Warning: Permanently added '[localhost]:48116' (ECDSA) to the list of known hosts. 2025/06/21 21:59:41 fuzzer started 2025/06/21 21:59:41 dialing manager at localhost:33119 syzkaller login: [ 94.526126] cgroup: Unknown subsys name 'net' [ 94.657193] cgroup: Unknown subsys name 'cpuset' [ 94.697678] cgroup: Unknown subsys name 'rlimit' 2025/06/21 21:59:58 syscalls: 207 2025/06/21 21:59:58 code coverage: enabled 2025/06/21 21:59:58 comparison tracing: enabled 2025/06/21 21:59:58 extra coverage: enabled 2025/06/21 21:59:58 setuid sandbox: enabled 2025/06/21 21:59:58 namespace sandbox: enabled 2025/06/21 21:59:58 Android sandbox: enabled 2025/06/21 21:59:58 fault injection: enabled 2025/06/21 21:59:58 leak checking: enabled 2025/06/21 21:59:58 net packet injection: enabled 2025/06/21 21:59:58 net device setup: enabled 2025/06/21 21:59:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/21 21:59:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/21 21:59:58 USB emulation: enabled 2025/06/21 21:59:58 hci packet injection: enabled 2025/06/21 21:59:58 wifi device emulation: enabled 2025/06/21 21:59:58 802.15.4 emulation: enabled 2025/06/21 21:59:58 fetching corpus: 0, signal 0/0 (executing program) 2025/06/21 22:00:00 starting 8 fuzzer processes 22:00:00 executing program 0: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6fe0}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bbef42e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x388e318b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d8a}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8090}, 0x20000801) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x20040010) clock_gettime(0x0, &(0x7f0000001e40)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000400)=@isdn, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/152, 0x98}, {&(0x7f0000000600)=""/23, 0x17}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f00000006c0)=""/182, 0xb6}], 0x5, &(0x7f0000000800)=""/60, 0x3c}, 0x2}, {{&(0x7f0000000840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/206, 0xce}], 0x2, &(0x7f0000000b00)=""/4096, 0x1000}}, {{&(0x7f0000001b00)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/138, 0x8a}], 0x1, &(0x7f0000001c80)=""/245, 0xf5}, 0x7}], 0x3, 0x60, &(0x7f0000001e80)={r4, r5+60000000}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, 0x0, 0x100, 0x5333, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x58f}]}, 0x24}}, 0x2408c001) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}, ["", ""]}, 0x20}}, 0x4000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r7, &(0x7f0000002340)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002300)={&(0x7f0000002100)={0x1d4, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc8, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d1ff301}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58e2fc95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23850f4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2755ad2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26dabab2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f661175}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66e04b29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33880778}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x273fd056}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b5d5ea1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7540c7b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cd42db3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e5231be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x162b59d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57d6e430}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1789ab09}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc4, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fd540e3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50b1c514}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72d77ebe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7808ef18}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14d58c6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51abbcd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a7e0f13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x454d140b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4010}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000023c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x19}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4045) r9 = accept(r6, &(0x7f00000024c0)=@l2={0x1f, 0x0, @none}, &(0x7f0000002540)=0x80) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x3c, r10, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1f}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000004) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), r6) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x14, r12, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10040080) 22:00:00 executing program 1: getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000040)=0x28) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/84, 0x54}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/225, 0xe1}], 0x3, &(0x7f0000000300)=""/118, 0x76}, 0x4}, {{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f00000004c0)=""/40, 0x28}, {&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000680)=""/126, 0x7e}, {&(0x7f0000000700)=""/83, 0x53}, {&(0x7f0000000780)=""/240, 0xf0}, {&(0x7f0000000880)=""/132, 0x84}], 0x8, &(0x7f00000009c0)=""/216, 0xd8}, 0x541d}, {{&(0x7f0000000ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000b40), 0x0, &(0x7f0000000b80)=""/146, 0x92}, 0x400}], 0x3, 0x40012003, &(0x7f0000000d00)={0x0, 0x989680}) clock_getres(0x5, &(0x7f0000000d40)) clock_getres(0x4, &(0x7f0000000d80)) r1 = io_uring_setup(0x14ba, &(0x7f0000000dc0)={0x0, 0xa99f, 0x0, 0x1, 0x286}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000e40), 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000ec0)={'veth0_to_bridge\x00'}) clock_getres(0x1, &(0x7f0000000f00)) r3 = syz_open_dev$vcsn(&(0x7f0000000f40), 0x5, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)=[r1, r0]}, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001000)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001140)={'gretap0\x00', &(0x7f00000010c0)={'gre0\x00', 0x0, 0x7800, 0x1, 0x80000000, 0xffff, {{0x15, 0x4, 0x0, 0x4, 0x54, 0x65, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @multicast1, {[@lsrr={0x83, 0x23, 0x3d, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x3b, 0x1, 0x7, [{@private=0xa010101, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}]}, @generic={0x16, 0x9, "4d1e82e36a70c9"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001180)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001300)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xcc, 0x0, 0x908, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xcc}}, 0x4) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x1f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4840) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001600)={&(0x7f0000001480), 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0x9c, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x880}, 0x4000804) 22:00:00 executing program 2: sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4}, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netdevsim0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000095}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c091) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x1c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x40, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8000}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8894}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000060}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xaf}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffb}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1cd49489eb61a3ce}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4004080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000840), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xc8, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xac, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc965391}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f2025b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30621d51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27be6dd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58d152f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a5e06cd}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77be2b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31319d76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f41fb7d}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29526b09}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x6c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2cc158086365"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0xd1) recvmmsg(r3, &(0x7f0000006f40)=[{{&(0x7f0000000b80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/242, 0xf2}, {&(0x7f0000001d00)=""/22, 0x16}], 0x3, &(0x7f0000001d80)=""/80, 0x50}, 0xfea}, {{&(0x7f0000001e00)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001e80)=""/221, 0xdd}, {&(0x7f0000001f80)=""/106, 0x6a}, {&(0x7f0000002000)=""/45, 0x2d}, {&(0x7f0000002040)=""/235, 0xeb}, {&(0x7f0000002140)=""/238, 0xee}, {&(0x7f0000002240)=""/163, 0xa3}], 0x6, &(0x7f0000002380)=""/147, 0x93}, 0x6c8e}, {{&(0x7f0000002440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003580)=[{&(0x7f00000024c0)=""/28, 0x1c}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/66, 0x42}], 0x3, &(0x7f00000035c0)=""/70, 0x46}, 0x6}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/183, 0xb7}], 0x2}, 0xe5dd}, {{&(0x7f0000004740)=@isdn, 0x80, &(0x7f00000058c0)=[{&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f00000057c0)=""/19, 0x13}, {&(0x7f0000005800)=""/180, 0xb4}], 0x3, &(0x7f0000005900)=""/35, 0x23}}, {{&(0x7f0000005940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000006dc0)=[{&(0x7f00000059c0)}, {&(0x7f0000005a00)=""/65, 0x41}, {&(0x7f0000005a80)=""/63, 0x3f}, {&(0x7f0000005ac0)=""/203, 0xcb}, {&(0x7f0000005bc0)=""/4096, 0x1000}, {&(0x7f0000006bc0)=""/204, 0xcc}, {&(0x7f0000006cc0)=""/188, 0xbc}, {&(0x7f0000006d80)=""/27, 0x1b}], 0x8, &(0x7f0000006e40)=""/219, 0xdb}, 0xb68}], 0x6, 0x2103, &(0x7f00000070c0)) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000007240)={&(0x7f0000007100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000007200)={&(0x7f0000007140)={0xa4, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "3ca2e1c25cbb76a7483d"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "40b5c0a9acaaa80cf5ff7641dcc9abc5"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "128921c52c"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x5}, 0x8004) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000007280)={'batadv_slave_0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000007380)={&(0x7f00000072c0), 0xc, &(0x7f0000007340)={&(0x7f0000007300)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 113.121858] audit: type=1400 audit(1750543200.786:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:00:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x100000000, 0x8000) write$cgroup_pressure(r2, &(0x7f0000000080)={'full', 0x20, 0x1000, 0x20, 0x7}, 0x2f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x22}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x10, 0x4, "02a3fda815303bab8ba74c80"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "85ba1e19a9"}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1f8bd8c49e"}]}, 0x98}}, 0x40000040) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r4, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008800) r5 = socket(0x2c, 0x1, 0x3) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r5) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000005c0)) r6 = syz_open_dev$vcsn(&(0x7f0000001180), 0x5, 0x400) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r5) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000001300)={&(0x7f00000011c0), 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x58, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x811) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r5) sendmsg$NL80211_CMD_DEL_TX_TS(r8, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x50, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socketpair(0x15, 0x5, 0x8, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r10, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x44, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20009884) 22:00:00 executing program 4: sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ce}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x64}, 0x1, 0x0, 0x0, 0x4040880}, 0x2000c0c1) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r0, 0x101, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x2400088d) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x401, 0x57}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240000c5}, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r4, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x84) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x88, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x8}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x6691}, @broadcast, @device_b}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @random="b5f9f252a0bf", @broadcast}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7f}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa}]}, 0x88}}, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r9, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb8, r1, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x37}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x9}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x42}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x7}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x80000000}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x83}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x101}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x1}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1d1c, 0x16}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4008081}, 0x4801) r10 = syz_open_dev$vcsn(&(0x7f0000000b40), 0xfffffffffffffffa, 0x40000) sendmsg$BATADV_CMD_GET_GATEWAYS(r10, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5c8a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd69}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 22:00:00 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x400141) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x2) epoll_create1(0x80000) sendmsg$802154_raw(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14, &(0x7f0000000180)={&(0x7f00000000c0)="a9efd854dc29b69c9fec3ff6c5e226d8987cb786c9de131671cb58aac88bec034eb7609bedbeda4d3c41f60e58b572d373e48b0e18a96ed074e0ee76bd6919b6b75331427eb09ae43c00aa4073f80d7ec15b6ed86401579e0ae4a9c89c7cce3ef11ab64582ef43ee54d2310984be0d2b252db9f318976e4e8c4bab67ce723be3607e3029257d083d3725a88c66b346cfde61779877a1e663ca28ab0dc1602721df8c481bc3", 0xa5}, 0x1, 0x0, 0x0, 0x4c045}, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) r1 = socket(0x18, 0x800, 0x8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000240)) clock_getres(0x6, &(0x7f0000000280)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x60542) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000300)={{0x2, 0x0, 0x8, 0x2, 0x10000}, 0x1, 0x1, 0x1}) r3 = syz_open_dev$vcsn(&(0x7f0000000380), 0x4, 0x34c01) inotify_add_watch(r3, &(0x7f00000003c0)='./file0\x00', 0x2000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x61}]}, 0x34}, 0x1, 0x0, 0x0, 0x80000d0}, 0x80) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000540)) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000580)) clock_gettime(0x5, &(0x7f0000000600)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000640)) r5 = syz_open_dev$vcsn(&(0x7f0000000680), 0x92d3, 0x40) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x895}, 0x40000) 22:00:00 executing program 6: sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xcd}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x37}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x0, 0x48}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x3800000, {0x3, 0x4, 0x5, 0x6}}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x338}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]]}, 0x94}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000012) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2001034}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc2ac85fb65962ec4}, 0x20040000) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9865, 0x1f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r3, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}}, 0x400c054) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x1a, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000d40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x190, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x40, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ca930bf9ad8a9f9b0eb60c2bc80bcc4e576261e5d4ee5a1483e3917cb69c4762"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x29}]}, @NL802154_ATTR_SEC_KEY={0xdc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1c462df9b3a054a94933c3c79f0ba3da"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "11d8ae30380a18f18fe5be4a26c55a06"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c3b5e41c403e0a8f1078d10fc7758d94f02cceb51b4ff2bded5044c4988f06d9"}, @NL802154_KEY_ATTR_ID={0x8c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xab82}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4071}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e709d02771d83163a97657b40451e9b1dcded2238bee65492c1a6b52b7f29b44"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000080) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r4) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r9, 0x1805e3a981e8f975, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22:00:00 executing program 7: r0 = syz_io_uring_setup(0x6582, &(0x7f0000000000)={0x0, 0xe8e6, 0x1, 0x1, 0x1bb}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x3b84, &(0x7f0000000100)={0x0, 0xa89c, 0x2, 0x3, 0x114}, &(0x7f0000feb000/0x14000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x10000000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x2000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = syz_io_uring_setup(0x462, &(0x7f0000000240)={0x0, 0x799f, 0x10, 0x0, 0x3b2, 0x0, r0}, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) r5 = perf_event_open$cgroup(&(0x7f0000000340)={0x5, 0x80, 0x7, 0x81, 0x7a, 0x1, 0x0, 0x8001, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x30364af7}, 0x44e84, 0x20, 0xffffffff, 0x4, 0x81, 0x0, 0x9, 0x0, 0x341b, 0x0, 0x7}, r1, 0x1, 0xffffffffffffffff, 0x2) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000003c0)='io.pressure\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000400)=[r5, r6, r0, r0], 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000440)={{0x2, 0x1, 0x8, 0x1, 0x8000}, 0x3, 0x80000001, 0xb0a}) r7 = syz_open_dev$vcsn(&(0x7f00000004c0), 0xff, 0x0) read$snapshot(r7, &(0x7f0000000500)=""/29, 0x1d) syz_io_uring_setup(0x63fa, &(0x7f0000000540)={0x0, 0x1a89, 0x6, 0x3, 0x298, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000780)=@IORING_OP_STATX={0x15, 0x1, 0x0, r7, &(0x7f0000000640), &(0x7f0000000740)='./file0\x00', 0x10, 0x6000}, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "a219bc6ea4"}]}, 0x48}, 0x1, 0x0, 0x0, 0x48080}, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r9 = syz_open_dev$vcsn(&(0x7f0000000b00), 0x5a, 0x4800) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x74, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200000b4) [ 114.665140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.671136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.674052] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.681967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.685812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.687373] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.691959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.694099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.736515] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.740253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.761276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.766047] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.772553] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.776214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.786573] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.793162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.798070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.802468] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.804141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.813153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.819334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.823260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.828394] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.828439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.835254] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.837209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.840081] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.844535] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.847561] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.851323] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.854939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.867551] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.869114] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.872163] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 114.881226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.882731] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.884766] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.890636] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.907043] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.909172] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.734665] Bluetooth: hci0: command tx timeout [ 116.799054] Bluetooth: hci1: command tx timeout [ 116.862745] Bluetooth: hci2: command tx timeout [ 116.926458] Bluetooth: hci3: command tx timeout [ 116.926511] Bluetooth: hci4: command tx timeout [ 116.992234] Bluetooth: hci7: command tx timeout [ 116.992383] Bluetooth: hci5: command tx timeout [ 116.993152] Bluetooth: hci6: command tx timeout [ 118.783093] Bluetooth: hci0: command tx timeout [ 118.846035] Bluetooth: hci1: command tx timeout [ 118.910094] Bluetooth: hci2: command tx timeout [ 118.974448] Bluetooth: hci4: command tx timeout [ 118.975291] Bluetooth: hci3: command tx timeout [ 119.039917] Bluetooth: hci5: command tx timeout [ 119.040396] Bluetooth: hci7: command tx timeout [ 119.040806] Bluetooth: hci6: command tx timeout [ 120.830288] Bluetooth: hci0: command tx timeout [ 120.893942] Bluetooth: hci1: command tx timeout [ 120.957947] Bluetooth: hci2: command tx timeout [ 121.022280] Bluetooth: hci3: command tx timeout [ 121.022725] Bluetooth: hci4: command tx timeout [ 121.085988] Bluetooth: hci6: command tx timeout [ 121.086421] Bluetooth: hci7: command tx timeout [ 121.086844] Bluetooth: hci5: command tx timeout [ 122.878154] Bluetooth: hci0: command tx timeout [ 122.941997] Bluetooth: hci1: command tx timeout [ 123.006022] Bluetooth: hci2: command tx timeout [ 123.070478] Bluetooth: hci4: command tx timeout [ 123.071447] Bluetooth: hci3: command tx timeout [ 123.134030] Bluetooth: hci6: command tx timeout [ 123.134519] Bluetooth: hci7: command tx timeout [ 123.135010] Bluetooth: hci5: command tx timeout [ 177.115253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.120084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.126686] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.131282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.131342] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.137784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.140464] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.143651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.160437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.160996] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.167793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.178040] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.180444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.191330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.202819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.379742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.383500] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.392378] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.411108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.419470] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.425612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.438334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.440454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.468333] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.481784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.483300] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.502307] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.509976] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.512224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.521098] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.533563] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.534029] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.544470] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.567610] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.580772] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.583295] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.589456] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.595474] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.599029] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.613740] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.198256] Bluetooth: hci1: command tx timeout [ 179.262543] Bluetooth: hci0: command tx timeout [ 179.326922] Bluetooth: hci2: command tx timeout [ 179.517968] Bluetooth: hci3: command tx timeout [ 179.582999] Bluetooth: hci4: command tx timeout [ 179.711929] Bluetooth: hci6: command tx timeout [ 179.712637] Bluetooth: hci7: command tx timeout [ 179.713445] Bluetooth: hci5: command tx timeout [ 181.246252] Bluetooth: hci1: command tx timeout [ 181.311133] Bluetooth: hci0: command tx timeout [ 181.376281] Bluetooth: hci2: command tx timeout [ 181.565947] Bluetooth: hci3: command tx timeout [ 181.631136] Bluetooth: hci4: command tx timeout [ 181.757950] Bluetooth: hci7: command tx timeout [ 181.759145] Bluetooth: hci5: command tx timeout [ 181.759263] Bluetooth: hci6: command tx timeout [ 183.293943] Bluetooth: hci1: command tx timeout [ 183.357995] Bluetooth: hci0: command tx timeout [ 183.422971] Bluetooth: hci2: command tx timeout [ 183.614838] Bluetooth: hci3: command tx timeout [ 183.679223] Bluetooth: hci4: command tx timeout [ 183.805938] Bluetooth: hci6: command tx timeout [ 183.806087] Bluetooth: hci5: command tx timeout [ 183.806384] Bluetooth: hci7: command tx timeout [ 185.341986] Bluetooth: hci1: command tx timeout [ 185.405991] Bluetooth: hci0: command tx timeout [ 185.469938] Bluetooth: hci2: command tx timeout [ 185.661947] Bluetooth: hci3: command tx timeout [ 185.726254] Bluetooth: hci4: command tx timeout [ 185.856074] Bluetooth: hci5: command tx timeout [ 185.856589] Bluetooth: hci7: command tx timeout [ 185.856602] Bluetooth: hci6: command tx timeout [ 239.376664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.380639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.383959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.402495] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.407273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.463696] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.470177] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.473446] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.481153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.494917] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.513550] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.518399] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.527388] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.558540] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.580655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.698652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.702388] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.705104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.713475] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.716763] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.878933] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.883591] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.886625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.886833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.900525] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.905463] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.917437] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.921049] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.932789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.945430] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.957037] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.997637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.026331] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.027316] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.034220] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.044622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.065318] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.066945] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.073638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.094152] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.470997] Bluetooth: hci0: command tx timeout [ 241.598270] Bluetooth: hci1: command tx timeout [ 241.664282] Bluetooth: hci2: command tx timeout [ 241.856026] Bluetooth: hci3: command tx timeout [ 241.982199] Bluetooth: hci6: command tx timeout [ 242.046970] Bluetooth: hci4: command tx timeout [ 242.238107] Bluetooth: hci5: command tx timeout [ 242.239193] Bluetooth: hci7: command tx timeout [ 243.517957] Bluetooth: hci0: command tx timeout [ 243.647899] Bluetooth: hci1: command tx timeout [ 243.709980] Bluetooth: hci2: command tx timeout [ 243.901950] Bluetooth: hci3: command tx timeout [ 244.030152] Bluetooth: hci6: command tx timeout [ 244.094212] Bluetooth: hci4: command tx timeout [ 244.287942] Bluetooth: hci7: command tx timeout [ 244.288420] Bluetooth: hci5: command tx timeout [ 245.566147] Bluetooth: hci0: command tx timeout [ 245.694248] Bluetooth: hci1: command tx timeout [ 245.757961] Bluetooth: hci2: command tx timeout [ 245.950126] Bluetooth: hci3: command tx timeout [ 246.078066] Bluetooth: hci6: command tx timeout [ 246.143227] Bluetooth: hci4: command tx timeout [ 246.335066] Bluetooth: hci7: command tx timeout [ 246.335555] Bluetooth: hci5: command tx timeout [ 247.614896] Bluetooth: hci0: command tx timeout [ 247.741952] Bluetooth: hci1: command tx timeout [ 247.805968] Bluetooth: hci2: command tx timeout [ 247.998514] Bluetooth: hci3: command tx timeout [ 248.125934] Bluetooth: hci6: command tx timeout [ 248.190099] Bluetooth: hci4: command tx timeout [ 248.382226] Bluetooth: hci7: command tx timeout [ 248.382666] Bluetooth: hci5: command tx timeout [ 301.654241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.657756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.660797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.668413] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.674421] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.838172] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.841349] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.846387] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.855389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.860379] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.991295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.999433] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.010193] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.029463] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.039270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.077329] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.081657] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.090738] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.092249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.096599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.100146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.122135] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.126260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.139162] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.142535] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.190380] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.194354] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.251562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.264745] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.280196] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.293805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.352798] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.361500] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.369353] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.373711] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.375455] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.444452] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.465984] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.472344] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.476330] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.743912] Bluetooth: hci0: command tx timeout [ 303.934991] Bluetooth: hci1: command tx timeout [ 304.126950] Bluetooth: hci2: command tx timeout [ 304.253963] Bluetooth: hci4: command tx timeout [ 304.254958] Bluetooth: hci3: command tx timeout [ 304.446957] Bluetooth: hci6: command tx timeout [ 304.640141] Bluetooth: hci5: command tx timeout [ 304.958922] Bluetooth: hci7: command tx timeout [ 305.789969] Bluetooth: hci0: command tx timeout [ 305.982162] Bluetooth: hci1: command tx timeout [ 306.173961] Bluetooth: hci2: command tx timeout [ 306.302179] Bluetooth: hci3: command tx timeout [ 306.302356] Bluetooth: hci4: command tx timeout [ 306.495319] Bluetooth: hci6: command tx timeout [ 306.685947] Bluetooth: hci5: command tx timeout [ 307.006899] Bluetooth: hci7: command tx timeout [ 307.838930] Bluetooth: hci0: command tx timeout [ 308.030037] Bluetooth: hci1: command tx timeout [ 308.222039] Bluetooth: hci2: command tx timeout [ 308.350112] Bluetooth: hci3: command tx timeout [ 308.350324] Bluetooth: hci4: command tx timeout [ 308.543930] Bluetooth: hci6: command tx timeout [ 308.734218] Bluetooth: hci5: command tx timeout [ 309.054082] Bluetooth: hci7: command tx timeout [ 309.886211] Bluetooth: hci0: command tx timeout [ 310.078135] Bluetooth: hci1: command tx timeout [ 310.270010] Bluetooth: hci2: command tx timeout [ 310.398001] Bluetooth: hci3: command tx timeout [ 310.398079] Bluetooth: hci4: command tx timeout [ 310.590198] Bluetooth: hci6: command tx timeout [ 310.781940] Bluetooth: hci5: command tx timeout [ 311.103093] Bluetooth: hci7: command tx timeout [ 363.994694] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.007012] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.009503] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.024739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.028554] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.244376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.247672] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.251111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.261076] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.267495] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.343579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.348429] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.352435] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.373428] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.379414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.382249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.383764] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.392295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.395379] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.400468] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.502359] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.517130] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.530552] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.557966] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.585435] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.665003] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.668757] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.683491] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.718339] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.764638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.900418] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.911890] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.974467] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.985556] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.024642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.044837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.065560] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.085321] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.152379] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.158388] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.077973] Bluetooth: hci0: command tx timeout [ 366.335533] Bluetooth: hci1: command tx timeout [ 366.462978] Bluetooth: hci3: command tx timeout [ 366.463093] Bluetooth: hci2: command tx timeout [ 366.717943] Bluetooth: hci4: command tx timeout [ 366.910991] Bluetooth: hci5: command tx timeout [ 367.166341] Bluetooth: hci6: command tx timeout [ 367.230168] Bluetooth: hci7: command tx timeout [ 368.126949] Bluetooth: hci0: command tx timeout [ 368.382028] Bluetooth: hci1: command tx timeout [ 368.509935] Bluetooth: hci2: command tx timeout [ 368.510965] Bluetooth: hci3: command tx timeout [ 368.766902] Bluetooth: hci4: command tx timeout [ 368.958920] Bluetooth: hci5: command tx timeout [ 369.213976] Bluetooth: hci6: command tx timeout [ 369.278008] Bluetooth: hci7: command tx timeout [ 370.174138] Bluetooth: hci0: command tx timeout [ 370.430145] Bluetooth: hci1: command tx timeout [ 370.558128] Bluetooth: hci3: command tx timeout [ 370.558148] Bluetooth: hci2: command tx timeout [ 370.813986] Bluetooth: hci4: command tx timeout [ 371.006933] Bluetooth: hci5: command tx timeout [ 371.262925] Bluetooth: hci6: command tx timeout [ 371.326882] Bluetooth: hci7: command tx timeout [ 372.221977] Bluetooth: hci0: command tx timeout [ 372.478961] Bluetooth: hci1: command tx timeout [ 372.606098] Bluetooth: hci2: command tx timeout [ 372.606299] Bluetooth: hci3: command tx timeout [ 372.862947] Bluetooth: hci4: command tx timeout [ 373.055148] Bluetooth: hci5: command tx timeout [ 373.310966] Bluetooth: hci6: command tx timeout [ 373.373927] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:05:10 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=f038391266f9419b RDX=0000000000000000 RSI=00000000c0c1d7e8 RDI=ffff88806ce31850 RBP=ffff888027c17848 RSP=ffff888027c17780 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff888027c17838 R14=ffff888018348000 R15=ffff888027c177f0 RIP=ffffffff81353d45 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f261085e000 CR3=000000002a960000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff81353d2d RDI=fffffbfff0b83988 RBP=ffffffff85c1cc40 RSP=ffff88802fe77710 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=000000000002325d R12=0000000000000002 R13=ffffffff81353d2d R14=0000000000000000 R15=ffff88802fe77818 RIP=ffffffff81aedae4 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056482b04d008 CR3=000000002cbca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000