Warning: Permanently added '[localhost]:4269' (ECDSA) to the list of known hosts. 2025/06/02 22:29:47 fuzzer started 2025/06/02 22:29:48 dialing manager at localhost:34361 syzkaller login: [ 99.936917] cgroup: Unknown subsys name 'net' [ 100.083452] cgroup: Unknown subsys name 'cpuset' [ 100.136070] cgroup: Unknown subsys name 'rlimit' 2025/06/02 22:30:03 syscalls: 203 2025/06/02 22:30:03 code coverage: enabled 2025/06/02 22:30:03 comparison tracing: enabled 2025/06/02 22:30:03 extra coverage: enabled 2025/06/02 22:30:03 setuid sandbox: enabled 2025/06/02 22:30:03 namespace sandbox: enabled 2025/06/02 22:30:03 Android sandbox: enabled 2025/06/02 22:30:03 fault injection: enabled 2025/06/02 22:30:03 leak checking: enabled 2025/06/02 22:30:03 net packet injection: enabled 2025/06/02 22:30:03 net device setup: enabled 2025/06/02 22:30:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/02 22:30:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/02 22:30:03 USB emulation: enabled 2025/06/02 22:30:03 hci packet injection: enabled 2025/06/02 22:30:03 wifi device emulation: enabled 2025/06/02 22:30:03 802.15.4 emulation: enabled 2025/06/02 22:30:03 fetching corpus: 0, signal 0/0 (executing program) 2025/06/02 22:30:05 starting 8 fuzzer processes 22:30:05 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x148, r0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x9}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf6}, @NL80211_ATTR_FRAME={0xfa, 0x33, @mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @broadcast, @device_a, @random="184334ac601b", {0xb, 0x40}}, 0x964, @default, 0x0, @void, @val={0x1, 0x2, [{0xb, 0x1}, {0x1b, 0x1}]}, @val={0x3, 0x1, 0x8c}, @void, @void, @val={0x2d, 0x1a, {0x8, 0x2, 0x0, 0x0, {0xffffffffffffffc9, 0x1, 0x0, 0x289, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x300, 0x3, 0x1f}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3, 0x28}}, [{0xdd, 0x9c, "50de36103cc5c22532b106b750f2a756c4b1cf520f5bbd7e64f5366e278de8d72309ee12fb2d80077946ca04082a548d62edad64ff2409818113c1a9980446b8d54ab308a719413559e06dd5b976032d90107c8ce6fe24a4c6deaaa1247dfb98cf1921dba2e264548a238e0b58490c645f17b5bb634ab04be812431278232e5d5948fc61373bafdf61d6ef0a56ca912353c9a22271e023a8338d857b"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xc}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8848}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000055}, 0x20000844) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000280)={0x43, 0x9, 0x1, {0xfff, 0x9a, 0x0, 0x401, 0x0, 0x6, 0x6, 0x8, 0x6}}, 0x43) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0xa, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x804) recvmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f0000000400)=@nfc, 0x80, &(0x7f0000000680)=[{&(0x7f0000000480)=""/95, 0x5f}, {&(0x7f0000000500)=""/64, 0x40}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000005c0)=""/175, 0xaf}], 0x4, &(0x7f00000006c0)=""/250, 0xfa}, 0x200}, {{&(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000840)=""/61, 0x3d}, {&(0x7f0000000880)=""/64, 0x40}, {&(0x7f00000008c0)=""/136, 0x88}, {&(0x7f0000000980)=""/1, 0x1}, {&(0x7f00000009c0)=""/239, 0xef}, {&(0x7f0000000ac0)=""/127, 0x7f}, {&(0x7f0000000b40)=""/193, 0xc1}, {&(0x7f0000000c40)=""/245, 0xf5}, {&(0x7f0000000d40)=""/234, 0xea}, {&(0x7f0000000e40)=""/50, 0x32}], 0xa, &(0x7f0000000f40)=""/240, 0xf0}, 0x10001}, {{&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000002500)=[{0xfffffffffffffffe}, {&(0x7f00000010c0)=""/253, 0xfd}, {&(0x7f00000011c0)=""/14, 0xe}, {&(0x7f0000001200)=""/144, 0x90}, {&(0x7f00000012c0)=""/240, 0xf0}, {&(0x7f00000013c0)=""/46, 0x2e}, {&(0x7f0000001400)=""/150, 0x96}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/26, 0x1a}], 0x9}, 0x100}, {{&(0x7f00000025c0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/78, 0x4e}, {&(0x7f00000036c0)=""/176, 0xb0}, {&(0x7f0000003780)=""/41, 0x29}, {&(0x7f00000037c0)=""/29, 0x1d}, {&(0x7f0000003800)=""/236, 0xec}, {&(0x7f0000003900)=""/106, 0x6a}], 0x7, &(0x7f0000003a00)=""/68, 0x44}}], 0x4, 0x20, &(0x7f0000003b80)={0x77359400}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000003c80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x28, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000003cc0)=""/179) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000042c0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004280)={&(0x7f0000003dc0)={0x494, r0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x76}}}}, [@NL80211_ATTR_FRAME={0x2fa, 0x33, @data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x4}, @from_mac=@device_b, @broadcast, @device_b, {0x8, 0x1}}, {0x4, 0x1, 0x1, 0x0, 0xb0}}, {@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @device_a, @random="239fd3db1bb7", {0x1, 0x6}}, {0x1, 0x0, 0x2, 0x1, 0x6}}}, @a_msdu=[{@device_a, @broadcast, 0xb3, "04386a811faa1cd4017cbf301868243cd6a91c71dae6b06de3dd0c9955a11515f33e618bf0e839b6b16ae74bcd7a524fca7dcfe95eaa0a6c19feda69dc98735c81172d0f21bae4b628ee2368dabe13633db1b0800f354e49a4752839cee90dc2a1db649d7b3eb8a093afd0b075ee157099717f761108809c0db3be567d250f9fcf57dfa7dac7638cbfb2d39451ed29353a65a97b0ca73494c1e40befee37f14d2922059bd8693de7be54207c6b185653d943a9"}, {@device_a, @device_b, 0xf7, "894ca40be05e8ed32ed3ab789879e2df876f307db2691b3e05e8ebe05b09937957c03cdc5a62b3390c52c3a8fc250e515afae7c68e906f7267a77312478e4f5dfe4b880161d1194ca2cc1c2bc9ccdb42e01a50dac441f2a3320d36f085f97ffa9ba7a99b8d19a28acdf02d3b3f81d88bfe20a28d40827fdb2433a6934e65cc538bf14daf021465a28ae15cd832e801896fb5d4f493d60ae72cabc043857e0e9e98055b9488c794718e8eca1ee70c822c88e597d50455564082a7aa1b606a2f6265dcf9d038a2cab16fbb50af70527e55f328c1fab90d57ecffd168be42b4b6bd09149d0eddc09090016e3eceae2c30b75eb0c6d94a4405"}, {@device_b, @device_b, 0xdf, "3e1ae24f8b2b8c907d7a5e9dacd45e60d34e6cf2952b8d2281fb0eeecfd1533cf643c3fd6ebd845ecd59f3646d6671c124559c938c2ee67f461adf3b7832a3fdeaa11cbb09d8dd12853f9c46e9b454bca497f926c1539a05d19602df8cd8a5c6746e78bb5afb8c0e40b89c859b59e5e08bd6fdc927477ab18c6a3b64039d81fa4f5e86e5a0d26f4342601c9d379bae616d8bd8a201765d069b7951bf91b07f5f984b72d88c341becb950c369beec651642632f9be2a014c48bacf0ebd14838aa3cf8cebcef1065f2302ba66b6c33c108360b48a4e514d0c3459eb2f41a7ced"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x3, @random="17fe78e0fd99", @device_b}}, @NL80211_ATTR_FRAME={0x14e, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x6b56}, @device_b, @broadcast, @broadcast, {0x0, 0x7}, @broadcast}, @a_msdu=[{@broadcast, @device_a, 0x1e, "461d99a7cb1a3c31fcd0274d12f26e3451d088a254a998c30a59a2c82dfd"}, {@device_a, @device_b, 0xf2, "9ac3f8fd11241ff1b00df7a6e53025d50e5f841d5eee515843c92b09c0a9d4da8b8444c53b94697721e784570cef1e7470556029f6746dd83f9aba36d1d2cf8f05df0ec1a8fcdb36a14dfe5f686d939e625dccaa296426b5b8a685f5b0fa43679ccb22559b3be229368949af52a54f7ab9c17674eabed159bb0fb3f233b3ab818f9fd954579bd79b2fd6617fc65903557ffcd8c5bd220fa4cca043e69600e138ad602e5b83f6ee9b3173418cc0cd7d0e628299d206cb60100260f3a9dd55fd74d46f2c5a3ee8e9bc00cc19aa94e3bd19e3ca96f44e2963ade0b764d90585560d1e5f08e7769987c7309fcb7d35b2afd71e08"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x494}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r2 = accept4(r1, &(0x7f0000004300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000004380)=0x80, 0x80400) openat$snapshot(0xffffffffffffff9c, &(0x7f00000043c0), 0x218802, 0x0) r3 = memfd_secret(0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000044c0)={0x58, 0x0, &(0x7f0000004400)=[@increfs={0x40046304, 0x2}, @increfs={0x40046304, 0x3}, @request_death, @exit_looper, @decrefs, @decrefs={0x40046307, 0x2}, @increfs_done={0x40106308, 0x3}, @clear_death], 0x6, 0x0, &(0x7f0000004480)="fe5b70112ffa"}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000004600)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000045c0)={&(0x7f0000004540)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4010) r4 = memfd_secret(0x0) openat$cgroup_devices(r4, &(0x7f0000004640)='devices.allow\x00', 0x2, 0x0) r5 = syz_io_uring_setup(0x3ea2, &(0x7f0000004680)={0x0, 0xa674, 0x0, 0x3, 0x90}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004700), &(0x7f0000004740)) io_uring_setup(0x3dd5, &(0x7f0000004780)={0x0, 0x7d5a, 0x91718cd2c8e99091, 0x0, 0xf0, 0x0, r5}) memfd_secret(0x80000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004800), 0x8000, 0x0) recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000004840)=""/193, 0xc1}, {&(0x7f0000004940)=""/72, 0x48}, {&(0x7f00000049c0)=""/172, 0xac}, {&(0x7f0000004a80)=""/200, 0xc8}, {&(0x7f0000004b80)=""/245, 0xf5}, {&(0x7f0000004c80)=""/135, 0x87}], 0x6, &(0x7f0000004dc0)=""/205, 0xcd}, 0x7962}], 0x1, 0x0, &(0x7f0000004f00)) 22:30:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240c8118}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x40) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r1, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c800}, 0x81) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", ""]}, 0x14}}, 0x200040d0) getsockname(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000540)=0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x12688108}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r6 = memfd_secret(0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, 0x3, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x925}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x67f}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa882}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3d}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x80000000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x9}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xb1}]}, 0x68}, 0x1, 0x0, 0x0, 0x814}, 0x840) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1a0, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x79}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}, @NL80211_ATTR_FRAME_MATCH={0x9e, 0x5b, "f2a613646e2e83ac2aa745caafdf4357363becb3463c085d97ab1f4f68c509d3d8187cbdd67e139a1b1d944c890ae008ac5e5de12d5d672595b2251e5a2a6301841201eec4bbf7c0b2b7b3a08c258839e693cb9b4c3fad0dd889b3376ef31b55f70863de418048cb5242451f138ccfcdb37d6c471c4ac7afe72d4bd5cfce09caa7a4b61e42221152def394695c35ecb18b97ebe066361f9d4696"}, @NL80211_ATTR_FRAME_MATCH={0xbd, 0x5b, "f88ed81dace11758198fcc6a4cdf4cedd53736f3a2ace5f24481da5c19672f3a554ad3d916e556c1002f709132db2e351b5c08f186ef324b631ca2751ece144efa682a8fabe2e65233743d17fa2925d47b2017016110a0a635c319d7e64cb6f379d9eca690d8e8e4582baebfd165c513f0391dc2aff7e10de3cd6fe45d6b3974de5691dcb401cdc7c83f36426169cd3ef5637cd18f710e1cffafcdf68b514f055bc3329538ee9e0b1d3b8b8cbc2f12e2cd5dcddfa41eed1c82"}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x41c10}, 0x20000014) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffc1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x8884}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000d80)='timerslack_ns\x00') ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000dc0)={'batadv0', 0x32, 0x37}, 0xa) 22:30:05 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000040)={0x0, "9817220f2b300ffbb5b49ea264705a6554513a9591ba540a178ca6ae61a714b7674bc0196fb99fa87ec39001f81b567b352a1321f18b3b241f7ab86e106d2cad"}) write$P9_RLOCK(r0, &(0x7f00000000c0)={0x8, 0x35, 0x1}, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/rt_acct\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x201, 0x7fffffff, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x1) write$P9_RMKNOD(r0, &(0x7f0000000240)={0x14, 0x13, 0x1, {0x4, 0x1, 0x5}}, 0x14) openat$cgroup_procs(r1, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x1, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) r3 = memfd_secret(0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000440), 0x2, 0x0) write$P9_RLINK(r2, &(0x7f0000000480)={0x7, 0x47, 0x1}, 0x7) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xe6}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40004) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x5c, 0x0, &(0x7f00000006c0)=[@register_looper, @acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@flat=@handle={0x73682a85, 0xb}, @fda={0x66646185, 0xa, 0x1, 0x40}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}}], 0x47, 0x0, &(0x7f0000000740)="925ccd45d6da75b51e78a3aa9be2636965b2924f17804168fc9a9229871e3ef94d5272e68318f7287d4a6d71c761cdcc9a809b71d27fb17d2bcc93cf5c6bae8b64c9446fe5010f"}) sched_setscheduler(0x0, 0x5, &(0x7f0000000800)=0x5) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000840)='net/psched\x00') ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000008c0)) [ 116.998686] audit: type=1400 audit(1748903405.522:7): avc: denied { execmem } for pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:30:05 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x40, 0x4, 0x3}}, 0x14) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x420681, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f00000000c0)={0x1}) r2 = syz_io_uring_setup(0x7d79, &(0x7f0000000100)={0x0, 0x6592, 0x10, 0x1, 0x198}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000200), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RLINK(r0, &(0x7f0000000240)={0x7, 0x47, 0x4}, 0x7) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000280)={'\x00', 0x81, 0x0, 0x8}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r2) r3 = memfd_secret(0x0) write$P9_RCREATE(r3, &(0x7f0000000340)={0x18, 0x73, 0x1, {{0x40, 0x3, 0x5}, 0x80000000}}, 0x18) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x13a, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x401c814}, 0x4040000) write$hidraw(r3, &(0x7f0000000580)="6850f04e79deda19e19a9fb95abb09a6cbffd962603dc511b96f6cc16aa7fb3650e9b1a7b2d1791ce2c4a84da467bfd547b50728544cbd110d5f8c24500bcd123fc4776c85aa6d8f9c3a97fab0551b9123402effd8e37f6958a254f42a8cd88f6d0a67d989414413f93f414f20da032bd07ace4769c00252a8e9fa5107938dfd4451a947c953e0cd8136938ed29f2f572fee15020eb03ee45d1a06ac1048b496e6fef4e892a95714082ffee44254bed045ab4ce0aa7dee8c3b9b93bae5528788e4b54f18402436840102b32e81f29046433a9a47806d7e29efde55a7d57449", 0xdf) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0xfda318b07237d3c, 0x0, 0xa}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) recvfrom$packet(r3, &(0x7f00000008c0)=""/36, 0x24, 0x80000041, &(0x7f0000000900)={0x11, 0x15, 0x0, 0x1, 0x20, 0x6, @broadcast}, 0x14) socket(0x15, 0x800, 0x10000) 22:30:05 executing program 4: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000100)) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200)={'bridge0', 0x32, 0x32}, 0xa) openat$cgroup_pressure(r1, &(0x7f0000000240)='cpu.pressure\x00', 0x2, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x288402, 0x0) read$hidraw(r3, &(0x7f00000002c0)=""/137, 0x89) pipe2$9p(&(0x7f0000000380), 0x4000) write$snapshot(r1, &(0x7f00000003c0)="5bc088ae48b16c6f95dbb0ee9e9cc8a8c1be66264287fd5b189827c038d849d16363b7fcec9e8802ae5fc918eb40fcafadf108c565b1", 0x36) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000400), 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x1}, ["", "", "", ""]}, 0x14}}, 0x4000800) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1a0, 0x2, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x120, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2c}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast2}}}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 22:30:05 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000004380)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, &(0x7f00000010c0)=""/192, 0xc0}, 0x80000000}, {{&(0x7f0000001180)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001200)=""/76, 0x4c}, {&(0x7f0000001280)=""/244, 0xf4}, {&(0x7f0000001380)=""/205, 0xcd}, {&(0x7f0000001480)=""/180, 0xb4}, {&(0x7f0000001540)=""/164, 0xa4}], 0x5, &(0x7f0000001680)=""/154, 0x9a}, 0xbc}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001740)=""/125, 0x7d}, {&(0x7f00000017c0)=""/20, 0x14}, {&(0x7f0000001800)=""/2, 0x2}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/150, 0x96}, {&(0x7f0000002900)=""/120, 0x78}, {&(0x7f0000002980)=""/145, 0x91}, {&(0x7f0000002a40)=""/35, 0x23}, {&(0x7f0000002a80)=""/228, 0xe4}], 0x9, &(0x7f0000002c40)=""/78, 0x4e}, 0x401}, {{&(0x7f0000002cc0)=@un=@abs, 0x80, &(0x7f0000004200)=[{&(0x7f0000002d40)=""/94, 0x5e}, {&(0x7f0000002dc0)=""/234, 0xea}, {&(0x7f0000002ec0)=""/1, 0x1}, {&(0x7f0000002f00)=""/176, 0xb0}, {&(0x7f0000002fc0)=""/65, 0x41}, {&(0x7f0000003040)=""/122, 0x7a}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/134, 0x86}, {&(0x7f0000004180)=""/77, 0x4d}], 0x9, &(0x7f00000042c0)=""/132, 0x84}, 0x2}], 0x4, 0x2, &(0x7f0000004480)={0x77359400}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000004580)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004540)={&(0x7f0000004500)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x44080}, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000004600), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000046c0)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x1c, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40001) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000004740), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000004800)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000047c0)={&(0x7f0000004780)={0x28, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000043) socketpair(0xb, 0x0, 0x7fffffff, &(0x7f0000004840)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000048c0), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000004b00)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004900)={0x1a8, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xe4, 0x5b, "62c9cea4a6cdec77e956dd24a2210cfaa69c5dc1a12fd47f952c3cd76030a968768d76fed04decc170cbaf6e768dcdd7530a7d808223132b265f40017b2fb43e53484a8052c51bc76efa8f7e45d37a76553a3ff5fa9728aa3f983f407983c8abd549bfe797d268b1e0cdd07a8ffa018d4b99028cdc3d144addb36b499593a04162bd287dcefed379725b5042a161ae9a891213525da422e55f36e141fd5e7d384494230614fd4e29e052a72a0b54fb053db74c333e04ff7db7d6b0cfb1f0cb5c7559bb4f87edf891ef29c4e1d75da668863a4a0425619ae530c2bcc2112bb6a0"}, @NL80211_ATTR_FRAME_MATCH={0xad, 0x5b, "0b305f32d6c6ed450824430e861840765dfe8ba43ffe344c85fb7490394ebf677843fb6ca4a98f0337d023e8e5ea73c98a4cd69b3309d1c5b0e4bb351d0f82854ee948ef5008ed219052ab07a5b9c9bbc7fcbb903e0d920139a1f24ad46507cca57315fecfff13fd216a78ccd5966ba0e40a33058d7f64e5d164a5bb22b7f3f691c71171314fffcf38b20da293d05e3e1f9a5332933be23b5c8ed4418d799047632dafc789a805f82a"}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000080) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000004b80), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000004c40)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x4008800}, 0xc, &(0x7f0000004c00)={&(0x7f0000004bc0)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) syz_genetlink_get_family_id$wireguard(&(0x7f0000004c80), r4) syz_genetlink_get_family_id$wireguard(&(0x7f0000004cc0), r4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000004e00)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004d40)={0x48, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x82}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x48}}, 0x40000) recvmmsg(r4, &(0x7f00000056c0)=[{{&(0x7f0000004e40)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005200)=[{&(0x7f0000004ec0)=""/110, 0x6e}, {&(0x7f0000004f40)=""/178, 0xb2}, {&(0x7f0000005000)=""/224, 0xe0}, {&(0x7f0000005100)=""/228, 0xe4}], 0x4, &(0x7f0000005240)=""/205, 0xcd}, 0x7}, {{&(0x7f0000005340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000005600)=[{&(0x7f00000053c0)=""/88, 0x58}, {&(0x7f0000005440)=""/224, 0xe0}, {&(0x7f0000005540)=""/36, 0x24}, {&(0x7f0000005580)=""/29, 0x1d}, {&(0x7f00000055c0)=""/1, 0x1}], 0x5, &(0x7f0000005680)=""/64, 0x40}, 0x2}], 0x2, 0x21, &(0x7f0000005740)={0x77359400}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000005880)={&(0x7f0000005780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005840)={&(0x7f00000057c0)={0x50, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000800}, 0x24008040) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000058c0)='net/hci\x00') r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000005940), r5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f0000005a00)={&(0x7f0000005900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000059c0)={&(0x7f0000005980)={0x2c, r10, 0xeaef5731fb34e0ad, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) 22:30:05 executing program 6: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x800, 0x6}, {0x1, 0x2}, 0x7, 0x1}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000080)) read$ptp(r0, &(0x7f00000000c0)=""/1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="eb46870a6632"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x17cf7c9ca798bfad}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x61}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x159}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x10000840) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000280)={0x8, 0x1}) read$ptp(0xffffffffffffffff, &(0x7f00000002c0)=""/211, 0xd3) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x180000) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x19, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000440)={0xa}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000900)={0x2, 0x1}, 0x4) bind$packet(r4, &(0x7f0000000940)={0x11, 0x3, 0x0, 0x1, 0x8, 0x6, @link_local}, 0x14) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) recvfrom$packet(r2, &(0x7f0000000a80)=""/89, 0x59, 0x10120, &(0x7f0000000b00)={0x11, 0xe3, 0x0, 0x1, 0x5, 0x6, @link_local}, 0x14) setsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000b40)="587068feb7e914638079697c90064612419b9f4b26d7d89e74bc3104fb7a7260904b1e3f0e81d6d84eaa", 0x2a) 22:30:05 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x1, 0x2, 0x8, 0x6ace, 0x4, 0x2, 0x1f, 0x3}, &(0x7f0000000040)={0xf8, 0x400, 0x5, 0x6, 0x1, 0x3000000000, 0x800, 0x1}, &(0x7f0000000080)={0x5, 0x100000000, 0x2, 0x4071, 0x20, 0x3, 0x6, 0xf2}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x6]}, 0x8}) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x4d, 0x1}, 0x7) r2 = socket(0x28, 0x80000, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000d40)={0x11, 0x1b, r3, 0x1, 0x20, 0x6, @local}, 0x14) ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000d80)={'\x00', 0x5, 0x1, 0x8}) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000e00)={0xfff, 0x65, 0x10000, 0xb9f, 0x100000001, 0x48f, 0x1}, &(0x7f0000000e40)={0x1, 0x7, 0xa57c19f, 0x3, 0xffffffffffffff85, 0x6, 0x47, 0x7fffffff}, &(0x7f0000000e80)={0x0, 0x9, 0x3, 0x9, 0xfffffffffffffffb, 0x5e2, 0x1b, 0x7ff}, &(0x7f0000000f00)={r4, r5+60000000}, &(0x7f0000000f80)={&(0x7f0000000f40)={[0x5]}, 0x8}) getpeername$packet(r2, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001200)=0x14) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000001300)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x5c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) socketpair(0x9, 0x1, 0xffff0000, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = accept4(r8, &(0x7f0000001380)=@l2={0x1f, 0x0, @none}, &(0x7f0000001400)=0x80, 0x0) recvmmsg(r9, &(0x7f00000015c0)=[{{&(0x7f0000001440)=@nl=@unspec, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/133, 0x85}], 0x1}, 0x6}], 0x1, 0x20, &(0x7f0000001600)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001640)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r9) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000002980)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002940)={&(0x7f0000001740)={0x1200, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xa, 0x5b, "fe1657035c6a"}, @NL80211_ATTR_FRAME_MATCH={0x26, 0x5b, "6846912bdc57a69487eca37c4564c7fd5c009b3368460c747fe0b978c7d6d739fc82"}, @NL80211_ATTR_FRAME_MATCH={0xb1, 0x5b, "6572dd5fad801d34f9dab5d315b34a3b48cf45ed8890f69e8b61fe998815fced282770e910297c8ca1f667e87bed6ade88bbc9172f0b30bc682a8a3745fa9e9d1fd67ce4882bbc4672a386729a01feb7ef8b512c8601bb25c793a41a20a44e37b5640da7dce3f393a010be160726513d5fe093d1ce4983d93163530c72ebdadd9d49e74f1adb75042207a43b79d766d564089948790d82d4e87f7a6813177d301b7c96007c1a56152357724928"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xff}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "2ff16fbf1a12f3b533598d4b8f27a5a07bc743a3de9ca8a57062e1e0873c02f83ceaf4103090933c3c4404d8045748c3de680614640444b42c7b6ab6c99f12728e4063085f5f4d2312809f6b31d60445113f94ec1fdae171c567daa4afef28e3a65d4f6a43fa3972c558c02c877680f1f0ac7ac738d95cf1435995c97bb5ec6dc2232dac461ad57fb28e5b94c4a2a8295cc0ec7ca3b38d781a1ecd9122e9e37ea9a99dc6dffbfbe448e6f963925446d837d6978dce2cf40110a0a3fb064ab8d74b0e217ab6861e420cc4f9d0f34cc0d60b3efb8dcf53ba5ca8c04a5631f7f45312f8aba8b163a24bae0a061a598a9dc00cc6d1b789bcbeb2d10df661b7fe8a9abd47a250400971e7f6a62d6a58220ee7c947aac7af3d4cb30adb83c0000f14cedd393a4477ca61dcbbe17b59a1dbbdb651bf9ca7a0864b332680f51b2bcdfed1ddfc61d9a1a53c2254a785301d536d0533bfc90c76bbae99822f5e635485da5d06b0a6d0768ab5b5342612c807b5ee3e3aaab9ba520af8e16ae7c106beb252d7988533676ab41fc1b941b59664af1e337937a20e66bee1ab57eb8ade7d17f8587109265f5902600e964f18a847f5ff97c8e5f26c0bcc838bdbe7725a622cdd5cd524ffbefeb73d1e7e9c419962eec5a5422997dd43cdb62a72c92d235a2a92bb75a85dd10ab4dbe619ee33eedda492f651c9e837fadeeaa406d4d299be74ab410f447c35c53098a1a665ad0720ce05b1ecfaa682e311d7ba6acfd890bd6495fac1a7e4f4afff5728280efd8a643c89ec34b39e42dec0446f5f90c9fbd40aeed43382da193ea003668a3ba34d8d74f5ad5b0882e425f73c5a6cecb8164423319cf7a27ee41f6a71e1f30f7aee8bfa2656244954846d1f2f261816069a040aae2b282fbaea4ae64735266ebfc55d067631409e99986baf684b3c23f77f357721ad73dc3f016db4e1f32cf657bcb4815d099706f6453a3b74257670f3c7986fd9a5f418503566453e49e49b13f9d1e21dcd084fec37985ba880771466bc4f4f5b88c870d6ddf7184d68b8ce5df1c60354ee7b62250084982cf604e78055d7c1233ca0ee90c732f5c2338bff3865ee054de218a6d14a62ba32a9414a60b351d8a651c00d745c090153e47f63a0cbdc7e3ba039bd35b447695b00e872652f82598f9ce5e05b4fa6810bf37965aa238571cafb9b053a64d6fc53d473809d5b4b170fb2f4fd59c2ed96de330099571039520afbe4a16a2e216b1d7bbc76d07bfd9fc803905f8ecc4fcefbeb079370a875c2c000eac5d75a7096196db51c89eb935cd7532da1783b3da8d1bcf3c15315d2a27d546c3ce9b6bd1b4d64228a59ac428fde63ba3ed66ccfeff1a94c8839fb7d86ad1450aed2a2405f26a830a5a2d1ab23bab5523cb757ecb71c61c12daaca6b6e82d5bf6a7e3d9bd9c4a45443acda08be5bc5f8a1c17f03e5a6c2451c8fc74bd758eb21925b9b93b6809e1afd5a9a91cb6122071865d0019fd8b04682e4c3a2167ee87b57ebb82abf2cc6adac86faf56f39b049968e3f69234f74ef1b6143d41450e166cd17562d902612c74cff699731b3da3f173b00946e9df93a2188bd2a51c8fbad9b803cd4c5514903d8291475ce4ccca2c995192d7893468aba0135b8878cfdb62ea16d8c943d5b7bd18e44b26396f483c5de15fb73fda3a959691660880a335cb0869d327a023da9abd89739033e74f7eb2108202efd41749d79e4a668e603ad0ec3448bff1609bf52223d052cb1d6440a981d8887944d17f06b00d82155fb54ecd4230655025985b9acdf428d1cf6b1ff6cecf17dcdf09babff615c66c7f3cbeee7fbbb770a1c3339e32837247d4c0471c8c2e0d2ff65392df62b7caf986a72f450fd2baa2050c4ac3f3313fd9f47585134e3d07828e5940b9e4cfd4a5db4126f9713d89619545c70713804f750f0cff6954a4cf0c3b11200b1ed6fe414cb8111629dbac618df439bd4da96d0a2890922f88a3e27a9d1aca3a40692b16f8589d77ddc8388797cb9efea838f472371dd127e48ee9887b7c026f414b67d5f32f9bd29b4124f48712446b5b42e6f3bff30b573743411ad03d700bb11ea43ff2315611942733da9b9b7441977846e6b76623bda121387eb1d9c2ffb9800c52c9c9b1b6508b4a1f44a69a0dcfe5cb075829ccd2712cbd711f61bd8cf7f81bfe189339bb529083ee1ef7bf45842f03aca8131a25ab7ebac2056a56c3461aee538cdfad6130821077a2f0adcffa14f3765eba7294b3cb5480ce27e6e77aba296d35eb2d78ed0bc951d7c2840e6a70b590f5656d4ef9af87f595f70ec37bc105ce371832b912900cd8fddae6d9a42b8d0071be3e7e1633c93775e61285f77f115b91ee0f4da224a6aee577e339e9a75cb61b91c1817e7ffd3fd69981a33bf97df288a3ff568acd815ab4f03bf908c4569589e4a35bebd23af488392ac04df06f76ae89ab1f14739855bb1dc011531e0370fa1ecab7b46bb07843474b979d1fe106b21a504a867a751e267ef2a74adfc96b9b0617a31607cb1459da3d2b73c8766e3d133236a5a8ccd15bba1f3700883c033d97454a3d5570580558df4d9feaad73e7790f4e7e6b601b5e0a9c8aa398d60bb7cd892f49c90b554922076dcd7c3a432b9d77c4c5191b8a1919b2a4eb938bf8c845e1ec37f4d8985b82828a1420dd34cdb443ecfaa12029b8c9854146fe18da8e7e34bed72fbff32c90ba49917f1513b7a0f34e40d0d5ce43b0ba15c7275905c126f15d7ab9b724f82621c809be4d3807429b42bef7d192759d90a5337b7e8d0f880d43fb59d9cc6bd4fb4acff715935d9afacd278843c8e8c1e67869bb0a980730b923b2f6fe35707548007a7e24fbd99796a88ffcf34843d245f3c081922814934244c97ff2e09a38de33e2b2a5bc9b36d8a2f43afc52369e45887e6acc2651487a6979f6c3ad1ecbc5d045b4b82e3493b8d96171301be3799a66b5e6c164ea0b26a07fb6ea11f5110a460aafebafc57983d9ba83d84ffbe32fc7539883827cf87ff8e1829a3aebd696aaad0781a48bf1f1348cbbe2e7901ad806a927cd7557e7e9ff5ba56335941f9ccb5c3541a5aa3bef6540e7a762f3da50b46e94e563ce2a45b709a55193e62aa824cfe0948ee0ee9fee59440b8ee78c348c38bf5f329d648184f236ed678974511c663939a5a532412fd3f822c7a742be9f765d0787519c090100f0cfb9af0b57dde77b069c76068e5b5859a5d3ad53bf21a7d734409dab1905188d2cc9d1d57571ed4e842acc03e9dd025acaa7d0d631e70849582f913e82c4853f3f848b516e9378edd17ab00c578eed125c7ebaeedd18fe4925b24d0f4b6d4511f973633f112786a6ed838f4a55bd1ae4c51080e7c84515c41b86a5ed2ca9e185a8322a391ea39fc9f6b0a5bf2f15a1be63f5f4fb0da722e90acf3bc14c3e9a0d03e8407f5877e156aba4ee5736686acbc0b130209a406422310963236b392e4c4cf084fb381e30a8d8110145ef1ad0252f7aada8df93c85bd95cc4d2cad7e331ec57016a1658ad05e42cf6e1517c261260a6311eb5a80a8f03c823d9f1185f83fb4f58519c400e9b60bf3854da59e1d6bf037a69111f053070c7c3776409150f7e9e09df1bc8efe51f3b8328edc80cfa1f9267727ab8ed5bdb83b2c957e526dc17368cdc1101de1decb5ca9c0baa4cd8f8185661d9d84e8375e8bb69201a85eb57ccf402ef579713450f59d3a7cb6a386a3d45a922e1b918cf0216c18f2f3d1dd56f496f2baaf7cb70b6bd8e9010d4edd7dec07fb18d0e6be057f91018a91c756b72c1badb435beb074f52e4aaadafda18f761dae61e5eb2bb85b01507a61f44ddb5d23a76a4f04fd20672f70d25cd069c48d3b4c29bb6b42b5509714ed09d6a501b4144537c9b49f0655ec6074783d6297c61e970cf707a8b3c04e0e0ad218957f4c5ddea11dd5c24be04034f320ff6e6ef29a905fad4f3ff2ee98e1be3ff437aa53e228de0ffa9bf61b66355bd4d109e662a3e5b44784f27bca004bdd00efa61a916c88ed0e2270170b5f3f92bed4993be793b6b975ee5a54e41d3ad0c9b1c92a723ae4fb143551febff49c488642bbef510b334973ecb53e2aa72e8b05886f24c02cb1b10303d438b15f09e817a07b5a6358b5623f44ffb11e540431540146253303f033a6aefe6a06450af05bb68f42651aed3c99c81ad544eae51efcf994d7c3683026cb53c363ac005c2229ae4656e9d9a8f9c790bd677e3af90eeab6548c671e2586255ad74d1043896e09ef16055165eeb8655a6192c269b04a15497be69ebca5152161c2f69933b494b68f24a8825501e4e340e5597d16f4c6d7e4ce77bea51c74693bd050074d898ec092ece285e0db6463cd8f68434813b48ef2977afc03087085a6c6c2e9df180d3f26f9092b7dc60995fe5ff254ab70c48bfd898fc10057b7a22bfa4ed932c2d8ee35a201d0044bd54f1c42cd3635342d997e2c9c8d43c7c148c4df6e71b983af5ba682959be7d74087c0bb0f6546de5b56d913e3272568d3431d0f5c5adf0fa9ffe382cc8c50a0751bde0c89209946b24e10325f82940f66aece180f727f679bc1829d693255964cb85744e5d0c4f34ff306043beddb9458757e9c2940673b075cc73441936337f66de46056de12cd1a355fa74221fe19247716cf56c10c148a47b6d8f2044c1d8a014d1a1ef7e9ae1589046a82cc29c051e8e1614d88eee8509740a85cb20bcfd7dfacf121e81b3b93656693a0f6ca17a51902d3e555a4bd8cf1f08a5e98930f00772d5a8610f7e9eb26d4a64567091ee3de584a3f33889e91c3fa6c7b2952600506e21ee8e6baf102cc25e0f5e3f8e25bcfeb135d346c9109ffa2648f3f72f80f453b3faa6fbc96849e01c1130224d5e662f7d7c76fa5d99c30f015fa77dededdc19e71f47995afd85ac80df507714cb5ab6dddcc7dbde1ccf50900846ab5de8252640c42b6a10b6c2431a65e96e407994f8c90f545d9ad0aef6f616793a23ed39d7530bb7d44999008a3ed68448496dea46b4f669be80229d1c5a10c5c0e3ab3ec91eb1440a62b1084dc8e9c5a3473e8dec4b1c61f540bd7c3cf5b545b742287e1a648e08782fcd207eccc107ad891f532b6f90165718944837b6be406e5827dff7a95964f05efd2d56dd6291a3da931623a24f3bac48ca07a4b7d289b69ed0224c4b1c855274f767592712a2146c6ca40d73225367049b294b80765d5bf5d46295f5357a547201ffc961c619248e27db50cfd298987c9d6aa970bed91c82d6be4c1ea2c72df696599b97fd6fbce958009bbec4b273b6d9d0efdc9def953479bd1ed3b1301b2eb7a4b22a68dc73177264732d27dfb3a506613a7c742466e248e590b9cf63c233503e40253898cfb7582f1add18b9a8cee98738b6f7ab8e4fab2bcb1f46fffe29b5139032423a16c74e88104a15e93a742ec932146c1f2f1802c4022a9818b12a4ffdec80b4930f0cd98067ecf8848c28a599a3c2d6073b2ceffda930dd814328cbfa32bbd8ce21f09fa94cfd157a363903789ae5fda7538c7aa7e7d581bdd68d915a4e4cd49525bbad6e3851139b63d78e7b61eee2436f01ea67731f81a407104ae182759fe30ed647649fd45a9fc63d3111086f4b4f5a2495aab10920e207372f0aa50dd73f7afab0cc32f011db511712d600534a9285cd39c6228a4d206193e3ac3eef2add6dcaf1686e54b6f7f92bbea1dafb1e500bf41bd6286dc413a92beee68d4bac9661b54878631d30b9b16bf65f3f9fdca686bd9372063a14b2049"}, @NL80211_ATTR_FRAME_MATCH={0x7b, 0x5b, "eb0599a520997d722de1ae915b3a888ed97feec74d8e4757ff9e13671e397fdca5f98ad0b8d118ee5b381c946e402f9eec6ec36a0e37394dcde15293fc87a471e50a90726a29faa9c1175c5d8445381a9b1dd3f68b7fe311fece741413174aba0fe921a56f30447770e8409de5003928be74e39c7d2c66"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x61, 0x5b, "70335d8ccab58729840c5fe3b36b64f1df9394aeeb35a97ee7af0ff19ed4ac94cf044dd2ad14ed3b277979dce5b1d0d075f756450587e6bfd23056efef261473954dda424fcbd2f2ca54c76c3322d876da3df1b69fb2b7803911442ee3"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x1200}, 0x1, 0x0, 0x0, 0x20000051}, 0x5) r12 = memfd_secret(0x80000) write$P9_RLINK(r12, &(0x7f00000029c0)={0x7, 0x47, 0x2}, 0x7) [ 118.354816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.356791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.357974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.361111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.362886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.430784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.432038] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.437465] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.439867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.441714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.521995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.528975] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.534017] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.539191] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.541698] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.560118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.562303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.575789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.581098] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 118.590689] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 118.596859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 118.598791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 118.601146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.602593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.604415] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 118.608726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.612657] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.618995] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.620044] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.620758] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 118.624167] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 118.646502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.654479] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 118.663369] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.667863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 118.674538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.687057] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.687953] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 118.730065] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.739650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.387724] Bluetooth: hci0: command tx timeout [ 120.515328] Bluetooth: hci1: command tx timeout [ 120.707409] Bluetooth: hci7: command tx timeout [ 120.707437] Bluetooth: hci2: command tx timeout [ 120.707605] Bluetooth: hci3: command tx timeout [ 120.772397] Bluetooth: hci4: command tx timeout [ 120.772944] Bluetooth: hci6: command tx timeout [ 120.836334] Bluetooth: hci5: command tx timeout [ 122.436305] Bluetooth: hci0: command tx timeout [ 122.563440] Bluetooth: hci1: command tx timeout [ 122.755597] Bluetooth: hci3: command tx timeout [ 122.755648] Bluetooth: hci7: command tx timeout [ 122.756108] Bluetooth: hci2: command tx timeout [ 122.819670] Bluetooth: hci6: command tx timeout [ 122.820171] Bluetooth: hci4: command tx timeout [ 122.884411] Bluetooth: hci5: command tx timeout [ 124.485284] Bluetooth: hci0: command tx timeout [ 124.611303] Bluetooth: hci1: command tx timeout [ 124.803490] Bluetooth: hci2: command tx timeout [ 124.804570] Bluetooth: hci7: command tx timeout [ 124.804709] Bluetooth: hci3: command tx timeout [ 124.868281] Bluetooth: hci6: command tx timeout [ 124.868431] Bluetooth: hci4: command tx timeout [ 124.931414] Bluetooth: hci5: command tx timeout [ 126.531627] Bluetooth: hci0: command tx timeout [ 126.659298] Bluetooth: hci1: command tx timeout [ 126.851550] Bluetooth: hci7: command tx timeout [ 126.852187] Bluetooth: hci2: command tx timeout [ 126.853595] Bluetooth: hci3: command tx timeout [ 126.915768] Bluetooth: hci4: command tx timeout [ 126.915964] Bluetooth: hci6: command tx timeout [ 126.979318] Bluetooth: hci5: command tx timeout [ 178.373352] syz-executor.6 (296) used greatest stack depth: 24640 bytes left [ 180.817780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.819694] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.824166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.831591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.835418] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.892957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.900778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.908710] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.909529] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.913557] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.915580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.921966] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.923780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.924909] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.926553] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.928563] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.930882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.937404] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.940752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.941884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.942765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.952695] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.953762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.960388] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.961207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.965715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.967051] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.968681] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.976372] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.977156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.043038] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 181.044908] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 181.046037] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 181.049730] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 181.051578] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 181.095579] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.098543] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.099942] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.109034] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.116515] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.916432] Bluetooth: hci0: command tx timeout [ 183.043710] Bluetooth: hci4: command tx timeout [ 183.043732] Bluetooth: hci5: command tx timeout [ 183.044664] Bluetooth: hci2: command tx timeout [ 183.171352] Bluetooth: hci6: command tx timeout [ 183.171373] Bluetooth: hci7: command tx timeout [ 183.172184] Bluetooth: hci3: command tx timeout [ 183.172814] Bluetooth: hci1: command tx timeout [ 184.963396] Bluetooth: hci0: command tx timeout [ 185.091396] Bluetooth: hci2: command tx timeout [ 185.091901] Bluetooth: hci5: command tx timeout [ 185.092396] Bluetooth: hci4: command tx timeout [ 185.219896] Bluetooth: hci7: command tx timeout [ 185.220488] Bluetooth: hci1: command tx timeout [ 185.220930] Bluetooth: hci3: command tx timeout [ 185.220969] Bluetooth: hci6: command tx timeout [ 187.011591] Bluetooth: hci0: command tx timeout [ 187.139621] Bluetooth: hci4: command tx timeout [ 187.140105] Bluetooth: hci5: command tx timeout [ 187.141488] Bluetooth: hci2: command tx timeout [ 187.267729] Bluetooth: hci3: command tx timeout [ 187.268205] Bluetooth: hci6: command tx timeout [ 187.269775] Bluetooth: hci7: command tx timeout [ 187.270193] Bluetooth: hci1: command tx timeout [ 189.059666] Bluetooth: hci0: command tx timeout [ 189.187667] Bluetooth: hci5: command tx timeout [ 189.188168] Bluetooth: hci4: command tx timeout [ 189.188258] Bluetooth: hci2: command tx timeout [ 189.315478] Bluetooth: hci6: command tx timeout [ 189.315503] Bluetooth: hci3: command tx timeout [ 189.315940] Bluetooth: hci1: command tx timeout [ 189.316875] Bluetooth: hci7: command tx timeout [ 242.979067] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.983990] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.990793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.006549] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.014573] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.126296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.129965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.133678] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.141430] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.146355] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.250672] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.253484] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.258160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.264780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.271196] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.374442] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.380975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.391013] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.399530] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.405739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.412638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.418206] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.449728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.452544] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.461143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.461682] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.490848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.534396] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.564794] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.566996] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.572749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.583073] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.584774] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.591841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.631480] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.688791] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.723166] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.732471] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.785513] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 243.797685] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 245.059405] Bluetooth: hci0: command tx timeout [ 245.187318] Bluetooth: hci1: command tx timeout [ 245.316403] Bluetooth: hci2: command tx timeout [ 245.571339] Bluetooth: hci3: command tx timeout [ 245.636319] Bluetooth: hci4: command tx timeout [ 245.763793] Bluetooth: hci5: command tx timeout [ 245.892265] Bluetooth: hci6: command tx timeout [ 245.955735] Bluetooth: hci7: command tx timeout [ 247.108312] Bluetooth: hci0: command tx timeout [ 247.236278] Bluetooth: hci1: command tx timeout [ 247.364336] Bluetooth: hci2: command tx timeout [ 247.620350] Bluetooth: hci3: command tx timeout [ 247.683329] Bluetooth: hci4: command tx timeout [ 247.811905] Bluetooth: hci5: command tx timeout [ 247.940369] Bluetooth: hci6: command tx timeout [ 248.004293] Bluetooth: hci7: command tx timeout [ 249.156427] Bluetooth: hci0: command tx timeout [ 249.284304] Bluetooth: hci1: command tx timeout [ 249.411317] Bluetooth: hci2: command tx timeout [ 249.668430] Bluetooth: hci3: command tx timeout [ 249.732290] Bluetooth: hci4: command tx timeout [ 249.859940] Bluetooth: hci5: command tx timeout [ 249.987300] Bluetooth: hci6: command tx timeout [ 250.051300] Bluetooth: hci7: command tx timeout [ 251.203303] Bluetooth: hci0: command tx timeout [ 251.332470] Bluetooth: hci1: command tx timeout [ 251.460124] Bluetooth: hci2: command tx timeout [ 251.716321] Bluetooth: hci3: command tx timeout [ 251.779334] Bluetooth: hci4: command tx timeout [ 251.908348] Bluetooth: hci5: command tx timeout [ 252.036376] Bluetooth: hci6: command tx timeout [ 252.100330] Bluetooth: hci7: command tx timeout [ 305.563491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.568838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.571655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.578595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.583834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.819439] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.828777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.830909] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.836659] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.843143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.848948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.854709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.859920] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.882145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.893201] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.001004] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.015962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.030740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.057819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.072879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.214968] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.232575] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.264289] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.273899] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.277748] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.289453] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.296054] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.309757] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.322929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.326875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.330544] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.341884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.355991] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.359853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.386534] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.400396] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.418145] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.441935] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.519716] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.525596] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.651355] Bluetooth: hci0: command tx timeout [ 307.907447] Bluetooth: hci1: command tx timeout [ 307.971501] Bluetooth: hci2: command tx timeout [ 308.163335] Bluetooth: hci3: command tx timeout [ 308.483390] Bluetooth: hci6: command tx timeout [ 308.548776] Bluetooth: hci5: command tx timeout [ 308.548809] Bluetooth: hci4: command tx timeout [ 308.611382] Bluetooth: hci7: command tx timeout [ 309.699889] Bluetooth: hci0: command tx timeout [ 309.956296] Bluetooth: hci1: command tx timeout [ 310.019326] Bluetooth: hci2: command tx timeout [ 310.211415] Bluetooth: hci3: command tx timeout [ 310.531422] Bluetooth: hci6: command tx timeout [ 310.595351] Bluetooth: hci4: command tx timeout [ 310.595429] Bluetooth: hci5: command tx timeout [ 310.659293] Bluetooth: hci7: command tx timeout [ 311.747615] Bluetooth: hci0: command tx timeout [ 312.003489] Bluetooth: hci1: command tx timeout [ 312.067548] Bluetooth: hci2: command tx timeout [ 312.259529] Bluetooth: hci3: command tx timeout [ 312.581323] Bluetooth: hci6: command tx timeout [ 312.643316] Bluetooth: hci4: command tx timeout [ 312.644323] Bluetooth: hci5: command tx timeout [ 312.708647] Bluetooth: hci7: command tx timeout [ 313.796668] Bluetooth: hci0: command tx timeout [ 314.052353] Bluetooth: hci1: command tx timeout [ 314.116499] Bluetooth: hci2: command tx timeout [ 314.307340] Bluetooth: hci3: command tx timeout [ 314.628502] Bluetooth: hci6: command tx timeout [ 314.691317] Bluetooth: hci5: command tx timeout [ 314.691776] Bluetooth: hci4: command tx timeout [ 314.755341] Bluetooth: hci7: command tx timeout [ 367.894509] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.897589] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.900907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.916489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.928817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.090571] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.093096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.095128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.099795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.103823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.242675] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.246272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.270740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.310608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.320664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.330424] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.345986] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.361495] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.375450] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.391406] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.403040] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.417532] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.426488] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.437712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.442290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.445859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.458774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.475967] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.477572] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.490059] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.900797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.914500] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.937032] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.955562] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 368.955669] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.959262] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 368.961125] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 368.961993] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 368.968673] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 368.978558] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 369.987316] Bluetooth: hci0: command tx timeout [ 370.181305] Bluetooth: hci1: command tx timeout [ 370.563594] Bluetooth: hci2: command tx timeout [ 370.564400] Bluetooth: hci4: command tx timeout [ 370.691331] Bluetooth: hci5: command tx timeout [ 370.691906] Bluetooth: hci3: command tx timeout [ 371.011493] Bluetooth: hci6: command tx timeout [ 371.075295] Bluetooth: hci7: command tx timeout [ 372.035614] Bluetooth: hci0: command tx timeout [ 372.227335] Bluetooth: hci1: command tx timeout [ 372.611466] Bluetooth: hci2: command tx timeout [ 372.611950] Bluetooth: hci4: command tx timeout [ 372.739332] Bluetooth: hci5: command tx timeout [ 372.739807] Bluetooth: hci3: command tx timeout [ 373.059331] Bluetooth: hci6: command tx timeout [ 373.123557] Bluetooth: hci7: command tx timeout [ 374.083548] Bluetooth: hci0: command tx timeout [ 374.275454] Bluetooth: hci1: command tx timeout [ 374.659313] Bluetooth: hci4: command tx timeout [ 374.659410] Bluetooth: hci2: command tx timeout [ 374.788248] Bluetooth: hci5: command tx timeout [ 374.788330] Bluetooth: hci3: command tx timeout [ 375.107294] Bluetooth: hci6: command tx timeout [ 375.172244] Bluetooth: hci7: command tx timeout [ 376.131756] Bluetooth: hci0: command tx timeout [ 376.323297] Bluetooth: hci1: command tx timeout [ 376.707572] Bluetooth: hci2: command tx timeout [ 376.707655] Bluetooth: hci4: command tx timeout [ 376.835868] Bluetooth: hci3: command tx timeout [ 376.836381] Bluetooth: hci5: command tx timeout [ 377.155505] Bluetooth: hci6: command tx timeout [ 377.219418] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:35:06 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81353e1d RDI=fffffbfff0b83a38 RBP=ffffffff85c1d1c0 RSP=ffff88806ce08990 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6bd R11=0000000000021234 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88806ce08a78 RIP=ffffffff8151b1d2 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f513d9788e0 CR3=000000001c75d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888030318001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888030317401 RSI=ffff888030317400 RDI=ffff888030317418 RBP=ffff888030317460 RSP=ffff888030317348 R8 =ffffffff867c2994 R9 =ffff888030317448 R10=000000000003b6bd R11=0000000000006bfa R12=ffff888030317468 R13=ffff888030317450 R14=ffff888030317408 R15=ffff888030317408 RIP=ffffffff813548f8 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fccf7d34028 CR3=000000002aeb1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000