033] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  248.707810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  248.732577] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  248.773568] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  248.787982] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  248.790496] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  248.805642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  248.817270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  248.822913] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  248.835857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  248.841367] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  248.851502] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  248.865790] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  248.893529] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  248.906943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  248.907393] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  248.949929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  248.953114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  248.959025] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  248.966227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  248.969088] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  248.971328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  249.005408] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  250.357465] Bluetooth: hci0: command tx timeout
[  250.550246] Bluetooth: hci1: command tx timeout
[  250.741567] Bluetooth: hci2: command tx timeout
[  250.869335] Bluetooth: hci3: command tx timeout
[  250.997482] Bluetooth: hci5: command tx timeout
[  251.061448] Bluetooth: hci6: command tx timeout
[  251.127240] Bluetooth: hci7: command tx timeout
[  251.127251] Bluetooth: hci4: command tx timeout
[  252.406273] Bluetooth: hci0: command tx timeout
[  252.598274] Bluetooth: hci1: command tx timeout
[  252.790271] Bluetooth: hci2: command tx timeout
[  252.917264] Bluetooth: hci3: command tx timeout
[  253.045750] Bluetooth: hci5: command tx timeout
[  253.111285] Bluetooth: hci6: command tx timeout
[  253.173393] Bluetooth: hci7: command tx timeout
[  253.173440] Bluetooth: hci4: command tx timeout
[  254.454877] Bluetooth: hci0: command tx timeout
[  254.646724] Bluetooth: hci1: command tx timeout
[  254.837562] Bluetooth: hci2: command tx timeout
[  254.966375] Bluetooth: hci3: command tx timeout
[  255.093257] Bluetooth: hci5: command tx timeout
[  255.158865] Bluetooth: hci6: command tx timeout
[  255.221695] Bluetooth: hci7: command tx timeout
[  255.221751] Bluetooth: hci4: command tx timeout
[  256.501536] Bluetooth: hci0: command tx timeout
[  256.694211] Bluetooth: hci1: command tx timeout
[  256.885255] Bluetooth: hci2: command tx timeout
[  257.013254] Bluetooth: hci3: command tx timeout
[  257.141292] Bluetooth: hci5: command tx timeout
[  257.205489] Bluetooth: hci6: command tx timeout
[  257.269318] Bluetooth: hci7: command tx timeout
[  257.269805] Bluetooth: hci4: command tx timeout
[  310.792822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  310.799009] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  310.805929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  310.820146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  310.827353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  310.883604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  310.887769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  310.892072] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  310.897686] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  310.900262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  310.903309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  310.908936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  310.915773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  310.919573] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  310.925439] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  311.069374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  311.076860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  311.082635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.101012] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.122824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  311.125938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  311.128149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  311.133042] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  311.136803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  311.145719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  311.184774] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  311.188333] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  311.192479] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  311.207929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  311.223163] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  311.410893] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  311.417949] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  311.420167] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  311.423669] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  311.427985] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  311.432977] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  311.457603] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  311.492373] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  311.543721] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  311.567724] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  312.885309] Bluetooth: hci0: command tx timeout
[  313.013861] Bluetooth: hci2: command tx timeout
[  313.013868] Bluetooth: hci1: command tx timeout
[  313.205361] Bluetooth: hci4: command tx timeout
[  313.333381] Bluetooth: hci5: command tx timeout
[  313.398657] Bluetooth: hci3: command tx timeout
[  313.525342] Bluetooth: hci6: command tx timeout
[  313.718085] Bluetooth: hci7: command tx timeout
[  314.933456] Bluetooth: hci0: command tx timeout
[  315.061397] Bluetooth: hci2: command tx timeout
[  315.062394] Bluetooth: hci1: command tx timeout
[  315.254248] Bluetooth: hci4: command tx timeout
[  315.381482] Bluetooth: hci5: command tx timeout
[  315.446216] Bluetooth: hci3: command tx timeout
[  315.573545] Bluetooth: hci6: command tx timeout
[  315.767483] Bluetooth: hci7: command tx timeout
[  316.981375] Bluetooth: hci0: command tx timeout
[  317.109667] Bluetooth: hci2: command tx timeout
[  317.109793] Bluetooth: hci1: command tx timeout
[  317.301693] Bluetooth: hci4: command tx timeout
[  317.429523] Bluetooth: hci5: command tx timeout
[  317.493517] Bluetooth: hci3: command tx timeout
[  317.621558] Bluetooth: hci6: command tx timeout
[  317.813893] Bluetooth: hci7: command tx timeout
[  319.029373] Bluetooth: hci0: command tx timeout
[  319.157288] Bluetooth: hci1: command tx timeout
[  319.157348] Bluetooth: hci2: command tx timeout
[  319.349392] Bluetooth: hci4: command tx timeout
[  319.477380] Bluetooth: hci5: command tx timeout
[  319.541644] Bluetooth: hci3: command tx timeout
[  319.669922] Bluetooth: hci6: command tx timeout
[  319.861281] Bluetooth: hci7: command tx timeout
[  373.196562] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  373.200554] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  373.202858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  373.210079] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  373.216395] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  373.261106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  373.266791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  373.269612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  373.281148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  373.287815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  373.422577] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  373.427761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  373.443474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  373.467771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  373.481594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  373.501507] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  373.505910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  373.510102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  373.518839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  373.527391] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  373.802224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  373.809737] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  373.829540] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  373.835913] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  373.838257] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  373.853994] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  373.856276] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  373.859084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  373.866966] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  373.899402] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  373.907869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  373.937273] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  373.939254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  373.944350] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  373.953965] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  373.961929] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  373.966119] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  373.976481] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  373.981764] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  373.998652] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  375.286260] Bluetooth: hci0: command tx timeout
[  375.350126] Bluetooth: hci1: command tx timeout
[  375.541279] Bluetooth: hci2: command tx timeout
[  375.606463] Bluetooth: hci3: command tx timeout
[  376.054577] Bluetooth: hci7: command tx timeout
[  376.056146] Bluetooth: hci6: command tx timeout
[  376.117403] Bluetooth: hci5: command tx timeout
[  376.245276] Bluetooth: hci4: command tx timeout
[  377.334768] Bluetooth: hci0: command tx timeout
[  377.397323] Bluetooth: hci1: command tx timeout
[  377.590058] Bluetooth: hci2: command tx timeout
[  377.653735] Bluetooth: hci3: command tx timeout
[  378.101664] Bluetooth: hci7: command tx timeout
[  378.101873] Bluetooth: hci6: command tx timeout
[  378.165733] Bluetooth: hci5: command tx timeout
[  378.293481] Bluetooth: hci4: command tx timeout
[  379.384272] Bluetooth: hci0: command tx timeout
[  379.446268] Bluetooth: hci1: command tx timeout
[  379.639075] Bluetooth: hci2: command tx timeout
[  379.702288] Bluetooth: hci3: command tx timeout
[  380.150523] Bluetooth: hci6: command tx timeout
[  380.151556] Bluetooth: hci7: command tx timeout
[  380.214353] Bluetooth: hci5: command tx timeout
[  380.342618] Bluetooth: hci4: command tx timeout
[  381.429355] Bluetooth: hci0: command tx timeout
[  381.494345] Bluetooth: hci1: command tx timeout
[  381.685328] Bluetooth: hci2: command tx timeout
[  381.749301] Bluetooth: hci3: command tx timeout
[  382.197487] Bluetooth: hci6: command tx timeout
[  382.197977] Bluetooth: hci7: command tx timeout
[  382.261431] Bluetooth: hci5: command tx timeout
[  382.389519] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
06:09:51  Registers:
info registers vcpu 0
RAX=0000000080010001 RBX=00000000000c94f8 RCX=ffffffff81621e4f RDX=ffff88800a743700
RSI=00000000000c94f8 RDI=0000000000000004 RBP=000000627369b8f2 RSP=ffff88806ce08ea0
R8 =0000000000000001 R9 =0000000000000000 R10=00000000000c94f8 R11=0000000000000001
R12=000000000725e5ed R13=dffffc0000000000 R14=00000000000c94f8 R15=000002848e100549
RIP=ffffffff81621e52 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffef2087c78 CR3=000000003080e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffed1001e37870 RBX=ffffed1001e37871 RCX=ffffffff81e38250 RDX=ffffed1001e37871
RSI=0000000000000008 RDI=ffff88800f1bc380 RBP=ffffed1001e37870 RSP=ffff88802ea378c0
R8 =0000000000000000 R9 =ffffed1001e37870 R10=ffff88800f1bc387 R11=0000000000000001
R12=ffff888015e92e00 R13=ffff88800f1bc380 R14=ffff88800f1bc000 R15=ffff88800f1ba618
RIP=ffffffff81aefdf1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8430af2260 CR3=0000000009cac000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000