Warning: Permanently added '[localhost]:35565' (ECDSA) to the list of known hosts. 2024/12/19 11:51:23 fuzzer started 2024/12/19 11:51:23 dialing manager at localhost:44037 syzkaller login: [ 76.748115] cgroup: Unknown subsys name 'net' [ 76.857767] cgroup: Unknown subsys name 'cpuset' [ 76.871494] cgroup: Unknown subsys name 'rlimit' 2024/12/19 11:51:48 syscalls: 200 2024/12/19 11:51:48 code coverage: enabled 2024/12/19 11:51:48 comparison tracing: enabled 2024/12/19 11:51:48 extra coverage: enabled 2024/12/19 11:51:48 setuid sandbox: enabled 2024/12/19 11:51:48 namespace sandbox: enabled 2024/12/19 11:51:48 Android sandbox: enabled 2024/12/19 11:51:48 fault injection: enabled 2024/12/19 11:51:48 leak checking: enabled 2024/12/19 11:51:48 net packet injection: enabled 2024/12/19 11:51:48 net device setup: enabled 2024/12/19 11:51:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/19 11:51:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/19 11:51:48 USB emulation: enabled 2024/12/19 11:51:48 hci packet injection: enabled 2024/12/19 11:51:48 wifi device emulation: enabled 2024/12/19 11:51:48 802.15.4 emulation: enabled 2024/12/19 11:51:48 fetching corpus: 0, signal 0/0 (executing program) 2024/12/19 11:51:50 starting 8 fuzzer processes 11:51:50 executing program 0: write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', 'c', ':', '1b', ':', '1a', '.', 'b'}}, 0x15) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000040)=""/28) r0 = socket(0x21, 0x5, 0x100) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x66a}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x26c, 0x0, 0x1803, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2e}]}, @NL80211_ATTR_CQM={0x88, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x9, 0x0, 0x2, 0x10001, 0x90b, 0x9a, 0x9]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x36}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0xffffffe1, 0x3, 0x80000001, 0x7, 0x6, 0xff, 0x2, 0x3]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xff}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1ff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x673f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x22}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5b0}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x300}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x9, 0xfffffffa, 0x0, 0x0, 0x1, 0x0]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x12e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x89}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x152}]}, @NL80211_ATTR_CQM={0x7c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x40, 0xfffffff7, 0xfd1d, 0x4]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8001, 0x9, 0x0]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3ff, 0x7, 0x2, 0x2, 0x3, 0xe2cc]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c0}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3ff, 0x7, 0x12]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}]}]}, 0x26c}}, 0x40) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040010}, 0x14) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x6) syz_io_uring_setup(0x1f07, &(0x7f0000000740)={0x0, 0x3d0b, 0x1, 0x1, 0x125}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) r2 = epoll_create1(0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000880)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r2, &(0x7f0000000840)={0x88894a957249c4a6}}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10044}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, 0x0, 0x8, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x100}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) ioctl$TCSBRK(r4, 0x5409, 0x178b) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x7c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff9}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x2c, 0x2a, [@dsss={0x3, 0x1, 0x8}, @ssid={0x0, 0x2, @random="e2df"}, @channel_switch={0x25, 0x3, {0x0, 0x3a, 0x1}}, @ht={0x2d, 0x1a, {0x4000, 0x2, 0x5, 0x0, {0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x81, 0x3}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xcf}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4b19332fcceb"}]}, 0x7c}}, 0x4c814) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000b80)={0x1, 0x1, 0x7f}) 11:51:50 executing program 1: sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xdc, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x7c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x77, 0x80, [@supported_rates={0x1, 0x8, [{0x60, 0x1}, {0x60}, {0x3}, {0x6, 0x1}, {0x30, 0x1}, {0x60}, {0x3, 0x1}, {0x799c0df25d74ba26, 0x1}]}, @fast_bss_trans={0x37, 0x60, {0x41, 0x2, "2f58f25ebe9a473552590b369169b4f1", "519f68e67600d7488eedb9e75b65c7ea67531bcd2fa8d09faee895ab2dd71928", "b062f26c639deeee7468bc2fa8186fb1eb580f54974f1e572fdca2fb1811be28", [{0x4, 0x6, "0baa51878d52"}, {0x2, 0x4, "835be33f"}]}}, @measure_req={0x26, 0x5, {0x8, 0x8, 0x0, "a30d"}}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2c}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x55}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x4410) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x8e, 0xc5, "c3691fbcde9e1356fc3c8b2f0da28f76c63f83959f18e7877023a42460f1948257a6ad374fb2058a1be92023c0d8a25a209894f42aa2d6f321169e26d27a913221af80a377cde4e2154aab4b4266c6c5e1efdb05b1e32ef3f86873ff510839ac571163786253fe0235d4d90b91caf2e7a84040a65482d7f55aa25a2e8e0078bd020b09a95edaac6c93fe"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}]}, 0xbc}}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8304008}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x374, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_SCAN_SUPP_RATES={0x304, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xf9, 0x1, "4a0be0d08fbf15aa3277f3b92b8ec3b5b6a8899f488b7cab009e64007e7616ce1eab62bcea1ba272f0b2397a40b6904a86e01640f46da10c10c1ad53d415e67b34abc0007a6b2a7a1e810fd0868237417c9974cb4dd2209d8391fddf5679197fee15e6a28b68a44f9190e757e7670e38e2c5c6c24fd072a79552542b08e733c60af9666864e86f21acade039519999aaca448f5d9c306576c86a6a3bde59d941c2105a82112d2b5a277bd25e294a75c806f4a62f349af501e8ff302a981c9f8c915e143d45d2fa4d1ad948328ee9b10f7b2558dc43b94ea05c07c5285237ff36024b153bb702d3cd289907258c75351ff51679f566"}, @NL80211_BAND_2GHZ={0x1a, 0x0, "21acd4979f27d7f0c58a6c3101e24a1c0aa253d733fb"}, @NL80211_BAND_6GHZ={0xdd, 0x3, "d2ed563a743da84c6a16875caefcc1acdabf5493e1431dd3230ff073e0d0de387580af3d0ac1cf93523616ace916f7199ab82c5fb3a0ad1a13a7002944e15d6d99ebcd68a6b6087cc205e6b931a9ece57699c01d2dedf80890462d987c42a44f2bbfb5350bb8d9fc90908872fe1101d5fdc27f7277ece1898de7a38d5b9307be6243c24b060bcc2acbcc79c532d56914488b1215b67e451f9f22b2eb5f34f45c1f5290efd2b03284221f17571e928799f837bcd83bbb630e8635d19eba91c7a9efa7bd3376c08e626e11872f013b1d66bb345a599aa7afb948"}, @NL80211_BAND_60GHZ={0xa7, 0x2, "784da36c41bef152d81bc63eac9e49152ec01034af038d4648c7439d3430993d7408ef0ada8426352c4507a474532e327125c4e4ed0149173f20e30e54561d4967408b29c1678040050efa58751de578c9d4611483d3f95609a9cb9104d6d89806036e237370b497a3651e87d0b804f7089f10de8694347abe336a8e8502bc2697e515fdc09ba303c7273ca8e98298e51640ddf82f76c249238370a7c8676bb20de6be"}, @NL80211_BAND_5GHZ={0x60, 0x1, "be39a7a407c6bd81dde45393d188430ea76541451205f50798d988f26c2f98c40db4095577c7d844eeb039e8d63abe6a66e7e5d9a6ee042e2f4a8be7e122ef29197f9b3a03a301e9569c88f6850f5a392cb2a1e5cb31a1932f269e96"}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xe8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xffff4cfb}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x81}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x374}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="2272f4a7e604be62eb"}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x73, 0x76}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x11) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x82) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000a00), 0x3, 0x82000) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r2) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x48, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x3, 0x16}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1000, 0x2, 0x1, 0x0, {0x4, 0x80, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x8, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20048011) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, r4, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r1, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048811}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r6, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x400c895) io_uring_setup(0xced, &(0x7f0000000f00)={0x0, 0x29c0, 0x2, 0x3, 0x1df}) 11:51:50 executing program 3: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'b', ' *:* ', 'w\x00'}, 0x8) r0 = syz_io_uring_setup(0x6bc8, &(0x7f0000000040)={0x0, 0xc4a0, 0x1, 0x1, 0x1e1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001140)={r2, 0x0, "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", "f94ac4451c9dcf1440ce211e30f2dc6b84203b2e972cfc9509d4ac543ccc44a6100dc0db23ce50865e516b0df322c216093147789d9d40eeb578e3765f4275cbc52de207c1ecc389d150a35313cfe74b7604943e022c3d652b2691403f43a7d088433c362df1e5b07e4ad39875449480bfc07008ec55c09316a524f8923f3da977331a2c539079b1675b2efe37bf09376ac7a61a05052caef93c334155ccb1f0a19aaaac6ca9a417fb3e7cc68cb12bc9fcf872d28c0027d4e0499307506654de8a3415524df432764fa2378dc514821b0818e935fb7186712409b7dd5f6043e2179d3d22ad142b508677a3090026a6307d5024af89c11b55b386b997a31c339e26b91acdc17c205d84eec28dd08003a3e5e8cfb35868f7acfd4cf068c45b798fbbcd69a90893ffe2a91d517aaaa76d765fa675a85e9abfd0142a1895a1ce3f33f788c1677f2ebd70eb08cf7b5f87092cfea5a27d9d7ec90ecca34cb42f49cf1676155f724e7f4a0ad621b09d990c26f2a885bf724604e5cc4f7e38f5a8782c46758c682746f69a488af72b015b614b1b394f9a0627da4d8482bed1864b0c2b6411df58472a60892e4f082b455d1add4bb7c74f5a98c11fd12e1bdc69f716d099ed55eaa3703c1ed5ce30c7745554be57ad79ce2541922196b6064624ae7d66bfba9a9e2f80e9550ea62cb417c5fd2dac634100cf99e4668c70bb8815aa29402acd79a62fc9cb741b3973dce9af9d3a1b5854a7ef4d985aab5de8568d378f4072d2ee732cee48f83996395bd0bb8bed6faab5e2cc0b6f8c7a082e21db0c1616187834425967399794d04faa70ba95e281268238af3853943c4cca85b3bb17870377c3eabe1a6d920adceec27ca70bb45436b143f79f4a1553de8375ec69deb236006961e240968b441dba8c2c186a8e3578bc0505c487e550c16e6d8a43d12d10491c565bf3eb641fd42611e4563357a169a51d5b7368c5b555e0486a8905ea668ef3fd7d4c7e719e1c02b452ad8b9790595e5dd6f930d0347bf32859b392fd368bc8a621b6bb4389f2e5057ee3b7b4d18661b5a335ac984f4bda6d0ae377eece470dee6c783dfb62cbed8114c6d6f23d223f4b322ff09f5565cd7a2d50037cc44f6ea7f5e47f0fa94e95761ba2b9ab488abc236f9d74b91c424e16bb30ff6d040de8d88fe036bf12f2ac382102b34794689de3cb1b838e4a1a89e74d8ced33093a4050fa2b58b0182a0e585633bfbb6ceb4776432712199056cc5787d8209a7021a05b4c8a9e2dbf7130fd1f94d65512dd7511bf7dff67a06e364f2dfa579d85be3a23853482f7d05890eacd124dfe2bb5eb9af4d9bcf930c220da412e2549cdb6c8186bdbbd729bd6067de276aff893ec4e654481314ac01d54f75ccadad20c1dc185a4cd94795a2ca6f484bbfeae378525cecefc033fc547c36c508b0e1bc6b1dfa8df04bfdbe757761fca24c1c2a5959668862e980f2a7ea856792b976fe0930ce2bb6e4ec66e852c41d0810e5b293d1d94e9870515c6b095b92499087966e329eca359f2836048f765dcb95dacd0450db8717447c330ce7ac1e34b43dd140d0fccad96909ec8bef77396ebc7088c5ee1309d9286040e01809b8fe673328e5a5f73648b1f4bb0cab29d1312c58f4526046c66bb161935ee920c0a36aaeecd461fcf79f9149337ef18a709c3ddd9c308f6e95cd8c9be439bde44a6e4995075efa0aab5616cc6d61f849d814ce37a807ffabfb7b6f011501f4cf2e7c029e6f8fd4d31a6db0d76687ba98110c6580f4ac822c74a2bb2e43bc99a313856e80ef754dc80c2b9602314ec59a8c283e2af846bcf3a1b47c97430c89fe1a9cf0f2751999314b405a0372c2c32fa0404c227c93ef0e2dcec3f834261ae85f5637f45e6f1e43f4aa4cb8f07abb6139cdc4dda00c798cd2250f141cf3ab5014853a72cf3de347a31af6faa8e1d508f88ba3d80ff545941fc9e36e503963924c39a678b57fa05d6141ca23052a3789c3e4992bcbd4a7dcf10d9453b8efee16ecd1280ca9d2eff944d9d7a290be126b40ebd7d3f576a2aeaeafc885eaec1d76634f7f6e6130458f015b589e2e952f3357766a0063cbc65e3d1c77bfd1da3760b75a2e7539b20da464a56e4af82811c6c86bd153bc36d0e0daea642ade49ecad77b6864decd85eca8fccd22823cccb36744855514c4e3efd05a7eb391e635c79ad6e8cdb0664d843a15d9b9654b3646815758c8a3149fffd796e64f605481248fc4ded6ce448ac494b0706699afe8553241f312b7cb0bc0b23b4ee491d6cb18069eabf7138bdf6f77d1e12bd899455a80260a154dc28a47baa8c9bf99283774c9bb1f291e130b3715b04b64a46a30d809a6d2f590c9758fee5e1a3268e1e75d9d3546c3f89fe6372028035da5848564bd272bbf5010abe670089460abf786a309ff519a924c6737d8817a9b511da5346e51fb008344f535f5839bb997e469ed831beb982e609c30ca6ff0122bc7d040891e3b322d7aa08d4102606f199d158d27a231ace382e33d8706c2397a9dfd46d49a584128e7c46e4980c58c661d1b10594cded6ca03648da432c64489b16ad249e7b9624d2f600d3bf106ea0a8497292d42813fc0a062d1a5b2a35cb8dcfe0234551dee219767520ec06254a2624a1a8e8929020a0ca78b826c9c71f97d3073da8a815a7c7f5a198bbf9b565ca038260350353267e6559efbc04801ebc65a3179cd7d46f35c04ee1301efcea60618b6cd6d2517db82adb4d99229a93a1497fbfa798321c3bf37b4597119452ce03987ad10cf58b22f44251720783eefc947162bc33dd299e6a5a83376b75f9fe856c9f709b886587e49cc4a1225cc0c3b5c062bcdada75579dd6b40a3b52ca02aa83e0e9c9e06cf5b7934dade7c897afbc4ca9ce42071044dadce27838f21e73b74637acc913f552d3fb484fe09a775b8105087bfece4138769475e6badc3622d277648ebce0dfe6d0aa75791d5b56d8ca103b0ea58bd032eae6f7f4bf5504056a6d57d9dbafcbca6840f4edbe2e4916e16b15f14de3dc6edfb78e6011f2e572e44ca4ac25831c0c903952f647901a193e6ba7e5c18d84606e52d34e10fa9566ceae9f658a34c8b7d20999e8368897e8f5c4bf7c17fdce2e7435ff02877bb80052c9e99a57197aca32faf863b9cf1de713bbaadb7261c1a3d76ffcee1df1267263d10d14bed5ce6a51dbb597fdb5ccacfc05f70c9fe494fcd0d382a64448dadf398f93c7290a6463cb0fe9344005bb0268f65653a5cef167a41e93d6f3f2880019fcdcaee7fb3bd6b84854fa11fe03e8d6fe3b575cc14834a6335381fb8a18bdfa6936c72581a45b0b733b74f7dd98a326db194841dfb879efb4ba9b800ef53831ac8a6e2973b3fe66b367642856fed3e9d7b70d6dee3e38015cd8f14684902ad7e70fe3deba9412a7a9faaac46a9dfc2018db10425a56121d73e86354f848638bc13fd009cd878a8d88be0d73dc785546f1e3f1347c5e3f2d02e5901d70aecc8aaead520c389e98a73c6cc8c9a7038b17906281a00ed1607bcbb6f2191f89217983f0ae2e98d0370db72bf17e2cbd8c158b7dd4e92e0b8ea9430bd494d8262e3858ecd95e1dacbfd81e7cb540e7ea144ef9273bf9354657ef00a6fac8a2d3beaad3c7535920f1e5aa0580ab5ae2ef1c817cb9108c019996314b8fb0701bec8955667ec6dfc2592cd16ad475debc4dce8e5d2601a19ad93221bf8d76c7b1e0333707c4e328aec5600d3d52a26417beb174eb6adc6539b89ecb493ba05646daa62a217480115331022359acb99bcdd0212fd0530ea22ff30aa72d90a5870a8d607394a78801123136bc82ed05cebbc10283b6dfe56bd9f07271858d7d5287e1e2c2aedbbfa0f036c67011f0a3ce56978037a0afeb35e8a76e40259c7ebbaf29f7d7bc3c9804cc0b7199ceb20e823338c79d1179c22ba3094e89d1053cec13838c2ab4e10819b1d5ed88333b325d3cc12bf2f7c504c72c3c20f5d710f420f8f84cde38838e55640f7952d76450c9e689f77a45af49c51ad4c95596f39e9c815552fd8e8167f64a6beb61e6e37d763cb8d89f4c731eab74bf2a00541118cea99b875e22245f1c060e94421af3dd8c72c449398d6b7aa21a06798ea1044694ec27d8ae518a52c7911070d720434d9e6a3fa1a45578c1416997e73586db9843a48bca9a66978880567afe8de29288831fada44b9cdce967b99c20eb771e6d14c3e3f2bf0e14f9691fc86725e8e9a5d4515bdbba89ac39addf284823590347385e716f6737848ea5c9fb5f183ad050d959ab5a00b2dc7ee26ade28e5823216f6daa6b498dcf1738fb33d96c747ee79196478ca7e1eb6157467e102f07dd348b30c094bda9049d14d55b4d35d529feaab34840fdd40ba338d26d47b3519c98d705318038b7ae3cde29541d270719871cb5a0d7ade6b637a9601d9153e7dbb88559c6af1218c25c12c583487487d196200a8cdea70856e2d94526ded94e915cc7050316f2cf0e0b4ab940fb08f1f4c6f2983f8a94557721654513741bc56d0b3697af38518231c5883aa86794209fcba5481631a17c07839235998acbe0b596a4a6352e4bc107005983d29a95e3e198284d37568de19ea8a3311be93b051894ffcaf0775fd2f09cd9ceee15ba1c0029f05088fa14fca3636ae98d4a27cb8d0675b56ba1eeeb84add9123919aabc29800c2c7ed2a7b68b25d5d7025bf1c44c540f10b574b7949de5715bb3e6114e12191af5a8c30ec7a8b7fb9e4c3f508e9c15b99c52c5bcc19e8ceff98a87e49f7185bb0a91aa524f53d0f70fbd3dbb385ae84854ed6382fbf637d3c6bff515869b018b516b85de8f680ecfd68792a5e69713a5af8e59c130403b381a3cbb0c50939efa30a47aba4cc4aa5df705d555782ade8e07ed6f637d6cf7860c04ca9389fd456f0225392d18b31c7cd42c496dd5322bb53e018c13c4c1f843f21fddac7a1d8d5dd0ebc8c62278b222faea6b84a6284ae6ebcac13ba686ca22b439285c3f3af17ba2c40bbcb65f05b2734c626d28d58464390c32a07d752c68d298752851f415387090b05abcb91a2973d448d11ca3facc4a6ca9c3890622b7d25e74b9805fa99925ce711c515838c363df351ba282859f010b9f37860f92149b533ec3fe94a9aa5351f3d0e9888cb39ddb18e007c0e1f26576da3721678ccc2be82ab2391fec7e90e194446e5d4e7e51d7eefdf2bb26314ce5292fe22c7ce42b23bd67cfe541c7eeef8c2eccd3780ea661f00ca8e86ba32bb0dc316988a2d4b2152ddc6eff47932fdf9b5519b51557a39e57b16f42829e35b13751ef75c6e1ff1da1d03e6b5236411da99469a69b3d69d1f92c3dd6e59361e7dd98d52ec26b62f5f35c796c1ae326755e17b3c8ec0f352954ee"}) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000002140)={0x2, 0x0, 0x3f, 0x8, 0x2, 0x1}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000002180), 0x42, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) getpeername$packet(r3, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002200)=0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x44, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x61}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x24000040) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x14, r4, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48041}, 0x40000) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x2c, r4, 0x21, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xa8, 0x31}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0c0}, 0x20040094) r6 = socket(0x25, 0x3, 0x3ff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), r3) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x5c, r7, 0x608, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1f}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xffff}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xc1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008050}, 0x8000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002780), r3) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x4c, r8, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xd4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xff}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xff}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x81}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x20040881) syz_io_uring_submit(0x0, r1, &(0x7f00000028c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000002900)={0xb59, 0x6, 0x4, 0x7f, 0x2, 0x8000}) 11:51:50 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x90080, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x8, 0x2f05}, {0x7, 0x80}]}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/4096) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_pts(r2, 0x2c0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000001100)) ioctl$TCSBRK(r1, 0x5409, 0x1) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000001140)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001180), 0xb8802, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f00000011c0)={0x1, 0x200, 0xa1, 0x9, 0x1, 0x7, 0x1, 0x7, 0x7, 0x2, 0x6, 0x10001, 0x3, 0x5}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_pts(r3, 0x54080) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000001200)) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000001240)={0x8, 0xfffffffe, 0x9, 0x57}) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000001280)) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000012c0)) [ 102.414031] audit: type=1400 audit(1734609110.070:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:51:50 executing program 4: sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0xc}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004010}, 0x8001) socketpair(0x26, 0x80000, 0x4, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x700, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe17}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x200400c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffff8, 0x63}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040000}, 0x40060) getpeername$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4080) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2000000}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcd}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5cfa88364256c771}, 0x40) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f00000006c0)={{0x3, 0x2, 0x6, 0x95ff, 0x0, 0x6}, 0x2cd, [0x1f1, 0x1, 0x0, 0x6, 0x8, 0x1, 0x3, 0x4, 0x60b, 0x4, 0x5, 0xffffffff, 0xe0, 0x7fff, 0xbdd4, 0x3ff, 0x63, 0x2, 0x312, 0xfffffffb, 0x401, 0x2, 0x5, 0x2, 0x1, 0x3, 0xfffffffd, 0x8, 0xfffff800, 0x4, 0x7, 0xffff740a, 0x4, 0x9, 0x1, 0x3ff, 0x0, 0x80, 0x8001, 0x3ff, 0x40, 0xfffffffe, 0x400, 0x3, 0x7, 0x4, 0x2, 0x7, 0xffff, 0x9, 0xbd8, 0x10000, 0x1, 0x7, 0x3, 0x2, 0x7fff, 0x6, 0x6, 0x3, 0x1, 0x194, 0x1, 0x3, 0x0, 0x45e1, 0x1, 0x7, 0xa1f, 0x5, 0x6c46dfdc, 0xab92, 0x100, 0xffffff00, 0x4, 0x6, 0x0, 0x1000, 0x48000, 0x39e, 0x7b, 0x3, 0x4, 0x1, 0x6, 0x5, 0x1, 0x8001, 0x5, 0x0, 0x2, 0x6e, 0x7fff, 0xc36, 0xffffffff, 0x7, 0x8, 0x1, 0xbd, 0x8, 0x8000, 0x2, 0x2, 0x4, 0x7fffffff, 0x8, 0xfffffffa, 0x3, 0x8, 0x5, 0x703af4fd, 0xfff, 0x5, 0x100, 0x1, 0x9802, 0x9, 0x5, 0x0, 0x100, 0x1, 0x8, 0x7, 0x3, 0xc3, 0x0, 0xfffffffa, 0x8000, 0x4, 0x1000, 0x9, 0x4, 0x53c2, 0x2, 0xffffffff, 0xb3, 0x9, 0x1f, 0x5, 0x8000, 0x6, 0xffffffff, 0x7, 0x4f43, 0x5, 0x80000001, 0x6, 0x1, 0x2, 0x7, 0x100, 0x7, 0x80000000, 0x5, 0x9, 0xd452, 0x3, 0x1, 0x5e78, 0x1, 0x2f0, 0x5, 0x3, 0x8, 0x0, 0x3, 0x0, 0x8001, 0x2, 0x0, 0x7f, 0x80, 0x711f, 0x6, 0x0, 0x851, 0xc7f, 0x3, 0xff, 0x0, 0x9, 0x5, 0xffffffff, 0x3, 0xeb88, 0x4, 0x6, 0xc09, 0xfffffff9, 0x3ff, 0x5, 0x2, 0x1, 0x2, 0x577, 0x5, 0x1, 0x1, 0xfffffc01, 0x2, 0x80000000, 0x3, 0x1, 0x7f, 0x7, 0x2800, 0x359a5f45, 0x3, 0xff, 0x7, 0x0, 0x0, 0x8, 0xe45, 0x42, 0x6, 0xcacb, 0x8, 0x1000, 0x7, 0x1f, 0x8, 0x3, 0xfffffffc, 0x6, 0x0, 0x20, 0x0, 0x7, 0xc15b, 0x0, 0x5801, 0x0, 0x408, 0x80000000, 0x1000, 0x8001, 0x0, 0x3, 0x9, 0xbbfc, 0x20, 0xfffff4b8, 0x6, 0xff62c1ba, 0x43f, 0xfffffffb, 0x8000, 0x3, 0x1f, 0xbb, 0x2, 0x80000000, 0xe90, 0x800, 0x8001, 0x8, 0x101, 0x1a, 0xfffffffc, 0x5, 0x8, 0x5, 0x0, 0x2, 0x81, 0x7, 0x6, 0x8000, 0x5, 0x0, 0x0, 0x7, 0x456, 0x0, 0x9, 0x8001, 0x22, 0x3, 0x9, 0x600000, 0x6, 0x2, 0x4, 0x3, 0x3, 0x9, 0x3, 0x1f, 0x3, 0xfffffff8, 0x8000, 0x4, 0x400, 0x3e8c, 0x88a, 0x2, 0x0, 0x81, 0x2, 0x8, 0xff, 0x7fffffff, 0x9, 0x7ff, 0x80000001, 0x7ff, 0x357c0001, 0x8000, 0x9, 0x3, 0x1, 0x0, 0x80, 0x1, 0x5, 0x20, 0x40, 0x8, 0x200, 0x8, 0x6, 0x4ba0f12a, 0x1ff, 0x8, 0x2, 0xe49, 0x1, 0x8, 0x2, 0x6, 0x5010, 0x6, 0x9, 0x5, 0x1f, 0x5, 0x100, 0x8, 0x9, 0x3, 0x2, 0x5, 0x9d, 0x10000000, 0x8, 0x547a, 0x20, 0x9, 0x10, 0xfff, 0xfff00000, 0x0, 0x22, 0x9, 0x2, 0x6, 0x81, 0x80000001, 0x2, 0x8, 0x0, 0x7fff, 0x9, 0x40, 0x6, 0x3ff, 0xffffffdc, 0x3, 0x401, 0x5, 0x94a, 0x6, 0x8, 0x4, 0x5f, 0x0, 0x5, 0x5, 0x7, 0x2, 0xd, 0x7fffffff, 0x1, 0x0, 0x8, 0xd8a9, 0x1000, 0x1, 0x4, 0x239, 0x2a, 0x1, 0xc8, 0x9, 0xd966, 0x5, 0x3, 0x5, 0xfff, 0x1ff, 0x7, 0x5000, 0x6, 0xffffffff, 0x7, 0x0, 0x3d4600, 0x5, 0x8001, 0x5, 0xffff, 0x3f, 0xaae, 0x80, 0x6, 0x1ff, 0x0, 0x4, 0x5, 0xffffff23, 0x703, 0x800, 0x1, 0x4, 0x5, 0x7, 0x8000, 0x1f, 0x13, 0x1000, 0x1, 0x5, 0x400, 0x1, 0xfff, 0xfffffe00, 0xd2, 0x1, 0x1800, 0x3f, 0x1f0, 0x9, 0x6, 0x5, 0x8, 0x100, 0x3, 0x58b7b284, 0x6, 0x0, 0x5, 0x3, 0xff, 0x0, 0x100, 0x45, 0x4, 0x7fff, 0x2, 0x212e99b4, 0x4, 0x80000000, 0x9, 0x0, 0x1f, 0x2ce, 0x4, 0x40, 0x5, 0x100, 0x3, 0x7, 0x3, 0x9, 0x401, 0x0, 0x80000000, 0x0, 0x800, 0x80000000, 0x4, 0xfffffffd, 0x1, 0x100000, 0x7fffffff, 0xffffff00, 0x2, 0x436, 0x248, 0x200, 0x800, 0x156, 0x54c, 0x8, 0x5, 0xff, 0x9, 0x3, 0x2, 0x8001, 0x1, 0x3, 0x3, 0x0, 0x9, 0x32, 0x1, 0x80000001, 0x3, 0x0, 0x3, 0x40, 0x7, 0x40, 0x6, 0x80000001, 0x6, 0x4b, 0x7, 0x1, 0x3, 0x100, 0x5, 0x80, 0x0, 0x6, 0x0, 0x4, 0xffff8001, 0x3, 0xae, 0x10001, 0x4, 0x7, 0x401, 0xffff, 0xfff, 0x3ff, 0x5, 0x4, 0xff, 0x8, 0x3ff, 0x401, 0x7ff, 0x8, 0x141ba0ea, 0x7ff, 0x9, 0x200, 0x6, 0x4, 0x0, 0xfffffc00, 0x5, 0x7, 0x8, 0x5, 0x9, 0x20, 0x80, 0xff5d, 0x401, 0x200, 0x8001, 0xffffffff, 0x74e, 0x7ff, 0x6, 0xe7bf, 0x7, 0x40, 0x3, 0x1, 0xe42d, 0x1, 0x9, 0x8, 0x8000, 0x8, 0xa29b, 0x8, 0x7fff, 0x1, 0x7, 0x5b, 0x81, 0x7, 0x80000000, 0x3, 0x7fff, 0x3ff, 0xffff, 0x10000, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0xffffffff, 0x408, 0x20, 0x1, 0x1f, 0x8, 0xf54e, 0x8000, 0x8, 0x8, 0x3, 0x4, 0x4, 0x1, 0x3, 0x5, 0x3, 0x4, 0x7, 0x2, 0x7, 0x82, 0x9, 0x20002, 0xe0e6, 0x8, 0x8, 0xa85c, 0x2, 0x3, 0x6, 0x2, 0x6, 0x401, 0x401, 0x4, 0xffff, 0x0, 0x9, 0x100, 0x0, 0x7fffffff, 0x6dfd, 0x8001, 0x101, 0x83fa, 0x0, 0x188c0, 0xfffffffd, 0xfffff801, 0x3, 0xffff4874, 0x2, 0x9, 0x4, 0x6, 0xa9b, 0xffff7fff, 0x8000, 0x7, 0x4, 0x0, 0x9, 0x111, 0x101, 0x7fffffff, 0x6, 0x1000, 0x0, 0x3, 0x9, 0x9, 0x0, 0x6, 0x2, 0x9, 0x2, 0xffff0000, 0x5, 0x9, 0x0, 0x80000001, 0x4, 0x3f, 0x107f, 0x40, 0x40, 0x6, 0x1, 0x7, 0x10000, 0x4, 0x8000, 0x401, 0xaacb, 0x2, 0x7d84, 0x8000, 0x80, 0x4, 0x9, 0x46, 0x6, 0x5, 0x1, 0xf0000000, 0x2, 0x1, 0x200, 0x7ff, 0x101, 0x2a6672c0, 0x7fffffff, 0x4, 0x9, 0x3, 0x4, 0x5, 0x200, 0xf781, 0x2, 0x8001, 0x97c, 0x0, 0x5, 0x9, 0x2, 0x80000001, 0x5, 0x5ae, 0x100, 0x800, 0x5, 0xff, 0x7, 0x4, 0x3, 0x80, 0x4, 0x0, 0x289, 0x7f, 0x4e, 0x0, 0x9, 0x80, 0x80, 0x7, 0x3, 0x9, 0x1, 0x2, 0x6, 0x8, 0x3a7, 0x0, 0x800, 0x2, 0x8ae, 0xb11, 0x4, 0x7, 0x7f, 0xffffffe0, 0x4, 0x80, 0xffffffc0, 0x6, 0xbc, 0xffffffe1, 0xfc7, 0xff, 0x8, 0x3, 0x2, 0x3, 0x8000, 0x8, 0x300, 0x1, 0x5, 0x5, 0x804e, 0x1, 0xffffbbce, 0x1f, 0xfffffff7, 0x20000, 0xffffffff, 0x1, 0x1, 0x9, 0x4f, 0x9, 0x80, 0xda8, 0x7, 0x3, 0xccb, 0x1, 0x8, 0xffff, 0x1f, 0x3, 0x18c, 0x101, 0x3ff, 0x8001, 0xfff, 0x5, 0xa14, 0x3, 0x3, 0x8, 0x4, 0x2, 0x7, 0xa7b1, 0xc2, 0x2247, 0x5, 0x1000, 0xc5a, 0x7, 0x1, 0x1f, 0x2d7, 0x2, 0x8000, 0x80000001, 0x6e, 0x5, 0xb69, 0x6, 0x4c26, 0xb8f, 0xf308, 0x2, 0x3ff, 0x10000, 0x3, 0x8, 0x3f, 0x8, 0x3, 0x8000, 0x40, 0x5, 0x21, 0x7ff, 0xd4, 0x1, 0x9, 0xffff, 0xfffffc00, 0x80000000, 0x3, 0x6, 0x0, 0x2, 0x8, 0x5, 0x4, 0x7, 0x7fff, 0x2, 0x0, 0x80, 0x101, 0x5, 0x9, 0x8, 0x10001, 0x8590, 0x1ff, 0x10001, 0x1, 0x8, 0xd990, 0x8, 0x3, 0xfff, 0xfffff800, 0x7fff, 0x2, 0x9, 0x3, 0x8, 0x1, 0x1, 0x0, 0x5ff3, 0x10000, 0x59c00000, 0x4f, 0x7fffffff, 0x8, 0x80, 0x101, 0x200, 0x2, 0x401, 0x6, 0x5, 0x7fffffff, 0x1, 0x81, 0x4623aaa5, 0x3f, 0x5, 0x0, 0x6, 0x3, 0x80000001, 0x6, 0x5, 0x10000, 0x9, 0x80000001, 0xfffffd5d, 0x1, 0x3, 0x6, 0xfff, 0x4, 0x3, 0x40, 0x5, 0xfffffffc, 0x0, 0x20000000, 0x1ff, 0x800, 0x400, 0x9, 0x200, 0x80, 0xcd2a, 0x6, 0x0, 0xd2, 0x8001, 0x0, 0x0, 0x2, 0xdf8, 0x7fff, 0xfffffff7, 0x7, 0x3, 0x8, 0x3, 0x9, 0xffff, 0x1f, 0x3ff, 0x8001, 0x40, 0x3, 0x200, 0x401, 0x2, 0x3, 0x80000000, 0x2, 0x3, 0x8, 0xfff, 0x20, 0x80010000, 0x401, 0x5, 0x8d, 0x214, 0x6, 0x800, 0x3, 0xfffffff8, 0x210d, 0x4, 0xffffffa6, 0x40, 0x1ff, 0x2, 0x9, 0x7, 0xffffffff, 0x7, 0x80000001, 0xce0, 0x1, 0x7, 0xb234, 0x40, 0x0, 0xa1b, 0x305c, 0x7fffffff, 0x1, 0x1ff, 0x3, 0xe1d9, 0x1, 0x0, 0x2, 0xfffeffff, 0x5, 0x800, 0x4, 0x7, 0x9, 0x72a000, 0x1000, 0x3, 0x37b28b5f, 0x3, 0x5, 0x200, 0xb2, 0x7, 0xff, 0x200]}) io_uring_setup(0x1e7e, &(0x7f0000001700)={0x0, 0x1dbc, 0x8, 0x1, 0x9c}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x38, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x65}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c800}, 0x804) sendto$packet(r0, &(0x7f0000001880)="365ba9bf1d151929fa5bac5747dfb37cf5cbe36135a587a6b03175e36d36b7b3138c151eec54a5d9ab", 0x29, 0x41, 0x0, 0x0) getpeername$packet(r0, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001900)=0x14) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r2, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000050) syz_io_uring_setup(0x1243, &(0x7f0000001a80)={0x0, 0xe692, 0x20, 0x3, 0x2da}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000001b00), &(0x7f0000001b40)) r6 = perf_event_open(&(0x7f0000001bc0)={0x5, 0x80, 0x1f, 0x5, 0x80, 0x8, 0x0, 0x6, 0x40048, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001b80), 0x8}, 0x1000, 0x9, 0x6, 0x6, 0x5, 0x78a4, 0xffff, 0x0, 0x3ff, 0x0, 0x3}, 0xffffffffffffffff, 0x5, r5, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c80)={0xdc, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20000000, {0x4, 0x101, 0x0, 0x5}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x4, {0x7, 0xffff, 0xf000, 0x3f1c}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x3, 0x1, 0x0, {0x6, 0xf3, 0x0, 0x81, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x1c, 0x8}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}], @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x74, 0x9, 0x97, 0x1000, 0xaa, 0xd61a, 0x1, 0x1f, 0x3ff, 0x40, 0x585, 0x40, 0x6, 0x9, 0x9, 0x4]}, @NL80211_ATTR_IE={0x4a, 0x2a, [@ht={0x2d, 0x1a, {0xc, 0x1, 0x0, 0x0, {0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x8, 0x6, 0x3e}}, @challenge={0x10, 0x1, 0xe1}, @cf={0x4, 0x6, {0x40, 0xff, 0xc0, 0x8001}}, @dsss={0x3, 0x1, 0x6}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @cf={0x4, 0x6, {0x3, 0x21, 0xcd, 0x7}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x24000001) 11:51:50 executing program 5: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x1, 0x1}, 0x9) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x7, 0x1, 0x6, 0x0, 0xfffffffffffffff7, 0x80200, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x0, 0xf24d, 0x0, 0x8, 0xffff, 0x8, 0x7f, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, r0, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) ioctl$TCSBRK(r0, 0x5409, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0xffffffffffff5955) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x7f) r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x81, 0xff, 0x6, 0x0, 0x2, 0x40, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x7cc, 0x6}, 0xe024, 0x100000001, 0x63541106, 0x2, 0x4, 0x400, 0xfffe, 0x0, 0xfffffffd, 0x0, 0x6}, 0xffffffffffffffff, 0xc, r2, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1) clock_getres(0x4, &(0x7f0000000280)) r5 = perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x80, 0x81, 0x1f, 0x80, 0x40, 0x0, 0x2, 0x3a000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, @perf_bp={&(0x7f00000002c0), 0x1}, 0xa018, 0xfffffffffffffffd, 0x8, 0x4, 0x7, 0x5, 0x401, 0x0, 0x7, 0x0, 0x9}, r3, 0x5, r3, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000380)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) 11:51:50 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010041}, 0x8000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20402, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000180)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000001c0)={0x1, 0x2, 0x1468, 0x1}) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000200)) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000240)="b276b2f9a09cdd7d96360f3526a9ec136c58464b39c22f966a968f9bc3642a3fd9093747cec2dba61d03e41bee2d05f8f901356a19a941d495694fba729760e63ab108007faab882ac4f11b59d555c33b9a67f4d08402f994f4d4ab165f2a855c79d83af2305533ebd3c7296f9d7fab7bfecd51c6a33cef7a41bbad6486c5f096ad7eb8f1ab2cbce8f425e068871f18e5406ca778fb12135cf0392100cbedc684e91bb") write$vga_arbiter(r0, &(0x7f0000000300), 0xf) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000340)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000380)={0xe1, 0x1d7, 0x7fff, 0x20, 0xfff, 0x5}) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f00000003c0)={0x3ff, 0x6, 0xd2}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000400)={0x7, 0x5, 0x5, 0x1, 0x7, "97f9b1b06536b2761152e04d70d1323231f16a", 0xb789, 0xa768}) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000440)={0x6, 0xc0}) ioctl$KDSETLED(r1, 0x4b32, 0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x16f003, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1000) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000004c0)) 11:51:50 executing program 7: sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048001) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xe3c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x5, 0x1, 0x5, 0x3]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000041}, 0x20040044) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r2, 0x12a, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x55}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x11}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x56}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5f}]}, 0x38}}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r3, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x31}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x3}, @device_a, @device_b}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8848}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x80f3}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x4004001) r4 = socket(0x18, 0x3, 0x6) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r0, 0x25087a3a726c762e, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xe}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c004}, 0x40) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000880)={'a', ' *:* ', 'rw\x00'}, 0x9) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000008c0), 0x101, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000940), 0x10000, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, ["", "", "", "", ""]}, 0x20}}, 0x814) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r5) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r7, 0xd, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xc9a8, 0x46}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x840) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f0000000bc0)={0x6, 0x1}) [ 103.819057] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.822420] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.823599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.826991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.828695] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.830761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.889215] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.894565] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.897446] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.901510] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.904009] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.904245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.908044] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 103.913051] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 103.917135] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 103.920753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.924303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.926139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.928162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.929328] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.930908] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 103.933147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.934412] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.938345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.939386] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 103.944119] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 103.945691] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.946586] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 103.948396] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 103.950676] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 103.952490] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 103.953784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.956591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 103.958490] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 103.959642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.962557] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 103.963694] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 103.965021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.966559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 103.968025] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 103.969519] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.976223] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 103.977411] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 103.979185] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 103.981156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 103.982422] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.992482] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 104.000067] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 105.908759] Bluetooth: hci0: command tx timeout [ 106.036240] Bluetooth: hci4: command tx timeout [ 106.036605] Bluetooth: hci1: command tx timeout [ 106.037232] Bluetooth: hci2: command tx timeout [ 106.037944] Bluetooth: hci6: command tx timeout [ 106.038650] Bluetooth: hci3: command tx timeout [ 106.099979] Bluetooth: hci7: command tx timeout [ 106.101158] Bluetooth: hci5: command tx timeout [ 107.956678] Bluetooth: hci0: command tx timeout [ 108.084124] Bluetooth: hci6: command tx timeout [ 108.084698] Bluetooth: hci4: command tx timeout [ 108.085034] Bluetooth: hci2: command tx timeout [ 108.085090] Bluetooth: hci3: command tx timeout [ 108.085129] Bluetooth: hci1: command tx timeout [ 108.147984] Bluetooth: hci5: command tx timeout [ 108.148533] Bluetooth: hci7: command tx timeout [ 110.003980] Bluetooth: hci0: command tx timeout [ 110.133886] Bluetooth: hci1: command tx timeout [ 110.135326] Bluetooth: hci3: command tx timeout [ 110.136681] Bluetooth: hci2: command tx timeout [ 110.136719] Bluetooth: hci6: command tx timeout [ 110.137938] Bluetooth: hci4: command tx timeout [ 110.198052] Bluetooth: hci7: command tx timeout [ 110.199613] Bluetooth: hci5: command tx timeout [ 112.052023] Bluetooth: hci0: command tx timeout [ 112.179919] Bluetooth: hci6: command tx timeout [ 112.181263] Bluetooth: hci3: command tx timeout [ 112.182557] Bluetooth: hci4: command tx timeout [ 112.182604] Bluetooth: hci2: command tx timeout [ 112.183841] Bluetooth: hci1: command tx timeout [ 112.243984] Bluetooth: hci5: command tx timeout [ 112.245359] Bluetooth: hci7: command tx timeout [ 163.929313] syz-executor.0 (287) used greatest stack depth: 23456 bytes left [ 166.215711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.228008] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.238602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.263679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.289369] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 166.293447] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.407708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.409342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.410787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.412767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.414228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.416752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.418519] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.423091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 166.424278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.434400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.447844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 166.451100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.473553] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.493126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.494406] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 166.495300] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.500967] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.501770] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.502741] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 166.502750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.508131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.511404] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.514916] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 166.515919] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.516728] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.518265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.519533] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.520671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.523276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.525118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.525146] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 166.527033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.528352] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 166.530059] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.540547] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 166.544382] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 166.545784] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 166.547052] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 166.552027] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.560027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.562197] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 166.567031] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.307919] Bluetooth: hci0: command tx timeout [ 168.437034] Bluetooth: hci2: command tx timeout [ 168.501894] Bluetooth: hci1: command tx timeout [ 168.563925] Bluetooth: hci7: command tx timeout [ 168.628996] Bluetooth: hci6: command tx timeout [ 168.629912] Bluetooth: hci5: command tx timeout [ 168.630480] Bluetooth: hci4: command tx timeout [ 168.631205] Bluetooth: hci3: command tx timeout [ 170.357942] Bluetooth: hci0: command tx timeout [ 170.483947] Bluetooth: hci2: command tx timeout [ 170.548938] Bluetooth: hci1: command tx timeout [ 170.611972] Bluetooth: hci7: command tx timeout [ 170.675951] Bluetooth: hci4: command tx timeout [ 170.676086] Bluetooth: hci3: command tx timeout [ 170.676486] Bluetooth: hci5: command tx timeout [ 170.677404] Bluetooth: hci6: command tx timeout [ 172.403915] Bluetooth: hci0: command tx timeout [ 172.532862] Bluetooth: hci2: command tx timeout [ 172.596789] Bluetooth: hci1: command tx timeout [ 172.659902] Bluetooth: hci7: command tx timeout [ 172.723904] Bluetooth: hci4: command tx timeout [ 172.726886] Bluetooth: hci6: command tx timeout [ 172.726995] Bluetooth: hci5: command tx timeout [ 172.727339] Bluetooth: hci3: command tx timeout [ 174.451892] Bluetooth: hci0: command tx timeout [ 174.579957] Bluetooth: hci2: command tx timeout [ 174.644138] Bluetooth: hci1: command tx timeout [ 174.707919] Bluetooth: hci7: command tx timeout [ 174.771923] Bluetooth: hci3: command tx timeout [ 174.772459] Bluetooth: hci4: command tx timeout [ 174.772898] Bluetooth: hci5: command tx timeout [ 174.772943] Bluetooth: hci6: command tx timeout [ 228.551232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.553628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.558059] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.561904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.564939] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.567679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.602286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.609043] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.613231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.622189] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.625239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 228.628919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.666844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.669416] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.676131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.681236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.683187] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 228.685003] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.796616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.807892] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.814227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.817323] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.819118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 228.820551] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.885155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.886261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.891273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.908365] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 228.916965] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 228.925014] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.927905] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 228.929146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 228.932392] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.934367] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.935027] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 228.943038] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 228.945416] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 228.947448] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.947544] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.948340] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 228.950165] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 228.966500] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 228.966894] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 228.971512] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.973331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 228.975215] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.982318] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.985140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 230.644894] Bluetooth: hci0: command tx timeout [ 230.708009] Bluetooth: hci2: command tx timeout [ 230.708086] Bluetooth: hci1: command tx timeout [ 230.835920] Bluetooth: hci3: command tx timeout [ 231.027997] Bluetooth: hci4: command tx timeout [ 231.028033] Bluetooth: hci6: command tx timeout [ 231.028363] Bluetooth: hci7: command tx timeout [ 231.091876] Bluetooth: hci5: command tx timeout [ 232.691868] Bluetooth: hci0: command tx timeout [ 232.755918] Bluetooth: hci1: command tx timeout [ 232.757324] Bluetooth: hci2: command tx timeout [ 232.883869] Bluetooth: hci3: command tx timeout [ 233.075883] Bluetooth: hci4: command tx timeout [ 233.075929] Bluetooth: hci6: command tx timeout [ 233.077318] Bluetooth: hci7: command tx timeout [ 233.140863] Bluetooth: hci5: command tx timeout [ 234.739883] Bluetooth: hci0: command tx timeout [ 234.805857] Bluetooth: hci1: command tx timeout [ 234.805886] Bluetooth: hci2: command tx timeout [ 234.932974] Bluetooth: hci3: command tx timeout [ 235.123920] Bluetooth: hci7: command tx timeout [ 235.125050] Bluetooth: hci6: command tx timeout [ 235.125193] Bluetooth: hci4: command tx timeout [ 235.187888] Bluetooth: hci5: command tx timeout [ 236.788849] Bluetooth: hci0: command tx timeout [ 236.851899] Bluetooth: hci2: command tx timeout [ 236.852895] Bluetooth: hci1: command tx timeout [ 236.980028] Bluetooth: hci3: command tx timeout [ 237.172373] Bluetooth: hci6: command tx timeout [ 237.172949] Bluetooth: hci7: command tx timeout [ 237.173397] Bluetooth: hci4: command tx timeout [ 237.235857] Bluetooth: hci5: command tx timeout [ 290.953632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.955211] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.959729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.963337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.966626] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 290.967713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.005559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.009007] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.011585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.015660] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.019017] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 291.020205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 291.154398] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.156093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.161999] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.163343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.164509] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.166628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.174185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.181937] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.184100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.185217] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.190458] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 291.191656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.260674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.264307] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.267457] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.274029] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.280537] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 291.286203] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.302951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 291.317115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.319419] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.321319] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.323272] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 291.328965] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 291.330337] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 291.341231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 291.342427] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.343288] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 291.346545] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 291.347454] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 291.348299] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 291.351108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 291.352100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.356468] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 291.365875] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 291.372629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 293.043876] Bluetooth: hci1: command tx timeout [ 293.045092] Bluetooth: hci0: command tx timeout [ 293.235904] Bluetooth: hci2: command tx timeout [ 293.236929] Bluetooth: hci3: command tx timeout [ 293.364945] Bluetooth: hci4: command tx timeout [ 293.427936] Bluetooth: hci5: command tx timeout [ 293.428975] Bluetooth: hci6: command tx timeout [ 293.492895] Bluetooth: hci7: command tx timeout [ 295.091902] Bluetooth: hci1: command tx timeout [ 295.093396] Bluetooth: hci0: command tx timeout [ 295.284829] Bluetooth: hci2: command tx timeout [ 295.286432] Bluetooth: hci3: command tx timeout [ 295.412013] Bluetooth: hci4: command tx timeout [ 295.476376] Bluetooth: hci5: command tx timeout [ 295.476972] Bluetooth: hci6: command tx timeout [ 295.539964] Bluetooth: hci7: command tx timeout [ 297.141835] Bluetooth: hci1: command tx timeout [ 297.142378] Bluetooth: hci0: command tx timeout [ 297.332878] Bluetooth: hci2: command tx timeout [ 297.333441] Bluetooth: hci3: command tx timeout [ 297.459952] Bluetooth: hci4: command tx timeout [ 297.523879] Bluetooth: hci6: command tx timeout [ 297.524458] Bluetooth: hci5: command tx timeout [ 297.588028] Bluetooth: hci7: command tx timeout [ 299.187982] Bluetooth: hci0: command tx timeout [ 299.188530] Bluetooth: hci1: command tx timeout [ 299.379982] Bluetooth: hci3: command tx timeout [ 299.380536] Bluetooth: hci2: command tx timeout [ 299.508652] Bluetooth: hci4: command tx timeout [ 299.571946] Bluetooth: hci5: command tx timeout [ 299.572474] Bluetooth: hci6: command tx timeout [ 299.635861] Bluetooth: hci7: command tx timeout [ 353.460404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.463012] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.464256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.467125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.470051] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.475813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.599376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.609681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.613194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.616595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.619312] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.621467] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.690003] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.695276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.697930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.699629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.700890] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.703199] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.706220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.707885] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 353.709428] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.710507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.725677] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 353.730057] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.748817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 353.754145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 353.756372] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 353.815089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 353.818141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.837619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.844010] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 353.851379] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 353.865026] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 353.870791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 353.873091] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 353.876561] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 353.878587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.882010] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 353.894306] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 353.896649] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 353.898177] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 353.899266] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 353.903899] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 353.914984] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 353.932494] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.968033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 354.009368] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 354.022055] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.507995] Bluetooth: hci0: command tx timeout [ 355.699915] Bluetooth: hci1: command tx timeout [ 355.763920] Bluetooth: hci2: command tx timeout [ 355.764564] Bluetooth: hci3: command tx timeout [ 355.956482] Bluetooth: hci6: command tx timeout [ 355.957275] Bluetooth: hci5: command tx timeout [ 356.019847] Bluetooth: hci7: command tx timeout [ 356.147993] Bluetooth: hci4: command tx timeout [ 357.557792] Bluetooth: hci0: command tx timeout [ 357.747883] Bluetooth: hci1: command tx timeout [ 357.811853] Bluetooth: hci3: command tx timeout [ 357.812327] Bluetooth: hci2: command tx timeout [ 358.003939] Bluetooth: hci5: command tx timeout [ 358.004431] Bluetooth: hci6: command tx timeout [ 358.068569] Bluetooth: hci7: command tx timeout [ 358.196807] Bluetooth: hci4: command tx timeout [ 359.603854] Bluetooth: hci0: command tx timeout [ 359.796798] Bluetooth: hci1: command tx timeout [ 359.860105] Bluetooth: hci2: command tx timeout [ 359.860623] Bluetooth: hci3: command tx timeout [ 360.053067] Bluetooth: hci6: command tx timeout [ 360.053583] Bluetooth: hci5: command tx timeout [ 360.115878] Bluetooth: hci7: command tx timeout [ 360.243934] Bluetooth: hci4: command tx timeout [ 361.651969] Bluetooth: hci0: command tx timeout [ 361.844847] Bluetooth: hci1: command tx timeout [ 361.907902] Bluetooth: hci3: command tx timeout [ 361.908415] Bluetooth: hci2: command tx timeout [ 362.099875] Bluetooth: hci5: command tx timeout [ 362.099902] Bluetooth: hci6: command tx timeout [ 362.165844] Bluetooth: hci7: command tx timeout [ 362.291937] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 11:56:52 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806ce09a78 RCX=ffffffff8679a5f2 RDX=1ffff1100d9c134f RSI=ffff88801505ff20 RDI=ffff88806ce09a78 RBP=ffff88801505ff20 RSP=ffff88806ce099d0 R8 =ffffffff8679a5f6 R9 =ffff88806ce09ab8 R10=000000000003aa55 R11=0000000000008204 R12=0000000000000008 R13=ffff88806ce09ac0 R14=ffff88801505ff28 R15=ffff88806ce09a78 RIP=ffffffff81349a0a RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb2fc9646f4 CR3=0000000024188000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fb2fc97347000007fb2fc972f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87efdeb8 RBX=0000000000000000 RCX=0000000000000004 RDX=0000000000000003 RSI=1ffffffff1053148 RDI=ffffffff87efdf10 RBP=ffff888009715340 RSP=ffff8880097379f8 R8 =0000000000000000 R9 =0000000000000001 R10=ffff888009715d84 R11=0000000000000001 R12=ffff88800f81d268 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff814fedc4 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffcc0fd6f00 CR3=00000000162be000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000