syzkaller login: [ 70.429348] sshd (231) used greatest stack depth: 24200 bytes left Warning: Permanently added '[localhost]:58320' (ECDSA) to the list of known hosts. 2024/12/09 11:33:34 fuzzer started 2024/12/09 11:33:35 dialing manager at localhost:40235 [ 75.183469] cgroup: Unknown subsys name 'net' [ 75.295015] cgroup: Unknown subsys name 'cpuset' [ 75.400040] cgroup: Unknown subsys name 'rlimit' 2024/12/09 11:33:52 syscalls: 240 2024/12/09 11:33:52 code coverage: enabled 2024/12/09 11:33:52 comparison tracing: enabled 2024/12/09 11:33:52 extra coverage: enabled 2024/12/09 11:33:52 setuid sandbox: enabled 2024/12/09 11:33:52 namespace sandbox: enabled 2024/12/09 11:33:52 Android sandbox: enabled 2024/12/09 11:33:52 fault injection: enabled 2024/12/09 11:33:52 leak checking: enabled 2024/12/09 11:33:52 net packet injection: enabled 2024/12/09 11:33:52 net device setup: enabled 2024/12/09 11:33:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/09 11:33:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/09 11:33:52 USB emulation: enabled 2024/12/09 11:33:52 hci packet injection: enabled 2024/12/09 11:33:52 wifi device emulation: enabled 2024/12/09 11:33:52 802.15.4 emulation: enabled 2024/12/09 11:33:52 fetching corpus: 0, signal 0/0 (executing program) 2024/12/09 11:33:54 starting 8 fuzzer processes 11:33:54 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85000) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4102, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x5d}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0x78, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x40, 0x48}}, @chsw_timing={0x68, 0x4, {0x8, 0x7}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x5, 0x28}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast}}, @dsss={0x3, 0x1, 0x7c}, @prep={0x83, 0x1f, @not_ext={{}, 0x0, 0x2, @broadcast, 0x7, "", 0x9, 0x2, @device_b, 0x1d5}}, @ht={0x2d, 0x1a, {0x40, 0x0, 0x2, 0x0, {0xe50a, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x10001, 0x31}}, @gcr_ga={0xbd, 0x6}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xd4}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x68}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x40010) io_uring_setup(0x154e, &(0x7f0000000480)={0x0, 0xfb19, 0x0, 0x0, 0xdc}) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000500)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8400211}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7b}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4048049) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "d7773b7037c76a3e", "5a0303ce7552e298ba7ff5cd10267cd0", "dcf87352", "4cc76e3b1d9465ed"}, 0x28) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000bc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f00000007c0)={0x39c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xdb}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x114, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x0, 0x3f, 0xa000}, {0x2, 0x1f, 0x7f, 0xcc}, {0x60, 0x5, 0x8, 0x8}, {0x8, 0x4, 0x1, 0xc8e5}, {0xffff, 0x1, 0x4, 0xffffffff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r9, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24044000) syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000dc0)=@ccm_128={{0x303}, "9525c3db3e879ed0", "f6419752794c826de6b218dd7c7b3571", "b7076630", "b49d85a94108768d"}, 0x28) 11:33:54 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x45}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7f}]}, 0x38}, 0x1, 0x0, 0x0, 0x40044}, 0x24000000) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc0a2, 0x2}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4004800) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000300)) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x7) write$binfmt_elf64(r3, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x4, 0x40, 0x7ff, 0x2, 0x6, 0x7ff, 0x13, 0x40, 0xba, 0x4, 0x1, 0x38, 0x2, 0x5, 0x4, 0xff01}, [{0x5, 0xd9, 0x1f, 0x8001, 0x8, 0x101, 0x0, 0x100}], "1c701098ba2b5b62f40608d44fc0200a8fa67e695c76d753bb6cd355020c0fc2eabb7c0ed7732382b22981bcbb7ccf54ecc3d80ec4f44cc7b509c7e1074cc58521c6acb9a36e8cbdd0a5ad3d1829e7d98c40c191add9c2ed0197783ec330849c9a6806eca6cde28896c22d305cb7236f04258b5a05914d940efdf5d074b684c7aa6fc27178921bc09deb6dfd4dce345b571b9a8fc7e00b9f2a41bc51bb6bf35e72c55b3f30ff5893e503e82bde822d97c0d51be42091e1fa1349b9ec", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa34) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffd}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfae}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffd}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0xaf5741b889bd9aa6) r4 = dup2(r3, r1) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='attr/exec\x00') syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r5) r6 = syz_io_uring_setup(0x722b, &(0x7f0000001140)={0x0, 0xbe43, 0x2, 0x2, 0x352, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000011c0), &(0x7f0000001200)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x2c, r2, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7a}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x10) r7 = syz_io_uring_setup(0x4de3, &(0x7f0000001340)={0x0, 0x2ae, 0x10, 0x3, 0x14c, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000013c0), &(0x7f0000001400)) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001440), 0x525a40, 0x0) r9 = epoll_create(0x7) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f00000014c0)=[r6, r8, r9, r1, r6, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8) 11:33:54 executing program 2: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x44ce01, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x34}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80000001}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1000}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x440, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x4, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f00000004c0)=0x1) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0xc0, 0xf7, 0x80, 0x1, 0x0, 0x7f, 0x404, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0x9}, 0x80, 0x80, 0x80, 0x2, 0x4, 0x800, 0x7fff, 0x0, 0x6, 0x0, 0x9}, 0x0, 0xe, r3, 0x3) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x1, 0x4, 0xff, 0x40, 0x0, 0x1f, 0x8110, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x2, @perf_config_ext={0x1, 0x7ff}, 0x60000, 0x5, 0xf, 0x5, 0x0, 0x200, 0x5, 0x0, 0x5, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xb, r0, 0x8) write$binfmt_elf64(r3, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x1, 0x6, 0x7, 0x8001, 0x3, 0x6, 0x2, 0xa5, 0x40, 0x29a, 0xa6, 0xe1, 0x38, 0x2, 0x8, 0x3, 0x1}, [{0x0, 0x1, 0x8b06, 0x6, 0xf0, 0x3, 0xff, 0x2}, {0x5, 0x7f, 0x100, 0xffffffff, 0x8, 0x3, 0x7fff, 0x3f}], "2b509ad95d4ce37a7ab8dce9ede4842470203a70a3df6642b17e120c3f3690da9ddd85585d9aefc07c13d30084f7418e152132e00fc5e7b5cb52ab5076677c5905ad8c4b85ecb2e63b05a36dda39deb03d29f0e7c3f93a72ffe03a503b6ceab7acef62af7d844dc7455ff25ab0dcb778908d65b64e9a741c5f814867e289e18813d17af85ca24eb248ba8784fd137b1bc283a729a2df0e9b839bffaddf3f011e622d81fb7df943d9ac", ['\x00', '\x00']}, 0x359) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x55, 0x43}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x308000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x194, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20000000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffea6c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a1b43bbf36ec78f6f36bf09548"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]]}, 0x194}, 0x1, 0x0, 0x0, 0x40}, 0x80) 11:33:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000000)="c3d06bbbceb742826ecda1953e74015db5c70986ea47c44d071ac704b198fbf9615647c00d2f724b8111bc6753000a7fb07a49ab0d8afa16085f353424f618f4dbc5f4d960065d2a6969baff21a0fb3b7af60d2c6d77e8cf85dd6f7a26e9bd9a6c558a3b1231908a875d4befe912b91823a5cf1a441ad0a95af5d499059986c68f4080863ca774a47faf6c389b78f1fb0907e9b500c0f78b38f03b15958b7b92616f7065f95c7f44227dc9", 0xab) r1 = accept(r0, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008040}, 0x88081) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000240)) r2 = syz_io_uring_setup(0x36e8, &(0x7f0000000280)={0x0, 0x8ce8, 0x8, 0x0, 0x3e1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)={0x401, 0x7fffffff, 0x2, 0x1, 0x7, [{0x400, 0x800000, 0x8, '\x00', 0xc00}, {0xe662, 0x0, 0x0, '\x00', 0x84}, {0xffffffffffffff35, 0x7f, 0x6, '\x00', 0x100}, {0x59, 0x5, 0x401, '\x00', 0x8}, {0x8, 0x6, 0x80000001, '\x00', 0x808}, {0x946, 0x1ff0000000, 0x8, '\x00', 0x1288}, {0x9a, 0x6, 0x4, '\x00', 0x200}]}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4008080) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) write$binfmt_elf64(r2, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0xc7, 0x6, 0x8, 0x5, 0x5, 0x2, 0x6, 0x9, 0x279, 0x40, 0x192, 0x101, 0xd180, 0x38, 0x2, 0x3, 0x800, 0xaf26}, [{0x3, 0xffffff80, 0x1000, 0x100000000, 0x1, 0xffffffff, 0x4767, 0x401}, {0x2, 0x9, 0xe1d, 0x6, 0x6, 0x6, 0x9, 0x1}], "60c8faa0004e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xab6) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000001140), &(0x7f0000001180)='./file0\x00', 0xe900000, 0x2, &(0x7f0000002200)=[{&(0x7f00000011c0)="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", 0x1000, 0x2}, {&(0x7f00000021c0), 0x0, 0x101}], 0x800000, &(0x7f0000002240)={[{@nodots}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@check_normal}, {@dots}, {@dots}, {@nodots}, {@nodots}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@uid_lt}, {@smackfstransmute={'smackfstransmute', 0x3d, '^!@\\:'}}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002300)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002700)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002740), r1) accept(r1, &(0x7f0000002780)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000002800)=0x80) [ 93.464567] audit: type=1400 audit(1733744034.686:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:33:54 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x3b6601fb691d04ba) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x40884) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x4c000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xac, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48094}, 0x4000040) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x400, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000007c0)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x210440) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000000840)) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb0, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4020}, 0x51) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a00), 0x10402) write$sndseq(r8, &(0x7f0000000b40)=[{0x35, 0x8, 0x1, 0x3f, @time={0x100, 0xa7}, {0x81, 0x8}, {0x9, 0x5}, @ext={0xf9, &(0x7f0000000a40)="b339a87ee4944b3c5d402d7e0951034e91ac6eef63168aeb9cf3316cfd1aa32009fb79ea89c31f46e049729c0faf9b71558081d9430ae05136185d3cc0b813385c55aec8d5050d929f378060b33ae1837b48dc1106b255eb9bed207323e7bf8ac2c55c4e308763f98efb8acb525661fde2b66d4b2978e4a9ab4af050475ac1272f89d7d86f7ec751a8b0af2537f22da95f75b049aa910481c4acbfaa1f1660a53404d430791d135b4d6aa97d5ad1d3b185c9d8a87c9274fc6137188395efc16959960115d3ade7e51b7237782ddde5d2015bafc3d1f019477e249a114d531831d22a85b00a89274821d0a93930433d642b81c381510f59d50b"}}, {0xfd, 0x6, 0xfa, 0x39, @time={0x3, 0xfff}, {0x3f}, {0x5, 0x7f}, @result={0xfe}}, {0x8, 0x20, 0x9, 0xf, @tick=0x10000, {0x1, 0x1}, {0x6, 0x20}, @quote={{0x5, 0x7}, 0x232b}}], 0x54) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r8, 0x80286722, &(0x7f0000000cc0)={&(0x7f0000000bc0)=""/216, 0xd8, 0x3f, 0xfffffffe}) faccessat(0xffffffffffffffff, &(0x7f0000000d40)='./file0\x00', 0x63) 11:33:54 executing program 5: sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2e0, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x39}}}}, [@NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x6, 0x800, 0x22, 0x5, 0x9, 0x3f, 0xfff]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6e, 0x400, 0xff81, 0x6a7, 0x1000, 0x85f4, 0x80]}}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1, 0x4, 0x6, 0x7fff, 0x7e5, 0x1, 0xfffd]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffde, 0x8, 0x2, 0x8, 0x8, 0x5, 0x36d5]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x1b]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x7, 0x5}, {0x4, 0x3}, {0x1, 0x9}, {0x6, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x5, 0x9}, {0x2}, {0x0, 0x5}, {0x4, 0x2}, {0x5, 0x9}, {0x6, 0x1}, {0x3, 0x5}, {0x4, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x0, 0xa}, {0x3, 0x2}, {0x1, 0x9}, {0x6, 0x5}, {0x7, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x170, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x2}, {0x6, 0x9}, {0x7, 0xa}, {0x5, 0x7}, {0x0, 0x8}, {0x4, 0x7}, {0x7, 0x1}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x2}, {0x4, 0x1}, {0x3, 0x4}, {0x1, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x2, 0x1}, {}, {0x2, 0x7}, {0x3, 0xa}, {0x1}, {0x4, 0xa}, {0x4, 0x8}, {0x7, 0xa}, {0x3, 0xa}, {0x7, 0xa}, {0x1}, {0x1, 0x4}, {0x1, 0x2}, {0x4, 0x7}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0x5}, {0x5, 0x8}, {0x0, 0x6}, {0x1}, {0x0, 0x4}, {0x0, 0x2}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x3a73, 0x5, 0x20, 0x47ec, 0x219, 0x4, 0x33]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x4}, {0x4, 0x6}, {0x0, 0x5}, {0x6, 0x3}, {0x2, 0x9}, {0x3}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x3}, {0x4, 0x5}, {0x3, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x8}, {0x4, 0x6}, {0x3, 0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x0, 0x6}, {0x0, 0x5}, {0x0, 0xa}, {0x4, 0xa}, {0x0, 0x8}, {0x6, 0x7}, {0x7, 0x1}, {0x0, 0x7}, {}, {0x3, 0xa}, {0x3, 0x4}, {0x4}, {0x6}, {0x3, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x9}, {0x2}, {0x6, 0x4}, {0x2, 0x6}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x8}, {0x6}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x3}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x3}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x1}, {0x2, 0x9}, {0x5, 0x4}, {0x3, 0xa}, {0x3, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x7, 0x3, 0x6, 0x21b6, 0xe4f1, 0x7]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x3}, {0x7, 0x1}, {0x3, 0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x4}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x3, 0x24, 0x5, 0x36, 0x4, 0x1b, 0x1, 0x4, 0x1b, 0xb, 0x6, 0x6c, 0x5, 0x30, 0x48, 0x6, 0x36, 0x9, 0x24, 0x6a, 0x1b, 0x2, 0x48]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x7, 0x7}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x2}, {0x3}, {0x0, 0x7}, {0x5, 0x2}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x1}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x1}, {0x4, 0x5}, {0x5, 0x4}, {0x2, 0x5}, {0x5, 0xa}, {0x4, 0x9}, {0x3, 0x6}, {0x0, 0x4}, {0x3, 0x3}, {0x1, 0x6}, {0x3, 0x5}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x4}, {0x7, 0x8}, {0x1}, {0x7, 0x6}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x3}, {0x2, 0x9}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x9}, {0x5, 0x3}, {0x1, 0x3}, {0x7, 0x5}, {0x4, 0x3}, {0x3, 0x5}, {0x2}, {0x4, 0x4}, {0x2, 0x3}, {0x7, 0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x5, 0x3}, {0x6, 0x1}, {0x0, 0x7}, {0x3, 0x9}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x8}, {0x0, 0x5}, {0x2, 0x7}, {0x6, 0x6}, {0x7, 0x1}, {0x4, 0x3}, {0x6, 0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x7}, {0x7, 0x6}, {0x4, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0xa}, {0x5, 0x4}, {0x0, 0x9}, {0x4, 0x8}, {0x7, 0x9}, {0x1, 0x7}, {0x1, 0x8}, {0x4, 0x6}, {}, {0x3, 0x5}, {0x4, 0x4}, {0x6, 0xa}, {0x1, 0x8}, {0x2, 0x9}, {0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x1}, {0x5, 0x5}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x7}, {0x1}, {0x2, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x6}, {0x6, 0x8}, {0x2, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x1}, {0x7, 0x8}, {0x2, 0x5}, {0x1, 0x8}, {0x3, 0x8}, {0x4, 0x3}, {0x2, 0x9}, {0x7, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x6}, {0x0, 0x5}, {0x0, 0x7}, {0x2, 0x4}, {0x3, 0x5}, {0x6, 0x5}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x8}, {0x0, 0x8}, {0x7, 0x8}, {0x3, 0x2}, {}, {0x6, 0x4}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x2}, {0x7, 0xa}, {0x5, 0x1}, {0x5, 0xa}]}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0xb, 0x0, 0xf7f673def7e2b795, 0x30, 0x1b, 0x16, 0x6, 0x4, 0x9, 0x48, 0x48, 0x4, 0x48, 0x48, 0x12, 0x6, 0x3, 0x60, 0x4, 0x1, 0x16, 0xc, 0x60, 0x3, 0x16, 0x48, 0x1, 0x71, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1624, 0x8033, 0x8000, 0x5, 0x0, 0x7, 0x77, 0x7]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x2}, {0x1, 0x1}, {0x6, 0x9}, {0x4, 0xa}, {0x7, 0x6}, {0x2, 0x6}, {0x4, 0x7}, {0x7, 0x5}, {0x4, 0x8}, {0x2, 0x4}, {0x1, 0xa}, {0x1, 0x5}, {0x3}, {0x3}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0x2}, {0x2, 0x7}, {0x2, 0x6}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x5}, {0x7}, {0x0, 0x1}, {0x4}, {0x3, 0xa}, {}, {0x3}, {0x5, 0x6}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x8}, {0x0, 0x8}, {0x6, 0x3}, {0x5, 0x9}, {0x3, 0x9}, {0x6, 0x1}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x1}, {0x6, 0x6}, {0x4, 0x3}, {0x2}, {0x5, 0x8}, {0x5, 0x3}, {0x6, 0xa}, {0x7, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0x7}, {0x5, 0x5}, {0x2, 0xa}, {0x6, 0x2}, {0x7, 0x9}, {0x4, 0x9}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x1}, {0x3, 0x8}, {0x5}, {0x7, 0x8}, {0x7, 0x2}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0x6}]}]}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x200080c}, 0x20000000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x120, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bac0a7cf73c27cb857b0a5a4b9b5e4f6fd751bda82fdf384"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0cdfa1233a98346b471471412c70e47d15a1994661e699ea"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f3776f59bdae58cd8be1f1d00c4e44711f71e611b1c12ac8"}]]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x7c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x44054) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x80, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0xc0c5) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000940)=[r0, r0, r0], 0x3) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x240000b1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc001}, 0x4800) r2 = io_uring_setup(0x321a, &(0x7f0000000bc0)={0x0, 0x1917, 0x20, 0x2, 0x5, 0x0, r0}) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000c40)) r3 = syz_open_dev$vcsu(&(0x7f0000000c80), 0x2, 0x163280) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000fc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d00)={0x27c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xa1d}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x60}, {0x6}, {0x8, 0x13, 0xe4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfd1}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}, {0x6}, {0x8, 0x13, 0x737}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x240a}, {0x8, 0x13, 0xfffffffc}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x6}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6}, {0x8, 0x13, 0x40}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x8000}, {0x5}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4040}, 0x20008821) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), r3) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xb0, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40008c3}, 0x40801) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001400)=[{&(0x7f00000011c0)=""/68, 0x44}, {&(0x7f0000001240)=""/250, 0xfa}, {&(0x7f0000001340)=""/76, 0x4c}, {&(0x7f00000013c0)=""/10, 0xa}], 0x4) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001480), r3) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000808) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r1, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x200008c0) name_to_handle_at(0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)=@FILEID_NILFS_WITH_PARENT={0x20, 0x62, {0x40, 0x0, 0x2, 0x349, 0x7}}, &(0x7f0000001740), 0x400) 11:33:54 executing program 7: sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1e}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x104, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5ef}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x104}}, 0x20000001) syz_genetlink_get_family_id$smc(&(0x7f00000004c0), r0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000500)=0x1) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xfff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'vxcan1\x00'}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x88, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002e00)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e80), r0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000002f40)={&(0x7f0000002e40), 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x34, r5, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xc8ef}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40080) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000003040)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x1c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x2000) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003100)={0x70, r5, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x51}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000010}, 0x820) 11:33:54 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x100, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "81fb6ecba13ca3f4", "46f60abda1aef0e962e77b07e1822526", "164a500e", "d5ef7d6f1e5d9c88"}, 0x28) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_elf64(r4, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x50, 0x81, 0x80, 0x1f, 0x9, 0x3, 0x3e, 0x101, 0x381, 0x40, 0x290, 0x1, 0x5, 0x38, 0x1, 0x100, 0x0, 0x4}, [{0x4, 0x0, 0x2, 0x0, 0x7, 0x5, 0xf6, 0x4}, {0x70000002, 0x3, 0x2, 0x17a, 0x3, 0x7, 0xfff, 0x50e}], "9b83351b424604092385bd2c6ef0d3db82d7f36e0e1bb6b910391d34569dd310a5fec747a61abe751dfba8b3e4d3d15590a167ef20", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8e5) r5 = syz_io_uring_setup(0x66c3, &(0x7f0000000a40)={0x0, 0x4c56, 0x1, 0x3, 0x200}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000b40)={0x1, 0x0, 0x8}) r6 = io_uring_setup(0x4c79, &(0x7f0000000b80)={0x0, 0x20b5, 0x2, 0x0, 0x321, 0x0, r5}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001240), 0x2403, 0x0) ioctl$MON_IOCX_GETX(r7, 0x4018920a, &(0x7f00000022c0)={&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000012c0)=""/4096, 0x1000}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r8 = dup2(r2, r6) r9 = syz_io_uring_setup(0x4871, &(0x7f0000002300)={0x0, 0x8b91, 0x8, 0x1, 0x5f, 0x0, r8}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00009b9000/0x1000)=nil, &(0x7f0000002380), &(0x7f00000023c0)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000002400), 0x80040, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000002440), 0x400000, 0x0) r12 = syz_open_dev$sg(&(0x7f0000002480), 0x2d04, 0x200) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000002580)=[r10, r7, r9, r3, 0xffffffffffffffff, 0xffffffffffffffff, r11, r4, r12, 0xffffffffffffffff], 0xa) [ 94.945951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.949178] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.951021] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.954585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.961550] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.963544] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.964704] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.973854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.976538] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.979348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.981242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.982527] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.013471] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.014583] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.018117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.018344] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.020601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.022067] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.023119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.025772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.029176] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.030680] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.032503] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.038067] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.043541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.048732] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.051057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.051883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.056091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.060206] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.120564] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.122288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.123389] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.129408] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.131961] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.133019] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.134376] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.150114] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.151523] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.163095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.179580] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.181078] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.195994] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.215305] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.225627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.227433] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.271718] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.275029] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.032179] Bluetooth: hci1: command tx timeout [ 97.033018] Bluetooth: hci0: command tx timeout [ 97.095924] Bluetooth: hci2: command tx timeout [ 97.096539] Bluetooth: hci4: command tx timeout [ 97.097423] Bluetooth: hci3: command tx timeout [ 97.160523] Bluetooth: hci5: command tx timeout [ 97.288074] Bluetooth: hci7: command tx timeout [ 97.355860] Bluetooth: hci6: command tx timeout [ 99.082970] Bluetooth: hci0: command tx timeout [ 99.083151] Bluetooth: hci1: command tx timeout [ 99.144117] Bluetooth: hci4: command tx timeout [ 99.144257] Bluetooth: hci3: command tx timeout [ 99.144591] Bluetooth: hci2: command tx timeout [ 99.207980] Bluetooth: hci5: command tx timeout [ 99.336866] Bluetooth: hci7: command tx timeout [ 99.399868] Bluetooth: hci6: command tx timeout [ 101.129827] Bluetooth: hci1: command tx timeout [ 101.130352] Bluetooth: hci0: command tx timeout [ 101.191986] Bluetooth: hci3: command tx timeout [ 101.194086] Bluetooth: hci4: command tx timeout [ 101.194543] Bluetooth: hci2: command tx timeout [ 101.257050] Bluetooth: hci5: command tx timeout [ 101.384852] Bluetooth: hci7: command tx timeout [ 101.447949] Bluetooth: hci6: command tx timeout [ 103.201119] Bluetooth: hci0: command tx timeout [ 103.201642] Bluetooth: hci1: command tx timeout [ 103.240088] Bluetooth: hci2: command tx timeout [ 103.240571] Bluetooth: hci4: command tx timeout [ 103.241933] Bluetooth: hci3: command tx timeout [ 103.304872] Bluetooth: hci5: command tx timeout [ 103.433026] Bluetooth: hci7: command tx timeout [ 103.497927] Bluetooth: hci6: command tx timeout [ 154.696599] syz-executor.1 (281) used greatest stack depth: 23936 bytes left [ 157.436941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.441999] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.450172] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.456568] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.458331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.462196] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.464399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.470421] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.472225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.478564] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.482233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.483326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.528462] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.531029] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.532314] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.537204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.570242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.571751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.606601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.607982] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.609324] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.612247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.614192] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.617924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.660397] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.681453] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.685708] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.687476] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.693037] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.694518] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.704525] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.706497] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.707830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.714438] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.718019] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.721209] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.722297] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.724034] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.731518] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.733147] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.742506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.746392] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.751114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.752512] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.753950] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.764045] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.765240] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.766639] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.495901] Bluetooth: hci0: command tx timeout [ 159.561340] Bluetooth: hci1: command tx timeout [ 159.625942] Bluetooth: hci2: command tx timeout [ 159.687921] Bluetooth: hci3: command tx timeout [ 159.816297] Bluetooth: hci5: command tx timeout [ 159.816315] Bluetooth: hci6: command tx timeout [ 159.879872] Bluetooth: hci4: command tx timeout [ 159.943882] Bluetooth: hci7: command tx timeout [ 161.543906] Bluetooth: hci0: command tx timeout [ 161.607876] Bluetooth: hci1: command tx timeout [ 161.672231] Bluetooth: hci2: command tx timeout [ 161.735878] Bluetooth: hci3: command tx timeout [ 161.863917] Bluetooth: hci5: command tx timeout [ 161.864920] Bluetooth: hci6: command tx timeout [ 161.928087] Bluetooth: hci4: command tx timeout [ 161.992043] Bluetooth: hci7: command tx timeout [ 163.591934] Bluetooth: hci0: command tx timeout [ 163.655868] Bluetooth: hci1: command tx timeout [ 163.720438] Bluetooth: hci2: command tx timeout [ 163.784864] Bluetooth: hci3: command tx timeout [ 163.912418] Bluetooth: hci6: command tx timeout [ 163.912439] Bluetooth: hci5: command tx timeout [ 163.976939] Bluetooth: hci4: command tx timeout [ 164.041029] Bluetooth: hci7: command tx timeout [ 165.640944] Bluetooth: hci0: command tx timeout [ 165.704936] Bluetooth: hci1: command tx timeout [ 165.769827] Bluetooth: hci2: command tx timeout [ 165.833241] Bluetooth: hci3: command tx timeout [ 165.959920] Bluetooth: hci6: command tx timeout [ 165.959941] Bluetooth: hci5: command tx timeout [ 166.024035] Bluetooth: hci4: command tx timeout [ 166.087889] Bluetooth: hci7: command tx timeout [ 219.823483] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.827335] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.828691] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.832963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.835735] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.844572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.854535] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.857496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.864460] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.867352] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.868940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.870039] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.048491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.053811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.054831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.058127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.060654] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.061650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.070652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.077478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.081557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.123884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.129526] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.130558] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.150324] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.151520] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.155547] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.158014] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.163251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.174484] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.174603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.192030] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.210660] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.213647] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.214913] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.216036] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 220.218258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.219947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.225011] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.225737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.228276] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.232656] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.233514] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.249504] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.269018] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.300483] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.302041] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.303068] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.895917] Bluetooth: hci1: command tx timeout [ 221.896908] Bluetooth: hci0: command tx timeout [ 222.087896] Bluetooth: hci2: command tx timeout [ 222.216105] Bluetooth: hci3: command tx timeout [ 222.343914] Bluetooth: hci6: command tx timeout [ 222.344825] Bluetooth: hci5: command tx timeout [ 222.408037] Bluetooth: hci4: command tx timeout [ 222.408193] Bluetooth: hci7: command tx timeout [ 223.945905] Bluetooth: hci0: command tx timeout [ 223.945990] Bluetooth: hci1: command tx timeout [ 224.135917] Bluetooth: hci2: command tx timeout [ 224.263915] Bluetooth: hci3: command tx timeout [ 224.391918] Bluetooth: hci5: command tx timeout [ 224.391941] Bluetooth: hci6: command tx timeout [ 224.455844] Bluetooth: hci7: command tx timeout [ 224.456899] Bluetooth: hci4: command tx timeout [ 225.992013] Bluetooth: hci1: command tx timeout [ 225.992558] Bluetooth: hci0: command tx timeout [ 226.184144] Bluetooth: hci2: command tx timeout [ 226.312892] Bluetooth: hci3: command tx timeout [ 226.439889] Bluetooth: hci6: command tx timeout [ 226.441289] Bluetooth: hci5: command tx timeout [ 226.503893] Bluetooth: hci4: command tx timeout [ 226.505002] Bluetooth: hci7: command tx timeout [ 228.040052] Bluetooth: hci1: command tx timeout [ 228.041040] Bluetooth: hci0: command tx timeout [ 228.232034] Bluetooth: hci2: command tx timeout [ 228.361812] Bluetooth: hci3: command tx timeout [ 228.488202] Bluetooth: hci5: command tx timeout [ 228.490993] Bluetooth: hci6: command tx timeout [ 228.552113] Bluetooth: hci7: command tx timeout [ 228.553143] Bluetooth: hci4: command tx timeout [ 282.013673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.015982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.020816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.022596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.028421] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.032079] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.033908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.044464] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.048159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.049977] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.053022] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.060511] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.128064] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.134408] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.136882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.151990] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.156344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.158530] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.215091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.237529] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.239973] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.247622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.250971] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.255077] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.358358] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.360537] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.374156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.376151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.380599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.382544] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.406247] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.408460] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.422973] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.433230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.441123] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.443058] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.450074] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.454453] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.456662] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.473013] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.499151] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.499364] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.503532] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.514948] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.527558] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.567341] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.589045] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.595234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.103855] Bluetooth: hci1: command tx timeout [ 284.105849] Bluetooth: hci0: command tx timeout [ 284.232012] Bluetooth: hci2: command tx timeout [ 284.295841] Bluetooth: hci3: command tx timeout [ 284.489039] Bluetooth: hci4: command tx timeout [ 284.615969] Bluetooth: hci5: command tx timeout [ 284.680799] Bluetooth: hci6: command tx timeout [ 284.743871] Bluetooth: hci7: command tx timeout [ 286.152929] Bluetooth: hci1: command tx timeout [ 286.154538] Bluetooth: hci0: command tx timeout [ 286.281018] Bluetooth: hci2: command tx timeout [ 286.344809] Bluetooth: hci3: command tx timeout [ 286.536898] Bluetooth: hci4: command tx timeout [ 286.664885] Bluetooth: hci5: command tx timeout [ 286.728964] Bluetooth: hci6: command tx timeout [ 286.793285] Bluetooth: hci7: command tx timeout [ 288.201029] Bluetooth: hci0: command tx timeout [ 288.201560] Bluetooth: hci1: command tx timeout [ 288.327805] Bluetooth: hci2: command tx timeout [ 288.391905] Bluetooth: hci3: command tx timeout [ 288.585952] Bluetooth: hci4: command tx timeout [ 288.713767] Bluetooth: hci5: command tx timeout [ 288.777188] Bluetooth: hci6: command tx timeout [ 288.840806] Bluetooth: hci7: command tx timeout [ 290.248913] Bluetooth: hci0: command tx timeout [ 290.249417] Bluetooth: hci1: command tx timeout [ 290.376883] Bluetooth: hci2: command tx timeout [ 290.439836] Bluetooth: hci3: command tx timeout [ 290.632837] Bluetooth: hci4: command tx timeout [ 290.760816] Bluetooth: hci5: command tx timeout [ 290.824945] Bluetooth: hci6: command tx timeout [ 290.888090] Bluetooth: hci7: command tx timeout [ 344.348604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.351922] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.364434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.404568] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.414696] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.416944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.531915] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.535291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.537610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.542643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.545624] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.546813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.612487] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.620105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.629555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.644052] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.659430] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.664006] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.690621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.701150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.719896] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.728075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.737935] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.740646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.746928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.749022] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.751040] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.767943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.775439] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.785411] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.799160] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.823769] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.828013] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.831967] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.833405] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.834433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.842995] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.847967] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.849605] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.850334] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.853993] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.855036] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.868441] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.897448] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.899034] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.909304] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.911124] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 344.912682] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.505042] Bluetooth: hci0: command tx timeout [ 346.573691] Bluetooth: hci1: command tx timeout [ 346.695848] Bluetooth: hci2: command tx timeout [ 346.887851] Bluetooth: hci3: command tx timeout [ 346.951926] Bluetooth: hci6: command tx timeout [ 346.953862] Bluetooth: hci4: command tx timeout [ 346.953939] Bluetooth: hci5: command tx timeout [ 347.015930] Bluetooth: hci7: command tx timeout [ 348.551931] Bluetooth: hci0: command tx timeout [ 348.616061] Bluetooth: hci1: command tx timeout [ 348.743813] Bluetooth: hci2: command tx timeout [ 348.936901] Bluetooth: hci3: command tx timeout [ 349.000061] Bluetooth: hci6: command tx timeout [ 349.000155] Bluetooth: hci5: command tx timeout [ 349.000588] Bluetooth: hci4: command tx timeout [ 349.063893] Bluetooth: hci7: command tx timeout [ 350.599801] Bluetooth: hci0: command tx timeout [ 350.663879] Bluetooth: hci1: command tx timeout [ 350.791906] Bluetooth: hci2: command tx timeout [ 350.983828] Bluetooth: hci3: command tx timeout [ 351.048206] Bluetooth: hci4: command tx timeout [ 351.048339] Bluetooth: hci5: command tx timeout [ 351.049395] Bluetooth: hci6: command tx timeout [ 351.111956] Bluetooth: hci7: command tx timeout [ 352.647826] Bluetooth: hci0: command tx timeout [ 352.713778] Bluetooth: hci1: command tx timeout [ 352.839898] Bluetooth: hci2: command tx timeout [ 353.031824] Bluetooth: hci3: command tx timeout [ 353.095830] Bluetooth: hci6: command tx timeout [ 353.096342] Bluetooth: hci4: command tx timeout [ 353.097227] Bluetooth: hci5: command tx timeout [ 353.162784] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 11:39:04 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff86768b01 RDX=1ffff1100d9c135f RSI=ffffffff8171e3a8 RDI=ffff888034377b00 RBP=ffff88806ce09af0 RSP=ffff88806ce09a28 R8 =ffffffff86768bee R9 =ffff88806ce09ad8 R10=000000000003a7a3 R11=000000000000031e R12=ffff88806ce09af8 R13=ffff88806ce09ae0 R14=ffff888034377a78 R15=ffff88806ce09a98 RIP=ffffffff81349c88 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fed5349d540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fed5369f02c CR3=000000000be56000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=1ffff1100653be99 RSI=ffff8880329dfcb8 RDI=ffff8880329df4c8 RBP=ffff88800a0a1c00 RSP=ffff8880329df408 R8 =0000000000000001 R9 =ffff8880329df4b8 R10=000000000003a7a3 R11=0000000000022020 R12=ffff8880329df4d8 R13=ffff8880329df4c0 R14=ffff8880329dfcb8 R15=ffff8880329df478 RIP=ffffffff8134a846 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7aa1762710 CR3=0000000024b44000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000