Warning: Permanently added '[localhost]:11747' (ECDSA) to the list of known hosts. 2025/01/30 07:20:55 fuzzer started 2025/01/30 07:20:55 dialing manager at localhost:36977 syzkaller login: [ 68.748433] cgroup: Unknown subsys name 'net' [ 68.852985] cgroup: Unknown subsys name 'cpuset' [ 68.885404] cgroup: Unknown subsys name 'rlimit' 2025/01/30 07:21:13 syscalls: 219 2025/01/30 07:21:13 code coverage: enabled 2025/01/30 07:21:13 comparison tracing: enabled 2025/01/30 07:21:13 extra coverage: enabled 2025/01/30 07:21:13 setuid sandbox: enabled 2025/01/30 07:21:13 namespace sandbox: enabled 2025/01/30 07:21:13 Android sandbox: enabled 2025/01/30 07:21:13 fault injection: enabled 2025/01/30 07:21:13 leak checking: enabled 2025/01/30 07:21:13 net packet injection: enabled 2025/01/30 07:21:13 net device setup: enabled 2025/01/30 07:21:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/30 07:21:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/30 07:21:13 USB emulation: enabled 2025/01/30 07:21:13 hci packet injection: enabled 2025/01/30 07:21:13 wifi device emulation: enabled 2025/01/30 07:21:13 802.15.4 emulation: enabled 2025/01/30 07:21:13 fetching corpus: 0, signal 0/0 (executing program) 2025/01/30 07:21:15 starting 8 fuzzer processes 07:21:15 executing program 0: ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x40}, {}, {}, {0xffffffffffffffff, 0x80}], 0x4, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)={[0x3]}, 0x8) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001700), 0x14181, 0x0) kcmp(r1, 0xffffffffffffffff, 0x2, r2, r0) ioperm(0x2, 0x7, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fcntl$setlease(r3, 0x400, 0x1) r4 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001780)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f00000017c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001800)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000001a00)={r6, 0x4}) r7 = accept(r0, &(0x7f0000002a00)=@x25={0x9, @remote}, &(0x7f0000002a80)=0x80) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000002c80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b80)={0xbc, r8, 0x2, 0x70bd26, 0x3f, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5de4, 0x74}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "c2567dbc1b71aa89055b87d6b6fbb63f338d4667b08b948c884456f5d51a1d47546761a6887f9e05bfd5cf111839482cac14f0620e179104d0"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x8}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x3]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xaf}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4d1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4008054}, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000002cc0)=0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000002d00)={{0x7f, 0x45, 0x4c, 0x46, 0x50, 0x0, 0x48, 0xff, 0x5, 0x2, 0x3, 0x3, 0x33e, 0x38, 0x399, 0x2, 0x5, 0x20, 0x1, 0x3, 0x49a, 0xc51e}, [{0x4, 0x3, 0x9950, 0x6, 0xb0, 0xffffffff, 0x100, 0x2}], "37ebb735f2279fbc8d98d2bebc62d5658204ab5edbd09ed878e921c4c53a6084eeeb61b938a38f3b71ccb2df8f964aeaea277ba553415a8dad6c9a5c179d9fbb8fe5805523e937c696a6748d336914ddafa779c24d7e6c0d", ['\x00']}, 0x1b0) 07:21:15 executing program 1: write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x8808}, @val={0x3, 0x4, 0x1, 0x80, 0xd2d2, 0x5}, @ipv4=@generic={{0xa, 0x4, 0x0, 0x3c, 0xa4, 0x67, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @multicast2, {[@rr={0x7, 0xf, 0x66, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @ra={0x94, 0x4}]}}, "6d9eeb214a1a4638aba68b54f2a34cdcb56a711e5cf68d44b3e03db2b09277336ccad967b56d5b7acd566a51dd2d265da17c690edd88522661eb87121203735a51caaa7b483d96df9b514839c817546c93b01590f17775f9a584142be02d5172469b85ab3e8627916b910cbb4721104f656747a0c01563be134857ba"}}, 0xb2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000100)={0x7f3, 0x3}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x4, 0x0, 0x7}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000180)={0x80000001, 0x0, 0x7, 0x4, 0x4, [{0xe2, 0x8a, 0x5, '\x00', 0x84}, {0x7, 0x2, 0x0, '\x00', 0x2808}, {0x3, 0x4, 0x392, '\x00', 0x3804}, {0x54, 0x9, 0x3d, '\x00', 0x580}]}) kcmp(0xffffffffffffffff, 0x0, 0x3, r2, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x72e58ea6}}, '.\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000002c0)={r2, 0x46, 0x0, 0x80}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000340)) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000380)={{r6}, "2c0428df1fc6a0e1ca4cce36feadd94b3db18f1645743bbbd64a6f2c57248925ea50eba67ca7ac684f8329ecfec6b8e6485bbe79dd5ef0f7ce22f8f7a06a801fea9ddbe9f2f143ab8ead9f26ae69d6e83bc05516a0ae3134e72ad7833b63d19c5996964c9ce4553f08e93421c6da9b3dbfd2e90310408ca0831909f43a286ce62c07c7649961250f2d1766f388e2d509294174da08eb984a62f948a7814ac7319e6c4e6cc9fd53341e0d8572467fb328eaf32ab3d28ad0fc2ba87c4823603634b565dd29d41c125e35b8bc5afc958d123bd3eb977ac573c1fb955835543a777b891f4b12f8f351b7986bda36c606145623a607ad817c0d8fe07cc97b2def456434831574f0b19c5adfa2a5c96ff446322e5f620fc75ebd9552420024d9e8dc44fbe31a15fc0e727e8215e91f6490bb287d04b2ae0861a8033320b0eba1058a7b5ebc15571ef5f18e74af4f18803a4376d2b539611d4de14b74a9fcd5201970a3a5fe5d845c35d946829024deb39add5b6ef11c01d41b1eee012d2acb54d7b202e5b66dcff316a4e6e503ba78889326272796f5c9840a5d31139f5598c36b39f489aa540367f71ab7466518a54aafa389a3d168edad201fad91fe935818358367a0b32d8e8c632224dc8f8de0389cee52dacfe5f81638a29e70379c52544f535d68b8e64aeb11462f57f2852ac9190e0b61417bedec5fbcf3ea2d84338c4d749e72f9f03f571dbc2ef9169bb75710da00c6151a9ba7b3960cdd7187e5eaee7f058dd362b389e3d53ec2a768e92a0ed776e3cf55e6d44715d19d71b9dee5564c19906a71cafd85f9cd12852eeed26690eb7776bb7eb3d02342940c6ae14bed0f707afb945828be2fab9743e0fa82fa64ad543515a2f998f0b091f2bd7c023cbfc7ac599898a881846e722b1928910dbdfb5da32f4a2de30e7208defb5ae309b211c50380e7bbc7b6ebdeb2c503029a5475b4dfc0f4b2992b01e11ee954091c4cfd20391e04d203602797c6205a33b373423a89b63dcf1804a63de583c808a5831a5aa1337e5a3c47d0b6d62b25342a597d9edc93ef36835ca8289f990675904aac77afae44ea3f94db016fa0cbb340765f919dacc3ca2719e7d7765ebe178e458f66a33eefb7b912ccc499cc847b7801bad9796bdc78fca4d1d41adcbc23a18960962fe24eda26feae3c78a780e5f9ad70c09718f3460b14d949dc015cde17cbc46f8ceaab2f502b02e539d5d9d6921f3dcfdd0a5bb7e55381ee9868bae35e3e60916e4a11b06b1773c67a12210cbe643dcc5e07a0fa5084b78e2216bb2e1c891bb872fa4d3f1e71832258f67c95277f85c6ff649d359c122a95db87e61d723dfa7311631d2a8ce0ae9206fd9ceee678baef3c3af320f0f26255c1917431e5b658f8a758aa5473ffe9aaf85e0c5b2fcdabb14f6ab789b76d5b700b6fee916e1ee227f2e0fae6513aa30e4145e4b6181aee7ee09d5b6509ed25da95c8b90136a71712bf2b3926ed4cf6776557975b05e11f5e4c9b54275a58820361ec20d4cfd56973bfc356eebf2cfbc45945a5d531aceaa1121ccead9619e9dcc1ac34cd5997206ab1d7701003390eefe493586cb81891d98a27925fc65d09746d1fc0c85597ac113290943f8d231528568192c8bad5222fe6541f59c63db4e48059f77859d8f5a73d290525f31d973dbd10e822be08019273f0ae1e6361068f8c3a4269a597fa805b588d5b6448aa6e76d60ae08120912f89b45db51b3d71a14f8200d8aead241487d5e274a45f648e6fea2382efe113fc28f2858e63e607c7a55342160e4093ae3136267f3fa34c0d360f7189e5e3d2c1e7e7929412531bc1f7964e0102153a279de46f5fc63184ecfaf0fb6c7479e1a0c9fcfb522a938adcfa2d5f3ddf203bc091caf5906e2a0e592e87204a2d4c744506aefad94b67559b5e60ba3620de249a5057070d42721b597c8c5f7444b829bd1674a1972aea11854ea3abe7b2477e341779df4b729221a240f19a38c91070257d0e0990e35ff7300513a533511b6c5111342e4557747a2d8c003ef125ca988cc03070103acd67743e19eeffed82778d7d1f20ff49664640656611d488e367d88bb70f72aee63643d630b9681ee1b1ff7a9a64c9cc8e03ecb3718fbe3deb79831b28d033f95ced86a42a183f0c0b9986f67632a400e60860be21e8699693079213ce6bc2926a3828951c2ce4c7df57e42505111f74c1e521bf94843479bc047762900560512987467d6f22e122cc7289f973506e51143e823b07888f0b8ad28b2b4954adfec99b1ac81d188e690f73672501944b14ee7696e04316d3510e5c0437acbd10fb674cb021368e961c5bcbe8e84f9b8ee3206176dce6ffb1c8d1a6cad06ca039a4f495838e61c5690e328330e9d3fcc8bddf235176aae9d6e03cbc7e6edfe2c55f41503bd9c1ce9888453449633041734a49bd4c089786a7177e5c02b5107fe75c52dbb45f252e666c35f499691ff69d96c40e8dc469f9743e4111985499f42a0681738346aae9e8963293b7ac214dc4519199aa978d4cd7470d9e0c77a59495050676959a018a8d01901462eba02ad00b3cd9affe9ffcae04580fe09883ba2c5ce66235a4bf6c33e19ed08c4d4504a9bfb5b7f630a0f211c236c89b7c7f02b45459dbe3d57d1d97d09f3803c151c994504bd7d12a39a6fe723cd15b4eb895a79e2fb06d2c2f4418e98c36fae9a70b8442805347a01da30210fefc95e5e3a1c6226efd5ca33c24ded204913895c5fd0e64b24dc30aafacf2b682778adee3ad4730127a82b131e109b405d70dd675ed24377a9acdc839351251b2024bbe05c76b5e5cce0cefb37e38ef96b3747b945cf1797ef51ba5fa5df777dd5b71a772b0dafc8ef513a06a9d4a8faa9223cc82de4c9f81ae0083859b0eb32ebf54e81d328891b805d8c4868d3959bf9a1c2b97a4defb4b46dcfbabd613706868a019fa13d9b6417fafe0b7081b90b658897bfd4d87bb60d216a6337daa1f5b21ecb41d79fd06ad3c5c2049e0fe1c5bbcbf11ae23029b5db99a04bee6b32bd7314bd22d145bff89736ced571d6dddc920f76060d7096883516f02b163bdd5ee03998aee075dadc9c6d1b6c2ffc5cf8388f5093652f3da60f038642ccb3068a48fbd82ea73fcd8ffcd16e0223e150229ea9d8b732fc136a6a85bc5c704321811090eb99386e98c842abc0356d0526d1d9beb9a5a94ab8cc0d2aaf3ee654709956183e01bcd00e50e01847d6b646c29fa0d4445a43a6db920df6bbe89407d874c290003af483d8df0bd88c1511d2454e778228429907dd14f040e6f4a2da5b8b6c1502caa7f0130d600a6012a1242486502d2bf0f98aa9ec5cf4418d92b465ca24eac226f2854082fe319c1901c13dcb212ce0e02e1ca8ea058d4e96c20280bbb683365a644280811f2549b8f4be744403a1decfcfe1f98d838720cea0522c6eda9b97b1a8d34efcbb9f52f6ee5455ca67a51de8f98c71365bff671a8d4c1fc971e04750beaa74cb644c6b582c39ccfa0a8510f4b7ec347afd0f74f8720b051d4843955201acdf1e614d58a09e0eebe4e0bf3b5c517c869e0cbcbd9a659e15069b280cf3c20b6198a1c76e717cc374b9bcdf749dd2a32b333d20c33295e1aefa185eb28f2ec6a8034a2909c9f93f5825e59ff76f1d380b827bd85c2f7646fd7563337284c95eed9a05bf4c2ee821c3c6b2a3de4889bf87f26f2a5a15f228a20a3d7aa4470e9943893d96faeb623baf0efc51a2f01bbc7d5b72f679e5d9fcf429b06faeb418a738294781c5a77a67ae7a6d793cb0a8440744feeee0071a3bc50ade05318ffd5b46117871829140696d81e7625b6c8a24894c2e15f29ac1904a07d932f6e578d9f7450c1e04052a6f11db85730b2990d8505065048849c35ef7400ec7a7e23a77d4cbb1cbe4e6df5fe7971cce4992d2a835142561686eec7b5dcc2e796e2bd22c5922fb1818ed86c2864d85fbbb62130fa170ac281a2b34735dbda5850e1bcd903318049b32f713e6144d93f105f57b3221029906858a1d2ab078c6d1292fcda5f04e2e4c1dc924ad18c7241ce91bcf822afac4b4ee227368bb29dee0a58b288810781aa701105cb4b852de81c4e7fdea3b517ff97f9ef33ab0719f0c8c9783f48b79240f1b9bb81f3b7bbbe8b237cbe5cc387a2e866871c5e30a9f6033e4a0bb51674f6ef1813b4ec22527fa063b0a9747a305ca0f1555a633826cb9994de1cab7777dba2f045c0f5b7b34ca13150211b3fcc24ab4d607ab2ac85ebbcd6f6c11697f75aecd8d0847a2fae1dd8777d433f55852d29a9548fbbeb232b47ff27611a4e0a3885856b34235c5713c6257b84352a5226232a629a68c082ddd5c6a1c97cb15bd07803664f16d6842b679b607f21b30278993a50228f35c81294317925a40825fe1b72388f91fa138023d8a9c54340d0aebd6835739b3b3ef3100ab27212accb223266af5e8126809537e883e53bb4da8edd996f20baed0a19100f3ae95ed858a89b378ce5b60a601866ba9df8f770751802e91d2a5949eaf3e6d7b96b98fd1e7b64d7e9a458c95ae6db8bda438bdb091a974f3a9dd48ff9fdc3104d44e10753a00b5615104b52fe41fb9a50a6f262a7df7a008f150291bead38e2bcc4a4b0b7e97e22f3da62598319b7c65b37366585e65a5d7b8cd4270f0235d74d32a457dd9d573dafea68da6248e110a16ff5dd306a61329e70d5a1ef86821eb21af986ec326675d153b82117b38f6ed326ce8201a455143855c317c2feaa8a42ddcbddcfc1c606304e9c0102adacc15bfd76e75f3b85093aee6c53e1a962e0fa6f5772f1523c96d45dd8749bf9aa323aad891c6e4dc5e5ade53a5c7fd077f3c18616bcfe8dbd4fd8d064942c1a7968c35dfa8868c0013d0a37ec437773ab6394fdfdda5536f59533efb6cc8bb884a3d0db1a44486d5e8c0d7457f6b8653f8e145b4a0d857a2c9c1b86220278164c42eef1faf906eb99fa8ac1176543c70b73da995d85a39998358282cdbe5049d1b5a118872c53a050063f520b0b50865801d2114eab5b75ff6d1268ae27a6b066e681c1acd5b37e8fad9812238ea6fbddc02d4ce76cb9d35aa6f2932788ee91b7d23fce59c6aa977fc6f084ff3e0dd48a8630e9bec6dded7c2598b38571359a7627ce8133510bf86a1b96eb3abf2c49acd323764c811fe4c0f13e5e4bc466a8cedd653099aa98157c9e313d1e5b5170c04bfbb75ee5ede6502c35c4bbbe87e66bd773e339193497c80d7267062ca6c14bf38d6866208683333acc9b31ffc39a4b5528d73dcd88139e2a09ce2af5bf9bc33715e287e6677bd30eea8e9bd78bef4dc2734f10249b63139bbcd5742c1c8925872c4dc952a2a22326df41cb787ea981a86cd10ad39da582b560dbccb7b137218a203916a6a7b87739ab971c65f22b1232445eed57c5f3c43a0be7f7a8246ac0b42b63c9ff75bed5a5bee46521d0a1962e661faf8f4b33d3eabcf525e53626747396e47f11af28ba73a152dd8357c49be5bd664f43ac374bf8b26dda95746b72c35972d811ef62361a06fec59c080e594e4318537cec80165f6113003b4be8c681f75eb685dcff8b4ef2ea5f350ee1df9372c93a608942fb8982f8dc7dbd3271aeb53fc009dbfb9df85c0e6908da5383a7f0044fc55b0c8d6d2839ee13a8257b46c4804a2f1fc4a97388e142c6ee69cefee49ffef6332c6181f325eb1ba702e30f498a0c0eb258b3eb6c2069a04795f1e9e427d53112a3e02d5ecc8442eb290d15a669ac5f0992"}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001380), 0x28400, 0x0) syncfs(r5) socketpair(0x1e, 0x1, 0x7fff, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001c80)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001580)={0x688, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x9, 0x3, 0x1d5d, 0x200, 0x46]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x5ec, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x14]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x8000, 0x1, 0xffff, 0xfee1, 0x7ff, 0x401]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x2, 0x2, 0x0, 0x0, 0x7, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x28, 0x1, 0xf9e3, 0x7, 0xfff]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x56, 0xf, [@mic={0x8c, 0x18, {0x802, "38da91e11250", @long="cbe463d79e7de5b1455809b9ec058e7c"}}, @chsw_timing={0x68, 0x4, {0x0, 0x4}}, @challenge={0x10, 0x1, 0xe2}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @device_b}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @device_b}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @ibss={0x6, 0x2, 0x7}]}, @NL80211_ATTR_BEACON_TAIL={0x52, 0xf, [@random={0x4, 0x4c, "08f97f2e395f1d33aa33d6a4acd56abf70b971f0c17b60deccaf493e82f9fb402de307e2d0ea55c510dc4b7416422793f0a20e2ed80eda8f222da1a573c18f95b38d7f3c4374c234bd7b2864"}]}, @NL80211_ATTR_BEACON_TAIL={0x88, 0xf, [@peer_mgmt={0x75, 0x14, {0x0, 0x3, @void, @void, @val="c695fbd0c232518fd2e356123c680854"}}, @link_id={0x65, 0x12, {@from_mac, @broadcast}}, @challenge={0x10, 0x1, 0x1a}, @supported_rates={0x1, 0x3, [{0xc}, {0xb}, {0x5}]}, @mic={0x8c, 0x10, {0x6d5, "f838ce01d7be", @short="1fb6dd811343719a"}}, @chsw_timing={0x68, 0x4, {0x1000, 0x2}}, @random_vendor={0xdd, 0x38, "a2b41ef1cc04c58ba5fd3a3439239edcf84b9de2b5a8799d6db28e9ed9f1570370fba114d3b9d194132bdd7f30f713753187792de7f5f860"}]}, @NL80211_ATTR_BEACON_HEAD={0x1dc, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xb4e}, @device_b, @broadcast, @random="88494c658e01", {0xd, 0x7}}, @ver_80211n={0x0, 0x65, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, @random=0x2, 0x100, @void, @val={0x1, 0x1, [{0x4}]}, @val={0x3, 0x1, 0x64}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x4a, 0x8, 0x19, 0x6}}, [{0xdd, 0x28, "b3a319b491ff029d67bef3c48c9fbea5e1af908e968c4f72aad7ae173bee6beea7a635b42c3d0c93"}, {0xdd, 0xb9, "7b379b1302de59955f18abcda63db9854f84e7484cd7cbbfb7e0ee220ebb1e921f23fad2a7d9bb4f15bc2de9fbc986584cd0bdc34c7418af3917d9320f186cbc6eae8b62029b8ecc60578a14af6d617ed8b1d1cdb265fa71a5aec92471ab028dd9f87984f54bc76e7b007c3ac8ed4b2a2d4ae3e56d7b2083e8fb29ddb2bddec9aecfe3edac20d93723ec99e84661d0e5d916da558694ce4fdb00975788e4e2e9e3941e6e9cecc037ec99998387e6bac8a6ddacedb24ba42379"}, {0xdd, 0x27, "d89daba2ea0f48185b07e8c9b0c61826dc51bf953756221eb4f93bbeb69db8ec52e832b2dad1ac"}, {0xdd, 0x50, "8643a357e43a96028d332db6ec1fe991cfe13163caec8d53836960b3c231642775a80c73faeaf370822c03fd4adf849d16b0cb29460873856d824e7a1e9d7cee8be9b083e4b4aeb3b859c7594698afa0"}, {0xdd, 0x3d, "cb64a687687b15f625c215c6bd6fb9c30dd0abc622444a3b9ea69ed7342307fa474c82742a03fa609180504a6c5f8ffba3edd1b0b86d1858966bacf58a"}]}}, @NL80211_ATTR_BEACON_TAIL={0x9f, 0xf, [@prep={0x83, 0x1f, @not_ext={{}, 0x40, 0x0, @device_b, 0xfffffffe, "", 0x8, 0x1, @device_a, 0xffffffff}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @preq={0x82, 0x6d, @ext={{0x1, 0x1}, 0x6c, 0x9, 0x1, @device_a, 0x81, @broadcast, 0xfffffffe, 0xffffffe0, 0x7, [{{}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_b, 0x5}, {{}, @broadcast, 0x40}, {{0x1, 0x0, 0x1}, @device_a, 0x1f}, {{0x0, 0x0, 0x1}, @device_b}, {{}, @broadcast, 0x80000000}, {{}, @broadcast, 0x5}]}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x94, 0x7f, [@random_vendor={0xdd, 0x82, "f2c02daf537e48d9cc28152b166fe9c5fc8dcf4b8c3b52691286b0daa500a51d1310300ab4d6643c91e0476a19c65e7db38d07b6190a3bf5afa43dd1a338b34c327395a734b5fc7cc8f2406f5ffca9c4c5bcb26fc02f301615f58dc071d06fe7c9944e2cf8110c79bc6202d615b9a54a2c76128fafd6528241f4db273f932374784d"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xa9, 0x8}}, @chsw_timing={0x68, 0x4, {0xd7c, 0x80}}]}, @NL80211_ATTR_PROBE_RESP={0x113, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x3, 0x8, 0x400, 0x0, 0x8, 0x0, 0x12ad, 0x2]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x11, 0x91, "a52873595312fb303cc5dc0dfb"}, @NL80211_ATTR_IE_PROBE_RESP={0x2e, 0x7f, [@ht={0x2d, 0x1a, {0x8000, 0x3, 0x1, 0x0, {0x3ff, 0x3f, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x0, 0xff}}, @ibss={0x6, 0x2, 0x200}, @peer_mgmt={0x75, 0x8, {0x0, 0x7, @val=0x1, @val=0x19, @void}}]}]]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f59}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x19}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x688}, 0x1, 0x0, 0x0, 0x20008084}, 0x80) 07:21:15 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x44) r1 = socket$netlink(0x10, 0x3, 0xf) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/212, 0xd4}, {&(0x7f0000000300)=""/18, 0x12}], 0x2, &(0x7f0000000380)=""/252, 0xfc}, 0x10042) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r2, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x53}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7f}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000640)={r1, 0x4, 0x6, 0x2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000019c0)={r1, 0x100000001, 0x5, 0x7}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x60, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @void, @val={0xc, 0x99, {0xe5, 0x4b}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x30, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x28, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x7, 0x3}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x2}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) recvmsg(r5, &(0x7f0000002d80)={&(0x7f0000001b80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/20, 0x14}, {&(0x7f0000002c40)=""/13, 0xd}, {&(0x7f0000002c80)=""/52, 0x34}, {&(0x7f0000002cc0)=""/34, 0x22}], 0x5}, 0x2) r8 = dup3(0xffffffffffffffff, r7, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0xfffffffffffffffb) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000002dc0), 0x2000, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r9, 0xc0389424, &(0x7f0000002e80)={0x3500000000000000, 0x48, '\x00', 0x0, &(0x7f0000002e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000002f00)={0x0, @tipc=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, @nfc={0x27, 0x1, 0x2, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000002ec0)='erspan0\x00', 0x0, 0x7, 0x1}) ioctl$SNAPSHOT_S2RAM(r9, 0x330b) ioctl$FIONCLEX(r5, 0x5450) 07:21:15 executing program 3: ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000)) fchmod(0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000040)=0x1) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)=0x4) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xecc9, 0x1b}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x244}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x50101, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000200)={0x2, 0x75}) socketpair(0x23, 0x800, 0x400, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000400) r3 = dup3(r0, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000001d40)={r2, 0xffffffffffffffff, 0xfb8, 0x7}) dup3(0xffffffffffffffff, r1, 0x80000) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000001f40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="54b1ff0160e779665c32c0a2e19f5e24"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x302adafc}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="adc8bc4d6188d06d3ff80fc0d9415444c8ac6f8b5c558df2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="473bf837c83068f76f8239f91978411b0977543760950098"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="24f9e5bc24cc075164bef16f22319b41"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bc4532c94c9bf75"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="481fa9f31cf6db1352b652468e043fbf"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f2364b893dac1de5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b8e88c0c9e9f0b7caf13d134f7c91772"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c86ebf3bd0decc16"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1762ec926afb9fc44df2f510f1af2bde"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5ed1d66e6c311bd6"}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x400c1}, 0x84) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001f80)='/sys/power/mem_sleep', 0x800, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000002100)=0x279, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) vmsplice(0xffffffffffffffff, &(0x7f0000002600)=[{&(0x7f0000002200)="7fde75594ff2e58f6820efce609647098afe3be893174d83047dc3abb3a5ec39905d87932f474372cd2e16a56869eb2137fc99f7d8f9d8f67ec8fefc33051be90507e62970607dffeeda00a9583766368550dfe12e9e9871ed7047b1c171258e650a6e2b208d63e5cb8082f6bc7a79347f52e8af650327bb8e97555cff3ea788401c9c4b31221c83d1ffcd6019bd47424702ea82e7d5fe70c91bcc670e7f3ba5ee6f4a7c70f04cb9cc665411bd00358ff42be62216c4ac9bb0836c85c8f59fcf348c9cafc70568a2ce8e6002753eb84fad78f0", 0xd3}, {&(0x7f0000002300)="acce6211693152bef6f511319535af5763f6a6980a83e0b2d2decc5c600055b1606cb7687a19cdecdb08d98e4bc68d197c98d47d7ab4dcbfab64cd649a992556434a4d5a901100fbd8426e48f0e0a90f8312d730118c6b29f07e660bc3a9ae4fb7f29e048580827970356956a58d14cfd4ec48341b448b3745dba1abad58cc5b5f62391bf3cf265371a88378862b6b6b4bb557a6e50a872aeabb711ef2fb38bf2d6f617b93542ab44491a780de8f59d5f2f483fd56912cde0abe1b17194905", 0xbf}, {&(0x7f00000023c0)="9a34eb5fca145d0b8f3af7fa749601dd0ef5079e4a28459a76c4ddb6ad8cc7b3738131da6972ecef212ecdaa6f914affe09e6021c5d6210bb21f03f7c06b8a252c7df3dcbd1ac6b349e771a225dc88c0be", 0x51}, {&(0x7f0000002440)="73caa6b6f139f08680083c50e45b2249168e089ea0543dac89740c24aeac92e0a8d4a0c5e199f4b5c0963fda33f1890ea47ea4660708d589d8b4c145f3a56afac32d619a4d47a2ba5121fee493f649855f02ba54a79d300d11ab84e6739e58304181dbaa49ce4ebf71ada015fd06f44ff6cb0bc4b91704fc4bb1eac78228e953666d5cfba6bf601942b9ef4f321a5198b073637a19f9b121427c31fb9d7820fcbd16d57b8d4077b688", 0xa9}, {&(0x7f0000002500)="bd82fa899648c70fc5014189aa828be72c9bdd4497314be25b6f1b26990c08ef4e56a7c91070b6aba4e5f0fe4411719333f577ee55e3a76c4209de32ae964cd99736fa5f5f6d5f62274e6a3519ddee5c24f9de0d9a055c0db6336a5877244c52dc8ac9c028af7094253cb56177cdc108", 0x70}, {&(0x7f0000002580)="df494b1dfcc9877654713510bca71b325ad648a4d4517e48bcba28390e6994f3fe4d5dce52dff8a4cf49858323565cd7bcb9b92372cce27d5111b517a57c9e7a293731e187b0079e85bf71183c4feeb8261d1d89b5399494dbd9ed46749378bbd00ea130d82954b12a538efb", 0x6c}, {0xfffffffffffffffe}], 0x7, 0x8) [ 88.230941] audit: type=1400 audit(1738221675.326:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:21:15 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/tmpfs', 0x400000, 0x104) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2f8, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2d4, 0x33, @data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2a0}, @random="1b248e715e5d", @device_b, @device_b, {0x7, 0x1}}, {0x7, 0x1, 0x3, 0x0, 0xe3}}, {@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x9}, @device_a, @from_mac=@broadcast, @random="3289a697ade9", {0x2, 0x6}}, {0x7, 0x1, 0x3, 0x1, 0x8}}}, @a_msdu=[{@device_b, @device_b, 0xc0, "2a12f6f4c1405ab5ae8772194ce5b97406f0d5a41a6b0c28a8b2accf228802258c566e0ab15dc950d1b42d4f815de838633728aaee1c07d40f27f2acaabfe0a447a02cbd3364af367c8470c21be60bb647378043a6e0ed1abb7387492abe5d1c76ccbcdad374d0cbbeff307fb25176d7dbf2178a5563e18c90aa4c2c48507e95efedc5c54e6c5dd224975a00cfc1a9581f03c47224e8e2d594955cca2b2e36f47499c58ea6700e3902985121c402d15ef386d7bd7f26531af3b15b0942a3de9b"}, {@broadcast, @broadcast, 0x96, "cdd19c6f626c37fa54ac066b5ff631f492a02afffe45cb700b86065bda94123c9cda63b988079bea15118ea0621da6701e41cbdfeadf9a7817ca465837e5e9fadb106f7467f6661dbc86ffb26f9d725aec70d311d0e4a92d8d0df08531a4a4d5772d696a3b77c878ad1ad0077db764c541fd83c31dc56b186f3fc3266bae925e08e567290785a1ed0eaa2aac72de3252d57af101654e"}, {@broadcast, @device_b, 0x28, "be15b1f0583b7cde0a2258712bbef84fa22f7f15fd2cff9f2f6c4f84917d4e19337f194208f87685"}, {@device_b, @device_b, 0xe0, "a71ce3a927eddcc090ead6fc9408177912ab167713f41251e5191e5e1a922b5f5e1820f3711eeed7e53244fd7d93f7e824ddc78df8c486a9faf9d2418e30da5a3df7f54598c1e0e7d99fce9e248a86faa959b13be1f83f414caa1c4abc0cd3c979c5b2bfcb8bc660d92beade9f13d3b4ada5afd1467e0c63e98635ccfaa6273cc106a4267b1d37ccd7085290e4683175bc4f10591f9edc7bfa840ca9d6e6ca1e65e0c3547ab7ba4a3b826071f7e12cb65f1fd43e82d4410ac7ebb5d5ace55f474ad09a709b034320f405ee5a448c4ab4a0ad38bd21a0341f8d088302641bb133"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88ca}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x84015}, 0x48000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x400400, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x20040000) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000a}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000bc0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f00000006c0)={0x4bc, r2, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x75}}}}, [@NL80211_ATTR_IE={0x155, 0x2a, [@challenge={0x10, 0x1, 0x14}, @perr={0x84, 0x89, {0x0, 0x9, [@not_ext={{}, @device_a, 0x6, "", 0x2f}, @not_ext={{}, @broadcast, 0x7, "", 0x19}, @ext={{}, @device_b, 0x9, @broadcast, 0x39}, @not_ext={{}, @device_a, 0x2, "", 0xa}, @ext={{}, @device_b, 0x3, @device_b, 0x39}, @not_ext={{}, @device_a, 0x200, "", 0x1e}, @ext={{}, @device_b, 0x9, @broadcast, 0x1c}, @not_ext={{}, @broadcast, 0x2, "", 0x4}, @not_ext={{}, @broadcast, 0x3, "", 0x21}]}}, @random_vendor={0xdd, 0xac, "790d67f0a36e6747c94c784a49857ba43674f8561c7b2be56c197ae52a01dcabb2aaf570a322d1f4862dcdb32abc7b42f5f3ad0365385ed4b23be7c940de033b920fde4cc4454f9459cbf2b0afb7827fcc8a083b0d1318a7b27b9c672ac0846bd7e4cdec4188f49ce13096b802dd63cda3260d7fd992d3b17ea631da35d7b51c280a340f64d12d8a88beefb3c505ae2998b129d4a57c9aed1d8372eeaf884558ef1393c5437413ea69b9f820"}, @challenge={0x10, 0x1, 0xa1}, @mic={0x8c, 0x10, {0xbe9, "caa6f310feeb", @short="9c5c6cac3f53f3f0"}}]}, @NL80211_ATTR_IE={0x2f, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ht={0x2d, 0x1a, {0x20, 0x2, 0x7, 0x0, {0x7, 0xeae, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x1f}}, @ibss={0x6, 0x2, 0x7fff}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "55244705a3383654b1ebf9f1"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1ae}, @NL80211_ATTR_FILS_ERP_RRK={0xb1, 0xfc, "e56dea1087a96b1e79180cfe39e25ad849a8c3254fce2cd89015a7a399e7aec5d4576f0f97e0aead84738bd86f43a2c0a8e14969710a2509394aeea8c3a9f7720b6846904bc3b15724ebb3995557c4b8e0a3582fbf664752afc6e5726b921999596e5e61556b5cb6afd95b45d1fdf0a22b1c0e4d2db18ba5469a30ad24453a723240421d4582090011c8e3bc35080c64407a210538d056aeac9827976c192938359ee0f586a692e96659dddc28"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "a8bd293636b60d5741fa"}, @NL80211_ATTR_FILS_ERP_RRK={0x1b, 0xfc, "450a5eb275f376b6c294f6c0ea51f78a3c528d12b4a9c4"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xff}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3f}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x81}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, '?9])'}, @NL80211_ATTR_FILS_ERP_REALM={0xb7, 0xfa, "5d00f3b4a3f5bc437231397654748d2f3ec9b457d96cc1594d8e5851e8a54bf53c6594d869ffb581cb1d4708f906b6fba459d365e83d8580b8a2f5bcb85afd9f5b3e73610ea76b80235d92d1ccf84b0baa5ccd71123331bc56397f5a214e0b4091ec235f9412a7ff6cdf7dc934ffcd8cf35f8bc17dfcb659b758549e445fcbcbdb3535ce06c0f17b6d5fdcb1e0db683f88abbf0536f1f117abffdf6dad488849af7ec7dd235a5f65ba254d9788f1dd381a47e7"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "eeea36e7db10fceda6bb1f2132c9aab3"}, @NL80211_ATTR_FILS_ERP_RRK={0x10, 0xfc, "39ce60b0489bb1356d1fbd12"}], @NL80211_ATTR_IE={0xe6, 0x2a, [@preq={0x82, 0x57, @ext={{0x1, 0x1, 0x1}, 0x1b, 0x1, 0x3ff, @device_a, 0x5, @device_b, 0x7, 0x1, 0x5, [{{0x1}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @device_a, 0x1000}, {}, {{0x0, 0x0, 0x1}, @device_b, 0x10000}, {{0x1}, @broadcast, 0x40ec}]}}, @fast_bss_trans={0x37, 0x87, {0x0, 0x3, "3f99a7d21fea16430e9f25aa7e683f97", "0b6ba47902afcb5f078aef178e8d8c5ab9b95947d23218bc55390b27a5d0fd6e", "5ca9c49838dc0ca9ddb40c3577b67f9f3063abc879b4963f0be9a5ed2eb1098a", [{0x4, 0xb, "05eeb88402de68d1b617fe"}, {0x1, 0x18, "6f321d4e9758f2b0756e13cc650c85d6d61d3c4a3437de99"}, {0x4, 0xc, "06d3fa311df4dd918edda2a2"}]}}]}, @NL80211_ATTR_IE={0x2f, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x5, 0x5, @device_a, 0x8, @broadcast, 0x7ff, 0x10001, @broadcast, 0x2}}, @supported_rates={0x1, 0x2, [{0x9, 0x1}, {0x24}]}]}]}, 0x4bc}}, 0x4004000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000c00)={r0, 0x3, 0x1ff, 0x6}) fcntl$addseals(r3, 0x409, 0x5) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000c40)='./binderfs/binder-control\x00', 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/dev/block', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000d00)={0x0, 0x0}) ppoll(&(0x7f0000000cc0)=[{r4, 0x62c0}, {r3, 0x40}, {r1, 0xa0e4}, {0xffffffffffffffff, 0x2022}, {r3, 0x801e}, {r5, 0x1}], 0x6, &(0x7f0000000d40)={r6, r7+10000000}, &(0x7f0000000d80)={[0x7]}, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000dc0)={0x0, 0x10000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e00)={0x130, r2, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff0000}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="291c72328c894478152bd7a32480fa90"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="897211b3f068b7a7ca9cfadb407e74d33a1e8eb9d2caca78c97dbe947cd14ae3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x74f040b4}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="296f0ed36ee2248dafd2bd507edf6bbd31e5902fe7a90b62cf62962fa2b666e1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d997e25ba6139512"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ee1dc4a2d95833773d8cafdcddada2a3b528cd445b483076"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a2204f463bf13d0d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="336ada4636aff0711b232203b02435c2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a3157e9e929c1c26e2bcaa40ce07ae29"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="87d11e6e65032d565c27f3206ed50566b6e53f1840d3abaa"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7c4ab1fdd8fc737bee0eae8db3d29e16"}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000001fc0)={0x2, 0x60}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000002000)={r3, 0x4, 0x9, 0x101}) write$tun(r9, &(0x7f0000002040)={@val={0x0, 0x883e}, @val={0x2, 0x1, 0x73, 0x6, 0x3e47, 0xb11}, @mpls={[{0x0, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x1000}], @llc={@llc={0xff, 0xf0, "becc", "0c438e0c3b74b17067e5304c3c1b098aa36a5a0048c19ee9a2ed8809645a6da5c3c50540cde73a68268437de"}}}}, 0x4a) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x2c, r2, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40814}, 0x40000) 07:21:15 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='.\x00', r0) r2 = request_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='!\x00', r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r2, 0x80, 0xdf}, &(0x7f0000000240)={'enc=', 'pkcs1', ' hash=', {'streebog256-generic\x00'}}, &(0x7f00000002c0)="7e7f5d246aecec2a7d32647cb23af5ff09c08c503c96ba43e8cc04bdb0f7434bb4513b861ee0c30c12094cceb13e111c538b0351b22b813941953ba5231be3feb8fcd62d3c5a8a68eccdc2eb7198ee53d9a758f4202be6da487835cc9ed88a06d503b6255e3da12e24681be8b7778b3bce5260c9f369ceb35ca5326b839f0d0a", &(0x7f0000000340)="74c9f6d2e91b7defda71ab261df0c7760c792692bbc27d8ee062c4d746ab79900c978a1206a751052d9f183c7c5ff634efb441e298df2fd3c41b72b236f7901fc83cb598f5479e6e936d478e8a48158e814385ba542904c0ba082580a9877ff639c7bb8f8acf2f74501d38dc27af8f993a1954504709468ed6a4b6d8b4486185b0fc6ee28296042bcd6def548514cc116332f7c528aaf8815863a865406cb4450867efe25d8720a03a392cad4f4adcc748187e0ef19ccbdd438bd1242040a0064fa4a7572346cbaed83b9fb7961a28f8aad29b66d3e190d98d78b03dca9e63") keyctl$negate(0xd, r2, 0x1ff, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000440)={r1, 0x2e, 0xa}, &(0x7f0000000480)={'enc=', 'raw', ' hash=', {'cmac-aes-ce\x00'}}, &(0x7f0000000500)="a0b3d874eed602cbb936d5b9dddd6692109091899d7ec51ff706ea9e4465fc416840c30f829795faa944b01dcdff", &(0x7f0000000540)="117df35af0270d701d2c") keyctl$read(0xb, r2, &(0x7f0000000580)=""/249, 0xf9) r3 = request_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000700)='\x00', r2) r4 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, r4, 0x1) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) r5 = add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "a53e59c2fcb69b48ad5d03e3d27091aed229f4be5ab745a47bf8012321dd24da03f7b95023921f57dcf10ee0d8ce373f3e90b68d6cb5ac263980d234f3a0d531", 0x34}, 0x48, r3) add_key$keyring(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$negate(0xd, r3, 0x2800000000, r2) request_key(&(0x7f0000000940)='rxrpc\x00', &(0x7f0000000980)={'syz', 0x3}, &(0x7f00000009c0)='raw', r1) r6 = request_key(&(0x7f0000000a00)='encrypted\x00', &(0x7f0000000a40)={'syz', 0x3}, &(0x7f0000000a80)='e8dab99234bb312e', r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000ac0)={r6, 0xb5, 0x87}, &(0x7f0000000b00)={'enc=', 'raw', ' hash=', {'crct10dif\x00'}}, &(0x7f0000000b80)="8412a7efd419d471dab393cf6b1bfa766a40b1918ff53e78ebbef06194279d58facd629882ceb7f2d1b50d8647b3ac18c20b10c4e7a8681a97ae679c603bfa55363127f2ba1b19f7a8bfeecd4f9e44fc916b41a2c74007c60d8e0d78f23765093bd5c314a36c3a2bfbbfe8ec2681c4c5336853ed8258fa913ded50c152e06fa443fff4bfaf201dd9250e06e2f3f2b8435509db1ba5916e1b86203015aeaf1284bc055f841e81cca95c1a14cbb249dbf2c194a7fa2a", &(0x7f0000000c40)="5dd07957e407d576fb3bfcde37abe83c015be2daa3f85d3dd14f9980aadb55340227db7f5a5ce671dc879f70332dad1cfbd1341ac0090b916c9b5546ad09d27423230fe503ea512f77d49d748e71b46cd155c605882359578132eae38f8cb0ef9ad25e656ad1eedb0643ce2941ccc0dddb804de327f656b2a7cb31a27715d8433837b1a90ce2a1") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r7, 0x40189429, &(0x7f0000000d80)={0x1, 0x6, 0x7}) 07:21:15 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x31a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c4}, 0x20040000) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001300), 0x204000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x5}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x5) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x40, r1, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x20, r4, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x6f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000004) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x28, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x28}}, 0x4080) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000019c0)={&(0x7f00000018c0), 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x14, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$FIONCLEX(r7, 0x5450) openat$nvram(0xffffffffffffff9c, &(0x7f0000001a40), 0x8200, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000001a80), 0x7fff, 0x401) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x24, r9, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020884}, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x68, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x59}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ee}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7ff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]]}, 0x68}}, 0x24008880) 07:21:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x6, 0x6196af884891f4b6, 0x201, 0x70bd27, 0x25dfdbfd, {0x5, 0x0, 0x9}, [@generic="13ab83396181846989275bab9a992a453b7ce9", @generic]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x44014) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x63, 0x4) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000001c0)={0x80000000}) getpid() fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000200), &(0x7f0000000240)={'U+', 0x6}, 0x16, 0x1) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000280)=@buf) fallocate(0xffffffffffffffff, 0x1, 0x6, 0x5) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000810) pipe2$9p(&(0x7f00000004c0), 0x2800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x3}}}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000020}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000044}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4810) [ 89.605914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.614067] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.616533] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.627208] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.633887] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.636539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.799730] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.809056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.812861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.816213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.830245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.832744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.837912] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.840897] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.846151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.863935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.883850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.885633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.888913] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.890088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.894634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.898165] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.902375] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.907619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.909699] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.911685] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.913542] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.915001] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.922864] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.924493] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.927807] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.928975] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.930986] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.932198] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.933993] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.934013] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.945645] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.961820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.962117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.968007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.973718] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.978884] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.985847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.987622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.002697] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.003367] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.013736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.019736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.682844] Bluetooth: hci0: command tx timeout [ 91.938543] Bluetooth: hci1: command tx timeout [ 92.002711] Bluetooth: hci2: command tx timeout [ 92.004269] Bluetooth: hci7: command tx timeout [ 92.005861] Bluetooth: hci6: command tx timeout [ 92.067879] Bluetooth: hci3: command tx timeout [ 92.069594] Bluetooth: hci4: command tx timeout [ 92.070885] Bluetooth: hci5: command tx timeout [ 93.730483] Bluetooth: hci0: command tx timeout [ 93.986522] Bluetooth: hci1: command tx timeout [ 94.050658] Bluetooth: hci7: command tx timeout [ 94.051663] Bluetooth: hci2: command tx timeout [ 94.052911] Bluetooth: hci6: command tx timeout [ 94.114578] Bluetooth: hci5: command tx timeout [ 94.115994] Bluetooth: hci3: command tx timeout [ 94.116886] Bluetooth: hci4: command tx timeout [ 95.778494] Bluetooth: hci0: command tx timeout [ 96.034424] Bluetooth: hci1: command tx timeout [ 96.098478] Bluetooth: hci7: command tx timeout [ 96.099501] Bluetooth: hci6: command tx timeout [ 96.100800] Bluetooth: hci2: command tx timeout [ 96.162456] Bluetooth: hci3: command tx timeout [ 96.163376] Bluetooth: hci4: command tx timeout [ 96.164214] Bluetooth: hci5: command tx timeout [ 97.826513] Bluetooth: hci0: command tx timeout [ 98.082590] Bluetooth: hci1: command tx timeout [ 98.146742] Bluetooth: hci2: command tx timeout [ 98.147848] Bluetooth: hci7: command tx timeout [ 98.149149] Bluetooth: hci6: command tx timeout [ 98.210810] Bluetooth: hci5: command tx timeout [ 98.211982] Bluetooth: hci4: command tx timeout [ 98.213565] Bluetooth: hci3: command tx timeout [ 150.470365] syz-executor.4 (286) used greatest stack depth: 23248 bytes left [ 153.093952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.103022] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.109841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.117175] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.123726] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.133177] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.139214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.143268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.145449] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.149090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.150621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.154441] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.160483] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.167673] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.170333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.192462] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.195188] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.197148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.345120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.351818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.353546] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.366424] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.381257] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.383427] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.395213] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.401815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.405734] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.408226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.410505] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.423589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.426213] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.429814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.435729] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.439540] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.444466] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.450467] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.455012] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.457941] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.478961] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.485907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.496989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.498184] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.498246] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.500524] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.517655] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.519649] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.522885] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.532595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.234442] Bluetooth: hci2: command tx timeout [ 155.235520] Bluetooth: hci0: command tx timeout [ 155.298375] Bluetooth: hci1: command tx timeout [ 155.490426] Bluetooth: hci3: command tx timeout [ 155.554526] Bluetooth: hci7: command tx timeout [ 155.555528] Bluetooth: hci5: command tx timeout [ 155.618434] Bluetooth: hci6: command tx timeout [ 155.619395] Bluetooth: hci4: command tx timeout [ 157.283399] Bluetooth: hci2: command tx timeout [ 157.283889] Bluetooth: hci0: command tx timeout [ 157.347347] Bluetooth: hci1: command tx timeout [ 157.539400] Bluetooth: hci3: command tx timeout [ 157.603365] Bluetooth: hci7: command tx timeout [ 157.603839] Bluetooth: hci5: command tx timeout [ 157.668331] Bluetooth: hci6: command tx timeout [ 157.668777] Bluetooth: hci4: command tx timeout [ 159.331478] Bluetooth: hci0: command tx timeout [ 159.332000] Bluetooth: hci2: command tx timeout [ 159.395555] Bluetooth: hci1: command tx timeout [ 159.587403] Bluetooth: hci3: command tx timeout [ 159.651338] Bluetooth: hci7: command tx timeout [ 159.651851] Bluetooth: hci5: command tx timeout [ 159.714425] Bluetooth: hci4: command tx timeout [ 159.714940] Bluetooth: hci6: command tx timeout [ 161.379759] Bluetooth: hci0: command tx timeout [ 161.380311] Bluetooth: hci2: command tx timeout [ 161.445337] Bluetooth: hci1: command tx timeout [ 161.635316] Bluetooth: hci3: command tx timeout [ 161.699417] Bluetooth: hci5: command tx timeout [ 161.700042] Bluetooth: hci7: command tx timeout [ 161.763616] Bluetooth: hci6: command tx timeout [ 161.764201] Bluetooth: hci4: command tx timeout [ 215.217712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.219730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.221172] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.226907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.228729] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.229784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.271617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.273084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.274568] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.278209] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.280209] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.281827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.302555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.308826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.311418] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.320904] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.328798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.336830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.517111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.521727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.525922] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.534431] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.545509] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.547794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.553871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.566528] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.571769] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.571800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.585136] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.590517] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.590909] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.592071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.601430] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.602518] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.612058] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.620625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.623152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.626502] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.627791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.632912] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.675676] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.703837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.705649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.715714] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.727683] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.731938] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.732845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.738930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.250417] Bluetooth: hci0: command tx timeout [ 217.315452] Bluetooth: hci1: command tx timeout [ 217.378779] Bluetooth: hci2: command tx timeout [ 217.634386] Bluetooth: hci3: command tx timeout [ 217.763351] Bluetooth: hci4: command tx timeout [ 217.764108] Bluetooth: hci5: command tx timeout [ 217.826379] Bluetooth: hci7: command tx timeout [ 217.890339] Bluetooth: hci6: command tx timeout [ 219.299335] Bluetooth: hci0: command tx timeout [ 219.362628] Bluetooth: hci1: command tx timeout [ 219.426845] Bluetooth: hci2: command tx timeout [ 219.682373] Bluetooth: hci3: command tx timeout [ 219.810404] Bluetooth: hci5: command tx timeout [ 219.810869] Bluetooth: hci4: command tx timeout [ 219.875129] Bluetooth: hci7: command tx timeout [ 219.938501] Bluetooth: hci6: command tx timeout [ 221.346352] Bluetooth: hci0: command tx timeout [ 221.411376] Bluetooth: hci1: command tx timeout [ 221.474341] Bluetooth: hci2: command tx timeout [ 221.731436] Bluetooth: hci3: command tx timeout [ 221.859442] Bluetooth: hci5: command tx timeout [ 221.859919] Bluetooth: hci4: command tx timeout [ 221.922650] Bluetooth: hci7: command tx timeout [ 221.986320] Bluetooth: hci6: command tx timeout [ 223.394444] Bluetooth: hci0: command tx timeout [ 223.458337] Bluetooth: hci1: command tx timeout [ 223.522712] Bluetooth: hci2: command tx timeout [ 223.778467] Bluetooth: hci3: command tx timeout [ 223.906338] Bluetooth: hci4: command tx timeout [ 223.906808] Bluetooth: hci5: command tx timeout [ 223.971302] Bluetooth: hci7: command tx timeout [ 224.034351] Bluetooth: hci6: command tx timeout [ 277.435792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.438845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.442041] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.449847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.454847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.457581] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.611437] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.613968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.616020] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.624074] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.631140] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.647765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.682336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.684813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.688431] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.703789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.709105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.719566] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.752524] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.754705] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.766359] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.768690] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.772166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.776899] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.782311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.786621] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.790586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.796073] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.800738] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.805614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.834495] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.855880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.872479] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.895512] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.936412] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.949740] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.956845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.959203] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.962137] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.983965] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.010872] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.011400] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.014739] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.016105] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.022032] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.029555] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.046445] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.047791] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.522435] Bluetooth: hci0: command tx timeout [ 279.714467] Bluetooth: hci1: command tx timeout [ 279.779461] Bluetooth: hci2: command tx timeout [ 279.844312] Bluetooth: hci3: command tx timeout [ 279.906349] Bluetooth: hci4: command tx timeout [ 280.035413] Bluetooth: hci5: command tx timeout [ 280.098525] Bluetooth: hci6: command tx timeout [ 280.162373] Bluetooth: hci7: command tx timeout [ 281.571288] Bluetooth: hci0: command tx timeout [ 281.762551] Bluetooth: hci1: command tx timeout [ 281.826447] Bluetooth: hci2: command tx timeout [ 281.890410] Bluetooth: hci3: command tx timeout [ 281.954326] Bluetooth: hci4: command tx timeout [ 282.082367] Bluetooth: hci5: command tx timeout [ 282.146488] Bluetooth: hci6: command tx timeout [ 282.210392] Bluetooth: hci7: command tx timeout [ 283.619324] Bluetooth: hci0: command tx timeout [ 283.810508] Bluetooth: hci1: command tx timeout [ 283.874341] Bluetooth: hci2: command tx timeout [ 283.938541] Bluetooth: hci3: command tx timeout [ 284.002379] Bluetooth: hci4: command tx timeout [ 284.130392] Bluetooth: hci5: command tx timeout [ 284.194355] Bluetooth: hci6: command tx timeout [ 284.258327] Bluetooth: hci7: command tx timeout [ 285.667297] Bluetooth: hci0: command tx timeout [ 285.858385] Bluetooth: hci1: command tx timeout [ 285.922559] Bluetooth: hci2: command tx timeout [ 285.986604] Bluetooth: hci3: command tx timeout [ 286.050377] Bluetooth: hci4: command tx timeout [ 286.178399] Bluetooth: hci5: command tx timeout [ 286.244287] Bluetooth: hci6: command tx timeout [ 286.306411] Bluetooth: hci7: command tx timeout [ 339.575771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.581734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.584855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.591883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.595642] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.598026] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.758573] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.764307] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.766409] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.772822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.774885] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.787074] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.789471] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.791432] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.803111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.832745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.838309] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.844124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.844968] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.865479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.876486] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.935104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.942545] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.991280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.997548] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.999538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.014429] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.064615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.072736] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.075894] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.078155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.081457] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.084379] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.094555] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.096887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.099143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.101288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.141828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.151054] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.161469] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.171685] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.175428] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.224197] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.226759] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.228832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.239706] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.250749] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.252510] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.666304] Bluetooth: hci0: command tx timeout [ 341.859396] Bluetooth: hci1: command tx timeout [ 341.922444] Bluetooth: hci2: command tx timeout [ 342.050336] Bluetooth: hci3: command tx timeout [ 342.242599] Bluetooth: hci4: command tx timeout [ 342.306374] Bluetooth: hci6: command tx timeout [ 342.370368] Bluetooth: hci5: command tx timeout [ 342.371151] Bluetooth: hci7: command tx timeout [ 343.714322] Bluetooth: hci0: command tx timeout [ 343.906304] Bluetooth: hci1: command tx timeout [ 343.970328] Bluetooth: hci2: command tx timeout [ 344.100244] Bluetooth: hci3: command tx timeout [ 344.291270] Bluetooth: hci4: command tx timeout [ 344.355278] Bluetooth: hci6: command tx timeout [ 344.418444] Bluetooth: hci5: command tx timeout [ 344.418894] Bluetooth: hci7: command tx timeout [ 345.763419] Bluetooth: hci0: command tx timeout [ 345.954476] Bluetooth: hci1: command tx timeout [ 346.018290] Bluetooth: hci2: command tx timeout [ 346.147312] Bluetooth: hci3: command tx timeout [ 346.338288] Bluetooth: hci4: command tx timeout [ 346.403290] Bluetooth: hci6: command tx timeout [ 346.467285] Bluetooth: hci5: command tx timeout [ 346.467726] Bluetooth: hci7: command tx timeout [ 347.811562] Bluetooth: hci0: command tx timeout [ 348.002533] Bluetooth: hci1: command tx timeout [ 348.066577] Bluetooth: hci2: command tx timeout [ 348.194384] Bluetooth: hci3: command tx timeout [ 348.387198] Bluetooth: hci4: command tx timeout [ 348.450472] Bluetooth: hci6: command tx timeout [ 348.515289] Bluetooth: hci5: command tx timeout [ 348.515937] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 07:26:24 Registers: info registers vcpu 0 RAX=ffffffff87f0af20 RBX=0000000000020000 RCX=ffffffff814fda09 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff87f0af20 RBP=ffff88802858c1d0 RSP=ffff88802f6f7a38 R8 =0000000000000000 R9 =fffffbfff0fe15e4 R10=ffffffff87f0af27 R11=00000000fa83b2da R12=ffff88802858b780 R13=ffffffff85c18d00 R14=0000000000000016 R15=0000000000000003 RIP=ffffffff81abbd26 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc6b7e83540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc6b80f0000 CR3=0000000024c12000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000000000006c77 XMM04=65726874705f5f0074696e695f6b636f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00007faed2552699 RCX=1ffffffff0c80110 RDX=0000000000000000 RSI=00007faed2552699 RDI=ffffffff85c705a0 RBP=00007faed2552699 RSP=ffff88806cf09a30 R8 =0000000000000000 R9 =ffff88806cf09ab8 R10=00007faed2552000 R11=0000000000000003 R12=ffff88806cf09b40 R13=0000000000000000 R14=ffff8880290b0000 R15=ffff88801b470de0 RIP=ffffffff81722930 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe57ff616f4 CR3=0000000028426000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fe57ff7047000007fe57ff6ff20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000