syzkaller login: [ 57.364475] hrtimer: interrupt took 3612809 ns Warning: Permanently added '[localhost]:32648' (ECDSA) to the list of known hosts. 2024/11/08 20:18:37 fuzzer started 2024/11/08 20:18:38 dialing manager at localhost:46317 [ 62.388844] cgroup: Unknown subsys name 'net' [ 62.512114] cgroup: Unknown subsys name 'cpuset' [ 62.568632] cgroup: Unknown subsys name 'rlimit' 2024/11/08 20:18:56 syscalls: 205 2024/11/08 20:18:56 code coverage: enabled 2024/11/08 20:18:56 comparison tracing: enabled 2024/11/08 20:18:56 extra coverage: enabled 2024/11/08 20:18:56 setuid sandbox: enabled 2024/11/08 20:18:56 namespace sandbox: enabled 2024/11/08 20:18:56 Android sandbox: enabled 2024/11/08 20:18:56 fault injection: enabled 2024/11/08 20:18:56 leak checking: enabled 2024/11/08 20:18:56 net packet injection: enabled 2024/11/08 20:18:56 net device setup: enabled 2024/11/08 20:18:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/08 20:18:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/08 20:18:56 USB emulation: enabled 2024/11/08 20:18:56 hci packet injection: enabled 2024/11/08 20:18:56 wifi device emulation: enabled 2024/11/08 20:18:56 802.15.4 emulation: enabled 2024/11/08 20:18:56 fetching corpus: 0, signal 0/0 (executing program) 2024/11/08 20:18:57 starting 8 fuzzer processes 20:18:57 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4010) r1 = socket(0x1a, 0x4, 0x332) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x30}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x48002) r2 = accept(r1, &(0x7f0000000280)=@isdn, &(0x7f0000000300)=0x80) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8844}, 0x20000000) recvmsg(r2, &(0x7f0000000740)={&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/235, 0xeb}], 0x1, &(0x7f00000006c0)=""/68, 0x44}, 0x43) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fb3093677b53b22b34f205f798"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x969033fc5544424e) socketpair(0x29, 0x6, 0x8, &(0x7f0000003a40)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000003ac0), r2) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000003b80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x38, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7ff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x22008000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000003d00)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c40)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0xc000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003d80), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000003dc0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e00)={0x5c, r9, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xaae1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000005040)={0x7, &(0x7f0000005000)=[{0x1, 0x7, 0x20, 0x3ff}, {0x9, 0x2, 0x1f, 0x7}, {0x918, 0x1f, 0x2}, {0x2, 0x1, 0x45, 0x100}, {0x2, 0x7, 0x0, 0x8}, {0x400, 0x1f, 0x1, 0x80}, {0x8, 0x4d, 0x9, 0xffffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r11, 0xc0182101, &(0x7f0000005080)={0x0, 0x6, 0x101}) 20:18:57 executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'wg2\x00', {0x2}, 0x6}) accept(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) r2 = socket(0x28, 0x5, 0xfffffffb) sendmsg$802154_raw(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={&(0x7f0000000140)="ca38c2bafb50ccadd456d01993d123f670d3f7ed77c9c7ab2d74", 0x1a}, 0x1, 0x0, 0x0, 0x40041}, 0x4004085) openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x2080, 0x0) recvmsg$unix(r1, &(0x7f0000000600)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/143, 0x8f}], 0x3, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x20) sendmsg$NL80211_CMD_ADD_TX_TS(r10, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1000}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfffc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048090}, 0x4000080) recvmmsg(r5, &(0x7f0000004f40)=[{{&(0x7f0000000780)=@can, 0x80, &(0x7f0000001900)=[{&(0x7f0000000800)=""/233, 0xe9}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x2, &(0x7f0000001940)=""/114, 0x72}, 0x3}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/186, 0xba}, {&(0x7f0000001a80)=""/201, 0xc9}, {&(0x7f0000001b80)=""/90, 0x5a}, {&(0x7f0000001c00)=""/50, 0x32}, {&(0x7f0000001c40)=""/214, 0xd6}], 0x5}, 0x1f}, {{&(0x7f0000001dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e40)=""/102, 0x66}], 0x1, &(0x7f0000001f00)=""/185, 0xb9}, 0x1}, {{&(0x7f0000001fc0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002040)=""/74, 0x4a}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/189, 0xbd}, {&(0x7f0000003180)=""/91, 0x5b}, {&(0x7f0000003200)=""/39, 0x27}, {&(0x7f0000003240)=""/38, 0x26}], 0x6, &(0x7f0000003300)=""/11, 0xb}, 0x2}, {{&(0x7f0000003340)=@qipcrtr, 0x80, &(0x7f0000003580)=[{&(0x7f00000033c0)=""/26, 0x1a}, {&(0x7f0000003400)=""/217, 0xd9}, {&(0x7f0000003500)=""/85, 0x55}], 0x3}, 0x28}, {{&(0x7f00000035c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003640)=""/89, 0x59}, {&(0x7f00000036c0)=""/171, 0xab}], 0x2}, 0x5}, {{&(0x7f00000037c0)=@phonet, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003840)=""/209, 0xd1}, {&(0x7f0000003940)=""/225, 0xe1}, {&(0x7f0000003a40)=""/251, 0xfb}, {&(0x7f0000003b40)=""/50, 0x32}, {&(0x7f0000003b80)=""/41, 0x29}], 0x5}, 0x1}, {{&(0x7f0000003c40)=@alg, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003cc0)=""/237, 0xed}, {&(0x7f0000003dc0)=""/111, 0x6f}, {&(0x7f0000003e40)=""/46, 0x2e}, {&(0x7f0000003e80)=""/116, 0x74}], 0x4, &(0x7f0000003f40)=""/4096, 0x1000}, 0x172d}], 0x8, 0x2000, &(0x7f0000005140)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000005180)={'batadv_slave_1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f00000052c0)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x3c44040}, 0xc, &(0x7f0000005280)={&(0x7f0000005200)={0x74, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x54, 0x26}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "39e63abeb397678e61740b"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) sendmsg$TIPC_CMD_GET_NETID(r11, &(0x7f00000053c0)={&(0x7f0000005300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005380)={&(0x7f0000005340)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}}, 0x40000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000005500)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f00000054c0)={&(0x7f0000005440)={0x68, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xa7c4, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40801}, 0x4000) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000005680)={&(0x7f0000005540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005640)={&(0x7f0000005580)={0xa0, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x46}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98a1ea52724138584acadfb8d97e687ec8e9811382e50cae"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d5e92d16d400ee5b8dc8165d78e6535925ea2e2e01a0a4e8"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x48840}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f00000056c0)) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000005740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000005800)={&(0x7f0000005700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000057c0)={&(0x7f0000005780)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000005bc0)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005b80)={&(0x7f00000058c0)={0x2ac, r14, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xa50, 0x5f}}}}, [@NL80211_ATTR_TESTDATA={0xc9, 0x45, "9f5de9b0ae8f3d7b6eaaf55a9ba68d8de3fe4461755ca846b0019643688ced7c3469a4e3c63a6c670c267de53d5b1c5e36b6d404aea8457bc8e8eb0652d8401fbaa8fdcb4aebb5950c67ff4bb9c9f597e9717f44356ed06c2124e7b8e7cd9ac480c3944f542d9bba65a840665bcbbae7769a71297958899013f24f160806ea1b6365672575774a10604935be4189effff894386e776052757ab6c1d42dee458e97b37925ba6d3b5fa6cef499cd5b92189386353d071c3f2da2887b55e4959a5af77870d6ab"}, @NL80211_ATTR_TESTDATA={0x90, 0x45, "697759c9dbcfdea10c6050b98472016035c3861c35cbaaec4ae8e9a5e7669f7525e237e273db8f8a69e9e081df396944ee9fe4c49b2b17d8a52ad9a9b8f615f95a349fb84cd4dc19905c6bf3fd0bdeb4ec1957486f08a59ce68317ea59e5b88f3fed13aef228a907a055ee3b0661f8501dddd5fd07b0a9f80c5cf8722533a16753851ac2c1323d8d0a79f4e5"}, @NL80211_ATTR_TESTDATA={0x24, 0x45, "a3f60b6cea5fdbd2fd842de4077840ded1fcc8c520677d967e95830a9c6848f0"}, @NL80211_ATTR_TESTDATA={0xbb, 0x45, "99fdbbf4fcde4cd8fa05bd5351e590d0d18cfdefcd721a3ab6a4bf093af89aceb59346e49050256d905c265287692e84060f87cd983ca2f034e281d1114fc8d18b24ef26410fe8f7a11d4d2b285d737da548b2d857b3a2a1cbe2e026c36b2ef628fab77fbc36f1f9ac4d6ee7735876d77327a45194e92bce35151bd3de2cfeef6ba4710fc8cae69b56f58068675e0c297b77b8cbe065a7357e4fab1f6b3783757b12a37512e199e480444396f935f445b949850194f455"}, @NL80211_ATTR_TESTDATA={0x43, 0x45, "10614e0de63bbd569f30756eff3b0f93bc7e3c302de0877d251df198b162df611e1ced3b99b77054bdca3570bdad30da0ab04bd5377a44352f7b4be0cdcc4e"}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x4000810}, 0x8000050) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000005d80)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005d40)={&(0x7f0000005c40)={0xc4, r14, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "fc7f27d19b92e163"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x40, 0x4}, {0x2}, {0x4, 0x7}, {0xfd, 0x4}, {0x2, 0x5}, {0x7f, 0x1}, {0x3}, {0x0, 0x4}, {0x5, 0x6}, {0x3, 0x1}, {0x48, 0x5}, {0x8}, {0xff, 0x7}, {0x1, 0x4}, {0x5, 0x1}, {0x40, 0x1}, {0x80, 0x4}, {0xf6, 0x2}, {0x1, 0x2}, {0x99}], "4dee1a65adabd7aa"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x81, 0x1}, {0x9, 0x2}, {0x0, 0x4}, {0x7, 0x2}, {0x4, 0x6}, {0xf9, 0x1}, {0x9}, {}, {0xe1, 0x1}, {0x7, 0x6}, {0x5, 0x3}, {0x4}, {0x20, 0x1}, {0x5, 0x2}, {0x0, 0x3}, {0xf9, 0x4}, {0x2, 0x4}, {0x5, 0x2}, {0x9}, {0x40, 0x4}], "ce21a0f951ba5098"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x5f, 0x3}, {0x88, 0x6}, {0x81, 0x7}, {0x0, 0x3}, {0x9, 0x6}, {0x1, 0x4}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0x5}, {0xff, 0x7}, {0x0, 0x1}, {0x7, 0x5}, {0x37}, {0x40}, {0x8, 0x5}, {0x47, 0x7}, {0x40, 0x5}, {0x0, 0x6}, {0x80, 0x5}, {0x2, 0x2}], "89f6bbeadf9f2e3f"}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x200008e5}, 0x4040000) 20:18:57 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) waitid(0x2, r0, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000002340)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f00000023c0)=""/153, 0x99}], 0x1, &(0x7f00000024c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x80010140) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000002540)={0x1f, 0x2b, 0x10, 0x3, 0x3, 0x7, 0x5, 0x130, 0x1}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) shmctl$IPC_RMID(0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002680), 0x8000, 0x0) ioctl$RTC_EPOCH_READ(r6, 0x8008700d, &(0x7f00000026c0)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002740), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x30, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x19, 0x0, @l2={'eth', 0x3a, 'wg1\x00'}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) recvmmsg(r6, &(0x7f000000bb40)=[{{&(0x7f0000002840)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000004d00)=[{&(0x7f00000028c0)=""/140, 0x8c}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/117, 0x75}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/93, 0x5d}, {&(0x7f0000004a80)=""/156, 0x9c}, {&(0x7f0000004b40)=""/235, 0xeb}, {&(0x7f0000004c40)=""/11, 0xb}, {&(0x7f0000004c80)=""/97, 0x61}], 0x9, &(0x7f0000004dc0)=""/230, 0xe6}, 0x40de}, {{&(0x7f0000004ec0)=@nfc_llcp, 0x80, &(0x7f00000070c0)=[{&(0x7f0000004f40)=""/169, 0xa9}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/172, 0xac}, {&(0x7f00000060c0)=""/4096, 0x1000}], 0x4, &(0x7f0000007100)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000008180)=[{&(0x7f0000008100)=""/95, 0x5f}], 0x1}, 0x4}, {{&(0x7f00000081c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000096c0)=[{&(0x7f0000008240)=""/4096, 0x1000}, {&(0x7f0000009240)=""/129, 0x81}, {&(0x7f0000009300)=""/146, 0x92}, {&(0x7f00000093c0)=""/40, 0x28}, {&(0x7f0000009400)=""/255, 0xff}, {&(0x7f0000009500)=""/143, 0x8f}, {&(0x7f00000095c0)=""/212, 0xd4}], 0x7, &(0x7f0000009740)=""/4096, 0x1000}, 0x7f}, {{&(0x7f000000a740)=@llc, 0x80, &(0x7f000000ba00)=[{&(0x7f000000a7c0)=""/4096, 0x1000}, {&(0x7f000000b7c0)=""/91, 0x5b}, {&(0x7f000000b840)=""/185, 0xb9}, {&(0x7f000000b900)=""/127, 0x7f}, {&(0x7f000000b980)=""/1, 0x1}, {&(0x7f000000b9c0)=""/40, 0x28}], 0x6, &(0x7f000000ba80)=""/180, 0xb4}, 0x1}], 0x5, 0x40, &(0x7f000000bc80)) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f000000bd80)={&(0x7f000000bcc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f000000bd40)={&(0x7f000000bd00)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f000000bdc0)) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x110, r5, 0x8000000) recvmsg$unix(r2, &(0x7f000000d1c0)={0x0, 0x0, &(0x7f000000d0c0)=[{&(0x7f000000c0c0)=""/4096, 0x1000}], 0x1, &(0x7f000000d100)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x140) syz_io_uring_submit(r8, 0x0, &(0x7f000000d240)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r9, 0x0, &(0x7f000000d200)='./file0\x00', 0x40, 0x40100, 0x12345}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f000000d280)) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f000000d300), r4) sendmsg$NL80211_CMD_SET_QOS_MAP(r10, &(0x7f000000d3c0)={&(0x7f000000d2c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f000000d380)={&(0x7f000000d340)={0x38, r11, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x69}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x1f, 0x6}, {0x5, 0x6}], "4bc44973170cee04"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) 20:18:57 executing program 3: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x90) ioctl$sock_ifreq(r0, 0x8916, &(0x7f00000001c0)={'veth0_virt_wifi\x00', @ifru_names}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="08bd56531adf58ae9c9f4b880c26926d", 0x10) socketpair(0x18, 0x4, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240448c4}, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x810) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0), 0x40080, 0x0) r5 = accept$packet(r2, 0x0, &(0x7f0000003300)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000003340)={0x2, 'wlan1\x00', {}, 0x9}) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000003380)) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000003580)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000090) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003600), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f00000036c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x2c, r6, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1d}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) accept(r5, &(0x7f0000003700)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000003780)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000037c0)={'wlan0\x00'}) [ 81.409650] audit: type=1400 audit(1731097137.943:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:18:57 executing program 4: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000000)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x842, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000080)) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x200448c0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x240040, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000200)) ioctl$RTC_AIE_ON(r0, 0x7001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$RTC_AIE_ON(r0, 0x7001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000300)) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x9d4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000004c0)) 20:18:57 executing program 5: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = socket(0x27, 0x5, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f00000000c0)={0xb4c, r1, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x514, 0x33, @mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @random="be667a68e143", {0x8, 0x9}}, @ver_80211n={0x0, 0x5, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x0, 0x69, @random=0x143a, @void, @val={0x2d, 0x1a, {0x400, 0x3, 0x7, 0x0, {0x7, 0x9, 0x0, 0x121, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0xff, 0x22}}, [{0xdd, 0x9e, "6932c89e3aa7ef5e7596e794eafcaa1246a58b18170ef785e837af223d7e527d20d2eeee685107e5f9dc0f472a4ad528c249e2b209013a421b679f50439d76b8df6850225dc791b79be25cbc534c5167584b895c582c0ad05b52f2388fbde66eef900223353f69b88f744fa898f0055f1bbcfea9c5f5a93518baa84b1409a97b9e3f06a9971445809b307e725ed4f6fad0bdf72d80029653b1b95b3d5e5f"}, {0xdd, 0xf5, "d88b154db9ab2a27a8c14806553a7a412e92cd73fa6118c7491bbff607874421f7edbf7a268c1ac0d6c870926b91b214be0bc3a4ae7f0c9ae55aff370852f96f2b3f367bc87aa9fa7cc41b3d8f68e32303d72e0ca990cc4786e3f1157482e2183247224991dc5a36e1388be4b585b5067ae59922b13a0a9f8a1fb73c03151f92702976cf095e69ed807138d1e920b2be77b6c1784a6a49eefa87846a4575be2cd3b31f82d7cc5a419eb91852284ce180d7e9e926529ee840e39e69135c18b3d18fbaf6639e8ab57a7bf46cd75103aa79991ffd28fb2ea1af0dec6a050f2c35ab953a90fee1f0c888114cee71cd37aac5b07bf379f7"}, {0xdd, 0x1d, "0dd0df119d3e057cf0472b6e099084b10899675579c9fc06be244bd54c"}, {0xdd, 0xd5, "769ef12140b05413f22ee6075ee031c08833d92570706888191dcd20aa1af316ee6ac7c5baa3a8ff122fdd21dc5073a41ccf38d40f53da8e2232b85e6851347ba63093e6963b79e318dbbc0067efd84db0623c4eb9dd94107c648a4bab1f3a7b2636c526af347c7d7a39f7d8716990e37ebe2835e7403dc79be69c550576a2d4f8b459171ea568012c469ccb522ab7a5b339faa27b0df97d800f9c2049ed6c0c444c1c613438b6144876239115b1147f27778866be6f5e595da7d1055a2473ed2a9e32ea2ace247d6787874f2fe0277dbe5516b5da"}, {0xdd, 0x89, "8d47439138240c2f27618f8ce886171216d3d8bb0aae93920cca242c62059651064ca05779d9ecd6a34029243be8b88c09e25a8a3e05e1de4d1f36e226a0cc11129bf4dcb193f9ec68d348e2cfec0fa88ec3b5e2662ab6239561c99cbbb47365f73fb0e0b830022dff592d97f4d3b8b319388071099378dc3dee36e920117da876e54fb76180b62268"}, {0xdd, 0x3e, "d6fefe8cfe3bdfb1d8c5df114397c930b761493b893edda6577d03753d7ef63188e1b06807d16264cfaf711f9813f2e97f02c86bd85a53465b1e713e88a5"}, {0xdd, 0xa1, "5e262bc5a3592dfda4244e45cf30d1e7e93f31f9e298d4cb20509e9fdfb48c7cde01ce82d377db64c411f35e626f1c0bdc8d9b342800d1b978ce220543c05c2a9964c132acca1b5e9365abe940b4b8d8ca06effbfff92b59f3ee763075de814416d6260bfdaf3ee22f5368cb0f187a27e66151ab070b55b9e0b4eecbb824460e5b4b614ba299d5cc791c0a395745151a79b1bf23823cacda15dac4f4757267dbc1"}, {0xdd, 0xd5, "23aeb9713ce10ac767afa760f0d977d8640eccc37491ee7b2e0f779a75256fd75cecad9793403f564295cab53e8617aacc5c89cbcbdcce7b0b5c83d460615b6b6760baf6cb211f4475520684636fd29ac02fcbb5032a184f2cf98924f9e5e147955aba35346c21a1c5f4074db96ea2904fee044d371f4b850af6df066467ba6bf1ba093d5b03cf5dc7149ccdb9a69db51e297c51079809a8b87a8ec173deb9e2d1f352fc711d825b00e53b6a2417e4d1cfcd1309cba0a9f705a1e8f18fde4f651e900fdc6e7216eeb8dc9df0a36f33cddd020a6356"}]}}, @NL80211_ATTR_FRAME={0x245, 0x33, @mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x20}, @device_a, @broadcast, @random="c792fb3d465b", {0x5, 0x8}}, 0x2400, 0x2f, @default, @val={0x1, 0x2, [{0x36}, {0x3, 0x1}]}, @val={0x2d, 0x1a, {0x4c, 0x3, 0x1, 0x0, {0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x5, 0x1}}, [{0xdd, 0x8b, "4b466cde6f00c6ca2c4862e24f3bad414f9ff1f94997128641d1414d53f99d7d7d22ad6e1783f82cc326311d9ba1fa908adeb61335174f716db0a627a9700a999050dc882afdcab82d1ae57928d788d231c1d831fef35b2f2d0c11f6a345587cf171f20645b967cf74497adf751a051fd5e798f1d90410b3040263b6043e9898e1be0d8673aa93655f8492"}, {0xdd, 0x35, "bcf8a12187c68c2697394ae3d85c6e9ae6eb42981e345f8c5d56e6c5df94636ab3d1f06a27ea6588a82d86931e9731f81f9163c8d2"}, {0xdd, 0x7b, "06175d9bb90059b33fdd67840a97170c88d88e46e4e7a2ac83d969ab737b49d6b955cb03c088291a6d37b3b4eeee19e7f5adf01c5b9616fdb190c01279b8b344e44f7b2cad1725c5bf098c63f0383af9cc92a7fbc46e3fd20f0ea2aa0b585a038ddda86116b79f5a7e00ed50bc6d9ee339fc56db765e1624c6f376"}, {0xdd, 0x8a, "6df04d84de8e516c1cb1bdc40833e02c762e4a02d7799ff06f08dded39eb2cc9eb0730b733fc69d90a3f1211228e26102fc20b6f687ef1335a03db79fd8eca69e52c0082d0865d649b3fa8bcb0c68fdc5387b35e06097b972509724bd6f186a6579b0305ac60d290380b8a895a7666fc376aefb37263ccdd8fa6b2ff35b9435a40a0be898bf9d7000430"}, {0xdd, 0xd, "3c72610e779bdfc1a10882e387"}, {0xdd, 0x25, "2f1705d45e67f58075d5fd897819f5eca15bc0f670691768504eb01414a986b4960f20dd66"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x7}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x279, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @broadcast, @random="32bc99292b39", {0xc, 0x1f}}, @random="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"}}, @NL80211_ATTR_FRAME={0x110, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @random='f\bm%05', {0xd, 0x4}}, @a_msdu=[{@broadcast, @device_a, 0x69, "21bf9ad79ef30a4e9fbbac5fa00527f7eb1d091d55ade9ff509512682a9b0deae25d0857d4c0c378395784187b3a7faa4310a7a0417fc308c22d784b753fae82aefbf9aa2c1d28ec1955c2c6b74d79f08a612efee7aaaefff4ceca6eb95fa6690c4dc523861ec24d5b"}, {@device_a, @device_a, 0x6b, "04d3f03ed683376fc2dc1cffa8042033dcb8ba6bd159244193475eacbe7c7a21ff4951b2cb24ef337cc287b08874fa97bb3c58830293a5f37eec67e93c17b2c26e1ef960e190a1b3077004cb88ded2820e7bfb51c8423ce04fc0c2b429c7e7510f93a26150bbb11b57c6b9"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x40}}}]}, 0xb4c}, 0x1, 0x0, 0x0, 0x801}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000804}, 0xc0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080d0}, 0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x4c, r1, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x64, r3, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}]}, 0x64}, 0x1, 0x0, 0x0, 0x8011}, 0x20008400) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000a0}, 0x880) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8064}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r5, 0xc08, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001740)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x6, 0x1, {0x0, 0x0, r0}}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x36d) 20:18:58 executing program 6: sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004054}, 0x48800) socketpair(0x2b, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x79}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x5c}}, 0x4004805) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x150, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x47}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "359f3808cb9149fb0e7880befb6a423bf23a1917a17b848d"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "00e8bb75656a2b79ff09d350556f12dfc27f40ba40644a71"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7ed4567dcce815fb10807ee96e3812f6896c14cd5c00fcf7"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ba64b6a5649da6f454a68ed233ab2a9e46fbf33399f9e41d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "76d1f7aee762473bc611aa61647482dd919aa40f9eef2888"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "375c2fa936fd58c778ac3995b2813c8290df5cc22828d6d0"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x150}, 0x1, 0x0, 0x0, 0xc005}, 0x400c000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48c0}, 0x810) ioctl$sock_ifreq(r0, 0x891a, &(0x7f0000000600)={'netdevsim0\x00', @ifru_addrs=@can={0x1d, 0x0}}) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl2\x00', r3, 0x0, 0x8, 0x7, 0xffffffff, 0x6a, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x40, 0x7, 0xf9f}}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd4, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:netlabel_mgmt_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0xd4}}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x24000084) recvmsg(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000000ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/148, 0x94}, {&(0x7f0000001c00)=""/230, 0xe6}, {&(0x7f0000001d00)=""/185, 0xb9}, {&(0x7f0000001dc0)=""/152, 0x98}, {&(0x7f0000001e80)=""/247, 0xf7}, {&(0x7f0000001f80)=""/81, 0x51}], 0x7}, 0x2002) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80800a0}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2a}, @val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x8000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002400), r1) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x51}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) 20:18:58 executing program 7: ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/227, 0xe3}], 0x2, &(0x7f00000011c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001300)={r8, 0x1, 0xffffffffffffffff, 0x6}) openat$cgroup_devices(r2, &(0x7f0000001340)='devices.deny\x00', 0x2, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000a, 0x4000010, r0, 0x8000000) recvmsg$unix(r5, &(0x7f0000001580)={&(0x7f00000013c0)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001440)=""/92, 0x5c}], 0x1, &(0x7f0000001500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x2040) syz_io_uring_submit(r9, 0x0, &(0x7f00000015c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r2, &(0x7f0000001380)={0xc}, r10, 0x3, 0x0, 0x1}, 0x0) r12 = socket(0x37, 0x800, 0x7) sendmsg$TIPC_CMD_GET_LINKS(r12, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001700)={r8, 0x2, 0xffffffffffffffff, 0x200, 0x80000}) ioctl$RTC_WIE_ON(r4, 0x700f) recvmmsg(r7, &(0x7f0000006940)=[{{&(0x7f0000001740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f00000017c0)=""/202, 0xca}, {&(0x7f00000018c0)=""/40, 0x28}, {&(0x7f0000001900)=""/254, 0xfe}, {&(0x7f0000001a00)=""/136, 0x88}, {&(0x7f0000001ac0)=""/116, 0x74}, {&(0x7f0000001b40)=""/48, 0x30}, {&(0x7f0000001b80)=""/176, 0xb0}, {&(0x7f0000001c40)=""/191, 0xbf}], 0x8, &(0x7f0000001d80)=""/156, 0x9c}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001e40)=""/145, 0x91}, {&(0x7f0000001f00)=""/236, 0xec}, {&(0x7f0000002000)=""/5, 0x5}, {&(0x7f0000002040)=""/141, 0x8d}, {&(0x7f0000002100)=""/179, 0xb3}, {&(0x7f00000021c0)=""/133, 0x85}], 0x6, &(0x7f0000002300)=""/70, 0x46}, 0xfffffff9}, {{&(0x7f0000002380)=@xdp, 0x80, &(0x7f0000003680)=[{&(0x7f0000002400)=""/113, 0x71}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/2, 0x2}, {&(0x7f00000034c0)=""/190, 0xbe}, {&(0x7f0000003580)=""/169, 0xa9}, {&(0x7f0000003640)=""/7, 0x7}], 0x6, &(0x7f0000003700)=""/19, 0x13}, 0x3000}, {{&(0x7f0000003740)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000038c0)=[{&(0x7f00000037c0)=""/241, 0xf1}], 0x1, &(0x7f0000003900)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000004900)=@phonet, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/91, 0x5b}, {&(0x7f0000004ac0)=""/33, 0x21}, {&(0x7f0000004b00)=""/188, 0xbc}, {&(0x7f0000004bc0)=""/137, 0x89}], 0x5, &(0x7f0000004d00)}, 0xd2}, {{&(0x7f0000004d40)=@ax25={{}, [@null, @bcast, @rose, @rose, @default, @null, @default, @netrom]}, 0x80, &(0x7f0000006080)=[{&(0x7f0000004dc0)=""/178, 0xb2}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/56, 0x38}, {&(0x7f0000005ec0)=""/142, 0x8e}, {&(0x7f0000005f80)=""/210, 0xd2}], 0x5, &(0x7f0000006100)=""/23, 0x17}, 0xff}, {{&(0x7f0000006140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000062c0)=[{&(0x7f00000061c0)=""/214, 0xd6}], 0x1, &(0x7f0000006300)=""/59, 0x3b}, 0x1}, {{&(0x7f0000006340)=@ax25={{0x3, @null}, [@default, @remote, @remote, @bcast, @rose, @default, @netrom, @default]}, 0x80, &(0x7f0000006580)=[{&(0x7f00000063c0)=""/76, 0x4c}, {&(0x7f0000006440)=""/100, 0x64}, {&(0x7f00000064c0)=""/168, 0xa8}], 0x3, &(0x7f00000065c0)=""/201, 0xc9}, 0xb4}, {{&(0x7f00000066c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000006800)=[{&(0x7f0000006740)=""/105, 0x69}, {&(0x7f00000067c0)=""/26, 0x1a}], 0x2, &(0x7f0000006840)=""/233, 0xe9}, 0x6}], 0x9, 0x83, &(0x7f0000006b80)={0x0, 0x989680}) syz_io_uring_setup(0x7bc6, &(0x7f0000006bc0)={0x0, 0x6286, 0x0, 0x1, 0x265, 0x0, r11}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000006c40), &(0x7f0000006c80)) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000006cc0)={0x2, 0x17, 0x6, 0x15, 0x4, 0x7, 0x5, 0x85}) recvmsg$unix(r5, &(0x7f0000007040)={&(0x7f0000006d00)=@abs, 0x6e, &(0x7f0000006f40)=[{&(0x7f0000006d80)=""/77, 0x4d}, {&(0x7f0000006e00)=""/109, 0x6d}, {&(0x7f0000006e80)=""/18, 0x12}, {&(0x7f0000006ec0)=""/101, 0x65}], 0x4, &(0x7f0000006f80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40) sendmsg$TIPC_CMD_SET_NETID(r13, &(0x7f0000007140)={&(0x7f0000007080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000007100)={&(0x7f00000070c0)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8005}, 0x8800) mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000006, 0x10, r1, 0x10000000) ioctl$RTC_WKALM_SET(r14, 0x4028700f, &(0x7f0000007180)={0x1, 0x0, {0x1d, 0xd, 0x7, 0x2, 0x5, 0x7fffffff, 0x2, 0x2}}) ioctl$RNDADDTOENTCNT(r15, 0x40045201, &(0x7f00000071c0)=0x8) [ 82.868286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.880688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.882075] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.887589] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.890642] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.893003] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.913435] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.934723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.945707] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.946793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.000865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.001684] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.002463] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.003210] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.051033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.053580] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.056894] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.057970] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.058807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.060350] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.063582] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.066292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.067701] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.071499] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.079069] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.080281] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.083444] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.083551] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.085628] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.087282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.088784] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.088893] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.089853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.095699] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.102485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.105561] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.107491] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.108718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.118025] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.119752] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.120980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.133004] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.133943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.135075] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.153118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.156967] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.162337] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.163797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.998727] Bluetooth: hci0: command tx timeout [ 85.126675] Bluetooth: hci2: command tx timeout [ 85.189383] Bluetooth: hci3: command tx timeout [ 85.189602] Bluetooth: hci4: command tx timeout [ 85.190998] Bluetooth: hci6: command tx timeout [ 85.191655] Bluetooth: hci5: command tx timeout [ 85.192219] Bluetooth: hci7: command tx timeout [ 85.255256] Bluetooth: hci1: command tx timeout [ 87.045949] Bluetooth: hci0: command tx timeout [ 87.181568] Bluetooth: hci2: command tx timeout [ 87.237267] Bluetooth: hci4: command tx timeout [ 87.237405] Bluetooth: hci5: command tx timeout [ 87.237777] Bluetooth: hci3: command tx timeout [ 87.238250] Bluetooth: hci6: command tx timeout [ 87.238732] Bluetooth: hci7: command tx timeout [ 87.302406] Bluetooth: hci1: command tx timeout [ 89.094250] Bluetooth: hci0: command tx timeout [ 89.222234] Bluetooth: hci2: command tx timeout [ 89.286323] Bluetooth: hci5: command tx timeout [ 89.286355] Bluetooth: hci6: command tx timeout [ 89.287826] Bluetooth: hci3: command tx timeout [ 89.287869] Bluetooth: hci7: command tx timeout [ 89.289303] Bluetooth: hci4: command tx timeout [ 89.350244] Bluetooth: hci1: command tx timeout [ 91.142328] Bluetooth: hci0: command tx timeout [ 91.270239] Bluetooth: hci2: command tx timeout [ 91.333319] Bluetooth: hci4: command tx timeout [ 91.333867] Bluetooth: hci6: command tx timeout [ 91.334554] Bluetooth: hci7: command tx timeout [ 91.336263] Bluetooth: hci5: command tx timeout [ 91.336756] Bluetooth: hci3: command tx timeout [ 91.397397] Bluetooth: hci1: command tx timeout [ 145.296743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.298551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.299760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.305655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.311743] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.315368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.489734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.495380] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.498776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.500890] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.502593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.503605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.508021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.515496] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.516480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.518014] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.518930] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.521379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.522748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.524117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.525113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.526286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.528242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.535596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.550836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.552263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.557610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.570642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.574706] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.577438] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.629975] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.634373] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.635516] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.638929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.640351] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.649416] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.720639] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.740436] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.744365] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.747294] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.749495] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.754562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.758415] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.765955] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.769840] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.771785] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.777390] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.851357] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.334259] Bluetooth: hci0: command tx timeout [ 147.589781] Bluetooth: hci2: command tx timeout [ 147.591713] Bluetooth: hci1: command tx timeout [ 147.592806] Bluetooth: hci3: command tx timeout [ 147.653553] Bluetooth: hci4: command tx timeout [ 147.781265] Bluetooth: hci5: command tx timeout [ 147.846370] Bluetooth: hci7: command tx timeout [ 147.909316] Bluetooth: hci6: command tx timeout [ 149.381294] Bluetooth: hci0: command tx timeout [ 149.638356] Bluetooth: hci3: command tx timeout [ 149.639022] Bluetooth: hci2: command tx timeout [ 149.640075] Bluetooth: hci1: command tx timeout [ 149.702343] Bluetooth: hci4: command tx timeout [ 149.829342] Bluetooth: hci5: command tx timeout [ 149.895223] Bluetooth: hci7: command tx timeout [ 149.957256] Bluetooth: hci6: command tx timeout [ 151.429389] Bluetooth: hci0: command tx timeout [ 151.686845] Bluetooth: hci2: command tx timeout [ 151.687881] Bluetooth: hci1: command tx timeout [ 151.688391] Bluetooth: hci3: command tx timeout [ 151.750308] Bluetooth: hci4: command tx timeout [ 151.878295] Bluetooth: hci5: command tx timeout [ 151.942514] Bluetooth: hci7: command tx timeout [ 152.006830] Bluetooth: hci6: command tx timeout [ 153.478546] Bluetooth: hci0: command tx timeout [ 153.736210] Bluetooth: hci3: command tx timeout [ 153.736251] Bluetooth: hci1: command tx timeout [ 153.736717] Bluetooth: hci2: command tx timeout [ 153.797233] Bluetooth: hci4: command tx timeout [ 153.931332] Bluetooth: hci5: command tx timeout [ 153.989393] Bluetooth: hci7: command tx timeout [ 154.053242] Bluetooth: hci6: command tx timeout [ 207.709610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.714423] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.715696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.720904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.725812] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.727566] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.818515] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.822532] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.824100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.833872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.838987] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.856705] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.019485] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.021070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.023972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.027464] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.030096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.032380] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.095575] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.109528] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.124934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.150287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.152799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.157809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.191315] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.192813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.203783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.205515] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.207393] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.210371] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.249967] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.253933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.256026] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.274195] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.276974] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.285618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.299773] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.331989] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.334117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.338910] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.362584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.372465] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.377406] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.417501] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.423996] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.430500] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.433479] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 208.449698] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.797263] Bluetooth: hci0: command tx timeout [ 209.926338] Bluetooth: hci1: command tx timeout [ 210.053401] Bluetooth: hci2: command tx timeout [ 210.374331] Bluetooth: hci4: command tx timeout [ 210.375405] Bluetooth: hci6: command tx timeout [ 210.437307] Bluetooth: hci3: command tx timeout [ 210.501450] Bluetooth: hci7: command tx timeout [ 210.502263] Bluetooth: hci5: command tx timeout [ 211.846422] Bluetooth: hci0: command tx timeout [ 211.973239] Bluetooth: hci1: command tx timeout [ 212.101255] Bluetooth: hci2: command tx timeout [ 212.422356] Bluetooth: hci6: command tx timeout [ 212.422933] Bluetooth: hci4: command tx timeout [ 212.486465] Bluetooth: hci3: command tx timeout [ 212.550842] Bluetooth: hci5: command tx timeout [ 212.551736] Bluetooth: hci7: command tx timeout [ 213.893301] Bluetooth: hci0: command tx timeout [ 214.021240] Bluetooth: hci1: command tx timeout [ 214.155172] Bluetooth: hci2: command tx timeout [ 214.469654] Bluetooth: hci4: command tx timeout [ 214.471109] Bluetooth: hci6: command tx timeout [ 214.547271] Bluetooth: hci3: command tx timeout [ 214.597515] Bluetooth: hci7: command tx timeout [ 214.599369] Bluetooth: hci5: command tx timeout [ 215.941235] Bluetooth: hci0: command tx timeout [ 216.069325] Bluetooth: hci1: command tx timeout [ 216.198416] Bluetooth: hci2: command tx timeout [ 216.518239] Bluetooth: hci6: command tx timeout [ 216.520068] Bluetooth: hci4: command tx timeout [ 216.582414] Bluetooth: hci3: command tx timeout [ 216.647439] Bluetooth: hci7: command tx timeout [ 216.649233] Bluetooth: hci5: command tx timeout [ 270.162530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.167388] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.169749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.174872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.176602] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.177761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.347657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.350532] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.352252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.356819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.358776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.360667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.566632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.569070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.570106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.572649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.574398] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.576751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.577779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.582797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.583839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.586295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.587828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.600505] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.655047] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.656807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.659104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.666242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.667430] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.672266] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.675483] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.683469] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.683558] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.688393] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.689588] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.696823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.706873] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.718561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.735305] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.740648] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.742356] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 270.743735] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.744838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.753899] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 270.759322] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.787740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.807456] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.810264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.197236] Bluetooth: hci0: command tx timeout [ 272.390285] Bluetooth: hci1: command tx timeout [ 272.647219] Bluetooth: hci2: command tx timeout [ 272.647239] Bluetooth: hci3: command tx timeout [ 272.773291] Bluetooth: hci6: command tx timeout [ 272.774245] Bluetooth: hci7: command tx timeout [ 272.774670] Bluetooth: hci5: command tx timeout [ 272.902302] Bluetooth: hci4: command tx timeout [ 274.245225] Bluetooth: hci0: command tx timeout [ 274.437197] Bluetooth: hci1: command tx timeout [ 274.694707] Bluetooth: hci3: command tx timeout [ 274.696322] Bluetooth: hci2: command tx timeout [ 274.821354] Bluetooth: hci5: command tx timeout [ 274.822755] Bluetooth: hci7: command tx timeout [ 274.823175] Bluetooth: hci6: command tx timeout [ 274.950229] Bluetooth: hci4: command tx timeout [ 276.295157] Bluetooth: hci0: command tx timeout [ 276.485194] Bluetooth: hci1: command tx timeout [ 276.743176] Bluetooth: hci2: command tx timeout [ 276.743198] Bluetooth: hci3: command tx timeout [ 276.869231] Bluetooth: hci6: command tx timeout [ 276.869255] Bluetooth: hci7: command tx timeout [ 276.869710] Bluetooth: hci5: command tx timeout [ 276.998793] Bluetooth: hci4: command tx timeout [ 278.342220] Bluetooth: hci0: command tx timeout [ 278.535151] Bluetooth: hci1: command tx timeout [ 278.789404] Bluetooth: hci2: command tx timeout [ 278.789428] Bluetooth: hci3: command tx timeout [ 278.917411] Bluetooth: hci5: command tx timeout [ 278.917909] Bluetooth: hci7: command tx timeout [ 278.918002] Bluetooth: hci6: command tx timeout [ 279.045290] Bluetooth: hci4: command tx timeout [ 332.579534] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.586482] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.587591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.591436] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.594505] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.597554] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.639352] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.641077] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.642576] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.645478] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.647373] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.648778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.760655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.769371] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.775218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.789753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.791938] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 332.797410] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.832848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.836815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.842295] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.849534] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.851281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.852942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.900700] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.903328] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.908664] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.911703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.913484] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.915968] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.969688] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.989221] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.003520] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.016487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.017330] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.054777] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.059587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.062062] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.069693] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.070878] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.092394] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.093210] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.096358] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.097564] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.105307] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.151350] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.153476] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 333.154607] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 334.667198] Bluetooth: hci1: command tx timeout [ 334.668243] Bluetooth: hci0: command tx timeout [ 334.859394] Bluetooth: hci2: command tx timeout [ 334.919348] Bluetooth: hci3: command tx timeout [ 334.981381] Bluetooth: hci4: command tx timeout [ 335.174329] Bluetooth: hci6: command tx timeout [ 335.174379] Bluetooth: hci5: command tx timeout [ 335.238196] Bluetooth: hci7: command tx timeout [ 336.709269] Bluetooth: hci0: command tx timeout [ 336.709297] Bluetooth: hci1: command tx timeout [ 336.901308] Bluetooth: hci2: command tx timeout [ 336.966168] Bluetooth: hci3: command tx timeout [ 337.030264] Bluetooth: hci4: command tx timeout [ 337.222443] Bluetooth: hci5: command tx timeout [ 337.222531] Bluetooth: hci6: command tx timeout [ 337.285189] Bluetooth: hci7: command tx timeout [ 338.759325] Bluetooth: hci1: command tx timeout [ 338.759856] Bluetooth: hci0: command tx timeout [ 338.950204] Bluetooth: hci2: command tx timeout [ 339.014214] Bluetooth: hci3: command tx timeout [ 339.078295] Bluetooth: hci4: command tx timeout [ 339.269363] Bluetooth: hci6: command tx timeout [ 339.270209] Bluetooth: hci5: command tx timeout [ 339.333230] Bluetooth: hci7: command tx timeout [ 340.805303] Bluetooth: hci0: command tx timeout [ 340.805356] Bluetooth: hci1: command tx timeout [ 340.998350] Bluetooth: hci2: command tx timeout [ 341.062191] Bluetooth: hci3: command tx timeout [ 341.125933] Bluetooth: hci4: command tx timeout [ 341.318403] Bluetooth: hci5: command tx timeout [ 341.318434] Bluetooth: hci6: command tx timeout [ 341.381209] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 20:24:07 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8177ec7f RDX=ffff888015993700 RSI=ffffffff8177ea4b RDI=0000000000000001 RBP=0000000000010000 RSP=ffff888022effa38 R8 =0000000000000000 R9 =ffffed1003484fbc R10=0000000000000001 R11=0000000000000116 R12=ffffea0000d67880 R13=ffff88800efb6460 R14=ffffea0000d67880 R15=0000000000000000 RIP=ffffffff8151d958 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4ab546e570 CR3=0000000032210000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000000000006f72 XMM04=6f6c77725f646165726874705f5f0079 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000002c17ef87 RBX=000000001fb8289d RCX=0000000000000000 RDX=000000000000000b RSI=ffff888016cb7b24 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff888016cb7a70 R8 =00000000233ac772 R9 =000000008dd28150 R10=ffffffff863f7797 R11=00000000000c33ea R12=0000000000000000 R13=ffff888016cb7ad0 R14=000000000000000b R15=ffff88802eb9ae00 RIP=ffffffff823832c6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f62043258e0 CR3=00000000323fa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000