syzkaller login: [   62.441409] hrtimer: interrupt took 3042426 ns
[   71.438461] scp (238) used greatest stack depth: 24200 bytes left
Warning: Permanently added '[localhost]:54311' (ECDSA) to the list of known hosts.
2025/01/06 14:35:31 fuzzer started
2025/01/06 14:35:31 dialing manager at localhost:34561
[   76.332198] cgroup: Unknown subsys name 'net'
[   76.498678] cgroup: Unknown subsys name 'cpuset'
[   76.520961] cgroup: Unknown subsys name 'rlimit'
2025/01/06 14:35:58 syscalls: 205
2025/01/06 14:35:58 code coverage: enabled
2025/01/06 14:35:58 comparison tracing: enabled
2025/01/06 14:35:58 extra coverage: enabled
2025/01/06 14:35:58 setuid sandbox: enabled
2025/01/06 14:35:58 namespace sandbox: enabled
2025/01/06 14:35:58 Android sandbox: enabled
2025/01/06 14:35:58 fault injection: enabled
2025/01/06 14:35:58 leak checking: enabled
2025/01/06 14:35:58 net packet injection: enabled
2025/01/06 14:35:58 net device setup: enabled
2025/01/06 14:35:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/06 14:35:58 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/06 14:35:58 USB emulation: enabled
2025/01/06 14:35:58 hci packet injection: enabled
2025/01/06 14:35:58 wifi device emulation: enabled
2025/01/06 14:35:58 802.15.4 emulation: enabled
2025/01/06 14:35:58 fetching corpus: 0, signal 0/0 (executing program)
2025/01/06 14:36:00 starting 8 fuzzer processes
14:36:00 executing program 0:
getresgid(&(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
getgroups(0x8, &(0x7f0000000140)=[r0, <r3=>r2, r1, r1, <r4=>r1, r1, r0, <r5=>r2])
getgroups(0x5, &(0x7f0000000180)=[r1, r0, r2, <r6=>r1, r3])
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40845}, 0x4800)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00'})
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='memory.swap.current\x00', 0x0, 0x0)
ioctl$CDROM_NEXT_WRITABLE(r9, 0x5394, &(0x7f00000006c0))
ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000700)=0xe)
r10 = openat$cgroup_ro(r9, &(0x7f0000000740)='devices.list\x00', 0x0, 0x0)
ioctl$CDROMREADRAW(r10, 0x5314, &(0x7f0000000780)={0x8, 0x6, 0x48, 0x2, 0x0, 0x40})
openat$cgroup_devices(r10, &(0x7f0000001200)='devices.allow\x00', 0x2, 0x0)
setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000001240)=0x5, 0x4)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r9)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0x84, r11, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffcab, 0x3c}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x41}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_PMKID={0x14, 0x55, "2966987120a058a3ba6a67bda18eabd8"}, @NL80211_ATTR_PMKID={0x14, 0x55, "7cd4ba8001dc16bc101970febb3f9a43"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x20040084)
getgroups(0x3, &(0x7f0000001440)=[r4, <r12=>r6, r0])
getgroups(0x3, &(0x7f0000001480)=[r5, r1, r12])

14:36:00 executing program 1:
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x5, 0xfffffffffffff001, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x40)
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x50, 0xffffffffffffffff, 0x10000000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, 0x0, 0x211, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x7b}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x6e, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @mic={0x8c, 0x10, {0xb57, "6b60fff69b12", @short="ef6859b5a111c89a"}}, @random_vendor={0xdd, 0x42, "dd99d252fadbaa980d18414d22108b636e73ccb1ddaa020187b12b2230816be18a9190d5cef2d32dcb30a94b8dfad2fe1abb9f5568e7632eb83a17dcc5dc40b0d36d"}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20048817}, 0x4)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x48040000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x19}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x5)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000ffa000/0x2000)=nil)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000a80)={0x1f, 0x5, 0x2, 0x0, 0x75, 0x1, 0x3f}, 0xc)
r2 = accept4$bt_l2cap(r1, &(0x7f0000000d80), &(0x7f0000000dc0)=0xe, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000e00), &(0x7f0000000e40)=0x4)
inotify_init1(0x80c00)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ec0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x24008804)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_0\x00'})
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000001080)=0x1)

14:36:00 executing program 2:
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='devices.list\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3f, 0x74}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20008000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x2a0, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dcdfaee671dd3f3efebfde87198afa7c5b1b112563e6b44d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6f24fbac9b7eecc920941a64204296b4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7c9072b65ee71a68"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "eb2d23e2bdccc100"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d895bd9312920bd13d977acae1db0be4"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="772ff509ca5cc6e161a16a7bd47f44d0bb5d6b6dc44cf12d"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="003419355ad12486344c0e5ab51078d56a999e95666ceba9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6d229420db680c252b0902068b3b63301fae99f4c51d37a0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d3475bb9aaf23d4f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "30ef1b20767b17e2"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d10b0b87448172bb7695c0a08d0bc15ebd47b2bbc1448751"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b0a942dcb5babb329c1a751505aa03e7b6ca15d1d2d3569f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8caa09e2af74cf58016741318b9863ba"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0c54ac5612b328dc"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3b23f97c9c78d29b9c8b2901aa1408cc"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="721e6bbf6d9d29168d24935553417141"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1b19e6e9265488c9aacea077988f4eab"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="24c7cfea891b33475fec49df65651365"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e421374de2ae08c1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x79d}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b1771a5eb26bd4db2707146d378df514"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "620b27a59a223357"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3e6f44d74cad9afd392bc50fe6651082907c0d1bec3bfaa5"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="682063cf44b5aff835863a6890b735a18155defbaa4eb9fe"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d75d8ffa368750d8ac2f3d4547f6dfa44d27a8c7bae8b3e7"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd0}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dcba3cd1d60eae7fc277695c4de0a33e8f8dbd1a9c1faf08"}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x881}, 0x4000000)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x80)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x220, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001ec0), 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r4)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x7c, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wlan1\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48004}, 0x4000001)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x74, r5, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x44080}, 0x24044085)
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, r5, 0x528, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r6 = inotify_init1(0x800)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000002340)=@IORING_OP_WRITE={0x17, 0x3, 0x2007, @fd=r6, 0x5, &(0x7f00000022c0)="adc7999d89ad5a6038329ea63e2308b7122aec67e82c931fc15fb0d33c4f82b340458c6c36e529bb1893ba1fe03fcf00b8369148bcf8425f361894d57551981ee62170bae18529", 0x47}, 0x7)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002380), 0x408c01, 0x0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x14, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44)

14:36:00 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x220, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "96891492f39585dcd554036b76d9973ee44e18e2dd475b7bc27a79dcc2e5c70b"}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000004}, 0xc0)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1f}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008841}, 0x880)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4004}, 0x20000000)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x6cbbe7e219a298cc}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x24008000)
ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f00000005c0)={0x3, 0x9, 0x5, 0x6, 0x1, 0x51, @msf={0x3f, 0x81, 0x5}, @msf={0x5, 0xfd, 0x7f}})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/custom1\x00', 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xe)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="625fffa81aba"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="88c4455fe318"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3e}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4d}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x40000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan0\x00', <r5=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x804)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, 0x0, 0x9, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4004881)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), r1)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xcc, r6, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x8c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x37, 0x13}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x22}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xcc}}, 0x40040)

14:36:00 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', <r1=>0x0})
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000814)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x8, 0x5}, {0x8, 0x4}, {0x0, 0x1}, {0xee, 0x3}, {0x1, 0x2}, {0x4, 0x5}, {0x80, 0x7}, {0x8}, {0x3f}, {0x40, 0x5}, {0x2, 0x2}, {0x3f, 0x2}, {0x0, 0x5}, {0x5, 0x4}], "51354dad308b12f6"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "45b72f830d75f2e2"}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040011)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3f}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x11)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7f}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x8}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000000}, 0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r3, 0x108, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}, 0x1, 0x0, 0x0, 0xaeb6625a13204181}, 0x840)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, ':!,#\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x20000014)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x13c, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x799, 0x22}}}}, [@NL80211_ATTR_IE={0x109, 0x2a, [@random={0xfc, 0xd9, "8e6143cf0069df432e8f2b2c0aa8c4ee39cdba70b7175752e70a063fc25726a1a916aca0d4f0d7700ee570e87def2c8b129c96dc34bf528e648467d775b448702ecb72f10c1304876cdf48e3e24090f833ca820826b0636582cf2f5aafa6e830fc3d354c8a3a606215a38f2f52e800a2664ca2c936ee2d05aa9d90081a9e2fc700533da65d30cdcddfaf20440168cc8a3003eff09d1735785a8f68b83d6f76790ed647cf4081fec920b266960aaa58234045a6ec07963a25ad1cfd372904e8bb89158b558fe4b2d4049592cc12fbddb06ed386dca883ebaea7"}, @ht={0x2d, 0x1a, {0x10, 0x2, 0x1, 0x0, {0x40000000000, 0x7f, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x800, 0x9, 0x4}}, @mesh_chsw={0x76, 0x6, {0x80, 0x1, 0x14, 0x7d}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x24, 0x3}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x13c}}, 0x0)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r4)
sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x84, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004004}, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "bcbcdad4e20ed0f333c73209f47e7137"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x8c, r6, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8014}, 0x24048011)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80)

14:36:00 executing program 5:
mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x4, 0x7fffffff, 0x6)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
sigaltstack(&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040))
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd93dbb839871efcf}, 0x8080)
pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff)
clock_gettime(0x0, &(0x7f0000000280)={<r1=>0x0, <r2=>0x0})
mq_timedreceive(r0, &(0x7f00000001c0)=""/187, 0xbb, 0x6, &(0x7f00000002c0)={r1, r2+10000000})
r3 = syz_io_uring_setup(0x41ab, &(0x7f0000000300)={0x0, 0x5f48, 0x0, 0x3, 0x204}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f00000003c0)=<r5=>0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r3, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1}, 0x7)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r3, 0x10000000)
remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000005, 0x8, 0x40)
clock_gettime(0x0, &(0x7f0000000480)={<r6=>0x0, <r7=>0x0})
mq_timedreceive(r0, &(0x7f0000000440)=""/1, 0x1, 0xfffffffffffffffe, &(0x7f00000004c0)={r6, r7+60000000})
get_mempolicy(&(0x7f0000000500), &(0x7f0000000540), 0xffffffffffff8001, &(0x7f0000ffa000/0x4000)=nil, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x10, 0x0, &(0x7f0000000580)=[@release={0x40046306, 0x3}, @release={0x40046306, 0x2}], 0x21, 0x0, &(0x7f00000005c0)="f9af76e5440092f29238cfdf827f5a5c6ed78c6438946c6f81d81ae92b5c3e7d4c"})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0x400000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r8, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd50, 0x13}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="a90fb86aab5a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2005c000)

[  104.175010] audit: type=1400 audit(1736174160.907:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
14:36:00 executing program 6:
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x5, 0x3, 0x4, 0x0, 0x7, 0x200, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x5481ad31c58e35f7, @perf_bp={&(0x7f0000000040)}, 0xc000, 0x8, 0x7, 0x9, 0x140000, 0x9, 0x4, 0x0, 0x4, 0x0, 0x80000000}, 0x0, 0x1f, 0xffffffffffffffff, 0x8)
bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x16, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0xe)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000140))
r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "68e0b835e99e8e5d2a38d48175147796"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="2896249d510f"}]}, 0x3c}}, 0x5)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb4, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9d}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3697}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff7fff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x8004)
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="1ebd2d162b84"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_PMK={0x14, 0xfe, "1a8055f2462d9d2e631de4a73fc76276"}, @NL80211_ATTR_PMKID={0x14, 0x55, "19bb92383cad314c74783f9db9e7222e"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3ff}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x40}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x20000005)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8014)
socketpair(0x3, 0x800, 0x7fffffff, &(0x7f0000000840)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x194, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0xe, 0x1}, {0x48}, {0xb}, {0x4, 0x1}, {0x18, 0x1}, {0x16}, {0x48, 0x1}, {0x12}, {0xc}, {0x6c, 0x1}, {0x24, 0x1}, {0x16, 0x1}, {0x6c, 0x1}, {0x9}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x36, 0xbe, "a3b7b01cd035811914f8b6e82f95fe714a2eab535cdfdd86f7855196195fc2cf8742e53a83689ee6a5f9b807783602f24583"}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x771}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x20}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xf4, 0xbe, "ab74b8818819d102cd088462c2d7084ce96697d09c827d32819bab82ab6e9b2941948b2e6d926b88b5578625ef6dbe7a8c40986bfa2575867d6d14fe1706525b4a45e03bc7ee9e1e8c03d9c1dbbaf2aad0a946add2a5966eafc31c77a543d016df7a0e615a9cb87e15f0e7e8c5d99babb201629ea5147dcbd49efd1cd1dce413ae262dd41a7d230032d7bacf9d8d02195103ff9b3b5c534f0d8422b2a7a4967ff0bba789b980eb37a9791fa8e7dda72c65f0c64edcbf89df27b96f3d3551ed59ecd260afec5f8c8638e042d2949d1bc28aba9ce008a39257d377fb1ef9c7e8647cd07ad6dab1471736a5a5211fadb6a5"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x194}, 0x1, 0x0, 0x0, 0x2004090}, 0x20050010)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x120, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xfe, 0x33, @mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @broadcast, @from_mac=@broadcast, {0xd, 0x40}}, @ver_80211n={0x0, 0x7, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @tdls_teardown={0xc, 0x3, {0xd, {0x37, 0xc4, {0x6, 0x5, "165064fb4178d41756c8e8a97e331be9", "2af4d93f320d66c7360e4a25558cafd89c23ed900de7b41e4d3950fdbc9f1c49", "c72f93553fdb5d06caeacfe6c27556a1c6ca9dcaee8feaa7839d8b673b48772f", [{0x3, 0x25, "6b38f0f50efe6f60ed99ce69e21c8f831171636903ade815a1e92ff1d598587611d1c448a6"}, {0x3, 0x1b, "5bdb2758dc880129a91fe2595dcf7927707ef3e4c1e5c42c362a5e"}, {0x4, 0xc, "36d71de775522690517e26d1"}, {0x4, 0x10, "c73f8c1846e180a540c7324d2ee1c770"}, {0x4, 0xc, "5c14210ab0c105f7dbf92b12"}]}}, {0x65, 0x12, {@random="cdae920a1948", @broadcast, @broadcast}}}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6}]}, 0x120}, 0x1, 0x0, 0x0, 0x880}, 0x4817)
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x9c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000)

14:36:00 executing program 7:
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x40de}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, r0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3f, 0x2}, {0x9, 0x3}, {0x3, 0x3}, {0x3, 0x6}, {0x54, 0x5}, {0xc7, 0x5}, {0x3f, 0x7}, {0xae, 0x4}], "036a9820f4244f22"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x54}, {0x80, 0x4}, {0x13, 0x2}, {0x9, 0x5}, {0x36, 0x2}, {0x3, 0x1}, {0x20, 0x2}, {0xed}, {0x3, 0x6}, {0xfa, 0x1}, {0x0, 0x3}, {0xbc, 0x3}, {0xd2, 0x1}, {0x40}], "c7a2b780d31d00b7"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7f}, {0x2, 0x5}, {0x6}, {0x81}], "fffadb409bca1327"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x8, 0x5}], "2d3251fb5bab9147"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x81, 0x7}, {0xd9, 0x6}], "e3773ba28356dd4b"}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000091}, 0x8880)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x19c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5e2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb521}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x37d}, @TIPC_NLA_NODE_ID={0x13, 0x3, "1f8d787190a4221a45b5fbc14da50e"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e83544fb9b350606c5b92dda6eb876f9ab78a93429f9e9fcb221f0d6bd"}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff023f}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000040}, 0x20000040)
socketpair(0x2, 0x3, 0x81, &(0x7f0000001840)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r1)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000001a00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f00000019c0)={&(0x7f0000001900)={0x94, r5, 0x2db94ea8e2b5321f, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x7f, 0x4}, {0x50, 0x1}, {0x9b}, {0x7, 0x1}, {0x3, 0x3}, {0x1a, 0x3}, {0xfc, 0x6}, {0x5, 0x4}, {0x8, 0x6}, {0x7f, 0x5}, {0x7, 0x6}, {0x6, 0x6}, {0x6, 0x6}, {0x2, 0x1}, {0x0, 0x3}], "6b38e10782ec8004"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x4, 0x2}, {0x2, 0x7}, {0x40, 0x5}, {0x3, 0x1}, {0x1f}, {0xff, 0x7}, {0x6, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x8e, 0x5}, {0x0, 0x1}, {0x8e}, {0x3, 0x3}, {0x3f, 0x1}, {0xb8, 0x1}], "40e004190619711d"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "27aad7fcccd21338"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x6, 0x2}, {0x7, 0x3}, {0x42, 0x3}, {0x1, 0x7}, {0x30, 0x3}, {0x4, 0x2}, {0x1, 0x5}], "05dd54546345c51e"}}]}, 0x94}, 0x1, 0x0, 0x0, 0xf272e25f2b480e69}, 0x40)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001a40), 0x80, 0x0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0xf8, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x800)
syz_genetlink_get_family_id$devlink(&(0x7f0000001c40), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001c80)={'batadv_slave_1\x00'})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x14, r5, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8004)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r6)
sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x2c, r8, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3bc}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10000840)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f40), r6)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x40, r9, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc881}, 0x40000)

[  105.570342] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  105.573183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.575112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  105.578812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.580789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  105.582951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.587575] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.612813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  105.624533] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  105.625847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.636533] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.637814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  105.639712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  105.640975] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  105.652305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  105.657798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  105.659054] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.659871] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  105.660832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.663532] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  105.667767] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.672683] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  105.678441] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  105.687538] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.691400] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  105.692588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  105.693900] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  105.694980] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  105.695470] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  105.696654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.697687] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  105.698129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  105.699675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  105.703650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  105.703732] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  105.704428] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  105.713430] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  105.716973] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  105.718180] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  105.723195] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  105.725785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  105.728875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  105.730256] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  105.731978] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  105.733753] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  105.738759] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  105.739575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  105.740878] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  107.721920] Bluetooth: hci2: command tx timeout
[  107.722382] Bluetooth: hci1: command tx timeout
[  107.722729] Bluetooth: hci0: command tx timeout
[  107.785613] Bluetooth: hci4: command tx timeout
[  107.785814] Bluetooth: hci7: command tx timeout
[  107.786351] Bluetooth: hci5: command tx timeout
[  107.786837] Bluetooth: hci6: command tx timeout
[  107.787303] Bluetooth: hci3: command tx timeout
[  109.770209] Bluetooth: hci1: command tx timeout
[  109.770403] Bluetooth: hci2: command tx timeout
[  109.770462] Bluetooth: hci0: command tx timeout
[  109.833397] Bluetooth: hci6: command tx timeout
[  109.833476] Bluetooth: hci3: command tx timeout
[  109.833896] Bluetooth: hci5: command tx timeout
[  109.834762] Bluetooth: hci7: command tx timeout
[  109.835009] Bluetooth: hci4: command tx timeout
[  111.817626] Bluetooth: hci1: command tx timeout
[  111.819228] Bluetooth: hci0: command tx timeout
[  111.819764] Bluetooth: hci2: command tx timeout
[  111.882462] Bluetooth: hci4: command tx timeout
[  111.882597] Bluetooth: hci7: command tx timeout
[  111.882963] Bluetooth: hci5: command tx timeout
[  111.884221] Bluetooth: hci3: command tx timeout
[  111.884342] Bluetooth: hci6: command tx timeout
[  113.866677] Bluetooth: hci2: command tx timeout
[  113.867171] Bluetooth: hci0: command tx timeout
[  113.867940] Bluetooth: hci1: command tx timeout
[  113.929648] Bluetooth: hci6: command tx timeout
[  113.930164] Bluetooth: hci7: command tx timeout
[  113.931060] Bluetooth: hci5: command tx timeout
[  113.931542] Bluetooth: hci3: command tx timeout
[  113.931995] Bluetooth: hci4: command tx timeout
[  168.233077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  168.234905] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  168.236896] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  168.237935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  168.239154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  168.240620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  168.241977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  168.242803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  168.243662] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  168.244753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  168.250436] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  168.252359] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  168.257884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  168.258807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  168.262161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  168.262937] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  168.263692] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  168.264985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  168.265732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  168.272040] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  168.276736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  168.294037] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  168.295725] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  168.297748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  168.343070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  168.354879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  168.358831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  168.393794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  168.439803] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  168.443707] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  168.500081] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  168.509558] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  168.512664] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  168.516191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  168.519067] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  168.522701] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  168.524513] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  168.587570] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  168.589740] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  168.592469] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  168.596403] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  168.598343] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  168.599729] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  168.601768] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  168.606359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  168.647628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  168.702409] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  168.721382] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  170.314824] Bluetooth: hci2: command tx timeout
[  170.315524] Bluetooth: hci3: command tx timeout
[  170.378342] Bluetooth: hci1: command tx timeout
[  170.495110] Bluetooth: hci0: command tx timeout
[  170.569374] Bluetooth: hci7: command tx timeout
[  170.698420] Bluetooth: hci5: command tx timeout
[  170.699582] Bluetooth: hci4: command tx timeout
[  170.825365] Bluetooth: hci6: command tx timeout
[  172.363422] Bluetooth: hci3: command tx timeout
[  172.363937] Bluetooth: hci2: command tx timeout
[  172.425378] Bluetooth: hci1: command tx timeout
[  172.553510] Bluetooth: hci0: command tx timeout
[  172.618291] Bluetooth: hci7: command tx timeout
[  172.745423] Bluetooth: hci5: command tx timeout
[  172.745909] Bluetooth: hci4: command tx timeout
[  172.873343] Bluetooth: hci6: command tx timeout
[  174.409451] Bluetooth: hci2: command tx timeout
[  174.409963] Bluetooth: hci3: command tx timeout
[  174.473505] Bluetooth: hci1: command tx timeout
[  174.601537] Bluetooth: hci0: command tx timeout
[  174.666374] Bluetooth: hci7: command tx timeout
[  174.793396] Bluetooth: hci4: command tx timeout
[  174.793880] Bluetooth: hci5: command tx timeout
[  174.921329] Bluetooth: hci6: command tx timeout
[  176.457379] Bluetooth: hci3: command tx timeout
[  176.457917] Bluetooth: hci2: command tx timeout
[  176.521476] Bluetooth: hci1: command tx timeout
[  176.649435] Bluetooth: hci0: command tx timeout
[  176.713321] Bluetooth: hci7: command tx timeout
[  176.841498] Bluetooth: hci5: command tx timeout
[  176.841998] Bluetooth: hci4: command tx timeout
[  176.969715] Bluetooth: hci6: command tx timeout
[  230.255177] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  230.261678] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  230.269208] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  230.276957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  230.296662] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  230.298544] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  230.303620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  230.311551] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  230.316826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  230.335595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  230.338940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  230.344847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  230.364961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  230.390397] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  230.392571] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  230.396203] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  230.404860] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  230.406956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  230.422740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  230.437961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  230.439436] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  230.454870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  230.461454] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  230.464167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  230.643963] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  230.647529] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  230.648945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  230.663586] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  230.666643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  230.672867] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  230.677530] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  230.681465] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  230.682715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  230.684613] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  230.689141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  230.704521] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  230.706794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  230.714034] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  230.719507] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  230.721993] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  230.725369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  230.731552] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  230.749512] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  230.749602] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  230.754120] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  230.756835] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  230.761673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  230.768068] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  232.329388] Bluetooth: hci0: command tx timeout
[  232.394436] Bluetooth: hci1: command tx timeout
[  232.457559] Bluetooth: hci2: command tx timeout
[  232.521780] Bluetooth: hci3: command tx timeout
[  232.784909] Bluetooth: hci6: command tx timeout
[  232.841353] Bluetooth: hci5: command tx timeout
[  232.906027] Bluetooth: hci7: command tx timeout
[  232.907718] Bluetooth: hci4: command tx timeout
[  234.382271] Bluetooth: hci0: command tx timeout
[  234.442526] Bluetooth: hci1: command tx timeout
[  234.505321] Bluetooth: hci2: command tx timeout
[  234.569364] Bluetooth: hci3: command tx timeout
[  234.826425] Bluetooth: hci6: command tx timeout
[  234.889421] Bluetooth: hci5: command tx timeout
[  234.956299] Bluetooth: hci7: command tx timeout
[  234.956323] Bluetooth: hci4: command tx timeout
[  236.425360] Bluetooth: hci0: command tx timeout
[  236.490428] Bluetooth: hci1: command tx timeout
[  236.553333] Bluetooth: hci2: command tx timeout
[  236.617522] Bluetooth: hci3: command tx timeout
[  236.874765] Bluetooth: hci6: command tx timeout
[  236.938539] Bluetooth: hci5: command tx timeout
[  237.002508] Bluetooth: hci7: command tx timeout
[  237.003719] Bluetooth: hci4: command tx timeout
[  238.473477] Bluetooth: hci0: command tx timeout
[  238.538617] Bluetooth: hci1: command tx timeout
[  238.604398] Bluetooth: hci2: command tx timeout
[  238.671295] Bluetooth: hci3: command tx timeout
[  238.922366] Bluetooth: hci6: command tx timeout
[  238.994928] Bluetooth: hci5: command tx timeout
[  239.050358] Bluetooth: hci4: command tx timeout
[  239.050388] Bluetooth: hci7: command tx timeout
[  292.896138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  292.899674] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  292.902902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  292.905986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  292.915898] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  292.917003] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  293.017320] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  293.023156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  293.024389] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  293.026072] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  293.027469] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  293.033514] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  293.035204] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  293.036265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  293.040342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  293.054573] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  293.081526] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  293.084263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  293.085727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  293.088535] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  293.090315] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  293.093850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  293.099444] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  293.100565] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  293.108093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  293.114580] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  293.119342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  293.121781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  293.132429] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  293.133457] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  293.210987] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  293.221071] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  293.234708] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  293.243178] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  293.243996] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  293.250474] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  293.251860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  293.253995] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  293.259485] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  293.269924] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  293.271765] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  293.273182] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  293.301850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  293.309043] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  293.310094] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  293.310373] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  293.312951] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  293.316376] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  294.985372] Bluetooth: hci0: command tx timeout
[  295.049358] Bluetooth: hci1: command tx timeout
[  295.177511] Bluetooth: hci3: command tx timeout
[  295.178329] Bluetooth: hci4: command tx timeout
[  295.179004] Bluetooth: hci2: command tx timeout
[  295.379355] Bluetooth: hci5: command tx timeout
[  295.380413] Bluetooth: hci6: command tx timeout
[  295.381002] Bluetooth: hci7: command tx timeout
[  297.033306] Bluetooth: hci0: command tx timeout
[  297.097337] Bluetooth: hci1: command tx timeout
[  297.225362] Bluetooth: hci3: command tx timeout
[  297.225572] Bluetooth: hci2: command tx timeout
[  297.226326] Bluetooth: hci4: command tx timeout
[  297.419457] Bluetooth: hci6: command tx timeout
[  297.419752] Bluetooth: hci5: command tx timeout
[  297.419972] Bluetooth: hci7: command tx timeout
[  299.082317] Bluetooth: hci0: command tx timeout
[  299.147261] Bluetooth: hci1: command tx timeout
[  299.273395] Bluetooth: hci2: command tx timeout
[  299.274972] Bluetooth: hci4: command tx timeout
[  299.275028] Bluetooth: hci3: command tx timeout
[  299.470442] Bluetooth: hci5: command tx timeout
[  299.470982] Bluetooth: hci6: command tx timeout
[  299.472199] Bluetooth: hci7: command tx timeout
[  301.130419] Bluetooth: hci0: command tx timeout
[  301.194340] Bluetooth: hci1: command tx timeout
[  301.323190] Bluetooth: hci3: command tx timeout
[  301.324266] Bluetooth: hci2: command tx timeout
[  301.324396] Bluetooth: hci4: command tx timeout
[  301.513516] Bluetooth: hci7: command tx timeout
[  301.514052] Bluetooth: hci6: command tx timeout
[  301.514072] Bluetooth: hci5: command tx timeout
[  355.368755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  355.383631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  355.384629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  355.386483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  355.388423] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  355.400506] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  355.408991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  355.449610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  355.453509] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  355.457626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  355.459027] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  355.459348] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  355.459988] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  355.461388] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  355.462517] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  355.474911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  355.485593] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  355.488245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  355.626459] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  355.633306] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  355.639271] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  355.639585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  355.645443] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  355.646361] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  355.654819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  355.658048] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  355.664722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  355.665571] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  355.676421] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  355.679009] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  355.685113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  355.690729] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  355.695624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  355.697897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  355.699994] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  355.709113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  355.714372] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  355.714842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  355.717685] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  355.742371] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  355.762349] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  355.780533] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  355.794571] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  355.802487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  355.804915] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  355.808853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  355.820424] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  355.825523] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  357.515256] Bluetooth: hci0: command tx timeout
[  357.516888] Bluetooth: hci1: command tx timeout
[  357.578290] Bluetooth: hci2: command tx timeout
[  357.706337] Bluetooth: hci4: command tx timeout
[  357.833341] Bluetooth: hci5: command tx timeout
[  357.834117] Bluetooth: hci3: command tx timeout
[  357.897936] Bluetooth: hci6: command tx timeout
[  357.965268] Bluetooth: hci7: command tx timeout
[  359.567262] Bluetooth: hci1: command tx timeout
[  359.567813] Bluetooth: hci0: command tx timeout
[  359.626310] Bluetooth: hci2: command tx timeout
[  359.753406] Bluetooth: hci4: command tx timeout
[  359.882360] Bluetooth: hci5: command tx timeout
[  359.882914] Bluetooth: hci3: command tx timeout
[  359.946299] Bluetooth: hci6: command tx timeout
[  360.010262] Bluetooth: hci7: command tx timeout
[  361.610284] Bluetooth: hci0: command tx timeout
[  361.610771] Bluetooth: hci1: command tx timeout
[  361.674717] Bluetooth: hci2: command tx timeout
[  361.802248] Bluetooth: hci4: command tx timeout
[  361.929366] Bluetooth: hci5: command tx timeout
[  361.929874] Bluetooth: hci3: command tx timeout
[  361.994338] Bluetooth: hci6: command tx timeout
[  362.061332] Bluetooth: hci7: command tx timeout
[  363.659427] Bluetooth: hci0: command tx timeout
[  363.659947] Bluetooth: hci1: command tx timeout
[  363.722789] Bluetooth: hci2: command tx timeout
[  363.850394] Bluetooth: hci4: command tx timeout
[  363.977485] Bluetooth: hci3: command tx timeout
[  363.978917] Bluetooth: hci5: command tx timeout
[  364.059254] Bluetooth: hci6: command tx timeout
[  364.105545] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
14:41:11  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000016 RCX=ffffffff814f583e RDX=fffffbfff0fdfbe5
RSI=0000000000000008 RDI=ffffffff87efdf20 RBP=ffff888035bcb780 RSP=ffff88802f816f80
R8 =0000000000000000 R9 =fffffbfff0fdfbe4 R10=ffffffff87efdf27 R11=0000000000000003
R12=0000000000000009 R13=0000000000000200 R14=ffff888035bcc240 R15=ffff888035bcc240
RIP=ffffffff814f5846 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb9983c2540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb998493710 CR3=000000002d1b6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00
XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff864ca3a8 RBX=ffffffff864ca3ac RCX=ffffffff81aba343 RDX=0000000000000000
RSI=ffffffff86842888 RDI=ffffffff864ca388 RBP=ffffffff864ca388 RSP=ffff888023feee88
R8 =ffffffff86842888 R9 =ffff888023feef80 R10=000000000003aab6 R11=00000000000241b8
R12=ffffffff864ca3a8 R13=ffffffff864ca388 R14=ffffffff864ca388 R15=dffffc0000000000
RIP=ffffffff8134922a RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe1800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa63c96a8e0 CR3=000000000d3ce000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000