Warning: Permanently added '[localhost]:6349' (ECDSA) to the list of known hosts. 2024/10/21 05:49:15 fuzzer started 2024/10/21 05:49:16 dialing manager at localhost:45639 syzkaller login: [ 66.381519] cgroup: Unknown subsys name 'net' [ 66.448220] cgroup: Unknown subsys name 'cpuset' [ 66.517442] cgroup: Unknown subsys name 'rlimit' 2024/10/21 05:49:33 syscalls: 207 2024/10/21 05:49:33 code coverage: enabled 2024/10/21 05:49:33 comparison tracing: enabled 2024/10/21 05:49:33 extra coverage: enabled 2024/10/21 05:49:33 setuid sandbox: enabled 2024/10/21 05:49:33 namespace sandbox: enabled 2024/10/21 05:49:33 Android sandbox: enabled 2024/10/21 05:49:33 fault injection: enabled 2024/10/21 05:49:33 leak checking: enabled 2024/10/21 05:49:33 net packet injection: enabled 2024/10/21 05:49:33 net device setup: enabled 2024/10/21 05:49:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/21 05:49:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/21 05:49:33 USB emulation: enabled 2024/10/21 05:49:33 hci packet injection: enabled 2024/10/21 05:49:33 wifi device emulation: enabled 2024/10/21 05:49:33 802.15.4 emulation: enabled 2024/10/21 05:49:33 fetching corpus: 0, signal 0/0 (executing program) 2024/10/21 05:49:34 starting 8 fuzzer processes 05:49:34 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0xe885) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200500, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r3, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x31}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x9}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="ac943b9e3e9220cb1d5a0eccb77e4505ac67f30ba4299ae465"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x400080, 0x0) ioctl$CDROMPLAYTRKIND(r4, 0x5304, &(0x7f00000004c0)={0x80, 0x20, 0x80, 0x6}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x521200, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1e0, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1a4, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x48, 0x1, "e79f4e04de21af61495974a2fb2d301fb94dd45193422c53b5a8a587e93bfa8049f8b1afa70b7ab1b7a9fd1bc5e57cb74ad2a51fd2264a5a88eecbb37feaf979963d27c6"}}, {0x90, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x8c, 0x2, "1a48c12be32cc52191cec60fe9198dddbe7e6921c0e5492725ae7f2516b8f2ede4c257ea857ee593929f5b213da3066976aecd161c001b68842549d2ae27a3a6567c1fea71ba377d07565d06bae8a3b9f83b2e6ccad73a03b141f42d3ffc9ae7d0d6bcccff96722a260c70afec259ca3ac1a03572b315c0d0137ae85c1e7cb1d7d14d23928bd21bf"}}, {0xc4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc0, 0x2, "7fa2fc81fae518fc1b527fc2711d24855869e624b5967439e8321168bfd555bea94c5f7bca96c822bb8eeae9a83a81c15d30dab5f676b81358eb28f9bafcc57a98d84fab347953173eea698e0c6d267c8bc5a5b63388f393bc860f757b5354018f066cc4c7de6e588bb2f040a9ba7faa99f5f2e047f9689eff4c786f0bac1dfeb8bc6379a0e5df07e653decc9fe321a7a231381feb790126534fb6c7422b43b604c2867d10045327021267d73a00b3feb14d0ba93dcc39c393f20050"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000880)=0xc) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000940)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fff}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40088c0}, 0x4000001) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r10, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x63}}}}, ["", "", "", ""]}, 0x28}}, 0x20000000) 05:49:34 executing program 1: msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x1, "93ef8ef0103c93af5c23783d3e68a70185b8aed08c46da66f41adb8071435ecd7f6a95084144d9de9f99eb6c36da4595910d8ebbe90252cffe2a3137aae4e089fbefa6163f2f268e5e557de27f356a5bf1bd34b133c4baa58d1a70a6dad92a53a4a7fdb12677c58b8955fdf8270d1ebc82c1148ac00be9c87b6b13a87ac35e45a18f53f66df1ac6803193038"}, 0x94, 0x0) r0 = msgget$private(0x0, 0x15) msgsnd(r0, &(0x7f00000000c0)={0x3, "e27f018802137497a6b49bdc3030dcb7c4fd3397c31728db8695343d99cd223acd85dfa71d2e93c4c8b135ce9d09a8af0db134fd6f1452dad2b85e403cdfe0d2cdc1a01b27c5d30752b579836ef03d35978a7f83c12a55985f51726e95e416c46da8a9599e63065c34d49ec75fb4694456f6380f376af38ef9eb9b19af00b0963ec00b8e5fee0a6ed8b199b34fdc3b1817fcb1f424b6308a44ff670f97"}, 0xa5, 0x0) msgctl$MSG_INFO(r0, 0xc, 0xfffffffffffffffc) r1 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/97) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x144, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xfc, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a00df81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42c0e75e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc309aab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54fc0801}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5beab225}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb28769b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40926e0f}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13bf7841}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70c90a52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32dce4c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6845c312}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x492c488b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ca41789}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24dd9ba5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f5f90e5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000801) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r2) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xb}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000006c0)=""/12) msgsnd(r1, &(0x7f0000000700)={0x1, "8f04f0a4907a1bf8ef42115b5aa5e11e924797591dae034eb5e672526a0bbee123a4fc91756844ae5c830a0d401749fb75b247a919c25e02988aa08e928670d5f448bd694d01d9dbacbf7a502c6b6017bb8cb3ce1382c98f8f7bd4e187171a27b62ae2c19f8d14f97f666553bbf24c445885d425946d3ddf82e46c4e3c51977e05eb260c"}, 0x8c, 0x0) msgget(0x2, 0x282) r5 = msgget(0x3, 0x80) msgctl$MSG_INFO(r5, 0xc, &(0x7f00000007c0)=""/196) r6 = msgget$private(0x0, 0x8) msgrcv(r6, &(0x7f00000008c0)={0x0, ""/86}, 0x5e, 0x0, 0x1800) 05:49:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x64}}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x80000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x6c}}, 0x20000054) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xfc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r7, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r3, 0x800, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0xe7d) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000740), r0) sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r8, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44080}, 0x40810) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)={0x2b0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3b3, 0x7}}}}, [@NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="88e18ea141b644251dd9ab25137a2f4c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2b542980037330c569ccb6f5069f28d7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c8a4b141799322d2"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c161409d29793e0414dea93b40ad9324365bf70e2243d759e298b099df933ba3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e0f7f1c506a2554c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f90ff47909fc0d4113d093396cf7d40c6f6f18d1ae59ecc77b2d86f448a07c20"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f91550f3b9924f4c58bb0715d68d3ef3"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x360780}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="06a5227150c27b42eb9210f15b690520d99b9b7ac3884ecff97b8df248f7692e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3cf31fe03672ebdf"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a33bf51afc3859308f7e7291fe7c5f23"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="95cb2879a0f07d66cc43113210cea6bea31da2ca014b26f053d740192b7893f7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffff5bc}]}, @NL80211_ATTR_REKEY_DATA={0xd8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e0aa410e474a44ff6437756227f20329"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7c72a10a65ae34f5142642eca7179ab9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f9abad9fe01f9b76a41be3e9995bce67b9f94385d2bf81c80484121946a66fa4"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f43055522f07b0b51aa65b856329f25f9593a6d23793c46f12293efaf5f2a918"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b56e999b4f4a6e659cb6647a42ca2aa2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cd0c258fafcad4a52f6a7037e7167317"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "08a813d750469c4d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0975d31fdbc4e4ffbc5eb1586051b197"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ea5fe72d1ba8704c26eb2f8abeec08f7"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1ca70dd08e5f7f48"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3d42f5bf7c34a5130dc53c50e3283c49"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "56f2be835885e7a7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2ede999a137a4074f42ddb435d38c0b3d61a95f09dcc4c92e448b0ea088b7415"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x401}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c4c38ebf26dbbd2489be2d33bd16badac3199a1bd710e558"}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x14}, 0x20000800) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 84.243848] audit: type=1400 audit(1729489775.019:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:49:35 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xb0}, 0x20048014) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r3, 0x402, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c54a47e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d04cf30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ce80e94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2402}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa310}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38b9a46}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004004}, 0x40000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x24000014) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048855}, 0x4008011) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004804}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x60840) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)={0x20c, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x124, 0x3, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xbb, 0x1, "e8a9e3fc51974e7574a0342453bec59243ea4ee9657240d1fa760dbf49b1c59d94c3b861712c5048f680b685b8cde22a681b4151035d3f5650d906cd75647eec56e99dc709ef4e7dd582bbf6ecd0fb3fede0e532aa7141f1d64447ac2c912fc84745b95795e2492b74b0196161fd213c30144614a25c49b0f6223791a93b4ba7374ce270e368aeaf54c6e0987c0df5529c83e2e4da54a1604c1b67420114f34613a94eb167f0a367a1dae09e3b1884a21dd1acd316cfc8"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}, {0x54, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x4f, 0x1, "5962d94ad9e0fe668a614cb6d0d01af1194edb5d19c734435fa768eb7a1794bd52a9d737f1e22f67489d6912d764cd4336582e977c6ae0e59b2b87628219b278676c166c958d8d0e245e28"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x3f, 0x1, "ed8bb6448bcad05503ead5856a4cb59f82f7c82ff675c35687a02b6b4ff7a2e1e73f08790ed51ab3c0a698f71a54ca413c956ed535e4fbc2ad25cb"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x5c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}}, {0x4c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x45, 0x1, "02de7c7c3386662f149cd8884ac62c306cf9a14530ac1974bb5bbb970bf38f3e6e646bded3f242a5383a3c473354eba8430de5f6abfb512509b1d7b80619740fdf"}}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40080c5) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x4c, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xd6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x91}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x4c, r8, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004080}, 0xc0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x5c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}]}, 0x5c}}, 0x0) 05:49:35 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x79}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfffe}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x4a}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44140}, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x24000, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1b0, r0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r0, 0x1, 0x70bd27, 0x800, {{}, {@void, @val={0xc, 0x99, {0xfde, 0x63}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xd8080120}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x47}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c840}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getown(r4, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r6, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xbb, 0x50}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x81}]}, 0x30}}, 0x40000) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r7, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008010}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x48, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "d0be88310435af44e31bd96eeea220"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc800}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xdc, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x200, 0x1e}}}}, [@NL80211_ATTR_IE={0xb1, 0x2a, [@mesh_chsw={0x76, 0x6, {0x7, 0x9, 0x21, 0x3}}, @cf={0x4, 0x6, {0x2, 0x9, 0x4, 0x6}}, @perr={0x84, 0x9b, {0x0, 0x9, [@ext={{}, @device_a, 0x7d, @device_a, 0x26}, @ext={{}, @broadcast, 0x1000, @broadcast, 0x31}, @ext={{}, @broadcast, 0x20000, @device_b, 0x9}, @ext={{}, @device_b, 0x7, @broadcast, 0x15}, @ext={{}, @device_a, 0x9, @broadcast, 0x30}, @not_ext={{}, @device_a, 0xb8, "", 0x16}, @not_ext={{}, @broadcast, 0x89, "", 0x31}, @ext={{}, @broadcast, 0x6, @broadcast, 0x31}, @not_ext={{}, @device_a, 0x2, "", 0x2}]}}]}]}, 0xdc}}, 0x81) 05:49:35 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x566}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7d}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_MAC={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x653}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x6000}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x493}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r4 = syz_io_uring_setup(0x1474, &(0x7f00000003c0)={0x0, 0x5265, 0x4, 0x3, 0x364, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0x5852, 0x1a, 0x0, 0x29f}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000005c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x9, 0x0, 0x0, 0xfff, 0x7, 0x1, {0x0, 0x0, r0}}, 0x1f) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x410000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000640)=r0, 0x1) r8 = syz_io_uring_setup(0xb87, &(0x7f0000000680)={0x0, 0x10e0, 0x4, 0x0, 0x190}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000700), &(0x7f0000000740)) io_uring_setup(0x6432, &(0x7f0000000780)={0x0, 0xeb8b, 0x10, 0x1, 0x28c, 0x0, r8}) r9 = io_uring_setup(0x1c5f, &(0x7f0000000800)={0x0, 0x9c3f, 0x4, 0x3, 0x36a, 0x0, r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x810, r9, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x200c850) syz_io_uring_setup(0xe40, &(0x7f0000000980)={0x0, 0xdc95, 0x4, 0x1, 0x310, 0x0, r7}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) r10 = syz_open_dev$vcsn(&(0x7f0000000a80), 0xbe5, 0x8cc00) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r11, 0x400, 0x100, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6b}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 05:49:35 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x4, 0x0, @tid=r1}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c001}, 0x101) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc850}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x6, 0x0, 0x39, @mcast2, @mcast1, 0x7800, 0x8, 0x401, 0x1000}}) ioctl$CDROMREADCOOKED(r2, 0x5315, &(0x7f0000000440)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000ec0)=""/94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, r5, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x48054}, 0x881) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)={0x114, r3, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x6, 0xb, 0x6, 0x36, 0x60, 0x3, 0x48, 0x18, 0xc, 0x1, 0x18, 0x16, 0x1b, 0x24, 0x1b, 0x18, 0x16, 0x1, 0x60, 0x60, 0xb, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x28, 0x1b, 0x16, 0x0, 0x6c, 0x0, 0xb, 0x2, 0x3, 0x60, 0x8, 0x36, 0xb, 0x48, 0x48, 0x12, 0x1, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ab8, 0x3f, 0x9, 0x1, 0xd2, 0x100, 0x401, 0x40]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x12, 0x60, 0x1b, 0x3, 0x5, 0x1b, 0x1, 0xc, 0x36, 0x1b, 0x39, 0x24, 0x48]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0xff, 0x7, 0x2, 0x3ff, 0x2, 0xfff]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0x9}, {0x6}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0x3}, {0x5, 0x6}, {0x7, 0x3}, {0x2, 0x1}, {0x1, 0x4}, {0x4, 0x4}, {0x0, 0xa}, {0x2, 0x1}, {0x1, 0x3}, {0x4, 0x1}, {}, {0x2}, {0x5}, {}]}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x30}, {0x3, 0x1}, {0x2}, {0x3}, {0x36, 0x1}, {0x9, 0x1}, {0x60, 0x1}, {0x6}, {0x6, 0x1}, {0xc, 0x1}, {0x1}, {0x6, 0x1}, {0x16, 0x1}, {0x1b, 0x1}, {0x1b, 0x1}, {0x1c, 0x1}, {0x1}, {0x5}, {0x6}, {0x36, 0x1}, {0x18}, {0xb}, {0x1b}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x60, 0x1}, {0x12}, {0x9}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xe9df}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x80000000}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x253}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000081}, 0x44055) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000001280), 0x4) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000012c0), 0x206400, 0x0) ioctl$CDROMREADAUDIO(r6, 0x530e, &(0x7f0000001340)={@msf={0x80, 0x0, 0x1c}, 0x0, 0x3a, &(0x7f0000001300)=""/58}) ioctl$CDROM_SET_OPTIONS(r6, 0x5320, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000013c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) 05:49:35 executing program 7: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x31}, 0x804) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x7, 0x400}, @timestamp], 0x2) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) r1 = socket(0x28, 0x2, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000001200), r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001240), 0x4140, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000001340)={&(0x7f0000001280), 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000001380)={0x2, 0xff, 0x0, 0x2, 0x0, 0x8, @msf={0x0, 0x20, 0x88}, @msf={0x2, 0x9}}) socketpair(0x25, 0x2, 0xf34, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x98, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x9}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x24008015) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2d}, @void, @val={0xc, 0x99, {0x401, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4088) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000001780), 0x101880, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000001a80)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a40)={&(0x7f0000001840)={0x1c8, r6, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3f}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x187, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x5}, 0x4, 0x2, @device_a, 0xb24f, 0x1f, 0x1800000}}, @ibss={0x6, 0x2, 0x6}, @tim={0x5, 0xde, {0x4, 0x3d, 0x5, "9752ec7c785d0171b2861fb609583740c429f714c88b1ca1f00cacfa0f651dd2439202e2bc96befa3c3062ea20c9083c4baea49a036fdd13c0184b81937dc8554bf265a6d856b8e43e0fccb500cd0d136d160be5053c3bd7c1d88a5fe19639410e1becf45124a286a88cc8b7e4e07a04620f471a68ded7224eee823a785e17e7794331188daa702fc26d6c81caeca63f48ff06ac318a59f327d35d2d320e3346d70c3ffcbe1f2e5f1b0cf764a2c4a4371de725058fce55778bf7d9670a7ad6f371c10ec46298362123b151415983dfca0d90e8e931504a0edb1dac"}}, @fast_bss_trans={0x37, 0x7e, {0x20, 0x3, "dbf98cda92af661000282fb2fecf7fea", "db270cae96119edc5efc531647dfeeae2e01bfe1b7620cdb9775d5df48f61faa", "da582c409f470d40880c4e1e302baa6ecd9d4af498d101e252698ce9ac344cda", [{0x4}, {0x3, 0x1c, "c0e2005119cfeb66bd74a739efa0c2f16fe733eaebc7d0485ce3dedc"}, {0x2, 0xa, "cca97efc1a879a7c5daa"}]}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4850}, 0x40040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000001c40), 0x4) [ 85.710737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.716982] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.724341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.731958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.733081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.734232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.735070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.737272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.738171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.738968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.740106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.741020] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.744215] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.745200] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.747892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.750101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.751325] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.751946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.757448] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.758332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.758980] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.762068] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.764052] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.767906] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.773261] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.777988] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.778122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.779550] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.780328] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.781498] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.787608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.790902] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.792320] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.793400] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.794487] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.796957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.798619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.799381] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.801130] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.803525] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.804059] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.808816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.810408] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.813388] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.814923] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.824897] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.833865] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.850983] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.876261] Bluetooth: hci6: command tx timeout [ 87.876284] Bluetooth: hci3: command tx timeout [ 87.876486] Bluetooth: hci4: command tx timeout [ 87.877171] Bluetooth: hci2: command tx timeout [ 87.877618] Bluetooth: hci7: command tx timeout [ 87.878351] Bluetooth: hci5: command tx timeout [ 87.878630] Bluetooth: hci1: command tx timeout [ 87.879163] Bluetooth: hci0: command tx timeout [ 89.925912] Bluetooth: hci5: command tx timeout [ 89.926474] Bluetooth: hci1: command tx timeout [ 89.927196] Bluetooth: hci0: command tx timeout [ 89.927883] Bluetooth: hci7: command tx timeout [ 89.928434] Bluetooth: hci6: command tx timeout [ 89.929045] Bluetooth: hci3: command tx timeout [ 89.929564] Bluetooth: hci2: command tx timeout [ 89.930132] Bluetooth: hci4: command tx timeout [ 91.971921] Bluetooth: hci3: command tx timeout [ 91.972467] Bluetooth: hci0: command tx timeout [ 91.973194] Bluetooth: hci6: command tx timeout [ 91.974825] Bluetooth: hci2: command tx timeout [ 91.974900] Bluetooth: hci7: command tx timeout [ 91.976214] Bluetooth: hci4: command tx timeout [ 91.976851] Bluetooth: hci1: command tx timeout [ 91.978017] Bluetooth: hci5: command tx timeout [ 94.020346] Bluetooth: hci5: command tx timeout [ 94.020958] Bluetooth: hci6: command tx timeout [ 94.021048] Bluetooth: hci0: command tx timeout [ 94.021899] Bluetooth: hci4: command tx timeout [ 94.022835] Bluetooth: hci2: command tx timeout [ 94.023802] Bluetooth: hci1: command tx timeout [ 94.024749] Bluetooth: hci7: command tx timeout [ 94.025836] Bluetooth: hci3: command tx timeout [ 148.306513] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.310040] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.311163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.318206] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.322953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.328437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.363400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.367976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.373884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.376593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.385021] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.388388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.507638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.509818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.511802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.513548] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.517955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.520548] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.521101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.522470] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.548551] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.557396] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.566575] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.578053] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.622717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.631925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.632803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.637514] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.639347] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.641035] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.641190] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.644116] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.645534] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.647168] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.648345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.649874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.696126] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.722540] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.740249] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.747791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.750896] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.758204] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.760380] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.761727] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.799485] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.817059] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.820109] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.821205] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.404837] Bluetooth: hci0: command tx timeout [ 150.467955] Bluetooth: hci1: command tx timeout [ 150.595783] Bluetooth: hci2: command tx timeout [ 150.661744] Bluetooth: hci3: command tx timeout [ 150.723938] Bluetooth: hci5: command tx timeout [ 150.725083] Bluetooth: hci4: command tx timeout [ 150.851780] Bluetooth: hci7: command tx timeout [ 150.915791] Bluetooth: hci6: command tx timeout [ 152.451955] Bluetooth: hci0: command tx timeout [ 152.516724] Bluetooth: hci1: command tx timeout [ 152.643759] Bluetooth: hci2: command tx timeout [ 152.707870] Bluetooth: hci3: command tx timeout [ 152.771866] Bluetooth: hci4: command tx timeout [ 152.772361] Bluetooth: hci5: command tx timeout [ 152.900882] Bluetooth: hci7: command tx timeout [ 152.964381] Bluetooth: hci6: command tx timeout [ 154.499858] Bluetooth: hci0: command tx timeout [ 154.563753] Bluetooth: hci1: command tx timeout [ 154.691753] Bluetooth: hci2: command tx timeout [ 154.756726] Bluetooth: hci3: command tx timeout [ 154.819861] Bluetooth: hci5: command tx timeout [ 154.820379] Bluetooth: hci4: command tx timeout [ 154.947884] Bluetooth: hci7: command tx timeout [ 155.011924] Bluetooth: hci6: command tx timeout [ 156.549092] Bluetooth: hci0: command tx timeout [ 156.611776] Bluetooth: hci1: command tx timeout [ 156.739740] Bluetooth: hci2: command tx timeout [ 156.803741] Bluetooth: hci3: command tx timeout [ 156.867764] Bluetooth: hci4: command tx timeout [ 156.868974] Bluetooth: hci5: command tx timeout [ 156.995987] Bluetooth: hci7: command tx timeout [ 157.059771] Bluetooth: hci6: command tx timeout [ 210.574277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.577119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.579144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.581919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.583969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.587527] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.592940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.594934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.602940] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.605249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.607141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.609612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.697585] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.707007] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.709593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.714850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.721506] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.723588] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.784893] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.819321] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.829936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.837368] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.845757] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.862997] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.900250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.910062] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.912175] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.940615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.943213] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.954189] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.956279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.963136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.966608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.971861] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.975974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.978591] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.983885] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.986173] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.010443] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.022818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.028364] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 211.030973] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 211.032887] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 211.036189] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 211.042857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.049416] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 211.098423] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 211.100842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.676759] Bluetooth: hci1: command tx timeout [ 212.678625] Bluetooth: hci0: command tx timeout [ 212.805009] Bluetooth: hci2: command tx timeout [ 212.931746] Bluetooth: hci3: command tx timeout [ 213.059924] Bluetooth: hci7: command tx timeout [ 213.060716] Bluetooth: hci4: command tx timeout [ 213.125301] Bluetooth: hci5: command tx timeout [ 213.188764] Bluetooth: hci6: command tx timeout [ 214.723846] Bluetooth: hci1: command tx timeout [ 214.723965] Bluetooth: hci0: command tx timeout [ 214.851734] Bluetooth: hci2: command tx timeout [ 214.980003] Bluetooth: hci3: command tx timeout [ 215.107757] Bluetooth: hci7: command tx timeout [ 215.108810] Bluetooth: hci4: command tx timeout [ 215.174692] Bluetooth: hci5: command tx timeout [ 215.236823] Bluetooth: hci6: command tx timeout [ 216.773686] Bluetooth: hci1: command tx timeout [ 216.773707] Bluetooth: hci0: command tx timeout [ 216.899745] Bluetooth: hci2: command tx timeout [ 217.029706] Bluetooth: hci3: command tx timeout [ 217.158726] Bluetooth: hci7: command tx timeout [ 217.159241] Bluetooth: hci4: command tx timeout [ 217.219808] Bluetooth: hci5: command tx timeout [ 217.283804] Bluetooth: hci6: command tx timeout [ 218.819717] Bluetooth: hci0: command tx timeout [ 218.822680] Bluetooth: hci1: command tx timeout [ 218.947727] Bluetooth: hci2: command tx timeout [ 219.075747] Bluetooth: hci3: command tx timeout [ 219.203803] Bluetooth: hci4: command tx timeout [ 219.204294] Bluetooth: hci7: command tx timeout [ 219.267826] Bluetooth: hci5: command tx timeout [ 219.332818] Bluetooth: hci6: command tx timeout [ 272.915298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.917361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.919096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.922607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.926340] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.930091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.108537] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.110597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.112323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.116334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.124952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.127265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.165002] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.169854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.191847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.199970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.210159] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.228791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.332913] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.344309] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.346158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.347852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.350835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.352880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.356502] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.358844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.360566] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.363732] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.365267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.366428] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.367102] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 273.367934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.370322] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.371913] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.393286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 273.403899] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 273.415933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.419537] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 273.420904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.427926] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 273.439111] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 273.446141] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 273.447597] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 273.448576] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.458451] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 273.472758] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 273.479065] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 273.483126] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.012761] Bluetooth: hci0: command tx timeout [ 275.207057] Bluetooth: hci1: command tx timeout [ 275.268833] Bluetooth: hci2: command tx timeout [ 275.396829] Bluetooth: hci4: command tx timeout [ 275.460786] Bluetooth: hci3: command tx timeout [ 275.523997] Bluetooth: hci7: command tx timeout [ 275.525334] Bluetooth: hci5: command tx timeout [ 275.525760] Bluetooth: hci6: command tx timeout [ 277.059705] Bluetooth: hci0: command tx timeout [ 277.251795] Bluetooth: hci1: command tx timeout [ 277.316179] Bluetooth: hci2: command tx timeout [ 277.443716] Bluetooth: hci4: command tx timeout [ 277.507701] Bluetooth: hci3: command tx timeout [ 277.571728] Bluetooth: hci5: command tx timeout [ 277.572356] Bluetooth: hci7: command tx timeout [ 277.572948] Bluetooth: hci6: command tx timeout [ 279.107717] Bluetooth: hci0: command tx timeout [ 279.300745] Bluetooth: hci1: command tx timeout [ 279.363692] Bluetooth: hci2: command tx timeout [ 279.491828] Bluetooth: hci4: command tx timeout [ 279.556733] Bluetooth: hci3: command tx timeout [ 279.620727] Bluetooth: hci6: command tx timeout [ 279.621224] Bluetooth: hci5: command tx timeout [ 279.622289] Bluetooth: hci7: command tx timeout [ 281.155706] Bluetooth: hci0: command tx timeout [ 281.347874] Bluetooth: hci1: command tx timeout [ 281.412718] Bluetooth: hci2: command tx timeout [ 281.539707] Bluetooth: hci4: command tx timeout [ 281.604745] Bluetooth: hci3: command tx timeout [ 281.667758] Bluetooth: hci7: command tx timeout [ 281.668261] Bluetooth: hci5: command tx timeout [ 281.668281] Bluetooth: hci6: command tx timeout [ 335.261366] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.266432] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.268519] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.274222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.295223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.296705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.310585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.314807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.317893] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.324378] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.327007] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.328159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.445883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.447529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.450930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.456013] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.460219] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.461735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.591693] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.613379] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.615437] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.622470] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.625585] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.627277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.694904] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.706064] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.706262] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.708518] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.722262] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.733818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.736868] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 335.738981] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.740926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.757929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.764189] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.767916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.805252] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.825973] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.832286] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.836193] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.840468] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.846868] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.848851] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.850141] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.894949] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.906527] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.914317] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.920408] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.348820] Bluetooth: hci0: command tx timeout [ 337.412988] Bluetooth: hci1: command tx timeout [ 337.541682] Bluetooth: hci2: command tx timeout [ 337.668687] Bluetooth: hci3: command tx timeout [ 337.795738] Bluetooth: hci5: command tx timeout [ 337.798753] Bluetooth: hci4: command tx timeout [ 337.924714] Bluetooth: hci7: command tx timeout [ 337.988680] Bluetooth: hci6: command tx timeout [ 339.397554] Bluetooth: hci0: command tx timeout [ 339.460879] Bluetooth: hci1: command tx timeout [ 339.588716] Bluetooth: hci2: command tx timeout [ 339.717025] Bluetooth: hci3: command tx timeout [ 339.843721] Bluetooth: hci4: command tx timeout [ 339.844260] Bluetooth: hci5: command tx timeout [ 339.972700] Bluetooth: hci7: command tx timeout [ 340.038670] Bluetooth: hci6: command tx timeout [ 341.444811] Bluetooth: hci0: command tx timeout [ 341.508735] Bluetooth: hci1: command tx timeout [ 341.636699] Bluetooth: hci2: command tx timeout [ 341.764774] Bluetooth: hci3: command tx timeout [ 341.892777] Bluetooth: hci5: command tx timeout [ 341.893313] Bluetooth: hci4: command tx timeout [ 342.021648] Bluetooth: hci7: command tx timeout [ 342.083710] Bluetooth: hci6: command tx timeout [ 343.492724] Bluetooth: hci0: command tx timeout [ 343.556831] Bluetooth: hci1: command tx timeout [ 343.684959] Bluetooth: hci2: command tx timeout [ 343.812884] Bluetooth: hci3: command tx timeout [ 343.939730] Bluetooth: hci4: command tx timeout [ 343.940216] Bluetooth: hci5: command tx timeout [ 344.068691] Bluetooth: hci7: command tx timeout [ 344.132801] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 05:54:45 Registers: info registers vcpu 0 RAX=ffff888016f61cb8 RBX=00000000000000e8 RCX=ffffffff84a00130 RDX=0000000000003fc8 RSI=00000000d1dec4ed RDI=0000000000000002 RBP=ffff888035d778a0 RSP=ffff888035d77840 R8 =ffff88806c71d9a0 R9 =0000000000000000 R10=ffffffff863f274f R11=00000000000c2f81 R12=ffff888008c4f780 R13=0000000000092800 R14=00000000000000e8 R15=0000000000092800 RIP=ffffffff81841ad2 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1eb3d70540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1eb3f5b620 CR3=000000001ac90000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88802c158001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802c157401 RSI=ffff88802c1574c8 RDI=ffff88802c157438 RBP=ffff88802c157480 RSP=ffff88802c157368 R8 =ffffffff86773e4e R9 =ffff88802c157468 R10=000000000003c001 R11=0000000000003f0d R12=ffff88802c157488 R13=ffff88802c157470 R14=ffff88802c1574d0 R15=ffff88802c157428 RIP=ffffffff811498f0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5ca16c4000 CR3=0000000031c2e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000