Warning: Permanently added '[localhost]:10798' (ECDSA) to the list of known hosts.
2025/05/24 17:48:53 fuzzer started
2025/05/24 17:48:53 dialing manager at localhost:46087
syzkaller login: [   94.705868] cgroup: Unknown subsys name 'net'
[   94.878038] cgroup: Unknown subsys name 'cpuset'
[   94.918102] cgroup: Unknown subsys name 'rlimit'
2025/05/24 17:49:22 syscalls: 204
2025/05/24 17:49:22 code coverage: enabled
2025/05/24 17:49:22 comparison tracing: enabled
2025/05/24 17:49:22 extra coverage: enabled
2025/05/24 17:49:22 setuid sandbox: enabled
2025/05/24 17:49:22 namespace sandbox: enabled
2025/05/24 17:49:22 Android sandbox: enabled
2025/05/24 17:49:22 fault injection: enabled
2025/05/24 17:49:22 leak checking: enabled
2025/05/24 17:49:22 net packet injection: enabled
2025/05/24 17:49:22 net device setup: enabled
2025/05/24 17:49:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/24 17:49:22 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/24 17:49:22 USB emulation: enabled
2025/05/24 17:49:22 hci packet injection: enabled
2025/05/24 17:49:22 wifi device emulation: enabled
2025/05/24 17:49:22 802.15.4 emulation: enabled
2025/05/24 17:49:22 fetching corpus: 0, signal 0/0 (executing program)
2025/05/24 17:49:24 starting 8 fuzzer processes
17:49:24 executing program 0:
r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x810, 0xffffffffffffffff, 0x8000000)
r2 = syz_io_uring_setup(0x722c, &(0x7f0000000000)={0x0, 0x8525, 0x20, 0x3, 0xf5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x10000000)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r2, 0x3, 0x73, 0x5, 0x20, 0x0, {0x1, r4}}, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r6, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000280))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000400)=""/141, 0x8d}], 0x3)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000540)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x24004080)
r9 = io_uring_setup(0x3ed7, &(0x7f0000000640)={0x0, 0x3be2, 0x10, 0x0, 0x1b3, 0x0, r2})
io_uring_register$IORING_UNREGISTER_EVENTFD(r9, 0x5, 0x0, 0x0)
socket(0x39, 0x3, 0x9)
getdents64(0xffffffffffffff9c, &(0x7f00000006c0)=""/4096, 0x1000)

17:49:24 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x60000009})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x200)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x14, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x48000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2c4, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x12}}}}, [@NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f253d5512883dfe71c081606b8adb4c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8f741a4564249978"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ce06eff0a88ac704426d6e4691c26bce"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "43a74c49aea43862"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d161060662b6b3134d4f5c1c6f3983cc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="687208472a71eb5639a0679b79824592d114e9662de34870e63cf3bd6798d03f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="cd058ec98e19c2f6e4d3b10f5b061a9f39c90614e4b8f98d5843360681fc8034"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="85d143da1f5d76816ec3c8eee14d32486711b8222cf4be81"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7f20f8a5694a8f8e144e365e5bf6c3edc2bc049267b2e1042e3023910c6a9afb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8bc2c087dc782973dead076da88c35e7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "75942c9fc2d357b7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a5b20caa9659176a"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6eda79acf22a377e70a6b572c3bc082e674a4f22f805c551934ef55530726a6a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ed5eecbdf0a17e0ca9145628f1494376"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d955ef0830b6d35f184ff9d873745603"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="eb2d804e04832f05e238bd8340d3b9ea53b0806e53a69165d5c5f5ec923adc1b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="69aa1face6cb683de986e7505245be10"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="68100d40d50a8025d43f238fa1df2e1e9dbc0f031823e6bc712843b5c9ecd997"}]}, @NL80211_ATTR_REKEY_DATA={0xc4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2e700bf6d88b9528cdf2c4f8e50fafc002e0d61ea7594036"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b54aa761bef63954"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffa}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cc7f43671aeee7a4"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="afb5fad76f8d770a8e034f050e77b59cfc45b7fc1b5e301cd5ae286278322214"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0bc144fc75a301c436b84546c3359af2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "30ef99aaf2e3f0ae"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e0adffe2540ae5e5b9f6860ddf5c43f2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="06922a321d7ddd2e54fc7c33954df94b86596c24440fac56e149c0e4efd9b0d5"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20000800}, 0x80)
r4 = syz_io_uring_complete(0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000740)={'wg2\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xd4, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x80000}, @WGDEVICE_A_PEERS={0xa0, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a5a13f9112874739e7aa965bd26fd1687e96ccf1c5e870d576ca9eb48ae1c94"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}, 0x5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4c811}, 0x884)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r4)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r6, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x8000)
r7 = syz_io_uring_complete(0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r4)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, r8, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, r9, 0x7091f246b4bfc721, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004815)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x8000)

17:49:24 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x51}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x80000001, 0x55}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0xa0)
r2 = socket(0x26, 0x7, 0x9)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x230, r0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x37fb}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f2d0940afd455794065fce7d2da6f391"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7a0abe57d1f99ed7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c2c6e88ca758d865e66c55c4049fe744"}]}, @NL80211_ATTR_REKEY_DATA={0xd4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f9d53930ef4dd21b901d330ad0fbee5f06652e7d1910f7c3e6ba1f81dcde6c6c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a5976a417acc7fc98aa046a4b27e11ccbbc63f01f0bfbc38"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ee56cd8edf2032c0015ae72865a971e664c7ae458065187fae5f0f52e5efd5ba"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6a1b3622f3f1c17e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cb544e5002709bf0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2b8d2941e89c4da6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x506e}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0bf6cd04525f8a2be4e8dccbf675002837dfb61bb524ef7e6b6422934efd14fc"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="38c7b4e1fba397fcae45516657ece9ab"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d41ce68706441aba"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bba979d7d8fbe7f8"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "435012c036229913"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f798867e1b9f97b2215ea250c2de7a8fe54beb76b44cf797"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="49a0318c86911a21cbf8dee99b8a827e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a025a854815bbe6c0989e4ba93029dbd"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5fa1adfd8a1ad314"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3553f922be5bd2bb2cea48eb1866bdbfa134bcd6b394bc023b7d6aaa8559f21a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fd41d865f666a7213a8ec3a2f0c12dc84efc2f00f31990a4e83bfbc56edc7a2e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fa7030cc1d5ecf92bc1bd8acede0baf28faedbae5b619076"}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x80}, 0x8090)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x63}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048000}, 0x404800d)
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r0, 0x400, 0x70bd2b, 0x9, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000000)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x635f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000900)={'batadv0\x00', <r3=>0x0})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040085}, 0x810)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a40), 0x5a1201, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008004)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x20000045)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/locks\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x6e}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2322d7ed160886684a66dd887b"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000}, 0x20044000)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x48080)
r6 = socket(0x15, 0x4, 0x9)
sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x58, r0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x4)
sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x38, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40044000}, 0x4000010)

[  125.643188] audit: type=1400 audit(1748108964.971:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
17:49:24 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x48000)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/4096)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/meminfo\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000001080)={0x50000001})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x6c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4050}, 0x44)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001200)={<r2=>0x0, @initdev, @dev}, &(0x7f0000001240)=0xc)
clock_gettime(0x0, &(0x7f0000001580)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000001280), 0x6e, &(0x7f0000001400)=[{&(0x7f0000001300)=""/44, 0x2c}, {&(0x7f0000001340)=""/177, 0xb1}], 0x2, &(0x7f0000001440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}], 0x1, 0x0, &(0x7f00000015c0)={r3, r4+10000000})
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001640), r1)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001dc0)={&(0x7f0000001600), 0xc, &(0x7f0000001d80)={&(0x7f0000001680)={0x6f4, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x3ac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb2, 0x4, "cbd553fdc56f1b595dfd6101eb22851cd551b0753883780ccd82ff6de761f7e34ee656764244a891f435fb14d5c98305ac77607e8fb4440bd0dad339361d73b331edb7f3c417c76aa608119b28a4277faef694ec80b6a738e02f32e63348dabdc88b24907a8cfb72943a33838debd22b981a3888c140b6901ca4197fda709582d54fb7e2ee6999d523489efd2c649cf51ee6cb600878378a397ded4370c525000728ca689c46ba835ae16f54fae7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xfa^\xf9#,\x86\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/proc/meminfo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_team\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ')+#]+*:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/event#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa0b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x71, 0x4, "e80f076a5dfe8f2a819afd03ad869f160310a99c509e21ea3da3cabdefdad0bd6b506a6a8967532dcb455c16ce6bc3447c57f3ec55488717a6813b1afeab4f07e5ed7775384836f5c4d028f1403b6cfca9b2b84a0afd2547d474704b9114d09f48789f1d1464d875631a48f1f8"}, @ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',-/`\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!]!/@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!@-\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '][\'}c&\\][\x8d#)*&\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8c2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/event#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaaf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb7, 0x4, "851ecb700739021ac3c496ffbd13be49dc69e3fff332ab53f259e3072837ee5e2acf83b50af8d5175612b61401fa286c5d637e601249b859903888c1d0df142f56c1d3315c883566d010fefd27f6f5b7511485c99be9239169eef9b78f18494105b7e0373b956dc809e3042f8cab0118ffa93cbe66f5c11a0bacf0700ad18d0dc9d13966ea80c6df85a3779215ce1f9f22d029e5210d080988bcd85f0fc30fb85f14d888bac04a1ad7211cd58cb1b4c9c66ca5"}]}, @ETHTOOL_A_FEATURES_WANTED={0x334, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "6fe206479f3ab656c5af0c6be2bc7e4c998add294ed26f7a8bbde3cbea48ce37b97529efd1f9ef49172d9cf901012672ab66db48a566d7f7cb37030caa636c5eee0aea871717f2524a5d36c53a2b3aefaa06cb2b9f068a05e55121a9b20d75f55bf43fa03a0bf0336e18509b0b9b52323513a5fe43f4019b0da6b79f8b5631155f01e2c17dc7510b914708f92b6e2b55deefbf17517e27259d18a4af882f2eeb031229dfae"}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/proc/meminfo\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/input/event#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_team\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xad, 0x5, "05af4969f52414b1e7bf6dfce05f0e0b07003232dd717a79fd6733457f206517c713c388dc3eac6047687bae62b45bd35e228f31e32c356cdd92c31cfc90876d83993e4737452e50af1cb25ea081b956265c98dd1d144eb258eae0eda21455f78a4ef69e8a301c53a9908301b8eca2ae7bc82b620d8cc75bf3c92b3b8cd59c7fb96408a7262da89723401541194be567e1ae00afa160dde8d11ad39d9d01a6ebfdda2a4046c5cfaa08"}, @ETHTOOL_A_BITSET_MASK={0xbb, 0x5, "2a3f61dd3aaf4543ec35e07c0cdfa2cc9e89856580c6d5bc0be64879504f074169a2b97e60f5f8398af2309440fa8b605233c15c94ed31ac30c5ad80cd38ddffc2c9c18cb6f61d32a15db4e7ffe9befc91d3a3efb4b3f3f72830ace0979f715002710e924e9882cf16c9e669a9bb4655cf2612ad22a3e8420887c7396cab69a12bf64db63b1af20cccff6a39a59384c264dde7de6890f3ef45243da69ba5b650d1885abb5b1dc4f7e21a758858670b18c029efa617ebc7"}, @ETHTOOL_A_BITSET_VALUE={0x83, 0x4, "27586b1ba697bad95a087db5dd86b9d2d328672e6b5f9416aadbc480d11cb8fc357c1eb4ac565d09a94da053feff89bba8f042b09ee4bbab130ebfcbf2bca1ebb49053f04934a0656b81b47ab0d38fad92135e9c7b600a8f48243b9fe17481b618d0d53ab6da20701c1907f21f8c47bc4450a24e0f59580ab6270d988bd5f2"}]}]}, 0x6f4}, 0x1, 0x0, 0x0, 0x20008001}, 0x4008000)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x80, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xb3b25f784486d642}, 0x20046)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r9)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r12, 0xf872de1bfa43685e, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000020c0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x1c, r12, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002240)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r11, &(0x7f0000002480)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x393fec2e4db89039}, 0xc, &(0x7f0000002440)={&(0x7f0000002280)={0x1c0, r14, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x58}, @NL80211_ATTR_IE={0xad, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x1, 0x0, {0x7ff, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x10001, 0x16}}, @measure_req={0x26, 0x7b, {0x1, 0x5a, 0x2, "e7fbeda50991e5876fadf8c6f7320b915f0fcfc5eed2c90211429003d7ca45c62610ca0c1a9b68997fd403c3484d62d2df1a7db81b0f4f0f44310a02f08466b1546a0f882b54794a5aabed549dad563af190ca47ecf282d194386f717d6e84ea6536494e181787e7d45f16c6921c00219372e0b8b3b6ca67"}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE={0xeb, 0x2a, [@peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x2, @void, @void}}, @peer_mgmt={0x75, 0x16, {0x0, 0x3, @void, @val=0x2b, @val="c7b429c972004d3b82a3e585d696a275"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7f, 0x38, 0x7b}}, @preq={0x82, 0x57, @ext={{0x0, 0x0, 0x1}, 0x9, 0x7, 0x2, @broadcast, 0x81, @broadcast, 0x10000, 0x401, 0x5, [{{0x1, 0x0, 0x1}, @device_b, 0xfffffffd}, {{0x1, 0x0, 0x1}, @device_b, 0x8001}, {{0x0, 0x0, 0x1}, @device_b, 0x3}, {{}, @device_b, 0xffffffff}, {{0x0, 0x0, 0x1}, @device_b, 0x2}]}}, @ibss={0x6, 0x2, 0xffd8}, @challenge={0x10, 0x1, 0x53}, @chsw_timing={0x68, 0x4, {0xd7, 0x4}}, @perr={0x84, 0x42, {0x3f, 0x4, [@ext={{}, @device_b, 0x8, @broadcast, 0x36}, @not_ext={{}, @device_a, 0x8, "", 0x42}, @ext={{}, @device_a, 0x1, @broadcast, 0x33}, @not_ext={{}, @device_a, 0x40, "", 0x3e}]}}, @rann={0x7e, 0x15, {{0x1, 0x13}, 0xab, 0x5, @broadcast, 0xfffff000, 0x20, 0xfffff800}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0xc0000}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000027c0)=[{&(0x7f00000024c0)=""/130, 0x82}, {&(0x7f0000002580)=""/6, 0x6}, {&(0x7f00000025c0)=""/234, 0xea}, {&(0x7f00000026c0)=""/214, 0xd6}], 0x4)

17:49:25 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r0, 0x80, &(0x7f0000000000)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x1}, 0xb5)
renameat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00')
faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)={0x200, 0x0, 0x10}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = epoll_create(0x0)
epoll_pwait(r2, &(0x7f0000000240)=[{}, {}], 0x2, 0xf943, &(0x7f0000000280)={[0x2]}, 0x8)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000400)=""/11, 0xb}, {&(0x7f0000000440)=""/41, 0x29}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000580)=""/131, 0x83}, {&(0x7f0000000640)=""/95, 0x5f}, {&(0x7f00000006c0)=""/88, 0x58}, {&(0x7f0000000740)=""/7, 0x7}, {&(0x7f0000000780)=""/128, 0x80}, {&(0x7f0000000800)=""/214, 0xd6}, {&(0x7f0000000900)=""/254, 0xfe}], 0x7, &(0x7f0000000a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000bc0)=""/39, 0x27}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/136, 0x88}], 0x3, &(0x7f0000001d00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r8=>0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}}], 0x3, 0x42, &(0x7f0000001ec0)={0x0, 0x989680})
mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x10, r5, 0x10000000)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000001f00)={0x20000000})
epoll_create(0xcd9a)
r9 = getpgrp(r8)
r10 = epoll_create(0x10000)
kcmp$KCMP_EPOLL_TFD(r9, r3, 0x7, r7, &(0x7f0000001f40)={r10, r7, 0x20})
clock_gettime(0x0, &(0x7f0000002000)={<r11=>0x0, <r12=>0x0})
epoll_pwait2(0xffffffffffffffff, &(0x7f0000001f80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, &(0x7f0000002040)={r11, r12+10000000}, &(0x7f0000002080)={[0x5]}, 0x8)
clock_gettime(0x0, &(0x7f0000002100)={<r13=>0x0, <r14=>0x0})
epoll_pwait2(r4, &(0x7f00000020c0)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000002140)={r13, r14+60000000}, &(0x7f0000002180)={[0x1ff]}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000002240)={'ip6_vti0\x00', &(0x7f00000021c0)={'syztnl1\x00', 0x0, 0x29, 0x71, 0xfc, 0x6, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x7, 0x80, 0x8, 0xfffffffe}})

17:49:25 executing program 5:
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, 0x0, 0xd02, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xb0, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xbd70}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7b6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x81}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x60000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0xcc}}, 0x20000040)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7007, 0x2b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x2048050)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80088}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x7c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x20004000)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000480)=""/99)
r3 = syz_io_uring_complete(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="1a88818e0011"}, @NL80211_ATTR_PMKID={0x14, 0x55, "104d7072bb1bbb57a754b5105c4f0de0"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x8805}, 0x20008004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}}, 0x8004800)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r7, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r6)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r8, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x23}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4031}, 0x8000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000d40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x218, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x3f}}}}, [@NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6d7dfff9c27eaf9ca947d412428cfa45"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8001}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="448ec36102afa4e9e9c8045a95cc53ac642651c6305ade965685c818bde66df9"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4b4d9cdf3c187f0c980cf325856108a3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9289b22f1d7abe19"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6d204b7015d8c4531a2a8fb5f478ee2b2f001861840641be"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "381f4a8d493fcf42"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dc1105fe0b6e48ca"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="74c73b41735b4e328f9be4f1e45c1b70"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="42f125f832711ddab351a2941fca65f4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="438a02ea44857b3794bfb4300b3457eb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3f}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1591f4237ed462f6"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0c7f5d51db60ab0ac21d82ceced8dd1f242369f199def603830fc30d0ce67168"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3191e8fefe07589d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fb5bee6e80892675f1ac57a00acb42db"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e6aa7f80556e84a82023128dbd0ea2086d6623446ad13e9adbf239752e0a4a48"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="45a247a292a54743a9019b87c3446efb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ef969101870aeb07fd806dfe0f14830c3de7b8b37e09d8226f9017820b8a5915"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dec4e9ce83551c54"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7590355de624e5b0476b210f0ed69815309abf5688184155"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1a06cd533feac9b6cb7a2b472d6b191d"}]}]}, 0x218}}, 0x44080)

17:49:25 executing program 6:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008}, 0x8040)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x420}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040014}, 0x40000)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb8, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x77, 0xbe, "59d520fc26f2b181bb832a6a7bd588b361a3bf7de04a87b94f07cd33c2466df03dcc67f86911ba39865e0dbf643f83b68d209dd65ad342c45c2a32350970ebd15a71d972a8dac29923714bb7f8a17feacc732af2771893e1951c9f0fb8ac583827cc91d95b66896ddc34a2a46412ee14959e81"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4cb}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x81}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x68}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x14c1}, 0x20000080)
r4 = socket(0x1a, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, r6, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x61}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000090}, 0x4)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004050}, 0x40080)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000b80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000210}, 0xc, &(0x7f0000000b40)={&(0x7f00000008c0)={0x270, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x178, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffff00}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x608}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6393}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc98}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8c50}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5133b25c}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffc01}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x270}, 0x1, 0x0, 0x0, 0x4008880}, 0x4000004)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000bc0), 0x108004, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/mdstat\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0)
sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000d80)={&(0x7f0000000c40), 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x7c, r8, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5d9}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xa75}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x200}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8ef}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x7}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x5}]}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}]}, 0x7c}, 0x1, 0x0, 0x0, 0x50}, 0x4004010)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x4c, r8, 0xf21, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x60}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x60}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xe4}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)

17:49:25 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x10c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, '/usr/lib/telepathy/mission-control-5\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:agp_device_t:s0\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000804}, 0x80)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x174, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2c}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x6, 0x7e, @random="341e"}, @NL80211_ATTR_KEYS={0x134, 0x51, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "55369ca9d38f101957595e89d8"}, @NL80211_KEY_SEQ={0x8, 0x4, "3a024423"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7999d2b2dd"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b85909a20bccecb98bd2b0f49f"}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8811ebea88"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "95a9e741de5235005f30bc400b"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e8087ecf3eeee602b65c014cdf"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "06794a9515309278889357e27c"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3cebfaab69"}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0x12, 0x4, "950fe89c9b1466156be7d50a5044"}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x11, 0x24, [{0x3, 0x1}, {0x18, 0x1}, {0x24, 0x1}, {0x6c}, {0x48, 0x1}, {0x9}, {0xb}, {0x9, 0x1}, {0x48, 0x1}, {0x4}, {0x12}, {0x48, 0x1}, {0x1}]}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x174}, 0x1, 0x0, 0x0, 0x4040880}, 0x200040c0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x401, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x53, 0x7c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4001)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x10b002, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000005c0)={0x0, @remote, @empty}, &(0x7f0000000600)=0xc)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sshd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8844}, 0x20000002)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000880)={0xffff}, 0x4)
recvmmsg$unix(r2, &(0x7f0000002d80)=[{{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, &(0x7f0000001980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a00)=""/247, 0xf7}, {&(0x7f0000001b00)=""/77, 0x4d}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/87, 0x57}, {&(0x7f0000001cc0)=""/177, 0xb1}, {&(0x7f0000001d80)=""/73, 0x49}, {&(0x7f0000001e00)=""/47, 0x2f}, {&(0x7f0000001e40)=""/95, 0x5f}], 0x8, &(0x7f0000001f40)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000002040)=""/150, 0x96}, {&(0x7f0000002100)=""/176, 0xb0}], 0x2}}, {{&(0x7f0000002200), 0x6e, &(0x7f0000002580)=[{&(0x7f0000002280)=""/221, 0xdd}, {&(0x7f0000002380)=""/127, 0x7f}, {&(0x7f0000002400)=""/109, 0x6d}, {&(0x7f0000002480)=""/251, 0xfb}], 0x4, &(0x7f00000025c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x158}}, {{&(0x7f0000002740), 0x6e, &(0x7f0000002c00)=[{&(0x7f00000027c0)=""/115, 0x73}, {&(0x7f0000002840)=""/73, 0x49}, {&(0x7f00000028c0)=""/83, 0x53}, {&(0x7f0000002940)=""/209, 0xd1}, {&(0x7f0000002a40)=""/230, 0xe6}, {&(0x7f0000002b40)=""/152, 0x98}], 0x6, &(0x7f0000002c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}], 0x5, 0x100, &(0x7f0000002ec0))
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000002fc0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0xc080)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003040), r3)
sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000003140)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003100)={&(0x7f0000003080)={0x5c, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x8080)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000031c0), r1)
sendmsg$NL80211_CMD_ADD_TX_TS(r9, &(0x7f0000003280)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x28, r10, 0x300, 0x70bd27, 0x3, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x65}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003300), r5)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000003440)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003400)={&(0x7f0000003340)={0xa8, r11, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x17}, @void, @val={0xc, 0x99, {0x5, 0x61}}}}, [@NL80211_ATTR_VENDOR_DATA={0x75, 0xc5, "46ce3be904929756670b5147afda8673026845e156811bffeba1014de483c3670b1043b697aa7b4a205ec24c9f7b5c2ebde874d310adcfc677fc7a05121ab229df0cbc1ef27102a6a26b4dcae7f3e217922d5723ddea7c2e06a701011c8d1d5498136a66f88f8ad7a47a42311d70446c0b"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x200008c0}, 0x81)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000003680)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003640)={&(0x7f00000034c0)={0x180, r8, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5a}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6f}, @NL80211_ATTR_REG_RULES={0x154, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xae81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x84}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x546e}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x200}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x29}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xae1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2d6}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xeea}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffff801}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe68b}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4}, 0x800)

[  126.966602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.975384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.979106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.990272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.998228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  127.409353] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.424074] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.429175] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.438343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.446681] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.462041] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  127.502636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  127.504652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.508192] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  127.513298] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  127.516101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.536475] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.538899] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  127.549187] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  127.557097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.559240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  127.563270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  127.564033] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  127.567296] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  127.577269] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  127.589234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  127.601335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  127.618749] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  127.627354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  127.632141] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  127.636034] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  127.642839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  127.646408] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  127.651085] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.661603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  127.674440] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  127.709877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.715378] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.737963] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  127.744479] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  129.049087] Bluetooth: hci0: command tx timeout
[  129.496755] Bluetooth: hci1: command tx timeout
[  129.623810] Bluetooth: hci2: command tx timeout
[  129.687598] Bluetooth: hci7: command tx timeout
[  129.688164] Bluetooth: hci3: command tx timeout
[  129.751583] Bluetooth: hci6: command tx timeout
[  129.752121] Bluetooth: hci4: command tx timeout
[  129.879562] Bluetooth: hci5: command tx timeout
[  131.097933] Bluetooth: hci0: command tx timeout
[  131.544551] Bluetooth: hci1: command tx timeout
[  131.672808] Bluetooth: hci2: command tx timeout
[  131.737916] Bluetooth: hci3: command tx timeout
[  131.738369] Bluetooth: hci7: command tx timeout
[  131.800723] Bluetooth: hci4: command tx timeout
[  131.801167] Bluetooth: hci6: command tx timeout
[  131.928756] Bluetooth: hci5: command tx timeout
[  133.144731] Bluetooth: hci0: command tx timeout
[  133.591567] Bluetooth: hci1: command tx timeout
[  133.720574] Bluetooth: hci2: command tx timeout
[  133.784727] Bluetooth: hci7: command tx timeout
[  133.785174] Bluetooth: hci3: command tx timeout
[  133.849695] Bluetooth: hci4: command tx timeout
[  133.850149] Bluetooth: hci6: command tx timeout
[  133.976593] Bluetooth: hci5: command tx timeout
[  135.191772] Bluetooth: hci0: command tx timeout
[  135.639755] Bluetooth: hci1: command tx timeout
[  135.767715] Bluetooth: hci2: command tx timeout
[  135.831740] Bluetooth: hci7: command tx timeout
[  135.832189] Bluetooth: hci3: command tx timeout
[  135.896782] Bluetooth: hci6: command tx timeout
[  135.897220] Bluetooth: hci4: command tx timeout
[  136.024702] Bluetooth: hci5: command tx timeout
[  189.741278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.748683] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.751005] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.754970] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.756821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.757879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.763852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.765306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.768617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.774393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.850349] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  189.856856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.877067] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  189.890753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  189.893328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  189.900025] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.902872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  189.908235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  189.932799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  189.942020] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.944090] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.951646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  189.952320] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  189.956720] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.962357] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.968166] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  189.968369] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.998906] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  190.003700] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.005315] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  190.011586] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  190.014791] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  190.019856] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  190.023667] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  190.045589] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  190.050044] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  190.071099] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  190.080401] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  190.089848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  190.111961] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  191.831687] Bluetooth: hci0: command tx timeout
[  191.832914] Bluetooth: hci1: command tx timeout
[  192.087769] Bluetooth: hci5: command tx timeout
[  192.088745] Bluetooth: hci2: command tx timeout
[  192.151633] Bluetooth: hci4: command tx timeout
[  192.152221] Bluetooth: hci3: command tx timeout
[  192.217604] Bluetooth: hci7: command tx timeout
[  192.218175] Bluetooth: hci6: command tx timeout
[  193.880730] Bluetooth: hci0: command tx timeout
[  193.881218] Bluetooth: hci1: command tx timeout
[  194.135645] Bluetooth: hci5: command tx timeout
[  194.136128] Bluetooth: hci2: command tx timeout
[  194.201154] Bluetooth: hci4: command tx timeout
[  194.202630] Bluetooth: hci3: command tx timeout
[  194.263580] Bluetooth: hci6: command tx timeout
[  194.264051] Bluetooth: hci7: command tx timeout
[  195.928546] Bluetooth: hci1: command tx timeout
[  195.929055] Bluetooth: hci0: command tx timeout
[  196.184856] Bluetooth: hci5: command tx timeout
[  196.185361] Bluetooth: hci2: command tx timeout
[  196.247634] Bluetooth: hci3: command tx timeout
[  196.248122] Bluetooth: hci4: command tx timeout
[  196.311881] Bluetooth: hci7: command tx timeout
[  196.312362] Bluetooth: hci6: command tx timeout
[  197.976643] Bluetooth: hci0: command tx timeout
[  197.977115] Bluetooth: hci1: command tx timeout
[  198.234547] Bluetooth: hci2: command tx timeout
[  198.235044] Bluetooth: hci5: command tx timeout
[  198.296741] Bluetooth: hci4: command tx timeout
[  198.297190] Bluetooth: hci3: command tx timeout
[  198.360575] Bluetooth: hci6: command tx timeout
[  198.361028] Bluetooth: hci7: command tx timeout
[  251.894441] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  251.898584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  251.903346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  251.918597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  251.928231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  252.138689] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  252.142282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  252.146476] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  252.155656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  252.162376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  252.208928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  252.213578] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  252.215885] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  252.225030] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  252.231608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  252.344675] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  252.394694] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  252.399323] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  252.408079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  252.415868] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  252.420386] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  252.424440] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  252.425019] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  252.429349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  252.432379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  252.433073] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  252.445208] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  252.451904] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  252.458281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  252.474753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  252.489306] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  252.492925] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  252.502797] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  252.511149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  252.514225] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  252.522856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  252.533260] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  252.552120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  252.554092] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  252.649142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.975635] Bluetooth: hci0: command tx timeout
[  254.231607] Bluetooth: hci1: command tx timeout
[  254.296821] Bluetooth: hci2: command tx timeout
[  254.743827] Bluetooth: hci4: command tx timeout
[  254.743948] Bluetooth: hci3: command tx timeout
[  254.744901] Bluetooth: hci6: command tx timeout
[  254.936748] Bluetooth: hci7: command tx timeout
[  254.999726] Bluetooth: hci5: command tx timeout
[  256.025582] Bluetooth: hci0: command tx timeout
[  256.279603] Bluetooth: hci1: command tx timeout
[  256.344554] Bluetooth: hci2: command tx timeout
[  256.792550] Bluetooth: hci3: command tx timeout
[  256.793128] Bluetooth: hci6: command tx timeout
[  256.793178] Bluetooth: hci4: command tx timeout
[  256.983600] Bluetooth: hci7: command tx timeout
[  257.047560] Bluetooth: hci5: command tx timeout
[  258.071570] Bluetooth: hci0: command tx timeout
[  258.327679] Bluetooth: hci1: command tx timeout
[  258.391817] Bluetooth: hci2: command tx timeout
[  258.839567] Bluetooth: hci4: command tx timeout
[  258.839769] Bluetooth: hci3: command tx timeout
[  258.840093] Bluetooth: hci6: command tx timeout
[  259.031640] Bluetooth: hci7: command tx timeout
[  259.097529] Bluetooth: hci5: command tx timeout
[  260.120859] Bluetooth: hci0: command tx timeout
[  260.377777] Bluetooth: hci1: command tx timeout
[  260.440648] Bluetooth: hci2: command tx timeout
[  260.887857] Bluetooth: hci3: command tx timeout
[  260.887940] Bluetooth: hci4: command tx timeout
[  260.888715] Bluetooth: hci6: command tx timeout
[  261.080638] Bluetooth: hci7: command tx timeout
[  261.144597] Bluetooth: hci5: command tx timeout
[  314.089144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  314.096136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  314.099599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  314.112815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  314.122156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  314.180291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  314.187279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  314.189841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  314.204035] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  314.212778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  314.218465] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.233585] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.236869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.256093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.259855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  314.374452] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  314.398085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  314.403823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  314.446221] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  314.471358] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  314.473881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  314.482246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  314.509854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.524872] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  314.530257] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  314.535025] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  314.537561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.543618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.549222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  314.557152] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  314.560067] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  314.565789] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  314.590399] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  314.606136] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  314.644161] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  314.660379] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  314.664445] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  314.667217] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  314.679959] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  314.684569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  316.184470] Bluetooth: hci0: command tx timeout
[  316.313098] Bluetooth: hci2: command tx timeout
[  316.314151] Bluetooth: hci1: command tx timeout
[  316.631626] Bluetooth: hci3: command tx timeout
[  316.632401] Bluetooth: hci5: command tx timeout
[  316.759631] Bluetooth: hci6: command tx timeout
[  316.760283] Bluetooth: hci7: command tx timeout
[  316.823924] Bluetooth: hci4: command tx timeout
[  318.231582] Bluetooth: hci0: command tx timeout
[  318.359889] Bluetooth: hci1: command tx timeout
[  318.360361] Bluetooth: hci2: command tx timeout
[  318.679646] Bluetooth: hci5: command tx timeout
[  318.680124] Bluetooth: hci3: command tx timeout
[  318.807762] Bluetooth: hci7: command tx timeout
[  318.808224] Bluetooth: hci6: command tx timeout
[  318.871810] Bluetooth: hci4: command tx timeout
[  320.280518] Bluetooth: hci0: command tx timeout
[  320.408516] Bluetooth: hci2: command tx timeout
[  320.408976] Bluetooth: hci1: command tx timeout
[  320.727676] Bluetooth: hci5: command tx timeout
[  320.728157] Bluetooth: hci3: command tx timeout
[  320.855821] Bluetooth: hci6: command tx timeout
[  320.856296] Bluetooth: hci7: command tx timeout
[  320.919886] Bluetooth: hci4: command tx timeout
[  322.327563] Bluetooth: hci0: command tx timeout
[  322.455592] Bluetooth: hci1: command tx timeout
[  322.456067] Bluetooth: hci2: command tx timeout
[  322.775795] Bluetooth: hci3: command tx timeout
[  322.776286] Bluetooth: hci5: command tx timeout
[  322.904657] Bluetooth: hci7: command tx timeout
[  322.905107] Bluetooth: hci6: command tx timeout
[  322.967552] Bluetooth: hci4: command tx timeout
[  376.301670] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.308221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.312250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.321985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.326893] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.549458] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.553303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.556438] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.566291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.575172] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  376.631093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  376.640447] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  376.645361] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  376.648271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  376.653987] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  376.660727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  376.666108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  376.669103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  376.702013] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  376.709730] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  376.719470] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  376.720884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  376.728367] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  376.755185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  376.764901] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  376.783105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  376.787645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  376.793096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  376.798845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  376.810827] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  376.818347] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  376.824985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  376.826230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  376.840156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  376.857907] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  376.857974] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  376.867072] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  376.874360] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  376.906323] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  376.923264] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  378.391815] Bluetooth: hci0: command tx timeout
[  378.647750] Bluetooth: hci1: command tx timeout
[  378.776038] Bluetooth: hci3: command tx timeout
[  378.840665] Bluetooth: hci2: command tx timeout
[  378.904417] Bluetooth: hci5: command tx timeout
[  378.968895] Bluetooth: hci4: command tx timeout
[  379.031977] Bluetooth: hci7: command tx timeout
[  379.032011] Bluetooth: hci6: command tx timeout
[  380.441547] Bluetooth: hci0: command tx timeout
[  380.695598] Bluetooth: hci1: command tx timeout
[  380.824874] Bluetooth: hci3: command tx timeout
[  380.888567] Bluetooth: hci2: command tx timeout
[  380.952565] Bluetooth: hci5: command tx timeout
[  381.015584] Bluetooth: hci4: command tx timeout
[  381.079924] Bluetooth: hci6: command tx timeout
[  381.080570] Bluetooth: hci7: command tx timeout
[  382.487717] Bluetooth: hci0: command tx timeout
[  382.745512] Bluetooth: hci1: command tx timeout
[  382.873878] Bluetooth: hci3: command tx timeout
[  382.935582] Bluetooth: hci2: command tx timeout
[  382.999723] Bluetooth: hci5: command tx timeout
[  383.063587] Bluetooth: hci4: command tx timeout
[  383.127912] Bluetooth: hci7: command tx timeout
[  383.128353] Bluetooth: hci6: command tx timeout
[  384.536674] Bluetooth: hci0: command tx timeout
[  384.791764] Bluetooth: hci1: command tx timeout
[  384.919726] Bluetooth: hci3: command tx timeout
[  384.983597] Bluetooth: hci2: command tx timeout
[  385.049507] Bluetooth: hci5: command tx timeout
[  385.111597] Bluetooth: hci4: command tx timeout
[  385.175585] Bluetooth: hci6: command tx timeout
[  385.175609] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
17:54:32  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff888029abfb50 RCX=ffff888029abf9dc RDX=1ffff11005357f80
RSI=ffffffff81000130 RDI=ffff888029abfb5c RBP=ffff888029abfc00 RSP=ffff888029abfa68
R8 =0000000000000001 R9 =ffff888029abfac8 R10=000000000003b67d R11=00000000000c4cb1
R12=ffff888029abfb50 R13=0000000000000000 R14=ffff888015c59b80 R15=0000000000000000
RIP=ffffffff81604307 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555910af400 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe0100000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffc5464fe8 CR3=00000000362b9000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ff00000000000000ff0000000000
XMM02=ff000000000000ff0000000000000000 XMM03=ff0000000000000000ff000000000000
XMM04=0000000000ff00000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000005 RBX=ffff88803690c180 RCX=0000000000000000 RDX=0000000000000001
RSI=ffff88806cf36f18 RDI=ffff88803690c180 RBP=ffff88806cf36f18 RSP=ffff88806cf08d00
R8 =0000000000000000 R9 =fffffbfff0c83eca R10=ffffffff8641f657 R11=ffff88806cf37058
R12=ffff88803690b700 R13=ffff88803690c158 R14=ffff88803690c180 R15=0000000000000046
RIP=ffffffff84b3c7c2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe3300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8b99d861f0 CR3=0000000033d23000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000