Warning: Permanently added '[localhost]:65478' (ECDSA) to the list of known hosts. 2024/11/19 13:39:40 fuzzer started 2024/11/19 13:39:41 dialing manager at localhost:42621 syzkaller login: [ 146.858979] cgroup: Unknown subsys name 'net' [ 146.954975] cgroup: Unknown subsys name 'cpuset' [ 146.967977] cgroup: Unknown subsys name 'rlimit' 2024/11/19 13:39:57 syscalls: 203 2024/11/19 13:39:57 code coverage: enabled 2024/11/19 13:39:57 comparison tracing: enabled 2024/11/19 13:39:57 extra coverage: enabled 2024/11/19 13:39:57 setuid sandbox: enabled 2024/11/19 13:39:57 namespace sandbox: enabled 2024/11/19 13:39:57 Android sandbox: enabled 2024/11/19 13:39:57 fault injection: enabled 2024/11/19 13:39:57 leak checking: enabled 2024/11/19 13:39:57 net packet injection: enabled 2024/11/19 13:39:57 net device setup: enabled 2024/11/19 13:39:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/19 13:39:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/19 13:39:57 USB emulation: enabled 2024/11/19 13:39:57 hci packet injection: enabled 2024/11/19 13:39:57 wifi device emulation: enabled 2024/11/19 13:39:57 802.15.4 emulation: enabled 2024/11/19 13:39:57 fetching corpus: 0, signal 0/0 (executing program) 2024/11/19 13:39:59 starting 8 fuzzer processes 13:39:59 executing program 0: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000080)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8890}, 0x24040810) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xba, 0x31}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x44) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x0, 0x120, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x7c}}, 0x4811) r3 = fsmount(0xffffffffffffffff, 0x0, 0xe) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x128, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7c}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x1f, 0xc5, "0a32ccb5c5e619978af553380bd7ca6ffe715daf2925ffcd59c05d"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x400}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "89d64478e29845a0b3405b4dbade79c4e031fbee77c10483ff684f1e3ab01472f4d6546a05baad109ee86e1314ca85e686881b4a1da0d625398a21320b64919bcfa1786d9cc64943d352fbe3d0e8798984d99df0e37e181529e780e3779ae1e12733f621d4a9dd900a0833e08d0ee21872172b0e2bb69a20247313258b142090f84b0250854a640ce43f2e55103f095fccb808f53825a1503396a45db72ff2c3d0387a2556d2962118a5fa2a571fe1db6d02bfaf37173a2e551a12dd20312c04ed43e7964d0d5b3b2285f22d27466693342c2b6ba348"}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x80, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x80}, 0x1, 0x0, 0x0, 0x40400c0}, 0x841) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000a80)={&(0x7f0000000900), 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x94, r5, 0x21, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x7b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xd, 0x34, @random="34a30d00ae4de4f8fb"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d71d71b5b325"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x1d, 0x2a, [@random={0x3, 0x17, "831997d9c2582bb91e04b428a4f2d92d2b1cdb0a6f72de"}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004040}, 0x2000c0c1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20044800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r8, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x54, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xae0}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x38}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x804) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r5, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x66}}}}, ["", "", "", ""]}, 0x28}}, 0x20004000) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r8, 0x42d, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0x8001) 13:39:59 executing program 1: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000b, 0x10, 0xffffffffffffffff, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x11, 0xffffffffffffffff, 0x10000000) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf, 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000040)={0x3, 0x3, 0x9, 0x8001, 0x5, 0xd2}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000080)=0x3) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x3f) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r1, 0x4225e2e8cd172a99, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "111401d7da"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4d5a84bdd1"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c81a6ecc0e24bf70bac23f9d6b"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x764d9e10, 0x1e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x30004015) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000540)) [ 164.524064] audit: type=1400 audit(1732023599.294:7): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:39:59 executing program 4: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='}&*[$/*@+#&\\&!-\x00', 0x0, 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="314fcfe48373f21917dafde7a01c2cd1", 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6f650b7789304181}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x10001, 0x34e8}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}}, 0x40000d0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x8, 0x4000000, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "41e89258d6d7833a103c3cb407f686bc"}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r2 = fsopen(&(0x7f00000003c0)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000400)='\x00', 0x0, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x344000, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000480)='@(\x1e[\x00', &(0x7f00000004c0)="b82e53d4f30eae02e80b319a9fa1ce8e7fe5d863b1922317a450a5d0ddf9a71b53d9e84d512d58045b9a7d010625a9f597258df7994c9510e996802861fb5b8bdbc287aa795e01107e3c3a8feffa1fa26fb4cfe8ecde18121fd7", 0x5a) r4 = pkey_alloc(0x0, 0x1) pkey_free(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r6, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x66}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4081}, 0x4000000) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, r3, 0x2000000000) 13:39:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x9c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffc01}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfff3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x34, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x880) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x260008b0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4800) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4048004) r4 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, r4) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540)="a461ee", 0x3) socketpair(0xf, 0x2, 0xa1b, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000005c0)="2a35732f982f2ae0089ad64505ad06af", 0x10) r6 = accept4(r5, 0x0, &(0x7f0000000600), 0x1800) getsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000640), &(0x7f0000000680)=0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004800}, 0x200080c4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000840)=0x3, 0x4) 13:39:59 executing program 2: ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x1}) r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x800) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x2000}, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)=0x8fe) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0), 0x15, 0x0, &(0x7f0000000300)="b9ef9fb7ea17ac6c02cc5a9a71627ac4936c71f236"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000400)={0x1}) r4 = accept4(r1, &(0x7f0000000440)=@l2={0x1f, 0x0, @none}, &(0x7f00000004c0)=0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000500)={0x3}, 0x4) socketpair(0x23, 0x4, 0x5, &(0x7f0000000580)={0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r5) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000005c0)='\x00', &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c) r6 = accept4$packet(r5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14, 0x80c00) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000006c0)={0x0, 0x1, 0x6, @local}, 0x10) 13:39:59 executing program 5: r0 = syz_io_uring_setup(0x4327, &(0x7f0000000000)={0x0, 0x5717, 0x20, 0x3, 0x1a7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x7def, &(0x7f0000000100)={0x0, 0x1fc2, 0x10, 0x1, 0x14, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x1010, r0, 0x10000000) r2 = syz_io_uring_setup(0x1457, &(0x7f0000000200)={0x0, 0xb5b, 0x20, 0x0, 0x7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={0x480, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x33}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x60}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}, @NL80211_ATTR_IE={0x213, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x87, 0x1, @device_a, 0x3, @device_b, 0x3, 0x8bb98000, @device_a, 0x6}}, @ibss={0x6, 0x2, 0x1ff}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @tim={0x5, 0x43, {0x5a, 0x10, 0x9, "0fab3773aba2ddc98e7e5dcdd6f447cf8417b5f22e5c27368ad16ce366b54ee4644262eb53b6070bf485d10ce01281510dc0a02c3992139fe61dba8ace25e91c"}}, @perr={0x84, 0x9b, {0x20, 0x9, [@ext={{}, @device_a, 0x3, @device_b, 0x4}, @ext={{}, @device_b, 0xfffffffc, @broadcast, 0x2f}, @not_ext={{}, @device_b, 0x24, "", 0x18}, @ext={{}, @broadcast, 0x0, @device_b, 0x1a}, @ext={{}, @broadcast, 0x2, @device_a, 0x23}, @not_ext={{}, @device_b, 0x109, "", 0x23}, @not_ext={{}, @device_b, 0xac, "", 0x2b}, @ext={{}, @device_a, 0x8, @device_a, 0x2c}, @ext={{}, @device_b, 0x40, @broadcast, 0x100}]}}, @dsss={0x3, 0x1, 0xad}, @measure_req={0x26, 0xe9, {0x8, 0x1, 0x4, "191ee32f1cf48f832c7de47359c5bfcaf293e9d1e9338c12c83b6cda0ea32435fe90f42c3de0b29628d7c58d010458b5a6fdf9d835f323060554848c613b89197fb3948582ddb3f09339f14a57942ed68f091a25384b10c22d951380e93db257e9da37c5e7b0373b9f27b827100960ed6a488541ba1d0d0cb894ecbb52cde945c209cba9b17c44c0104636488d3a40c300e86ba74d8193aa4e917d3b09860d84f21f8248b0b13479292725d9c57e0afeade27491915a70ca7f15fd81650c01ecd9c4e17e2f382eacc57c09f548fa46cf54dce76e05d83846782bfaf61f8ec48de0792a226a87"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0xd3}]}, @NL80211_ATTR_IE={0x21d, 0x2a, [@fast_bss_trans={0x37, 0xaa, {0x0, 0x6, "cd35b471ffeea77a666156946354e68d", "196ff3d0aa869781c13f29c87071248e80d799163c88d35b661231f3f69c66f3", "2b14809aefedd19626c566b8bb77efbf7bb152fbbca5ba7492715f4ddc1705a5", [{0x2, 0xd, "206e6409bf22c60640d647a80e"}, {0x1, 0x5, "3840ebbed7"}, {0x4, 0x8, "3f725ad9decb9416"}, {0x3, 0x15, "daa1d927e0ba733acc379ea496dc8ccc8cc670679c"}, {0x1, 0x3, "4efd0f"}, {0x3, 0x1a, "40cdf9fd88d42b4829165fc6edb2256fb831954165a51f6919a0"}]}}, @fast_bss_trans={0x37, 0x7f, {0x0, 0x4, "b5aabd269270c9f8847dc85671c8bdc9", "358eb8993ecca9edb76a065cfc163b4d6b4de74eba26b51f46fd0948292d0938", "e8be65bb638e557d0948e32baf5a56eb69e1572f9c997c9f92443e4592ecd795", [{0x3, 0xe, "008b65d1b1197d7b5f10e4ca9ee9"}, {0x3, 0xa, "159ddc324f70cb64117c"}, {0x4, 0x1, "db"}, {0x4, 0xc, "ee6cc4a99317e21bebdceee6"}]}}, @tim={0x5, 0xc3, {0x20, 0xf, 0x7f, "72fbca0409776931fae0ac85dcfacb3aaa5c75093f1e5942d4a2548e55087e102884997baeeb7a53dd77994c1171e4b92d894bcb721aee52f5c01142327235b5ee79237ba6691f5285473c18459ff36ba1dbdf80c22fb04514b87aa9b9f7f27e97a2834845bb9818034a2b983c746ccd6787c109172726302e667ef35561e4c307ff912374d88cb7edcbed979e02dcb94f7329d6a8b890d4810ed469b0f91e74b8f39d33806989c353e527abe40f1037353d34aaf3eab6419f7b7270bc4ab014"}}, @dsss={0x3, 0x1, 0x99}, @prep={0x83, 0x1f, @not_ext={{}, 0xe9, 0x2, @device_a, 0x10, "", 0x2, 0x400, @device_a, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x480}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000840), 0x204002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r5, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) prctl$PR_SET_TIMERSLACK(0x1d, 0x139) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f00000009c0)={0x0, 0x0, "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", "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"}) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x80, r5, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4008040) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x20, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x48}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x8010) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x28, r5, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001d00)={'wlan1\x00'}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x50, r2, 0x71648000) syz_genetlink_get_family_id$gtp(&(0x7f0000001d40), r3) syz_io_uring_setup(0x4f3c, &(0x7f0000001d80)={0x0, 0xd49d, 0xc, 0x2, 0x24b}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000001e00)=0x0, &(0x7f0000001e40)) syz_io_uring_submit(r6, r1, &(0x7f0000002080)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)=""/193, 0xc1}], 0x1, &(0x7f0000002000)=""/6, 0x6}, 0x0, 0x2002, 0x1, {0x2}}, 0x80000001) 13:39:59 executing program 6: fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='dirsync\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000080)=0xd251a87, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='debugfs\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0xa040, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000001c0)='dirsync\x00', &(0x7f0000000200)='./file0\x00', r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000280)='dirsync\x00', 0x0, r3) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000300)='/dev/bsg\x00', &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000380)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000003c0)=0x7, 0x4) r5 = fspick(r2, &(0x7f0000000400)='./file1\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000440)='#\x00', &(0x7f0000000480)='./file0\x00', r2) accept4(r2, &(0x7f00000004c0)=@pppol2tpv3, &(0x7f0000000540)=0x80, 0x80800) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xffffffff7fffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000600)={0x0, 0x0, 0xffffffffffffffff, 0x9}) 13:39:59 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x402102, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa0, 0x5d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0xc004) socketpair(0x21, 0x2, 0x7, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x68}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4fe9da62}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x91d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe293}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000014) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000340)=0x5) accept4$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0xfffffffffffffffe, 0x800) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000540)={r4, 0x2c}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x5, &(0x7f00000005c0)=[{0x401, 0x4, 0x81, 0x6}, {0x2, 0x80, 0xd5, 0x7ff}, {0x6, 0xb4, 0xff, 0x1}, {0x1, 0x1, 0x0, 0x3}, {0x7, 0x2, 0x68, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000640)={0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000700)={r6, 0x0, r7, 0x1}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r8, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10000, 0x46}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc000041) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r8, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x944f, 0x43}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008110}, 0x4040) [ 165.968677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.975772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.977806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.983326] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.985102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 165.994709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.995696] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.997018] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.998768] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.002415] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.009471] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.011204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.019866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.024930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.028339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 166.029416] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.032345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.034327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.035676] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.037692] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 166.041005] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.041473] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.045057] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 166.046643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.067378] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.070125] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.074227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.077052] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.078987] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.080561] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 166.080584] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.081680] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.087104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.091439] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.094415] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 166.095572] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.134463] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 166.136027] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.141593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.142400] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 166.143735] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 166.144783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.147881] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 166.150084] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 166.153567] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.154544] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 166.158248] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 166.162409] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.033933] Bluetooth: hci0: command tx timeout [ 168.097740] Bluetooth: hci2: command tx timeout [ 168.097955] Bluetooth: hci3: command tx timeout [ 168.099131] Bluetooth: hci1: command tx timeout [ 168.160995] Bluetooth: hci5: command tx timeout [ 168.162019] Bluetooth: hci4: command tx timeout [ 168.224945] Bluetooth: hci6: command tx timeout [ 168.225653] Bluetooth: hci7: command tx timeout [ 170.080956] Bluetooth: hci0: command tx timeout [ 170.144958] Bluetooth: hci2: command tx timeout [ 170.145481] Bluetooth: hci3: command tx timeout [ 170.146177] Bluetooth: hci1: command tx timeout [ 170.209954] Bluetooth: hci4: command tx timeout [ 170.210444] Bluetooth: hci5: command tx timeout [ 170.272959] Bluetooth: hci7: command tx timeout [ 170.273464] Bluetooth: hci6: command tx timeout [ 172.132196] Bluetooth: hci0: command tx timeout [ 172.194405] Bluetooth: hci1: command tx timeout [ 172.194999] Bluetooth: hci3: command tx timeout [ 172.195535] Bluetooth: hci2: command tx timeout [ 172.256968] Bluetooth: hci4: command tx timeout [ 172.257014] Bluetooth: hci5: command tx timeout [ 172.321252] Bluetooth: hci6: command tx timeout [ 172.321370] Bluetooth: hci7: command tx timeout [ 174.177934] Bluetooth: hci0: command tx timeout [ 174.242086] Bluetooth: hci2: command tx timeout [ 174.242560] Bluetooth: hci3: command tx timeout [ 174.243179] Bluetooth: hci1: command tx timeout [ 174.305469] Bluetooth: hci4: command tx timeout [ 174.306070] Bluetooth: hci5: command tx timeout [ 174.369003] Bluetooth: hci6: command tx timeout [ 174.369530] Bluetooth: hci7: command tx timeout [ 226.075510] syz-executor.3 (299) used greatest stack depth: 24080 bytes left [ 228.608863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.609274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.610737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.612866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.619087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.619171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.620103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.621627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.623067] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.627865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.629494] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 228.631989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.632443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.635011] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 228.636155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.645320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.647019] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.649075] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.754241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.763572] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.768033] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.776488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.784089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 228.790936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.904057] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.905210] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.908387] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 228.910365] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 228.914050] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.915588] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.918558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.922397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 228.923772] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 228.925589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.926901] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 228.928895] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.951801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.966365] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.971421] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 228.975086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 228.978302] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 228.983260] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 228.986799] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 228.989388] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 228.994148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.022086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.030044] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.049373] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.689054] Bluetooth: hci2: command tx timeout [ 230.690119] Bluetooth: hci1: command tx timeout [ 230.753142] Bluetooth: hci0: command tx timeout [ 230.947930] Bluetooth: hci5: command tx timeout [ 230.948162] Bluetooth: hci3: command tx timeout [ 231.008907] Bluetooth: hci6: command tx timeout [ 231.072981] Bluetooth: hci7: command tx timeout [ 231.264950] Bluetooth: hci4: command tx timeout [ 232.736957] Bluetooth: hci1: command tx timeout [ 232.738544] Bluetooth: hci2: command tx timeout [ 232.802267] Bluetooth: hci0: command tx timeout [ 232.994357] Bluetooth: hci5: command tx timeout [ 232.994952] Bluetooth: hci3: command tx timeout [ 233.057049] Bluetooth: hci6: command tx timeout [ 233.121300] Bluetooth: hci7: command tx timeout [ 233.313893] Bluetooth: hci4: command tx timeout [ 234.784966] Bluetooth: hci2: command tx timeout [ 234.785090] Bluetooth: hci1: command tx timeout [ 234.848947] Bluetooth: hci0: command tx timeout [ 235.041134] Bluetooth: hci5: command tx timeout [ 235.041954] Bluetooth: hci3: command tx timeout [ 235.104980] Bluetooth: hci6: command tx timeout [ 235.169092] Bluetooth: hci7: command tx timeout [ 235.362072] Bluetooth: hci4: command tx timeout [ 236.833790] Bluetooth: hci2: command tx timeout [ 236.834400] Bluetooth: hci1: command tx timeout [ 236.899944] Bluetooth: hci0: command tx timeout [ 237.089950] Bluetooth: hci3: command tx timeout [ 237.089998] Bluetooth: hci5: command tx timeout [ 237.153892] Bluetooth: hci6: command tx timeout [ 237.220013] Bluetooth: hci7: command tx timeout [ 237.409964] Bluetooth: hci4: command tx timeout [ 290.742412] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.751741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.753164] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.757339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.759183] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 290.764429] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.800523] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.802382] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.805574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.810250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.814088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 290.815531] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.860233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.867701] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.873694] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.904252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.906705] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 290.908125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.946667] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.950021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.951311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.977575] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.996070] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 290.997407] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.029578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.048825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.052748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.071151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.073288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 291.104929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.193965] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.202153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 291.207378] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.216178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.226581] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 291.227476] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 291.231122] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 291.241640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.243791] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 291.245228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.258405] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 291.263118] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 291.264600] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 291.320414] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 291.329495] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 291.369320] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 291.408184] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 291.420026] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.832929] Bluetooth: hci0: command tx timeout [ 292.896932] Bluetooth: hci1: command tx timeout [ 292.961777] Bluetooth: hci2: command tx timeout [ 293.089009] Bluetooth: hci3: command tx timeout [ 293.153918] Bluetooth: hci4: command tx timeout [ 293.353919] Bluetooth: hci7: command tx timeout [ 293.474041] Bluetooth: hci5: command tx timeout [ 293.538004] Bluetooth: hci6: command tx timeout [ 294.880909] Bluetooth: hci0: command tx timeout [ 294.946555] Bluetooth: hci1: command tx timeout [ 295.008922] Bluetooth: hci2: command tx timeout [ 295.136888] Bluetooth: hci3: command tx timeout [ 295.202874] Bluetooth: hci4: command tx timeout [ 295.393914] Bluetooth: hci7: command tx timeout [ 295.521146] Bluetooth: hci5: command tx timeout [ 295.585077] Bluetooth: hci6: command tx timeout [ 296.929880] Bluetooth: hci0: command tx timeout [ 296.992943] Bluetooth: hci1: command tx timeout [ 297.058002] Bluetooth: hci2: command tx timeout [ 297.185126] Bluetooth: hci3: command tx timeout [ 297.249875] Bluetooth: hci4: command tx timeout [ 297.441849] Bluetooth: hci7: command tx timeout [ 297.569890] Bluetooth: hci5: command tx timeout [ 297.632875] Bluetooth: hci6: command tx timeout [ 298.978079] Bluetooth: hci0: command tx timeout [ 299.041886] Bluetooth: hci1: command tx timeout [ 299.105940] Bluetooth: hci2: command tx timeout [ 299.233881] Bluetooth: hci3: command tx timeout [ 299.297982] Bluetooth: hci4: command tx timeout [ 299.490850] Bluetooth: hci7: command tx timeout [ 299.616892] Bluetooth: hci5: command tx timeout [ 299.680937] Bluetooth: hci6: command tx timeout [ 353.267381] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.270971] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.274189] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.277342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.277383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.282033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.287286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.290318] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.291963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.293315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.295656] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.297776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.396066] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.405736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.409316] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.414593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.416369] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 353.418749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.455100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.458167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.459776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.464524] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.467220] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.469093] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 353.483053] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.483141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.486669] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.490492] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.492130] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 353.493187] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 353.531608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.537301] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 353.541197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.550049] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 353.553017] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 353.554142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 353.557139] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 353.557924] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 353.563149] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 353.566390] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.568170] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 353.574766] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 353.576483] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.586608] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 353.592455] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.599200] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 353.616023] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 353.617578] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 355.362055] Bluetooth: hci1: command tx timeout [ 355.363051] Bluetooth: hci0: command tx timeout [ 355.489997] Bluetooth: hci2: command tx timeout [ 355.552930] Bluetooth: hci4: command tx timeout [ 355.553542] Bluetooth: hci3: command tx timeout [ 355.617344] Bluetooth: hci7: command tx timeout [ 355.680908] Bluetooth: hci6: command tx timeout [ 355.681518] Bluetooth: hci5: command tx timeout [ 357.409047] Bluetooth: hci0: command tx timeout [ 357.409581] Bluetooth: hci1: command tx timeout [ 357.536913] Bluetooth: hci2: command tx timeout [ 357.603946] Bluetooth: hci3: command tx timeout [ 357.604466] Bluetooth: hci4: command tx timeout [ 357.664888] Bluetooth: hci7: command tx timeout [ 357.729014] Bluetooth: hci6: command tx timeout [ 357.730379] Bluetooth: hci5: command tx timeout [ 359.456953] Bluetooth: hci1: command tx timeout [ 359.458740] Bluetooth: hci0: command tx timeout [ 359.584869] Bluetooth: hci2: command tx timeout [ 359.648975] Bluetooth: hci3: command tx timeout [ 359.649457] Bluetooth: hci4: command tx timeout [ 359.713022] Bluetooth: hci7: command tx timeout [ 359.776965] Bluetooth: hci6: command tx timeout [ 359.777440] Bluetooth: hci5: command tx timeout [ 361.506630] Bluetooth: hci0: command tx timeout [ 361.507772] Bluetooth: hci1: command tx timeout [ 361.632909] Bluetooth: hci2: command tx timeout [ 361.697016] Bluetooth: hci3: command tx timeout [ 361.698320] Bluetooth: hci4: command tx timeout [ 361.760950] Bluetooth: hci7: command tx timeout [ 361.826104] Bluetooth: hci5: command tx timeout [ 361.826588] Bluetooth: hci6: command tx timeout [ 415.673276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.677200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.678495] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.704622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.713207] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 415.714392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.727885] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.734070] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.739988] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.744317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.747444] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 415.755093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.787991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 415.795181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.799102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 415.808222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 415.811285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 415.814137] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 415.819137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.821051] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 415.825326] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 415.827270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 415.829410] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 415.841554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.858487] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.872375] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.876859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.881616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.883877] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 415.885675] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.906545] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 415.920999] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 415.923274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.925922] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 415.936164] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 415.938889] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 415.953315] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 415.954885] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.965614] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 415.968020] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 415.972200] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 415.976174] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 415.977923] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 415.979210] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 415.981021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 415.994669] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 416.002040] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 416.006070] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 417.761854] Bluetooth: hci0: command tx timeout [ 417.824973] Bluetooth: hci1: command tx timeout [ 417.888914] Bluetooth: hci2: command tx timeout [ 417.889532] Bluetooth: hci3: command tx timeout [ 417.953022] Bluetooth: hci4: command tx timeout [ 418.016901] Bluetooth: hci6: command tx timeout [ 418.017519] Bluetooth: hci5: command tx timeout [ 418.080879] Bluetooth: hci7: command tx timeout [ 419.810848] Bluetooth: hci0: command tx timeout [ 419.872848] Bluetooth: hci1: command tx timeout [ 419.937105] Bluetooth: hci2: command tx timeout [ 419.937615] Bluetooth: hci3: command tx timeout [ 420.001144] Bluetooth: hci4: command tx timeout [ 420.065152] Bluetooth: hci5: command tx timeout [ 420.065657] Bluetooth: hci6: command tx timeout [ 420.128855] Bluetooth: hci7: command tx timeout [ 421.858820] Bluetooth: hci0: command tx timeout [ 421.921036] Bluetooth: hci1: command tx timeout [ 421.984989] Bluetooth: hci3: command tx timeout [ 421.985464] Bluetooth: hci2: command tx timeout [ 422.048876] Bluetooth: hci4: command tx timeout [ 422.113102] Bluetooth: hci5: command tx timeout [ 422.113578] Bluetooth: hci6: command tx timeout [ 422.177241] Bluetooth: hci7: command tx timeout [ 423.906128] Bluetooth: hci0: command tx timeout [ 423.969078] Bluetooth: hci1: command tx timeout [ 424.032891] Bluetooth: hci2: command tx timeout [ 424.034204] Bluetooth: hci3: command tx timeout [ 424.096868] Bluetooth: hci4: command tx timeout [ 424.161830] Bluetooth: hci6: command tx timeout [ 424.163238] Bluetooth: hci5: command tx timeout [ 424.224915] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:45:00 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888036912dc0 RCX=ffffffff816eb0a2 RDX=ffff8880273f8000 RSI=ffffffff8179c850 RDI=0000000000000001 RBP=800000006cf59025 RSP=ffff88802ef2f890 R8 =0000000000000000 R9 =fffff94000367ac8 R10=0000000000000001 R11=00000000e0ccdeeb R12=0000000000000000 R13=ffffea0001b3d640 R14=00007f3b461b8000 R15=ffff88802ef2fce0 RIP=ffffffff81520170 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f187ea9d260 CR3=0000000035852000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888025af8001 RBX=ffff888025af76a8 RCX=0000000000000001 RDX=ffff888025af7601 RSI=ffff888025af76a0 RDI=ffff888025af76b8 RBP=ffff888025af76a0 RSP=ffff888025af75b8 R8 =ffffffff8678c712 R9 =0000000000000000 R10=000000000003c001 R11=00000000000065f3 R12=0000000000000008 R13=ffff888025af0000 R14=ffff888025af76a8 R15=ffff888025af76a8 RIP=ffffffff81149f8d RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563452009080 CR3=0000000036660000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000ff00000000000000 XMM02=00000000000000000000ff0000000000 XMM03=000000ff0000000000000000ff000000 XMM04=0000ff00000000000000ff0000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000