Warning: Permanently added '[localhost]:6032' (ECDSA) to the list of known hosts. 2025/06/11 04:23:10 fuzzer started 2025/06/11 04:23:10 dialing manager at localhost:37235 syzkaller login: [ 115.476311] cgroup: Unknown subsys name 'net' [ 115.612032] cgroup: Unknown subsys name 'cpuset' [ 115.661587] cgroup: Unknown subsys name 'rlimit' 2025/06/11 04:23:30 syscalls: 203 2025/06/11 04:23:30 code coverage: enabled 2025/06/11 04:23:30 comparison tracing: enabled 2025/06/11 04:23:30 extra coverage: enabled 2025/06/11 04:23:30 setuid sandbox: enabled 2025/06/11 04:23:30 namespace sandbox: enabled 2025/06/11 04:23:30 Android sandbox: enabled 2025/06/11 04:23:30 fault injection: enabled 2025/06/11 04:23:30 leak checking: enabled 2025/06/11 04:23:30 net packet injection: enabled 2025/06/11 04:23:30 net device setup: enabled 2025/06/11 04:23:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/11 04:23:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/11 04:23:30 USB emulation: enabled 2025/06/11 04:23:30 hci packet injection: enabled 2025/06/11 04:23:30 wifi device emulation: enabled 2025/06/11 04:23:30 802.15.4 emulation: enabled 2025/06/11 04:23:30 fetching corpus: 0, signal 0/0 (executing program) 2025/06/11 04:23:32 starting 8 fuzzer processes 04:23:32 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x11e400, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x890}, 0x4000004) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f00000002c0)=""/15, 0xf}], 0x2}, 0x2140) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c005) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa0, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfff}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x401}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x44e0}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000001}, 0x8080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa1c, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x4004020) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x5, 0xeb, 0x32, @mcast1, @empty, 0x7800, 0x8, 0x6, 0x4}}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40), 0x20041, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r3) r4 = memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000d00)={&(0x7f0000000bc0), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x50}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000880}, 0x4000010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e40)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000e80)) 04:23:32 executing program 0: sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x27}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40005}, 0x1) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1000}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4020844}, 0x40011) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xc8, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffe}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb8bc}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x0, 0x7, 0x5f6, 0x6]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ca}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x189}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7ff}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x4, 0x3, 0x4, 0x1, 0x6, 0x1, 0x8]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x8000) pipe(&(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x53}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) recvmsg$unix(r2, &(0x7f0000000980)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/201, 0xc9}], 0x1, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x2000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b00), 0x200000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x1000) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c40), 0xe0100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r8, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0xc}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x801) recvmsg$unix(r3, &(0x7f00000023c0)={&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f0000002240)=[{&(0x7f0000000e40)=""/121, 0x79}, {&(0x7f0000000ec0)=""/232, 0xe8}, {&(0x7f0000000fc0)=""/254, 0xfe}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/104, 0x68}, {&(0x7f0000002140)=""/241, 0xf1}], 0x6, &(0x7f00000022c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r10, &(0x7f0000002780)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002440)={0x2d4, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4fab3ca6}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0xaebb}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x101}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x81}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x23c3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffff00}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0xf37}, {0x8, 0xb, 0x101}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0xffffff00}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x10000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0xfb78}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x31a}, {0x8, 0xb, 0x8}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r10, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x4040) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002a40)={&(0x7f0000002940)={0x100, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x11}, 0x4004010) 04:23:32 executing program 2: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa, 0x10, 0xffffffffffffffff, 0x10000000) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4004000) remap_file_pages(&(0x7f0000477000/0x3000)=nil, 0x3000, 0x0, 0x5, 0x10) prctl$PR_SET_MM(0x23, 0x8, &(0x7f00005b8000/0x2000)=nil) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x404040, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x22c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1271}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) socketpair(0x1a, 0xa, 0x37, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80420}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) r4 = io_uring_setup(0x5, &(0x7f0000000540)={0x0, 0x7ca5, 0x10, 0x2, 0x111, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000898000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r4, 0x10000000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x24800, 0x0) syz_io_uring_setup(0x596d, &(0x7f0000000700)={0x0, 0xbf49, 0x20, 0x0, 0x1d9, 0x0, r5}, &(0x7f0000e07000/0x1000)=nil, &(0x7f000078e000/0x2000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) r6 = accept(r3, &(0x7f0000000840)=@can, &(0x7f00000008c0)=0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r6) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x400, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) mmap$IORING_OFF_SQES(&(0x7f0000ada000/0x3000)=nil, 0x3000, 0x0, 0x10010, r4, 0x10000000) 04:23:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000100)=0x80) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x601c0, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x9, 0x2, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x8, 0x7800, 0x7, 0x9}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '],)(./-\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', r6, 0x2f, 0x4, 0x3f, 0x4, 0x14, @dev={0xfe, 0x80, '\x00', 0x2a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7, 0x9, 0x6}}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ':\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000080) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6tnl0\x00', r6, 0x4, 0x1, 0xf5, 0x9, 0x20, @private0, @remote, 0x40, 0x7, 0x3ff, 0xd93}}) r9 = memfd_secret(0x80000) r10 = accept(r1, 0x0, &(0x7f0000000940)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x90, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x149}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x43}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r11}, {0x8, 0x1, r4}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4015}, 0x4040014) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x81) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8000) [ 136.518227] audit: type=1400 audit(1749615812.191:7): avc: denied { execmem } for pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:23:32 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000005380), 0x2000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) read$usbmon(r0, &(0x7f00000053c0)=""/20, 0x14) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000005500)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x210248}, 0xc, &(0x7f00000054c0)={&(0x7f0000005440)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004840}, 0x4080) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000005580), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000056c0)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005680)={&(0x7f00000055c0)={0xa0, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0xa0}}, 0x8080) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x400) socketpair(0x29, 0x5, 0x4, &(0x7f0000005700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000005800)={&(0x7f0000005740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000057c0)={&(0x7f0000005780)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400000c}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000005900)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000058c0)={&(0x7f0000005880)={0x18, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x48000) prctl$PR_GET_NAME(0x10, &(0x7f0000005940)=""/6) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000059c0), r3) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000005bc0)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005b80)={&(0x7f0000005a00)={0x14c, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}]}, 0x14c}}, 0x8000) prctl$PR_GET_NAME(0x10, &(0x7f0000005c00)=""/255) prctl$PR_GET_NAME(0x10, &(0x7f0000005d00)=""/104) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000005e40)={&(0x7f0000005d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000005dc0)=""/113, 0x71}) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000006000)={&(0x7f0000005e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005ec0)={0xe4, r1, 0x276e04ad477615d6, 0x70bd29, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xe4}}, 0x40800) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000006100)={&(0x7f0000006040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000060c0)={&(0x7f0000006080)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000006240)={&(0x7f0000006140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000006200)={&(0x7f0000006180)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x93}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xaa}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 04:23:32 executing program 5: ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000), &(0x7f0000000040)=""/180, 0xb4}) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/133, 0x85}) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd0, r0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8001}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1341}, {0x6, 0x11, 0x1da}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}, {0x8}, {0x5, 0x14, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000540)={&(0x7f0000000480), &(0x7f00000004c0)=""/122, 0x7a}) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x24c, r0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f}, {0x6, 0x11, 0x3ce}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc2}, {0x6, 0x11, 0xfff7}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x4eea}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffff5d}, {0x6, 0x11, 0x1000}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x40}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x6}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1f}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x8}, {0x5}}]}, 0x24c}}, 0x20040845) read$usbmon(0xffffffffffffffff, &(0x7f00000008c0)=""/4, 0x4) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000009c0)={&(0x7f0000000900), &(0x7f0000000940)=""/85, 0x55}) r1 = syz_open_dev$vcsa(&(0x7f0000000a00), 0xf7, 0x40800) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r1) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x60}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r4, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x6b}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12c9}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1362}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd6f}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8001) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4009}, 0x80) 04:23:32 executing program 6: socketpair(0x1d, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x3}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40004480) msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580), 0x101041, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44040}, 0x4) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x200000c4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r3) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x94, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xcc, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x80000001}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8583}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x176d0f69}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0x9}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x2c000041}, 0x40c0) mmap$usbmon(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9, 0x4012011, r1, 0xeb) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b80), 0x288000, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x205c004}, 0x40) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffa, 0x44}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001080), 0x10100, 0x0) mmap$binder(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0xb9) 04:23:32 executing program 7: sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x8011) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40090}, 0x8000) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x110000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1d, 0x34, @random="3b269a501f66e8bfe66ec4a7b1a3dc028d61af643d10aa4350"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a2740b755686f07170a90bfce9"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c4b88f291e"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40890) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x13}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x40080) r4 = memfd_secret(0x80000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, r3, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8c9}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x112b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x164}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0xdb71215436ede7ff}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x80) pipe(&(0x7f0000000c40)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r4) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r7, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0xf}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x26008000}, 0x4000000) socketpair(0x26, 0x1, 0x200, &(0x7f0000000dc0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000ec0)={'syztnl0\x00', &(0x7f0000000e40)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xae, 0x7ff, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x750, 0x2, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000f00)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000010c0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x70, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40044) [ 137.908281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.913289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.917240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.926309] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.931135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.933459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.937299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.953265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.973048] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.977577] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.978209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.982323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.998276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.008600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.038037] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.049697] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.056530] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.074242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.084509] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.098365] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.109444] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.116716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.118486] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 138.118701] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 138.125646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.125908] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 138.134370] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.137696] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 138.146644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 138.152843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 138.157981] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.160588] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 138.168502] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 138.172017] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 138.177213] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.183595] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 138.187341] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 138.192490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 138.219392] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 138.234471] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.989967] Bluetooth: hci0: command tx timeout [ 140.051981] Bluetooth: hci1: command tx timeout [ 140.114892] Bluetooth: hci2: command tx timeout [ 140.244050] Bluetooth: hci7: command tx timeout [ 140.245114] Bluetooth: hci4: command tx timeout [ 140.246148] Bluetooth: hci5: command tx timeout [ 140.247128] Bluetooth: hci3: command tx timeout [ 140.307062] Bluetooth: hci6: command tx timeout [ 142.035866] Bluetooth: hci0: command tx timeout [ 142.099127] Bluetooth: hci1: command tx timeout [ 142.162822] Bluetooth: hci2: command tx timeout [ 142.291054] Bluetooth: hci3: command tx timeout [ 142.291510] Bluetooth: hci4: command tx timeout [ 142.292035] Bluetooth: hci7: command tx timeout [ 142.292535] Bluetooth: hci5: command tx timeout [ 142.354994] Bluetooth: hci6: command tx timeout [ 144.082829] Bluetooth: hci0: command tx timeout [ 144.146846] Bluetooth: hci1: command tx timeout [ 144.211039] Bluetooth: hci2: command tx timeout [ 144.338942] Bluetooth: hci5: command tx timeout [ 144.339418] Bluetooth: hci7: command tx timeout [ 144.340258] Bluetooth: hci4: command tx timeout [ 144.340677] Bluetooth: hci3: command tx timeout [ 144.402809] Bluetooth: hci6: command tx timeout [ 146.131472] Bluetooth: hci0: command tx timeout [ 146.195035] Bluetooth: hci1: command tx timeout [ 146.259276] Bluetooth: hci2: command tx timeout [ 146.387001] Bluetooth: hci5: command tx timeout [ 146.387499] Bluetooth: hci3: command tx timeout [ 146.387852] Bluetooth: hci4: command tx timeout [ 146.387992] Bluetooth: hci7: command tx timeout [ 146.453050] Bluetooth: hci6: command tx timeout [ 200.683677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.692999] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.696544] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.705126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.715668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.752959] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.770855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.774169] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.783503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.785179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.788425] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.824073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.827081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.841564] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.848535] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.906413] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.928474] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.935655] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.951309] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.960336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.980370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.988517] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.998674] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.014374] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.020287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.122275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 201.124954] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 201.149895] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 201.158997] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 201.159233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 201.168477] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 201.191350] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 201.192427] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 201.195499] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 201.222196] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 201.319061] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.342279] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.376995] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 201.414443] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 201.424465] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 202.771105] Bluetooth: hci0: command tx timeout [ 202.836759] Bluetooth: hci1: command tx timeout [ 202.963045] Bluetooth: hci2: command tx timeout [ 203.026821] Bluetooth: hci3: command tx timeout [ 203.098774] Bluetooth: hci4: command tx timeout [ 203.282923] Bluetooth: hci7: command tx timeout [ 203.346884] Bluetooth: hci5: command tx timeout [ 203.538951] Bluetooth: hci6: command tx timeout [ 204.821898] Bluetooth: hci0: command tx timeout [ 204.884617] Bluetooth: hci1: command tx timeout [ 205.010904] Bluetooth: hci2: command tx timeout [ 205.075400] Bluetooth: hci3: command tx timeout [ 205.139674] Bluetooth: hci4: command tx timeout [ 205.331882] Bluetooth: hci7: command tx timeout [ 205.394820] Bluetooth: hci5: command tx timeout [ 205.586799] Bluetooth: hci6: command tx timeout [ 206.866821] Bluetooth: hci0: command tx timeout [ 206.930941] Bluetooth: hci1: command tx timeout [ 207.059797] Bluetooth: hci2: command tx timeout [ 207.122958] Bluetooth: hci3: command tx timeout [ 207.187617] Bluetooth: hci4: command tx timeout [ 207.378791] Bluetooth: hci7: command tx timeout [ 207.444949] Bluetooth: hci5: command tx timeout [ 207.635751] Bluetooth: hci6: command tx timeout [ 208.915893] Bluetooth: hci0: command tx timeout [ 208.978873] Bluetooth: hci1: command tx timeout [ 209.107806] Bluetooth: hci2: command tx timeout [ 209.171280] Bluetooth: hci3: command tx timeout [ 209.236887] Bluetooth: hci4: command tx timeout [ 209.426784] Bluetooth: hci7: command tx timeout [ 209.491841] Bluetooth: hci5: command tx timeout [ 209.684035] Bluetooth: hci6: command tx timeout [ 262.763275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.782447] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.785792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.800304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.806273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.905910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.909497] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.917307] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.921474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.931342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.933491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.934970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.937540] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.965353] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.973229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.135445] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.139202] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.157536] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.175067] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.178014] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.183018] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.227632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.231968] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.233808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.246617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.256707] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.265302] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.283345] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.284874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.299352] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.304502] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.310947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.315665] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 263.331817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.344355] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.348580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.368297] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.379426] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.384196] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.391158] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 264.850841] Bluetooth: hci0: command tx timeout [ 264.979084] Bluetooth: hci2: command tx timeout [ 265.043000] Bluetooth: hci1: command tx timeout [ 265.364779] Bluetooth: hci3: command tx timeout [ 265.426806] Bluetooth: hci6: command tx timeout [ 265.490839] Bluetooth: hci7: command tx timeout [ 265.491531] Bluetooth: hci4: command tx timeout [ 266.004100] Bluetooth: hci5: command tx timeout [ 266.898947] Bluetooth: hci0: command tx timeout [ 267.026773] Bluetooth: hci2: command tx timeout [ 267.091060] Bluetooth: hci1: command tx timeout [ 267.412819] Bluetooth: hci3: command tx timeout [ 267.474974] Bluetooth: hci6: command tx timeout [ 267.541817] Bluetooth: hci4: command tx timeout [ 267.542311] Bluetooth: hci7: command tx timeout [ 268.052788] Bluetooth: hci5: command tx timeout [ 268.946946] Bluetooth: hci0: command tx timeout [ 269.076262] Bluetooth: hci2: command tx timeout [ 269.139439] Bluetooth: hci1: command tx timeout [ 269.460067] Bluetooth: hci3: command tx timeout [ 269.523975] Bluetooth: hci6: command tx timeout [ 269.587834] Bluetooth: hci7: command tx timeout [ 269.588342] Bluetooth: hci4: command tx timeout [ 270.098815] Bluetooth: hci5: command tx timeout [ 270.995949] Bluetooth: hci0: command tx timeout [ 271.124914] Bluetooth: hci2: command tx timeout [ 271.186983] Bluetooth: hci1: command tx timeout [ 271.506948] Bluetooth: hci3: command tx timeout [ 271.571663] Bluetooth: hci6: command tx timeout [ 271.636988] Bluetooth: hci4: command tx timeout [ 271.637478] Bluetooth: hci7: command tx timeout [ 272.147009] Bluetooth: hci5: command tx timeout [ 325.031629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.035252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.037904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.049047] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.054835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.235279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.238397] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.241632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.263074] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.269507] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.291364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.296703] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.299312] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.312965] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.322383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.421296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.433534] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.457484] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.468538] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.501313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.539235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.585265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.591148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.595284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.602191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.603576] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.610257] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.635351] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.636300] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.641214] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 325.666808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 325.679342] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 325.685149] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 325.724017] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 325.737116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 325.757329] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 325.767418] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 325.773053] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 325.794467] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 325.798029] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 327.122858] Bluetooth: hci0: command tx timeout [ 327.314826] Bluetooth: hci1: command tx timeout [ 327.378848] Bluetooth: hci2: command tx timeout [ 327.570976] Bluetooth: hci3: command tx timeout [ 327.764006] Bluetooth: hci5: command tx timeout [ 327.764034] Bluetooth: hci4: command tx timeout [ 327.891109] Bluetooth: hci7: command tx timeout [ 327.891137] Bluetooth: hci6: command tx timeout [ 329.170801] Bluetooth: hci0: command tx timeout [ 329.364030] Bluetooth: hci1: command tx timeout [ 329.427043] Bluetooth: hci2: command tx timeout [ 329.618838] Bluetooth: hci3: command tx timeout [ 329.810991] Bluetooth: hci4: command tx timeout [ 329.811487] Bluetooth: hci5: command tx timeout [ 329.938836] Bluetooth: hci7: command tx timeout [ 329.938901] Bluetooth: hci6: command tx timeout [ 331.220751] Bluetooth: hci0: command tx timeout [ 331.410802] Bluetooth: hci1: command tx timeout [ 331.474823] Bluetooth: hci2: command tx timeout [ 331.668858] Bluetooth: hci3: command tx timeout [ 331.858933] Bluetooth: hci5: command tx timeout [ 331.860790] Bluetooth: hci4: command tx timeout [ 331.986792] Bluetooth: hci7: command tx timeout [ 331.987911] Bluetooth: hci6: command tx timeout [ 333.267080] Bluetooth: hci0: command tx timeout [ 333.458837] Bluetooth: hci1: command tx timeout [ 333.522786] Bluetooth: hci2: command tx timeout [ 333.714803] Bluetooth: hci3: command tx timeout [ 333.908084] Bluetooth: hci4: command tx timeout [ 333.908555] Bluetooth: hci5: command tx timeout [ 334.034806] Bluetooth: hci6: command tx timeout [ 334.035006] Bluetooth: hci7: command tx timeout [ 387.749345] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 387.753238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 387.756433] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 387.768496] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 387.776849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 387.822870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 387.825357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.831540] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.837324] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.840567] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.161585] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.188171] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.199526] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.216639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.238341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.248475] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.251464] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.252940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.259350] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.290944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.293444] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.297387] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.302514] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.369316] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.402330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.403847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.442653] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 388.446354] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 388.461204] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 388.464495] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 388.521572] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.527300] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.551477] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.591944] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.609672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.703842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 388.724284] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 388.775401] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 388.861623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 388.903264] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 389.843650] Bluetooth: hci0: command tx timeout [ 389.907037] Bluetooth: hci1: command tx timeout [ 390.354866] Bluetooth: hci2: command tx timeout [ 390.546852] Bluetooth: hci3: command tx timeout [ 390.611175] Bluetooth: hci4: command tx timeout [ 390.738892] Bluetooth: hci5: command tx timeout [ 390.738968] Bluetooth: hci6: command tx timeout [ 391.058825] Bluetooth: hci7: command tx timeout [ 391.890848] Bluetooth: hci0: command tx timeout [ 391.955088] Bluetooth: hci1: command tx timeout [ 392.403113] Bluetooth: hci2: command tx timeout [ 392.596759] Bluetooth: hci3: command tx timeout [ 392.658836] Bluetooth: hci4: command tx timeout [ 392.786816] Bluetooth: hci6: command tx timeout [ 392.787231] Bluetooth: hci5: command tx timeout [ 393.108957] Bluetooth: hci7: command tx timeout [ 393.940029] Bluetooth: hci0: command tx timeout [ 394.002872] Bluetooth: hci1: command tx timeout [ 394.450799] Bluetooth: hci2: command tx timeout [ 394.642926] Bluetooth: hci3: command tx timeout [ 394.707804] Bluetooth: hci4: command tx timeout [ 394.834855] Bluetooth: hci5: command tx timeout [ 394.835338] Bluetooth: hci6: command tx timeout [ 395.155135] Bluetooth: hci7: command tx timeout [ 395.986978] Bluetooth: hci0: command tx timeout [ 396.050795] Bluetooth: hci1: command tx timeout [ 396.499951] Bluetooth: hci2: command tx timeout [ 396.691799] Bluetooth: hci3: command tx timeout [ 396.754939] Bluetooth: hci4: command tx timeout [ 396.882802] Bluetooth: hci6: command tx timeout [ 396.884936] Bluetooth: hci5: command tx timeout [ 397.202930] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 04:28:39 Registers: info registers vcpu 0 RAX=00000000df10c6e7 RBX=000000002c4c86ae RCX=0000000089cd819c RDX=000000000000000b RSI=00000000b9b94c37 RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88806ce08b48 R8 =00000000a8a32651 R9 =00000000000c86ae R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff88806ce08bb0 R15=000000000000000b RIP=ffffffff825d92d1 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561a000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa8570e5260 CR3=000000000e527000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff812d9782 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888033b87801 RSI=ffff888033b878e0 RDI=ffff888033b87940 RBP=ffff888033b87940 RSP=ffff888033b87828 R8 =ffffffff867c1666 R9 =ffff888033b87928 R10=000000000003b71d R11=0000000000006bd3 R12=ffff888033b87948 R13=ffff888033b87930 R14=ffff888033b878e8 R15=ffff888033b878e8 RIP=ffffffff81354820 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571a000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff75c1d839 CR3=00000000343a2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000