Warning: Permanently added '[localhost]:6407' (ECDSA) to the list of known hosts. 2024/10/31 09:24:26 fuzzer started 2024/10/31 09:24:26 dialing manager at localhost:45639 syzkaller login: [ 66.165043] cgroup: Unknown subsys name 'net' [ 66.290891] cgroup: Unknown subsys name 'cpuset' [ 66.304857] cgroup: Unknown subsys name 'rlimit' 2024/10/31 09:24:43 syscalls: 221 2024/10/31 09:24:43 code coverage: enabled 2024/10/31 09:24:43 comparison tracing: enabled 2024/10/31 09:24:43 extra coverage: enabled 2024/10/31 09:24:43 setuid sandbox: enabled 2024/10/31 09:24:43 namespace sandbox: enabled 2024/10/31 09:24:43 Android sandbox: enabled 2024/10/31 09:24:43 fault injection: enabled 2024/10/31 09:24:43 leak checking: enabled 2024/10/31 09:24:43 net packet injection: enabled 2024/10/31 09:24:43 net device setup: enabled 2024/10/31 09:24:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/31 09:24:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/31 09:24:43 USB emulation: enabled 2024/10/31 09:24:43 hci packet injection: enabled 2024/10/31 09:24:43 wifi device emulation: enabled 2024/10/31 09:24:43 802.15.4 emulation: enabled 2024/10/31 09:24:43 fetching corpus: 0, signal 0/0 (executing program) 2024/10/31 09:24:45 starting 8 fuzzer processes 09:24:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x800) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xbe458f1c36e1ccdc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r3, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20004804) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x392e}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xcd0f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x240248c4) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4044015) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048004}, 0x400c0d1) 09:24:45 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x64, 0x62, 0x64, 0x58, 0x36, 0x60, 0x66, 0x34, 0x62, 0x64, 0x37, 0x33, 0x0, 0x35, 0x37, 0x30]}, &(0x7f0000000080)={0x0, "594a8fe56d4d4cbe16fe63a2f82b097fa3ae65004f87aa543d97e856698b16860fc3ad305fe11f41adb0c5f5295c1562bb088e2fff8c23e823f5c71ef17b596e", 0x1e}, 0x48, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, 0xfffffffffffffff8) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "7838e32ee26d8988beffa1792bcc9454f267430f8bf6fc56edd765a841e762a9ba3934ad9255caa7a11440387ba2da18ea77a575262bc18be429f8ba89ab1764", 0x28}, 0x48, r0) keyctl$search(0xa, r1, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, r0) r2 = request_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='logon\x00', r0) keyctl$unlink(0x9, r2, r1) keyctl$instantiate(0xc, r0, &(0x7f00000003c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', 'user\x00'}, 0x1e, r1) r3 = add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc3}, &(0x7f0000000500)={0x0, "72fedfd4b8598d94b40662f153501687ccb3c6417b59b193ead5a833de068bd8ba2fb36d154cdd02b48c54f010a334c16ce56aae25d0a6964da5aff1a49ab08a", 0x12}, 0x48, r2) keyctl$search(0xa, r0, &(0x7f0000000400)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x0}, r3) r4 = request_key(&(0x7f0000000580)='big_key\x00', &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)='^(]\x00', 0xfffffffffffffffc) r5 = add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @auto=[0x63, 0x64, 0x64, 0x36, 0x66, 0x62, 0x66, 0x61, 0x38, 0x63, 0x1, 0x31, 0x31, 0x66, 0x0, 0x30]}, &(0x7f0000000740)={0x0, "e09572c11cf45b16a8a93335c27141869f397e048f12e8eefbfff20d68295a0ef59076cda128ea2db8e5e3bd04c3e6a28544371076a039632562eb3a2f4ddbee", 0x2b}, 0x48, r1) keyctl$search(0xa, r3, &(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={'syz', 0x1}, r5) keyctl$search(0xa, r3, &(0x7f00000007c0)='rxrpc\x00', &(0x7f0000000800)={'syz', 0x3}, r5) keyctl$clear(0x7, r3) keyctl$negate(0xd, r4, 0x3, r1) r6 = add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc4}, &(0x7f00000008c0)={0x0, "a6d89eacc595ba26b5e3791728fc799246bb23fca1411b136ebd7f9eb1ad15ea73a9ba85550c656d9d14efbc0b141299e6f21773b8df113f23a992d0e23f634e", 0x3b}, 0x48, r1) r7 = add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$search(0xa, r6, &(0x7f0000000940)='ceph\x00', &(0x7f0000000980)={'syz', 0x0}, r7) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000ac0)=[{&(0x7f0000000a40)="bc703dfa028e22932dca7b99a449dc590932c3797e63af99cd276fc24a11238de9c8e8dd5b98088050c202fc4adaf4fd8fd375c889b4d884952a307b5b7dea4d973ce654b623628fbb88e64175433d2a663387bed6", 0x55}], 0x1, r0) keyctl$link(0x8, r2, 0x0) 09:24:45 executing program 2: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80800) bind(r0, &(0x7f0000000080)=@phonet={0x23, 0x6, 0x4a, 0x80}, 0x80) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x80000) accept4(r1, &(0x7f0000000180)=@rc={0x1f, @fixed}, &(0x7f0000000200)=0x80, 0x40000) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8800, &(0x7f00000002c0)={[{@size={'size', 0x3d, [0x6b, 0x65, 0x78, 0x31, 0x70, 0x30, 0x37, 0x35]}}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x70, 0x65, 0x25, 0x33, 0x39, 0x67]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32, 0x6d, 0x38, 0x65, 0x31, 0x70, 0x70, 0x36]}}, {@huge_always}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x38, 0x31, 0x34, 0x38, 0x4a, 0x0]}}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x34]}}, {@size={'size', 0x3d, [0x74, 0x30, 0x74, 0x67, 0x78, 0x65, 0x70, 0x74]}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '+['}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@appraise}]}) accept4$unix(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x6e, 0x800) clone3(&(0x7f00000006c0)={0x0, &(0x7f0000000480)=0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500), {0x1a}, &(0x7f0000000540)=""/37, 0x25, &(0x7f0000000580)=""/255, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0xa}, 0x58) process_madvise(r2, &(0x7f0000000800)=[{&(0x7f0000000740)="0795d0564399fcac8745ebad934d60e8b9508164b108bd650ee4459586a6c98a268c1b7808b81e4dce59f2969255646930e0f762e6e35772d06d3e6bdb3cdfcdbc7239e93553eff9be659891457ece2845d554bd0e407eca9bcecc0c36dc0755babde5f9695d274c5d10f949fe5764d7684f76ee874c590210026098ec653c83b82838f92f07fceec44baeeda021f270bec0798cefa095585c4637b3e7c030099b2c", 0xa2}], 0x1, 0xf, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) pidfd_send_signal(r3, 0x19, &(0x7f0000000840)={0x26, 0x2, 0x4}, 0x0) syz_io_uring_setup(0x5834, &(0x7f00000008c0)={0x0, 0xcc3b, 0x1, 0x0, 0x3e5, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000940)=0x0, &(0x7f0000000980)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000b00)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000ac0)='./file0\x00', 0x300, 0x100, 0x1}, 0x8001) r5 = io_uring_setup(0xab2, &(0x7f0000000b40)={0x0, 0x7be2, 0x2, 0x2, 0x27d}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x1010, r5, 0x8000000) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x70, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x800) syz_io_uring_setup(0xf6f, &(0x7f0000000d00)={0x0, 0x3303, 0x8, 0x0, 0x22, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000d80), &(0x7f0000000dc0)) r6 = accept4(r3, &(0x7f0000000e00)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000e80)=0x80, 0x80800) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f00000020c0)={&(0x7f0000000ec0), 0xc, &(0x7f0000002080)={&(0x7f0000000f00)={0x1168, 0x0, 0x7b03162e22aa85c0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x64, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SRF={0x34, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x1b}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x20}, @NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x6e8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x3f0, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3f}, @NL80211_NAN_SRF_MAC_ADDRS={0x64, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x20}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2dc, 0xd, 0x0, 0x1, [{0x15, 0x0, "d5a29c284c8999145d574e92649f5d3ec3"}, {0x88, 0x0, "3a009a4b79e24b09c796d49b9a237cdeaab1f49fd8d2f715d1e3bf4081b9ef3d6665020c49728baaeb23ec41bb547ad521bcbf507eaaf0a7908ed156638c1a0e1376ef4ac81ed4447a4ed3ccbedc8df1805cef4533f2a3bd2ee11f5268d406fe646eef8ac84dcb3219de7278d887c880234a7841cf5ce193df3955fe70011fc87b3f563e"}, {0xc7, 0x0, "f03952e4cd00d176d99d18ad86d3c7f78a91efc858319b2ce9cb68b0af74f0353856105868394f0e52b202bbfdc95245632f764ec3a5717b2fd8eb084235d9218b2236930e87e382ac5a41306ff13944aa13f682da23a95b84601e6aa4316e70e1baf081df2892d405998bc1838da96882c23de18eb3f734574d7a883b3f9900d89a076d40a41cc65383212db064e4063d5e458d3dffcc3049c188bdd6032f3f68b6453ac23ad72a38c929abbb2cf1e3039ec0e76d09e836e7fca0a10c099e58a55949"}, {0x71, 0x0, "a84090498621932581e1362eba0177a86bd3ba01a73d94444893c0b078fd5b61c82ef2be5a6cb4efa6441eab2c320e007836c704cd9d446a2260009b5cbae4b6ead7f4fd78e52743b1b8b2d24fe45bbb01e6c478fd97f9a220e8748e2ff30c034e4021047d3080a08df8cce1c7"}, {0xf9, 0x0, "0e11ffd4bf464a5d86d2da400ed41343f0d71873223861a383175c70f64e08755a09e26d262b4a945066906564cf1a8d49b4b48f5f8a60bfc46bea5e74c5cddb0552aca3324a04860406778061c21761ec0bbd8f4695481dd1b590a2800341589f7910d3a7a949d6e66c1b7c2e00a79b6d5bced661feee072f4c39a0f04f878ce59fd9565003b9a53ae934f7a2fd933f4a3206ab66dd1c05d8ea273b2b0407f3ba739490e92afa1d7c5aab99ac289d0bac8df8bd0f77038914799fb564c164d47864490458d8dce80073250154cbbfc9b571f5752ed33c79c38db56acd5ba5359f13d1bd5f75167d768e604164b8ab4619b71bbbc6"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xed}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x520, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x454, 0xd, 0x0, 0x1, [{0xad, 0x0, "972b924e9b833ef828a5c497e071182ca5396cc778d097021cffe8967a7bd4c8abe9fc909b03692f4196b1d2b87fb1df3c74252d5e83880e6a4a1752bc3f58c190c5d7b361c506128c3d4742b9df890f74cb75f5e9124e692d82bed2c5f687c89d2b2bf94b0dc78672a0ac3e772373188f43017e8829216ad87896268840aab95977c9f5ea25c8829028fc772d48c3d6b377e09c8b8d8033913be85b779ccf6d7c0e373bc85f6bc27a"}, {0x8a, 0x0, "377b7ebad8769c367e253465e3e1574cac318fd7e9d08c6548c0f4b0ff0f6d8223c846f18f20a9e59764dc849ff0a331b1fd87b947f80547ba920837fed5589de42a42d659a6251f4e9c956e98e8cb2486d73573e9e9b6b0992178d64c859831c98c9da42ee08fbd88bb29a8455190ad53df892941e0bc86e197d7db4633f4004dae08babd0f"}, {0xa6, 0x0, "63cf13753b960e5033c32da2b98c6a7b907562e60da6e827f594f241aa79baa1ecc8a8027e4b736de99142d1ee65fb0c5fcdc359c9fcff49feee435b37198416b935f55c48d903bb0f4743d628a2323e7f22dffd6fadc6358878709157819759f227eb7f5d95fc77a4c66728712d5989e13ea101b18604651e0ccb7b1292716ee071ead905715fb6a9bfdf6956a912b61d8fdefed3a657ca3b0087db38f3417e0327"}, {0xc7, 0x0, "7eaab2f4f5214ae068345d7bd8a3a4d7fedb8407c2bab8b008360a3a4e1c2b99951032fedbc533205af5e4af6642b2e719992b942fd068b5dd3fb10df8e97a5ebbf51f22b9992c586a740857576002fd2608f8c19681f1d42a8ad3e27bc2883f51c308e861f83b21d7d97541c7fd8bae3c3803b04fc69a6a14e041329c43b63e14b9442f757fa3a25f6684a9191aaaf1addab10a1368f081faf5f6473e2d92a8e8468f8946c5665a1bc88bee740d281578e03ca6c75f360c7c56d2df1f55303d8b0d3b"}, {0x12, 0x0, "d5a034e1cb086c09c8ed9aaf7a77"}, {0xb8, 0x0, "0397897a2330911858d9429905111a1fe80d4c1d00a2b82848098bc0818b4c44171ea88c00cf9431eaada4ba84697a7b554b5b59af3a5e463e827655dc1b518fd417a81120e536174d662d7c3344d50a37c08697a9546d86ce345aea67853dd63bfb127342bf036ab8fa78915c66dc4e1f901cb1c04f4b16c90750fd08dc0965ab89095e8ab66e01fd095114f90b28602c7f5feccb16ab692e07b095d09070c141654ed5c1212521ba61e9e813406065da6465d0"}, {0xd7, 0x0, "ecfe3acc4ba5b714566cfa331aeebb6e90f4ffc85c4029ea488cdc9a62a5556414204709beebdb01290a1b78493b0edf5f54cab29df1b8b8ecc53e57321f007c84af520bfa9d48375f177cdaf359306b9de072e7baa90c0dcd9488c4221ed4748ff2c7afbe47107b30e650d90feafcff70abbdfe01ae2c4187cb6fc2884704c3422e3b13769166fbb2e158d15301c66eafafcfdfbd5af291869eac763ff202925ff99fea13b5bfe43d32e54d53134df024de6da185151bd40ea2693e7ebf8a45f0edb90f608de0e7a28cdf306b023f0beb5231"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}, @NL80211_NAN_FUNC_SERVICE_INFO={0xae, 0xb, "f981db49a945f33bd1efc5741f27831835ef5b4db9518ac99fc553f26e5ec3dec48b490265526d1956a54053fc0f75596a213c12b051ef81c92a523023a4add1cc2e5e6a8db75c50421ee2342ca2ffb5b958b14dec5da6f9bedf93de2455fca3035210764f75fc2751b1717e4662510a082ab4a46343d48e616cdcb0f14b3b5f3c700ab2a81a39f64de3774a35848959fcc8b94c90c35ea7b83954d38d4b97b709facfc4213a5aab3c10"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "20beedb040e6"}]}, @NL80211_ATTR_NAN_FUNC={0x248, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xff}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x218, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x8}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x288, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0xc, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}]}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "804fe688a334"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x74, 0xd, 0x0, 0x1, [{0xa, 0x0, "6df39982ee58"}, {0x64, 0x0, "b5f4a212a5b46275aecbafc67434bb57d7edf6ee21892b7cd0cab002bec4c7e5e1f1fd70e914e63bda9885a24c0bda4361ad6a73910e81f6c906ef051cb6962febecad3cebf60203acd2f106932fa0b369a02277fd8bdaefd951dcd95afcb745"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1f0, 0xe, 0x0, 0x1, [{0xb3, 0x0, "e2a7871f1fa23880642d512f86b48de71f8b237b559a3e6d60f7d648e6edd81e5615fcbfcafda7b975c0d9b55149922d7f1a74c31f94d06b0234417254118057d284fa272fad603386d0274e74548e29ddfaf64eb6baf1df02ce109e46c2ae787a7a4a02fc3246fd7a4fd9e47074f96a5cafd5357bd71ab65eeb41537bdf2f541a5be06bbcb1dc3f838b923a3bea6834d01aca16379d8a9606057fad87ff4d88dbb68c5ee1fc4d1b1a61f959a43a0b"}, {0x93, 0x0, "89dc48493f15dac83389110b5e888f7659d7ceb7811d79e4c705c730b3b249ae472c801ebaea9cfe56f2b487ab25ded234a1258c6fd8c37e798bb6372d9710aa460c6a2874f3d56abfbe3e8d4a0d23b601b80efe08289cc307bff2c1adfd20b3a22d2f08ba451398dd52ad370de35d4cb3792c5553b557c8f73d6a3f9eaf55e4bbc8b5fc8451f4ca098a528866ec94"}, {0x4a, 0x0, "6d00dd3042fe5a8bfb18dc03ca47206db125b267496a9fa372db7d893fdc8cdbb60bbb45eea94ccb8da49bfd6d4270133ad9778fd9d0a7d5bc075e5711ae05f7392339b79afa"}, {0x2e, 0x0, "770fb3b6ad5b03ac9b69d52290e519085918fe77fe507a3eb5e1eda3b897c2e37cfff3cae5be50d58b81"}, {0x26, 0x0, "09d35b1fe2c2c53d5c39cd6901a707ce697579cbbdb08cc243b47d4754adb957e66c"}]}]}]}, 0x1168}, 0x1, 0x0, 0x0, 0x800}, 0x0) setxattr$security_selinux(&(0x7f0000002100)='./file1\x00', &(0x7f0000002140), &(0x7f0000002180)='system_u:object_r:usbmon_device_t:s0\x00', 0x25, 0x1) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x2044054) 09:24:45 executing program 3: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x101080, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x54200) r2 = pidfd_getfd(r0, r1, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000002c0)='#\x00', &(0x7f0000000300)='./file0\x00', r0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x7fff}}, './file0\x00'}) mkdirat(r3, &(0x7f0000000380)='./file0\x00', 0x0) r4 = socket(0x0, 0x6, 0x8000) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000500)={0xeb, "cacb755127863d9853d5df2daaed9a71cc7975910984f5f29a3782b615cd305d4e00f9592686f8defcac65f3b9cb37601736f1e61c0c5ce0ac6c671e83c11750"}) r5 = gettid() clone3(&(0x7f0000000840)={0x1000, &(0x7f0000000580)=0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000600), {0x1a}, &(0x7f0000000640)=""/180, 0xb4, &(0x7f0000000700)=""/196, &(0x7f0000000800)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, r5], 0x6, {r0}}, 0x58) read$hidraw(r1, &(0x7f00000008c0)=""/217, 0xd9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) getsockname$unix(r7, &(0x7f0000000a00), &(0x7f0000000a80)=0x6e) r8 = pidfd_getfd(r6, r3, 0x0) ioctl$HIDIOCGRAWPHYS(r8, 0x80404805, &(0x7f0000000ac0)) syz_io_uring_setup(0x32d8, &(0x7f0000000b00)={0x0, 0x799c, 0x0, 0x3, 0x26a}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000c40)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd_index=0x8, 0x4, &(0x7f0000000c00)=""/62, 0x3e, 0x12, 0x1}, 0xffffff00) sendmsg$NL80211_CMD_DEL_PMK(r8, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x20000000, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x44090) 09:24:45 executing program 4: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '/dev/autofs\x00'}}], [{@context={'context', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x1c}}]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8000) clone3(&(0x7f0000000840)={0x1000c000, &(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0), {0x1}, &(0x7f0000000700)=""/46, 0x2e, &(0x7f0000000740)=""/164, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r2}}, 0x58) r4 = openat2(r1, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x402, 0x0, 0x10}, 0x18) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r4, &(0x7f0000000940)={r1, r2, 0x200}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000009, 0x13, r4, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, {0x2}}, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x28c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x19}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x89}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CSA_IES={0x234, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x5, 0x9, 0x4, 0x8, 0x1]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xc75]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x215, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x3, 0x4}}, @ver_80211n={0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x4, @random=0x7ff, 0x10, @void, @val={0x1, 0x7, [{0x1b, 0x1}, {0x4}, {0xc}, {0x30, 0x1}, {0x6, 0x1}, {0xb}, {0xc}]}, @void, @val={0x4, 0x6, {0x0, 0x0, 0x6, 0x7}}, @void, @val={0x5, 0x5a, {0x81, 0xeb, 0x5, "70cedfc3b8f7e0a314fd20aed2ee289432e8907f24caf1b0a438175eba4341e09bc8f7d61a7095c4ec7b8a3c7a55a0b4e888aacdf1299f6ef521ec3fd514b4ab47fbfd5844f1fc5a35561a5b5568e8fce2808290e52341"}}, @val={0x25, 0x3, {0x1, 0x34, 0x8}}, @void, @val={0x3c, 0x4, {0x0, 0x5, 0xa5, 0x9}}, @val={0x2d, 0x1a, {0x8000, 0x3, 0x4, 0x0, {0x7, 0x4, 0x0, 0x20, 0x0, 0x1, 0x1, 0x3}, 0x300, 0xaa75, 0xff}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0xfe, 0xf, 0xffb5}}, [{0xdd, 0x80, "af91cf183933a89d49194c46b63d4a37ea387a7612f025922192726fd77d17840b16197a31e2a56f45051756b0588f681bd32eb739763335bb07f0bf9c8d7a09e282d3dd073385b86a4ce9f967c722db886ab2263d18aa3e331fba275e0859ae71a7ab233ec7c8d3b38732df26ce6ab0b8f604f78071662cc4c6f706b887f901"}, {0xdd, 0xa0, "4bba4c6cc84564f47f3b5732795fdb875edfe1d4487079d98d787f2b4dee6463cab718d3fe1e4625aa0f1309c3278068b81c741c89567db09d67260ab0b5f8019be8c058e3989061d26cd0e2b00628efcd20b2d54a6f50d4138d38d9bced9ff0b5fc86c8b44c2f2aacf1d189d503606557e54362dd6f0ff8c46dca1591df6b4f405d0d1d728cca4099835bd3a38084d8f2e45fceb4e0db8392e8801182a8b3e2"}, {0xdd, 0x1f, "52a21892a0dd0ef1c8bc03ebedfd0b19c0415c68c9c97c017c9cce14e66233"}]}}]]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x7bfe09c4ca6392fe}, 0x2000c054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d40)='./cgroup.net/syz1\x00', 0x200002, 0x0) faccessat(r1, &(0x7f0000000d80)='./file0\x00', 0x100) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x366}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x1000) pidfd_send_signal(r1, 0x22, &(0x7f0000000ec0)={0xb, 0x30000000, 0x4}, 0x0) openat$cgroup_procs(r2, &(0x7f0000000f40)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001000)={{0x1, 0x1, 0x18, r1, {0xbe}}, './file0\x00'}) [ 84.065059] audit: type=1400 audit(1730366685.524:7): avc: denied { execmem } for pid=276 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:24:45 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040000) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff01}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r0, 0x404, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x30}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1306}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc11}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xed8}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x40844) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x800, 0x5c}}}}, ["", "", "", ""]}, 0x20}}, 0x4004010) r1 = accept4(0xffffffffffffffff, &(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000600)=0x80, 0x100000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r2, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x34, 0x33, @deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x40}, @device_b, @device_b, @random="365c08b37642", {0x2, 0xff}}, @ver_80211n={0x0, 0x17, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x27, @val={0x8c, 0x10, {0xc04, "af1772ff6d38", @short="f5c8b7223d78e42b"}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x173}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}]]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x8000000) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000cc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x314, r2, 0x620, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x118, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc8, 0x1, "53916b2b4d8803b4bfc85ebbcae2e8efae2aa70a2d06f75bc14dd4c341ed32b7b04a86647fb474f3056e2ac461ef6dda090f9e84bae9c3809934c31bc31c11e16d4a0634c82797de200f364ed2be5875ebb61ec403fc974bc81df69a8a3777dd71b3b9bd439aa6c83c8ccf8b1b7c38d9310735b4fee03cf9940d0fde11f7868dcd28ef37437b5be56bc482f1fce0d6de0860d672dda03cde37d938fa8a2a7a5f9904eae2acd9549d99f3e770bfc0de808a9cf73850408f2184065cc2d4dfc2f3415277ef"}}, {0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x4}}, {0x40, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x3b, 0x2, "41ddde790a205d0fe2ec8ba326e70229f8939a329ef3252379059d0618d1ce00557075de65b170fdb93c09f37e4bd4dc1cec3f10803495"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8001}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c0, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xaec}}, {0xac, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xa7, 0x2, "c2aaa6aa3caa28aba2a88cedf8a6665a0f751d2ebf397e8be339692107c512786fdd260f3c9074c8b5cbcf723d53f5675ced55155434264ebedf303dc3ca3f43ee1bc6f2991e4f9bce9f14541d0f65740719800ea2b548891512ef810a1586c0a0ead3216b3083b04e2721512d20981a313322afaf833b1bb6722608af5247ef05cb2c2eccb67548c9e938fe24902324cf10186201b156b02790ca23f4fca8309691fe"}}, {0x104, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x100, 0x2, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x314}, 0x1, 0x0, 0x0, 0x40000}, 0x4009) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, r2, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x11d, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}]}, 0x24}}, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, r2, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5e}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8000, 0x4a}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4000054) r5 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x34, r0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x8088}, 0xc000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x98110af9bda6322b}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 09:24:45 executing program 6: sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x33}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x8044) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xff}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30040800}, 0x20004000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x300, 0x53}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "2a807ba359ed733ca49b84831f36608c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "9323847ede85a1321ab73f9177c4bfec"}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x811) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x1b}}}}, ["", "", "", "", "", ""]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008081) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r0, 0x20, 0x2, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5104}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x4c}}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4000) r4 = accept4(r3, &(0x7f0000000980)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000a00)=0x80, 0x400) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan1\x00'}) r5 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0xffffffffffffffff, r5) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x94, r1, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x7f, 0x45, "da0c4d8438c52bb7c73aae22045a19aea59670811662f657b52c452617275b4c24fc19212f5e9a39f2864924a134a71cdbdada1c247a623629fcdc2117ef845e26e20d9a2b5e0feb4bfa56d34a82f88c6633423111000b2b8ec03b3056d83909cedad70b4a6c6382aa71b46401b54914e2fbcf65038194a61ed8d9"}]}, 0x94}, 0x1, 0x0, 0x0, 0x4010}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r4) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r7, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4ac, 0x7f}}}}, [@NL80211_ATTR_BANDS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) 09:24:45 executing program 7: read$hidraw(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000001000)="1a6f631fc4cc") r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001040), 0x2401, 0x0) write$hidraw(r0, &(0x7f0000001080)="fa347274e01144cbdfc8b2294350b711a9d8e1e9a6c47bc1d208f070fc8c51aac5a2e8ebc31ffa3901e3651c13bccab0ab68af", 0x33) write$P9_RREAD(r0, &(0x7f00000010c0)={0xb9, 0x75, 0x1, {0xae, "6db33b728203540b23f6de8e3a058fcd93fb04ca0bbcc4580d7b67abf0a980b6d9cfac3dc477fb6718392a8aab554ce7083861969a688595b335fed731bbdeb57c3308a51857d85ab41783966ebf75d4f4efec30b3909e9daae4273a73487e1acd9f9b3d2c711fb378b01ee9925c42c947ed19010d5ecdacb65f4e91cd1efab9b204362e8bb573159f33004837e801a1788a5fb3e1c5f4681a46e8405ad23d1bad1e53ab77cb4c7cfa775d612c8d"}}, 0xb9) write$hidraw(r0, &(0x7f0000001180)="8d58d4a8f6c29e91ee1b60cd795d9c247396c33828966ded73fdbe94d5e8218a850556edb867e2fc0c54368d5b2a1622074c2932e49c7f5aca9052e8a8406027b7c967e7c5dfad8768c35f5877e381da638ad575932ca99c", 0x58) bind(r0, &(0x7f0000001200)=@isdn={0x22, 0x2, 0x20, 0x2, 0x3f}, 0x80) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000001280)="bc7b86f52ff89b98f2e6aa82a3ec415033c31a4ea502c62a51b4cd253809f979825bb2a80b442a22d7b3ba3843fe7b57ec0c22e2f9f19bc77754a0b7c808e0aef5cac4fd39e6fd0e8baacf9e8057089f157cb68263ece1219a1e7126b3b50ffd70e4ba0c498bb8c705a37366493e4b89fd3cde9fd0fdfce60fe83cd556c45c1ec560b33e67225eb9a005944c2bd53a95a9976e272a5d4ad1ff5e9d3d3529e1222ff73cb668351875fdf367b3fbe554af348736c8bb374f747388537cd37eedd89c01fdd5b8768939ff0be3798e5d4a6ada070f43743d76b7e30d38bf943a0cba6d0803b09c") r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x393}]}, 0x34}, 0x1, 0x0, 0x0, 0x481}, 0x8014) r3 = accept4(r0, &(0x7f0000001500)=@nfc_llcp, &(0x7f0000001580)=0x80, 0x80000) r4 = accept4$unix(r0, 0x0, &(0x7f00000015c0), 0x800) write$hidraw(r0, &(0x7f0000001600)="74f202888fe5132cee", 0x9) r5 = openat2(r0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x2, 0x21, 0x10}, 0x18) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) getsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f00000016c0), &(0x7f0000001700)=0x10) r6 = openat$cgroup_procs(r5, &(0x7f00000017c0)='cgroup.procs\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000001740)='./file0\x00', &(0x7f0000001780), 0x22000, &(0x7f0000001800)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}, {@cache_none}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x61, 0x31, 0x38, 0x35, 0x65, 0x63, 0x32], 0x2d, [0x30, 0x66, 0x39, 0x34], 0x2d, [0x63, 0x65, 0x35, 0x61], 0x2d, [0x6b, 0x63, 0x66, 0x36], 0x2d, [0x34, 0x32, 0x64, 0x33, 0x38, 0x63, 0x38, 0x65]}}}, {@uid_lt={'uid<', 0xee01}}, {@euid_gt={'euid>', 0xee01}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x32, 0x36, 0x34, 0x61, 0x62, 0x36, 0x36], 0x2d, [0x33, 0x33, 0x31, 0x33], 0x2d, [0x0, 0x61, 0x30, 0x32], 0x2d, [0x0, 0x39, 0x61, 0x36], 0x2d, [0x37, 0x62, 0x64, 0x34, 0x39, 0x39, 0x38, 0x79da22798e9142ef]}}}]}}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x48, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) [ 85.445783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.447527] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.491620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.493078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.504162] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.513372] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.515350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.516191] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.519641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.520495] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.521915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.523093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.524207] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.525691] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.527026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.528280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.538002] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.538968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.545805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.548715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.553688] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.555664] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.588257] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.589888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.619999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.621940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.625591] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.632000] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.649703] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.651156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.651975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.657170] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.661966] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.662947] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.663299] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.664716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.666157] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.671288] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.672368] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.676758] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.691441] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.693290] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.696293] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.696308] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.702503] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.705847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.719295] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.725502] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.607069] Bluetooth: hci0: command tx timeout [ 87.607893] Bluetooth: hci3: command tx timeout [ 87.607931] Bluetooth: hci2: command tx timeout [ 87.608844] Bluetooth: hci1: command tx timeout [ 87.734835] Bluetooth: hci4: command tx timeout [ 87.735528] Bluetooth: hci7: command tx timeout [ 87.799863] Bluetooth: hci5: command tx timeout [ 87.800611] Bluetooth: hci6: command tx timeout [ 89.654490] Bluetooth: hci0: command tx timeout [ 89.655016] Bluetooth: hci2: command tx timeout [ 89.655057] Bluetooth: hci1: command tx timeout [ 89.655855] Bluetooth: hci3: command tx timeout [ 89.782475] Bluetooth: hci4: command tx timeout [ 89.782977] Bluetooth: hci7: command tx timeout [ 89.847559] Bluetooth: hci5: command tx timeout [ 89.848044] Bluetooth: hci6: command tx timeout [ 91.702537] Bluetooth: hci1: command tx timeout [ 91.703064] Bluetooth: hci3: command tx timeout [ 91.703099] Bluetooth: hci2: command tx timeout [ 91.703847] Bluetooth: hci0: command tx timeout [ 91.830647] Bluetooth: hci4: command tx timeout [ 91.831204] Bluetooth: hci7: command tx timeout [ 91.894814] Bluetooth: hci6: command tx timeout [ 91.895445] Bluetooth: hci5: command tx timeout [ 93.750537] Bluetooth: hci2: command tx timeout [ 93.751102] Bluetooth: hci0: command tx timeout [ 93.751651] Bluetooth: hci3: command tx timeout [ 93.752130] Bluetooth: hci1: command tx timeout [ 93.878526] Bluetooth: hci7: command tx timeout [ 93.879090] Bluetooth: hci4: command tx timeout [ 93.943022] Bluetooth: hci5: command tx timeout [ 93.943125] Bluetooth: hci6: command tx timeout [ 147.846816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.848235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.851912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.860790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.864732] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.866669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.968997] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.971319] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.973928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.979965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.986675] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.988058] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.097952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.103120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.108848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.120480] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.121884] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.124041] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.126580] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.129887] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.131079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.141619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.146993] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.148670] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.191067] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.197857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.217619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.220239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.221256] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.222166] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.222703] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.223279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.230962] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.231930] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.233284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.242630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.243608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.251510] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.253677] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.255105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.255913] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.269946] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.275756] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.279744] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.294831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.296648] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.357492] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.363686] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.943500] Bluetooth: hci0: command tx timeout [ 150.070537] Bluetooth: hci1: command tx timeout [ 150.198497] Bluetooth: hci2: command tx timeout [ 150.263459] Bluetooth: hci3: command tx timeout [ 150.326487] Bluetooth: hci4: command tx timeout [ 150.391464] Bluetooth: hci7: command tx timeout [ 150.391626] Bluetooth: hci5: command tx timeout [ 150.454545] Bluetooth: hci6: command tx timeout [ 151.990593] Bluetooth: hci0: command tx timeout [ 152.120437] Bluetooth: hci1: command tx timeout [ 152.246535] Bluetooth: hci2: command tx timeout [ 152.312450] Bluetooth: hci3: command tx timeout [ 152.374460] Bluetooth: hci4: command tx timeout [ 152.438570] Bluetooth: hci7: command tx timeout [ 152.440051] Bluetooth: hci5: command tx timeout [ 152.503596] Bluetooth: hci6: command tx timeout [ 154.039534] Bluetooth: hci0: command tx timeout [ 154.167668] Bluetooth: hci1: command tx timeout [ 154.295490] Bluetooth: hci2: command tx timeout [ 154.359538] Bluetooth: hci3: command tx timeout [ 154.423618] Bluetooth: hci4: command tx timeout [ 154.486892] Bluetooth: hci5: command tx timeout [ 154.487340] Bluetooth: hci7: command tx timeout [ 154.551530] Bluetooth: hci6: command tx timeout [ 156.086444] Bluetooth: hci0: command tx timeout [ 156.214539] Bluetooth: hci1: command tx timeout [ 156.343534] Bluetooth: hci2: command tx timeout [ 156.406464] Bluetooth: hci3: command tx timeout [ 156.471439] Bluetooth: hci4: command tx timeout [ 156.534464] Bluetooth: hci5: command tx timeout [ 156.534484] Bluetooth: hci7: command tx timeout [ 156.599418] Bluetooth: hci6: command tx timeout [ 210.461028] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.462782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.462919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.464031] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.466724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.467516] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.468697] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.471246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.471581] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.472932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.476020] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.477530] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.644293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.649129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.657314] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.658449] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.664757] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.666112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.670128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.674961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.676890] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.677916] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.680503] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.681726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.683302] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.685625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.708182] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.713303] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.721646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.730854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.730893] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.734854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.740580] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.757567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.758322] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.760252] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.769308] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.775097] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.785820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.788835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.794917] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.800681] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.804113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.806736] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.807926] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.809740] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.817529] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.822609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.535769] Bluetooth: hci1: command tx timeout [ 212.535775] Bluetooth: hci0: command tx timeout [ 212.728460] Bluetooth: hci3: command tx timeout [ 212.790516] Bluetooth: hci2: command tx timeout [ 212.856482] Bluetooth: hci4: command tx timeout [ 212.918529] Bluetooth: hci7: command tx timeout [ 212.918612] Bluetooth: hci5: command tx timeout [ 212.919416] Bluetooth: hci6: command tx timeout [ 214.582475] Bluetooth: hci1: command tx timeout [ 214.583628] Bluetooth: hci0: command tx timeout [ 214.774767] Bluetooth: hci3: command tx timeout [ 214.838501] Bluetooth: hci2: command tx timeout [ 214.904417] Bluetooth: hci4: command tx timeout [ 214.966485] Bluetooth: hci6: command tx timeout [ 214.967485] Bluetooth: hci5: command tx timeout [ 214.967538] Bluetooth: hci7: command tx timeout [ 216.630457] Bluetooth: hci0: command tx timeout [ 216.630478] Bluetooth: hci1: command tx timeout [ 216.822431] Bluetooth: hci3: command tx timeout [ 216.886479] Bluetooth: hci2: command tx timeout [ 216.950496] Bluetooth: hci4: command tx timeout [ 217.014536] Bluetooth: hci7: command tx timeout [ 217.015429] Bluetooth: hci5: command tx timeout [ 217.016294] Bluetooth: hci6: command tx timeout [ 218.678504] Bluetooth: hci0: command tx timeout [ 218.678533] Bluetooth: hci1: command tx timeout [ 218.870455] Bluetooth: hci3: command tx timeout [ 218.934485] Bluetooth: hci2: command tx timeout [ 218.998581] Bluetooth: hci4: command tx timeout [ 219.062543] Bluetooth: hci7: command tx timeout [ 219.070753] Bluetooth: hci6: command tx timeout [ 219.072075] Bluetooth: hci5: command tx timeout [ 272.650528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.657978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.660173] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.675729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.681040] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.682187] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.767076] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.770757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.772661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.777716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.781808] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.783112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.840924] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.844610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.851689] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.856753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.859950] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.863697] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.969840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.979761] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.980928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.984612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.996949] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.999908] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.002672] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.005918] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.008810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.015039] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.020846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.022073] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.029567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.057580] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.069707] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.074543] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.086924] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 273.088523] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 273.091579] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 273.094588] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 273.100717] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 273.101522] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 273.102862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.127685] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.198915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 273.202067] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 273.216493] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 273.265873] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 273.267685] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 273.270054] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.742966] Bluetooth: hci0: command tx timeout [ 274.808404] Bluetooth: hci1: command tx timeout [ 274.935622] Bluetooth: hci2: command tx timeout [ 275.062507] Bluetooth: hci3: command tx timeout [ 275.063760] Bluetooth: hci4: command tx timeout [ 275.126685] Bluetooth: hci6: command tx timeout [ 275.254466] Bluetooth: hci5: command tx timeout [ 275.318622] Bluetooth: hci7: command tx timeout [ 276.792405] Bluetooth: hci0: command tx timeout [ 276.854484] Bluetooth: hci1: command tx timeout [ 276.982458] Bluetooth: hci2: command tx timeout [ 277.110697] Bluetooth: hci4: command tx timeout [ 277.111248] Bluetooth: hci3: command tx timeout [ 277.174456] Bluetooth: hci6: command tx timeout [ 277.302498] Bluetooth: hci5: command tx timeout [ 277.367848] Bluetooth: hci7: command tx timeout [ 278.838795] Bluetooth: hci0: command tx timeout [ 278.902457] Bluetooth: hci1: command tx timeout [ 279.032388] Bluetooth: hci2: command tx timeout [ 279.158803] Bluetooth: hci3: command tx timeout [ 279.159450] Bluetooth: hci4: command tx timeout [ 279.222531] Bluetooth: hci6: command tx timeout [ 279.350578] Bluetooth: hci5: command tx timeout [ 279.415403] Bluetooth: hci7: command tx timeout [ 280.887490] Bluetooth: hci0: command tx timeout [ 280.950511] Bluetooth: hci1: command tx timeout [ 281.078425] Bluetooth: hci2: command tx timeout [ 281.206584] Bluetooth: hci4: command tx timeout [ 281.207178] Bluetooth: hci3: command tx timeout [ 281.270428] Bluetooth: hci6: command tx timeout [ 281.398521] Bluetooth: hci5: command tx timeout [ 281.462563] Bluetooth: hci7: command tx timeout [ 335.186691] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.189747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.192808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.197495] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.201002] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.203212] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.238675] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.243598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.249576] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.253791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.258616] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.261744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.362578] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.371187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.373258] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.377568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.379984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.381972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.392684] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.395628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.399159] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.402570] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.404788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.407084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.444578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.453700] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.463884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.514885] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.518252] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.519148] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 335.524661] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.537509] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.547771] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.556852] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.557638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.559086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.560223] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.573824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.574579] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.576784] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.580173] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.584753] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.586905] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.609231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.612585] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.615589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.617737] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.620393] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.270439] Bluetooth: hci0: command tx timeout [ 337.334415] Bluetooth: hci1: command tx timeout [ 337.462633] Bluetooth: hci2: command tx timeout [ 337.527399] Bluetooth: hci3: command tx timeout [ 337.590573] Bluetooth: hci4: command tx timeout [ 337.654512] Bluetooth: hci5: command tx timeout [ 337.655125] Bluetooth: hci7: command tx timeout [ 337.718426] Bluetooth: hci6: command tx timeout [ 339.318467] Bluetooth: hci0: command tx timeout [ 339.382379] Bluetooth: hci1: command tx timeout [ 339.510544] Bluetooth: hci2: command tx timeout [ 339.574493] Bluetooth: hci3: command tx timeout [ 339.639388] Bluetooth: hci4: command tx timeout [ 339.703607] Bluetooth: hci5: command tx timeout [ 339.705259] Bluetooth: hci7: command tx timeout [ 339.766802] Bluetooth: hci6: command tx timeout [ 341.366519] Bluetooth: hci0: command tx timeout [ 341.431586] Bluetooth: hci1: command tx timeout [ 341.558419] Bluetooth: hci2: command tx timeout [ 341.622392] Bluetooth: hci3: command tx timeout [ 341.687371] Bluetooth: hci4: command tx timeout [ 341.750460] Bluetooth: hci7: command tx timeout [ 341.750937] Bluetooth: hci5: command tx timeout [ 341.814394] Bluetooth: hci6: command tx timeout [ 343.414459] Bluetooth: hci0: command tx timeout [ 343.478402] Bluetooth: hci1: command tx timeout [ 343.607448] Bluetooth: hci2: command tx timeout [ 343.670430] Bluetooth: hci3: command tx timeout [ 343.734423] Bluetooth: hci4: command tx timeout [ 343.798566] Bluetooth: hci7: command tx timeout [ 343.799036] Bluetooth: hci5: command tx timeout [ 343.862505] Bluetooth: hci6: command tx timeout [ 359.474311] hrtimer: interrupt took 4317556 ns VM DIAGNOSIS: 09:29:46 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff813e8f70 RCX=0000000000000001 RDX=ffff8880273df9e0 RSI=ffff8880273df9a8 RDI=ffff8880273df2b8 RBP=ffff8880273d8000 RSP=ffff8880273df278 R8 =0000000000000001 R9 =ffff8880273df2e8 R10=000000000003c001 R11=00000000000218e4 R12=ffff8880273df308 R13=ffff8880273df2f0 R14=ffff8880273df9a8 R15=ffff8880273df2a8 RIP=ffffffff811491f6 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f90bd31b1f0 CR3=0000000025962000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c14e40 RDI=ffff888016ae8a40 RBP=ffffffff84cfbd00 RSP=ffff8880295ffb30 R8 =0000000000000000 R9 =ffffed100d9e82a0 R10=ffff88806cf41503 R11=00000000000007e0 R12=000000000000008c R13=ffff88800f2a8010 R14=ffff888016ae8000 R15=ffff88800f2a8750 RIP=ffffffff81253e7a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f62a8029028 CR3=000000002401c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000