syzkaller login: [ 56.044025] sshd (231) used greatest stack depth: 24200 bytes left Warning: Permanently added '[localhost]:47237' (ECDSA) to the list of known hosts. 2024/12/15 05:25:15 fuzzer started 2024/12/15 05:25:15 dialing manager at localhost:36477 [ 59.638364] cgroup: Unknown subsys name 'net' [ 59.745671] cgroup: Unknown subsys name 'cpuset' [ 59.781669] cgroup: Unknown subsys name 'rlimit' 2024/12/15 05:25:35 syscalls: 228 2024/12/15 05:25:35 code coverage: enabled 2024/12/15 05:25:35 comparison tracing: enabled 2024/12/15 05:25:35 extra coverage: enabled 2024/12/15 05:25:35 setuid sandbox: enabled 2024/12/15 05:25:35 namespace sandbox: enabled 2024/12/15 05:25:35 Android sandbox: enabled 2024/12/15 05:25:35 fault injection: enabled 2024/12/15 05:25:35 leak checking: enabled 2024/12/15 05:25:35 net packet injection: enabled 2024/12/15 05:25:35 net device setup: enabled 2024/12/15 05:25:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/15 05:25:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/15 05:25:35 USB emulation: enabled 2024/12/15 05:25:35 hci packet injection: enabled 2024/12/15 05:25:35 wifi device emulation: enabled 2024/12/15 05:25:35 802.15.4 emulation: enabled 2024/12/15 05:25:35 fetching corpus: 0, signal 0/0 (executing program) 2024/12/15 05:25:36 starting 8 fuzzer processes 05:25:36 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x3}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0xd7, 0x7, 0xf7, 0xfb, @tick, {0xb3, 0x7}, {0xd5, 0x3f}, @time=@tick=0x8}, {0x6, 0x84, 0x6, 0xc0, @tick=0x5, {0x5, 0x6}, {0x4, 0x2b}, @raw32={[0x9, 0x238, 0x6]}}, {0x1f, 0xd7, 0x1, 0x5, @time={0x8e8f, 0xb}, {0x0, 0x1}, {0x9, 0x81}, @control={0x1, 0x8696, 0x6}}, {0xff, 0x1, 0x8, 0x0, @time={0x9, 0x8}, {0xff, 0x2}, {0x1, 0x8}, @note={0x2, 0x1, 0x9, 0x0, 0x7}}, {0x3, 0x0, 0x5, 0x9c, @tick=0x1, {0xc1, 0x80}, {0x7f, 0x3f}, @time=@tick=0xff}, {0x3, 0xff, 0x60, 0x1, @tick=0x40, {0x6, 0x4}, {0xfb, 0x31}, @result={0x0, 0x2}}, {0x4, 0x9, 0x6, 0x3, @time={0x1, 0x4}, {0x6, 0x8}, {0x6, 0xc}, @control={0x3, 0x3, 0x7f}}, {0x1, 0x4, 0x8, 0x7f, @time={0x1, 0x4}, {0x78, 0x3}, {0x2, 0x4}, @addr={0x9, 0x1f}}], 0xe0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1f4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x28}}}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cad468bad864e650"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a3693045518e4c71"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3351b49a}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="66428fc5201f03bd5efcbc384ee9c877"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9188f2866ec03fe7bb8c00c8884d468a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8561cc93da71ee27"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0xc8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ea0c0db711386f275797b15c5dae8492"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="31a8d039b20ae5a17cf1748c836585e1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6de4faf51a949bc3f0f6a9784f17cc1fcb574aa5f03871f0a1bff3d457d39209"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ab56e6c4b3b8173c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "09aa8b2487063e35"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e39237fd6e4f1ca23a99323c4c54792c08935c382006239dada6556055d1435e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6f1a428f511798f8c251063085d4aebc9435795fb2aea34684dba9c9c7c3d6c9"}]}, @NL80211_ATTR_REKEY_DATA={0xa4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d3369ea3ed88f2ad2a1812fd41c54a4d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e80e704ba77b2fb3b44be27b100aa082b64c0053781486c1a088e383cb5e1678"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d8baf02f5973488a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "01a928651380124b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="731d04a795c5c5872b1d6d8076a609c4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="93d7080dcfdb4a798ecc5a84fd27e44d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ad0cc8f036eb0d9046302edaee83c633c13bb282b4206904"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fd934c1bc931307c"}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4011}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1f, 0x3}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600), 0x100, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x6c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x17}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000007c0)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1b4, r2, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x56}}}}, [@NL80211_ATTR_MESH_SETUP={0x110, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}, @NL80211_MESH_SETUP_IE={0xe8, 0x3, "bf639bf7c81d2b6618d0ae34a2d8a2f340266901c48c222aed45103961830b7657c47ea145e5df7080967febadda2d81ce45a33a8db9c89eb5af9eb1a3d6fbc897a722272e6742b48ca67c167bb7c5a4687e1c37bdcfd9b4d7e1f37d054b063f5e1729b53d170fb98344caf243575ffcca4ccbb72bb9246f255317d771cc25c2d1cbbb4159c6d580f041fedadd275590dd93e3737d2a2dd1322cdb8ac49fa3af896361e9c913f374084063c8335eea0ce3ff3d7d1a16294e1c9769234fcf82a06b98651267176376606c1531cd2220713efeaab73c25b649d61efb8ef75ca0aaef042516"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x2, 0x1}, {0x4, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_SETUP={0x44, 0x70, [@NL80211_MESH_SETUP_IE={0x3e, 0x3, "a2ae9928ead9f7fa1341dd4dfd2c27421bc7268decb72aa042311bc15196ae147165fbc47c9f43a80c52570c89882eae45769deb46a009e91df5"}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x87}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x8001}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x100}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x1}, 0x4008081) io_uring_setup(0x795f, &(0x7f0000000a80)={0x0, 0xb5af, 0x10, 0x0, 0x9a}) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r2, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x14}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0x4004819) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r1) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x840) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xab}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 05:25:36 executing program 1: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x800) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/cryptomgr', 0x60a00, 0x80) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)={0x10000013}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x42}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xaa}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x94}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r5 = mq_open(&(0x7f0000000300)='/dev/hwrng\x00', 0x2, 0x60, &(0x7f0000000340)={0x3, 0x0, 0x2, 0x4057}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000002c0)='\x00', 0x0, r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r6, 0x101, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x25}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x40044) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x208d03, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='nl80211\x00', 0x0, r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000000680)) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, r4, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7c}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "04e5c94dc1747d03beb00c9971b1e3ca"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4c}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8000}, @NL80211_ATTR_PMKID={0x14, 0x55, "75f3fa25f5712e08f86af8cf128f2f7b"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4814}, 0x20008005) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r6, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 05:25:36 executing program 3: r0 = socket(0xd777481b93cfb8af, 0x3, 0xb3) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xf4f5a3017be8d8cf}, 0x40000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'ip_vti0\x00'}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8}, @val={0xc, 0x99, {0x4a, 0x9}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20044080}, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x30d, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x71}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x4000080) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x2804c820}, 0x80) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20400c0}, 0x81) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x134, r3, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x2b}}}}, [@NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a66047d604da9a76"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a93393e32701d54ef32e9feb9725428a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e8086bef6ef42738"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7c73c37b65e0626a87a87dd651bacf068c32fde54962dc52"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "036ccf734013d936"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8bd61a143b9414442645d1fccf0abab87455c3a549dd3197"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x37}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6e7a07bdd8620d8f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="656c44fdcb0be7457a3c7e9a43d7ac374587690dc2272546"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a722920e2a7c831b83fbce989afe648c0512fd71d073f381a49435e8ee8ddc90"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x34d9}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1000}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="574b890fb68348802a273fb95fa45d63"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000080}, 0x810) socketpair(0x0, 0x1, 0x40, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x36}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x400c041) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r6, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x4a}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa00}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x8001) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)={0x1b0, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa7a}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdece}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ID={0x31, 0x3, "d6bd9ace230c2bfa76f5a494b17b92c92c2ae8f39590975d0c88b2113eaf4de6c30a42ca81d769738dd4368ca5"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x50, 0x3, "60d448c1b5a27b5f007426cf4f3990ce91b622226782620d1d7558ccda82521e5574eca87e914fad460b0511168d67a9481437da105599b4b26af77754f32779bd3f062d05c5a3dbe86fa6f4"}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 05:25:36 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10, r0, 0x10000000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40a00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x35}}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x35}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x551}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xcac}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x70}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r3, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3ecb942b, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}}, 0x4040000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)={0x3bc, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff1d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NODE={0x308, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc1, 0x3, "049d4c964dc6d8597f1d819a2a4a35ee2b8431823ac6343ee67a0f37adbf7222b2d513c87b2a1e4b37e274885d5a5203b8cb4e8088b59d4ecfee2684d31f738ccf5307ee1909dc46cb08c4f8a7bcaf59fe76af76126d5f6fb4de53353e272d261e46537b72216b8291703fde379beaa19d520fa5d3602f1921e0659e6a9ce1ad7a81599c2c6beff562d785de9012f320d57005f71acef5094c3c4fcc934bbf1574fafdf3e07725ab64c17e3cd93e7c8eccc992a5a8de0999d7b6995a45"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "6ff74d128914b823f86e55b632eff882fc584dc96be3377f24f4404be391c2d07a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "7a18ca0ca0f96a57bf4b499b70cef1b53d3bdb3091ecba66e3f8a3db12badd438ad61da8d1ec0241203e6b5f0411cd2044da5adfa4fde5136d0af63ccf39712401229f20c2bb7d8bab1120ec277f3873287fd3d15cb555604511793ee4c2310903c29f158136be4f29623dce173fdb9b90f228d6e4100add7ad197f4e732e721c2c71d6e65df1af750b556c240c8ccfdc0c14e22f409f2ea570a19f8da4592c845f9b7d3ca424b0343f0f722cd5997aff8be7aeeca2ca820d70c83a6fd918cf8ca67f63730187cab603df1ed9ddb485f1f8e4f39789099d039d82f7c79f948fb"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9619}, @TIPC_NLA_NODE_ID={0xb4, 0x3, "b5769f8f2bf6c83eee17a9a879a9ec6469ac394f9c678016d8c5456744d93783d40fa93fd014701596e745a21d9ed524943dd362ed24460968f86dcde2559be1cd524554a5837d3c7670452a44d8fed0fda5c98eaf378dda3036fc763e393abfdefe8160da0aa45d49ce875f31392cfe5bce7ddb31587ed0db1b1e3203d0e9995f50695348c11562c4310f50f447b89cecf44ac9fbfb634ce0135551da677851a3b80e8e8e4955b25d0f1d101a8ec50a"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "224083dc8e3bf3bff24af5987cd0aa1c572d2ecc1d61e7470432a1ed500dff"}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x180}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000009c0)={'batadv_slave_1\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000a80)={0x3d4, r6, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x1be, 0x33, @mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @broadcast, @from_mac, {0x3, 0x7f}}, @ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x221, 0x7, @default, @void, @void, [{0xdd, 0x24, "d572cfc737a45067c26747699d0d1f570caa41dc0e719d7a0cc8860e87125fef909bdc6e"}, {0xdd, 0x44, "b451f8250dccb07ea4f811fd6cd7d83bf0f5928cb29415c87d2685e83f369aca94e8d216bf1dcd94554b41619eae58ea2e94d1d7f71e67f160b35512a1ef3b52fd5b7a70"}, {0xdd, 0xb6, "460099e0da0fba71d9aaeb77ca8b36759cc91fafa6410fa41f585bafc5675f9a6a43931ca5896beaa51bcf1819cd95b1b83f64c2a5dec77e1d7d12eebcb262769acf5d007d4b4e5b52d060cf26be7a4a13fbfe9ea57b6002ce1ae434d8b1695cb773bbc9fb2dbce878144a0925f187f3f0b9986c60bba20d8d9e0c937a2fa501e4ad04fbbc13898f69c58a8577c4a66714aaf6897a24cd557f06869098c9ac29c216cf38bfb0da8cf52bcf3ab8eb21ac9caea0625c9f"}, {0xdd, 0x72, "b808d2d250a56f5d41233b6cfeaea11c59f044b81857c249fb74a22d559a06a55952ddda90e53603198a269f1e29be423a8b9c19609eac0d41d66602b0471f72c85d983ff27dc765c4f628bc7ea1614047df784ffd038ce3a805483cc4807ebf4b5f90883956220f29e7f6ef09db8b0f460e"}]}}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x40}, @device_b, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x7}}}}, @NL80211_ATTR_FRAME={0x78, 0x33, @mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @broadcast, @broadcast, @random="59aa438f2e6b", {0x9, 0x9}}, @ver_80211n={0x0, 0x5, 0x0, 0x1, 0x0, 0x3, 0x1}}, @void, @val={0x1, 0x4, [{0x59}, {0x9, 0x1}, {0x4}, {0x48}]}, @void, @val={0x2d, 0x1a, {0x2000, 0x2, 0x1, 0x0, {0x2a14, 0x1f, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x6, 0xab}}, @val={0x72, 0x6}, [{0xdd, 0x2c, "f32de88de742291ee6377b7791e6256b365dd169e79c91ed14bea84fc326ffd2e25715cc8f13fe50dbbb1f7b"}]}}, @NL80211_ATTR_FRAME={0xa6, 0x33, @mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @broadcast, @from_mac, {0x3}}, 0x460, 0x7fff, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0x48}]}, @val={0x2d, 0x1a, {0x1000, 0x1, 0x7, 0x0, {0x4, 0x1f, 0x0, 0x40, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x40, 0xe0}}, [{0xdd, 0x57, "da114b0bc763b8a5f43f5bbe27630a6ca47c47b7303ca39ca25162344c36621edb31ccd0457bdbc505d6f71cdddef77da47ee758501a4316c192b87d285352372a5c4eee5fe4e6e0ac9432863ca58034034f8f98894891"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {}, @device_b}}, @NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {0x4}, @device_a, @device_a, @basic={{0x1}, {0x9}, "82d8beea6ff3e472b6689d7ac75621fd3809a2a7a07fd56428d367524379710fee0b9be17e35b039ed3130fe2e074039915b33695a6a19ef273929d11fb9cc0ffee8d637d3650f72846e2b5de5404160ae03b21dab04dc71022e3534cc72d590dcef06279206a9063d4161ea2a9d3eff2278e9c1c6c1b12ab9c2066117ebb391"}}}]}, 0x3d4}}, 0x8000) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000022c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002280)={&(0x7f0000000f40)={0x1330, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffbff}]}]}, @TIPC_NLA_NODE={0x1224, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf7, 0x3, "213c3588b94299bebfb815514b73cb8b14589c4b580fbf00148dd91ced2efa84a0328d7fcea1f03f388e94930c77978e51155bc825ba9baedfcf116c5869e5f1c4a07122cc3b64c70f9e7eb000687a7318f3ef1f2a6e92ce125f75be20f6323c82c4647607b3f17131c2575c059822134e60742b277b8e39c697f0f002ab739d13f13436e1f632609b01586f70a3a8f31d9f9697fa137ea04c89e73de94bedab4ea2a6e2703f2e858c1ae18146088089480ecc3b6f1334a40e15a5edbcd0a974b3cae3fac2fc1f72cb23e0b02acd57e96956533d383c0f8f11886a7efe2ade3dc14dff664d1667d3c2dc5d0a8561a1ae06b5ea"}, @TIPC_NLA_NODE_ID={0xda, 0x3, "7cff6f0d9692bf829a672a61102bb863373567ad57bf841b748f6db21591871ea39ff6fddfa651c8b9d8d04fa79e57895d1f87b101e57ee78e0388d3c8c8567d2abcef302d1758b9ddcbe62584c4ef425cdf3987086dd308ad2205eb55d4783640f2d756ef845f1c376371f7e85801c1f6d22b27be71f993a4c29c7faa5b91f106277f306dea668cc0706237c25c0c6f77d0de2132a9a1a5532bc59114608ccbb4f17fa89a75c8ace9ae9480d14a52055bfb6bab14a8d2ec8f0255e6235dd98a688be4af7c3d4cfc1d9fa92b753ac7aab71ce32f1ebb"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "af6d10f9346363847695a3141fdefbf8888b51240b"}}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb126}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x669c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x42c05f6a}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x48}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe523}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x1330}, 0x1, 0x0, 0x0, 0x10}, 0x800) fcntl$getownex(r0, 0x10, &(0x7f0000002300)) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000002840)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002800)={&(0x7f0000002380)={0x470, r3, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x36}}}}, [@NL80211_ATTR_BEACON_TAIL={0x15, 0xf, [@gcr_ga={0xbd, 0x6, @broadcast}, @supported_rates={0x1, 0x4, [{0x61, 0x1}, {0x48, 0x1}, {0xc}, {0x16}]}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_BEACON_TAIL={0xd, 0xf, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x60}}]}, @NL80211_ATTR_BEACON_HEAD={0x1ef, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x657}, @device_b, @device_b, @from_mac=@broadcast, {0x5, 0x40}}, 0x0, @random=0x400, 0x0, @val={0x0, 0x13, @random="0177893bb8843b4989395561ec60632bb02a3b"}, @void, @val={0x3, 0x1, 0xb6}, @val={0x4, 0x6, {0x9, 0xfa, 0x40, 0x100}}, @val={0x6, 0x2, 0x2}, @val={0x5, 0x95, {0x9, 0xa, 0x9, "aee4d47f74c106fd03483a9b10ca2a5c4877f6c4702aa18c14bde3a3b25c882317e9211c489f9cdab7ac34cac473a6e6370f892afd6d0d9b2327f20f4fc4932ba16da46e515e81d78471b90d33e496361259e2fcb48d6fb1b46c05685176502cf1330021e32ca544ee4b8c70c8db795913c1d21a144ab89b92c6709784b3fcd4205fc85883b5a10e9b89923a8eae175e4e01"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x0, 0x3f, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2}, 0x8, 0x40, 0x68}}, @void, @void, @val={0x76, 0x6, {0xf9, 0x20, 0x1a, 0x2}}, [{0xdd, 0x60, "76963f293e2f0d0359c27d79a3813301038e6ceab9be99824b77b0a98fa0988dfeaa15c9deb731ee373bae84472c2e8c15778c69b0b9e97bee77f70dce64b87ee65a9b20dfc67b53279eb16078f726da2486c5af3af969bacfac0794814250f9"}, {0xdd, 0x81, "421ba1b35d0f50d4584456ab7ba0186f75c35fc3479e241cbc8244dcb123a0bbbc8b90e6b59af01371d78ff2c69419b1425b2d3ddff9c5934f009bceba996d337003f2bd6101ce1ce33cf8ec3fbc81b1c4971379644469b32e6ba70f489a948676d95cf37e8f113c65c244e036b72958519d9413cebe59c55f7d1929cda7d13902"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x237, 0x7f, [@perr={0x84, 0x128, {0xa2, 0x12, [@ext={{}, @device_a, 0x6e, @device_b, 0x15}, @ext={{}, @device_a, 0xce, @broadcast, 0x15}, @ext={{}, @device_b, 0x9, @device_b, 0x12}, @not_ext={{}, @device_a, 0x7, "", 0x26}, @ext={{}, @device_a, 0x8001, @device_a, 0x15}, @not_ext={{}, @device_a, 0x7f, "", 0x1}, @ext={{}, @broadcast, 0xefa, @device_b, 0x34}, @not_ext={{}, @broadcast, 0x7b, "", 0x42}, @ext={{}, @broadcast, 0x4, @device_a, 0x7}, @ext={{}, @device_a, 0x7ff, @device_b, 0x10}, @not_ext={{}, @device_b, 0xb7, "", 0x20}, @not_ext={{}, @device_a, 0x2, "", 0x41}, @ext={{}, @broadcast, 0x7, @device_a, 0x6}, @ext={{}, @device_b, 0x4, @broadcast, 0xe}, @not_ext={{}, @device_a, 0xdfee, "", 0x2e}, @not_ext={{}, @broadcast, 0x5, "", 0xa}, @not_ext={{}, @device_b, 0x9, "", 0x27}, @ext={{}, @device_b, 0xff, @device_a, 0x10}]}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x9, 0xc7, @device_a, 0x2, 0x88, 0x200}}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ibss_ssid}, @gcr_ga={0xbd, 0x6, @device_b}, @link_id={0x65, 0x12, {@random="bfd979561448", @broadcast}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @random_vendor={0xdd, 0xb9, "36ddb496c511399cccc0b30851951bc8bbeaf2e3ad6c513a7a5e2af537ac3072b8330536e77bb0af606fc77838abb98ea39bf23a8610d7ab23a58326d5c57c3f8f0a6cc1ac6fda8abc05f8fa9e73fef88a0cff0457dc2db5c6576222f163005761da4308cd8bab9e234ab1ccb3cab9878ad08c6234b753f437bb57506746a2f767e11b13889610e4d4906edb8edd12810495d1be5cd52fd29f9c5a0850b8aa59adf38bd2ec3b67f7cfb37fc11f860d8be7eafcda545b58064e"}, @mesh_chsw={0x76, 0x6, {0x40, 0x81, 0xe, 0xffff}}]}]}, 0x470}}, 0x20000811) r7 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6b}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x40091) 05:25:36 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}}, 0x44811) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1c8, r0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d0f66261d1556400cc5854ad0e891426f3fdc0393b3d0731"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="77e9a76065f4a11a5cfd7b4dd52670ef"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0071ea54b56f6d7c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="036de686b01a1593aa917aa7fc4b73d5a583ee0f3371a1c7bf9b1614943c3386"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2dfe10e5ad3ba011"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6d26e70c413db0343605988a3c9c978d249dbb24d3ef74b1e5f1428f1fb508ed"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9c411d63353f5f7e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9a03b6e121931231"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f2231cc63b33fcc4b599d4460ff0a9c6"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1c385558f196cda6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a0a11353506fb72b1ce70b8632a5da43"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ac3f8e3d1b7a5b41e6bbda46dd8fcd62"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="09c630058f73237e58e24e6e9003da29"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9014280868c7b1c3abca5bfee894879f"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2902a9e1f008441485a8163b879f2550"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="55925b5b0869a923adedb545a01b7314ebdd2b068d51fc8cb9d96ff184ab7586"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5c03b0e6ae9b94b808a13e4362c952aa82e1b482b93343f3b7fbe9030d441161"}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '@:\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000880)={&(0x7f0000000700), 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xd8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc59}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf27}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4278}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4050}, 0x10) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x2000000, 0x4000010, r1, 0x8000000) r3 = syz_io_uring_complete(r2) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x326d}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x8014) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x6b10003}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r0, 0x305, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x1000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xe046}, 0x4c001) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000bc0)=0x9, &(0x7f0000000c00)=0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xb4, r0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x6, 0x4}, {0xe5, 0x1}, {0x1, 0x2}, {0x2}, {0x2, 0x3}, {0x6, 0x7}, {0x6}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x4}, {0x0, 0x5}, {0x9, 0x4}, {0x9, 0x7}, {0x3, 0x1}], "167cad30f709e2a1"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "86ae0c3c6b291be8"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x1}, {0x7f, 0x5}, {0x9, 0x4}, {0x81, 0x6}, {0xfd, 0x1}, {0x2, 0x7}, {0x7, 0x6}, {0x5, 0x7}, {0x7, 0x2}, {0x9, 0x5}, {0x9, 0x6}], "34b6461fbb817be3"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x6}, {0xf8, 0x5}, {0x4, 0x5}], "5170d3ec42cbff3d"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x0, 0x4}, {0x69, 0x4}, {0xff, 0x2}, {0x4, 0x80}, {0x5, 0x2}, {0x2, 0x7}, {0x0, 0x3}, {0x13, 0x1}, {0x1, 0x4}, {0x3, 0x4}, {0x3f, 0x1}, {0xfe, 0x7}, {0xfb, 0x3}, {0xdb, 0x3}, {0x3}, {0x40, 0x7}, {0x20, 0x6}, {0x1, 0x4}, {0x56, 0x6}, {0x9, 0x3}], "50bd13f677ad23f4"}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24000844}, 0x80) r6 = socket(0x2a, 0x4, 0xffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r5) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x64, r7, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1dc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x159}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x64}}, 0x800) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x88, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x4004805) 05:25:36 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r1 = socket(0x22, 0x1, 0x7) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40018}, 0x8080) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000240)='/dev/zero\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048844}, 0x40000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000dc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6010010}, 0xc, &(0x7f0000000d80)={&(0x7f0000000580)={0x7f4, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x25, 0x33, @mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_b, @device_b, @initial, {0x5, 0x40}}, @addba_resp={0x3, 0x1, {0x7, 0x4f, {0x1, 0x0, 0x6, 0x7f}, 0x1}}}}, @NL80211_ATTR_FRAME={0x3ec, 0x33, @mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @device_b, @from_mac=@device_b, {0x8, 0x1f}}, @ver_80211n={0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x80, 0x5c, @random, @val={0x1, 0x1, [{0x48, 0x1}]}, @void, [{0xdd, 0x8e, "55e439c2c377e6b2f229a5ccf109ceafa97d7a2f694ae974abd084d49fe0bf23afd3cfc28bd9f23013ea4728fe0b7cc2360e1728d72d215e3214472c67cf505827c60eb16adc3e3b275ca9a7d3c91d97f749a3e6c75d983241e7869da2417cc62088d76c7e2d8750a5883f6609867ed5c50886b5f9e1239bc3d04b7f3f211e0e28586991616b3f1c0445be3169f4"}, {0xdd, 0xb7, "21c7b6e194443757369661fc1e32929b50b7df0dc3d61f215b0d6b637c45c95f4ccf63c0ad5743fbbb32efedffed0fe9f8025171179252baf69c62e05a708636bf38d5d0ae2354819edefebe96b36284299074ef1ce272f9a5fb2df78d8b7229420a1eaf56043104d58c215010101e9e2dc9efcf286d9a8ef34b77a39c19d25ee3269c3259a5d857674cda5bb04cc89c4abc796b1d5dcd06877b4868444738baa6e41f8a2730fdd7868b87f586363d7fae5e3818cb8150"}, {0xdd, 0xdc, "fc074b0e6c6a96c21976525b5c1833762091879f6c66b1b1e8ab095af0852a23012ec6134913e5f45ca5577fbb8658bda695dae51e31c92a6dda644867518d5c795e57d89fd20e4f5ef38f74b3a75ea3a2646b0bb264d0b659f9ceb7e0da810a1802d567b8069460da8e6aeeaf09c2a0e7e3751b5344718067a60239606c5f0915fc014590ef46404ec3eb58981391750994dc4f645c3721273797011459453cd4cab43e2e8929528a2e5de7323709df7d57e6110c178adb76d06205bf1e7ad6dfc4b9f9cc5270a842e80a15e1cc45c5781402c07fbf4c4dc1dd1f1c"}, {0xdd, 0x92, "56a9788971bade757147f1207236fb3050668cc2f74f80b691c21006ab991196708e336af1389c464e80990712736a801c289aeec56351a35985915d054e86bdff682a5f3749eae0e01b32957e05c10affc3e2edeac31ce2a88035978892a5cd80bbb1129d1b2d49f2029afcc27b7b98b9c348aeaf0065e1bfba3a32ca9c105106766c810202fb07b77db79100f8c7611fac"}, {0xdd, 0x35, "8740de01de0816bb93374928aa6d614be05cca267a48c99dfd31b7df49361a106de959d8a2ba02075dded1c3defe5c78a38623ee03"}, {0xdd, 0xcf, "594befa638f2fc47da7e4008604d047c098e447542f99caf7058e6ed9b2328a6007b5069c3dfb2c9e2c454c1195a7a5ccfd869a7a5d38488f73ff8221d7000749ee23c3b14402becf6e36fea6064d3936cdbf65d48f3183420918bd541181437b06f9db8c19e43888f6666361da906a1a066b6f7bfc5b3c12447783f8bdf36355db5d3985b187628d393a75a4b388f63858c3d5367082925a569000232a76694601931557641e84f1cca8b810bcd1c4cb7d14494c10f561a199628fa360c968fe3cf877297fd0bee68b3adf0628611"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x386, 0x33, @data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @from_mac=@device_b, @device_b, {0x9, 0xff7}}, {0xa, 0x1, 0x2, 0x0, 0xff}}, {@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x20}, @broadcast, @broadcast, @random="7215cde31e11", {0xb, 0x4}}, {0xb, 0x1, 0x1, 0x1, 0x6d}}}, @ver_80211n={0x0, 0x3, 0x3, 0x3}}, @random="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"}}]}, 0x7f4}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e00), 0xffffffffffffffff) r3 = socket(0x27, 0x80000, 0x1) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000f40)={'batadv_slave_1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xf5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x80890) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xc8, r5, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x5d}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a1686d68b17ec9bbe4f97bf3cdbd9670a9c758f4e66f9290"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f203a5da679683176290802e219b0f81ea90ee2b09e9382d"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040000}, 0x4800) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001280), 0x204000, 0x0) fspick(r6, &(0x7f00000012c0)='./file0\x00', 0x1) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f00000017c0)={&(0x7f0000001300), 0xc, &(0x7f0000001780)={&(0x7f0000001340)={0x440, 0x3f4, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x39, [0xac, 0x0, 0x3, 0x6, 0x7, 0x5, 0x4, 0x4, 0x9, 0xfffffffd, 0xfffffffb, 0x7, 0x0, 0x3, 0x3, 0x5, 0x10001, 0x3f, 0x3, 0x9, 0xf159, 0x1f, 0x3f, 0xf5e7, 0x3ff, 0x5, 0x6, 0x20, 0x0, 0x1, 0x0, 0x0, 0x4, 0x5, 0x18a7879c, 0x4231, 0xfffffffb, 0x7, 0x8, 0x6, 0x1, 0x1, 0xfb8a, 0x3, 0xf5, 0x1f, 0x7, 0x5, 0x8, 0x6, 0x10001, 0x9, 0x80000000, 0x401, 0x8, 0x6, 0x6, 0x780, 0x5, 0x9, 0x6, 0x9, 0xff, 0x4], [0xd1, 0x2, 0x7f, 0x3, 0x3ff, 0x80000001, 0x3ff, 0x6, 0x3, 0x1000, 0x9, 0xef5, 0xabb4, 0x1, 0x8, 0x3ff, 0x3, 0x3f, 0x7, 0x1, 0x40, 0x0, 0x401, 0x80000000, 0x3, 0xff, 0x56, 0x0, 0x400, 0x0, 0x20, 0x15c, 0x2, 0x0, 0x80000000, 0x8, 0x7, 0x2, 0x5, 0x8, 0x8001, 0x3f, 0x400, 0x0, 0xffffffac, 0x10001, 0x9, 0x0, 0x401, 0xfff, 0x4, 0x5, 0x5, 0xe5d, 0xda4, 0x10000, 0x3ff, 0xc1c, 0x1, 0x52, 0x100, 0x9, 0x6, 0x1], [0x1, 0x4, 0x20, 0xc976, 0x3, 0xccda, 0x3, 0x8, 0x70, 0x80000000, 0x81, 0x4, 0x47, 0x2a50, 0x2, 0x7fff, 0x8, 0x6, 0xffffffff, 0x8, 0x96fc, 0x6c82, 0x7ff, 0x9, 0x7d5, 0xffffffff, 0x4, 0x101, 0xee, 0x1, 0x8, 0x1000, 0x3, 0x8, 0xff, 0xffff7896, 0x10001, 0x1ff, 0x5, 0x1, 0x5, 0x36, 0x40, 0x80000000, 0x1, 0x20, 0x4, 0x18, 0x800, 0x101, 0xc3e, 0x100, 0x3, 0x6, 0x0, 0x4, 0x1, 0x1f, 0x6, 0x8, 0x20, 0x2, 0x5], [0x1, 0x167, 0x100, 0x1, 0x0, 0x2, 0x3, 0x8, 0x3445, 0x3ff, 0x9, 0x6, 0x3ff, 0x9, 0x3, 0x4, 0xffffffff, 0x8, 0x0, 0x40, 0x3f, 0x3, 0x3f, 0x5, 0x7ff, 0x1, 0x9c, 0xfffffffa, 0x26, 0x6, 0x4, 0x0, 0x2, 0x8000, 0x80000000, 0x80, 0xfffffff9, 0x3, 0x9, 0x84, 0x16f568d9, 0x5, 0x3, 0x800000, 0x90, 0x800, 0x8dd, 0x80000001, 0x200, 0x3, 0xf7, 0x1, 0x6, 0x4, 0x8, 0x0, 0x2, 0xfffffc00, 0xfffff800, 0x7, 0x100, 0x40, 0x3, 0x7fff], 0x20, ['$\x00', '\x03\x03\x03\x03\x03\x03', '\x00', 'nl80211\x00', 'batadv_slave_1\x00']}, ["", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x20008080}, 0x880) [ 79.480196] audit: type=1400 audit(1734240336.482:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:25:36 executing program 7: r0 = inotify_init1(0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000400) inotify_rm_watch(r0, r1) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x180, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffe01}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f2e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000802) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x44}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048084}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r4, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x77}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = inotify_add_watch(r0, &(0x7f0000000900)='./file0\x00', 0x1000962) inotify_rm_watch(r0, r5) inotify_rm_watch(r0, r5) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008805}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r3) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4091) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xa0, r8, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffff8001}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x20004804) 05:25:36 executing program 6: sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x120, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="f1bc8e358a9c"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x48811) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/cpuid', 0x2040, 0x100) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)=']!\'\x00', 0x0, r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0xc0, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x65}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x230}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x93f4f4d33f58a63a}, 0x4) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000884}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x5e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c004}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x80010) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r5, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc041}, 0x4008080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r1) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x6c, r8, 0x1, 0x70bd29, 0x7f, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000400}, 0x4004000) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1e, 0xa}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x48840) [ 81.027032] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.029746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.031932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.036778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.040630] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.042944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.094827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.098522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.106677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.121581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.131666] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.135215] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.139585] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.143592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.145517] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.151462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.154587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.156520] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.216484] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.219209] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.221054] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.227390] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.232757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.234385] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.245582] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.247712] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.260535] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.262403] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.271722] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.274016] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.280114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.282991] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.285588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.295584] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.297973] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.299880] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.304829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.308432] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.317063] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.318709] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.320878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.326472] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.328642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.331309] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.333099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.336531] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.338508] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.340792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.110966] Bluetooth: hci0: command tx timeout [ 83.174290] Bluetooth: hci1: command tx timeout [ 83.238473] Bluetooth: hci2: command tx timeout [ 83.365288] Bluetooth: hci5: command tx timeout [ 83.366262] Bluetooth: hci7: command tx timeout [ 83.429355] Bluetooth: hci4: command tx timeout [ 83.429943] Bluetooth: hci6: command tx timeout [ 83.430531] Bluetooth: hci3: command tx timeout [ 85.157609] Bluetooth: hci0: command tx timeout [ 85.221454] Bluetooth: hci1: command tx timeout [ 85.286599] Bluetooth: hci2: command tx timeout [ 85.413606] Bluetooth: hci5: command tx timeout [ 85.414571] Bluetooth: hci7: command tx timeout [ 85.477322] Bluetooth: hci3: command tx timeout [ 85.478278] Bluetooth: hci6: command tx timeout [ 85.479022] Bluetooth: hci4: command tx timeout [ 87.207272] Bluetooth: hci0: command tx timeout [ 87.269254] Bluetooth: hci1: command tx timeout [ 87.333323] Bluetooth: hci2: command tx timeout [ 87.461413] Bluetooth: hci5: command tx timeout [ 87.462391] Bluetooth: hci7: command tx timeout [ 87.525322] Bluetooth: hci4: command tx timeout [ 87.526343] Bluetooth: hci3: command tx timeout [ 87.526394] Bluetooth: hci6: command tx timeout [ 89.253210] Bluetooth: hci0: command tx timeout [ 89.317231] Bluetooth: hci1: command tx timeout [ 89.381340] Bluetooth: hci2: command tx timeout [ 89.509363] Bluetooth: hci7: command tx timeout [ 89.509861] Bluetooth: hci5: command tx timeout [ 89.573279] Bluetooth: hci6: command tx timeout [ 89.573394] Bluetooth: hci4: command tx timeout [ 89.573762] Bluetooth: hci3: command tx timeout [ 140.773339] syz-executor.4 (283) used greatest stack depth: 23696 bytes left [ 143.557663] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.560789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.563745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.565665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.567920] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.570235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.576800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.580212] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.583337] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.585793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.588005] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.594399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.613080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.631499] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.633495] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 143.635466] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.639535] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.643582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.645829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.653011] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 143.656256] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.661404] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.663313] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.664998] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 143.666160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.667627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 143.668656] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 143.670839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 143.672105] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 143.673033] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 143.677414] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 143.682289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.683725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.686442] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.688291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.694302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.695089] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.699164] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 143.699925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.705006] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.706431] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.707916] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 143.708917] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.734302] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 143.734338] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 143.744978] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.751639] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 143.754591] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.639208] Bluetooth: hci0: command tx timeout [ 145.701227] Bluetooth: hci1: command tx timeout [ 145.765619] Bluetooth: hci4: command tx timeout [ 145.766519] Bluetooth: hci6: command tx timeout [ 145.829485] Bluetooth: hci7: command tx timeout [ 145.830628] Bluetooth: hci3: command tx timeout [ 145.830664] Bluetooth: hci2: command tx timeout [ 145.896187] Bluetooth: hci5: command tx timeout [ 147.685479] Bluetooth: hci0: command tx timeout [ 147.749238] Bluetooth: hci1: command tx timeout [ 147.813540] Bluetooth: hci4: command tx timeout [ 147.814887] Bluetooth: hci6: command tx timeout [ 147.877329] Bluetooth: hci2: command tx timeout [ 147.878223] Bluetooth: hci7: command tx timeout [ 147.878245] Bluetooth: hci3: command tx timeout [ 147.941223] Bluetooth: hci5: command tx timeout [ 149.734356] Bluetooth: hci0: command tx timeout [ 149.800170] Bluetooth: hci1: command tx timeout [ 149.862200] Bluetooth: hci6: command tx timeout [ 149.862346] Bluetooth: hci4: command tx timeout [ 149.925306] Bluetooth: hci2: command tx timeout [ 149.925348] Bluetooth: hci3: command tx timeout [ 149.926559] Bluetooth: hci7: command tx timeout [ 149.989208] Bluetooth: hci5: command tx timeout [ 151.781322] Bluetooth: hci0: command tx timeout [ 151.845573] Bluetooth: hci1: command tx timeout [ 151.909221] Bluetooth: hci4: command tx timeout [ 151.909362] Bluetooth: hci6: command tx timeout [ 151.973245] Bluetooth: hci7: command tx timeout [ 151.974231] Bluetooth: hci2: command tx timeout [ 151.974349] Bluetooth: hci3: command tx timeout [ 152.037243] Bluetooth: hci5: command tx timeout [ 205.372055] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.376296] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.377656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.381954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.385584] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 205.386776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.484008] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.485723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.490291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.497504] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.500561] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 205.501764] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.585022] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.588347] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.590822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.595076] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.597649] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 205.599554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.727009] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.730458] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.732435] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.736378] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.738356] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 205.739928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.749894] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.778791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.781547] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.786454] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.792845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 205.812091] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.957589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.961950] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.968407] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.977752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.983013] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 205.985034] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 206.013422] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 206.014564] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 206.014695] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 206.018546] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 206.019874] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 206.022881] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 206.025255] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.025742] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 206.028391] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 206.073387] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 206.086450] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 206.096417] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.462225] Bluetooth: hci0: command tx timeout [ 207.591355] Bluetooth: hci1: command tx timeout [ 207.653211] Bluetooth: hci2: command tx timeout [ 207.845193] Bluetooth: hci3: command tx timeout [ 207.845238] Bluetooth: hci4: command tx timeout [ 208.102244] Bluetooth: hci5: command tx timeout [ 208.102330] Bluetooth: hci7: command tx timeout [ 208.230208] Bluetooth: hci6: command tx timeout [ 209.512128] Bluetooth: hci0: command tx timeout [ 209.637276] Bluetooth: hci1: command tx timeout [ 209.702241] Bluetooth: hci2: command tx timeout [ 209.893183] Bluetooth: hci4: command tx timeout [ 209.895069] Bluetooth: hci3: command tx timeout [ 210.149499] Bluetooth: hci7: command tx timeout [ 210.149546] Bluetooth: hci5: command tx timeout [ 210.279384] Bluetooth: hci6: command tx timeout [ 211.557283] Bluetooth: hci0: command tx timeout [ 211.686192] Bluetooth: hci1: command tx timeout [ 211.749325] Bluetooth: hci2: command tx timeout [ 211.941183] Bluetooth: hci3: command tx timeout [ 211.941213] Bluetooth: hci4: command tx timeout [ 212.197174] Bluetooth: hci5: command tx timeout [ 212.198341] Bluetooth: hci7: command tx timeout [ 212.325341] Bluetooth: hci6: command tx timeout [ 213.605233] Bluetooth: hci0: command tx timeout [ 213.733418] Bluetooth: hci1: command tx timeout [ 213.797481] Bluetooth: hci2: command tx timeout [ 213.989305] Bluetooth: hci4: command tx timeout [ 213.989323] Bluetooth: hci3: command tx timeout [ 214.245271] Bluetooth: hci7: command tx timeout [ 214.245300] Bluetooth: hci5: command tx timeout [ 214.373225] Bluetooth: hci6: command tx timeout [ 267.828868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.831503] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.835665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.847945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.852885] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 267.856703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.022378] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.024790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.027588] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.035512] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.046752] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 268.048959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.086573] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.091795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.099703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.104699] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.113593] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 268.117800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.168594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.170954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.177725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.190608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.200593] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 268.204276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.252482] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.260579] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.267483] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.282378] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.300336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.305754] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 268.308617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 268.311037] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 268.317301] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 268.321659] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 268.323055] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 268.325855] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 268.326299] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.327642] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 268.330638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 268.333736] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 268.333903] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.350936] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.373801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.378549] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 268.388581] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 268.395425] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 268.399845] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 268.412477] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.925235] Bluetooth: hci0: command tx timeout [ 270.118256] Bluetooth: hci1: command tx timeout [ 270.181225] Bluetooth: hci2: command tx timeout [ 270.245296] Bluetooth: hci3: command tx timeout [ 270.373258] Bluetooth: hci6: command tx timeout [ 270.373313] Bluetooth: hci4: command tx timeout [ 270.502469] Bluetooth: hci5: command tx timeout [ 270.502578] Bluetooth: hci7: command tx timeout [ 271.975382] Bluetooth: hci0: command tx timeout [ 272.165332] Bluetooth: hci1: command tx timeout [ 272.229223] Bluetooth: hci2: command tx timeout [ 272.293218] Bluetooth: hci3: command tx timeout [ 272.421269] Bluetooth: hci6: command tx timeout [ 272.421288] Bluetooth: hci4: command tx timeout [ 272.549219] Bluetooth: hci7: command tx timeout [ 272.550441] Bluetooth: hci5: command tx timeout [ 274.021217] Bluetooth: hci0: command tx timeout [ 274.213496] Bluetooth: hci1: command tx timeout [ 274.277209] Bluetooth: hci2: command tx timeout [ 274.341185] Bluetooth: hci3: command tx timeout [ 274.469319] Bluetooth: hci4: command tx timeout [ 274.469376] Bluetooth: hci6: command tx timeout [ 274.597240] Bluetooth: hci5: command tx timeout [ 274.597671] Bluetooth: hci7: command tx timeout [ 276.070254] Bluetooth: hci0: command tx timeout [ 276.262225] Bluetooth: hci1: command tx timeout [ 276.327107] Bluetooth: hci2: command tx timeout [ 276.390144] Bluetooth: hci3: command tx timeout [ 276.518666] Bluetooth: hci4: command tx timeout [ 276.518758] Bluetooth: hci6: command tx timeout [ 276.645289] Bluetooth: hci7: command tx timeout [ 276.645307] Bluetooth: hci5: command tx timeout [ 330.099509] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.101950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 330.103678] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 330.107944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 330.110523] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 330.112530] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 330.230994] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.235490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.237659] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.244511] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.249691] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 330.253657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.290921] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.296751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.298979] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.305213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.310028] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 330.314196] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.369609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.376175] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.377974] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.394321] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.396517] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.398603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.407277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.417120] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 330.422727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.473192] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.481344] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 330.485507] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 330.487032] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 330.491414] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 330.494549] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 330.495976] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 330.497728] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 330.497798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.501554] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.503642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 330.507715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 330.519489] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 330.525567] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 330.544711] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 330.550710] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 330.558243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 330.573222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 330.583735] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 330.585446] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 330.592572] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.133891] Bluetooth: hci0: command tx timeout [ 332.325236] Bluetooth: hci1: command tx timeout [ 332.389245] Bluetooth: hci2: command tx timeout [ 332.517381] Bluetooth: hci3: command tx timeout [ 332.581182] Bluetooth: hci7: command tx timeout [ 332.645239] Bluetooth: hci4: command tx timeout [ 332.646166] Bluetooth: hci6: command tx timeout [ 332.646870] Bluetooth: hci5: command tx timeout [ 334.182175] Bluetooth: hci0: command tx timeout [ 334.374202] Bluetooth: hci1: command tx timeout [ 334.438159] Bluetooth: hci2: command tx timeout [ 334.565200] Bluetooth: hci3: command tx timeout [ 334.629232] Bluetooth: hci7: command tx timeout [ 334.693336] Bluetooth: hci6: command tx timeout [ 334.693374] Bluetooth: hci5: command tx timeout [ 334.694361] Bluetooth: hci4: command tx timeout [ 336.229172] Bluetooth: hci0: command tx timeout [ 336.421185] Bluetooth: hci1: command tx timeout [ 336.486123] Bluetooth: hci2: command tx timeout [ 336.613184] Bluetooth: hci3: command tx timeout [ 336.678204] Bluetooth: hci7: command tx timeout [ 336.741252] Bluetooth: hci5: command tx timeout [ 336.742195] Bluetooth: hci6: command tx timeout [ 336.742271] Bluetooth: hci4: command tx timeout [ 338.277161] Bluetooth: hci0: command tx timeout [ 338.469194] Bluetooth: hci1: command tx timeout [ 338.533260] Bluetooth: hci2: command tx timeout [ 338.661220] Bluetooth: hci3: command tx timeout [ 338.725236] Bluetooth: hci7: command tx timeout [ 338.789204] Bluetooth: hci6: command tx timeout [ 338.789248] Bluetooth: hci5: command tx timeout [ 338.790138] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 05:30:44 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=000000000000000a RCX=ffffffff8159e5ec RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff863fbe90 RBP=ffffffff85a0b108 RSP=ffff88806ce09f78 R8 =0000000000000000 R9 =fffffbfff0c7f7d2 R10=ffffffff863fbe97 R11=0000000000000003 R12=0000000000000101 R13=0000000000000009 R14=0000000000000200 R15=0000000000000009 RIP=ffffffff813a96c7 RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1b7a7fd000 CR3=00000000333d2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080010000 RBX=1ffff1100d9e13a6 RCX=ffffffff8163489e RDX=ffff88803412b780 RSI=ffffffff81634a56 RDI=ffff88803412b7ec RBP=ffff88803412b780 RSP=ffff88806cf09d28 R8 =0000000000000000 R9 =fffffbfff0efaee1 R10=0000000000000000 R11=00000000fa83b2da R12=0000000000000000 R13=ffff88802fa5c380 R14=ffff88806cf2d740 R15=ffffffffffffffff RIP=ffffffff81634a5a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8f6a415540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564166b572b0 CR3=0000000014f9e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000