Warning: Permanently added '[localhost]:56400' (ECDSA) to the list of known hosts. 2024/10/27 07:11:54 fuzzer started 2024/10/27 07:11:54 dialing manager at localhost:45639 syzkaller login: [ 65.663829] cgroup: Unknown subsys name 'net' [ 65.738122] cgroup: Unknown subsys name 'cpuset' [ 65.752311] cgroup: Unknown subsys name 'rlimit' 2024/10/27 07:12:11 syscalls: 200 2024/10/27 07:12:11 code coverage: enabled 2024/10/27 07:12:11 comparison tracing: enabled 2024/10/27 07:12:11 extra coverage: enabled 2024/10/27 07:12:11 setuid sandbox: enabled 2024/10/27 07:12:11 namespace sandbox: enabled 2024/10/27 07:12:11 Android sandbox: enabled 2024/10/27 07:12:11 fault injection: enabled 2024/10/27 07:12:11 leak checking: enabled 2024/10/27 07:12:11 net packet injection: enabled 2024/10/27 07:12:11 net device setup: enabled 2024/10/27 07:12:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/27 07:12:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/27 07:12:11 USB emulation: enabled 2024/10/27 07:12:11 hci packet injection: enabled 2024/10/27 07:12:11 wifi device emulation: enabled 2024/10/27 07:12:11 802.15.4 emulation: enabled 2024/10/27 07:12:11 fetching corpus: 0, signal 0/0 (executing program) 2024/10/27 07:12:13 starting 8 fuzzer processes 07:12:13 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x1, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xc0, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x400}, @decrefs, @free_buffer, @decrefs], 0xb5, 0x0, &(0x7f00000002c0)="672ade8ef78b976f2c99430c9347c26ee8c77eedbfd4a39618175926c77a94f2aee9b667c580af6746c98f3597be1d5e89bea0c514d95b13a22b257e2e1220fcc3e6fc538c7cbde6159693122986866ae72e9c70fd0bba2b7b7d84c94fa0428e78afc95485e23c51eee44d5d83ef8665b1300b2d621b2148887773cb5622dcf7be7aff46aff1d08bc994b6dfc6434ce50bfe15520caefb1b19d84b0ac6d1611891f5b76f74d4d601e8d4ef45be4c0eca648a9c763d"}) syz_open_dev$usbmon(&(0x7f00000003c0), 0x80000000, 0x20001) io_uring_enter(r0, 0x3610, 0xf97d, 0x0, &(0x7f0000000400)={[0x1000]}, 0x8) io_uring_setup(0x266, &(0x7f0000000440)={0x0, 0xa4f1, 0x8, 0x3, 0x33e}) r2 = io_uring_setup(0x2a1, &(0x7f00000004c0)={0x0, 0x31f9, 0x0, 0x2, 0x9b}) r3 = syz_open_dev$vcsu(&(0x7f0000000540), 0x8, 0x20000) r4 = fsopen(&(0x7f0000000580)='gfs2meta\x00', 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000005c0)=[r3, r4, r0, r1], 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x24000, 0x0) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) io_uring_enter(r5, 0x40ae, 0x124b, 0x1, &(0x7f0000000680)={[0x9]}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/asound/seq/clients\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000780)={0x2, 0x0, &(0x7f0000000740)=[r6, r7]}, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x1010, r2, 0x8000000) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f00000007c0)) 07:12:13 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x41ac) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x56}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8001}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfff9}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000800}, 0x84) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x30082, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) eventfd2(0x7fffffff, 0x80001) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) timer_create(0x7, &(0x7f0000000440)={0x0, 0x30}, &(0x7f0000000480)) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8184}, 0x100) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4809) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000006c0), 0x200280, 0x0) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000700)) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r2, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1af}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) getresuid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x62}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x5, 0x81, 0xff, 0x400, 0x2, 0x8, 0x81, 0x1ff, 0x3, 0xfff8, 0x7, 0x200, 0x1, 0x7, 0x8, 0x400]}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000010) 07:12:13 executing program 2: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x80, 0x40, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x40, 0x1, 0xfffff1c0, 0x8000}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x204, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r0}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff8001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8d74}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x20005}, 0x80) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x114, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r0}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x4004) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2b}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xcc, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x34}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xff}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xbc}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa77}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc0}], @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xac}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12c}]]}, 0xcc}, 0x1, 0x0, 0x0, 0xc010}, 0x1) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a80), 0x500, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffff81}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000bc0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'sit0\x00', r0, 0x0, 0x7, 0x80, 0x7, 0x3, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x8001, 0x10001}}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e00)={0x1cc, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x73}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98b3f3d494fb2450131f894fc2e51c05ea290e112c71213b"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "271aecb96ba9b13909111a2a5363c8b17feed600d987c0cb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "224b8f4174b6574d8a433e516de0b03058e64ec562e5ea60"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "380d836ee281283799f64bec4d4dc5e6ae827e3c663cfae7"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6cc63fe1d5f391a1a65e82a51371e7b38f443dfeddfa172f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0805e8e08139009d03ed77019aa57c429f1cb11e197a2949"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2b69d731d8fc16364e0adfc4734fca127f5ca3cb9ebbf91e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8a5f9937a194a6b3871a3b3bcf87eecc6ddb0d6d9d214a6f"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b33e2043bb52e4017aa69f2532a1b88c6a8ac0ff70437e7"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea9e1b7bcca2daada3742073d13f0ffdf3ec2222140b082f"}], @NL80211_ATTR_4ADDR={0x5}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4008001}, 0x8010) r8 = syz_open_dev$vcsa(&(0x7f0000001080), 0x7ff, 0x10002) getsockopt$inet_tcp_int(r8, 0x6, 0xc, &(0x7f00000010c0), &(0x7f0000001100)=0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r9, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x404408}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x54, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xff\xff'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008054}, 0x44800) 07:12:13 executing program 3: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000009, 0x10, 0xffffffffffffffff, 0x10000000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000000c0)={0x0, 0x1, 0x7ff}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000140)) openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x2100, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r4, 0x9cc03c31d36bc2df, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "b5171e6e749ec05b1e3e2fe6f60f391b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "6507ca05683ff657c3dd080c0a9829af"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "f135b6e9f286c818e3e796c3510582a4"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5e}, @NL80211_ATTR_PMK={0x14, 0xfe, "30dbc2d00253e512020f50d69ace43af"}, @NL80211_ATTR_PMKID={0x14, 0x55, "7b4d92f48a92b9796c621fcdfee1104e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7ebec19018614176fd38865c00f47de6"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20008040}, 0x24004000) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x1b, 0x1, 'cgroup.subtree_control\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000540)) socket$inet6_udplite(0xa, 0x2, 0x88) getpid() syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/key-users\x00', 0x0, 0x0) write$vga_arbiter(r5, &(0x7f0000000600)=@other={'lock', ' ', 'io+mem'}, 0xc) [ 83.467900] audit: type=1400 audit(1730013133.391:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:12:13 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x23, 0x4, 0x9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x751a35529b9b3c8c, 0x8000, 0x3, 0x1}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004}, 0x20000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff0000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x4000001) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x12}}}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_FILS_KEK={0x3b, 0xf2, "e61a83007df8508101f9b26bd0c0661aa29f7fb1abb9e993841873803a89904430b97bbfc21f33e5429f8ee9dee847f372e03fca155b43"}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0xffff, 0x8001, 0x40, 0x2}}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x4000014) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8d, 0x6b}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6c8}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20000040) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='environ\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x228, r5, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x1f7, 0x33, @assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @broadcast, @device_b, @from_mac, {0x3, 0xff8}}, @ver_80211n={0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20, 0x29, @random=0x20, @val={0x1, 0x6, [{0x3, 0x1}, {0x48}, {0x3, 0x1}, {0x1b}, {0x1, 0x1}, {0x6c}]}, @void, [{0xdd, 0x82, "602cb05eb9c46d1c73c8da8ec7eb417ff5c565f76cc7c851dadbe630203936b34ce7c1f57135a956fb207e89719c219588723fc2e54381b2e26a847ec288a983cae0f8dc78ffe7e7ee692248a2e3b08e0e22316292c40ab57477a481bf452c6734fb1120c3439bd7d4f4aec76ef09596da8a203a0bbae8027e3e0392c555032b74a0"}, {0xdd, 0x86, "a5dcd5de01ba3117f9b3a2e3b433445ba29b4a7131343444081fe62c579ba881f2eef5a88100a9b0b97c97b9d7822faa85062736b0e3161e3328f20d5f53c97af872714cdc23bf2d6fcfca63af0b2ab2c46972ea3cc0e059ccd3e473f17fc31b30e04372db07611797136d54462064c9c0428e6bcf4e4bc64eb8df8d8a061af3d11da1d75c7c"}, {0xdd, 0x28, "0242494de7f467c5bc8867775dd030de395b840f7482fff2a538330e0d9f0b3305155526f5bd77db"}, {0xdd, 0x91, "f72a287f664ae23824842fc409652a959634b6f4590aa3f0fa14534947d57fe903b282007bb1d5513cd6d1e9e0cd8f358387856cccdfb83d90e60f9837125f6cd00ef762ec9489e156f29732aea35dd59c32cf4fe43140ce420b0f0aa407f15aa6355cec13825e72d447e3f7a9b9ca86044cd7a559ab36cb49c6261e74738d153a2a9dfbe32817d4f17056fe2a03c73378"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x101]}]}, 0x228}, 0x1, 0x0, 0x0, 0x15}, 0x40000) r7 = syz_open_dev$vcsa(&(0x7f0000000a80), 0x1, 0x406000) syz_genetlink_get_family_id$fou(&(0x7f0000000a40), r7) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000ac0), 0x4800, 0x0) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x80}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x84}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xda}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x88}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r7, 0x89fa, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6_vti0\x00', r1, 0x2f, 0x3, 0x69, 0x617, 0x20, @empty, @remote, 0x28, 0x80, 0x8, 0x3d40}}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d00)='net/snmp\x00') ioctl$LOOP_SET_FD(r9, 0x4c00, r7) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001040)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000d80)={0x244, r5, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x21}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x8]}, @NL80211_ATTR_FRAME={0x1c9, 0x33, @beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0xff}, @broadcast, @broadcast, @initial, {0x3, 0x1f}}, 0x20, @random=0x1, 0x5, @void, @val={0x1, 0x3, [{0x18, 0x1}, {0xb}, {0x6c, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0xac, 0x30}}, @val={0x2d, 0x1a, {0x8000, 0x3, 0x1, 0x0, {0x400000000000, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x8, 0xad6b, 0x9}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3, 0x1, 0x26, 0x34c}}, [{0xdd, 0x84, "100aec8ac8be0eaebb14c3597bbf8a98be446ef01771d64d14e91ab28318adebbd443b1cfafcbeefcd462a9ecec9bf80cc6af94f02341f302eb9398b876d304d980ea9019a0ed2ec1efdaf65706f95572829fef77030444e8a98a3720f4fe7073f157c716c67128c3c0c5d3a2c5d5206bc855712284301e2f92f7d98d7c94f2ca4ed15c0"}, {0xdd, 0xdb, "2a05b67e7162ae96fb1ce840eff5c356c2aed19ff391150d8309a7e2863d51c47b2dd41a8ab3c63217fc8a30ea0c9349f2c04bf87065c5b474a63fdee4928f134c72d2e5b978a68bb714e8622fdedec588ae80f145f3351e54b0e288a2dd7404a11b4f8649f9ccd3423a18e488e61c9c0d2a0598c0eeb170520c5dcf0aff1c0795058e9b424069ac0d9c6cf61e7ab0232c991445821314d6c2abfff06b595b683ed2abcc2425abd5617d2628d6eb46c641d5b62b79375a84b1fd85218e1096095efbef5fce4edf14cecc4e1fe235d04dbd52d5766a254b334d2c7a"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x3f, 0x2, 0x1, 0x2, 0x8, 0x0, 0xeb87]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x360}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xb73}]}, 0x244}, 0x1, 0x0, 0x0, 0x810}, 0x20008890) 07:12:13 executing program 5: r0 = socket(0x23, 0x80000, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000180)={0x8c0, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x9}}}}, [@NL80211_ATTR_PROBE_RESP={0x897, 0x91, "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"}]}, 0x8c0}, 0x1, 0x0, 0x0, 0x8800}, 0x4004800) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xf0, r1, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xd4, 0x80, [@prep={0x83, 0x1f, @not_ext={{}, 0x20, 0x7f, @device_b, 0x8, "", 0x4, 0x0, @device_b, 0xffffffa3}}, @measure_req={0x26, 0xad, {0x6, 0x5, 0x7f, "c0b19d3a910d43d708b8e394bd1e0be4fd24523550003acc3ef6568f1107e5a2cd64c350d226345534b6f3852e8df2949009d379b21ca936dd4569b01b5d2778973e0a29c11ed6e767a3bd75ab7bd7659a77978bdc33ee1434ef4f8c5a8fcf859007d43671f5e67ad2cc1e6b27227228c3b5a1a27d815df15304997706043ec0af056a549574a2beb88f36f892269556ec8542bf868d0856e6a2f9d78153720748ca32c183fb8e167d3d"}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x5c, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x808}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0xc0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/partitions\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000e80), r0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x58, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20040001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000001180)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001040)={0xc4, r6, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5}]}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "af5c5fd926962317a2e99c0837"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "50b8f690d594ed71af82ddc8"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "49bf4b1f696283fa67c264f5b0"}], @key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "fe38ddd5ddfb76c1b3ff1182f963"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0xfaf53de048edd4ad) r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000011c0), 0x203, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r5) sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x40, r8, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0xc001) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r9, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x74}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, 0x28}}, 0x40000) eventfd2(0x80000000, 0x80800) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe48, 0x67}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xfce5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, [{0x16}, {0x30}, {0x48}, {0xc}, {0x60}, {0x39}, {0x74, 0x1}, {0x9}, {0x3, 0x1}, {0x6, 0x1}, {0xb}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, [{0x4, 0x1}, {0x48, 0x1}, {0x2}, {0x6c, 0x1}, {0x24}, {0x60, 0x1}, {0x5}, {0x1b, 0x1}, {0xb, 0x1}, {0x18}, {0x12}, {0x3}, {0x5}, {0x46, 0x1}, {0x24, 0x1}, {0x12, 0x1}, {0x30}, {0x1}, {0x36, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40041}, 0x840) 07:12:13 executing program 7: r0 = getpid() waitid(0x0, r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) waitid(0x2, r0, &(0x7f0000000140), 0x80000000, &(0x7f00000001c0)) r1 = fork() ptrace$peek(0x2, r1, &(0x7f0000000280)) timer_create(0x0, &(0x7f00000004c0)={0x0, 0x2b, 0x1, @thr={&(0x7f00000002c0)="14f27c3925cb7fb8971095f9cdc017a3cedc944fb1f2a7c0206a8c69cd8973239b56db5313103b82dac81cbbf02dcc04683da02565ca3ccf2f7f904f45e1126999aca2ec8b0c03d66af454651991baf17dd803004780ceafb8669a6e5860d5115eca81cb6b1de70c07568508ba1d00333cf7c0117ce0ffcf4fb7085933aabfbbd21fde7c074f2feb7bdd0c4ddc9f4552cc9b026595a678dc9faf8c85b674456877d1194b7de21e26c83425d408ef16eede1fbd7d9df73f0f0797211c1e1af5776e4ffd459306575f86c5a887e360d19f85d7d2b918", &(0x7f00000003c0)="f1d2f90079f1dbeedfae4439d0ac03e1258677ab2ba4573f3a2f58cbdb24e732ec98eccb99de166bd744b38e49f1fc1d919366cc1f87b834e509c54ca591dc0c192d5b0b0adec55639d03a223bc39594bda9fac38362b671832cefad199198bbceb682559a505b2a6803a5077becf96accfe610ffe18abe00402ae7c9646301ac1bbd385072e8dbd4fcc1003af27d71251fd6e8f97b6cc8e8298af52e0e0bef41a6224004951a0a4231c62e2d1ba434567de7450e446f84dc6e7d3b635407dbe4b1bcb432dad3afe4fb3917775"}}, &(0x7f0000000500)) waitid(0x1, r0, &(0x7f0000000540), 0x8, &(0x7f00000005c0)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000680)='/proc/locks\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f00000006c0), 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000700)={0x0, 0x1b, 0x4, @tid=r3}, &(0x7f0000000740)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, r4, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x21, 0x34, @random="40087db65ea055b940cfcb887f76cd9f2fa0b01815e84307f12366272b"}]}, 0x38}}, 0x4000) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000008c0), 0x40, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000900), 0x2, 0x0) timer_create(0x0, &(0x7f0000000b40)={0x0, 0x8, 0x0, @thr={&(0x7f0000000940)="f87dde673c180bda68e55debc2621c6298bd371e152e155508e1c341c7ad0d8a72c4f82eba32f6af92f968d35fc33917e7b3a080e5d4e79fb7d652b4d8f843dcb90edb0c73cd64433956b32b3d7ba75cd680cb5cb09e60c9ed40bca63d65ec5743b7939d8e06f185831584edd441bbd1fbf2ee657c563fd7c60ae6fd7b674cdaace38888297a05b283c45e407685b8cd6e5506eb80fbf79cb61211b5e737d440a44ed3f77d6f480aa8b95e90f4d92203e711638c86b3b950e9adfd2ba4ac0fd66f8857a1cfab1cbdab36c3af9e4c3381d59f8d936eab4863a05783c0792e5e5bc0c35917da1d3a", &(0x7f0000000a40)="b59b7104071a506178934bbe2c8bd4c999cde165242119f58662bf7f0b740b2bd40657858beba4a278a1ea9fce7c5d95d40b0553fbd8304f408db866893fbe0c87cabdb4a677567026072cd2ddd7b494a7e56aa5f454d8a38625881361a5ee84e65664ffcf562eb67c6aa32999f3c6d105050c1e3a9c7739a5cba5023f04ec09a39f77f8a832bf222ce481d4ff3e4b6ae83b2314be791c16be31932a903d277a9b5e73a867f31c49fff5185b5491e4e396bc01c654e213c34b874b16ac40984ad396a36f2cd5cbe8"}}, &(0x7f0000000b80)=0x0) timer_gettime(r6, &(0x7f0000000bc0)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x94, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb77, 0x7a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "67166553d65605cc7bfc2202b64556d4"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "35a4018ce57f930e05f6a75232de822e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "5b1c0e42cb349ad6ba7373891c9c5d7b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2d80a5bc7f2f58276aa6e6bc3fd3a1a8"}]}, 0x94}, 0x1, 0x0, 0x0, 0x8005}, 0x400c0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000e00)={0x1e8, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x33}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xffff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_IE={0x110, 0x2a, [@link_id={0x65, 0x12}, @measure_req={0x26, 0xee, {0x8, 0x0, 0x20, "021261a869d797946bb93a4fc88e89fb2aea6f64e0939f1eb178ff5dcf6b1d6389194d653ae28b80344d0bafb470fb801dc05163d75a1aebbf4df6cab73197c168790b438e20542bdc72a64e2a12ac0de08ae8e99e936b9cea6aabd6f867a69fddd5c4d502b0e81ba70e94674402b2e151a1beb2059118a7751bf1e814d9f92ed8a78b6a4cae0858522a6196ac2fc21b6401b2229a3b102183fa15546e7b0820f2fcd88c1dbf7db9f4503726e099a9edf3b00549b3e21fb76820b8cdfbd09273260eb3d77e62f99c5c6f655eed9e1bf372469b6407aac5fe65b0cca225f46808a4c28692b943080b355917"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7fff}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE={0x6c, 0x2a, [@preq={0x82, 0x4c, @ext={{0x0, 0x1}, 0x1, 0x7f, 0x100, @device_a, 0x401, @device_a, 0x21, 0x9, 0x4, [{{0x1, 0x0, 0x1}, @device_a, 0x6}, {{}, @device_b, 0x8d}, {{0x1, 0x0, 0x1}, @device_a, 0xff}, {{}, @device_a, 0x6}]}}, @mic={0x8c, 0x18, {0xd23, "4534a8f3090f", @long="f0647da8184fcb41175e49d2b4c98bb2"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xbe77}, @NL80211_ATTR_IE={0x25, 0x2a, [@random={0x1, 0x1c, "7a91fc6df75bc62992af2f34a2db4dc69d245f8b6ea41c4e59eee2bf"}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 07:12:13 executing program 6: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x100010, r0, 0x9bf64000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000040)=[@acquire={0x40046305, 0x2}, @increfs={0x40046304, 0x2}, @decrefs], 0x5f, 0x0, &(0x7f0000000080)="08f2259902f54f5639f0ca1f88895ded75036b18ae83480552e172ad1f498522b9323732c1c124fef81d0ed4012c1f792e587c19343b05b46c34644d6a895bc6a53d7af4deaf8562229503715419ba415689d0366203b0242aa832c6e50bd1"}) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0xe7, 0x100) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x2400c8b1) syz_open_dev$vcsa(&(0x7f00000002c0), 0x5, 0x161002) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x74}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000030}, 0x84) r3 = signalfd(r0, &(0x7f0000000440)={[0xfffffffffffffffc]}, 0x8) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x2e}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x88011}, 0x20000090) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6b}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x5c}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2246722de2859161895b77840258f0c1b1629a63d0db2888"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x74}, 0x1, 0x0, 0x0, 0x48d0}, 0x44004) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20000890) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/schedstat\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb, 0x10, r6, 0x8000000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x120, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x81}, @NL80211_ATTR_IE={0xdc, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x1}, 0x0, 0x7, @device_a, 0x0, 0x80000001, 0x100}}, @mic={0x8c, 0x10, {0xc04, "db9a591a7c88", @short="1205e97366aa944d"}}, @preq={0x82, 0x72, @not_ext={{0x0, 0x1, 0x1}, 0x45, 0x6c, 0x1f, @device_b, 0xfffffffb, "", 0x7, 0x80000001, 0x8, [{{0x1, 0x0, 0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x6}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @broadcast, 0x1}, {{}, @broadcast, 0xa85}, {{0x1, 0x0, 0x1}, @device_a, 0xfffffff7}, {{}, @broadcast, 0x4}, {{0x1, 0x0, 0x1}, @device_b, 0x7}]}}, @ssid={0x0, 0x3, @random="2a0cf2"}, @ibss={0x6, 0x2, 0x7}, @ssid={0x0, 0x20, @random="32f22485f2aa35a92b47bde9ed753c2b8d355109acec77e75dc568bd74da4227"}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x0, 0x3f, 0x5, 0x7}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0xe, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @dsss={0x3, 0x1}, @ibss={0x6, 0x2, 0x40}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) signalfd(0xffffffffffffffff, &(0x7f0000000bc0)={[0x1]}, 0x8) [ 84.749869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.751300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.752667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.756329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.759381] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.760940] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.794335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.797806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.799051] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.802274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.804452] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.805752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.868542] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.879794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.880939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.887653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.890767] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.899808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.942530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.947164] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.951657] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.969811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.988005] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.991847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.994763] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.999826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.008788] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.010779] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.013888] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.017611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.020630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.021351] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.022207] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.026144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.027953] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.032414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.039198] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.044422] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.046035] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.048184] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.049356] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.055859] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.060713] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.062056] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.071760] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.153344] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.172272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.173460] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.828602] Bluetooth: hci1: command tx timeout [ 86.828605] Bluetooth: hci0: command tx timeout [ 86.953956] Bluetooth: hci2: command tx timeout [ 87.081800] Bluetooth: hci3: command tx timeout [ 87.081809] Bluetooth: hci6: command tx timeout [ 87.147534] Bluetooth: hci4: command tx timeout [ 87.209739] Bluetooth: hci7: command tx timeout [ 87.274899] Bluetooth: hci5: command tx timeout [ 88.874746] Bluetooth: hci1: command tx timeout [ 88.874795] Bluetooth: hci0: command tx timeout [ 89.001578] Bluetooth: hci2: command tx timeout [ 89.129648] Bluetooth: hci3: command tx timeout [ 89.129694] Bluetooth: hci6: command tx timeout [ 89.193568] Bluetooth: hci4: command tx timeout [ 89.257594] Bluetooth: hci7: command tx timeout [ 89.321563] Bluetooth: hci5: command tx timeout [ 90.921571] Bluetooth: hci0: command tx timeout [ 90.922970] Bluetooth: hci1: command tx timeout [ 91.049621] Bluetooth: hci2: command tx timeout [ 91.179587] Bluetooth: hci3: command tx timeout [ 91.179725] Bluetooth: hci6: command tx timeout [ 91.241567] Bluetooth: hci4: command tx timeout [ 91.306588] Bluetooth: hci7: command tx timeout [ 91.370587] Bluetooth: hci5: command tx timeout [ 92.969606] Bluetooth: hci0: command tx timeout [ 92.970132] Bluetooth: hci1: command tx timeout [ 93.132538] Bluetooth: hci2: command tx timeout [ 93.225577] Bluetooth: hci6: command tx timeout [ 93.226755] Bluetooth: hci3: command tx timeout [ 93.290516] Bluetooth: hci4: command tx timeout [ 93.353739] Bluetooth: hci7: command tx timeout [ 93.418626] Bluetooth: hci5: command tx timeout [ 147.468102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.469646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.471722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.475808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.477945] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.479634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.508628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.513097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.516886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.520787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.522000] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.524349] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.525272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.529736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.533737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.535295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.537387] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.538644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.584063] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.588965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.599015] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.615908] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.638457] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.639969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.657166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.662697] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.687748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.699714] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.701740] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.703063] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.705723] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.707402] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.708636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.711730] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.727971] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.747992] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.749132] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.753229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.761832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.769083] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.795145] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.798662] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.804391] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.810181] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.811026] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.815920] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.825574] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.840727] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.547714] Bluetooth: hci0: command tx timeout [ 149.609625] Bluetooth: hci2: command tx timeout [ 149.609666] Bluetooth: hci1: command tx timeout [ 149.673674] Bluetooth: hci3: command tx timeout [ 149.737560] Bluetooth: hci5: command tx timeout [ 149.866628] Bluetooth: hci4: command tx timeout [ 149.931579] Bluetooth: hci6: command tx timeout [ 149.932204] Bluetooth: hci7: command tx timeout [ 151.596539] Bluetooth: hci0: command tx timeout [ 151.657684] Bluetooth: hci1: command tx timeout [ 151.658781] Bluetooth: hci2: command tx timeout [ 151.721634] Bluetooth: hci3: command tx timeout [ 151.785736] Bluetooth: hci5: command tx timeout [ 151.913907] Bluetooth: hci4: command tx timeout [ 151.977905] Bluetooth: hci7: command tx timeout [ 151.978602] Bluetooth: hci6: command tx timeout [ 153.642730] Bluetooth: hci0: command tx timeout [ 153.706562] Bluetooth: hci2: command tx timeout [ 153.706618] Bluetooth: hci1: command tx timeout [ 153.769537] Bluetooth: hci3: command tx timeout [ 153.833653] Bluetooth: hci5: command tx timeout [ 153.961783] Bluetooth: hci4: command tx timeout [ 154.025559] Bluetooth: hci7: command tx timeout [ 154.026597] Bluetooth: hci6: command tx timeout [ 155.691545] Bluetooth: hci0: command tx timeout [ 155.753845] Bluetooth: hci2: command tx timeout [ 155.753885] Bluetooth: hci1: command tx timeout [ 155.817585] Bluetooth: hci3: command tx timeout [ 155.881614] Bluetooth: hci5: command tx timeout [ 156.009578] Bluetooth: hci4: command tx timeout [ 156.073751] Bluetooth: hci6: command tx timeout [ 156.073837] Bluetooth: hci7: command tx timeout [ 209.676000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.694680] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.696659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.700091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.708869] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.710093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.775999] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.778640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.787684] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.791941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.793671] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.794725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.852266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.859972] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.862948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.869027] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.871024] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.875730] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.882111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.883071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.885526] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.887205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.888325] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.891677] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.894955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.910586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.915924] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.917015] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.924240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.934515] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.994448] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.010532] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.024030] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.038679] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.059375] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.060942] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.062169] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.096948] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.098241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.100633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.117907] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.124990] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.146988] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.148140] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.151694] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.176955] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.184709] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.192042] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.754645] Bluetooth: hci0: command tx timeout [ 211.882570] Bluetooth: hci1: command tx timeout [ 211.949524] Bluetooth: hci2: command tx timeout [ 212.010652] Bluetooth: hci4: command tx timeout [ 212.010688] Bluetooth: hci3: command tx timeout [ 212.139654] Bluetooth: hci5: command tx timeout [ 212.266581] Bluetooth: hci7: command tx timeout [ 212.266681] Bluetooth: hci6: command tx timeout [ 213.802546] Bluetooth: hci0: command tx timeout [ 213.930858] Bluetooth: hci1: command tx timeout [ 213.995500] Bluetooth: hci2: command tx timeout [ 214.057607] Bluetooth: hci3: command tx timeout [ 214.058137] Bluetooth: hci4: command tx timeout [ 214.185556] Bluetooth: hci5: command tx timeout [ 214.313564] Bluetooth: hci6: command tx timeout [ 214.314092] Bluetooth: hci7: command tx timeout [ 215.850604] Bluetooth: hci0: command tx timeout [ 215.977540] Bluetooth: hci1: command tx timeout [ 216.043609] Bluetooth: hci2: command tx timeout [ 216.106603] Bluetooth: hci4: command tx timeout [ 216.106794] Bluetooth: hci3: command tx timeout [ 216.234525] Bluetooth: hci5: command tx timeout [ 216.361559] Bluetooth: hci6: command tx timeout [ 216.362091] Bluetooth: hci7: command tx timeout [ 217.897558] Bluetooth: hci0: command tx timeout [ 218.025822] Bluetooth: hci1: command tx timeout [ 218.089521] Bluetooth: hci2: command tx timeout [ 218.153905] Bluetooth: hci4: command tx timeout [ 218.156496] Bluetooth: hci3: command tx timeout [ 218.282543] Bluetooth: hci5: command tx timeout [ 218.409696] Bluetooth: hci7: command tx timeout [ 218.409722] Bluetooth: hci6: command tx timeout [ 272.096098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.099841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.101412] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.160060] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.163461] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.164569] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.166336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.166874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.170849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.171581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.174199] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.176742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.247972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.251974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.254281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.270261] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.287704] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.293059] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.329150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.334954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.339651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.356951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.362713] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.364971] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.378031] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.389684] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.394172] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.403016] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.405900] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.411633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.437264] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.453718] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.457180] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.460100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.462167] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.466718] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.469514] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.473133] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.485571] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.541560] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.557072] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.561251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.689174] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.717723] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.773691] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.811320] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.815831] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.817922] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.217770] Bluetooth: hci0: command tx timeout [ 274.219865] Bluetooth: hci1: command tx timeout [ 274.345653] Bluetooth: hci2: command tx timeout [ 274.409690] Bluetooth: hci3: command tx timeout [ 274.475497] Bluetooth: hci4: command tx timeout [ 274.537518] Bluetooth: hci6: command tx timeout [ 274.729722] Bluetooth: hci5: command tx timeout [ 274.921631] Bluetooth: hci7: command tx timeout [ 276.265543] Bluetooth: hci0: command tx timeout [ 276.267393] Bluetooth: hci1: command tx timeout [ 276.394481] Bluetooth: hci2: command tx timeout [ 276.457559] Bluetooth: hci3: command tx timeout [ 276.521611] Bluetooth: hci4: command tx timeout [ 276.585592] Bluetooth: hci6: command tx timeout [ 276.777545] Bluetooth: hci5: command tx timeout [ 276.970503] Bluetooth: hci7: command tx timeout [ 278.313530] Bluetooth: hci1: command tx timeout [ 278.313757] Bluetooth: hci0: command tx timeout [ 278.441736] Bluetooth: hci2: command tx timeout [ 278.506703] Bluetooth: hci3: command tx timeout [ 278.569646] Bluetooth: hci4: command tx timeout [ 278.634525] Bluetooth: hci6: command tx timeout [ 278.825612] Bluetooth: hci5: command tx timeout [ 279.019474] Bluetooth: hci7: command tx timeout [ 280.361693] Bluetooth: hci1: command tx timeout [ 280.361826] Bluetooth: hci0: command tx timeout [ 280.489696] Bluetooth: hci2: command tx timeout [ 280.554525] Bluetooth: hci3: command tx timeout [ 280.617616] Bluetooth: hci4: command tx timeout [ 280.681745] Bluetooth: hci6: command tx timeout [ 280.873671] Bluetooth: hci5: command tx timeout [ 281.065672] Bluetooth: hci7: command tx timeout [ 334.591096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.593496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.595569] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.598222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.601777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.603871] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.604988] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.608008] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.609704] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.618647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.620053] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.621094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.651282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.656391] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.657960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.670742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.685684] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.690690] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.728539] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.731971] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.734324] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.738956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.745303] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.747577] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.779767] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.794342] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.796716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.802907] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.812885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.818330] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.831402] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.853275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.855192] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.856808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.861998] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.866106] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.868695] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.874143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.875914] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.881923] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.883599] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 334.884643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.891076] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.891560] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.894657] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.895159] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.903784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.915044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.681625] Bluetooth: hci0: command tx timeout [ 336.682368] Bluetooth: hci1: command tx timeout [ 336.745645] Bluetooth: hci2: command tx timeout [ 336.873580] Bluetooth: hci3: command tx timeout [ 336.938568] Bluetooth: hci5: command tx timeout [ 337.001804] Bluetooth: hci7: command tx timeout [ 337.003503] Bluetooth: hci6: command tx timeout [ 337.004010] Bluetooth: hci4: command tx timeout [ 338.729585] Bluetooth: hci0: command tx timeout [ 338.730107] Bluetooth: hci1: command tx timeout [ 338.793576] Bluetooth: hci2: command tx timeout [ 338.921680] Bluetooth: hci3: command tx timeout [ 338.985524] Bluetooth: hci5: command tx timeout [ 339.050120] Bluetooth: hci7: command tx timeout [ 339.050149] Bluetooth: hci6: command tx timeout [ 339.051665] Bluetooth: hci4: command tx timeout [ 340.777539] Bluetooth: hci1: command tx timeout [ 340.779626] Bluetooth: hci0: command tx timeout [ 340.841755] Bluetooth: hci2: command tx timeout [ 340.969913] Bluetooth: hci3: command tx timeout [ 341.035502] Bluetooth: hci5: command tx timeout [ 341.099509] Bluetooth: hci6: command tx timeout [ 341.100036] Bluetooth: hci7: command tx timeout [ 341.100965] Bluetooth: hci4: command tx timeout [ 342.827501] Bluetooth: hci0: command tx timeout [ 342.827622] Bluetooth: hci1: command tx timeout [ 342.889848] Bluetooth: hci2: command tx timeout [ 343.017622] Bluetooth: hci3: command tx timeout [ 343.082479] Bluetooth: hci5: command tx timeout [ 343.145650] Bluetooth: hci4: command tx timeout [ 343.145761] Bluetooth: hci7: command tx timeout [ 343.146268] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 07:17:23 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=1ffff11004879e9f RSI=ffffffff818e5a3f RDI=ffff8880243cf4f8 RBP=ffff8880243cf590 RSP=ffff8880243cf488 R8 =0000000000000001 R9 =ffff8880243cf538 R10=000000000003c001 R11=00000000000223e3 R12=ffff8880243cf5c0 R13=0000000000000000 R14=ffff88800bacd280 R15=ffff8880243cf4f8 RIP=ffffffff81148ec9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff84848cc0 CR3=0000000027b3e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000016 RCX=ffffffff812fb082 RDX=fffffbfff0fda9d5 RSI=0000000000000008 RDI=ffffffff87ed4ea0 RBP=ffff88800f3b5cc0 RSP=ffff88802ce2f8d8 R8 =0000000000000000 R9 =fffffbfff0fda9d4 R10=ffffffff87ed4ea7 R11=0000000000000001 R12=ffff88800f3b5280 R13=0000000000000002 R14=dffffc0000000000 R15=0000000000000003 RIP=ffffffff812fb08a RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f205e79d540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f205e84ae60 CR3=000000002efa0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000