Warning: Permanently added '[localhost]:23943' (ECDSA) to the list of known hosts. 2025/01/29 04:45:43 fuzzer started 2025/01/29 04:45:44 dialing manager at localhost:40187 syzkaller login: [ 68.806937] cgroup: Unknown subsys name 'net' [ 68.907941] cgroup: Unknown subsys name 'cpuset' [ 68.938163] cgroup: Unknown subsys name 'rlimit' [ 75.041241] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 87.216041] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/29 04:46:03 syscalls: 202 2025/01/29 04:46:03 code coverage: enabled 2025/01/29 04:46:03 comparison tracing: enabled 2025/01/29 04:46:03 extra coverage: enabled 2025/01/29 04:46:03 setuid sandbox: enabled 2025/01/29 04:46:03 namespace sandbox: enabled 2025/01/29 04:46:03 Android sandbox: enabled 2025/01/29 04:46:03 fault injection: enabled 2025/01/29 04:46:03 leak checking: enabled 2025/01/29 04:46:03 net packet injection: enabled 2025/01/29 04:46:03 net device setup: enabled 2025/01/29 04:46:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 04:46:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 04:46:03 USB emulation: enabled 2025/01/29 04:46:03 hci packet injection: enabled 2025/01/29 04:46:03 wifi device emulation: enabled 2025/01/29 04:46:03 802.15.4 emulation: enabled 2025/01/29 04:46:03 fetching corpus: 0, signal 0/0 (executing program) 2025/01/29 04:46:05 starting 8 fuzzer processes 04:46:05 executing program 0: clock_settime(0x6, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x554b, &(0x7f0000000040)={0x0, 0xc68f, 0x10, 0x0, 0x2ef}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="eabf483d59d799595ad80bf185aa444031f8c64fcbda0ba73040fde8a105b1dbe4d67a43a8961c3c8829db8ad4b8d636e43dfefad508f5cd77f36ac1ac4275f1bb0432eeb5be3aad9bc8a4c5554f89192bdd54f5842cef2708e346dfc370318e57d49e4da5ac0d46ec2f4d1c02c2fef33ddc6543e7f7f00ebfebc0ef4a58d950bb45c083c513499e026033d72705c7687886407b490a1b5ce9c594c21950627ca099276285ab7b5c9b6291ede8833b671965ddc161e201ef48b65d86c85147174052163fa3a4917f080f438f581378b1e3f732c7abc77095", 0xd8, 0x20008080}, 0x10001) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000280), 0x1) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x7fb0, &(0x7f00000002c0)={0x0, 0x3c28, 0x10, 0x2, 0x1fb, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000003c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x8, 0x26, 0x0, 0x4, 0x0, 0x1, {0x0, r5}}, 0x1) socketpair(0x1f, 0xa, 0x4, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x3fa, 0x1, 0x70bd2a, 0xfffffffe, {0x1, 0x0, 0x1, 0x1}, ["", "", "", "", "", ""]}, 0x20}}, 0x4004004) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r6, 0xdc7, 0x0, 0x7b, 0x3, 0x0, {0x0, r5}}, 0x5) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "56f0ebd1e51f0164f541648471906aad"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x28d}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x20}, @NL80211_ATTR_PMKID={0x14, 0x55, "8ea24928ce56fd140f8fbc74bac21747"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMK={0x14, 0xfe, "e5aa50409a790164422687046c615fc0"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfd34}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xd696}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x9c}}, 0x8040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x96899e9454ff0a00}, 0x8004) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r9, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4002080}, 0x4001) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x3, &(0x7f0000000980)) 04:46:05 executing program 1: r0 = geteuid() keyctl$get_persistent(0x16, r0, 0xfffffffffffffff9) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x3f, 0x8) geteuid() epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}], 0x2, 0xfff) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6000000000000, 0x242841) epoll_wait(r1, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd4, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc0}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x38, 0x0, 0x520, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x11}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x50) write$cgroup_type(r1, &(0x7f0000002080), 0x9) r4 = epoll_create(0xffffffc1) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f00000020c0)={r4, r1, 0x5c5}) epoll_pwait(r1, &(0x7f0000002100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x9, &(0x7f0000002180)={[0x80]}, 0x8) openat$cgroup_type(r1, &(0x7f00000021c0), 0x2, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1c}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2eb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x24000004) syz_genetlink_get_family_id$batadv(&(0x7f0000002300), r2) accept4$packet(r1, &(0x7f0000002340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002380)=0x14, 0x800) read$eventfd(r1, &(0x7f00000023c0), 0x8) 04:46:05 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0xfc}}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x14, 0x0, @random="fa1a9ddafccab7eeb38da856e81ce40a"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x98}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x83}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x3f}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x5}, {0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000009}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x30, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4e}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x401}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x8000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)={0x48, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000033c0)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000003}, 0x20044011) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000003440), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000003500)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x34, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0xc080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000003580), r2) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000003640)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x14, r6, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) accept$packet(0xffffffffffffffff, &(0x7f00000036c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003700)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000037c0)={&(0x7f0000003740)={0x54, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4be64db7}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000815}, 0x40855) recvmmsg(r1, &(0x7f0000008140)=[{{&(0x7f0000003840)=@alg, 0x80, &(0x7f00000039c0)=[{&(0x7f00000038c0)=""/242, 0xf2}], 0x1, &(0x7f0000003a00)=""/120, 0x78}, 0x8}, {{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000003a80)=""/84, 0x54}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/192, 0xc0}, {&(0x7f0000004bc0)=""/130, 0x82}, {&(0x7f0000004c80)=""/137, 0x89}, {&(0x7f0000004d40)=""/68, 0x44}, {&(0x7f0000004dc0)=""/213, 0xd5}, {&(0x7f0000004ec0)=""/185, 0xb9}, {&(0x7f0000004f80)=""/34, 0x22}, {&(0x7f0000004fc0)=""/10, 0xa}], 0xa}, 0x7}, {{&(0x7f00000050c0)=@un=@abs, 0x80, &(0x7f0000005440)=[{&(0x7f0000005140)=""/39, 0x27}, {&(0x7f0000005180)=""/209, 0xd1}, {&(0x7f0000005280)=""/242, 0xf2}, {&(0x7f0000005380)=""/155, 0x9b}], 0x4, &(0x7f0000005480)=""/246, 0xf6}, 0x80000000}, {{&(0x7f0000005580)=@nfc, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005600)=""/200, 0xc8}, {&(0x7f0000005700)=""/225, 0xe1}, {&(0x7f0000005800)=""/155, 0x9b}], 0x3, &(0x7f0000005900)=""/142, 0x8e}, 0x400}, {{&(0x7f00000059c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005a40)=""/105, 0x69}], 0x1, &(0x7f0000005b00)=""/8, 0x8}, 0x3}, {{&(0x7f0000005b40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005bc0)=""/196, 0xc4}, {&(0x7f0000005cc0)=""/62, 0x3e}, {&(0x7f0000005d00)=""/21, 0x15}, {&(0x7f0000005d40)=""/103, 0x67}, {&(0x7f0000005dc0)=""/216, 0xd8}, {&(0x7f0000005ec0)=""/33, 0x21}, {&(0x7f0000005f00)=""/55, 0x37}], 0x7, &(0x7f0000005fc0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000006fc0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000080c0)=[{&(0x7f0000007040)=""/4096, 0x1000}, {&(0x7f0000008040)=""/95, 0x5f}], 0x2, &(0x7f0000008100)=""/12, 0xc}, 0x1000}], 0x7, 0x20, &(0x7f0000008300)={0x77359400}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000008380), r5) sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f0000008440)={&(0x7f0000008340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000008400)={&(0x7f00000083c0)={0x38, r9, 0x0, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffe0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000085c0)={&(0x7f0000008480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000008580)={&(0x7f0000008540)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c0}, 0x44) 04:46:05 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xef, 0x20400) epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x50797fd1) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x0, 0xb0c, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffff7}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x400c4) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x74453a91}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r2 = syz_open_dev$vcsn(&(0x7f0000000380), 0x1ff, 0x8000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040054}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000002fc0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f80)={&(0x7f0000002e40)={0x110, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x3ba6}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x200}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x2}}]}, 0x110}, 0x1, 0x0, 0x0, 0x20044010}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000030c0)={&(0x7f0000003040)={0x64, r1, 0x410, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x61}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r0, &(0x7f0000003140)={r0, r5, 0x2}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000031c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000003340)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000003300)={&(0x7f0000003240)={0xb8, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x42}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "5d89bdb45390a89d9b1486afe842d318"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMKID={0x14, 0x55, "6b2c0e3e6b58a22a89834adaeb36eb22"}, @NL80211_ATTR_PMK={0x14, 0xfe, "9779182de25112710fdb6084d1194003"}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="f6ac19da71427e6921334df150f8a5be107ea2b53bf557"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bbe4aad7d5b7"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r8 = syz_open_dev$vcsn(&(0x7f0000003380), 0x7fffffff, 0x40c0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000003500)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000034c0)={&(0x7f0000003400)={0xb8, r6, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x59}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1821}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2bc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000003540), r3) [ 90.168641] audit: type=1400 audit(1738125965.789:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:46:05 executing program 4: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffeffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x25}, 0x40800) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008800}, 0xc0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfe}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) eventfd(0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xbd}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000880) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r6 = eventfd(0x2124) write$eventfd(r6, &(0x7f0000000840)=0xca9d, 0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xc0, r2, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2b}, @void, @val={0xc, 0x99, {0x1, 0x6b}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7adaafcc2e675a232497d8100e2909f2e40c0b14c40ba833"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r5, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 04:46:05 executing program 5: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_FRAME_MATCH={0x39, 0x5b, "5e4df1785d0edcca954ed98353227fd6852bf11556d76244bf322131489c7a3d1aff02b22225272b2a4782146b9a340383d3292e2b"}, @NL80211_ATTR_FRAME_MATCH={0x3e, 0x5b, "f652dcf47a8ec959ddd013b7c8ea123fafd5a4392704cd65afc80b40648574e45f7caf11c19d5c7a048fd746debce0010948d5260d67fcfd57c2"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x8000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x40011) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7096}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9a2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x481}, 0x810) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x69}}}}, [@NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x6f19, 0x0, 0x26f, 0xff, 0xffffffff, 0x81, 0x3, 0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x484}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x45f}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x4800) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r2, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x20048804) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) socketpair(0xc, 0x80000, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r3) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r6, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r7, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000000) r8 = syz_open_dev$vcsn(&(0x7f0000000ac0), 0x7e, 0x800) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x118, 0x0, 0x1, 0x4be, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8080}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x840) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 04:46:05 executing program 6: keyctl$unlink(0x9, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="8fc2e5870c03096c23d2e9ec10d8fdac760481a425b2cf8741ec045959e5552361844c2d59f09685b077da5962235223e1e6da89e5244457218b48ad9d7c621fd196dd0d7f3cff373fa7c2a1951cc4815bdd2f6993e1947805e984de772daec76b01ace5ef665ab7bc5b1aa8f4e4e5d6086924f327303ab8b4afadcd64c771f33fae7b34dc889182f59757683afe3260727bed89821ed5008dc26a2d0e9af400b5", 0xa1, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="b3bddc52cfafb8a50f0a9b50c5c8d8cc566ed926c13f34d85e235e0161385471af31b623aeca7bcd4a9d8ad17df30568", 0x30, r0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$reject(0x13, r0, 0xfffffffffffff801, 0x0, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "3e00579fc0fbf629f874df238ef770dbab9b752c0b01cbc17249af6c612dca3dbb19b167fc653dba9ea89ab9e53d328bed22f4b0892b1b946f8ab072fa9cc72d", 0x14}, 0x48, r0) keyctl$negate(0xd, r0, 0x7, r2) rt_sigsuspend(&(0x7f0000000400)={[0xfffffffffffffff8]}, 0x8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xac, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0xff75}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff}, {0x8, 0xb, 0xa222623}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x71}, {0x6}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x7}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4880) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r3) r4 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "b87960010674f793ddd454e0765112046c10b608e3647d9dd350f2f09c8b75ece6514c545392d0bac25cf140330d3df2eea6156ef522efa45b3f49c24fad49ca", 0x22}, 0x48, r3) keyctl$dh_compute(0x17, &(0x7f0000000740)={r2, r4, r2}, &(0x7f0000000780)=""/224, 0xe0, &(0x7f0000000900)={&(0x7f0000000880)={'crc32c-intel\x00'}, &(0x7f00000008c0)="eca8ce24667b", 0x6}) add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @desc3}, &(0x7f00000009c0)={0x0, "5cc705a277c576418310e4b826d6eb57d4643607adbc35cd331572ebd70148d425b9a82c57b7e66bc8801c87d4cd41c113cccd32c46c9389cd4ad1fb32480c85", 0x18}, 0x48, r0) recvmmsg(0xffffffffffffffff, &(0x7f0000002980)=[{{&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000ac0)=""/203, 0xcb}, {&(0x7f0000000bc0)=""/50, 0x32}, {&(0x7f0000000c00)=""/38, 0x26}, {&(0x7f0000000c40)=""/244, 0xf4}, {&(0x7f0000000d40)=""/86, 0x56}, {&(0x7f0000000dc0)=""/60, 0x3c}], 0x6, &(0x7f0000000e80)=""/188, 0xbc}}, {{&(0x7f0000000f40)=@generic, 0x80, &(0x7f0000001100)=[{&(0x7f0000000fc0)=""/30, 0x1e}, {&(0x7f0000001000)=""/50, 0x32}, {&(0x7f0000001040)=""/67, 0x43}, {&(0x7f00000010c0)=""/60, 0x3c}], 0x4, &(0x7f0000001140)=""/144, 0x90}, 0x7}, {{&(0x7f0000001200)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001280)=""/229, 0xe5}, {&(0x7f0000001380)=""/141, 0x8d}, {&(0x7f0000001440)=""/147, 0x93}, {&(0x7f0000001500)=""/189, 0xbd}, {&(0x7f00000015c0)=""/28, 0x1c}], 0x5, &(0x7f0000001680)=""/86, 0x56}, 0x8}, {{&(0x7f0000001700)=@vsock, 0x80, &(0x7f0000002900)=[{&(0x7f0000001780)=""/98, 0x62}, {&(0x7f0000001800)=""/204, 0xcc}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x3, &(0x7f0000002940)=""/24, 0x18}, 0x63}], 0x4, 0x10000, &(0x7f0000002a80)={0x0, 0x3938700}) r5 = add_key$keyring(&(0x7f0000002ac0), &(0x7f0000002b00)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000002b40)='trusted\x00', &(0x7f0000002b80)='^\x00') keyctl$negate(0xd, r2, 0x81, r5) 04:46:05 executing program 7: recvmmsg(0xffffffffffffffff, &(0x7f0000004fc0)=[{{&(0x7f0000000040)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/53, 0x35}], 0x1, &(0x7f0000000140)=""/199, 0xc7}, 0x8001}, {{&(0x7f0000000240)=@ethernet={0x0, @random}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/223, 0xdf}, {&(0x7f0000001400)=""/25, 0x19}, {&(0x7f0000001440)=""/194, 0xc2}, {&(0x7f0000001540)=""/82, 0x52}], 0x6, &(0x7f0000001640)=""/188, 0xbc}, 0x200}, {{&(0x7f0000001700)=@un=@abs, 0x80, &(0x7f0000002a00)=[{&(0x7f0000001780)=""/147, 0x93}, {&(0x7f0000001840)=""/132, 0x84}, {&(0x7f0000001900)=""/158, 0x9e}, {&(0x7f00000019c0)=""/31, 0x1f}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x5, &(0x7f0000002a80)=""/32, 0x20}, 0x8}, {{&(0x7f0000002ac0)=@caif=@util, 0x80, &(0x7f0000004e40)=[{&(0x7f0000002b40)=""/152, 0x98}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/204, 0xcc}, {&(0x7f0000003d00)=""/17, 0x11}, {&(0x7f0000003d40)=""/37, 0x25}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/174, 0xae}], 0x7}}, {{&(0x7f0000004ec0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000004f40), 0x0, &(0x7f0000004f80)=""/22, 0x16}, 0x3f}], 0x5, 0x100, &(0x7f0000005100)={0x0, 0x3938700}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000005240)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x1002210}, 0xc, &(0x7f0000005200)={&(0x7f00000051c0)={0x38, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x94) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000052c0), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000005400)={&(0x7f0000005280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000053c0)={&(0x7f0000005300)={0xb0, r3, 0x20, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40c4) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000005540)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005500)={&(0x7f0000005480)={0x54, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4810}, 0xc0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000055c0), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f00000056c0)={&(0x7f0000005580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005680)={&(0x7f0000005600)={0x70, r5, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1d}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40054}, 0x40000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005740), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000005840)={&(0x7f0000005700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005800)={&(0x7f0000005780)={0x48, r6, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x20}, @void, @val={0xc, 0x99, {0x717, 0x7c}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'gre0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xbdfdb199097ed528}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000009700)=[{{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f0000005880)=""/23, 0x17}], 0x1, &(0x7f0000005900)=""/241, 0xf1}, 0x1}, {{&(0x7f0000005a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000005a80)}, {&(0x7f0000005ac0)=""/83, 0x53}, {&(0x7f0000005b40)=""/100, 0x64}, {&(0x7f0000005bc0)=""/248, 0xf8}, {&(0x7f0000005cc0)=""/118, 0x76}, {&(0x7f0000005d40)=""/198, 0xc6}], 0x6, &(0x7f0000005ec0)=""/65, 0x41}, 0x80000001}, {{&(0x7f0000005f40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000008400)=[{&(0x7f0000005fc0)=""/43, 0x2b}, {&(0x7f0000006000)=""/171, 0xab}, {&(0x7f00000060c0)=""/151, 0x97}, {&(0x7f0000006180)=""/93, 0x5d}, {&(0x7f0000006200)=""/182, 0xb6}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/17, 0x11}, {&(0x7f0000007300)=""/221, 0xdd}, {&(0x7f0000007400)=""/4096, 0x1000}], 0x9, &(0x7f00000084c0)=""/213, 0xd5}, 0x7a}, {{&(0x7f00000085c0)=@ax25={{0x3, @bcast}, [@bcast, @null, @remote, @bcast, @rose, @remote, @null, @default]}, 0x80, &(0x7f0000009640)=[{&(0x7f0000008640)=""/4096, 0x1000}], 0x1, &(0x7f0000009680)=""/102, 0x66}, 0x81}], 0x4, 0x1, &(0x7f0000009800)={0x0, 0x3938700}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009880), r4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r8, &(0x7f0000009940)={&(0x7f0000009840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000009900)={&(0x7f00000098c0)={0x3c, r9, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000099c0), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000009a80)={&(0x7f0000009980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009a40)={&(0x7f0000009a00)={0x40, r10, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20014045}, 0x20000080) syz_genetlink_get_family_id$batadv(&(0x7f0000009ac0), r7) [ 91.612152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.619122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.624862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.634877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.638623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.643679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.692374] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.697113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.700209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.703831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.710170] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.714931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.718228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.725245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.726826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.731179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.733164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.744369] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.746111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.751843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.774619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.787308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.787777] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.789167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.792187] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.795243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.797899] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.800127] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.805232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.809945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.810105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.818144] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.818182] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.821377] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.827657] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.829025] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.832125] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.833367] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.836197] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.842990] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.853832] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.856593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.864791] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.870673] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.889832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.925077] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.931533] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.942929] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.694610] Bluetooth: hci0: command tx timeout [ 93.821590] Bluetooth: hci1: command tx timeout [ 93.885604] Bluetooth: hci2: command tx timeout [ 93.949648] Bluetooth: hci5: command tx timeout [ 93.950498] Bluetooth: hci4: command tx timeout [ 93.950853] Bluetooth: hci7: command tx timeout [ 94.013631] Bluetooth: hci3: command tx timeout [ 94.013695] Bluetooth: hci6: command tx timeout [ 95.742538] Bluetooth: hci0: command tx timeout [ 95.869844] Bluetooth: hci1: command tx timeout [ 95.934607] Bluetooth: hci2: command tx timeout [ 95.997886] Bluetooth: hci7: command tx timeout [ 95.997947] Bluetooth: hci5: command tx timeout [ 95.999013] Bluetooth: hci4: command tx timeout [ 96.061612] Bluetooth: hci3: command tx timeout [ 96.062725] Bluetooth: hci6: command tx timeout [ 97.792549] Bluetooth: hci0: command tx timeout [ 97.917556] Bluetooth: hci1: command tx timeout [ 97.981657] Bluetooth: hci2: command tx timeout [ 98.046142] Bluetooth: hci5: command tx timeout [ 98.047160] Bluetooth: hci7: command tx timeout [ 98.047179] Bluetooth: hci4: command tx timeout [ 98.109678] Bluetooth: hci3: command tx timeout [ 98.110622] Bluetooth: hci6: command tx timeout [ 99.837557] Bluetooth: hci0: command tx timeout [ 99.966501] Bluetooth: hci1: command tx timeout [ 100.030515] Bluetooth: hci2: command tx timeout [ 100.093601] Bluetooth: hci7: command tx timeout [ 100.094182] Bluetooth: hci4: command tx timeout [ 100.094221] Bluetooth: hci5: command tx timeout [ 100.158936] Bluetooth: hci6: command tx timeout [ 100.159404] Bluetooth: hci3: command tx timeout [ 153.677129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.678739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.680555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.695427] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.701859] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.703600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.808021] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.809277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.813665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.820388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.822267] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.826720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.879602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.882702] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.883997] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.888173] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.896521] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.898653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.964075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.981299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.987301] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.996101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.997937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.001378] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.004727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.013601] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.018632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.025744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.032829] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.059779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.064801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.076611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.078777] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.081072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.082591] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.098213] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.104916] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.107170] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.111031] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.112844] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.116852] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.118214] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.303829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.317882] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.318903] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.331224] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.340177] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.341347] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.774530] Bluetooth: hci0: command tx timeout [ 155.903454] Bluetooth: hci1: command tx timeout [ 155.965504] Bluetooth: hci2: command tx timeout [ 156.093531] Bluetooth: hci3: command tx timeout [ 156.157646] Bluetooth: hci4: command tx timeout [ 156.221566] Bluetooth: hci5: command tx timeout [ 156.285640] Bluetooth: hci6: command tx timeout [ 156.349547] Bluetooth: hci7: command tx timeout [ 157.821587] Bluetooth: hci0: command tx timeout [ 157.949607] Bluetooth: hci1: command tx timeout [ 158.013502] Bluetooth: hci2: command tx timeout [ 158.141630] Bluetooth: hci3: command tx timeout [ 158.206465] Bluetooth: hci4: command tx timeout [ 158.269741] Bluetooth: hci5: command tx timeout [ 158.333498] Bluetooth: hci6: command tx timeout [ 158.397705] Bluetooth: hci7: command tx timeout [ 159.869489] Bluetooth: hci0: command tx timeout [ 160.000808] Bluetooth: hci1: command tx timeout [ 160.061507] Bluetooth: hci2: command tx timeout [ 160.189564] Bluetooth: hci3: command tx timeout [ 160.253590] Bluetooth: hci4: command tx timeout [ 160.317584] Bluetooth: hci5: command tx timeout [ 160.381650] Bluetooth: hci6: command tx timeout [ 160.445568] Bluetooth: hci7: command tx timeout [ 161.917558] Bluetooth: hci0: command tx timeout [ 162.045631] Bluetooth: hci1: command tx timeout [ 162.109628] Bluetooth: hci2: command tx timeout [ 162.237603] Bluetooth: hci3: command tx timeout [ 162.302227] Bluetooth: hci4: command tx timeout [ 162.366443] Bluetooth: hci5: command tx timeout [ 162.429504] Bluetooth: hci6: command tx timeout [ 162.493503] Bluetooth: hci7: command tx timeout [ 215.756350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.759030] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.761028] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.765802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.768941] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.770940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.894077] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.902032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.905328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.914979] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.920059] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.930831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.023325] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.028679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.034088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.044334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.047047] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.054485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.108083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.126958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.129279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.134868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.137709] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.140351] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.243940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.253823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.297916] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.304292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.316960] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.321697] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.323656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.335027] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.343648] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.347430] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.348896] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.360296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.377526] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.382567] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.384975] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.387177] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.406538] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.408817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.417015] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.422622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.424762] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.489497] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.508874] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.512730] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.853557] Bluetooth: hci0: command tx timeout [ 217.981481] Bluetooth: hci1: command tx timeout [ 218.109641] Bluetooth: hci2: command tx timeout [ 218.173494] Bluetooth: hci3: command tx timeout [ 218.493511] Bluetooth: hci4: command tx timeout [ 218.493618] Bluetooth: hci5: command tx timeout [ 218.494481] Bluetooth: hci6: command tx timeout [ 218.557522] Bluetooth: hci7: command tx timeout [ 219.901472] Bluetooth: hci0: command tx timeout [ 220.030426] Bluetooth: hci1: command tx timeout [ 220.157594] Bluetooth: hci2: command tx timeout [ 220.223518] Bluetooth: hci3: command tx timeout [ 220.541535] Bluetooth: hci5: command tx timeout [ 220.541563] Bluetooth: hci6: command tx timeout [ 220.541978] Bluetooth: hci4: command tx timeout [ 220.606340] Bluetooth: hci7: command tx timeout [ 221.949489] Bluetooth: hci0: command tx timeout [ 222.077470] Bluetooth: hci1: command tx timeout [ 222.205508] Bluetooth: hci2: command tx timeout [ 222.270511] Bluetooth: hci3: command tx timeout [ 222.589488] Bluetooth: hci4: command tx timeout [ 222.590939] Bluetooth: hci6: command tx timeout [ 222.591367] Bluetooth: hci5: command tx timeout [ 222.654921] Bluetooth: hci7: command tx timeout [ 223.997482] Bluetooth: hci0: command tx timeout [ 224.125468] Bluetooth: hci1: command tx timeout [ 224.253779] Bluetooth: hci2: command tx timeout [ 224.317471] Bluetooth: hci3: command tx timeout [ 224.637500] Bluetooth: hci5: command tx timeout [ 224.637577] Bluetooth: hci6: command tx timeout [ 224.637983] Bluetooth: hci4: command tx timeout [ 224.701648] Bluetooth: hci7: command tx timeout [ 278.852739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.856272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.858184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.862206] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.868953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.870134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.048771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.056811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.061657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.073163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.077720] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.079684] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.180224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.185562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.190036] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.197897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.205755] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.207239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.331187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.334045] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.337491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.347106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.349273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.353250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.435043] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.443007] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.444465] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.451763] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.455004] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.456503] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.472179] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.481927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.484239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.513028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.524635] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.531133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.537096] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.557700] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.563654] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.586602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.600560] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.601593] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.661289] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.665660] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.667627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.728740] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.756829] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.760626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.895503] Bluetooth: hci0: command tx timeout [ 281.149464] Bluetooth: hci1: command tx timeout [ 281.277519] Bluetooth: hci2: command tx timeout [ 281.405497] Bluetooth: hci3: command tx timeout [ 281.533563] Bluetooth: hci5: command tx timeout [ 281.661501] Bluetooth: hci4: command tx timeout [ 281.725578] Bluetooth: hci6: command tx timeout [ 281.854979] Bluetooth: hci7: command tx timeout [ 282.943408] Bluetooth: hci0: command tx timeout [ 283.197774] Bluetooth: hci1: command tx timeout [ 283.325437] Bluetooth: hci2: command tx timeout [ 283.453836] Bluetooth: hci3: command tx timeout [ 283.581477] Bluetooth: hci5: command tx timeout [ 283.709507] Bluetooth: hci4: command tx timeout [ 283.774397] Bluetooth: hci6: command tx timeout [ 283.901485] Bluetooth: hci7: command tx timeout [ 284.989434] Bluetooth: hci0: command tx timeout [ 285.245453] Bluetooth: hci1: command tx timeout [ 285.373474] Bluetooth: hci2: command tx timeout [ 285.502141] Bluetooth: hci3: command tx timeout [ 285.629449] Bluetooth: hci5: command tx timeout [ 285.757543] Bluetooth: hci4: command tx timeout [ 285.821462] Bluetooth: hci6: command tx timeout [ 285.949619] Bluetooth: hci7: command tx timeout [ 287.038412] Bluetooth: hci0: command tx timeout [ 287.293535] Bluetooth: hci1: command tx timeout [ 287.421470] Bluetooth: hci2: command tx timeout [ 287.550470] Bluetooth: hci3: command tx timeout [ 287.677455] Bluetooth: hci5: command tx timeout [ 287.805589] Bluetooth: hci4: command tx timeout [ 287.869651] Bluetooth: hci6: command tx timeout [ 287.997486] Bluetooth: hci7: command tx timeout [ 341.329312] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.343640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.346257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.353798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.356805] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.358873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.410746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.414178] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.417506] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.435753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.439827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.443476] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.642289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.650615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.654628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.659685] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.670217] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.672954] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.675098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.675969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.692788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.698994] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.711308] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.723851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.729227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.731132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.732556] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.748908] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.756914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.759688] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.763767] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.780598] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.781954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.795810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.801117] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.813585] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.819913] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.828887] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.839569] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.848715] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.850464] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.881888] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.890221] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.891921] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.893003] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.900689] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.902234] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.906540] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.421433] Bluetooth: hci0: command tx timeout [ 343.485578] Bluetooth: hci1: command tx timeout [ 343.742489] Bluetooth: hci3: command tx timeout [ 343.805436] Bluetooth: hci2: command tx timeout [ 343.869557] Bluetooth: hci4: command tx timeout [ 343.933507] Bluetooth: hci5: command tx timeout [ 343.934545] Bluetooth: hci7: command tx timeout [ 343.998508] Bluetooth: hci6: command tx timeout [ 345.469523] Bluetooth: hci0: command tx timeout [ 345.533500] Bluetooth: hci1: command tx timeout [ 345.789525] Bluetooth: hci3: command tx timeout [ 345.854482] Bluetooth: hci2: command tx timeout [ 345.917439] Bluetooth: hci4: command tx timeout [ 345.981528] Bluetooth: hci7: command tx timeout [ 345.981973] Bluetooth: hci5: command tx timeout [ 346.048424] Bluetooth: hci6: command tx timeout [ 347.517513] Bluetooth: hci0: command tx timeout [ 347.581616] Bluetooth: hci1: command tx timeout [ 347.838638] Bluetooth: hci3: command tx timeout [ 347.901413] Bluetooth: hci2: command tx timeout [ 347.965458] Bluetooth: hci4: command tx timeout [ 348.029444] Bluetooth: hci7: command tx timeout [ 348.029856] Bluetooth: hci5: command tx timeout [ 348.094436] Bluetooth: hci6: command tx timeout [ 349.566881] Bluetooth: hci0: command tx timeout [ 349.630908] Bluetooth: hci1: command tx timeout [ 349.886440] Bluetooth: hci3: command tx timeout [ 349.950377] Bluetooth: hci2: command tx timeout [ 350.013480] Bluetooth: hci4: command tx timeout [ 350.077474] Bluetooth: hci5: command tx timeout [ 350.078034] Bluetooth: hci7: command tx timeout [ 350.143484] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 04:51:12 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff81a6100c RDX=ffff888025953780 RSI=ffffffff81a615d7 RDI=0000000000000001 RBP=ffffea00001bbac0 RSP=ffff8880292878f8 R8 =0000000000000000 R9 =fffff94000037758 R10=0000000000000000 R11=00000000000007e0 R12=ffff88800e029538 R13=ffffea00001bbac0 R14=000000000000000a R15=00000000000001fd RIP=ffffffff81a615e0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f10e8d7f090 CR3=0000000027cc2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88806cf09a28 RCX=0000000000000001 RDX=1ffff1100d9e1350 RSI=ffff88803347f9e0 RDI=ffffffff81a4c7b1 RBP=ffff88806cf09a80 RSP=ffff88806cf09a10 R8 =0000000000000001 R9 =ffff88806cf09a68 R10=000000000003ab8c R11=00000000000229d4 R12=ffff88806cf09af0 R13=0000000000000000 R14=ffff888030c10000 R15=ffff888009ed3a00 RIP=ffffffff81348c1b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f34f8e00000 CR3=000000002fe8c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000