Warning: Permanently added '[localhost]:62805' (ECDSA) to the list of known hosts.
2025/05/31 15:18:03 fuzzer started
2025/05/31 15:18:04 dialing manager at localhost:34361
syzkaller login: [   94.183137] cgroup: Unknown subsys name 'net'
[   94.307722] cgroup: Unknown subsys name 'cpuset'
[   94.353062] cgroup: Unknown subsys name 'rlimit'
2025/05/31 15:18:19 syscalls: 204
2025/05/31 15:18:19 code coverage: enabled
2025/05/31 15:18:19 comparison tracing: enabled
2025/05/31 15:18:19 extra coverage: enabled
2025/05/31 15:18:19 setuid sandbox: enabled
2025/05/31 15:18:19 namespace sandbox: enabled
2025/05/31 15:18:19 Android sandbox: enabled
2025/05/31 15:18:19 fault injection: enabled
2025/05/31 15:18:19 leak checking: enabled
2025/05/31 15:18:19 net packet injection: enabled
2025/05/31 15:18:19 net device setup: enabled
2025/05/31 15:18:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/31 15:18:19 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/31 15:18:19 USB emulation: enabled
2025/05/31 15:18:19 hci packet injection: enabled
2025/05/31 15:18:19 wifi device emulation: enabled
2025/05/31 15:18:19 802.15.4 emulation: enabled
2025/05/31 15:18:19 fetching corpus: 0, signal 0/0 (executing program)
2025/05/31 15:18:21 starting 8 fuzzer processes
15:18:21 executing program 1:
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x2000, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x90000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfd6, 0x49}}}}, [@NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4eb}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="12990c1cd3c6f2d923ccd563ed86b0de93ea2a574ec23d7426b614fbf0012849"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="89cfb309b2cc82a49d1f4cbee0a2f2c0435e17a3c06a223495b93ec2e74e2b6b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10010000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x50}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x90b9332fd95d9d8b)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x80, 0x3b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x41}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb9}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa8}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r5 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000006c0)=0x14)
bind$packet(r5, &(0x7f0000000700)={0x11, 0x17, 0x0, 0x1, 0x2, 0x6, @local}, 0x14)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
recvfrom$packet(r6, &(0x7f0000000780)=""/153, 0x99, 0x40000000, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0xa800, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x10b80, 0x0)
sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r1, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3e}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}]}, 0x44}}, 0x801)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000a00)=""/222, &(0x7f0000000b00)=0xde)
getsockname$packet(r0, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14)

15:18:21 executing program 0:
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x8004)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x74}}}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xcf4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff0001}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x81e, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x13}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r2=>0x0})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0xb79e6eeb162e2c1c, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r4, 0xa00, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000)
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x2404c084)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000001}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc55}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000040)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000f00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x3c4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3}}}}, [@NL80211_ATTR_TID_CONFIG={0x348, 0x11d, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x120, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x3, 0x9, 0x3, 0x60, 0x4, 0x5, 0x9, 0xb, 0x60, 0x12, 0x3, 0x30, 0x48, 0x1, 0x12, 0x48, 0x38, 0xb, 0x18, 0x5, 0x68, 0x48, 0x16, 0x4, 0x9, 0x4, 0x48, 0x12, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x81c, 0x545e, 0xfffd, 0x40, 0x3f, 0x7, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x2, 0x3ff, 0x7fff, 0x5, 0x1, 0xffff, 0x2]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x8}, {0x7, 0x7}, {0x1, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x9}, {0x5, 0x1}, {0x6, 0x9}, {0x5, 0x1}, {0x3, 0x9}, {0x1, 0x3}, {0x5, 0x8}, {0x0, 0x9}, {0x5, 0x7}, {0x7}, {0x3, 0x8}, {0x4, 0x9}, {0x4, 0x4}, {0x2, 0xa}, {0x5, 0xa}, {0x7, 0x5}, {0x2, 0x6}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x1}, {0x6, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x3}, {0x1, 0x4}, {0x7, 0x3}, {0x2, 0xa}, {0x1, 0x4}, {0x4, 0xa}, {0x6, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x3, 0x7}, {0x5, 0x6}, {0x6, 0x6}, {0x0, 0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x9}, {0x5, 0x8}, {0x4, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x9}, {0x4, 0x4}, {0x3, 0x4}, {0x1, 0x9}, {0x6, 0x1}, {0x6, 0x4}, {0x0, 0x7}, {0x5, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x7}, {0x2, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x3}, {0x0, 0x6}, {0x2, 0x6}, {0x7}, {0x4, 0x8}, {0x7}, {0x0, 0x4}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x4}, {0x7, 0x3}, {0x0, 0x8}, {0x1, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x5, 0x3}, {0x6, 0x3}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0xa}, {0x2, 0x7}, {0x6, 0x9}, {0x5, 0xa}, {0x1}, {0x1, 0x6}, {0x7, 0x3}, {}, {0x7, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x7, 0x4}, {0x7, 0x9}, {0x0, 0xa}, {0x2, 0x5}, {0x6, 0x4}, {0x0, 0x2}, {0x4}, {0x3, 0x3}, {0x4, 0x8}, {0x3, 0x4}, {0x0, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x6}, {0x4, 0x4}, {0x0, 0x8}, {0x7, 0x8}, {0x1, 0x3}, {}, {0x1}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x9}, {0x4, 0xa}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xf2f22aece79a2a6f, 0x1b, 0x5, 0x5, 0x16, 0x2, 0x12, 0x12, 0x41, 0x66, 0x0, 0x30, 0x3, 0x9, 0xb, 0x3, 0x5, 0xc, 0x9, 0x1b, 0x6, 0x4, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x30}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x1cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x140, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x2}, {0x3, 0xa}, {0x3, 0x6}, {0x2, 0x1}, {0x4, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x3, 0xa}, {0x5, 0xa}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x9}, {0x2, 0x3}, {0x0, 0x6}, {0x3, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x18, 0x60, 0x30, 0xa, 0x3, 0x18, 0x12, 0x24, 0x1e, 0x24, 0x40, 0xc, 0x36, 0xb, 0x1b, 0x4]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x0, 0x3}, {0x6, 0xa}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0xa}, {0x2, 0xa}, {0x0, 0x8}, {0x3}, {0x2, 0x2}, {0x6, 0x7}, {0x4, 0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0xa}, {}, {0x3, 0x1}, {0x6}, {0x2, 0x1}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x2}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0xa}, {0x2, 0x6}, {0x3, 0x2}, {0x2, 0x4}, {0x3, 0x3}, {0x1, 0xa}, {0x6, 0x4}, {0x1, 0x8}, {0x7, 0x6}, {0x7, 0x2}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0x3}, {0x5, 0x9}, {0x6, 0x9}, {0x4, 0x7}, {0x6, 0x6}, {0x5, 0x9}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x6030, 0x7ff, 0x6, 0xff, 0x4, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1b, 0x6c, 0x1b, 0x5, 0x14, 0xb, 0xb, 0xc, 0xb, 0x6c, 0x24, 0x12, 0x9, 0x1, 0x3e, 0x0, 0x8e12d64f3e2510be, 0x3, 0x60, 0x16, 0x0, 0x2, 0x1]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x3, 0x30, 0x2, 0x5, 0x36, 0x1b, 0x60, 0x48, 0x30, 0xb, 0x36, 0x30, 0xb, 0x60, 0x30, 0x16, 0xc, 0x12, 0x16, 0x60, 0x36, 0x36, 0x2, 0x9, 0x5, 0x6, 0x3, 0x1, 0xc, 0x4, 0x24]}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x7}, {0x3, 0xa}, {0x6}, {0x3, 0x3}, {0x4, 0x8}, {0x0, 0x1}, {0x3, 0x6}, {0x2, 0x3}, {0x6, 0x6}, {0x4, 0x6}, {0x3}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0x8}, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x4}, {0x7, 0x4}, {0x0, 0x8}, {0x2, 0x6}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x3, 0x5, 0xeb3e, 0x40, 0x6, 0xbc]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x4}, {0x0, 0x8}, {0x2, 0x1}, {0x6, 0x7}, {0x7, 0xa}, {0x0, 0x6}, {0x6, 0x9}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x22d6, 0x8, 0x1, 0x0, 0x1, 0x8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x1b, 0x2, 0x1b, 0x14, 0x6, 0x3, 0x48, 0x10, 0x2, 0x1, 0x48, 0x9, 0x2, 0x12, 0x0, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x78, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2d, 0x7ff, 0x0, 0xd500, 0x1, 0xfff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x2, 0xf154, 0x9, 0x6, 0xc, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xfffb, 0x455c, 0x1000, 0x7fff, 0x200, 0xda4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x8}, {0x3, 0x4}, {0x2}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x3, 0x4}, {0x6, 0x9}, {0x0, 0x2}, {0x7, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8a}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffff8001}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x75}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x80}, 0x20000005)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f40), 0x105000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000fc0)={'batadv0\x00', <r6=>0x0})
getpeername$packet(r3, &(0x7f0000001000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001040)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000001880)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001100)={0x704, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1b}}}]}}, {{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe012}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffd13}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x704}, 0x1, 0x0, 0x0, 0xdeef19e47bfd65f8}, 0x4004)

15:18:21 executing program 2:
r0 = syz_io_uring_setup(0x7f51, &(0x7f0000000000)={0x0, 0xdd4f, 0x8, 0x2, 0x28d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
r1 = syz_io_uring_setup(0x1ed5, &(0x7f0000000100)={0x0, 0xd4ba, 0x20, 0x3, 0x2e6, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0)
r2 = io_uring_setup(0x157c, &(0x7f0000000240)={0x0, 0x3d13, 0x2, 0x1, 0x2b3, 0x0, r1})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000002c0)={0x1, 0x6}, 0x4)
mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1000000, 0x4010, r2, 0x10000000)
r3 = socket$packet(0x11, 0x1, 0x300)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r5, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x800, 0x7d}}}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000440)=0xffffffffffffffff)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x10000000)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000480))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_int(r6, 0x1, 0x13, &(0x7f0000000500)=0x9, 0x4)
ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4)
r7 = socket(0x5, 0xa, 0xe4f)
getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000000540), &(0x7f0000000580)=0xc)
r8 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x614700, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)

15:18:21 executing program 3:
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0x9, 0x4)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x75397eb2fc6a84d5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000051)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x800, 0x0)
r0 = mq_open(&(0x7f0000000180)='\x00', 0x2, 0x90, &(0x7f00000001c0)={0x1, 0x3, 0xfffffffffffffffe, 0x8})
mq_notify(r0, &(0x7f0000000200)={0x0, 0x38, 0x2d2c29b4cd22da5f})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x45}}}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0x7, 0x4, "7a75c2"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x48}}, 0x4000000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x5, &(0x7f00000003c0)=[{0x2, 0x9, 0x5, 0xac}, {0x400, 0xfc, 0x42, 0x9}, {0x3f, 0xce, 0x0, 0x7ff}, {0x0, 0xca, 0x18, 0xb0}, {0x400, 0xd, 0x4, 0xff}]})
ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x28000, 0x0)
mq_getsetattr(r2, &(0x7f0000000480)={0x35, 0x5, 0x5}, &(0x7f00000004c0))
socketpair(0x6, 0x800, 0x1f, &(0x7f0000000540)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r3)
ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000580))
r4 = pkey_alloc(0x0, 0x2)
pkey_free(r4)
setsockopt$sock_int(r2, 0x1, 0x13, &(0x7f00000005c0)=0x7, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xa4881, 0x0)
r5 = mq_open(&(0x7f0000000640)='/\x00', 0x2, 0xd, &(0x7f0000000680)={0x7, 0x4e33f0ef, 0xfffffffffffffffe, 0x3})
mq_notify(r5, &(0x7f0000000780)={0x0, 0x29, 0x2, @thr={&(0x7f00000006c0)="ed66326c160cd465977c7168754dfc231792e65cc41ff3da18a792430dc6150ca78707af82a844c9795cecaa8aae175452ab7dd444daad3ce7f43a95f4b6c583c89fc991772f22f9e6ae55e06f79154f305020a5b74ca1451bfa96d745a87364e47c7ebfef71", &(0x7f0000000740)="a4605829c776adcb35f108de78a69523d3efa3502942fa24fa69bfc9bab64f615be7bf1dfdc0d8"}})

[  111.295305] audit: type=1400 audit(1748704701.394:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:18:21 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0xa273, 0x1f, 0x81, 0x200}, {0x0, 0xff, 0x1, 0x7}, {0xb6d, 0x9, 0x20, 0x1000}, {0x7, 0x0, 0x81, 0x2}, {0x9, 0xff, 0x3f, 0x99}, {0xe01, 0xa2, 0x20}]}, 0x10)
getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r2=>0x0})
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', <r6=>r1, 0x29, 0x5, 0x9, 0x0, 0x4, @mcast2, @mcast1, 0x700, 0x700, 0xef14, 0xfffffff7}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000380)={0x66c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r1}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9a53}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb55a}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x858a}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r1}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x30d}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x30, 0x0, 0x0, 0x1}, {0x5, 0x1, 0x0, 0x5}, {0x6d, 0x0, 0x3, 0x4}, {0x2, 0xf7, 0x8c, 0x1ff}, {0x4, 0x9, 0x67, 0x1}, {0x41bf, 0x3e, 0x80, 0x9}, {0x7, 0xe0, 0x4, 0x7}, {0x6, 0x80, 0x0, 0x3}, {0x35, 0x9, 0x7, 0x30}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x66c}}, 0x20004805)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000ac0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a80), 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xe0, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000044}, 0x20004000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r10, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x70, r11, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x2b}}}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf1}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ab8efbcf9cad491fa395d46341415a4c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6e43824e138ba92dc7894241c851fa57d93baff0ccccb3c3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9f4f5bd05c35e47a"}]}]}, 0x70}}, 0x4008041)
connect$packet(r0, &(0x7f0000000e40)={0x11, 0xf6, r1, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14)
r12 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r12, 0x107, 0x9, &(0x7f0000000e80)=0x4, 0x4)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x64, r11, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x48485}, 0x1)

15:18:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8050)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x88400900}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r1, 0x60c, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e856baa0b9"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "39819f08fa"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r2 = socket(0x2b, 0x1, 0x7ff)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x60}, 0x40)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r1, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x27}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000814}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000580)={0x1, 'vlan1\x00', {}, 0x7})
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0), &(0x7f0000000600)=0x10)
r4 = syz_open_dev$vcsn(&(0x7f0000000640), 0x1ff, 0x8000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000800}, 0xe045)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r2)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r6, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffd}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa8, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x48, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x2, @val=0x3, @void, @val="90d45db8520e900850ec1ba61f7479fe"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @gcr_ga={0xbd, 0x6, @broadcast}, @ht={0x2d, 0x1a, {0x20, 0x2, 0x5, 0x0, {0x6, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x8, 0x3f}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0x8, 0x39, 0x7fff}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xa8}, 0x1, 0x0, 0x0, 0x240008c0}, 0x81)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x164, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7c}}}}, [@NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="104a902d6a44120c04908329c2213fbd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8cb7e1124f8e1d99"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7bf9a6b2}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bc295dd7a0a589cee3d93b02e0a063c3b9bc1a2fe53c6c69"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="bbb606126866f1de38c1a6afbf79fb25bd1c91320ac307b0fac767f902f55331"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="77c76d30e0052497678ae0abeff0f748"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb3b18d4598422e4605b44d568ef480d32fc1eb037d3a366"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4e6628333ffafd66c416058fa1ef072a114677b8e1013500"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "da53fe22909ca74d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="48fe6c91b70638cfa78434542fe9e89f728707c4dc03490d64626216ef82c787"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4cc8bbb7ceedccb9c6b88111c171d548fc5fbf57087161d4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffe}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6aa43f30bda7579083e404e370029453"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xecb}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000d00)={'wg0\x00'})

15:18:21 executing program 6:
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x1, 'caif0\x00', {}, 0x5})
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, 0x0, 0x4fd3c56e9b56650d, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x66, 0x45, "d890b431d1ec25634e3e36c44d1395c273a4428e78a65218b88dbf93473af3720b0286af781b26c051929b7a3acb2adc4a87fda54d130ec4e778b351007b4d9dcaf95f71bb77de0cc69a2b4a109caa924fcacf75e2c933d0159c779740f8179abb1f"}]}, 0x7c}}, 0x20000894)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xf001}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xe9}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x8004)
r3 = syz_open_dev$vcsn(&(0x7f0000000500), 0x0, 0x80441)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x124, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x40, 0x4c}}}}, [@NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="08d4b83fdaf837bf8b52dfb34d9e0c5c6f82afb59d34e9a48cd5427e4c7bb6fe"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8f07759de163a13549dcfc69c0cbe0f947e8b911b1212f1c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c914898dfc38ac782961ea7c0d7d74f6"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="48482fa8a56df099eac1ddc911b3f39f1b6e1ea8179b29a9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "938153ab5d76266d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0cb37a1df62482ec3ad81e08c3b82369be100691b5efe53f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "efb91abe8edaef0a"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ac4285358d38b0f33ec820cb310915d1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "543bc356cf9a0cfb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "273e35758c0bb07c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0258ce745e5eee0a"}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r3)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x95}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000)
sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r1, 0x21, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x7a3c5fcf63174275}, 0x4000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r4, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x5001}, 0x80)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000ac0), 0x82, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000b80)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x10)
r9 = socket(0x1e, 0x4, 0x6)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r9, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x14)

15:18:21 executing program 7:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x440001, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800)
r1 = accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4da}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000)
r3 = socket$packet(0x11, 0x3, 0x300)
accept4$packet(r3, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x800)
r5 = accept$packet(r1, 0x0, &(0x7f0000000380))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4b, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @dsss={0x3, 0x1, 0xaf}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random={0x6, 0x1a, "e4fb7c8f75b5f580102eb05fc877603dd4602db39ef9129ac3ab"}, @chsw_timing={0x68, 0x4, {0x2, 0x6e3d}}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x5, 0x0, {0x820b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffce17, 0x1}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0xc080)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r0)
sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x7a46a0ab12bff611}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r8, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4810)
r9 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x40102, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r8, 0x10, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40814)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r7)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r9, &(0x7f0000000b00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x1a4, r10, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7, 0x48}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x20}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x148, 0x2a, [@random={0x40, 0x16, "bd87f9805130a4a7dd5ed8881e156d473be393de5461"}, @supported_rates={0x1, 0x8, [{0x48}, {0x12, 0x1}, {0x6c, 0x1}, {0x1b}, {0x1b, 0x1}, {0x12, 0x1}, {0x1b}, {0xc, 0x1}]}, @perr={0x84, 0xdb, {0x0, 0xd, [@not_ext={{}, @device_a, 0x7, "", 0x17}, @ext={{}, @device_b, 0x10000, @device_a, 0x14}, @not_ext={{}, @device_b, 0xffff5960, "", 0x32}, @ext={{}, @device_a, 0x8000, @broadcast, 0x14}, @ext={{}, @broadcast, 0x4, @device_b, 0x11}, @ext={{}, @device_b, 0xd1, @device_a, 0x33}, @not_ext={{}, @broadcast, 0x6, "", 0x3d}, @not_ext={{}, @device_b, 0x5, "", 0x1}, @ext={{}, @device_b, 0x4, @broadcast, 0x3d}, @ext={{}, @device_a, 0x4, @device_a, 0x34}, @not_ext={{}, @device_a, 0xfffffffd, "", 0x5}, @ext={{}, @device_a, 0xffffffff, @device_a, 0xb}, @ext={{}, @device_b, 0x0, @device_a, 0x10}]}}, @tim={0x5, 0x43, {0xd9, 0x66, 0x4, "18544fe1e314aab56dec56c6f2ac443725f2732aa388ce7fbf0dd588d923e328a36e058c55d5cd45ba61b63050649f55ab1bc809d9f5c66e89696ddbedbe8eae"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x66}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x24040041}, 0x20000000)
getsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000b40), &(0x7f0000000b80)=0x4)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r9, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0xe00, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x28869469}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044040}, 0x44)
accept$packet(r5, 0x0, &(0x7f0000000d00))

[  112.702595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.706661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.711059] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.712432] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.713681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.717283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.719149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.725483] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.733048] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.737145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.783768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.789965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.792825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.800924] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.803090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.809179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.812729] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.815429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.817226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.820879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.823225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.826908] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.829243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.833184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.866354] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.869692] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  112.872915] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.899763] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.921711] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.928580] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.931636] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  112.935904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.942247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.955634] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  112.958260] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  112.964081] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  112.968094] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  112.972491] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.993542] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  113.026889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  114.770685] Bluetooth: hci1: command tx timeout
[  114.772122] Bluetooth: hci0: command tx timeout
[  114.897600] Bluetooth: hci2: command tx timeout
[  114.898731] Bluetooth: hci3: command tx timeout
[  114.961498] Bluetooth: hci4: command tx timeout
[  115.025892] Bluetooth: hci7: command tx timeout
[  115.027029] Bluetooth: hci5: command tx timeout
[  115.153506] Bluetooth: hci6: command tx timeout
[  116.818152] Bluetooth: hci0: command tx timeout
[  116.819457] Bluetooth: hci1: command tx timeout
[  116.947609] Bluetooth: hci3: command tx timeout
[  116.948450] Bluetooth: hci2: command tx timeout
[  117.009552] Bluetooth: hci4: command tx timeout
[  117.074086] Bluetooth: hci7: command tx timeout
[  117.075428] Bluetooth: hci5: command tx timeout
[  117.202955] Bluetooth: hci6: command tx timeout
[  118.865507] Bluetooth: hci0: command tx timeout
[  118.865990] Bluetooth: hci1: command tx timeout
[  118.993561] Bluetooth: hci2: command tx timeout
[  118.993990] Bluetooth: hci3: command tx timeout
[  119.058688] Bluetooth: hci4: command tx timeout
[  119.123594] Bluetooth: hci7: command tx timeout
[  119.124012] Bluetooth: hci5: command tx timeout
[  119.250531] Bluetooth: hci6: command tx timeout
[  120.916356] Bluetooth: hci1: command tx timeout
[  120.916830] Bluetooth: hci0: command tx timeout
[  121.041693] Bluetooth: hci3: command tx timeout
[  121.042152] Bluetooth: hci2: command tx timeout
[  121.105417] Bluetooth: hci4: command tx timeout
[  121.170589] Bluetooth: hci5: command tx timeout
[  121.171018] Bluetooth: hci7: command tx timeout
[  121.297409] Bluetooth: hci6: command tx timeout
[  175.347132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.357396] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.361816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.364701] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.370228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.381624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.382969] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.386554] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.390503] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.397258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.429956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  175.433733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  175.436410] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  175.448123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  175.461775] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  175.467820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  175.469525] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  175.469731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.479302] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  175.491359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  175.491725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  175.505823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  175.506020] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  175.512987] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  175.528163] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  175.536899] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  175.540959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  175.542721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  175.564941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  175.572967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  175.685903] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  175.696916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  175.708922] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  175.721769] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  175.722109] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  175.723500] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  175.732810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  175.737685] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  175.753850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  175.755751] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  177.425475] Bluetooth: hci1: command tx timeout
[  177.489682] Bluetooth: hci0: command tx timeout
[  177.555373] Bluetooth: hci3: command tx timeout
[  177.617518] Bluetooth: hci4: command tx timeout
[  177.681422] Bluetooth: hci2: command tx timeout
[  177.811624] Bluetooth: hci7: command tx timeout
[  177.811715] Bluetooth: hci6: command tx timeout
[  177.873415] Bluetooth: hci5: command tx timeout
[  179.473435] Bluetooth: hci1: command tx timeout
[  179.538450] Bluetooth: hci0: command tx timeout
[  179.602605] Bluetooth: hci3: command tx timeout
[  179.666431] Bluetooth: hci4: command tx timeout
[  179.729391] Bluetooth: hci2: command tx timeout
[  179.857548] Bluetooth: hci7: command tx timeout
[  179.858014] Bluetooth: hci6: command tx timeout
[  179.921504] Bluetooth: hci5: command tx timeout
[  181.521456] Bluetooth: hci1: command tx timeout
[  181.585546] Bluetooth: hci0: command tx timeout
[  181.649584] Bluetooth: hci3: command tx timeout
[  181.713616] Bluetooth: hci4: command tx timeout
[  181.778551] Bluetooth: hci2: command tx timeout
[  181.905506] Bluetooth: hci7: command tx timeout
[  181.905531] Bluetooth: hci6: command tx timeout
[  181.970495] Bluetooth: hci5: command tx timeout
[  183.569741] Bluetooth: hci1: command tx timeout
[  183.633419] Bluetooth: hci0: command tx timeout
[  183.698458] Bluetooth: hci3: command tx timeout
[  183.761637] Bluetooth: hci4: command tx timeout
[  183.825517] Bluetooth: hci2: command tx timeout
[  183.953450] Bluetooth: hci7: command tx timeout
[  183.953525] Bluetooth: hci6: command tx timeout
[  184.018375] Bluetooth: hci5: command tx timeout
[  237.534774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.538915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.541251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.548195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.552823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.671144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  237.676775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  237.688713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  237.691626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  237.695599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  237.698540] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  237.711118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  237.715001] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  237.729593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  237.746976] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  237.766437] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  237.771972] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  237.786834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  237.787751] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  237.821135] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  237.859009] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  237.866070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  237.887013] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  237.905079] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  237.917975] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  237.919440] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  237.945608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  237.996841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  238.005905] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  238.011595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  238.024574] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  238.042149] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.056875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  238.064891] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  238.078862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  238.089621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.090868] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.096139] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.135688] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.149035] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  239.634400] Bluetooth: hci0: command tx timeout
[  239.761554] Bluetooth: hci1: command tx timeout
[  239.827370] Bluetooth: hci2: command tx timeout
[  239.953631] Bluetooth: hci3: command tx timeout
[  240.019384] Bluetooth: hci4: command tx timeout
[  240.145672] Bluetooth: hci6: command tx timeout
[  240.210428] Bluetooth: hci5: command tx timeout
[  240.275378] Bluetooth: hci7: command tx timeout
[  241.682345] Bluetooth: hci0: command tx timeout
[  241.809706] Bluetooth: hci1: command tx timeout
[  241.873618] Bluetooth: hci2: command tx timeout
[  242.002345] Bluetooth: hci3: command tx timeout
[  242.065594] Bluetooth: hci4: command tx timeout
[  242.193653] Bluetooth: hci6: command tx timeout
[  242.257637] Bluetooth: hci5: command tx timeout
[  242.322634] Bluetooth: hci7: command tx timeout
[  243.729807] Bluetooth: hci0: command tx timeout
[  243.857625] Bluetooth: hci1: command tx timeout
[  243.921599] Bluetooth: hci2: command tx timeout
[  244.049377] Bluetooth: hci3: command tx timeout
[  244.113534] Bluetooth: hci4: command tx timeout
[  244.241385] Bluetooth: hci6: command tx timeout
[  244.306591] Bluetooth: hci5: command tx timeout
[  244.369627] Bluetooth: hci7: command tx timeout
[  245.777536] Bluetooth: hci0: command tx timeout
[  245.906357] Bluetooth: hci1: command tx timeout
[  245.969674] Bluetooth: hci2: command tx timeout
[  246.097650] Bluetooth: hci3: command tx timeout
[  246.161580] Bluetooth: hci4: command tx timeout
[  246.290371] Bluetooth: hci6: command tx timeout
[  246.353369] Bluetooth: hci5: command tx timeout
[  246.417541] Bluetooth: hci7: command tx timeout
[  300.540833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.549073] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.553091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.568188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.584888] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  300.621081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  300.625148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  300.627881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  300.636016] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  300.641500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  300.651438] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  300.662852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  300.665483] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  300.671732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  300.686809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  300.729575] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  300.736861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  300.748802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  300.792712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  300.795725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  300.800926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  300.819890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.827009] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  300.863029] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  300.895080] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  300.921288] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  300.925055] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  300.927613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  300.946948] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  300.949911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  300.951792] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  300.976129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.028867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.037215] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  301.047111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.055059] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  301.065818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.073033] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  301.096015] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  301.113993] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  302.609443] Bluetooth: hci0: command tx timeout
[  302.738746] Bluetooth: hci2: command tx timeout
[  302.739160] Bluetooth: hci1: command tx timeout
[  302.931158] Bluetooth: hci3: command tx timeout
[  302.993545] Bluetooth: hci6: command tx timeout
[  303.057630] Bluetooth: hci4: command tx timeout
[  303.185899] Bluetooth: hci5: command tx timeout
[  303.185950] Bluetooth: hci7: command tx timeout
[  304.657716] Bluetooth: hci0: command tx timeout
[  304.785468] Bluetooth: hci2: command tx timeout
[  304.785880] Bluetooth: hci1: command tx timeout
[  304.977432] Bluetooth: hci3: command tx timeout
[  305.041572] Bluetooth: hci6: command tx timeout
[  305.105402] Bluetooth: hci4: command tx timeout
[  305.233431] Bluetooth: hci5: command tx timeout
[  305.233486] Bluetooth: hci7: command tx timeout
[  306.705860] Bluetooth: hci0: command tx timeout
[  306.834065] Bluetooth: hci1: command tx timeout
[  306.834125] Bluetooth: hci2: command tx timeout
[  307.027341] Bluetooth: hci3: command tx timeout
[  307.089790] Bluetooth: hci6: command tx timeout
[  307.153514] Bluetooth: hci4: command tx timeout
[  307.282355] Bluetooth: hci5: command tx timeout
[  307.282498] Bluetooth: hci7: command tx timeout
[  308.754802] Bluetooth: hci0: command tx timeout
[  308.883366] Bluetooth: hci2: command tx timeout
[  308.883414] Bluetooth: hci1: command tx timeout
[  309.073446] Bluetooth: hci3: command tx timeout
[  309.137437] Bluetooth: hci6: command tx timeout
[  309.201551] Bluetooth: hci4: command tx timeout
[  309.329459] Bluetooth: hci7: command tx timeout
[  309.329967] Bluetooth: hci5: command tx timeout
[  362.789814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  362.792972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  362.796736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  362.808039] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  362.821862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  362.915527] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.920494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.925149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  362.931258] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  362.938649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  363.045213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  363.055061] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  363.058097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  363.100604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  363.112718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  363.211422] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  363.223747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  363.228244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  363.244053] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.247780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  363.253528] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.256761] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.303230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.304247] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.371194] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  363.374837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  363.377034] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  363.379846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.382106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.387801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  363.391249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  363.407461] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.428997] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.430722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.443773] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  363.450516] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.452649] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  363.515508] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  363.538634] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  363.581939] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  364.881678] Bluetooth: hci0: command tx timeout
[  365.009571] Bluetooth: hci1: command tx timeout
[  365.201653] Bluetooth: hci2: command tx timeout
[  365.330454] Bluetooth: hci3: command tx timeout
[  365.521752] Bluetooth: hci5: command tx timeout
[  365.521932] Bluetooth: hci6: command tx timeout
[  365.585913] Bluetooth: hci4: command tx timeout
[  365.779419] Bluetooth: hci7: command tx timeout
[  366.930428] Bluetooth: hci0: command tx timeout
[  367.058657] Bluetooth: hci1: command tx timeout
[  367.249421] Bluetooth: hci2: command tx timeout
[  367.377465] Bluetooth: hci3: command tx timeout
[  367.569609] Bluetooth: hci5: command tx timeout
[  367.569662] Bluetooth: hci6: command tx timeout
[  367.633703] Bluetooth: hci4: command tx timeout
[  367.825473] Bluetooth: hci7: command tx timeout
[  368.978360] Bluetooth: hci0: command tx timeout
[  369.105530] Bluetooth: hci1: command tx timeout
[  369.297683] Bluetooth: hci2: command tx timeout
[  369.427352] Bluetooth: hci3: command tx timeout
[  369.617850] Bluetooth: hci5: command tx timeout
[  369.618424] Bluetooth: hci6: command tx timeout
[  369.681382] Bluetooth: hci4: command tx timeout
[  369.873379] Bluetooth: hci7: command tx timeout
[  371.025484] Bluetooth: hci0: command tx timeout
[  371.154371] Bluetooth: hci1: command tx timeout
[  371.347343] Bluetooth: hci2: command tx timeout
[  371.473393] Bluetooth: hci3: command tx timeout
[  371.666501] Bluetooth: hci6: command tx timeout
[  371.667017] Bluetooth: hci5: command tx timeout
[  371.729800] Bluetooth: hci4: command tx timeout
[  371.921560] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
15:23:22  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff888016708000 RCX=0000000000000000 RDX=0000000000000001
RSI=0000000000000000 RDI=0000000000000002 RBP=ffff888016708a58 RSP=ffff88803005f6f0
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=ffff888016708aa8 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8151907c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8243b47610 CR3=00000000289ac000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff888008c41780 RCX=0000000000000000 RDX=1ffffffff0ba0b04
RSI=0000000000000020 RDI=ffff8880134914bc RBP=ffff88800f18fb80 RSP=ffff88800f18faf8
R8 =0000000000000001 R9 =0000000000000140 R10=ffffffff8641fb57 R11=0000000000000000
R12=ffff888008c41780 R13=0000000000002800 R14=0000000000000018 R15=0000000000002800
RIP=ffffffff81af0bb4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f437eef78e0 CR3=0000000009de0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000