syzkaller login: [ 56.936660] sshd (238) used greatest stack depth: 24216 bytes left [ 58.818123] sshd (239) used greatest stack depth: 24032 bytes left [ 64.961734] hrtimer: interrupt took 5763522 ns Warning: Permanently added '[localhost]:9890' (ECDSA) to the list of known hosts. 2024/11/14 11:11:56 fuzzer started 2024/11/14 11:11:56 dialing manager at localhost:46317 [ 67.404905] cgroup: Unknown subsys name 'net' [ 67.496155] cgroup: Unknown subsys name 'cpuset' [ 67.514774] cgroup: Unknown subsys name 'rlimit' 2024/11/14 11:12:13 syscalls: 200 2024/11/14 11:12:13 code coverage: enabled 2024/11/14 11:12:13 comparison tracing: enabled 2024/11/14 11:12:13 extra coverage: enabled 2024/11/14 11:12:13 setuid sandbox: enabled 2024/11/14 11:12:13 namespace sandbox: enabled 2024/11/14 11:12:13 Android sandbox: enabled 2024/11/14 11:12:13 fault injection: enabled 2024/11/14 11:12:13 leak checking: enabled 2024/11/14 11:12:13 net packet injection: enabled 2024/11/14 11:12:13 net device setup: enabled 2024/11/14 11:12:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/14 11:12:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/14 11:12:13 USB emulation: enabled 2024/11/14 11:12:13 hci packet injection: enabled 2024/11/14 11:12:13 wifi device emulation: enabled 2024/11/14 11:12:13 802.15.4 emulation: enabled 2024/11/14 11:12:13 fetching corpus: 0, signal 0/0 (executing program) 2024/11/14 11:12:15 starting 8 fuzzer processes 11:12:15 executing program 0: clock_getres(0x6, &(0x7f0000000000)) epoll_create1(0x80000) clock_gettime(0x3, &(0x7f0000000040)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socketpair(0xa, 0x4, 0x3, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x689, &(0x7f0000000100)={0x0, 0xfb31, 0x8, 0x3, 0x7c}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8082000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1ac, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x168, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x13303680}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3f}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xef}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa43f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2dbc}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xc0055}, 0x24000000) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4c041) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0xf12, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x14) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) semtimedop(0xffffffffffffffff, &(0x7f0000000700)=[{0x0, 0x1, 0x1000}, {0x3, 0xcefb, 0x1000}, {0x2, 0x0, 0x1000}, {0x0, 0x8, 0x800}, {0x1, 0xc65, 0x1800}, {0x3, 0xffff}, {0x1, 0xeb}, {0x1, 0x1f, 0x1800}, {0xb, 0x3, 0x1000}, {0x1, 0x81}], 0xa, &(0x7f0000000780)={r6, r7+10000000}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000007c0)={{0x0, 0x0, 0x8, 0x3, 0x1}, 0x3, 0x5}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r4, {0xee01}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x40080) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000980), 0x420d40, 0x0) socketpair(0xa, 0x3, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r10, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) 11:12:15 executing program 4: connect$netlink(0xffffffffffffffff, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000080)={0x81, 0x9, 0x3, 0x3f}, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008891}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x158, r5, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4048895}, 0x800) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x18, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0x80, 0x1}}, @ibss={0x6, 0x2, 0xfff}, @ibss={0x6, 0x2, 0x6}, @dsss={0x3, 0x1, 0xa}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x1) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000880), 0x80, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x101}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xfffffffd}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x80000000}, {0x8}, {0x8, 0x0, 0x165}, {0x8, 0x0, 0x92f1}, {0x8, 0x0, 0x896}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x400e4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42801}, 0x20008055) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xf0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xb, 0x5b, "f7ebe7d6e1a7f6"}, @NL80211_ATTR_FRAME_MATCH={0x92, 0x5b, "08b96b50283483c453b8530b9215abf6d875edb7464c7e418a94845d383d19f61d127242a5dd5461e55eb345e8232f8bc51ddfd8f740aabff38ee15d1be647781392c3e15b6fb2b55093f4cd4bd21144172d66ff7ad69311e562ecd23679b2fc15a62d73b3c6405612d1acd8cbe42eee8bebeb5f6dfd587a25de8a48e331f129ccb91cc68696742926b52a53b698"}, @NL80211_ATTR_FRAME_MATCH={0x2b, 0x5b, "226d21801861f0a8395b0cde11ae1a40d318e82b5f3cea20cc366e234da943e02b46ba9e7fcef3"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd300}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8001}, 0x40) 11:12:15 executing program 3: sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd9}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x20}, @NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x4}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7b81aab}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffa8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6c}]}, 0x108}, 0x1, 0x0, 0x0, 0x8080}, 0x910) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb0, r0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x7}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x10001}, {0x8}, {0x8, 0x0, 0x401}, {0x8, 0x0, 0xfc5}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x20}, {0x8, 0x0, 0x4c}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x400}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48001}, 0x4010) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x200, 0x70bd2b, 0x4, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000600)={0xfffffffffffffffc, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x708, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x840) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r3) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair(0x22, 0xa, 0x6, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r6, &(0x7f0000000e40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a00)={0x3e4, r8, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb1b2, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x2ac, 0x2a, [@perr={0x84, 0x1c, {0x4, 0x2, [@not_ext={{}, @device_b, 0x0, "", 0x2e}, @not_ext={{}, @device_a, 0xb17, "", 0x2f}]}}, @challenge={0x10, 0x1, 0x13}, @ibss={0x6, 0x2, 0x401}, @supported_rates={0x1, 0x7, [{0x0, 0x1}, {0x30}, {0x1}, {0x5, 0x1}, {0x16}, {0x4, 0x1}, {0x3c}]}, @perr={0x84, 0x128, {0x8, 0x12, [@ext={{}, @device_a, 0x2, @device_a, 0x12}, @ext={{}, @device_b, 0x4, @broadcast, 0x39}, @not_ext={{}, @device_a, 0x1, "", 0x36}, @not_ext={{}, @broadcast, 0x101, "", 0x40}, @ext={{}, @broadcast, 0xf475000, @device_a, 0x1b}, @ext={{}, @broadcast, 0x0, @device_a, 0x16}, @ext={{}, @broadcast, 0xffffffff, @broadcast, 0x13}, @ext={{}, @device_b, 0x2, @device_b, 0x18}, @not_ext={{}, @device_b, 0x94, "", 0x1c}, @not_ext={{}, @device_a, 0x81, "", 0x3c}, @ext={{}, @broadcast, 0x3, @device_a, 0x8}, @not_ext={{}, @broadcast, 0x2, "", 0xe}, @ext={{}, @broadcast, 0x5, @device_b, 0x32}, @ext={{}, @broadcast, 0xcf29c327, @device_a, 0x21}, @not_ext={{}, @device_b, 0x7, "", 0x2d}, @ext={{}, @device_a, 0x5, @device_b, 0x23}, @not_ext={{}, @device_b, 0x0, "", 0x17}, @not_ext={{}, @broadcast, 0xfffffffe, "", 0x11}]}}, @peer_mgmt={0x75, 0x18, {0x0, 0x377f, @val, @val=0x29, @val="3539a773fc935147a82a277c5c86d15d"}}, @peer_mgmt={0x75, 0x6, {0x1, 0x3, @void, @val=0x2d, @void}}, @random={0x7, 0x68, "b7686851ef2a11e3b9ddff50cb81a18e9badce3c68ad1f9a260be1a1a573dd7261c06bee76433b654f8c57e1b178a261065598445cd750f169cd4bd203215e8a7b97fedff504eab827a9ee9a782c8cf07a05ffddbcdc212a792d36ca6be410d634e5aaf26a6e51a1"}, @random={0x1f, 0xc2, "b3187e7f4a8437df8e85d29a230015aa1bb041b7949ca32321ff1c627606094d87ec5d2cacb3fe2c0f2f77ba098931d79fd8031af9f155ff2e644acec68d7abb3e34ed3d3bf2ef7fd127a4618781c94e71c9e32ba6d18f1cbfa5564bfbed99292f82d6872eca69f4f25b189f323c71655a2c42c2bf7ac1082556351cf474acb3c435e3198438dbb91b76c81533a453a9808153460285c3d17373ed038d9686c5a1a5a0ba1c548601f001177a73ddbb3adaf4fd70e976d7fde2f85f8f89d7e15bdfdc"}]}, @NL80211_ATTR_IE={0x104, 0x2a, [@challenge={0x10, 0x1, 0x4f}, @challenge={0x10, 0x1, 0x58}, @measure_req={0x26, 0xf0, {0x3, 0x40, 0x57, "333930d75af624acb47316d8b9639567b286fd5e269d8851d4397cd3baed3df54ce6e15623eac451225080a229cfda2bccc79b339de1f3ee4c6dd319caebb9679de471b8535ac44760ee999aca6b15bcd0fe7d30d74727c63064ac002a5762856f2b8444675a9ffea18344e7b9795e37e43a9503692dd0a2a69bc2652c9008b329ec27a2afc02164c475eab64b76a9a26fb3e79bffc434eb0e00e9bf523924a1eeb0a2145260e5599a0bc49a8ac4d7b5716e592ded2941cb705399dabab283748a1751b5edceafd5971bb76f26263abeee6f710c82831f25ed46fda95b72bc888ffd906bdca9fb2f6d0283fe6a"}}, @mesh_id={0x72, 0x6}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r6) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x18, r9, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000fc0), 0x800, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r6) sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x44, r11, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="39af8e0cecce"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2ddc63001823"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 11:12:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x600000, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000200)={{0x20, 0x101}, {0x0, 0xffffffff}, 0x6, 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1c00000}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}]}, 0x44}}, 0x20000000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000400)=0x719, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc0040}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x659}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000000000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40015}, 0x810) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2a}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40030}, 0x4000800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x11) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400080, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x88, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6a, 0x5b, "1a6a996462853426bcbf68458bdcaeddffa941f69fc30a3b0424e5156f87debfec23e0bcd2943b058e2d6718eb1d65081d366ccc6bd61eb476462f43900fcbe6a1d24442c6ccb5dbde4e52d9247148f15bdda4c43f413a616d1d9e674f10bc0a2a85d6006e63"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xba}]}, 0x88}, 0x1, 0x0, 0x0, 0x10000}, 0x20000800) 11:12:15 executing program 2: setitimer(0x2, &(0x7f0000000000)={{0x0, 0xea60}, {0x77359400}}, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0xa) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000080)=""/92, &(0x7f0000000100)=0x5c) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000140), 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000001c0)=0x6, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000200)=0x8, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040001}, 0x24000054) syz_io_uring_setup(0x816, &(0x7f00000003c0)={0x0, 0x286, 0x4, 0x0, 0x313}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f00000004c0)=0x1, 0x0, 0x4) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x401, 0x5}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000640)=0x1, 0x0, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r3) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x1) socketpair(0x2, 0x80000, 0xffffffff, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xcac}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x480c5}, 0x44) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x100, 0x70bd27, 0xacb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) [ 85.387507] audit: type=1400 audit(1731582735.371:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:12:15 executing program 5: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x44010}, 0x4000840) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1a}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x44804) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8d30374de4593b38}, 0x5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000a40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000580)={0x480, r2, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x2f1, 0x2a, [@perr={0x84, 0x102, {0x0, 0x10, [@ext={{}, @broadcast, 0xffff, @device_a, 0xc}, @ext={{}, @device_b, 0x5, @device_a, 0x36}, @not_ext={{}, @broadcast, 0x9, "", 0x25}, @not_ext={{}, @device_a, 0x800, "", 0x2d}, @ext={{}, @device_a, 0xfff, @device_b, 0x4}, @not_ext={{}, @device_a, 0x9, "", 0xa}, @not_ext={{}, @broadcast, 0x0, "", 0x3a}, @ext={{}, @device_b, 0x719, @device_b, 0xa}, @not_ext={{}, @device_a, 0x1545, "", 0x22}, @ext={{}, @device_b, 0x6, @device_b, 0x37}, @ext={{}, @device_a, 0x400, @device_b, 0x1c}, @not_ext={{}, @broadcast, 0x101, "", 0x1a}, @not_ext={{}, @device_b, 0x22, "", 0x32}, @not_ext={{}, @device_b, 0x3, "", 0x24}, @ext={{}, @device_b, 0x8001, @broadcast, 0x38}, @ext={{}, @device_b, 0x8001, @device_b, 0x16}]}}, @cf={0x4, 0x6, {0x80, 0x2, 0x1000, 0xfffb}}, @channel_switch={0x25, 0x3, {0x0, 0x74, 0x8}}, @dsss={0x3, 0x1, 0x28}, @perr={0x84, 0x107, {0x9, 0xf, [@ext={{}, @device_b, 0x1, @device_a, 0x3f}, @not_ext={{}, @device_b, 0x101, "", 0x3d}, @ext={{}, @broadcast, 0x6, @broadcast, 0xe}, @ext={{}, @broadcast, 0x4, @broadcast}, @not_ext={{}, @device_a, 0x8, "", 0x26}, @ext={{}, @broadcast, 0x3, @broadcast, 0x25}, @ext={{}, @broadcast, 0x7, @device_b, 0x5}, @not_ext={{}, @device_a, 0x3, "", 0x19}, @ext={{}, @device_b, 0x7, @device_a, 0x40}, @ext={{}, @device_b, 0x4, @device_a, 0x1c}, @ext={{}, @broadcast, 0x5, @device_b, 0x27}, @not_ext={{}, @device_a, 0x8000, "", 0x36}, @ext={{}, @device_a, 0x5, @device_b, 0x3b}, @ext={{}, @device_b, 0x8, @device_b, 0x6}, @ext={{}, @broadcast, 0x81, @device_a, 0x2d}]}}, @ibss={0x6, 0x2, 0x522}, @tim={0x5, 0xca, {0x20, 0xcf, 0x2, "df5c0c690b04c5aafd8c70328cfcccaccbfbdd43615b80d8d0d5e00875fe98301b32b6d2e54d791912ddfacaf6c9e2c985f3e59b6ead9d549d54a0afe5dd16544e00128c5cdf947e7c716bb076ad825152aed56b45c60f3ba7263f2ef8ee2ea8a3cb219edb9d5ec87b3187c93be7aaad2da896a41e0745a5489f02dcfe69059f7b0479b9ded89bdb46e70e587340c0c0b1631db7a15110b8500acca9f73414afbda2077be078b352ee7eec2a6dda9d166ef3450374057d6edd430b426fe131f778ad319c6cad33"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x30}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_IE={0x130, 0x2a, [@random_vendor={0xdd, 0x54, "ff3f9c909f8856095dd458a62a5d3d8fafcb484870bc6085a6537ec034e62ed4d5e50a67c066d72280014c6e4fd16a9844fb64cd1a6452f35b1523676d8bb37dd1130a2e1f49d3c8abc66073cad2fc77adc33774"}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @fast_bss_trans={0x37, 0xba, {0x9, 0x6, "5c72016985411db2f9a691181b42cea1", "7f61db9a5c2f2aa83aca286b33132d72fae268c83940a20baeef6fbd4ae27396", "6b893873cc3fdb21615c8cb99965044d2b98c8c2c7c346770778af3800ffcf95", [{0x4, 0x7, "5fc39284e63df6"}, {0x3, 0xe, "31f075435102609f6def9bbfcd3f"}, {0x2, 0x8, "bbbee18565e35f58"}, {0x3, 0xd, "42af83ffb3552d283d24d1d239"}, {0x1, 0x23, "178bcac354ca20819d12c8fe6a7e00d9db2195ad5e431f10b1284416c57bd3d999cdbb"}, {0x3, 0xf, "0b6d41d357f4578364a55092ba24d3"}]}}, @peer_mgmt={0x75, 0x8, {0x1, 0xffff, @val=0x401, @val=0x2b, @void}}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0x5}}, @mesh_id={0x72, 0x6}]}]}, 0x480}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x90, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x24008844) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r2, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xbc, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x80}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40004}, 0x48000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001000), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x3c, r5, 0x308, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1010}, 0x83) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000001100)={{0x2, 0x3}, {0x8, 0x4}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x10c, r2, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1f}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x40}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0xb8, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb3, 0x3, "15c6d8015af435c0491bded5c5ac98ce2e75cf6e97a2acb2eba107eaa0063465d33b0205a3ceadcb9a54f1a6990e562eeb62ecacd0b1e53e7428a67b40f2dc8159bd1b90bc13b3f569eaec054beb618525a8128516315e22f6aa0fda6e4ceb74876e72a404996d2fad1f4e4c3d8fb8573e428b40fc8ef040458ead44f8c448d728fc464d8823f6396b772feaae6272ae5ff1198a9093db22f773f313b789f1b7af0bedb1ffdbcc9bed48fda01ef5b3"}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20008005}, 0x40001) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000001340)={0x17}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x2c, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40080) 11:12:15 executing program 6: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x810, 0xffffffffffffffff, 0x8000000) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x80000001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0xf) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r9 = syz_io_uring_complete(r0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0xa000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r10, {r5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r11, {r2}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x2010, r12, 0x10000000) r13 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="9ec04c119713d3f51421a12b3a687054c8c42eb3d0f65fb99e2d5729fd2332c3a82f32e88ebf509fede1f6c994f140db6d32088dd517f8ff60abfe2394c824a5f92d86966c1f6b34b984503c92e8f3587cf3bd162df7133c92a157275ea90c46e768fe551fa6b5b192cf1ba8cc1cfbb7faaa7803e036dc", 0x77, 0xfffffffffffffffc) keyctl$reject(0x13, r13, 0x7, 0x8, 0xfffffffffffffff8) r14 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)="e97b217d011995332903e817419159d46d2d47eda7d8752a557f5911d32b52fb23960cb99987a59be2b9e46fd9f7017b4e21a68a", 0x34, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000640)={r14, r13}, &(0x7f0000000680)=""/160, 0xa0, &(0x7f0000000840)={&(0x7f0000000740)={'poly1305\x00'}, &(0x7f0000000780)="427255bc0ee3c4a23ddf33e7c9a5685c712762ea14661a06db3134e14262cd047d684bc1f850e0692e4f04e5db58544f475461bc5bd38081352cc7b3b1b2b4416f599f28b694b31b036697a0c491d606b4dc6554997f560c5e971edf745e0fb028d9dcf045b05f48fc23fa3440607dada8b25a3d64600e1c089e0e297bbf008c0d09d55bdc9935699b37575a7aa9c5cea7c80ac1da9f43504fbf6e9b75423ca884289b79", 0xa4}) 11:12:15 executing program 7: shmat(0x0, &(0x7f0000ff1000/0xf000)=nil, 0x3000) shmget(0x0, 0xe000, 0x3c000c22, &(0x7f0000ff2000/0xe000)=nil) r0 = shmget(0x3, 0x4000, 0xa0, &(0x7f0000ffc000/0x4000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x80010, 0xffffffffffffffff, 0x10000000) r1 = shmat(r0, &(0x7f0000ff2000/0x4000)=nil, 0x2000) shmdt(r1) r2 = syz_io_uring_setup(0x4b78, &(0x7f0000000000)={0x0, 0x9280, 0x0, 0x0, 0x54}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x110, 0xffffffffffffffff, 0x10000000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) r6 = mq_open(&(0x7f0000000140)='\x00', 0x2, 0x121, &(0x7f0000000180)={0x9, 0x7, 0x2, 0x6}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r5, r6], 0x2, 0x0, 0x1}, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000280)={{0x0, 0x1, 0x6, 0x1, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f0000000340)=""/99) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x2000004, 0x100010, r7, 0x10000000) syz_io_uring_submit(r3, r8, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x6, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x2040}}, 0x7) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r7, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r9, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4daa12d7aa5e"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x4008010) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) [ 86.672912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.674287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.675471] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.679891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.685932] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.687010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.735467] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.742509] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.746400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.766704] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.775780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.777511] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.800543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.803254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.804565] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.807570] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.809246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.810287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.864944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.869312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.881729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.888873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.892486] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.897446] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.922896] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.926769] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.933796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.936255] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.937285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.940135] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.950267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.955355] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.959331] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.963958] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.965664] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.969239] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 86.971366] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.975990] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.980754] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.982187] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.983834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.996806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.002444] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.004295] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.009176] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.027180] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.057330] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.059301] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.755244] Bluetooth: hci0: command tx timeout [ 88.818247] Bluetooth: hci1: command tx timeout [ 88.882319] Bluetooth: hci2: command tx timeout [ 89.010151] Bluetooth: hci3: command tx timeout [ 89.074165] Bluetooth: hci5: command tx timeout [ 89.074228] Bluetooth: hci4: command tx timeout [ 89.075731] Bluetooth: hci7: command tx timeout [ 89.075942] Bluetooth: hci6: command tx timeout [ 90.803252] Bluetooth: hci0: command tx timeout [ 90.866101] Bluetooth: hci1: command tx timeout [ 90.931142] Bluetooth: hci2: command tx timeout [ 91.059306] Bluetooth: hci3: command tx timeout [ 91.122493] Bluetooth: hci6: command tx timeout [ 91.123200] Bluetooth: hci4: command tx timeout [ 91.123641] Bluetooth: hci7: command tx timeout [ 91.124195] Bluetooth: hci5: command tx timeout [ 92.850456] Bluetooth: hci0: command tx timeout [ 92.914468] Bluetooth: hci1: command tx timeout [ 92.978660] Bluetooth: hci2: command tx timeout [ 93.106166] Bluetooth: hci3: command tx timeout [ 93.170202] Bluetooth: hci5: command tx timeout [ 93.170659] Bluetooth: hci6: command tx timeout [ 93.171432] Bluetooth: hci4: command tx timeout [ 93.171868] Bluetooth: hci7: command tx timeout [ 94.898121] Bluetooth: hci0: command tx timeout [ 94.962170] Bluetooth: hci1: command tx timeout [ 95.026139] Bluetooth: hci2: command tx timeout [ 95.154129] Bluetooth: hci3: command tx timeout [ 95.220085] Bluetooth: hci7: command tx timeout [ 95.220613] Bluetooth: hci4: command tx timeout [ 95.221152] Bluetooth: hci6: command tx timeout [ 95.221177] Bluetooth: hci5: command tx timeout [ 149.507444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.509210] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.511055] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.513391] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.514928] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.515950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.572918] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.581282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.582381] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.599269] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.604315] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.611601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.707656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.710353] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.711631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.717155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.719573] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.719845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.721832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.727599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.737443] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.738474] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.742943] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.745145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.750697] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.765635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.768301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.775406] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.780617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.787044] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.790342] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.796131] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 149.798410] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.799553] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.800428] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 149.804337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.805762] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 149.808329] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.809446] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.811253] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 149.812934] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.845333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.849505] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.851378] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.855580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.876736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.891630] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.896178] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.539326] Bluetooth: hci0: command tx timeout [ 151.667253] Bluetooth: hci1: command tx timeout [ 151.794166] Bluetooth: hci3: command tx timeout [ 151.795294] Bluetooth: hci2: command tx timeout [ 151.859254] Bluetooth: hci5: command tx timeout [ 151.861377] Bluetooth: hci7: command tx timeout [ 151.923327] Bluetooth: hci4: command tx timeout [ 151.987376] Bluetooth: hci6: command tx timeout [ 153.587119] Bluetooth: hci0: command tx timeout [ 153.717067] Bluetooth: hci1: command tx timeout [ 153.842164] Bluetooth: hci2: command tx timeout [ 153.842722] Bluetooth: hci3: command tx timeout [ 153.906287] Bluetooth: hci5: command tx timeout [ 153.906817] Bluetooth: hci7: command tx timeout [ 153.970251] Bluetooth: hci4: command tx timeout [ 154.034399] Bluetooth: hci6: command tx timeout [ 155.635695] Bluetooth: hci0: command tx timeout [ 155.764050] Bluetooth: hci1: command tx timeout [ 155.890298] Bluetooth: hci2: command tx timeout [ 155.890799] Bluetooth: hci3: command tx timeout [ 155.954163] Bluetooth: hci5: command tx timeout [ 155.954647] Bluetooth: hci7: command tx timeout [ 156.019864] Bluetooth: hci4: command tx timeout [ 156.083102] Bluetooth: hci6: command tx timeout [ 157.682238] Bluetooth: hci0: command tx timeout [ 157.811077] Bluetooth: hci1: command tx timeout [ 157.939206] Bluetooth: hci3: command tx timeout [ 157.939710] Bluetooth: hci2: command tx timeout [ 158.003220] Bluetooth: hci7: command tx timeout [ 158.003712] Bluetooth: hci5: command tx timeout [ 158.067878] Bluetooth: hci4: command tx timeout [ 158.132561] Bluetooth: hci6: command tx timeout [ 211.584467] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.587343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.589685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.593209] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.595756] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.598335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.713650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.716797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.719609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.724713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.729501] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.732610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.777735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.788319] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.791187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.795247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.797783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.799843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.879922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.884856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.886082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.901111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.902574] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.904179] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.032858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.036904] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.038747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.046100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.055149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.061225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.062427] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.096025] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.097335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.098126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.098970] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.105332] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.110282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.118303] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.122266] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.124754] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.126408] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.127865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.142225] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.183433] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.189459] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.227805] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.275532] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.277623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.618353] Bluetooth: hci0: command tx timeout [ 213.811119] Bluetooth: hci1: command tx timeout [ 213.875357] Bluetooth: hci2: command tx timeout [ 214.006325] Bluetooth: hci3: command tx timeout [ 214.198068] Bluetooth: hci4: command tx timeout [ 214.199059] Bluetooth: hci5: command tx timeout [ 214.265070] Bluetooth: hci6: command tx timeout [ 214.324334] Bluetooth: hci7: command tx timeout [ 215.666149] Bluetooth: hci0: command tx timeout [ 215.859081] Bluetooth: hci1: command tx timeout [ 215.922182] Bluetooth: hci2: command tx timeout [ 216.051124] Bluetooth: hci3: command tx timeout [ 216.243149] Bluetooth: hci5: command tx timeout [ 216.243265] Bluetooth: hci4: command tx timeout [ 216.306149] Bluetooth: hci6: command tx timeout [ 216.371943] Bluetooth: hci7: command tx timeout [ 217.715068] Bluetooth: hci0: command tx timeout [ 217.908196] Bluetooth: hci1: command tx timeout [ 217.970129] Bluetooth: hci2: command tx timeout [ 218.098092] Bluetooth: hci3: command tx timeout [ 218.290079] Bluetooth: hci4: command tx timeout [ 218.290180] Bluetooth: hci5: command tx timeout [ 218.355069] Bluetooth: hci6: command tx timeout [ 218.419088] Bluetooth: hci7: command tx timeout [ 219.763056] Bluetooth: hci0: command tx timeout [ 219.954176] Bluetooth: hci1: command tx timeout [ 220.019075] Bluetooth: hci2: command tx timeout [ 220.146222] Bluetooth: hci3: command tx timeout [ 220.338129] Bluetooth: hci4: command tx timeout [ 220.339453] Bluetooth: hci5: command tx timeout [ 220.403295] Bluetooth: hci6: command tx timeout [ 220.466192] Bluetooth: hci7: command tx timeout [ 274.065370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.068322] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.070891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.072877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.078374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.083069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.084547] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.087469] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.090412] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.094160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.097626] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.106667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.241659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.245877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.247172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.256182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.259315] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.261697] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.298783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.327293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.331274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.365681] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.372679] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.373894] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.380766] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.389621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.400379] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.423012] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.458564] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.465214] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.465379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.471862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.480420] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.508382] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.513321] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.534768] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.536801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.540663] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.544284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.550354] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.554332] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.559969] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.563173] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.578224] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.584642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.618103] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.639950] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.653158] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.146169] Bluetooth: hci1: command tx timeout [ 276.146215] Bluetooth: hci0: command tx timeout [ 276.338090] Bluetooth: hci2: command tx timeout [ 276.402099] Bluetooth: hci3: command tx timeout [ 276.659143] Bluetooth: hci4: command tx timeout [ 276.661064] Bluetooth: hci6: command tx timeout [ 276.661100] Bluetooth: hci5: command tx timeout [ 276.723415] Bluetooth: hci7: command tx timeout [ 278.195149] Bluetooth: hci1: command tx timeout [ 278.196831] Bluetooth: hci0: command tx timeout [ 278.386105] Bluetooth: hci2: command tx timeout [ 278.450101] Bluetooth: hci3: command tx timeout [ 278.706103] Bluetooth: hci6: command tx timeout [ 278.707433] Bluetooth: hci4: command tx timeout [ 278.707466] Bluetooth: hci5: command tx timeout [ 278.771094] Bluetooth: hci7: command tx timeout [ 280.244085] Bluetooth: hci1: command tx timeout [ 280.245888] Bluetooth: hci0: command tx timeout [ 280.449020] Bluetooth: hci2: command tx timeout [ 280.499118] Bluetooth: hci3: command tx timeout [ 280.756642] Bluetooth: hci5: command tx timeout [ 280.756682] Bluetooth: hci6: command tx timeout [ 280.757404] Bluetooth: hci4: command tx timeout [ 280.818414] Bluetooth: hci7: command tx timeout [ 282.290303] Bluetooth: hci0: command tx timeout [ 282.291813] Bluetooth: hci1: command tx timeout [ 282.482214] Bluetooth: hci2: command tx timeout [ 282.547156] Bluetooth: hci3: command tx timeout [ 282.802160] Bluetooth: hci4: command tx timeout [ 282.803757] Bluetooth: hci5: command tx timeout [ 282.803794] Bluetooth: hci6: command tx timeout [ 282.867051] Bluetooth: hci7: command tx timeout [ 301.583311] modprobe (11448) used greatest stack depth: 23360 bytes left [ 336.401916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.406440] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.407917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.418753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.420506] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.421556] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.573147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.575705] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.577443] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.583523] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.585276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.587491] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.588818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.594845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.596716] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 336.596816] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.598652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.603449] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.710459] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.716259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.718155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.740255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.744200] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.750508] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.766913] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.775211] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.776160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.777234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.778218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.782851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.790191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.796238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.797155] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.799317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.803723] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 336.807412] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.817657] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.832775] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 336.842521] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.851100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.851829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 336.871795] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 336.876277] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.886514] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 336.887307] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 336.894410] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 336.898213] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 336.907663] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.483060] Bluetooth: hci0: command tx timeout [ 338.675078] Bluetooth: hci2: command tx timeout [ 338.677200] Bluetooth: hci1: command tx timeout [ 338.866114] Bluetooth: hci4: command tx timeout [ 338.868063] Bluetooth: hci3: command tx timeout [ 338.933000] Bluetooth: hci5: command tx timeout [ 338.994305] Bluetooth: hci6: command tx timeout [ 338.994936] Bluetooth: hci7: command tx timeout [ 340.530211] Bluetooth: hci0: command tx timeout [ 340.722082] Bluetooth: hci2: command tx timeout [ 340.722596] Bluetooth: hci1: command tx timeout [ 340.914053] Bluetooth: hci4: command tx timeout [ 340.914566] Bluetooth: hci3: command tx timeout [ 340.978453] Bluetooth: hci5: command tx timeout [ 341.042396] Bluetooth: hci7: command tx timeout [ 341.042881] Bluetooth: hci6: command tx timeout [ 342.578051] Bluetooth: hci0: command tx timeout [ 342.771013] Bluetooth: hci1: command tx timeout [ 342.771530] Bluetooth: hci2: command tx timeout [ 342.962245] Bluetooth: hci3: command tx timeout [ 342.962423] Bluetooth: hci4: command tx timeout [ 343.026041] Bluetooth: hci5: command tx timeout [ 343.090211] Bluetooth: hci7: command tx timeout [ 343.090767] Bluetooth: hci6: command tx timeout [ 344.626194] Bluetooth: hci0: command tx timeout [ 344.819113] Bluetooth: hci1: command tx timeout [ 344.819233] Bluetooth: hci2: command tx timeout [ 345.010471] Bluetooth: hci4: command tx timeout [ 345.010509] Bluetooth: hci3: command tx timeout [ 345.078341] Bluetooth: hci5: command tx timeout [ 345.138137] Bluetooth: hci6: command tx timeout [ 345.138617] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 11:17:25 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff811f395f RCX=0000000000000001 RDX=1ffff110067b4e1b RSI=ffff888033da7ed0 RDI=ffffffff811f395f RBP=ffffffff811f395f RSP=ffff888033da7040 R8 =0000000000000001 R9 =ffff888033da70c0 R10=000000000003c001 R11=0000000000026250 R12=ffff888033da7148 R13=0000000000000000 R14=ffff888023751b80 R15=0000000000000009 RIP=ffffffff8121f1e3 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d2a6e44080 CR3=0000000022142000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888018f57818 RBX=ffff888018f57b90 RCX=ffffea000063d5c0 RDX=0000000000000000 RSI=ffff888008c4f780 RDI=ffffffff8485ba2c RBP=ffff888008c4f780 RSP=ffff888015827c30 R8 =0000000000000001 R9 =fffffbfff0fdc5e9 R10=ffffffff87ee2f4f R11=00000000ffffffff R12=0000000000000000 R13=ffff888015827c68 R14=ffff888009a18940 R15=ffff888009a18940 RIP=ffffffff818bc278 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2edba3b540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe0967e1310 CR3=000000002e5c4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000