Warning: Permanently added '[localhost]:60713' (ECDSA) to the list of known hosts. 2025/01/20 01:55:18 fuzzer started 2025/01/20 01:55:18 dialing manager at localhost:44245 syzkaller login: [ 70.472253] cgroup: Unknown subsys name 'net' [ 70.563961] cgroup: Unknown subsys name 'cpuset' [ 70.604568] cgroup: Unknown subsys name 'rlimit' [ 76.500919] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 88.566398] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/20 01:55:37 syscalls: 210 2025/01/20 01:55:37 code coverage: enabled 2025/01/20 01:55:37 comparison tracing: enabled 2025/01/20 01:55:37 extra coverage: enabled 2025/01/20 01:55:37 setuid sandbox: enabled 2025/01/20 01:55:37 namespace sandbox: enabled 2025/01/20 01:55:37 Android sandbox: enabled 2025/01/20 01:55:37 fault injection: enabled 2025/01/20 01:55:37 leak checking: enabled 2025/01/20 01:55:37 net packet injection: enabled 2025/01/20 01:55:37 net device setup: enabled 2025/01/20 01:55:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/20 01:55:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/20 01:55:37 USB emulation: enabled 2025/01/20 01:55:37 hci packet injection: enabled 2025/01/20 01:55:37 wifi device emulation: enabled 2025/01/20 01:55:37 802.15.4 emulation: enabled 2025/01/20 01:55:37 fetching corpus: 0, signal 0/0 (executing program) 2025/01/20 01:55:40 starting 8 fuzzer processes 01:55:40 executing program 0: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x100, 0x70bd27, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4040004) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x70}}}}, ["", ""]}, 0x28}}, 0x600c881) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r6, 0x300, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004804}, 0x4040040) syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r5) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x8000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000940)={0x19, 0x5, 0xfffff800, 0x5, 0x5, 0x3}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000001000)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000a40)={0x558, r8, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x400}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xff7f}, @NL80211_ATTR_IE={0x245, 0x2a, [@random_vendor={0xdd, 0xaf, "aaac9556bdca2ca98f4d3492e1560b51567064e3ffd14bf2e7455beb4b86e913a0210f6c60fc341225b8a4dc4c873fc80ae81e5f289416b926eb16585b4e0362d973cf07908efd00a21ab34f9c55d8348a34cc45b6c146a8f5a1e15ea9fde2ae4aa97ffd952d47db657e2aa0dde9248a42ad5089e3eac66faf3b9742b9cef11baa57d0a4b4566acdb5ee7ec6d900703ca0ffaccb4ce0fbb7c49bf744883b9b324ce58b2d3aa93d86086d61ba9e9c96"}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80, 0x28}}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0x28, "d3a6f5ab31017bc0244c544507e57ef19348254a71655780b5f69d04fcba9dbb2b7959f16b5c5948"}, @chsw_timing={0x68, 0x4, {0xff6, 0x2}}, @preq={0x82, 0x72, @not_ext={{0x0, 0x0, 0x1}, 0xdb, 0x3f, 0xdf, @device_b, 0x2, "", 0xfffff000, 0x0, 0x8, [{{0x1, 0x0, 0x1}, @device_a, 0x6}, {{0x1, 0x0, 0x1}, @device_b, 0xce0}, {{}, @broadcast, 0xfffffc00}, {{}, @device_b}, {{}, @broadcast, 0x10000}, {{0x1, 0x0, 0x1}, @device_a, 0x9cb1}, {{0x0, 0x0, 0x1}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @broadcast, 0x9a}]}}, @mesh_chsw={0x76, 0x6, {0x9, 0x4, 0xa, 0x1}}, @fast_bss_trans={0x37, 0xbf, {0x20, 0x4, "2af561250c3300bdbcd3e6505c77fea8", "0b6608e5ec20445322c1d75a4dd88181e4822678fbbc69beccebd22cc2b10005", "88248dbe8dbb38d4760efb61220d7b816c23a930bbcf4e2fc64fce5057cebd1d", [{0x2, 0x1b, "9eea9a814449a59078a284130b6f743a6e9cd7836b15fdeedea5fb"}, {0x2, 0x19, "0d089f06b34a46389e4a68d9e8b6d3888ac858111a954afcd6"}, {0x4, 0x1f, "07e3e1d4a94c20d486df01556ef8826e6f575396e6ff3335f64ec3a9ed344f"}, {0x2, 0x12, "48f62a96530fcd84513026aeb6e47b460432"}]}}, @mic={0x8c, 0x10, {0x95b, "eb839eeaf028", @short="5378a76b93516bff"}}]}, @NL80211_ATTR_IE={0x2da, 0x2a, [@measure_req={0x26, 0x2f, {0x5, 0x1, 0x56, "8d0584e94f20589de7ad285fbb64ea05fad22d43ec86dc37be2627e504391dc871059c898f7c98a6e8ce2858"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xac, 0x9}}, @random_vendor={0xdd, 0xd4, "04f598a12ba64f064d6bc21a3da4954ae9d2ecd6fbfee7dae87212cb15e4feb4718b73d9de6985eefbbb0396d64228eed47101c866e8aa6a727a10ebe5d47da4ef2c39d5aee952be8266a8832d2bf0e787e5f929997ed5bfa5c3e3fe01d8a7ab86e00336d161145ca0f69f01226b3592e1811ff99110cfa8897359061efe94a18b9508c859e828b4605a1357ebf195111feaeeb39153ae51dd1c8738f82239d06906a413a582aea651d237147244d7fa42e1a24dfbbe6e866be032bbd468c0f2e5757dc10fab287f5f2a40eb6f866fffc24b05f2"}, @tim={0x5, 0x9a, {0x1, 0x9f, 0xff, "708f4562ac94e3b7f378ee6c63d24e97caa8b677867d4d35e70cf8306deae293a2617d442588ea217cf441b58cb95a6c5551ae3a82f8b70cc02c3aaf7c7fcc5d0eea0d887ea2ca9f44b7368bde6e6a1f2c44272494cfe426a8e80fc4c80ab7e5f3e6349416904df21ff288a4fe40207ba0e9ae5d4c9c69e2f3849ec883185703ee687477a35cbab6f6543ea56e3997c8b6f48de0c8665c"}}, @supported_rates={0x1, 0x5, [{0x30, 0x1}, {0x12, 0x1}, {0x9}, {0x1}, {0x0, 0x1}]}, @perr={0x84, 0x110, {0xbf, 0x12, [@ext={{}, @device_a, 0x64a7, @device_b, 0x14}, @not_ext={{}, @device_b, 0x7daa, "", 0x37}, @not_ext={{}, @device_b, 0x8, "", 0x31}, @ext={{}, @device_b, 0x9, @broadcast, 0x1b}, @not_ext={{}, @device_b, 0x7fffffff, "", 0x15}, @not_ext={{}, @device_a, 0x2, "", 0x39}, @ext={{}, @device_a, 0x4, @broadcast, 0x4}, @not_ext={{}, @device_a, 0x2, "", 0xd}, @not_ext={{}, @device_a, 0x3, "", 0x31}, @ext={{}, @device_a, 0x2, @device_a, 0x3d}, @ext={{}, @broadcast, 0x7, @broadcast, 0x31}, @not_ext={{}, @device_b, 0x45b4f1e5, "", 0x38}, @ext={{}, @device_a, 0x8000, @device_b, 0x18}, @not_ext={{}, @device_b, 0x79, "", 0x2c}, @not_ext={{}, @device_b, 0xb42e, "", 0xe}, @not_ext={{}, @broadcast, 0x4, "", 0x3c}, @not_ext={{}, @broadcast, 0x5, "", 0x35}, @not_ext={{}, @device_a, 0x2, "", 0x8}]}}, @mesh_chsw={0x76, 0x6, {0x6, 0x9, 0x7}}, @ibss={0x6, 0x2, 0xa48e}, @measure_req={0x26, 0x6, {0x3f, 0x47, 0x7f, "42a8c2"}}]}]}, 0x558}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xec, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x595, 0x2e}}}}, [@NL80211_ATTR_KEY={0x70, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xb, 0x4, "3a98ba3c8818df"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x10, 0x4, "e380a30812112348757ad8bc"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4ad06da2a3"}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 01:55:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f00000001c0)={0x904, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfc9, 0x60}}}}, [@NL80211_ATTR_CSA_IES={0x600, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x1b, 0xf, [@ssid={0x0, 0x15, @random="c4291b22ffba794c2dee08c858daf8844b348d92a6"}]}, @NL80211_ATTR_IE={0x207, 0x2a, [@peer_mgmt={0x75, 0x18, {0x1, 0x0, @val=0x400, @val=0x13, @val="afb29958670ea9c9014b2a21871b25b4"}}, @chsw_timing={0x68, 0x4, {0x200, 0x6}}, @tim={0x5, 0xfc, {0x9, 0x30, 0x0, "11313c34dc99e4d8bfc3fa55c8df6dcf906b24144da85381d34daac7c6f45852a58f032aa6d8272ec573d4f4e0a4e3623edf30fda6a0abaaf58a8d7a2ad45b0e2ac728b1cf2bbe90881f027195753bfb43b792e2e87d242e1b0ce408b8a24d6739844c418f0cd1c579e3340d3c7ebd6916b3d90500981d063215fb55b2d2ed752e05b1db6bb0ff54abe61fa63aae7373dbe4dbba89e070b62d31cadfc9bb05a54ccf0276a1695c9211117d8728a560b1fce274ad9f05e3c74a063f8d2324f6e982274ac9137e853ad686bfb5389bbdae78164143eeb66e5ea850348333fb8d38afb8bd9c2f45231183b56ec6359d0215fed78ddd2bb11cd36e"}}, @link_id={0x65, 0x12, {@random="d316546d49c3", @device_b, @device_b}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x20}}, @preq={0x82, 0x62, @ext={{0x1, 0x0, 0x1}, 0x1, 0x3, 0x3ff, @device_a, 0x1, @device_b, 0x6, 0x5, 0x6, [{{}, @device_a, 0xfffffffd}, {{0x1, 0x0, 0x1}, @broadcast, 0x1e}, {{}, @broadcast}, {{0x1}, @device_a, 0x101}, {{0x1}, @broadcast, 0xa5e9}, {{0x1}, @device_a, 0xffffffff}]}}, @measure_req={0x26, 0x62, {0x8, 0x1e, 0x40, "08fafcd8d4df9be9bf703e72bd361e10958760336420835e22b51e7e47a9e541baf1dde311b91ae3ceb207dabb43cf637a2fc20f1c0bd8ab88a2784484f41f8b3d8f229ce6d548d7c8267df9c339d75a8c11b9c658ff728aff80281ed9e620"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x123, 0x80, [@mesh_chsw={0x76, 0x6, {0x9, 0x81, 0x11, 0x7}}, @tim={0x5, 0xd5, {0xff, 0xdc, 0x9, "0f4d58170e69513225846a3224a0ba57364fb7c83805ebf4f64ed4cbb2ce1bdbefae21f06ae57c36efbbc680ca08e02959de8491692621e3adfc3eff9fd3b4144680932784e735cd6d6ad07ca2ff0f93074210cb9512838620a3503afdc39e7ef5e323f644bc335f4fa81239b7044ca8a190eec1e9db232695cad300458e9cec2e0455caff4f7548f87cd082bbf9e6dc7fc1916ad5e0042566266dbc5d0b6acedb2b3c1828ac24379f1da538c790f4de8c11f34503520ac1460930f2adc8b7f0adc3ed47df38151b6be84cdbecc0f8d6da6f"}}, @random_vendor={0xdd, 0x39, "83b18f5d6dd736377513f3436c04d4d0e5b25a4504ad47e549169f95a33d72ed0d9a0fc371b91b7799c37883cabfb4167cd67c14aaea39155b"}, @channel_switch={0x25, 0x3, {0x0, 0x2c, 0x8}}]}, @NL80211_ATTR_IE={0x31, 0x2a, [@dsss={0x3, 0x1, 0x3c}, @challenge={0x10, 0x1, 0x5e}, @mesh_chsw={0x76, 0x6, {0x3, 0x3f, 0x18, 0x9}}, @cf={0x4, 0x6, {0xa0, 0x81, 0x85e, 0x203}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x7, 0x1, @broadcast, 0x2, 0x1, 0x1}}]}, @NL80211_ATTR_IE={0x1d8, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @measure_req={0x26, 0xdd, {0x9, 0x40, 0x2, "a70914d8c3ccbf1de0d7fc789ef2b6034bc0bd11f2691f14e049781f671584dfc6def016f8a8c0c51bbed4ffdadc27be9923de086c61d0bd4c6726e2d3457beb1edf1cb6cee4204f158eeac8800c4cdf688ab4ac91ce57b3597dc6b822b23bb53d0f97240008a566a68a5e539ea292a4ad72edb67caac7bf522cf915be73a9a772bec80200fef8faa970ea94a029bb727eec145807aac073d29dbf4b19206fbeeb29f20f3b68fee8bef7c3431096aa35cfc31e9bfe20e69a3c23100c0fdc5ede1c10ac884bc2b9821efcde5474392d7a7345e047ed970f903d1e"}}, @measure_req={0x26, 0xf0, {0x1, 0x4, 0x0, "88892471b0cbce36d9f8bfe3a48f58846f0e8cc264644c02e66312b1704a044693c6259e45880abbe7c203da13364c21b02c6e0797695fa2e02a08ef04700eea3a16c96d62ca1f1b4e72c0149107cc7baa5ee3b77f005dc9fecba59d518d8c084001d9f788adf8e20afc48fc3ac58ae62545146f5d6941bd84145b05643f0dc253a5e87df4ff45e8ed4f849fbca5ca3ceb7d7e64a649c72607920e62d6de89732b4adfdee7d2bb456c02cdca8e2245daa5d60257c703b4edabe73261e037cf0e8bd98a3685ec6b930628b3ff3acd4058bb81e34a2bb4b8a8f71a1420c6e1038d98763586f2f913f5385075ba94"}}]}, @NL80211_ATTR_BEACON_TAIL={0x9d, 0xf, [@preq={0x82, 0x46, @not_ext={{0x0, 0x1}, 0x3, 0x6, 0x7, @broadcast, 0x5, "", 0x7f, 0x0, 0x4, [{{0x0, 0x0, 0x1}, @device_b, 0x1f}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{}, @broadcast, 0x400}, {{}, @device_b, 0x1ff}]}}, @ht={0x2d, 0x1a, {0x8, 0x2, 0x4, 0x0, {0x6, 0x9, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1ff, 0xf8}}, @mesh_chsw={0x76, 0x6, {0x6, 0xff, 0x12, 0x8}}, @chsw_timing={0x68, 0x4, {0x401, 0xfbaa}}, @tim={0x5, 0x8, {0x4, 0x2c, 0x2, "31636fb66c"}}, @channel_switch={0x25, 0x3, {0x1, 0xb8, 0x6}}, @peer_mgmt={0x75, 0x8, {0x0, 0x200, @val=0x101, @val=0x2e, @void}}, @mesh_chsw={0x76, 0x6, {0x5, 0x2c, 0x19, 0x6}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3d, 0xaf, 0x9}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0x9]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x58}, @NL80211_ATTR_CSA_IES={0x2d4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x4d4a, 0x7, 0x8650, 0x0, 0x1, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x1000, 0xfffe, 0x1, 0x0, 0x3]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x9b, 0xf, [@random={0x0, 0x79, "9b62310415c0f2d0c90ef16cf380aa9caeb852213f3dc8973bf49cf64c311897a064a5ef345bae2733be0b9a1391dbc2be0c8ae327ca57606ac4d5a0ff0838f67e18421fa350cbc1151ed0c50a3a6514bbfc8808ea03cfb8059c7a8e1703792c7935a93e67be224c254e023707ac4da5a5477d6e1781bf9d26"}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x0, 0xff, @device_b, 0xbc1, 0x4, 0x9}}, @channel_switch={0x25, 0x3, {0x1, 0x0, 0x72}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x81, 0xd1bf, 0x3a, 0x3ff, 0x7615, 0x0, 0x8]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x18, 0x7f, [@link_id={0x65, 0x12, {@random="5af091671b50", @device_b, @broadcast}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x7, 0x80, [@dsss={0x3, 0x1, 0x84}]}], @beacon_params=[@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_FTM_RESPONDER={0xe0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xd8, 0x2, "7996bf52ae04e425d52ef00e79ac1a52dcb722d279cfb10586bdd9f12710220b52f70eb18c45e2299557a2e193fa2c1692003a8f2d01804663ce2d00770c08845628fefdd6f5a1fad1713fe32ad4196f65a9a0212d17b2e0ab3c2a53f793a7ee239a48d86e2a5d4298e9086262bf1cac257ae5ba74e2a50bdafa6c1fcc7de8073244b00c3ad9968b6f2a99173d0bf1f067b480167d512fda2474ae23d1bf397fcce90ba555a8e38f979f6afe469a142f67ff8a7e8930c77a352c417b69f6c5de8293e56c7fa064cbf5f1c08b094660e224bd7c5d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x1000, 0x400, 0xed1f, 0x8001, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x2, 0x1, 0x0, 0x5, 0x1, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x7f]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0xc8, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x80}, @device_b, @broadcast, @random="0b1d9a6007f9", {0x8, 0x9}}, 0x9, @default, 0x4090, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x9, 0x1}, {0xc}, {0x2, 0x1}, {0x18, 0x1}]}, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0xfb, 0x2c, 0x7}}, @val={0x2d, 0x1a, {0x300, 0x3, 0x3, 0x0, {0x1, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x2, 0x2}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1f}}, @void, [{0xdd, 0x1c, "7c40df1537dec53215752893742edb4518472f39ba69a28c21d23c60"}, {0xdd, 0x47, "6ebfe22840bd5dcb9f452ccfe5acd1bbb50d6e1dc412e3c01e8b85bfaff665fb766aa0dbeb2eedbf2e1f3dafe94028a4364d85ec3077916ba44845299b0332d2e3ec2673100e68"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@ssid={0x0, 0x6, @default_ap_ssid}]}]]}]}, 0x904}}, 0x8011) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r4, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) semctl$GETZCNT(0x0, 0x3, 0xf, &(0x7f0000000d00)=""/221) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000e00), 0x109100) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x70, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xc8, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x81}, {0xc, 0x90, 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x801}, 0x4000040) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0xa37ea7d3be70b9af}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r1, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x30}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x28}}, 0x48024) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x50, r4, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x57}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x842}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x58, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x7}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa0b2b64d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x15) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000001780)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001740)={&(0x7f0000001580)={0x1a4, r8, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x0, 0x0, 0x0, {0x1, 0x1, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, 0x400, 0x1, 0x7f}}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_KEYS={0x15c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d3bf368402"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "fa50400c5f7c01fcdb1a2bf5f2"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8c8d6c7f3e28f0fd9a414ac6aa"}, @NL80211_KEY_TYPE={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0741bc11af"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "98bd394bf6"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "247137f913"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "997af3a9b1e9db907f8fc5a1f3"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x9, 0x4, "3044f85291"}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000110}, 0x4000000) 01:55:40 executing program 2: r0 = socket(0x1b, 0x1, 0x8) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c0, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x18}}}}, [@NL80211_ATTR_IE={0x125, 0x2a, [@chsw_timing={0x68, 0x4, {0x20, 0x2}}, @tim={0x5, 0x66, {0x7, 0xae, 0x8, "6a60ab7ae5e985fef0a6de09a1860b0e7e00c12bebc5f4fa301946cd6d53313a94474c8b20aec1115c448d62db3201756750923a2b0f2bf83457dea25de920cb49670b05e5e11bce0c7873c22eed729ddf2567e68c599540f12c6db64f03982001c17e"}}, @link_id={0x65, 0x12, {@random="e652bdc77876", @device_b, @device_b}}, @random={0x0, 0x91, "ed0428bb8a65bba598c97e72ed9b97117f07656b2fcb3a548a4dfa19085daa6f35d8d395bf76fff542441e25e67f602701a36d1f30d41a2a344e0e2db5b771aeb4db5642063c71aa6154508aa05e1abcdfb76659bcbfa8ea2e4978482d8a93bc2ab2b9aca1b9a65a8eb06a74e4de10bff55efea57f1c98e04324e635ee78ec82caca886691cac4173925bac960cb216ef5"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x80, 0x95}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x40, 0xc, 0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7ff}, @NL80211_ATTR_IE={0x68, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @chsw_timing={0x68, 0x4, {0x8001, 0x7}}, @preq={0x82, 0x30, @not_ext={{0x1, 0x1}, 0xe2, 0xf2, 0x7, @device_a, 0x1ff, "", 0xb7e, 0x2, 0x2, [{{0x0, 0x0, 0x1}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @broadcast, 0x1}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0xe2, @device_b, 0x9, "", 0x81f8, 0x0, @broadcast, 0x10000}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x12c, r1, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2aca328fea899d112a5c7f074dab7b86"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "040b9ff6ac420e16"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x20}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f91f389ba7b7da48"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5068f0373cc81594"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6922b8a762f614a6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bb2e493e0bd402cc"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ccfc502025fa19c5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2151087d89a0b8d5"}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5ed86235}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47894b4615f236921d4efad26c1bb0fa"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6743ae56db0af9df54b4825ae101e747"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="56690b08328e138ea44bedab1321ae17"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6786ee30efe16cb4a552fedc4ccb7440"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="45a30c33197bacfc39a83990ecf7cb7f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x20008001) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x16, 0x24, [{0x4, 0x1}, {0x18, 0x1}, {0x1, 0x1}, {0x9832778bdec37172}, {0x48}, {0x2}, {0x6a}, {0x6c, 0x1}, {0x9}, {0x817c2769754345f6}, {0xc}, {0x3, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0xc, 0x1}, {0x16, 0x1}, {0x18}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000091}, 0x20004401) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x52}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c0}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x150, r1, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4}}}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x8451) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000004) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0xee40c9c1b62710c9}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r1, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}}, 0x48800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r3) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x63}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4004041) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x5) r6 = socket(0x29, 0x2, 0x80) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x58, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x4a}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x68) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f40)='/sys/kernel/uevent_seqnum', 0x800, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000800) [ 91.686335] audit: type=1400 audit(1737338140.209:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:55:40 executing program 3: semget(0x2, 0x4, 0x100) r0 = semget(0x3, 0x4, 0x0) semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000000)=""/112) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40804}, 0x44000900) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400}, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r4 = semget(0x3, 0x1, 0x211) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x288, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3b4681be}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x20}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0xfff}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xe4}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x800}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6406}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x20}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xa0e}, {0x8, 0x15, 0x2}}]}, 0x288}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000800)=""/4096) getresuid(&(0x7f0000001800)=0x0, &(0x7f0000001840), &(0x7f0000001880)) r7 = getegid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000001900)={{0x0, r6, 0xffffffffffffffff, 0x0, r7, 0x8}, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3f}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000001a40)={&(0x7f0000001980), 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x2c, r3, 0x400, 0xfff, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20048001) semctl$IPC_RMID(r4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x30, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xff, 0x4d}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8014) 01:55:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x404c880}, 0x4000000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/usbmisc', 0x420000, 0x40) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x53}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x70000, {0x1, 0x8, 0x548, 0x4}}}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x14}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x4, {0x92, 0xfe00, 0x7ff, 0x101}}}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x40448c0}, 0x800) r4 = fork() sendmsg$AUDIT_SET(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80004800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x3e9, 0x400, 0x70bd29, 0x25dfdbfe, {0x50, 0x1, 0x2, r4, 0x745, 0x3, 0xfffffffa, 0xfffff07f, 0x0, 0x2}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40804}, 0x4c000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r5, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x51}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/uprobe', 0x50000, 0x2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa0, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40c4005}, 0x4000000) r7 = socket(0x23, 0xa, 0x8) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r1, 0x200, 0x70bd2c, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket(0x2a, 0x6, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r6) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r9, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x18, 0x13, [{0x4}, {0x24}, {0x6c, 0x1}, {0x1}, {0x6c, 0x1}, {0x48, 0x1}, {0x2, 0x1}, {0x6c, 0x1}, {0x6, 0x1}, {0x1}, {0x18}, {0x48}, {0x48}, {0x6c, 0x1}, {0x35, 0x1}, {0x24, 0x1}, {0x6, 0x1}, {}, {0x6c}, {0x18}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2ddd}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, [{0xc}, {0x30, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x6c, 0x1}, {0x6}, {0x6c, 0x1}, {0xc, 0x1}, {0x5}, {0x6, 0x1}, {0x1b, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r7) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x104, r10, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ab}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x129}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_FRAME={0x9e, 0x33, @auth={@wo_ht={{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1f}, @device_b, @device_a, @from_mac, {0x5, 0xbe5}}, 0x1, 0x2, 0x4, @val={0x10, 0x1, 0xb8}, [{0xdd, 0x77, "41aa8506b2e01762c202ce5b9d6d5e7239c57c2bec7dac0f27fe219924d88ae5842074cf9d3ab4a8659c46774bc724bd2fb1f76067abb6e63249f778865a6fd93ef66626510108f48c5689d598df846c2d740df7cbda7e012d94962a7f16ed3a1c89222807124832c7084c66dbde1199b40d1f81979d22"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x8804}, 0x8010) 01:55:40 executing program 5: r0 = getegid() semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)={{0x1, 0xee00, r0, 0xee00, r0, 0xa9, 0x7}, 0xfffffffffffffff8, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000080)) r1 = getegid() getgroups(0x3, &(0x7f00000000c0)=[r0, 0x0, 0xee00]) getgroups(0x2, &(0x7f0000000100)=[r0, r0]) getgroups(0x7, &(0x7f0000000140)=[r0, r0, r0, r1, r2, r0, r4]) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r11, 0x3312, 0x7) r12 = semget(0x0, 0x0, 0x20) semctl$IPC_RMID(r12, 0x0, 0x0) write$snapshot(r11, &(0x7f00000001c0)="a8ce6bb8dca6c47dae0caecee950e774243e1119c7407bcbedba631a96cf897846d4607477f06ef2b7ab6b08be6eb64c959d2142c8196c0c2a9e2126619aa5f0477db0913476eca43b6d7c7af2a1797f3d6e24cd8c519368fdd65a650179", 0x5e) getgroups(0x8, &(0x7f0000000240)=[r2, r3, r10, r5, r3, r7, 0x0, 0x0]) getgroups(0x6, &(0x7f0000000280)=[r6, r14, r8, r9, r3, r6]) r17 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, r17, 0x801, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81bb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008800}, 0x2000c001) getegid() semctl$SETVAL(r12, 0x4, 0x10, &(0x7f00000004c0)=0x9) r18 = getegid() getgroups(0x8, &(0x7f0000000500)=[r13, r16, r6, r16, r14, r15, r16, r18]) 01:55:40 executing program 6: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) ioprio_get$uid(0x3, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1d8, r2, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x400]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x3, 0x7]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x8, 0x1, 0x8b]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x200, 0x101, 0x8, 0xfff, 0x1, 0x3, 0x1, 0xfff, 0x100, 0x81]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x0, 0x6, 0x1f, 0x3, 0x0, 0x7]}, @NL80211_ATTR_FRAME={0x17b, 0x33, @probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_a, @device_b, @initial, {0xd, 0xd0b}}, @ver_80211n={0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x15, @default, 0x0, @void, @void, @val={0x3, 0x1, 0xaf}, @val={0x4, 0x6, {0x81, 0x3, 0x1, 0x3}}, @void, @void, @val={0x72, 0x6}, @void, [{0xdd, 0x3c, "c9f4c153d55c005e5f2fba9c22773fbf9123be637e4cb30c141e51187e25954220c2a1745cbc9336e3fb280f3d391860336bb2867f68c4f2f04f1083"}, {0xdd, 0xfc, "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"}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x50}, 0x4080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)={0x2f8, r3, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9a7}, @NL80211_ATTR_FRAME={0x2c8, 0x33, @assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @initial, {0x1, 0x7}}, @ver_80211n={0x0, 0x8, 0x1, 0x3, 0x0, 0x2}}, 0x1, 0x2e, @default, @void, @val={0x2d, 0x1a, {0x4c, 0x0, 0x7, 0x0, {0x6, 0x5be, 0x0, 0x1f, 0x0, 0x1}, 0x400, 0xed80, 0x8}}, [{0xdd, 0x6f, "8abcc7af51d73aa360e86e27fb566df09e077beeecec75d41fcdfc365b99a6b3ae6b00f24d365db32c41b1205b0cb3be68aea2e5803a90cc9d382d2b414114e3b712d52a627842b600bebdc1a57355b31f91a320a097356af117d49fc00ab96411e1674d9cd3da41155b94e2205784"}, {0xdd, 0x60, "58ac5fe46f3a7f9d511b9e68a3ebfe025d61c934e97733154220061f0fbdf944ac287eaf7307033790d0ab9cc4d686fae235df1a674d8351047e1342f71289710e3765f2539b0f502b243c5f8499219069156165eac0ca6dfcbe945b8cd9df71"}, {0xdd, 0xfd, "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"}, {0xdd, 0xb2, "d780f421fa7d9847dbe99f71c34a56d4b258002d02ba34a65f8787fc182d56e7772bcdae7895a824de1e7ee91bd68221dda213f7d113a60e285f33840976ecd21b1a9350c9b36a905a2b98342f46053199a99cb40db9ca3a97a3d7802c3e7b8cdce09d3492969caf790cf86ac89a03b336e6ce3f99543ebaf50a6e65db1c179f5ce898f456cd36985bd6c3913c0eb5260d6e2e489f8d61953f8553057941cd599209173f40a06b89a0735a7b48a46455e26c"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x117f}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4004061}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x35}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}}, 0x20048840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xd60832edd36a394d}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r5, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000884) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x1a901) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r7, 0xc0305302, &(0x7f0000000b40)={0x7, 0xffff1839, 0x1, 0x0, 0x2, 0x800}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r8, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x7fffffff, 0x3f}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x70, r9, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r10, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xf0, r9, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7fff, 0x30}}}}, [@NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="49e2820e5a8333dd67a23d38a53838234bc2ad307374c235"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0283cada1f112be77b8ab35a006ed5374d4bc4cb418aaa6409afe21a15b89ef1"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5dda2abec75a6122e48b39c4a63e0623"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0109a87f9060a067bb5837fde2a647dc"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8da9bc22d7a2a2ab7886ea3200530a1a9679bad04473d3aae9440650b09a7194"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a1d826016f54314be6f25e41a37939a3"}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 01:55:40 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/virtio_gpu', 0x200000, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x124, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x0, 0x7, 0x0, {0x5, 0x6, 0x0, 0x2, 0x0, 0x1}, 0x1, 0x7, 0x81}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSS_BASIC_RATES={0x15, 0x24, [{0x8, 0x1}, {0x2}, {0x24, 0x1}, {0x4, 0x1}, {0x1b}, {0xb, 0x1}, {0x4c}, {0x16, 0x1}, {0xb, 0x1}, {0x24, 0x1}, {0x36, 0x1}, {0x11}, {0x6, 0x1}, {0x1, 0x1}, {0x16}, {0x6, 0x1}, {0x2, 0x1}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x2, 0x3, 0x0, {0x6, 0xff, 0x0, 0x35a, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x5}}, @NL80211_ATTR_KEYS={0x6c, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "de87fdd194"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_TYPE={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "bf844ddbfe"}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}]}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x17, 0x34, @random="b184a8e1879670580b5771fe1172443fcfadc8"}]}, 0x124}, 0x1, 0x0, 0x0, 0x8814}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000001200)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f00000002c0)={0xf00, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x312, 0x33, @mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3f}, @broadcast, @broadcast, @random="a3f5de2ec75b", {0x0, 0x2}}, @ver_80211n={0x0, 0x0, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x1010, 0x2b, @random=0x5, @void, @void, [{0xdd, 0x62, "55395523887e0ec9da8f880bdcdc5cf60a6ecaeb10a1405f7e132703eb5647055892661774ac114989a7f63414023e54c1ea374528ce4ccef96a7b5fb584fbcfe06095f1c0eb7d275f3fb2e6006d69517dfad85117058949e567d5c7bea909d14a38"}, {0xdd, 0xc0, "40aaee0f415e0625360a210a8fbcfef7fa07cc6644a915430bb962c994f3510fd9d64b175636b2134023060cba1eb2f4ee0ea3af8e4ecfa42f9246757be34b73c003223fb2546f88952bdcc2aeed5b32f2b5e5f1409f344ee5917e047cce3ab4145f07963ed71754a3af2688efde0342613cb008b327a92a9d3cec2b3780a3fd641bc96799694b5f40d7eca21ac73cf72fa0184154521d284b58a5830e4f28d49f222d2a533a0d1fe9651c6e501e17101e46bef864b6c0a7cd37fdd3d94034fe"}, {0xdd, 0xf4, "b6b7d88bc270a4220435f0d072617abe3d9b78a7cea65a3baeecac89ab3f6cf97e5717bb074650726a9613c1f67728ea546f62c3eb0723a20105d95e8eb386c077916a99c7aad5f26ab5dbf8dec115686270f3e2af06bea191629a146ff60b7911a61457de26e352804357b20fd0f106f7df96da0ac91dcc5a6bb142cb9ff64e2d35dc842bb6a3f71a428db1f2b98b7a07b817943730af26891de4db9ac8dd4824e07408b306b098c6ee5d4890a6d7bd44fc17ceddcafa997c132ff5daeb588f40a9adbb2c0d8fd9c419db9074ea40d07c9e2dcdc026b30c1df6ea3fa679d395f6701cadfc25fcf21f61ce6dcc9fb33afac5466c"}, {0xdd, 0xce, "5728ddd8a0af239c052a4a7122abb477e32484b3bb6d8e66baed84ec6a2b79e977b7b03e0c505b647c6203380d93f696b52eaafd7465d22f622736afc3e2233aa6abc0b99b400540037adc7b3ea048fe2e11cbf0eaffce1204d39e9556f00eaf2e84d0cc50a5ef0a9e0f59a507e5ee5b7f8cc9a7c3e2bbc405e48c05c9dbd9f5c3b31634179d8df85145aac59748741b9bc733bdc94855e8dcb502fd9b2e3487ed304e1f35f29da89abc66bf3dcb4251b9b5461bdbd5a195448ccdf6b8136d687a2db93f6c2266f2ee147aaf2a0f"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x505, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_b, @from_mac=@device_b, @device_b, {0xd, 0x3b7}}, {0x3, 0x1, 0x3, 0x0, 0x7}}, {@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x40}, @device_a, @from_mac=@device_b, @random="caba86c43867", {0x5}}, {0x7, 0x1, 0x0, 0x1, 0x20}}}, @random="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"}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x6b7, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @random="6f496f024e34", {0xf, 0x4}}, {0xd, 0x0, 0x2, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_a, @random="560a17e2c54e", {0x8}, @broadcast}, {0xc, 0x1, 0x1}}}, @ver_80211n={0x0, 0x4, 0x0, 0x1}}, @random="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"}}]}, 0xf00}, 0x1, 0x0, 0x0, 0x4002002}, 0x40001) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000019c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x71eb643194a9ef61}, 0xc, &(0x7f0000001980)={&(0x7f0000001280)={0x700, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0xb9}, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x2c4, 0x33, @data_frame={@no_qos=@type10={{0x0, 0x2, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x1}, @from_mac=@device_b, @device_b, @device_a, {0x6, 0x6}}, @a_msdu=[{@device_b, @broadcast, 0xd5, "0539c6cd1bc4f74a6776a69292618cbf7147f114012b98895e8e520d8c66e2e32f6ea45519a29997d8870d9262e1fcf40609c0b96eb71ac83e3379e86186e3565ace4f4dd234f4b95f683e4b64ba3612ba2a160c6c878279fa27a9945eb576b3e134bb32389169e8b6deb17ad922d6ca0f024cadfe89b2ab6e3e974e215bbd567c6e6e9cb7ec8213a92acd33e7ba2479c6fe71c1f1bae40b0ade633cb7a43719ef62f9820f47a890c9b54599fb482e61867f1f40151a2b0ec8483547d89fa0c3281aff5bab862df2aebdf0d479c20351b2d7c0004a"}, {@device_a, @device_a, 0xc1, "1fcd62fc7acf29457a7ed05ee16f5c5b28e2b5c6933d927912fc2eb7d0d6e070337cfc4f7700fab9f628b2d647db0cbd7fc238b21f02e47f548fc455e28fed7e44ab0be87692da42356429e9398cb5e50f6b4aafb5668201a9a8f14a5b08097d4a570ddbae3bc5aa7d08dbb71cb00f17d76b167c902872f430111f866a5e4a136d6669217565fe60ba80253b799f2fb8bc9f08245060878441bba3bfa16316fa45e8b2097c1ae74f20c503616773a074dc3af8b6e5587111d8eff1bf0a4ecc8e8c"}, {@device_b, @broadcast, 0x6f, "6b6438ef2d9bf937324390a8b2b5742fa405548facef18024061d7c86a529c1c47df3a2a034d2ee269ce874fbeca5665cd4baf7f1457ba676bcfc00a21aeefc92edab55cbfea4ab33bce948374544398ff2364f35e77fd9380608db5a783e227dc232765e700bcde5e5539be530443"}, {@device_b, @device_a, 0x63, "e3edd7e96c90a0a03346db7873024fac8d7d072575a694520fce25d4fd0481cbee6de7afd17f647b6aa0617a3095485565df6f6a130d6f491b17ed0a043b90403777a8ebdfe6ea04b4300f0e662dabbbfd2de47db5c5c1b9fff9caae35d64551ce8250"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x3f6, 0x33, @mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7f}, @device_a, @device_a, @random="cdd853b6208e", {0x6, 0x20}}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x800, 0x7, @device_a, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0x1b, 0x1}]}, @val={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x0, 0xab9, 0x0, 0x7, 0x0, 0x1, 0x1}, 0x0, 0x8}}, [{0xdd, 0x5a, "3f0937c661b40c49f5fe437eff9c4c4f560b2da7473130349f0da9a745841daf454b8441eb466b8eed05bd32b9f20dbe84f79d65ad3d675012f2e5823b7f530f746b330a6cc4e7705d88780baa7bb8bbdc89e90d295479e1d588"}, {0xdd, 0x6c, "1ae1314d62b687f414b3f9cfcb1b9ef8eb91506a8b47893f03422ca60c30e35180ac2c83ffd61b9b36f9c81c1eeee415a07fd6544c2beef9f54857c8b2ac5294634669a26efbff07c55b1da60fb54c0f2f499101a14e2de25d8b5672fabeb92bab0b424fa65c9d8599dd6e4b"}, {0xdd, 0x94, "1c791247b101984dc1e586b0483062dcf1c9d61ba861ef34fe10794d0cf923e88647b5a9e496992ef6494ced577252b4c9151649db70acdb58b2239cd30ca4db35cf9722777bd8cb4ad5094fe2f521a8725e144ae2d76cbb5cefb4135c7b30d00d2c85d98ea4a0bdff3f4aaf6b1c062115a7caf72a14973d99f418dfc31442920fb98779841aff861a3aeabc6e620a43f9176367"}, {0xdd, 0xe1, "6477cab5f4116bd18c9e7d894b455bd2ffa20c02befd0a5b5cd570937c2f51764c3e70135092d4b8ebe17e652ae149c0901a9400a8fdf26440b398f053d9520a35b825654f8c58a7d6e869a99fa2de0c03d75158618fc600c52643eac4c1b3753bf37fdc2593253a1fdfedd1bf06fddb2975d850fefc75d3490d782e30bae35b8572c84db1d859092263b9082e1b61800286a09ca2b3384350d0b0d4b683353eff046862d49a38ad0cff0016f017eb0749cf4a8ef6056339f1528349667735940a9c85ee95ac6a573e90750334d83e0d12e20ddf66580ad77338882eb1a4354a2c"}, {0xdd, 0x59, "efb6706506dfa51bcfd3456228b245fdf7a9e8ed513fe87dc682bbe1613b2683e0bbb1e109df4666ba72ba033596a8ff5401bb131611bc2dcf97c99cbe450d9af0c3ba3c154ee32e1774cdb7238aa5c025437856f36b348ed9"}, {0xdd, 0x25, "2c5402055d3075fd0ebc6c53cddcc25f348a31063ad7c39245f1ca9bf702586501188a4b28"}, {0xdd, 0x69, "f8b0b893554f083db53f35ac8332c3088ba08b1955bfdc19765f6fa16c1ceb5ae9e98c4e827de5d2557abb20166385ab9d86aa23aa9d176087c7e2be42b2698553801941d657d163215d8fbfd4ce59f2d9b70b43669673898ce3adb8d934d42c566a64cafb68108356"}, {0xdd, 0x73, "37c60e4748086690ab95c7720b225c5aeb607cf25ebaee3113473e6441758b84896108242f1bf6eef6407f21bbdad6e2d1034ec32320d60af4425b872b37447665d5dd5a5367f3904991de755f244abc5bd0328b20439695bb7338879cfd90bc060cc9dc52bc18da592c0b0a5018a385833986"}]}}]}, 0x700}, 0x1, 0x0, 0x0, 0x40841}, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000001a00), r2) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xdb0f, 0x73}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="6ade0289cd0d56a039b552fa0878d1c688cb4964719dfe6534abb4"}, @NL80211_ATTR_SSID={0xe, 0x34, @random="dec395f51f3dd40e91cf"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x4000900) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x30, r0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20101001}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x20, r3, 0xfa17d5f7ccbe102, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x392a, 0x5}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x1c, r3, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40094) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14, r3, 0x300, 0x6, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000001fc0)={0x30, @tick=0x2a2, 0x7f, {0x3f, 0x7f}, 0x6, 0x2, 0x9}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002000)='/sys/module/virtio_gpu', 0x101000, 0x180) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002080)={0xc8, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0xc8}}, 0x40000) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x14, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x150, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0xc3, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @prep={0x83, 0x1f, @not_ext={{}, 0x4, 0x9, @device_a, 0x0, "", 0xffffffe0, 0x3ff, @broadcast, 0x1}}, @challenge={0x10, 0x1, 0xee}, @tim={0x5, 0x7d, {0x6, 0x6c, 0x1, "85e279d714d73f8210133dfbe0627f5d2261f58139548ce752872bdd1a179eef19c892708dd0c0d2664ebdada9f7635554167abb52b71260df4d2ed95df045b616671c44a44e0eb9601d7e6f67c161c8016ff70048bf97b1965e379998ba152f726958b3291fc119cbdf151360d65cf9cc37f47b254874778ec0"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @channel_switch={0x25, 0x3, {0x1, 0xab, 0x80}}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x20, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000001}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x400}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x334}, {0x8, 0x0, 0xd59}, {0x8}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x100}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xec}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa}]}, 0x150}, 0x1, 0x0, 0x0, 0x20008c0}, 0x801) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0xc00a804}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x965f}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1400, 0x0, 0x6, 0x0, {0x4, 0xff, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x300, 0xaceb, 0x1f}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd2}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x80) [ 93.394558] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.398204] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.400225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.406555] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.415284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.419082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.460079] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.465671] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.467759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.479290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.487246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.490258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.508223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.517285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.533676] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.542671] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.547773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.548229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.553333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.572318] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.576525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.582555] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.584551] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.590462] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.593022] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.594656] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.601287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.614670] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.617349] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.637380] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.670595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.680635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.686558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.747380] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.753244] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.755072] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.787951] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.793242] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.795138] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.800904] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.803034] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.804907] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.836437] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.851654] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.854567] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.865384] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.869285] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.871523] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.477319] Bluetooth: hci0: command tx timeout [ 95.541084] Bluetooth: hci1: command tx timeout [ 95.605104] Bluetooth: hci2: command tx timeout [ 95.669939] Bluetooth: hci3: command tx timeout [ 95.732935] Bluetooth: hci4: command tx timeout [ 95.861944] Bluetooth: hci5: command tx timeout [ 95.861992] Bluetooth: hci7: command tx timeout [ 96.054033] Bluetooth: hci6: command tx timeout [ 97.525994] Bluetooth: hci0: command tx timeout [ 97.589079] Bluetooth: hci1: command tx timeout [ 97.653924] Bluetooth: hci2: command tx timeout [ 97.717039] Bluetooth: hci3: command tx timeout [ 97.780945] Bluetooth: hci4: command tx timeout [ 97.908993] Bluetooth: hci7: command tx timeout [ 97.909022] Bluetooth: hci5: command tx timeout [ 98.100915] Bluetooth: hci6: command tx timeout [ 99.573316] Bluetooth: hci0: command tx timeout [ 99.636911] Bluetooth: hci1: command tx timeout [ 99.701961] Bluetooth: hci2: command tx timeout [ 99.766121] Bluetooth: hci3: command tx timeout [ 99.829986] Bluetooth: hci4: command tx timeout [ 99.958874] Bluetooth: hci5: command tx timeout [ 99.958899] Bluetooth: hci7: command tx timeout [ 100.148911] Bluetooth: hci6: command tx timeout [ 101.622900] Bluetooth: hci0: command tx timeout [ 101.684970] Bluetooth: hci1: command tx timeout [ 101.749904] Bluetooth: hci2: command tx timeout [ 101.814432] Bluetooth: hci3: command tx timeout [ 101.878445] Bluetooth: hci4: command tx timeout [ 102.006891] Bluetooth: hci7: command tx timeout [ 102.006927] Bluetooth: hci5: command tx timeout [ 102.197966] Bluetooth: hci6: command tx timeout [ 153.255479] syz-executor.6 (285) used greatest stack depth: 23872 bytes left [ 155.654268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.658695] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.661356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.667089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.673195] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.677257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.738688] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.741665] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.746506] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.751743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.756558] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.763415] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.774322] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.781995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.793798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.800467] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.806733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.807784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.808422] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.810300] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.818086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.821193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.823888] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.828240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.841096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.854443] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.858639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.870493] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.876188] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.880378] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.889638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.897549] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.902062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.924242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.942715] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.946596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.956420] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.972420] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.974508] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.980258] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.983172] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.986098] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.987057] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.990785] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.992894] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.043225] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.048401] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.052526] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.748977] Bluetooth: hci0: command tx timeout [ 157.878932] Bluetooth: hci1: command tx timeout [ 157.941001] Bluetooth: hci3: command tx timeout [ 157.941064] Bluetooth: hci4: command tx timeout [ 157.941973] Bluetooth: hci2: command tx timeout [ 158.069973] Bluetooth: hci6: command tx timeout [ 158.070436] Bluetooth: hci5: command tx timeout [ 158.135103] Bluetooth: hci7: command tx timeout [ 159.796906] Bluetooth: hci0: command tx timeout [ 159.925214] Bluetooth: hci1: command tx timeout [ 159.989882] Bluetooth: hci2: command tx timeout [ 159.989981] Bluetooth: hci3: command tx timeout [ 159.990070] Bluetooth: hci4: command tx timeout [ 160.117018] Bluetooth: hci5: command tx timeout [ 160.117111] Bluetooth: hci6: command tx timeout [ 160.180954] Bluetooth: hci7: command tx timeout [ 161.845930] Bluetooth: hci0: command tx timeout [ 161.973018] Bluetooth: hci1: command tx timeout [ 162.037517] Bluetooth: hci4: command tx timeout [ 162.038121] Bluetooth: hci3: command tx timeout [ 162.038178] Bluetooth: hci2: command tx timeout [ 162.165928] Bluetooth: hci6: command tx timeout [ 162.166075] Bluetooth: hci5: command tx timeout [ 162.230573] Bluetooth: hci7: command tx timeout [ 163.894842] Bluetooth: hci0: command tx timeout [ 164.022349] Bluetooth: hci1: command tx timeout [ 164.085859] Bluetooth: hci2: command tx timeout [ 164.086394] Bluetooth: hci4: command tx timeout [ 164.086426] Bluetooth: hci3: command tx timeout [ 164.213178] Bluetooth: hci5: command tx timeout [ 164.213297] Bluetooth: hci6: command tx timeout [ 164.277898] Bluetooth: hci7: command tx timeout [ 217.666025] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.668679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.672407] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.676308] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.680987] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.683202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.743942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.751454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.754383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.764098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.774129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.776815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.015518] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.017334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.019634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.020295] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.025630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.026546] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.029098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.030725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.072519] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.079952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.083154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.085095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.089183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.092604] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.094342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.095078] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.101355] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.103964] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.112163] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.114173] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.127067] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.170537] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.173783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.176067] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.178911] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.181364] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.185449] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.188067] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.211063] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.212187] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.224629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.230451] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.234220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.259412] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.264329] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.270488] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.764925] Bluetooth: hci0: command tx timeout [ 219.829087] Bluetooth: hci1: command tx timeout [ 220.085074] Bluetooth: hci2: command tx timeout [ 220.213946] Bluetooth: hci3: command tx timeout [ 220.214237] Bluetooth: hci4: command tx timeout [ 220.277059] Bluetooth: hci5: command tx timeout [ 220.277536] Bluetooth: hci6: command tx timeout [ 220.341074] Bluetooth: hci7: command tx timeout [ 221.812902] Bluetooth: hci0: command tx timeout [ 221.876951] Bluetooth: hci1: command tx timeout [ 222.133907] Bluetooth: hci2: command tx timeout [ 222.261108] Bluetooth: hci3: command tx timeout [ 222.261250] Bluetooth: hci4: command tx timeout [ 222.324942] Bluetooth: hci5: command tx timeout [ 222.325029] Bluetooth: hci6: command tx timeout [ 222.388857] Bluetooth: hci7: command tx timeout [ 223.860904] Bluetooth: hci0: command tx timeout [ 223.924851] Bluetooth: hci1: command tx timeout [ 224.181044] Bluetooth: hci2: command tx timeout [ 224.310845] Bluetooth: hci4: command tx timeout [ 224.310932] Bluetooth: hci3: command tx timeout [ 224.372872] Bluetooth: hci5: command tx timeout [ 224.372956] Bluetooth: hci6: command tx timeout [ 224.436870] Bluetooth: hci7: command tx timeout [ 225.909104] Bluetooth: hci0: command tx timeout [ 225.972976] Bluetooth: hci1: command tx timeout [ 226.229041] Bluetooth: hci2: command tx timeout [ 226.359080] Bluetooth: hci3: command tx timeout [ 226.361090] Bluetooth: hci4: command tx timeout [ 226.421024] Bluetooth: hci6: command tx timeout [ 226.421220] Bluetooth: hci5: command tx timeout [ 226.484938] Bluetooth: hci7: command tx timeout [ 279.880503] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.886211] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.888474] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.898900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.902672] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.910574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.323170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.329981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.340691] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.342401] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.347048] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.348424] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.349909] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.351091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.352514] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.355669] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.356929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.358590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.363277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.368674] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.369382] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.371480] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.392338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.394354] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.397534] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.400164] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.401196] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.424261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.427401] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.429001] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.480870] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.494710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.501545] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.503233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.505580] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.506392] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.508157] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.515936] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.520291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.523367] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.530112] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.534163] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.537222] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.551838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.553529] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.555629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.556469] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.557410] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.972917] Bluetooth: hci0: command tx timeout [ 282.421095] Bluetooth: hci2: command tx timeout [ 282.421456] Bluetooth: hci1: command tx timeout [ 282.485352] Bluetooth: hci3: command tx timeout [ 282.485592] Bluetooth: hci4: command tx timeout [ 282.612910] Bluetooth: hci7: command tx timeout [ 282.613320] Bluetooth: hci5: command tx timeout [ 282.613443] Bluetooth: hci6: command tx timeout [ 284.021896] Bluetooth: hci0: command tx timeout [ 284.469903] Bluetooth: hci2: command tx timeout [ 284.469922] Bluetooth: hci1: command tx timeout [ 284.533898] Bluetooth: hci4: command tx timeout [ 284.534441] Bluetooth: hci3: command tx timeout [ 284.660900] Bluetooth: hci6: command tx timeout [ 284.660997] Bluetooth: hci5: command tx timeout [ 284.661086] Bluetooth: hci7: command tx timeout [ 286.068943] Bluetooth: hci0: command tx timeout [ 286.516895] Bluetooth: hci1: command tx timeout [ 286.517475] Bluetooth: hci2: command tx timeout [ 286.581886] Bluetooth: hci3: command tx timeout [ 286.581984] Bluetooth: hci4: command tx timeout [ 286.708908] Bluetooth: hci7: command tx timeout [ 286.709014] Bluetooth: hci6: command tx timeout [ 286.709011] Bluetooth: hci5: command tx timeout [ 288.116950] Bluetooth: hci0: command tx timeout [ 288.566915] Bluetooth: hci2: command tx timeout [ 288.566956] Bluetooth: hci1: command tx timeout [ 288.629368] Bluetooth: hci4: command tx timeout [ 288.629526] Bluetooth: hci3: command tx timeout [ 288.756875] Bluetooth: hci6: command tx timeout [ 288.756984] Bluetooth: hci5: command tx timeout [ 288.757036] Bluetooth: hci7: command tx timeout [ 342.215117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.219421] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.222624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.225840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.233345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.237538] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.240283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.242645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.259916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.272056] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.284967] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.289354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.488497] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.493308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.497525] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.506296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.516579] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.519429] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.552683] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.558179] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.560463] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.572051] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.578147] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.580284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 342.602438] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.625070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.649689] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.677860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.684176] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.687333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.694196] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.699197] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.702412] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.731721] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.737474] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.767417] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.780165] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.799814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.800183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.828166] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.856270] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 342.858866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.901123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.912355] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.920943] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.952652] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.959025] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.961237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.308923] Bluetooth: hci1: command tx timeout [ 344.309341] Bluetooth: hci0: command tx timeout [ 344.628916] Bluetooth: hci3: command tx timeout [ 344.629357] Bluetooth: hci2: command tx timeout [ 345.014559] Bluetooth: hci4: command tx timeout [ 345.076858] Bluetooth: hci7: command tx timeout [ 345.205214] Bluetooth: hci6: command tx timeout [ 345.781967] Bluetooth: hci5: command tx timeout [ 346.356929] Bluetooth: hci0: command tx timeout [ 346.357020] Bluetooth: hci1: command tx timeout [ 346.680029] Bluetooth: hci2: command tx timeout [ 346.680262] Bluetooth: hci3: command tx timeout [ 347.060909] Bluetooth: hci4: command tx timeout [ 347.125098] Bluetooth: hci7: command tx timeout [ 347.253078] Bluetooth: hci6: command tx timeout [ 347.828901] Bluetooth: hci5: command tx timeout [ 348.404902] Bluetooth: hci1: command tx timeout [ 348.405056] Bluetooth: hci0: command tx timeout [ 348.725049] Bluetooth: hci3: command tx timeout [ 348.725345] Bluetooth: hci2: command tx timeout [ 349.109803] Bluetooth: hci4: command tx timeout [ 349.173922] Bluetooth: hci7: command tx timeout [ 349.302031] Bluetooth: hci6: command tx timeout [ 349.877282] Bluetooth: hci5: command tx timeout [ 350.453084] Bluetooth: hci1: command tx timeout [ 350.453310] Bluetooth: hci0: command tx timeout [ 350.773946] Bluetooth: hci3: command tx timeout [ 350.774119] Bluetooth: hci2: command tx timeout [ 351.157036] Bluetooth: hci4: command tx timeout [ 351.221499] Bluetooth: hci7: command tx timeout [ 351.349172] Bluetooth: hci6: command tx timeout [ 351.925866] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 02:00:47 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff888024397878 RCX=0000000000000001 RDX=1ffff11004872f23 RSI=ffffffff819c998d RDI=ffff888024397884 RBP=ffff888024397918 RSP=ffff888024397790 R8 =0000000000000001 R9 =ffff8880243977f0 R10=000000000003ab4d R11=0000000000021e62 R12=ffff888024397878 R13=0000000000000000 R14=ffff88802f2d9bc0 R15=ffff8880257a9510 RIP=ffffffff815ec507 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f896d4f9d5c CR3=000000002fe72000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff86849b8f RBX=0000000000000001 RCX=ffffffff86849b8a RDX=0000000000000000 RSI=1ffffffff0d09371 RDI=ffffffff864d0058 RBP=ffff8880097478c0 RSP=ffff8880097477f8 R8 =ffffffff86849b36 R9 =ffff8880097478a8 R10=000000000003ab4d R11=00000000000242cd R12=ffff8880097478c8 R13=ffff8880097478b0 R14=ffff8880097478a9 R15=ffff888009747868 RIP=ffffffff813492e1 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8ce486a310 CR3=0000000013626000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000