Warning: Permanently added '[localhost]:25319' (ECDSA) to the list of known hosts. 2025/06/14 14:20:39 fuzzer started 2025/06/14 14:20:40 dialing manager at localhost:42061 syzkaller login: [ 109.755467] cgroup: Unknown subsys name 'net' [ 109.922112] cgroup: Unknown subsys name 'cpuset' [ 109.963382] cgroup: Unknown subsys name 'rlimit' 2025/06/14 14:21:06 syscalls: 214 2025/06/14 14:21:06 code coverage: enabled 2025/06/14 14:21:06 comparison tracing: enabled 2025/06/14 14:21:06 extra coverage: enabled 2025/06/14 14:21:06 setuid sandbox: enabled 2025/06/14 14:21:06 namespace sandbox: enabled 2025/06/14 14:21:06 Android sandbox: enabled 2025/06/14 14:21:06 fault injection: enabled 2025/06/14 14:21:06 leak checking: enabled 2025/06/14 14:21:06 net packet injection: enabled 2025/06/14 14:21:06 net device setup: enabled 2025/06/14 14:21:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/14 14:21:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/14 14:21:06 USB emulation: enabled 2025/06/14 14:21:06 hci packet injection: enabled 2025/06/14 14:21:06 wifi device emulation: enabled 2025/06/14 14:21:06 802.15.4 emulation: enabled 2025/06/14 14:21:06 fetching corpus: 0, signal 0/0 (executing program) 2025/06/14 14:21:08 starting 8 fuzzer processes 14:21:08 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r0, 0x208, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x50}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x811}, 0x480d1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x40880) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xadee}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x400}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'ipvlan0\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080000}, 0x8004800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x40}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x4000040) bind$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x6, r4, 0x1, 0x1f, 0x6, @multicast}, 0x14) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r3, 0x613, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffffffff, 0x18}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x40}, @NL80211_ATTR_IE={0x14, 0x2a, [@random_vendor={0xdd, 0xe, "f726e6f5286d28b982798dadbb44"}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x58}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4e}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x8880) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x4000044) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r6, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x3f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000001) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r7) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000d80)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x96e7, 0x78}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48001) 14:21:08 executing program 0: r0 = socket$inet(0x2, 0xa, 0x3a) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x1}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x1a, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7f}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7f}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3f}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}]}, 0x3c}}, 0x404c000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x51) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, 0x0, 0x10, 0x80000000, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x8}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4000840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r3, 0x400, 0x3ff, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xff}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14, 0x80000) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r3, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r6 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000780)={'syztnl2\x00', r5, 0x8000, 0x80, 0x4, 0x1, {{0xd, 0x4, 0x0, 0x29, 0x34, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast2, @local, {[@noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x30, 0x0, 0x3, [0xfffffffb, 0x1f, 0xfccb, 0xfffffffa, 0x7]}]}}}}}) accept$packet(r4, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000940)={'erspan0\x00', &(0x7f00000008c0)={'gre0\x00', r5, 0x8000, 0x40, 0x6, 0x56f, {{0xd, 0x4, 0x1, 0x4, 0x34, 0x68, 0x0, 0x3, 0x2f, 0x0, @remote, @private=0xa010102, {[@rr={0x7, 0x1f, 0x95, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2, @empty, @rand_addr=0x64010100, @broadcast, @local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) getsockname$packet(r4, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000a40)={'syztnl0\x00', r5, 0x50, 0x20, 0x99d8, 0xc1, {{0x8, 0x4, 0x0, 0x23, 0x20, 0x64, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @empty, {[@generic={0x83, 0xc, "b20d528e83bc860a837f"}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001700)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000000cc0)={0x9d0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe07}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x23f}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8, 0xff, 0x7, 0x7}, {0xaf, 0x1f, 0x1, 0x100}, {0x7f, 0x0, 0x1, 0x5}, {0x1, 0x2, 0x1f, 0xfffffff7}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x20c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff81}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x58}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xec6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r11}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r13}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x24}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xed}}}]}}, {{0x8, 0x1, r5}, {0x4}}, {{0x8, 0x1, r5}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4c1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x9d0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 14:21:08 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x12e, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x52}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa44}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf9c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x96d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x195}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x69b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4fc}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x2000040) r2 = semget(0x3, 0x0, 0x200) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000180)={{0x1, 0xee01, 0xee00, 0xee01, 0xee00, 0xe0, 0x61}, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x401}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x40800) semctl$GETVAL(r2, 0x4, 0xc, &(0x7f0000000300)=""/166) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xc0, r4, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c1}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}], @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xef}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x90}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x100}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x200}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x3, 0x0, 0x0, {0x3, 0xff, 0x0, 0x1f, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x7, 0x38}}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8040}, 0x80) syz_genetlink_get_family_id$team(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xdfc257b3de364a7c}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}]}, 0x64}, 0x1, 0x0, 0x0, 0x28ba462b0cb853c9}, 0x81) semctl$GETVAL(r2, 0x1, 0xc, &(0x7f0000000700)=""/142) r5 = semget$private(0x0, 0x4, 0xb2) semctl$GETPID(r5, 0x0, 0xb, &(0x7f00000007c0)=""/65) r6 = semget$private(0x0, 0x1, 0x84) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000000840)=""/137) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r1) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0xc041) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000a80)=""/141) 14:21:08 executing program 3: r0 = semget$private(0x0, 0x4, 0x3aa) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000000)=""/194) r1 = semget$private(0x0, 0x3, 0x400) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000100)=""/251) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x8759, 0x0, 0x3, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x68, 0x0, 0x1f, 0x2f, 0x0, @private=0xa010101, @broadcast, {[@ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @private, @local}, &(0x7f0000000340)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @local, @loopback}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f00000004c0)={0x594, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x689b1875}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1, 0x9, 0x10001}, {0x3100, 0x9, 0x4, 0x800}, {0x1f, 0x98, 0x7f, 0x81}, {0x200, 0x8, 0xff, 0x1f}, {0x0, 0x1, 0x4, 0xfffffffe}, {0x68, 0x9d, 0xfd, 0x3}, {0x2, 0x1, 0x5, 0x1c6}, {0x6, 0x6, 0x88, 0x35e}, {0x5, 0xa, 0x0, 0x8001}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x517d}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7f, 0x2, 0x6, 0x8}, {0x7bda, 0x8, 0x4, 0xffff}, {0x81, 0x80, 0x2, 0x3}, {0x747c, 0x2, 0x6, 0x4}, {0xf20, 0x7, 0x73, 0x8}, {0x3, 0x20, 0x1, 0x8001}, {0x3, 0xc, 0x3f, 0x1}]}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x594}}, 0x20004800) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000b00)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) add_key$user(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x1}, &(0x7f0000000bc0)="31a86ef9c195148017ef", 0xa, 0x0) r8 = semget(0x2, 0x3, 0x2) semctl$SEM_STAT_ANY(r8, 0x4, 0x14, &(0x7f0000000c00)=""/127) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x118, r9, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x30}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xe9, 0x2a, [@preq={0x82, 0x57, @ext={{0x0, 0x1}, 0x6, 0x9, 0x8, @broadcast, 0xfffeffff, @device_a, 0xe2b, 0x7, 0x5, [{{}, @device_a, 0x55f}, {{0x1}, @device_b, 0xd59}, {{0x1, 0x0, 0x1}, @device_b, 0x8}, {{0x1, 0x0, 0x1}, @broadcast, 0x7}, {{0x0, 0x0, 0x1}, @device_b, 0x50e}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x2, @device_a, 0xc923, "", 0x9, 0x8, @device_b, 0x40}}, @preq={0x82, 0x36, @ext={{0x0, 0x1, 0x1}, 0x0, 0x3f, 0x4, @device_a, 0x1, @device_b, 0x4, 0x2, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0x3}]}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1f, 0x21}}, @ht={0x2d, 0x1a, {0x800, 0x2, 0x4, 0x0, {0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x381b, 0x8}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x2, 0x2c, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x3, 0x1}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x24008054}, 0x20088855) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'batadv_slave_0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000ec0)="74c6457cc68e3a7b88fbfbc3de9007d3201f65ed3e32fe2c28e88c85988f5264f3d5912dbef96a796488a44090e82085f17106f264446fbb0fb30d3086bfbf939beaccf60e4fdc311b08b2012f7eb5961d7c3793477161f51e07f90875c276be0a158f930ff83dc41629c6eecad56d6e1a5237bd6685446f7de18257ea3a56bad602bf24b5a334304688d5ea37245b5edaa43ce5fa0869bce015593179bdb9bc2cdbd368f67d84ec5494daf51a5107b33e43406ce432559492912c5c6eba0380fe82d48400fa7d6923144c", 0xcb, 0x8000, &(0x7f0000001000)={0x11, 0x1a, r10, 0x1, 0x1, 0x6, @local}, 0x14) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000001080)="a5439b4ed80deb76769106112eeef2592b313d1a5a0745ae4819fc63096477d753e1b80176df813e0f1d5c15fdb94f44fcba16c70cdcd075427682c498505dbb80e32b0e1a11e5f73381d354ba2a0ad9575358a6fd90bd316e361c39de0b6754d52683cfc4d398e5f15c5d633402857ce20c99f0144ee665c86338237bd6b6b2d27ff6022b9f785d84fdfe38df68662572a30c50c79e76c5f2bdd17fc19421d63c1fe360c0dd660bbe802720a4fa09c42b7d87c48310859f7a547641374b4993730098251f0e4deb7f2215dc1bbbd353b9db0f12f9c0466885c968a4253be92cb1c8ed706699ce1f3f44e94b825c52fa6e64da5e05e716edb3ed29825e26ef2e0e7ea448728a009ea288e13cb741cf92607732ef5b73a9d18f3d83a9916925b5cda953b656402cbe45d7a5d04fbd107bd87ec847cd13c08d07da2a98e9ef2ef43dd4912c6e1e53cb425d219a271be1dd411e3fa3abc376e4ae077e3d279aac861690e9241ac3d539f8fd7197c1d9072b32662d56f0e4388523245a8a8c1c8f0b15715efee3e9e01423c1ceb287037bf643baa07cf39da56bc1c86cba48927697ac3162a0ecb26b6dd3429a029aca472205bbd5797d3c14fa532fe11c3eacf3113aeef346cf99a019ae72923a586011385e496d063f72450a520467855afc3d2a3df332cae8fb7f6a1e28fd99eaad11d363d6244c4a0bd6b31a47ada62b98b583732c1d978ae0ba7fe3307115d7f301e54860855787b6ca6d82d5dd75ce486e2b011a7bb2eede482ed18abbedcda6b6d6e2956f6a7be0831e4ab4e9f9dce111a3a39c23cb05fe9814881f2a7e70f310df16f11f365fe849274e02a46c2cf15a8721dd6d17b19639ec76b419ad2b19f4d8b753ab442b5f721e53f4607afb38b15a0ceb67a436722248a27f395843db618bc62b386bdab45e238aa6866603e5befbda6fc9ba8dd994d8ec951d26e4526bceea05d75f30a9e3d9a4ef7b780e021e1c49898a994d15210656b193151fc428d61ed4df0795b5ff697ce7960d100e13e4b7544b98a5b8cfca07503d47eec022b0cd4a44fa685fc17228efa7bf2d0c834ef24736e429b1179433426752a0355de100faf1a1a8107f34d45971a861218775e5e085a565d4a2499098b1f931a19b2707112c74733446cdf73a2ee029b6d3689fd006d6034900c36334ff6c562edb7f077efa28b31ceb4b02b1a189a55f211e5dba3a92c06087ebaf303e5baefb83bbff53cdc88b5b67c82afa5daa1750cec2810b090185571eb7f5f9c5b0370cb48ad8d53335b7f6ff2a22cd18224772d09f605758a6892e7fa181ab41ad82e4c2001a1912747d03bd42e06bd244c191d9825fd429f22205e3dcd615873d52162d518376e07b7e869b452ab13b1f32aecf3d477dd2c3f175c9232b4a991e108b05569f58d13f364b239192730a85da6458cee130ea30acd4cd95b4c3f2428a742f8909c8c0b4213eab6ac3145fa6fe944697cff441c03b48292ea76794c9097359e5be52e7c517abdef44ef71d0bf66fccd91a39db1570f39f64f5f5d3188e3a8a373ec31c50e1d9fc1a0a10da2b050bb24eac251585086d9cce7b74c7797ca6446a7fe311c1488acd09c08da50da41c2785d67a06bba6d3893952e5e82b51cd27b158f17584e20976696bdff2a19248b05727fca13833500b87494c4b88165851e690808db88fd355cea425186d9fdd6ce3de8731c40bb7f034f7f918fe5db66990d50a195452942437d0378f837603703a3ceb1b16eda0ce3ec563097ffb933a956980e8ad77509953c9b1b19c03cf87dfc668135e18ca231026af9aeed8453343d3b98f1ada90ad7184303c0145a991781294620ec94344021b562a7e6a266b656baffbd6753ab1a5153e74a4d81c58113a0aeb8c7de675e5458b3f0bcc181f9a235f3344753265c8549db5012512887c7e74a84502f86d2f5c72627b6062edb3499dc7bd9588a27028ed1d299a041b294a04887795ebd45da27286d7af3f442e9602ef79f0eda0817381c611e12435c6815ec879cee2ccd99d6b4c49d06dc8b7d5222554551f9b0d39ebd6f1e83777afa0ca124d1816bf05fee381c76923986b37ab4fbd1f73801a2e55a42f4e2c78eb9bdf0c9eac704c193095e7c7902b8e490f7021d30cedcbf10bde8651f1cb339bedc12772dcf7f21aff0a5e3481c6d0a1f9d9dd9162d60d047bf9f45c7fb1c89217fdabb220bd6c84860c6e8f1772fa14eff20fe09465886eb357765c2d3a64b2e23d72ed4c3f5ddcf0ae5c8530de73f7690b4921d8a07708594f11197024e700ca0d8fe01842c71a8c47df3f75549b91453f28c983ae633144bc196110a7f9bda78a5d0206beb64ad8bcb7269df3e9da7c31c99f2273df2355bf7e7c467c185e687118606c90529677469a544b6b5b748a9dafa953cafdd6ea7896515483bc74ddeba72ec1f1ed1782016452972da1f692b28b5ad8e6208093a4f025e391a86ee63d66f690a9add3001680f5fd76ddd1dc1164efa723d9b8f923377a0f4083b545b0a855231874143e57679ca943b2c31b7a79b64531c696401778fd11edaaae282a9de948520a05fd94f75112e9429e9c3152fd4744f53cbb158fe49288ad37ff0a09fd8062a34dd2bdd771f068cfcd33caebea3de593278da14b6054b7be395f7d6a61ecfbb09eb7f43ee95fa367bab95a286970c6b34c4ac94925e807cdae25a74df20cc8b07f876e3a83877c0c646ca361d33cb764cb884c618f42f50424e467be4686985925ae94cb4b9565173cbe9cb68d92d159a7332c47bf67d4e8d9e833e3b1a2c1fa5a494df4f6b342360512a4a83cb6636216049f2bfe57b356ecfa1b292046ad44c2f21a7ca06527bf3e71d6b657e3312b2154c727621a333d5e2fa48a33d274fc7723456c08e7d8f759d76a04fe74bf26ae0014484fd420f2538d2ec892cd0537c579c1dee220aa59e15978e7bd5cc86d385aa1c4467d8bd4dd7da9cffe6e935e25d2a3dc1f1021d1bda721de16ea4c53af2b590ec93d2304bd8f5a3dc7e12fff9232ecd5cc262559b7123d0ecc38faff2c98ac50be9b27357fb8640c4827dc4a3a58b8586197e31cbda13587e157953763d6fecb68bdec2eeea2de91ad129a94547ae4d2916eb5ec6e2f2d8996e7fda0b274bfae3c707c65e2494d7ccfcf59ebe5ee136cbd1403662e1911fd675f05f23e1662ae059dacffde906fa6aefb6dad3ad3bcc6c8f2408dd31ec4ba4c9426d09a827197c21c7e8628b08a3622e735c7a268ee1c73ce75a7c7fbdf4edefdcf4be7f0b996c18ba34dd4447e98c6f062d6a8b06467e07c751785051988a178ed85cb6a69e7c273c9193f1ec06e7867099c6e4edb97c1bc5b5cb1efe2987721484c57490a1dec5f93d6176e5076012e5f61910692f6b80cf0e72038091183f8a8c53faaabeae7bad1d381e2af26571e42fffdc090fd62a7ddc5d2b00a62548d1c19064fe79debe9451a1cc7ab320844fbe20a20ad70bcd18dba62b98dc8ce92a5c122f6c54427492cee4ceb998f7692979c58a7b2a90ddfd7371f3c71b7ec9583a536ae383855c5e1b18cd566040a2f10847aad50e63681a9116c82f142e3665f383687344c08bdf764713adc0a41e5ee4b7f2f4ebc2c2733ba44c56617c9f440dcfbceafae8348b74f90fbdf91f09ff8299434e4af4a04c2a95f78ecbb4f2a5278db48db63be93d36111a02f3acf4fbdb078e5e6094cea33078b16d51751aa922bf035763eb1f4fab98c567a156aec1ebf6f9cb61205c557edad82734eeac0540e61a64fe2cad9ff43754e009bde88306d3f01898d0b9214b22dfac96d83208c7b599f85d67bee7cba437c8009d1e8eb42ebaa2c06ae0cbb02c23da6c11c5498aa0e632f76addfd54a49bcf754aafe9137f40fcc926b4ca2e30189f965c87092c43404f77144341557ef8449badec9e0bdfeef0699d038e29e53c15d485c9f67745b7878b9a322b098b34b139e547dfbb4b31a59c6babeaa65949fc473f13e85a1bf3fdd8a2ca88d1504924135e722e026cb0f3b6dc286aee568a2f846f1f6923740f7e2e94df603a139cf1f9bb6bcd88d4b980ea355ff21a67fd65b7ccff5205733e97ca926ca715cb7154cf8fe87723493df52ea0c279cc1b56ba558133a3705af2933779ea8132b312c1b393e4c97fdbec50d305e3ff085498ed7a214cc0dfbd7a8e84b01d4ab54d1ed6842d48dbcfaca35364693d64a2eaa2514f82a1934428cf5c7196641e2d37012b3a7ef7cb52ab1a159e7839ec7f58252cd7a4d52c4d1e29ff9b44d3c1f24c6b0b051840a6f9085c4025a1821f9e807f9e79d47fbe2e70de58cf1831653fe66fff4658c5782719509e9348a31dc12524114e230fa3f1daa785f810fe7adf6502e2f3a0689dade4872e8ea6a04e0ac5276492ecb6bc817d403479033a4383bbbcfa60275017b0ce491dd196bf70770242a11020116f50e1480e417614c6393e15ce19c61bd40a08681a6a9d15985b6211e2d15ed3f636d03438dd632c4762cbd94fd96f70b64cb3a94d87d7c605172a41ee76a6491c473459928cbc432a1022678c9a6f2d17c85e1beb2353635db376aa604baec67b8ac304173e83b8d90d785243b7fe449d8a3df4208cddfbd2e9055e4619d68448a16d0008323c082e13c4483eeab027ec003d26b2d044661ee4c1e8f1e34711086c92f0a9b7e4895dc3d648802b885323ecd913aec3bfe3f18163b0cc011ba240190d4c48096145f7c26ce4a95bee1c231332c770bcacdb2cbae804a93f7ab994d0fe23fe32c1e7f5bcf309b3028f7ac28c606db9d18c915438cfd181703a2dc75d6855d4a803b1b90bbbb38c96680fccaa8286e479ed60cb2f832a5d0d2dbe75e00df630cd3525e6f894862541538cd652f7c3eb0505ce1aadfceb5daee8c8943a4c21d7d26747f028b42c4b99e273c1e100b543d7ecae5d821d882f5989b1228b06f5e67d8ffa791934cb69f03415e9b4b8b822b800fd74f45432a7c4fba1b4f88cd12baa675f2e960bc711da0e9004248dcdd31e263b0082acb1b260278107a98acbbb72ed8f2b5c03a87d2f3c12d0b51ff66512e5493c4866379802dd1ba75cac35953527ce0138929efb4b08d704eb2322eab0335dc55fe799cc4e311a69313d3262b5806edd6915f319b18021b29d3d3e499fc4e186763c917397824d99436ac93cd212e1d13aa8bf17ea45a244e0adf6e92d4b2182ee3fdcf1af960c01a752188ef56858303022662e0d75cb6c5a672c74d76d7320bc1ff9291208001e43a33c4cfe4f4951c65ae75b850ef07962735a036e91d7cf026b654c6bbb41d4a3391ef6c9fcb2e78ba7eb91f5656dcb2af3215073832855eb2b27acc8c42a5cc9f8e19585d4486040cd940c0745a1ee7891ca6903607c7658e7ea4db8131ae7388e205a9f51405b22ea394c118d4f4965b565ff0ed63b4291f673e41be5a79da3b92724e8cbce56a49aa9ef96577aa5e540ccb263310ab70686d8a8d1df517871fb3b5516c86161899826848c761d2a9657f002a72b9f53af5207e650c2989e458dd6e62e2922a56ccecccd0beaa62a7267099cecb6147344fb74c0238c85cb522cf5f05a7342e3ffd2d938efcbb92f447ed2d52bd085032844dba598b70aac5a7e656f46cf533013c5d30ba89cda9c8ea15d1dd99f93822197dc6785a2d65de1b8580217205ae38ab5e7fbb47b87fc573a2d88e42ab7d26ab5f4f8cfa3eb5dc91123ee85997a20ea715068f055aa7d449de3f69b53eee66d3c2b42e4dfd9dc3aaa79acc04b60953a752", 0x1000) [ 137.424396] audit: type=1400 audit(1749910868.363:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:21:08 executing program 4: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x7) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "6f0b6923b2d10e0fd12d67ac3a1c5629"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "94a9d4bc0f93b51e5edfa28a1baec128"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000011}, 0x20048811) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000280)=@hrpcs={0xb, 0x9}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = syz_io_uring_setup(0x4ce7, &(0x7f0000000440)={0x0, 0x45ee, 0x10, 0x1, 0x205}, &(0x7f0000bff000/0x400000)=nil, &(0x7f0000e94000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_user}, {@noextend}], [{@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, 'wlan1\x00'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}}) syz_genetlink_get_family_id$team(&(0x7f0000000600), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004004}, 0x2800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ecd000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x0) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000880), 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000900)=0x14, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xe0, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r8 = syz_open_dev$hidraw(&(0x7f0000000ac0), 0x1200, 0x200) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000b00)=""/216) 14:21:08 executing program 5: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)="0fff0b6fb79675efe5178e2c4dce3e317060c1aaf93a0170f84051d8dc4eaef99a", 0x21) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={0x0, 0x2, 0xffffffffffffffff, 0x3ff, 0x80000}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r0, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1000009, 0x50, 0xffffffffffffffff, 0x0) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000180)=""/78, &(0x7f0000000200)=0x4e) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7af}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1099}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x48020}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x880400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x65}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24008852) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000480)={0x0, 0x2, 0xffffffffffffffff, 0x5, 0x80000}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x100, 0x0, 0x1200, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2ee}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12f2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd94}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x103c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x184}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008004}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x45) r4 = io_uring_setup(0x1e69, &(0x7f0000000740)={0x0, 0x731a, 0x8, 0x0, 0x34f, 0x0, r1}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14:21:08 executing program 6: sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x49}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r0, 0x100, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8a}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x20}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008044}, 0x48040) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb9, 0x53}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d40b8c9e3322a62a610efe9808049036"}, @NL80211_ATTR_PMK={0x14, 0xfe, "07152378756aaa9b2ce1a7982d257eb2"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040894}, 0x41) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r5, 0x2, 0x10000, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3c4}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xba}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1345}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x48080}, 0x24048080) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r7, 0x110, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc34, 0xf}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket(0xb, 0x1, 0x400) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r5, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xb6}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8001}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000}, 0x20000004) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, r7, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x900) r10 = socket(0x11, 0x5, 0x8c00000) sendmsg$GTP_CMD_NEWPDP(r10, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0xa0) 14:21:08 executing program 7: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x40, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="2369c0b08c1f"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffff1e1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="78d008e62813"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @initdev}, &(0x7f00000001c0)=0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x11}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000340)={0x0, 0x2, 0xffffffffffffffff, 0x7fffffff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000380)=0x6, 0x4) connect$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x7, r1, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) r3 = fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x201400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r2, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000540)={0x1f}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) accept$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f0000000a00)={&(0x7f00000006c0)={0x314, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r1}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa5d8}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r6}, {0x104, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x8, 0x3, 0xdd}, {0xfc, 0x5, 0x7f, 0xfffffe01}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x314}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000ac0)=0x14) getpeername$packet(r3, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000000b80)={0x91}, 0x4) [ 138.995437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.002337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.009121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.019210] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.023410] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.079156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.090266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.093434] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.105213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.113476] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.117984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.120113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.136291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.158067] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.167024] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.195109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.207657] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.237176] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.245781] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 139.257737] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 139.261443] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 139.264331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.268598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.274529] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 139.279233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.282508] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.294374] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.298163] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.311297] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.316015] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.337058] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.348114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.351011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.370506] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.400427] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 139.423569] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 139.428050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.430105] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 139.450326] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 139.463353] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 141.078293] Bluetooth: hci0: command tx timeout [ 141.206268] Bluetooth: hci1: command tx timeout [ 141.270012] Bluetooth: hci2: command tx timeout [ 141.332913] Bluetooth: hci6: command tx timeout [ 141.396909] Bluetooth: hci3: command tx timeout [ 141.525094] Bluetooth: hci5: command tx timeout [ 141.525669] Bluetooth: hci4: command tx timeout [ 141.525998] Bluetooth: hci7: command tx timeout [ 143.124956] Bluetooth: hci0: command tx timeout [ 143.252880] Bluetooth: hci1: command tx timeout [ 143.317252] Bluetooth: hci2: command tx timeout [ 143.380798] Bluetooth: hci6: command tx timeout [ 143.444752] Bluetooth: hci3: command tx timeout [ 143.573060] Bluetooth: hci5: command tx timeout [ 143.574107] Bluetooth: hci4: command tx timeout [ 143.574521] Bluetooth: hci7: command tx timeout [ 145.175719] Bluetooth: hci0: command tx timeout [ 145.301096] Bluetooth: hci1: command tx timeout [ 145.365757] Bluetooth: hci2: command tx timeout [ 145.429745] Bluetooth: hci6: command tx timeout [ 145.493752] Bluetooth: hci3: command tx timeout [ 145.620871] Bluetooth: hci7: command tx timeout [ 145.621804] Bluetooth: hci4: command tx timeout [ 145.622233] Bluetooth: hci5: command tx timeout [ 147.220840] Bluetooth: hci0: command tx timeout [ 147.348926] Bluetooth: hci1: command tx timeout [ 147.412778] Bluetooth: hci2: command tx timeout [ 147.476795] Bluetooth: hci6: command tx timeout [ 147.540792] Bluetooth: hci3: command tx timeout [ 147.668975] Bluetooth: hci5: command tx timeout [ 147.669450] Bluetooth: hci4: command tx timeout [ 147.670820] Bluetooth: hci7: command tx timeout [ 201.460035] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.473170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.477594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.479626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.484653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.488422] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.492320] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.497807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.503672] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.505516] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.551818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.576520] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.581608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.602040] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.608206] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.617454] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.632186] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.640497] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.649598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.671484] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.778541] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.793484] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.797220] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.809239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.822607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.899635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 201.902564] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.925173] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 201.927748] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.972356] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 201.974086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 202.019345] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 202.022229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 202.050406] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 202.051903] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.053589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 202.072974] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 202.081621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 202.118165] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 202.128519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 203.540814] Bluetooth: hci1: command tx timeout [ 203.604784] Bluetooth: hci0: command tx timeout [ 203.732823] Bluetooth: hci2: command tx timeout [ 203.796795] Bluetooth: hci3: command tx timeout [ 203.860798] Bluetooth: hci4: command tx timeout [ 204.181148] Bluetooth: hci7: command tx timeout [ 204.183326] Bluetooth: hci6: command tx timeout [ 204.183372] Bluetooth: hci5: command tx timeout [ 205.588926] Bluetooth: hci1: command tx timeout [ 205.652835] Bluetooth: hci0: command tx timeout [ 205.780828] Bluetooth: hci2: command tx timeout [ 205.845735] Bluetooth: hci3: command tx timeout [ 205.908857] Bluetooth: hci4: command tx timeout [ 206.229027] Bluetooth: hci7: command tx timeout [ 206.229507] Bluetooth: hci6: command tx timeout [ 206.230155] Bluetooth: hci5: command tx timeout [ 207.636990] Bluetooth: hci1: command tx timeout [ 207.700735] Bluetooth: hci0: command tx timeout [ 207.830496] Bluetooth: hci2: command tx timeout [ 207.892744] Bluetooth: hci3: command tx timeout [ 207.957243] Bluetooth: hci4: command tx timeout [ 208.277230] Bluetooth: hci5: command tx timeout [ 208.277413] Bluetooth: hci7: command tx timeout [ 208.278269] Bluetooth: hci6: command tx timeout [ 209.684789] Bluetooth: hci1: command tx timeout [ 209.749745] Bluetooth: hci0: command tx timeout [ 209.877059] Bluetooth: hci2: command tx timeout [ 209.942716] Bluetooth: hci3: command tx timeout [ 210.005773] Bluetooth: hci4: command tx timeout [ 210.325320] Bluetooth: hci6: command tx timeout [ 210.325347] Bluetooth: hci5: command tx timeout [ 210.325841] Bluetooth: hci7: command tx timeout [ 263.471370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.475145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.479358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.489002] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.498468] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.549708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.554479] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.557484] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.565012] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.569560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.597576] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.602900] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.623647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.630327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.638161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.723072] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.731634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.743493] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.761424] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.773971] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.929181] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.936268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.940432] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.948937] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.990171] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.994170] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 264.000024] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.002546] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.004345] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 264.012324] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 264.040596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.045291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.080887] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 264.084303] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 264.088560] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 264.095305] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.106499] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 264.136627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.146612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 264.173405] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 265.556798] Bluetooth: hci0: command tx timeout [ 265.621773] Bluetooth: hci1: command tx timeout [ 265.685760] Bluetooth: hci2: command tx timeout [ 265.877815] Bluetooth: hci3: command tx timeout [ 266.134121] Bluetooth: hci5: command tx timeout [ 266.196793] Bluetooth: hci6: command tx timeout [ 266.260799] Bluetooth: hci4: command tx timeout [ 266.324770] Bluetooth: hci7: command tx timeout [ 267.605263] Bluetooth: hci0: command tx timeout [ 267.670104] Bluetooth: hci1: command tx timeout [ 267.735716] Bluetooth: hci2: command tx timeout [ 267.924775] Bluetooth: hci3: command tx timeout [ 268.182047] Bluetooth: hci5: command tx timeout [ 268.245009] Bluetooth: hci6: command tx timeout [ 268.310778] Bluetooth: hci4: command tx timeout [ 268.373048] Bluetooth: hci7: command tx timeout [ 269.653912] Bluetooth: hci0: command tx timeout [ 269.716849] Bluetooth: hci1: command tx timeout [ 269.781066] Bluetooth: hci2: command tx timeout [ 269.973058] Bluetooth: hci3: command tx timeout [ 270.229794] Bluetooth: hci5: command tx timeout [ 270.293760] Bluetooth: hci6: command tx timeout [ 270.357651] Bluetooth: hci4: command tx timeout [ 270.420758] Bluetooth: hci7: command tx timeout [ 271.701918] Bluetooth: hci0: command tx timeout [ 271.764811] Bluetooth: hci1: command tx timeout [ 271.829744] Bluetooth: hci2: command tx timeout [ 272.021767] Bluetooth: hci3: command tx timeout [ 272.277944] Bluetooth: hci5: command tx timeout [ 272.340918] Bluetooth: hci6: command tx timeout [ 272.405955] Bluetooth: hci4: command tx timeout [ 272.468839] Bluetooth: hci7: command tx timeout [ 326.251531] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.254105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.258541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.268509] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.278497] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 326.450292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.461203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.464534] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.474136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.485363] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.544942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.558288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 326.560271] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.564857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.579195] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 326.588906] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.592863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.611978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 326.616975] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.621066] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.624511] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.636057] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.638454] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 326.653362] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.655498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 326.660001] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.672971] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.700112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.736190] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.749537] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 326.755239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 326.756881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.757582] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 326.767765] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 326.775951] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 327.017603] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 327.057551] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 327.127930] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 327.190275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 327.203152] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 328.340804] Bluetooth: hci0: command tx timeout [ 328.533196] Bluetooth: hci1: command tx timeout [ 328.661269] Bluetooth: hci3: command tx timeout [ 328.725065] Bluetooth: hci2: command tx timeout [ 328.852925] Bluetooth: hci6: command tx timeout [ 328.981726] Bluetooth: hci5: command tx timeout [ 328.982447] Bluetooth: hci4: command tx timeout [ 329.300838] Bluetooth: hci7: command tx timeout [ 330.388783] Bluetooth: hci0: command tx timeout [ 330.581061] Bluetooth: hci1: command tx timeout [ 330.709739] Bluetooth: hci3: command tx timeout [ 330.772974] Bluetooth: hci2: command tx timeout [ 330.900967] Bluetooth: hci6: command tx timeout [ 331.028909] Bluetooth: hci4: command tx timeout [ 331.029369] Bluetooth: hci5: command tx timeout [ 331.349041] Bluetooth: hci7: command tx timeout [ 332.436855] Bluetooth: hci0: command tx timeout [ 332.628746] Bluetooth: hci1: command tx timeout [ 332.757753] Bluetooth: hci3: command tx timeout [ 332.821888] Bluetooth: hci2: command tx timeout [ 332.948759] Bluetooth: hci6: command tx timeout [ 333.076801] Bluetooth: hci5: command tx timeout [ 333.077247] Bluetooth: hci4: command tx timeout [ 333.397661] Bluetooth: hci7: command tx timeout [ 334.486739] Bluetooth: hci0: command tx timeout [ 334.676939] Bluetooth: hci1: command tx timeout [ 334.804741] Bluetooth: hci3: command tx timeout [ 334.868873] Bluetooth: hci2: command tx timeout [ 334.996740] Bluetooth: hci6: command tx timeout [ 335.124868] Bluetooth: hci4: command tx timeout [ 335.125320] Bluetooth: hci5: command tx timeout [ 335.444790] Bluetooth: hci7: command tx timeout [ 388.392235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.399636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.403554] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.418110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.426199] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.545325] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.558711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.560817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.571361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.575443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.577536] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.584365] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.593204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.599255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.603103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.729159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.734224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.736483] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.742124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.747064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.802651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.820352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.828038] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.837242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.846715] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.852031] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 388.854845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 388.864355] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 388.871252] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 388.891197] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.916265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.932798] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.940305] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.944399] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 388.951305] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.953572] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 388.988438] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 388.991114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 389.056949] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 389.085172] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 390.484784] Bluetooth: hci0: command tx timeout [ 390.676790] Bluetooth: hci1: command tx timeout [ 390.677531] Bluetooth: hci2: command tx timeout [ 390.868760] Bluetooth: hci3: command tx timeout [ 391.060784] Bluetooth: hci5: command tx timeout [ 391.188984] Bluetooth: hci4: command tx timeout [ 391.190577] Bluetooth: hci6: command tx timeout [ 391.252773] Bluetooth: hci7: command tx timeout [ 392.532768] Bluetooth: hci0: command tx timeout [ 392.725873] Bluetooth: hci2: command tx timeout [ 392.726369] Bluetooth: hci1: command tx timeout [ 392.917768] Bluetooth: hci3: command tx timeout [ 393.109748] Bluetooth: hci5: command tx timeout [ 393.236823] Bluetooth: hci6: command tx timeout [ 393.237332] Bluetooth: hci4: command tx timeout [ 393.301925] Bluetooth: hci7: command tx timeout [ 394.580875] Bluetooth: hci0: command tx timeout [ 394.773947] Bluetooth: hci1: command tx timeout [ 394.774417] Bluetooth: hci2: command tx timeout [ 394.966851] Bluetooth: hci3: command tx timeout [ 395.157047] Bluetooth: hci5: command tx timeout [ 395.286189] Bluetooth: hci4: command tx timeout [ 395.286792] Bluetooth: hci6: command tx timeout [ 395.348732] Bluetooth: hci7: command tx timeout [ 396.628796] Bluetooth: hci0: command tx timeout [ 396.822056] Bluetooth: hci2: command tx timeout [ 396.822512] Bluetooth: hci1: command tx timeout [ 397.013256] Bluetooth: hci3: command tx timeout [ 397.205873] Bluetooth: hci5: command tx timeout [ 397.334089] Bluetooth: hci6: command tx timeout [ 397.334541] Bluetooth: hci4: command tx timeout [ 397.397953] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 14:26:18 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=0000000000000001 RCX=ffff88806ce089cc RDX=0000000000000000 RSI=ffffffff810012a6 RDI=ffff888035253afc RBP=ffff88806ce08ad0 RSP=ffff88806ce08a08 R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b4ed R11=00000000000c473e R12=0000000000000000 R13=ffff88806ce08ac0 R14=ffff888035253700 R15=ffff88806ce08a78 RIP=ffffffff81353d0c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbcf8868288 CR3=000000002ee91000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81a14694 RDX=ffff888013e39b80 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffea00004d7c80 RSP=ffff888025eef600 R8 =0000000000000000 R9 =fffff9400009af90 R10=0000000000007818 R11=0000000000000001 R12=ffffea00004d7c80 R13=00000000000135f2 R14=0000000000007818 R15=ffff888025eef7d0 RIP=ffffffff81738868 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3b650c98e0 CR3=0000000007366000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000