Warning: Permanently added '[localhost]:37698' (ECDSA) to the list of known hosts. 2025/01/24 14:37:54 fuzzer started 2025/01/24 14:37:55 dialing manager at localhost:45511 syzkaller login: [ 90.028994] cgroup: Unknown subsys name 'net' [ 90.173206] cgroup: Unknown subsys name 'cpuset' [ 90.211057] cgroup: Unknown subsys name 'rlimit' [ 96.831178] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 14:38:18 syscalls: 2217 2025/01/24 14:38:18 code coverage: enabled 2025/01/24 14:38:18 comparison tracing: enabled 2025/01/24 14:38:18 extra coverage: enabled 2025/01/24 14:38:18 setuid sandbox: enabled 2025/01/24 14:38:18 namespace sandbox: enabled 2025/01/24 14:38:18 Android sandbox: enabled 2025/01/24 14:38:18 fault injection: enabled 2025/01/24 14:38:18 leak checking: enabled 2025/01/24 14:38:18 net packet injection: enabled 2025/01/24 14:38:18 net device setup: enabled 2025/01/24 14:38:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 14:38:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 14:38:18 USB emulation: enabled 2025/01/24 14:38:18 hci packet injection: enabled 2025/01/24 14:38:18 wifi device emulation: enabled 2025/01/24 14:38:18 802.15.4 emulation: enabled 2025/01/24 14:38:18 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/24 14:38:18 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/24 14:38:18 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/24 14:38:18 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/24 14:38:18 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 14:38:18 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 14:38:22 starting 8 fuzzer processes 14:38:22 executing program 0: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0xf7, &(0x7f0000000040)=0x1) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6a}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1a}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2d}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4004) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200008d5}, 0x40000) r0 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x5, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000380)={0x55c, 0x0, 0x101, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NAN_FUNC={0xec, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0xdc, 0xd, 0x0, 0x1, [{0xb4, 0x0, "c5830be4c9b1102178ebc34d8cc2a7fdde1eaec68f2b6852cf0dc808efedb68a4d9f592e6a8f5dc03af7bd716ac4b4258292136c7009cd9f2c9c29b5df39cf9f8f2f22e864099318febe63540caeb16d0da69b67788ddba3a1ba97e7d6f810050bbb2b34036c71dac468faac5fcda2336d3d41e586beb596df34b678d8a44d7e7b6807899fc24642557072fba1aea558821b54ff4696f61f368d59a8f4ecbda63f9a929b267e883401e53100ad35f889"}, {0x21, 0x0, "917725f59fd1c845a136a38e1dd8606156ea3ff059dffbc7de8149cee2"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}, @NL80211_ATTR_NAN_FUNC={0x228, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x210, 0xd, 0x0, 0x1, [{0xf1, 0x0, "54495c2ff72602fcbc3b78986f6ee814698e30ebe63f2d14ce41be32f42bdde13b9ce760c741015102c0240ddc034a7ebf9eef9f83869d744084b401e490fc12fd341a22137991673c854409442d3b600e569b3622633bf76f4e1eab5bc136cead8c0ef963008ec375082a86ccdab77e2367dc7d4168b2946010e37d2d1bc0c402935e968ce20b8301a5fa51205769a2ee2e6d3176c6306e2ca28e6cf6e14ae474d5e384e186517f58159694db9cd268fc4e5451c2ec92aa76e35b0c9cc6613b6a881c6c3b0798f1a90899564a0f7802d9d3cc6453c9fdaa3bd22187f898d3ab7cf92077fa495f6bee74665113"}, {0x8d, 0x0, "3c8975688b52d4d016cc4b2335ae540853bbbf7129135d55434fbb8e70c89d478d970dfde9dec1f5bccdaf453f8ec240fdb2e8645efaa88bf2809527be830ad7a3d774bf60a9aad7963bad44e996e01496974d45ca9fd43f95f698c2f145b8cb24f9d6611f5d4a4e28a475b2aa0803d889f133a8d599f8d4868786c97a0a7e730f19de2db19fe4edf3"}, {0x63, 0x0, "7c02868a43d1931ae62f1dac861d09764e4f32b7c5f67168443c9cb8c38a1c1dc870c0819ee7d0fd0e593eb821d61a19840304056c4590e59857d4f9e9e84a83d50af4f0b83a7a6e4d189df2f473be7141754347a13e7409cb6e719303a9dd"}, {0x12, 0x0, "49da88b2401a07d800d13d212af7"}, {0xf, 0x0, "a5ae43e5d84db4b7cb18c9"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "753f10f25594"}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x228, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x210, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "9feaf7daa31d4dc90a6330aafcb612c9d220ef63f83bf92ae0122240ba26da1f4bf4a9e128714c8d1cab081909b61ed1569197dd52ec895494e6acd58e5b652ecd389ca270e7b58e4a3e4897bb88298cf644a914dab5b86f9303ef4fdc811a123491cac32ec8e7d2cf6247a74fb4a8fd162dba949007ee03fd55da8bb973d814d2b48b63f462233bb5acdb95b79bedf4e1b1b0fb7000e370703dcb07eb85b60a9bde1ce8172b85103656d1c59c1506b14c7e831b078a153d0a24166ea577570e9387a8d3d46339b5fb12e8883f38b2ba8f3ec2a8bfa3f2bf0d5dd3a1f88ab38d02c00c6df447bbf0beb9a21d61f9a3082c74ba2e62e5a0e44d2d45b1a15116"}]}]}]}, 0x55c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000980), 0x400000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, r3, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xffff8000, 0x69}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52e}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6e2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x4010) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x98, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x39}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x98}, 0x1, 0x0, 0x0, 0x8d0}, 0x40000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40100, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d40)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000d80)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x57, r5}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x68, r3, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7be788ff9d07f7e390726492c8363f2"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xa88}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x54}, @NL80211_ATTR_PMKID={0x14, 0x55, "0c8bed4ecb7debbe9f6953bd4962e787"}]}, 0x68}, 0x1, 0x0, 0x0, 0x44010}, 0x2800c050) r6 = syz_open_pts(r0, 0x101100) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r6) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x30, r7, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x47}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x30}, 0x1, 0x0, 0x0, 0xf97cf50eefbf7978}, 0x20000004) ioctl(r0, 0x6, &(0x7f0000001040)="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") fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000001140)=0x5) 14:38:22 executing program 1: syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x117c, &(0x7f0000000000)={[{0x44, 0x4e00, "de8f61cf48f1479f626011adc19befcbdc0d0f6ffc05d79862cc8d969411c05cfd33c86b29c1a0e8d3d742d259bd5265d8733d0974daee31b7eb5ab31f45819dda6755c9"}, {0x5c, 0x4e00, "5dbe3e693eb7b9bb46780f8e9c6cac17781955d979cd2888608457793b1bf013b1a135bff1065baf205244edea92e2b0f7fd3a3de3b7165fac272ad62e202f35f05d7cd206631d61a0184599995b13c2995ca55887aa25fc40ee79ab"}, {0xe, 0x4e00, "2b79312606d8148d60a780589acd"}, {0x1000, 0x4e00, "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"}, {0xb5, 0x4e00, "795ba61c0dd7e77bf7e51d39daca7c2ad517d4281bc5d627a8e3715f9837e2b067591184b5e8d41a77e3e8596fa129d68cf6871946580a717a98e27699ea4ecd3303159016fa1e3c4807a35dd5ae891c091b09b7dea2ce9c7ea56365c1bd5fc8cf64015b5265eb2efdb18663ac8d476f308d239c366b59795bfc62fda2b8f7a637618834cdf38c3794a5426abeb5cf84744f1154651acd8fde60660650ca07cc4b8ff5a712b9c7ece91aa876c568b3231f78464a0e"}]}) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000001180)={0xd, 0x7, 0x1, {{}, 0x6}}, 0xd) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001280)={&(0x7f00000011c0)=""/173, 0xad, 0x10001}) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000012c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000001340)=@ready={0x0, 0x0, 0x8, "04efee0e", {0x1, 0xffd0, 0x2, 0x3f, 0x5}}) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r2 = openat(0xffffffffffffffff, &(0x7f0000001380)='./file0\x00', 0xdc242, 0x154) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000013c0)={0x8}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000001400)={0x3, 0x2}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={0xd0, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_ID={0x8}, @CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) r3 = add_key$user(&(0x7f0000001600), &(0x7f0000001640)={'syz', 0x0}, &(0x7f0000001680), 0x0, 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r3, 0x1) umount2(&(0x7f00000016c0)='./file0\x00', 0x2) recvmmsg$unix(r2, &(0x7f0000008900)=[{{&(0x7f0000001700)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/54, 0x36}, {&(0x7f00000017c0)=""/66, 0x42}, {&(0x7f0000001840)=""/149, 0x95}, {&(0x7f0000001900)=""/161, 0xa1}], 0x4, &(0x7f0000001a00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001a40)=""/69, 0x45}, {&(0x7f0000001ac0)=""/200, 0xc8}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/135, 0x87}, {&(0x7f0000002c80)=""/97, 0x61}, {&(0x7f0000002d00)=""/213, 0xd5}], 0x6, &(0x7f0000002e80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000002f80)=@abs, 0x6e, &(0x7f0000004340)=[{&(0x7f0000003000)=""/88, 0x58}, {&(0x7f0000003080)=""/15, 0xf}, {&(0x7f00000030c0)=""/212, 0xd4}, {&(0x7f00000031c0)=""/96, 0x60}, {&(0x7f0000003240)=""/54, 0x36}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/171, 0xab}], 0x7, &(0x7f00000043c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000004440)=@abs, 0x6e, &(0x7f0000004900)=[{&(0x7f00000044c0)=""/162, 0xa2}, {&(0x7f0000004580)=""/10, 0xa}, {&(0x7f00000045c0)=""/67, 0x43}, {&(0x7f0000004640)=""/114, 0x72}, {&(0x7f00000046c0)=""/255, 0xff}, {&(0x7f00000047c0)=""/156, 0x9c}, {&(0x7f0000004880)=""/98, 0x62}], 0x7, &(0x7f0000004980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000004a00), 0x6e, &(0x7f0000004bc0)=[{&(0x7f0000004a80)=""/246, 0xf6}, {&(0x7f0000004b80)=""/55, 0x37}], 0x2, &(0x7f0000004c00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000004c80)=""/229, 0xe5}, {&(0x7f0000004d80)=""/120, 0x78}, {&(0x7f0000004e00)=""/99, 0x63}, {&(0x7f0000004e80)=""/118, 0x76}, {&(0x7f0000004f00)=""/11, 0xb}], 0x5, &(0x7f0000004fc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000005240)=[{&(0x7f0000005080)=""/120, 0x78}, {&(0x7f0000005100)=""/129, 0x81}, {&(0x7f00000051c0)=""/56, 0x38}, {&(0x7f0000005200)=""/37, 0x25}], 0x4, &(0x7f0000005280)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/228, 0xe4}], 0x2, &(0x7f0000006400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000006440), 0x6e, &(0x7f0000008600)=[{&(0x7f00000064c0)=""/66, 0x42}, {&(0x7f0000006540)}, {&(0x7f0000006580)=""/4096, 0x1000}, {&(0x7f0000007580)=""/104, 0x68}, {&(0x7f0000007600)=""/4096, 0x1000}], 0x5, &(0x7f0000008680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000008780), 0x6e, &(0x7f0000008840)=[{&(0x7f0000008800)=""/28, 0x1c}], 0x1, &(0x7f0000008880)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0xa, 0x40000020, &(0x7f0000008b80)={0x77359400}) r6 = socket(0xf, 0x80000, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000008c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000008d00)={&(0x7f0000008bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000008cc0)={&(0x7f0000008c40)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x86, 0x4}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028000}, 0x4000004) keyctl$get_security(0x11, r3, &(0x7f0000008d40)=""/46, 0x2e) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000008d80)) 14:38:22 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) r1 = socket(0x2, 0x1, 0x1) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x9, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x7, 0x7, 0xb1, 0x7}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000300)={0x2}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000340)=0x415b) r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x11c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffff7f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5d0cf6a0cbc049ec}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x92d4}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x38}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40841}, 0x40000) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000580)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r5, 0x4b72, &(0x7f00000009c0)={0x3, 0x1, 0x2, 0x1d, 0x2a, &(0x7f00000005c0)}) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000a00)={'bridge_slave_0', 0x32, 0x30}, 0x11) ioctl$SNAPSHOT_FREE(r3, 0x3305) readahead(r5, 0x8, 0x4) ioctl$FIONCLEX(r4, 0x5450) tee(r4, r4, 0x0, 0x3) ioctl$TIOCNOTTY(r4, 0x5422) 14:38:22 executing program 3: getpgid(0xffffffffffffffff) r0 = getpid() move_pages(r0, 0x3, &(0x7f0000000000)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000040)=[0x8a7, 0x9, 0x3a7, 0x1c2f000, 0x94c], &(0x7f0000000080)=[0x0, 0x0], 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000380)=""/175, 0xaf}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/214, 0xd6}, {&(0x7f0000000680)=""/33, 0x21}, {&(0x7f00000006c0)=""/244, 0xf4}], 0x3, &(0x7f0000000800)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0xb0}}], 0x2, 0x2, &(0x7f0000000940)={0x0, 0x3938700}) syz_io_uring_setup(0x31ea, &(0x7f0000000980)={0x0, 0x6627, 0x0, 0x3, 0x1d2, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf3}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_PMK(r9, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c085}, 0x4000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r6) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x50, r10, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r11 = gettid() sched_setparam(r11, &(0x7f0000000d40)=0x6c) ptrace$getregset(0x4204, r11, 0x2, &(0x7f0000000e00)={&(0x7f0000000d80)=""/117, 0x75}) ptrace$getregs(0xe, r11, 0x5e, &(0x7f0000000e40)=""/70) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000ec0)=""/115) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000f40)={'caif0\x00'}) r12 = syz_mount_image$iso9660(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0\x00', 0x9, 0x4, &(0x7f0000001280)=[{&(0x7f0000001000)="9643c2ab5c53cad8185b062995c0a472f85c0db3ef066213653132581a5f6154b6ddc00f5889dfcba938bbd6e1878d66f5dcbd3c9f6fe01de7c0f00f72c712510a78c773705b7e8db336cc5bbad4f4fe43bb706f9316572633e0b4", 0x5b, 0xcde3}, {&(0x7f0000001080)="e354dfaf9a8d7ab2d63b3dc006dd384bb5e86ddb9ba90cc78dc297e135f8c4da01e651a08ee2675e3bfcdee5308d04c9cf3102336c61cc5fbb959124e3e9700f21a086a42d120c8e20619419f4b8eeb929707f1accdb17e1974a695623ea477518291a7c6f6f3cac01f43670792e494c027fd1ab30b668582a3e04afec4c9159dcb8e3b5582f1db813afab2d493b97d1e4eb0f6e4526a8672af918dfcc90cfdaf1d8ae3edc6a322b8f770fc9bd89510553b48201d4ee411047f5a8b1c1e479269caec2eb99846123dcff66098fa26dab0a202ed4209ad64f9ef3682448ea0c1be5aad8", 0xe3, 0x6aa}, {&(0x7f0000001180)="1b0c658944cbf6d762a989a1e662fa116549cf861cb7e52a6ba0aa0e6dfa4637644756c15634144e4339c1ed9b0dd599a299f8addde04ce64fb966dd4497bee3cde35a20a84e30a6f5d86f1350a243040be76a7183ec431394598cca79b34e97080d30ed52d138e6171604b0993e87166c26541f2411a369d1284a86b418b2eb3d581f", 0x83, 0x6f8a}, {&(0x7f0000001240), 0x0, 0x6}], 0xb04400, &(0x7f0000001300)={[{@cruft}, {@check_strict}], [{@euid_lt={'euid<', r8}}]}) ioctl$BTRFS_IOC_WAIT_SYNC(r12, 0x40089416, &(0x7f0000001340)) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x38, r13, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40014}, 0x4000014) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000014c0)={'vxcan1\x00'}) 14:38:22 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000180)=""/154) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x6, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0)="b658e9c8297b3f1cebd39ebb2654045b75d34e4ea489dde6041ca88740a52055831fa00bf7b5d9ddc794b74286fcf75a53d27cf84ace2ae55bf7315899", 0x3d, 0x576}], 0x0, &(0x7f00000003c0)={[{@rodir}, {@rodir}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp874'}}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@dont_appraise}, {@euid_lt={'euid<', r1}}, {@dont_appraise}, {@uid_lt={'uid<', r2}}, {@obj_role={'obj_role', 0x3d, '/dev/bsg\x00'}}]}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000004c0)='obj_role', &(0x7f0000000500)='./file0\x00', r3) r4 = syz_open_dev$vcsn(&(0x7f0000000540), 0x1, 0x4200) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) syz_open_procfs(0x0, &(0x7f00000005c0)='net/ip_vs\x00') r5 = syz_open_dev$vcsn(&(0x7f0000000600), 0x4a, 0x10000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) open_by_handle_at(r6, &(0x7f0000000680)=@orangefs={0x14, 0x1, {"cf9b9e008b2e983fbafc76fb64018c69", 0x8}}, 0x4002) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa0, 0x2, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xff}}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000840)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000880)={0x9, {{0x2, 0x4e21, @broadcast}}, 0x0, 0x7, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e20, @rand_addr=0x64010102}}, {{0x2, 0x4e21, @broadcast}}]}, 0x410) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, &(0x7f0000000cc0)={0x61, 0x3}) ioctl$RTC_WIE_OFF(r7, 0x7010) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x42100, 0x0) [ 116.513593] audit: type=1400 audit(1737729502.257:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:38:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x300, 0x70bd25, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c011}, 0x20000000) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x2400c881) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x101000, 0xa, 0x3}, 0x18) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x80801) ioctl$KDMKTONE(r3, 0x4b30, 0x2) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) statx(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x800, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) setxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x2}, [{0x2, 0x2, 0xee01}, {0x2, 0x4, 0xee01}, {0x2, 0xc}, {0x2, 0x3, 0xee00}, {0x2, 0x5, r4}, {0x2, 0x0, r5}, {}, {0x2, 0x7, r6}, {0x2, 0x2, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x3}, {0x8, 0x0, r7}], {0x10, 0x1}, {0x20, 0x1}}, 0x7c, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000880)={0x1, 'wg1\x00', {}, 0x9}) r8 = openat2(0xffffffffffffffff, &(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900)={0x4000, 0x34}, 0x18) ioctl$VT_SETMODE(r8, 0x5602, &(0x7f0000000940)={0x1, 0x0, 0x100, 0x40, 0xd6b5}) r9 = pidfd_getfd(r2, r8, 0x0) ioctl$LOOP_GET_STATUS(r9, 0x4c03, &(0x7f0000000980)) 14:38:22 executing program 6: sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc4, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1ff}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffff7}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24000841}, 0x48000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x160, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4e580fb16806312a106220ce17fd837be2f29cf941b1ccf6"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "add043bdfb1445b88f03760bf8f2a15d6935eee02e56666f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "90abdc561efb30949d499113a15e40400c0ace2deb4f2213"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6d2856bddd1ad900d9c28c0a38351144fd2fa864ec77d307"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7b71211e50fae4bf8fbd2a29bb15324023c34a50f5972842"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "73aed9e6c51898aa45c68bd66d7d44473bc8b66715cdcaab"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b17f34d3b8e6d1d96c468f25427e48487604cb1c9f1bda02"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x160}, 0x1, 0x0, 0x0, 0x48015}, 0x4000000) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r1, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x16}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x7e}}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x59}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x69}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c005}, 0x4000014) r3 = signalfd(r0, &(0x7f0000000740)={[0x40]}, 0x8) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r2, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x4) dup2(r0, r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x13c, r4, 0x224, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x126, 0x2a, [@peer_mgmt={0x75, 0x6, {0x1, 0x2, @void, @val=0x5, @void}}, @peer_mgmt={0x75, 0x16, {0x0, 0x0, @void, @val=0x40, @val="22758c6b550641ed7e2a37fbf77b0e05"}}, @tim={0x5, 0x52, {0x3a, 0xa7, 0xff, "6c2955e454e46b65fd271f12b146a829ca75296c90e461884a79486bbb29884024d16d626874f718165213ce683d50d11f0a24fdeddaecec871194fb9d72173baf6248f9f913186be832e537c1be69"}}, @perr={0x84, 0x83, {0x5, 0x9, [@not_ext={{}, @broadcast, 0x3, "", 0xb}, @not_ext={{}, @broadcast, 0x8, "", 0x35}, @not_ext={{}, @device_a, 0x400, "", 0x15}, @not_ext={{}, @device_a, 0x4, "", 0x40}, @ext={{}, @device_a, 0x5, @device_a, 0x27}, @not_ext={{}, @broadcast, 0x9, "", 0x2}, @not_ext={{}, @device_b, 0x2, "", 0x1}, @ext={{}, @device_a, 0x4, @broadcast, 0x31}, @not_ext={{}, @device_a, 0x1ff, "", 0x6}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x40}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_chsw={0x76, 0x6, {0x5, 0xf, 0x2, 0xecfd}}, @dsss={0x3, 0x1, 0xa5}, @mic={0x8c, 0x10, {0x939, "11da7574f59b", @short="668b0d4ab1fe1cc8"}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x404c095}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xdc}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "65596e77e0ca7f7884cd6ac264eb07d2"}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040010) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4e}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x20008004) r6 = mq_open(&(0x7f0000000d00)='}\'\x00', 0x40, 0x190, &(0x7f0000000d40)={0x5, 0xffffffffffff5118, 0xffffffffffffffe1}) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f0000000d80)={0x1}) 14:38:22 executing program 7: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000c00}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000040)={0xa60, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0xb8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xf, 0x2, "cfe0ab85e78b873b44a988"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4c, 0x3, "be75acccb4b7b0e911e345b5db36b4d8b8b7bc43e8916ebd0839ae8b70a8a61aafa37f7599f5b57b8c02e5a634910df1f7777211e96f8f7f30ac4615d5af6db17cc7a045d07d148f"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x45, 0x2, "bfa4c65b5a21ca9283ed6ad38aa660e3f67cefb47216ba48e58a3d949a511bae023c8faa57a8d5dcbb1716abdf7671155b75c8f8a2b47ab5baceaf41e3969ce454"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x76d, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x221, 0x91, "3a62defaa53f04ea2e6e95951b52388403a17e85e260911d2f1ace023631b6bb27dbf27a9eea0e802d601c1c1177b3acd7275edfd95cb73385eec1190cc5353d29df7d49b405a7eae9d31f908b455868653fb186b9847ff331e2ca1f3eeec1324b00d73f03765d2cf091e74e948f0775cb1ded0b20631abdf754e1c5e893e2375c2ad2f01be41be7171760a9f1d263fc0838638ebcdedac21df65a57fa461e9f682838e1f435ab2f3c8b3b89c45be9cf26af9c7b2b2e06d85b85354d65307076efffb8d7b299492b09177c3e6a34b5bf05e3f9c1c5650a0a524587788b67c960ba6fd7ee5035a283b603b6849d7239b4083e616463212a767ac080991d99e2cdbc078107d18750d6fcab26c0316afd4775dfe9b2025aa8b0f4e2005fca683a3dc252d1f6df1137232f86101a9fa0242a3755bd004a0d54316196909b95abef390f8c2b559dbae90a7641b96b81ddd8862a741b6b4a9756d4b9883cb2a865619ae87df84dcf4593d6b15c5715d6e765ebf10ec9d92d1d0aedcf2ddec1e239fdaa069f76dc0b1465edda07a32e9cacdd7ca16f2a72f6953b3d3c953ba7cd19a72de1a9d889253b029ced310ea3c165f94a6a9f7f4d6edba6ca93b14cbfca335a02fc38eae49ff1670bb484f872e68bdd7469ddb553d3d57ba1571407e6bcaef8f94336b33116bce377554cea7e5c5e8e5c7bdd359236024e0ee648f2a105ff1e93c02cf9665331afcfa4289898aa389980fd778f09306565ec6d5780d5d1"}]}, 0xa60}, 0x1, 0x0, 0x0, 0x24000044}, 0xd0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{{&(0x7f0000000c80), 0x6e, &(0x7f0000002200)=[{&(0x7f0000000d00)=""/56, 0x38}, {&(0x7f0000000d40)=""/235, 0xeb}, {&(0x7f0000000e40)=""/32, 0x20}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/91, 0x5b}, {&(0x7f0000001f00)=""/222, 0xde}, {&(0x7f0000002000)=""/127, 0x7f}, {&(0x7f0000002080)=""/91, 0x5b}, {&(0x7f0000002100)=""/236, 0xec}], 0x9, &(0x7f00000022c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000004780)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/76, 0x4c}, {&(0x7f0000003400)=""/152, 0x98}, {&(0x7f00000034c0)=""/65, 0x41}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/151, 0x97}, {&(0x7f0000004600)}, {&(0x7f0000004640)=""/210, 0xd2}, {&(0x7f0000004740)=""/31, 0x1f}], 0x9, &(0x7f0000004840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000004900)=@abs, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000004980)=""/208, 0xd0}, {&(0x7f0000004a80)=""/188, 0xbc}], 0x2, &(0x7f0000004b80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000004c40)=@abs, 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000004cc0)=""/4096, 0x1000}, {&(0x7f0000005cc0)=""/196, 0xc4}], 0x2}}], 0x4, 0x0, &(0x7f0000005f00)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000061c0)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000006180)={&(0x7f0000005fc0)={0x1b0, r0, 0xb3403895b4edfe8c, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x700, {0x5, 0x2, 0xcbcf, 0xfffc}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="f2d1bc711b54"}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x11}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8e86}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac02}, @NL80211_ATTR_AKM_SUITES={0x28, 0x4c, [0xfac13, 0x1, 0xfac04, 0xfac08, 0xfac0a, 0xfac13, 0xfac08, 0xfac0b, 0xfac14]}], @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_BSS_SELECT={0xc, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3}]}]}, 0x1b0}}, 0x10) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000006200), &(0x7f0000006240)='./file0\x00', 0x8, 0x3) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000006280), &(0x7f00000062c0)=0x30) r7 = memfd_secret(0x80000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006340), r5) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000006400)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006380)={0x28, r8, 0xa08, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7}, @void, @val={0xc, 0x99, {0x3ef00, 0x44}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000006440)={{0x1, 0x1, 0x18, r5, {0x7, 0x81}}, './file0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000064c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000006580)={&(0x7f0000006480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006540)={&(0x7f0000006500)={0x24, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) clock_gettime(0x0, &(0x7f000000aac0)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f000000a9c0)=[{{&(0x7f00000065c0), 0x6e, &(0x7f0000008ac0)=[{&(0x7f0000006640)=""/169, 0xa9}, {&(0x7f0000006700)=""/4096, 0x1000}, {&(0x7f0000007700)=""/187, 0xbb}, {&(0x7f00000077c0)=""/179, 0xb3}, {&(0x7f0000007880)=""/2, 0x2}, {&(0x7f00000078c0)=""/4096, 0x1000}, {&(0x7f00000088c0)=""/217, 0xd9}, {&(0x7f00000089c0)=""/202, 0xca}], 0x8, &(0x7f0000008b40)}}, {{&(0x7f0000008b80)=@abs, 0x6e, &(0x7f0000008d40)=[{&(0x7f0000008c00)=""/210, 0xd2}, {&(0x7f0000008d00)=""/60, 0x3c}], 0x2, &(0x7f0000008d80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000008e00)=@abs, 0x6e, &(0x7f000000a240)=[{&(0x7f0000008e80)=""/169, 0xa9}, {&(0x7f0000008f40)=""/4096, 0x1000}, {&(0x7f0000009f40)=""/126, 0x7e}, {&(0x7f0000009fc0)=""/172, 0xac}, {&(0x7f000000a080)=""/71, 0x47}, {&(0x7f000000a100)=""/222, 0xde}, {&(0x7f000000a200)=""/36, 0x24}], 0x7, &(0x7f000000a2c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}}, {{0x0, 0x0, &(0x7f000000a840)=[{&(0x7f000000a3c0)=""/153, 0x99}, {&(0x7f000000a480)=""/245, 0xf5}, {&(0x7f000000a580)=""/186, 0xba}, {&(0x7f000000a640)=""/224, 0xe0}, {&(0x7f000000a740)=""/57, 0x39}, {&(0x7f000000a780)=""/192, 0xc0}], 0x6, &(0x7f000000a8c0)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x4, 0x40012102, &(0x7f000000ab00)={r11, r12+10000000}) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r13, 0x4b32, 0x181d) r14 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000ab40), 0x40, 0x0) sendmsg$NL80211_CMD_GET_MPP(r14, &(0x7f000000ad00)={&(0x7f000000ab80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f000000acc0)={&(0x7f000000ac00)={0x94, r10, 0x10, 0x3, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x63}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) [ 118.073927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.104281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.108472] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.124109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.125359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.126299] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.132152] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 118.133423] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.135843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.136942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.137676] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 118.138841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.139011] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 118.141454] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.144847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.145428] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.145752] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.147144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.149421] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 118.149558] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 118.150899] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.152294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.157435] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.158577] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 118.159368] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.160508] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 118.161764] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.176162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 118.177860] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 118.179160] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 118.184112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.186047] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.187083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.188339] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 118.190380] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.195641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.209169] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 118.211310] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.212968] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 118.213780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 118.244282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.245287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.247686] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 118.248971] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 118.254313] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 118.344263] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 118.344379] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 118.358195] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.246335] Bluetooth: hci3: command tx timeout [ 120.246339] Bluetooth: hci6: command tx timeout [ 120.247065] Bluetooth: hci0: command tx timeout [ 120.373850] Bluetooth: hci4: command tx timeout [ 120.373861] Bluetooth: hci2: command tx timeout [ 120.437922] Bluetooth: hci1: command tx timeout [ 120.438988] Bluetooth: hci7: command tx timeout [ 120.439015] Bluetooth: hci5: command tx timeout [ 122.293823] Bluetooth: hci3: command tx timeout [ 122.331402] Bluetooth: hci0: command tx timeout [ 122.333087] Bluetooth: hci6: command tx timeout [ 122.430766] Bluetooth: hci2: command tx timeout [ 122.430830] Bluetooth: hci4: command tx timeout [ 122.485949] Bluetooth: hci5: command tx timeout [ 122.486001] Bluetooth: hci7: command tx timeout [ 122.486446] Bluetooth: hci1: command tx timeout [ 124.341957] Bluetooth: hci6: command tx timeout [ 124.342060] Bluetooth: hci0: command tx timeout [ 124.344208] Bluetooth: hci3: command tx timeout [ 124.470196] Bluetooth: hci2: command tx timeout [ 124.470214] Bluetooth: hci4: command tx timeout [ 124.534903] Bluetooth: hci7: command tx timeout [ 124.535594] Bluetooth: hci5: command tx timeout [ 124.536008] Bluetooth: hci1: command tx timeout [ 126.390766] Bluetooth: hci0: command tx timeout [ 126.391289] Bluetooth: hci6: command tx timeout [ 126.391882] Bluetooth: hci3: command tx timeout [ 126.519750] Bluetooth: hci4: command tx timeout [ 126.519831] Bluetooth: hci2: command tx timeout [ 126.621200] Bluetooth: hci1: command tx timeout [ 126.621768] Bluetooth: hci5: command tx timeout [ 126.622212] Bluetooth: hci7: command tx timeout [ 178.243742] syz-executor.2 (283) used greatest stack depth: 23456 bytes left [ 180.825165] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.838050] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.839272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.875107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.877347] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.879951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.881838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 180.882366] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.884441] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.892442] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.910641] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 180.914863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.952333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.956118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.957476] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.971641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.975157] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 180.977461] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.064797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.100070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.105741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.108244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.125010] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.126193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.127281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.131928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.137615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.142958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.152937] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.155663] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.168843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.169729] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 181.171294] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.172031] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 181.173222] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.212672] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 181.215583] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.218487] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.219429] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 181.235569] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.280881] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 181.296175] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 181.302677] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 181.315453] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 181.317011] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 181.318244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 181.334679] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 181.337968] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.903082] Bluetooth: hci0: command tx timeout [ 182.965828] Bluetooth: hci1: command tx timeout [ 183.030102] Bluetooth: hci2: command tx timeout [ 183.286198] Bluetooth: hci4: command tx timeout [ 183.349808] Bluetooth: hci7: command tx timeout [ 183.481785] Bluetooth: hci5: command tx timeout [ 183.482607] Bluetooth: hci6: command tx timeout [ 183.541774] Bluetooth: hci3: command tx timeout [ 184.971741] Bluetooth: hci0: command tx timeout [ 185.013770] Bluetooth: hci1: command tx timeout [ 185.087756] Bluetooth: hci2: command tx timeout [ 185.353999] Bluetooth: hci4: command tx timeout [ 185.405764] Bluetooth: hci7: command tx timeout [ 185.527021] Bluetooth: hci5: command tx timeout [ 185.527522] Bluetooth: hci6: command tx timeout [ 185.591738] Bluetooth: hci3: command tx timeout [ 186.998042] Bluetooth: hci0: command tx timeout [ 187.061879] Bluetooth: hci1: command tx timeout [ 187.125939] Bluetooth: hci2: command tx timeout [ 187.382004] Bluetooth: hci4: command tx timeout [ 187.446632] Bluetooth: hci7: command tx timeout [ 187.581407] Bluetooth: hci6: command tx timeout [ 187.582092] Bluetooth: hci5: command tx timeout [ 187.644740] Bluetooth: hci3: command tx timeout [ 189.049785] Bluetooth: hci0: command tx timeout [ 189.124735] Bluetooth: hci1: command tx timeout [ 189.187976] Bluetooth: hci2: command tx timeout [ 189.429804] Bluetooth: hci4: command tx timeout [ 189.494043] Bluetooth: hci7: command tx timeout [ 189.621964] Bluetooth: hci5: command tx timeout [ 189.622532] Bluetooth: hci6: command tx timeout [ 189.686964] Bluetooth: hci3: command tx timeout [ 243.957338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.063991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.173038] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.174752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.176449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.178216] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.179195] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.180598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.182156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.183703] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.185049] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.186285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.187179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.187949] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.189010] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.190339] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.190920] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.191237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.193009] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.195405] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.196935] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 244.199231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.203590] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.204977] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.207700] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.209910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.213033] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.214057] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.216028] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 244.216900] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.218074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.218592] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 244.224274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.225207] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.226635] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 244.227578] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 244.228033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.229020] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.231920] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 244.233058] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.238445] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 244.239266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.239487] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 244.240495] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.242102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.267892] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.270623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.274096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.263886] Bluetooth: hci6: command tx timeout [ 246.328383] Bluetooth: hci5: command tx timeout [ 246.330542] Bluetooth: hci0: command tx timeout [ 246.330616] Bluetooth: hci7: command tx timeout [ 246.331222] Bluetooth: hci3: command tx timeout [ 246.331655] Bluetooth: hci1: command tx timeout [ 246.332805] Bluetooth: hci4: command tx timeout [ 246.332943] Bluetooth: hci2: command tx timeout [ 248.309781] Bluetooth: hci6: command tx timeout [ 248.373803] Bluetooth: hci0: command tx timeout [ 248.375219] Bluetooth: hci3: command tx timeout [ 248.375746] Bluetooth: hci2: command tx timeout [ 248.375793] Bluetooth: hci4: command tx timeout [ 248.375851] Bluetooth: hci5: command tx timeout [ 248.375895] Bluetooth: hci1: command tx timeout [ 248.375933] Bluetooth: hci7: command tx timeout [ 250.361780] Bluetooth: hci6: command tx timeout [ 250.434201] Bluetooth: hci3: command tx timeout [ 250.435567] Bluetooth: hci0: command tx timeout [ 250.466707] Bluetooth: hci7: command tx timeout [ 250.467176] Bluetooth: hci1: command tx timeout [ 250.467624] Bluetooth: hci5: command tx timeout [ 250.468107] Bluetooth: hci4: command tx timeout [ 250.468575] Bluetooth: hci2: command tx timeout [ 252.405842] Bluetooth: hci6: command tx timeout [ 252.469936] Bluetooth: hci2: command tx timeout [ 252.470442] Bluetooth: hci4: command tx timeout [ 252.471106] Bluetooth: hci5: command tx timeout [ 252.471551] Bluetooth: hci1: command tx timeout [ 252.471749] Bluetooth: hci7: command tx timeout [ 252.472005] Bluetooth: hci0: command tx timeout [ 252.472377] Bluetooth: hci3: command tx timeout [ 305.864220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.870110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.878280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.898707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.926519] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 305.932071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.093080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.127436] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.129114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.131317] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.134286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.135995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.136856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.138762] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.140257] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.144483] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 306.146587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.146990] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.150291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 306.154082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.166527] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.177382] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.179143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 306.180469] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.201547] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.203836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.214209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.222589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.224564] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 306.225959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.248638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.256020] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.259331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.263598] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.267284] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.270257] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.273293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.280572] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 306.286620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.294455] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.297314] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.307220] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 306.308876] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.310515] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 306.313552] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.321983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.335951] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 306.337104] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.976781] Bluetooth: hci0: command tx timeout [ 308.214569] Bluetooth: hci3: command tx timeout [ 308.218786] Bluetooth: hci2: command tx timeout [ 308.219375] Bluetooth: hci1: command tx timeout [ 308.278576] Bluetooth: hci4: command tx timeout [ 308.342767] Bluetooth: hci5: command tx timeout [ 308.405952] Bluetooth: hci7: command tx timeout [ 308.406217] Bluetooth: hci6: command tx timeout [ 310.005897] Bluetooth: hci0: command tx timeout [ 310.261760] Bluetooth: hci1: command tx timeout [ 310.261830] Bluetooth: hci2: command tx timeout [ 310.262286] Bluetooth: hci3: command tx timeout [ 310.326718] Bluetooth: hci4: command tx timeout [ 310.390801] Bluetooth: hci5: command tx timeout [ 310.453773] Bluetooth: hci6: command tx timeout [ 310.454317] Bluetooth: hci7: command tx timeout [ 312.053889] Bluetooth: hci0: command tx timeout [ 312.309782] Bluetooth: hci2: command tx timeout [ 312.310158] Bluetooth: hci3: command tx timeout [ 312.310305] Bluetooth: hci1: command tx timeout [ 312.373739] Bluetooth: hci4: command tx timeout [ 312.440563] Bluetooth: hci5: command tx timeout [ 312.501759] Bluetooth: hci7: command tx timeout [ 312.502881] Bluetooth: hci6: command tx timeout [ 314.109687] Bluetooth: hci0: command tx timeout [ 314.359708] Bluetooth: hci1: command tx timeout [ 314.360232] Bluetooth: hci3: command tx timeout [ 314.361254] Bluetooth: hci2: command tx timeout [ 314.422033] Bluetooth: hci4: command tx timeout [ 314.485757] Bluetooth: hci5: command tx timeout [ 314.549935] Bluetooth: hci6: command tx timeout [ 314.550489] Bluetooth: hci7: command tx timeout [ 368.556773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.594709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.617089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.618543] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.620470] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.624508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.626979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.630084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 368.632076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.635221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.642328] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 368.649207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.713049] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.734500] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.740948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.741824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.743893] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.745180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.766926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.769091] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 368.771449] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.787371] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.794932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.795930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.819191] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.826573] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 368.859190] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.859244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.890888] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.899700] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 368.908825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.915787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.924436] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.928226] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.934285] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.938029] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.948942] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.956059] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.959088] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 368.961049] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.998278] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 369.000173] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.020541] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 369.022891] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 369.024097] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 369.033212] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 369.084438] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 369.087754] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 370.677763] Bluetooth: hci0: command tx timeout [ 370.688761] Bluetooth: hci1: command tx timeout [ 370.820043] Bluetooth: hci3: command tx timeout [ 370.950730] Bluetooth: hci2: command tx timeout [ 371.008744] Bluetooth: hci4: command tx timeout [ 371.061763] Bluetooth: hci6: command tx timeout [ 371.062687] Bluetooth: hci5: command tx timeout [ 371.208706] Bluetooth: hci7: command tx timeout [ 372.725735] Bluetooth: hci1: command tx timeout [ 372.726241] Bluetooth: hci0: command tx timeout [ 372.853905] Bluetooth: hci3: command tx timeout [ 372.981800] Bluetooth: hci2: command tx timeout [ 373.047737] Bluetooth: hci4: command tx timeout [ 373.112804] Bluetooth: hci5: command tx timeout [ 373.113303] Bluetooth: hci6: command tx timeout [ 373.237700] Bluetooth: hci7: command tx timeout [ 374.774747] Bluetooth: hci0: command tx timeout [ 374.775270] Bluetooth: hci1: command tx timeout [ 374.923686] Bluetooth: hci3: command tx timeout [ 375.030814] Bluetooth: hci2: command tx timeout [ 375.093720] Bluetooth: hci4: command tx timeout [ 375.157786] Bluetooth: hci6: command tx timeout [ 375.158279] Bluetooth: hci5: command tx timeout [ 375.285745] Bluetooth: hci7: command tx timeout [ 376.822738] Bluetooth: hci0: command tx timeout [ 376.823252] Bluetooth: hci1: command tx timeout [ 376.949714] Bluetooth: hci3: command tx timeout [ 377.077844] Bluetooth: hci2: command tx timeout [ 377.141712] Bluetooth: hci4: command tx timeout [ 377.207758] Bluetooth: hci5: command tx timeout [ 377.208250] Bluetooth: hci6: command tx timeout [ 377.334859] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 14:43:24 Registers: info registers vcpu 0 RAX=ffffffff815ec80f RBX=ffffffff815ec480 RCX=ffff88806ce09b18 RDX=1ffff1100d9c135a RSI=ffff88806ce09b10 RDI=ffffffff815ec80f RBP=ffff88806ce09ad0 RSP=ffff88806ce09a68 R8 =0000000000000001 R9 =ffff88806ce09ab8 R10=000000000003ab7c R11=0000000000004330 R12=ffff88806ce09b40 R13=0000000000000000 R14=ffff88802ed15340 R15=ffff88800c7506f0 RIP=ffffffff81348c39 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5c529cc4a1 CR3=0000000031b3c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f7e7d27e47000007f7e7d27df20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff888014c9d340 RCX=1ffffffff0fe3c8a RDX=dffffc0000000000 RSI=0000000000000080 RDI=ffffffff87f1e450 RBP=ffff888014c9d340 RSP=ffff88802b487a28 R8 =0000000000000000 R9 =fffffbfff0fe15ea R10=ffffffff87f0af57 R11=ffff88806cf402d0 R12=0000000000000006 R13=dffffc0000000000 R14=ffff888014c9dd90 R15=ffffea000057ad80 RIP=ffffffff814fce37 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f250f265540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f250f28d3c0 CR3=00000000099fa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000