Warning: Permanently added '[localhost]:12500' (ECDSA) to the list of known hosts. 2024/11/13 16:16:51 fuzzer started 2024/11/13 16:16:52 dialing manager at localhost:46317 syzkaller login: [ 68.665385] cgroup: Unknown subsys name 'net' [ 68.739743] cgroup: Unknown subsys name 'cpuset' [ 68.759183] cgroup: Unknown subsys name 'rlimit' 2024/11/13 16:17:09 syscalls: 229 2024/11/13 16:17:09 code coverage: enabled 2024/11/13 16:17:09 comparison tracing: enabled 2024/11/13 16:17:09 extra coverage: enabled 2024/11/13 16:17:09 setuid sandbox: enabled 2024/11/13 16:17:09 namespace sandbox: enabled 2024/11/13 16:17:09 Android sandbox: enabled 2024/11/13 16:17:09 fault injection: enabled 2024/11/13 16:17:09 leak checking: enabled 2024/11/13 16:17:09 net packet injection: enabled 2024/11/13 16:17:09 net device setup: enabled 2024/11/13 16:17:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/13 16:17:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/13 16:17:09 USB emulation: enabled 2024/11/13 16:17:09 hci packet injection: enabled 2024/11/13 16:17:09 wifi device emulation: enabled 2024/11/13 16:17:09 802.15.4 emulation: enabled 2024/11/13 16:17:09 fetching corpus: 0, signal 0/0 (executing program) 2024/11/13 16:17:10 starting 8 fuzzer processes 16:17:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1f}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x34}}, 0x4004) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x81, 0x3}, {0xfe, 0x6}, {0x3, 0x4}, {0x9, 0x4}, {0x4}], "a9648af09dfae3dc"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x8, 0x7}, {0x5, 0x4}, {0x1f, 0x4}, {0x1d, 0x7}, {0x7, 0x7}, {0x1, 0x1}], "912cb71108311955"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x5}, {0x3f, 0x1}, {0xc0, 0x1}, {0x1, 0x4}, {0x9, 0x5}, {0x7, 0x2}, {0x44, 0xfc}, {}, {0x5, 0x3}, {0x6}, {0xb2, 0x4}, {0x6, 0x2}], "d5bc282e7c360222"}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x84) socketpair(0x2b, 0x6, 0xc2, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x4]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffe0}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x9, 0x8, 0x1000, 0x7f]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r3 = accept(r2, &(0x7f0000000380)=@tipc=@id, &(0x7f0000000400)=0x80) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x2d}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000008) r4 = fork() waitid(0x1, r4, &(0x7f0000000540), 0x80000000, &(0x7f00000005c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x308, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000814}, 0x80) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8050) socketpair(0x21, 0x5, 0xffffffff, &(0x7f0000000a40)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000f00)={'erspan0\x00', &(0x7f0000000ec0)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x8, 0x10000, {{0x8, 0x4, 0x0, 0x9, 0x20, 0x68, 0x0, 0x6, 0x29, 0x0, @empty, @remote, {[@end, @generic={0x86, 0xa, "288d74a223f8dfd5"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000fc0)={'syztnl0\x00', &(0x7f0000000f40)={'syztnl1\x00', r7, 0x1, 0x40, 0x8000, 0x71, {{0xf, 0x4, 0x2, 0x31, 0x3c, 0x68, 0x0, 0x3, 0x0, 0x0, @loopback, @private=0xa010101, {[@generic={0x44, 0xa, "3b5793c6e54f3f84"}, @generic={0x89, 0x3, "a6"}, @timestamp={0x44, 0x8, 0x79, 0x0, 0xe, [0x323]}, @noop, @generic={0x88, 0xa, "863b162c22f018f9"}, @rr={0x7, 0x7, 0x67, [@broadcast]}]}}}}}) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x128, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x64940000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1057}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "9d7b37bb358d04feede884c82a52298a3af1238fc406a9617e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xc001}, 0x8000) r8 = socket(0x2c, 0x80000, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r8) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x2000c881}, 0x44004) 16:17:10 executing program 1: socketpair(0x3, 0x4, 0x100, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x3}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_io_uring_setup(0x4be9, &(0x7f0000000180)={0x0, 0x701c, 0x0, 0x1, 0xec}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r3 = accept4$bt_l2cap(r1, 0x0, &(0x7f0000000280), 0x80000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r3, 0x80, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x1, 0x7}}, 0x5) r4 = accept(r0, &(0x7f0000000380)=@llc, &(0x7f0000000400)=0x80) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8864}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9300}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8809}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004814) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x80}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000680), &(0x7f00000006c0)=0x14) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20040011) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r6, 0x608, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8841) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r8, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5a}, @void, @val={0xc, 0x99, {0x0, 0x4d}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r5) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000007, 0x12, 0xffffffffffffffff, 0x10000000) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000ac0)=0x8) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000d0}, 0x90) 16:17:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x7e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4090}, 0x44000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x4000081) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x198, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x916}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @remote, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000000}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff8000}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xeb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xad0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x94b1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x8081) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$hiddev(&(0x7f0000000640), 0x4, 0x200000) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000680)={0x1, 0x100, 0x8, 0x1, 0x1000, 0x401}) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f00000006c0)={0x3, 0x100, 0x7fff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000840)=""/170) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000009c0), 0x20000, 0x0) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x164, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5ac}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xda}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x15}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7e7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x1, 0x1ff, 0xb68, 0x400, 0x2e]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5b8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x40000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x6, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9b}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x19}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x80000000, 0x4, 0x9, 0x3f]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x400}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x90}, 0x4000040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r3) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r7, 0xb00, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000dc0), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x4c, r8, 0x400, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x401, 0x4, 0x7]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000050}, 0x44) 16:17:10 executing program 3: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/4096) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001140)={'syztnl1\x00', &(0x7f00000010c0)={'sit0\x00', 0x0, 0x2f, 0x63, 0x42, 0x0, 0xc, @local, @loopback, 0x8000, 0x80, 0x3f, 0xffff8001}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'syztnl1\x00', r0, 0x2f, 0x7c, 0x4, 0x43, 0x20, @rand_addr=' \x01\x00', @loopback, 0x1, 0x8000, 0x2, 0x2}}) r2 = syz_open_dev$evdev(&(0x7f0000001240), 0x2, 0x80000) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000001280)=[0x6, 0xffff]) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001340)={'sit0\x00', &(0x7f00000012c0)={'ip6gre0\x00', r1, 0x4, 0x3f, 0x80, 0x401, 0x60, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x1, 0x1, 0x973, 0xc37}}) fork() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000013c0)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000001400)={0x1, 0x7eb, 0x8, 0x4, 0x0, 0x7, 0x81}, 0xc) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000001440)) openat$tun(0xffffffffffffff9c, &(0x7f0000001480), 0x6f8940, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000014c0)={0x9, 0x80, 0x8, 0xff, 0x0, 0x5, 0x4}, 0xc) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001500)='cpu.pressure\x00', 0x2, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000001540)={0x3, 0x3, 0x1, 0x8001, 0x8000, 0x0, 0x2, 0x6, 0x7, 0x401, 0x1ff, 0x8, 0x9}) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001580)={0x2, 0x1, 0x6}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000015c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000001840)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001640)={0x1a0, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x33, 0x3, "3085ec49203b9c8e80b7c83c85fe08a47704610f9611758c2052322468fe43a9c3e072dfd60d292fa2bb73b937c610"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "eea89743793cfb3011a61eb91e84cfd5cfbd7cc141"}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffc00}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5f39}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24048051}, 0x4080) pipe2$9p(&(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RATTACH(r5, &(0x7f00000018c0)={0x14, 0x69, 0x1, {0x20, 0x2, 0x5}}, 0x14) 16:17:10 executing program 4: r0 = socket(0x6, 0x3, 0xb92b) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, r1, 0xb08, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "e501654b630ea567802e9af7aa7fde35"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "4d4439219cf8fb9880fe8460e1e77484"}, @NL80211_ATTR_PMKID={0x14, 0x55, "af6c74b74462f9412b7f26f1578f5560"}, @NL80211_ATTR_SSID={0x18, 0x34, @random="5674e388e7684777497601e1a671ce721ea3619e"}, @NL80211_ATTR_SSID={0x23, 0x34, @random="6e43d481b01a984b1520050c34dd006c4bd5eac46ae8784081f3972d5fae85"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5c}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "30b5b1b57d20f8bb732dbfd10337ca68"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x20000855) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffff, 0x67}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x240040c0) r5 = socket(0xf, 0x3, 0x4) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}}, 0x8004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r7, 0x10e, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) r9 = accept(r5, 0x0, &(0x7f0000000780)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r1, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x40, 0x74}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x2) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x92d02, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r5) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r11, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r12, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x7ad0ea4e20b26f3d}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800) [ 86.935757] audit: type=1400 audit(1731514631.003:7): avc: denied { execmem } for pid=277 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:17:11 executing program 5: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)={0x5d, 0x75, 0x1, {0x52, "2d1a97724fa65c0445c2736ae14177cedf8656b2e18af15fc4e6b86eabe889bf8578fc61cc767f4772770260aad4e6c476e41a0ed312594e265691810300fc876f4a4e63933c092c14ee7d7c64695ebbe89b"}}, 0x5d) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r0, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x650000, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000180)={0xd}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x180, 0x0) accept4$inet(r2, 0x0, &(0x7f0000000680), 0x0) getrusage(0x7fffffffffffffff, &(0x7f00000006c0)) getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=0x4) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000800)={0x7, 0x21, 0x1}, 0x7) wait4(0x0, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2481, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000880)={'lo\x00', @remote}) getrusage(0x0, &(0x7f00000008c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x20000004) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000c40)={0xfd, ""/253}) 16:17:11 executing program 7: r0 = socket(0x29, 0x4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3f, 0x1b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e0, r1, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x40}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "53d60563b8dc1b926a769961"}, @NL80211_ATTR_FILS_ERP_RRK={0x7d, 0xfc, "a897069218014e91c5b755d8e97931ca4bf59e03e1684e2e9c3277dd2baf1e60adff8ea1097d18178577baf1f357e81a312707e91ccbe597986fec7a4d38b6ff62fd57c3f5d5245fc0491cf82e588ad34f9a218f919a6a91bf0a335c918df9c81e1681777ec1f7ce30d42c5b3cafd07e5d8140cced093beba5"}, @NL80211_ATTR_FILS_ERP_RRK={0xfb, 0xfc, "ef259821259ef350342c88913a08c61f1efc73b01795d921b7a5df9fbcbe09989e9744c2325c285b1920b72058ce8b3f02ce9917d726db448fd2dd6b8660ffb25f97d7b73f4e1f00dd04b74e8c8e16e969d73d35802a771030c8c1bdf9d6ea1a2783031c2b72b860ab5888603831f9e918328d2dce4676fce32d0178a6797b5314598e91e2e543bbc6a2f6e2997f3ee6e270c28d7b1a84656beee28c8ba6ff653b312697d89c26b527b6bc8645bb239989b24e2266213ed932fd27e8ea4c999eb3189a9d9f352cf55b82be32e81ec661b9122979f08337fea6fcd9cf49f0398a6f9ceef20cb59350f43517e4f2fdcb5af19c4327ce9ea3"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_RRK={0xf2, 0xfc, "ab90d0f15e1aba72f426d9c62efd8cfe1c4eb7ecd12e9a316bc873a4ab1839026bc65af017bb001318bca257d37c5de7d2b43fff806c7413cb222d2a7c4f9059f0eb7680891ba8374efd373af050f1d1436426c9a9b427fc228b55d25e7193411760fe28e747bb47bf01332af92b4279b3db65942c1dbb9671f0a41b30eb045ef6f08e94f8c57d4c99f43268c7c17fa21c2b74e93b64e8dd69ded114e88532523dc20acc88322bdc8c2aed7f3f90749b6564ba6af77ea4ae3e759390972970b6528914667a9ae80acda070a317d177b931a0a38fbcdc6ec0841a400a5119bc92f1d1c8c35e52b1b9c32103d6643a"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "acf510a21b2c07f02be5304cb6bb"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "7848aef6"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, 'K'}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20000001}, 0x51) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe0, r6, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2c}}}}, [@NL80211_ATTR_SSID={0x1c, 0x34, @random="ecaa269333b3ce0c6439653d7543b8d2e8aa510537170214"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff000000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_SSID={0x23, 0x34, @random="53e20d75f1c06041ac4edb6fc345a1b317afbb097c1b9b9adc8285441a3150"}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1db}]]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r6, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x20040015) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r6, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}}, 0x400d0) socket(0x2a, 0xa, 0x14) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x18, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x84}, 0x44080) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, 0x0, 0x12, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000ec0)={0x7, 0x4d, 0x1}, 0x7) 16:17:11 executing program 6: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x40, 0x7800, 0x8, 0x9, {{0x4c, 0x4, 0x1, 0x15, 0x130, 0x68, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@cipso={0x86, 0x18, 0x0, [{0x2, 0x2}, {0x0, 0xa, "909c9b2d2e56d5b7"}, {0x7, 0x3, 'n'}, {0x7, 0x3, "8f"}]}, @timestamp_prespec={0x44, 0x54, 0x7e, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@rand_addr=0x64010100}, {@remote, 0x3}, {@multicast1, 0x5f34}, {@loopback, 0x6}, {@rand_addr=0x64010101, 0x2}, {@multicast1, 0x4}, {@private=0xa010102}, {@rand_addr=0x64010100, 0x6}, {@empty, 0x80}]}, @noop, @cipso={0x86, 0x7a, 0x3, [{0x5, 0x10, "287ba4a6f676064096f8dd891e4c"}, {0x5, 0x12, "62b51c75b300f6a618aa27005d3200dc"}, {0x6, 0xa, "82e7fbca142dbfc7"}, {0x2, 0xf, "d06ba57cbb2535162a41d76a25"}, {0x6, 0x12, "3cb56d9854583789b2ad0cebc1ba41f5"}, {0x7, 0x3, "b0"}, {0x0, 0x4, "c786"}, {0x2, 0xa, "5c18a2a43a7a1b0d"}, {0x5, 0x11, "8fe3310afb5a5f48fb17c3110b1258"}, {0x2, 0x5, "4687d2"}]}, @ssrr={0x89, 0x17, 0x84, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @remote, @rand_addr=0x64010102]}, @ra={0x94, 0x4}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0x0, 0x8, "2d5bfd59da82"}]}, @ssrr={0x89, 0xb, 0xcc, [@local, @rand_addr=0x64010101]}]}}}}}) r1 = socket$inet(0x2, 0x800, 0x1) clock_gettime(0x0, &(0x7f0000006100)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005f00)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000003c0)=""/39, 0x27}, {&(0x7f0000000400)=""/226, 0xe2}, {&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/126, 0x7e}], 0x8, &(0x7f00000007c0)=""/110, 0x6e}, 0x5}, {{&(0x7f0000000840)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/252, 0xfc}, {&(0x7f00000009c0)=""/42, 0x2a}], 0x2}, 0x8001}, {{&(0x7f0000000a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/173, 0xad}, {&(0x7f0000000bc0)=""/42, 0x2a}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/123, 0x7b}, {&(0x7f0000001c80)=""/46, 0x2e}], 0x6}, 0x6}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001d40)=""/101, 0x65}, {&(0x7f0000001dc0)=""/57, 0x39}, {&(0x7f0000001e00)=""/72, 0x48}, {&(0x7f0000001e80)=""/186, 0xba}, {&(0x7f0000001f40)=""/202, 0xca}, {&(0x7f0000002040)=""/216, 0xd8}], 0x6, &(0x7f00000021c0)=""/83, 0x53}, 0x2}, {{&(0x7f0000002240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000032c0)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003300)=""/247, 0xf7}, 0x6}, {{&(0x7f0000003400)=@hci, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003480)=""/100, 0x64}, {&(0x7f0000003500)=""/102, 0x66}, {&(0x7f0000003580)=""/109, 0x6d}, {&(0x7f0000003600)=""/154, 0x9a}, {&(0x7f00000036c0)=""/26, 0x1a}, {&(0x7f0000003700)=""/135, 0x87}], 0x6, &(0x7f0000003840)=""/223, 0xdf}, 0x7}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/4096, 0x1000}], 0x2, &(0x7f0000005980)=""/39, 0x27}, 0x26}, {{&(0x7f00000059c0)=@nl, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005a40)=""/79, 0x4f}, {&(0x7f0000005ac0)=""/244, 0xf4}, {&(0x7f0000005bc0)=""/230, 0xe6}, {&(0x7f0000005cc0)=""/184, 0xb8}, {&(0x7f0000005d80)=""/175, 0xaf}, {&(0x7f0000005e40)=""/9, 0x9}], 0x6}, 0x8}], 0x8, 0x1101, &(0x7f0000006140)={r2, r3+10000000}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000006240)={'gretap0\x00', &(0x7f0000006180)={'erspan0\x00', r4, 0x20, 0x8, 0x58, 0x973f, {{0x1f, 0x4, 0x0, 0x36, 0x7c, 0x65, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @remote, {[@timestamp_addr={0x44, 0x1c, 0x73, 0x1, 0x6, [{@private=0xa010101, 0x10001}, {@private=0xa010100, 0xb4e}, {@private=0xa010101, 0x6}]}, @ssrr={0x89, 0xb, 0x4b, [@broadcast, @remote]}, @cipso={0x86, 0x39, 0x2, [{0x0, 0x12, "27e10b123374634516afd84afaf8faea"}, {0x1, 0xf, "4e6dd5fed75f542380a0896bfe"}, {0x7, 0x9, "f1dc60ad7df9e5"}, {0x1, 0x9, "1eeebdcdf3f3e5"}]}, @rr={0x7, 0x7, 0xba, [@empty]}]}}}}}) r7 = accept(r6, &(0x7f0000006280)=@in={0x2, 0x0, @remote}, &(0x7f0000006300)=0x80) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006400), 0x2000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000006480)={'syztnl2\x00', &(0x7f0000006440)={'tunl0\x00', r4, 0x740, 0x8000, 0x83, 0x6, {{0x6, 0x4, 0x3, 0x8, 0x18, 0x64, 0x0, 0x81, 0x4, 0x0, @remote, @rand_addr=0x64010100, {[@noop, @end]}}}}}) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r8, 0x10000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000065c0)={'ip_vti0\x00', &(0x7f00000064c0)={'tunl0\x00', r0, 0x700, 0x7800, 0x8500, 0xbb136cc, {{0x2e, 0x4, 0x3, 0xa, 0xb8, 0x64, 0x0, 0x2, 0x2f, 0x0, @local, @multicast1, {[@ra={0x94, 0x4}, @generic={0x88, 0x7, "a8fcab847c"}, @cipso={0x86, 0x16, 0x3, [{0x5, 0x5, "6d0af6"}, {0x2, 0xb, "454f1ca859c7eb690c"}]}, @timestamp_prespec={0x44, 0xc, 0xeb, 0x3, 0xe, [{@loopback, 0x8}]}, @ssrr={0x89, 0x7, 0xa1, [@loopback]}, @timestamp={0x44, 0x8, 0x17, 0x0, 0x0, [0x3c00000]}, @timestamp={0x44, 0x28, 0x5c, 0x0, 0x8, [0x2, 0xefb5, 0x8, 0x1, 0x3, 0x4, 0x5303, 0x80000000, 0x1]}, @timestamp_prespec={0x44, 0x3c, 0x3b, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x5}, {@multicast2, 0x1f}, {@private=0xa010100, 0x80000000}, {@multicast2, 0x4}, {@loopback, 0x10001}, {@multicast1, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) syz_io_uring_setup(0x66bf, &(0x7f0000006600)={0x0, 0xc846, 0x8, 0x3, 0x98, 0x0, r8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000006680)=0x0, &(0x7f00000066c0)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000006700)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r11, 0x0, 0x0, 0x0, {0x4000}}, 0x1f) r12 = syz_open_dev$sg(&(0x7f0000006740), 0xfffffffffffeffff, 0x2280) ioctl$BLKTRACETEARDOWN(r12, 0x1276, 0x0) ioctl$HIDIOCGVERSION(r8, 0x80044801, &(0x7f0000006780)) r13 = accept(r11, &(0x7f00000067c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, &(0x7f0000006840)=0x80) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000068c0), r7) sendmsg$NL80211_CMD_TRIGGER_SCAN(r13, &(0x7f0000006980)={&(0x7f0000006880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000006940)={&(0x7f0000006900)={0x2c, r14, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x63}}}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) [ 88.382315] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.384782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.392698] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.393488] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.394326] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.396501] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.398880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.403611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.404387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.405982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.410953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.412390] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.413973] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.416107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.416129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.418026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.418235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.419897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.424707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.425089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.428901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.430944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.455798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.457353] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.461796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.468764] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.469360] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.475773] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.478895] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.479935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.484167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.485416] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.486942] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.488369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.489329] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.490801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.506670] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.510032] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.516446] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.531377] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.533648] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.536785] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.537918] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.543033] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.544936] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.554688] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.561402] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.562680] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.478100] Bluetooth: hci1: command tx timeout [ 90.478964] Bluetooth: hci0: command tx timeout [ 90.479651] Bluetooth: hci2: command tx timeout [ 90.541740] Bluetooth: hci4: command tx timeout [ 90.542435] Bluetooth: hci5: command tx timeout [ 90.543130] Bluetooth: hci3: command tx timeout [ 90.605907] Bluetooth: hci7: command tx timeout [ 90.606800] Bluetooth: hci6: command tx timeout [ 92.526864] Bluetooth: hci2: command tx timeout [ 92.527421] Bluetooth: hci0: command tx timeout [ 92.528597] Bluetooth: hci1: command tx timeout [ 92.589839] Bluetooth: hci3: command tx timeout [ 92.590345] Bluetooth: hci5: command tx timeout [ 92.591714] Bluetooth: hci4: command tx timeout [ 92.654731] Bluetooth: hci7: command tx timeout [ 92.655225] Bluetooth: hci6: command tx timeout [ 94.574737] Bluetooth: hci2: command tx timeout [ 94.575289] Bluetooth: hci0: command tx timeout [ 94.576408] Bluetooth: hci1: command tx timeout [ 94.640507] Bluetooth: hci5: command tx timeout [ 94.641065] Bluetooth: hci3: command tx timeout [ 94.641088] Bluetooth: hci4: command tx timeout [ 94.702649] Bluetooth: hci6: command tx timeout [ 94.703150] Bluetooth: hci7: command tx timeout [ 96.621613] Bluetooth: hci2: command tx timeout [ 96.622703] Bluetooth: hci1: command tx timeout [ 96.623104] Bluetooth: hci0: command tx timeout [ 96.685719] Bluetooth: hci5: command tx timeout [ 96.694155] Bluetooth: hci3: command tx timeout [ 96.695571] Bluetooth: hci4: command tx timeout [ 96.750061] Bluetooth: hci6: command tx timeout [ 96.750584] Bluetooth: hci7: command tx timeout [ 151.226694] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.228941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.230397] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.235990] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.239773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.241917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.285940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.298238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.300855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.302371] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.305636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.306664] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.308446] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.310198] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.312246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.313441] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.317347] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.319956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.322201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.327683] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.336271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.340404] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.348161] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.349284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.441695] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.446087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.447182] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.450302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.452656] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.454421] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.513316] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.541071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.559173] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.562017] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.566107] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.568871] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.569920] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.578465] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.580300] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.586893] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.604766] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.614863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.615669] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.621791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.623677] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.624792] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.626672] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.640554] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.325661] Bluetooth: hci0: command tx timeout [ 153.391342] Bluetooth: hci2: command tx timeout [ 153.392316] Bluetooth: hci1: command tx timeout [ 153.393317] Bluetooth: hci3: command tx timeout [ 153.518709] Bluetooth: hci4: command tx timeout [ 153.646587] Bluetooth: hci6: command tx timeout [ 153.709827] Bluetooth: hci5: command tx timeout [ 153.773747] Bluetooth: hci7: command tx timeout [ 155.374695] Bluetooth: hci0: command tx timeout [ 155.437790] Bluetooth: hci2: command tx timeout [ 155.438338] Bluetooth: hci3: command tx timeout [ 155.439649] Bluetooth: hci1: command tx timeout [ 155.566694] Bluetooth: hci4: command tx timeout [ 155.694956] Bluetooth: hci6: command tx timeout [ 155.758669] Bluetooth: hci5: command tx timeout [ 155.822718] Bluetooth: hci7: command tx timeout [ 157.422581] Bluetooth: hci0: command tx timeout [ 157.485671] Bluetooth: hci3: command tx timeout [ 157.486221] Bluetooth: hci1: command tx timeout [ 157.486707] Bluetooth: hci2: command tx timeout [ 157.615219] Bluetooth: hci4: command tx timeout [ 157.742590] Bluetooth: hci6: command tx timeout [ 157.806714] Bluetooth: hci5: command tx timeout [ 157.869788] Bluetooth: hci7: command tx timeout [ 159.470691] Bluetooth: hci0: command tx timeout [ 159.536650] Bluetooth: hci2: command tx timeout [ 159.537193] Bluetooth: hci1: command tx timeout [ 159.538208] Bluetooth: hci3: command tx timeout [ 159.663235] Bluetooth: hci4: command tx timeout [ 159.789598] Bluetooth: hci6: command tx timeout [ 159.854786] Bluetooth: hci5: command tx timeout [ 159.920782] Bluetooth: hci7: command tx timeout [ 213.439790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.441770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.443208] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.444976] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.447310] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.449925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.452614] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.454329] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.457424] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.465168] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.466890] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.468117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.594178] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.598840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.602742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.621757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.631795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.632874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.668413] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.716093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.720779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.727762] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.735468] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.736974] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.755663] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.757448] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.759011] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.762124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.764146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.764737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.765137] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.766715] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.768199] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.769988] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.771302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.772439] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.782058] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.782363] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.786104] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.806215] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.816834] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.819721] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.839296] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.845636] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.850156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.930688] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.969912] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.973006] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.469605] Bluetooth: hci0: command tx timeout [ 215.534566] Bluetooth: hci1: command tx timeout [ 215.726568] Bluetooth: hci2: command tx timeout [ 215.791557] Bluetooth: hci3: command tx timeout [ 215.853715] Bluetooth: hci5: command tx timeout [ 215.854407] Bluetooth: hci4: command tx timeout [ 215.918832] Bluetooth: hci6: command tx timeout [ 216.109860] Bluetooth: hci7: command tx timeout [ 217.518622] Bluetooth: hci0: command tx timeout [ 217.581639] Bluetooth: hci1: command tx timeout [ 217.773769] Bluetooth: hci2: command tx timeout [ 217.838545] Bluetooth: hci3: command tx timeout [ 217.902611] Bluetooth: hci4: command tx timeout [ 217.903106] Bluetooth: hci5: command tx timeout [ 217.966795] Bluetooth: hci6: command tx timeout [ 218.158758] Bluetooth: hci7: command tx timeout [ 219.567022] Bluetooth: hci0: command tx timeout [ 219.630792] Bluetooth: hci1: command tx timeout [ 219.822976] Bluetooth: hci2: command tx timeout [ 219.886625] Bluetooth: hci3: command tx timeout [ 219.949902] Bluetooth: hci4: command tx timeout [ 219.951243] Bluetooth: hci5: command tx timeout [ 220.013589] Bluetooth: hci6: command tx timeout [ 220.206596] Bluetooth: hci7: command tx timeout [ 221.615578] Bluetooth: hci0: command tx timeout [ 221.677568] Bluetooth: hci1: command tx timeout [ 221.870713] Bluetooth: hci2: command tx timeout [ 221.934766] Bluetooth: hci3: command tx timeout [ 221.998612] Bluetooth: hci5: command tx timeout [ 221.999104] Bluetooth: hci4: command tx timeout [ 222.062572] Bluetooth: hci6: command tx timeout [ 222.254561] Bluetooth: hci7: command tx timeout [ 275.999788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.001928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.006011] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.010897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.013426] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.017003] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.220020] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.224124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.226611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.235971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.365710] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.368931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.062602] Bluetooth: hci0: command tx timeout [ 278.445606] Bluetooth: hci1: command tx timeout [ 278.650286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.652153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.657722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.673171] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.674153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.676927] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.678129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.679046] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.680310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.682590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.688186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.693095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.694287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.695856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.702401] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.704585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.706690] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.709561] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.711243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.712295] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.713721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.716205] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.718871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.723325] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.724131] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.727060] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.732743] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.766846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.768813] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.770030] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.775108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.797758] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.814735] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.816384] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.823754] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.830052] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.110711] Bluetooth: hci0: command tx timeout [ 280.493823] Bluetooth: hci1: command tx timeout [ 280.749641] Bluetooth: hci5: command tx timeout [ 280.760758] Bluetooth: hci6: command tx timeout [ 280.761321] Bluetooth: hci2: command tx timeout [ 280.877596] Bluetooth: hci7: command tx timeout [ 280.878314] Bluetooth: hci3: command tx timeout [ 280.942735] Bluetooth: hci4: command tx timeout [ 282.158564] Bluetooth: hci0: command tx timeout [ 282.542628] Bluetooth: hci1: command tx timeout [ 282.797580] Bluetooth: hci5: command tx timeout [ 282.798089] Bluetooth: hci2: command tx timeout [ 282.798584] Bluetooth: hci6: command tx timeout [ 282.925627] Bluetooth: hci7: command tx timeout [ 282.926108] Bluetooth: hci3: command tx timeout [ 282.990532] Bluetooth: hci4: command tx timeout [ 284.205788] Bluetooth: hci0: command tx timeout [ 284.590568] Bluetooth: hci1: command tx timeout [ 284.846608] Bluetooth: hci6: command tx timeout [ 284.847107] Bluetooth: hci5: command tx timeout [ 284.847953] Bluetooth: hci2: command tx timeout [ 284.973808] Bluetooth: hci3: command tx timeout [ 284.974294] Bluetooth: hci7: command tx timeout [ 285.037589] Bluetooth: hci4: command tx timeout [ 286.894601] Bluetooth: hci5: command tx timeout [ 286.895086] Bluetooth: hci2: command tx timeout [ 286.896414] Bluetooth: hci6: command tx timeout [ 287.022595] Bluetooth: hci7: command tx timeout [ 287.023086] Bluetooth: hci3: command tx timeout [ 287.085557] Bluetooth: hci4: command tx timeout [ 338.047125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.050295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.052594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.057655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.062193] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.064652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.112356] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.122072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.129723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.135388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.140015] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.146929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.242226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.245325] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.248500] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.252343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.256279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.258999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.263745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.267750] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.269996] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.283692] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.296326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.298735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.389218] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.404190] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.406399] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.425983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.432683] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.436191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.451690] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.458415] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.463998] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.510764] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.519028] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.528257] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.536599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.539743] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.561943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.584236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.601224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.603865] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.612544] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.625592] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.626823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.672696] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.681744] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.705052] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.078560] Bluetooth: hci0: command tx timeout [ 340.206631] Bluetooth: hci1: command tx timeout [ 340.333596] Bluetooth: hci2: command tx timeout [ 340.334653] Bluetooth: hci3: command tx timeout [ 340.717631] Bluetooth: hci5: command tx timeout [ 340.718734] Bluetooth: hci6: command tx timeout [ 340.974743] Bluetooth: hci4: command tx timeout [ 341.231542] Bluetooth: hci7: command tx timeout [ 342.125563] Bluetooth: hci0: command tx timeout [ 342.253568] Bluetooth: hci1: command tx timeout [ 342.381565] Bluetooth: hci2: command tx timeout [ 342.382078] Bluetooth: hci3: command tx timeout [ 342.765567] Bluetooth: hci5: command tx timeout [ 342.767223] Bluetooth: hci6: command tx timeout [ 343.021597] Bluetooth: hci4: command tx timeout [ 343.277542] Bluetooth: hci7: command tx timeout [ 344.173750] Bluetooth: hci0: command tx timeout [ 344.301766] Bluetooth: hci1: command tx timeout [ 344.429597] Bluetooth: hci2: command tx timeout [ 344.431145] Bluetooth: hci3: command tx timeout [ 344.814644] Bluetooth: hci6: command tx timeout [ 344.816409] Bluetooth: hci5: command tx timeout [ 345.070097] Bluetooth: hci4: command tx timeout [ 345.325541] Bluetooth: hci7: command tx timeout [ 346.221630] Bluetooth: hci0: command tx timeout [ 346.349764] Bluetooth: hci1: command tx timeout [ 346.477608] Bluetooth: hci2: command tx timeout [ 346.478117] Bluetooth: hci3: command tx timeout [ 346.861589] Bluetooth: hci5: command tx timeout [ 346.862098] Bluetooth: hci6: command tx timeout [ 347.118088] Bluetooth: hci4: command tx timeout [ 347.373553] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 16:22:21 Registers: info registers vcpu 0 RAX=ffff888035b9fe18 RBX=0000000000022531 RCX=ffffffff817d375e RDX=ffff888035bc5280 RSI=ffffffff817d3069 RDI=0000000000000007 RBP=0400000000000042 RSP=ffff888035b9f9f0 R8 =0000000000000001 R9 =ffffed1002dc31d4 R10=0000000000000040 R11=00000000000c33ea R12=8000000022531067 R13=dffffc0000000000 R14=00007fa734fd5000 R15=0000000000000040 RIP=ffffffff817d306e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa734b18540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feb3fc6a000 CR3=00000000231aa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff8192c0df RCX=0000000000000001 RDX=1ffff11006c71e52 RSI=ffff88803638fda8 RDI=ffffffff8192c0df RBP=ffffffff8192c0df RSP=ffff88803638f1e8 R8 =0000000000000001 R9 =ffff88803638f278 R10=000000000003c001 R11=000000000002bb2c R12=0000000000000001 R13=0000000000000000 R14=ffff88801599b700 R15=0000000000000cc0 RIP=ffffffff8121f1a2 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b50480b080 CR3=00000000334b6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000