Warning: Permanently added '[localhost]:23748' (ECDSA) to the list of known hosts. 2025/04/27 00:03:05 fuzzer started 2025/04/27 00:03:06 dialing manager at localhost:46629 syzkaller login: [ 109.467339] cgroup: Unknown subsys name 'net' [ 109.601125] cgroup: Unknown subsys name 'cpuset' [ 109.648567] cgroup: Unknown subsys name 'rlimit' 2025/04/27 00:03:25 syscalls: 201 2025/04/27 00:03:25 code coverage: enabled 2025/04/27 00:03:25 comparison tracing: enabled 2025/04/27 00:03:25 extra coverage: enabled 2025/04/27 00:03:25 setuid sandbox: enabled 2025/04/27 00:03:25 namespace sandbox: enabled 2025/04/27 00:03:25 Android sandbox: enabled 2025/04/27 00:03:25 fault injection: enabled 2025/04/27 00:03:25 leak checking: enabled 2025/04/27 00:03:25 net packet injection: enabled 2025/04/27 00:03:25 net device setup: enabled 2025/04/27 00:03:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 00:03:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 00:03:25 USB emulation: enabled 2025/04/27 00:03:25 hci packet injection: enabled 2025/04/27 00:03:25 wifi device emulation: enabled 2025/04/27 00:03:25 802.15.4 emulation: enabled 2025/04/27 00:03:25 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 00:03:26 starting 8 fuzzer processes 00:03:26 executing program 0: socketpair(0x22, 0x1, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x3ed, 0x400, 0x70bd2a, 0x25dfdbfe, "101c2bfd6511271b880d69c6424ebdcd4baa1e84bdef8116c7fe08a4d6b86980e19d6b6a82ed4b842a62d6c713aa877eb8c05f7ee64f6511cb912021258e52805223de5954d381d71a559877a54d4a017c4d21d3b38359cc7c57804b9d44eae7fe3eaf71d79e8dbc0f8456a858db5ba680e0e9c28d8bbfdb76", [""]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r2 = memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6884, 0x31}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x40880) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x43}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40410d0) r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x400, 0x240000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x4, 0x7, 0xc1, 0x2, 0x20, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x0, 0x3, 0x7}}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000a80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000580)={0x48c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x5, 0x9, 0x2}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe8}}, {0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xed83}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x10004000}, 0x44080) io_uring_setup(0x7a22, &(0x7f0000000ac0)={0x0, 0x6534, 0x4, 0x3, 0x2e, 0x0, r4}) timerfd_gettime(r4, &(0x7f0000000b40)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x48, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4088800}, 0x44) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d80)={'sit0\x00', &(0x7f0000000d00)={'syztnl2\x00', r5, 0x0, 0x40, 0x3, 0x80, 0x46, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, @local, 0x700, 0x0, 0x8, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000dc0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000e80)={'syztnl1\x00', &(0x7f0000000e00)={'ip6tnl0\x00', r7, 0x2f, 0x9f, 0x5c, 0x2, 0x0, @mcast1, @empty, 0x20, 0x20, 0x7ff, 0xff}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x5c, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x100}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000011c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001040)=""/170, 0xaa, 0x0, &(0x7f0000001100)=""/151, 0x97}, &(0x7f0000001200)=0x40) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x68, r8, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9b7, 0x13}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x40}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x80}]}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x20000850) 00:03:26 executing program 1: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x8000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x400080, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000240)={0x450, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x1b, 0x16, 0x3, 0x16]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x6, 0x36, 0x24, 0x30, 0x3, 0x3, 0x1, 0x16, 0x16, 0x30, 0x36, 0x9, 0x1b, 0x36, 0x1b, 0x6, 0x6, 0xb, 0xc, 0x6c, 0x6, 0x30, 0x5, 0x9, 0x5, 0x3, 0x2, 0x60]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0xb, 0x60, 0x30, 0x1, 0x6c, 0x9, 0x24, 0x60, 0x24, 0x24, 0x48, 0x3, 0xc, 0x2, 0x18]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x3, 0x9, 0x58, 0x60, 0x24, 0x30, 0x20, 0x1b, 0x5, 0x18, 0x1b, 0x3, 0x4, 0x3, 0x36, 0x36]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x6, 0xa}, {0x2, 0x2}, {0x3, 0x6}, {0x1, 0x9}, {0x7}, {0x1}, {0x4, 0x6}, {0x7}, {0x2}, {0x1, 0x3}, {0x1, 0x4}, {0x2, 0x4}, {0x6, 0x2}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x3, 0xa}, {0x4, 0x4}, {0x5, 0x6}, {0x0, 0x8}, {0x0, 0x6}, {0x7}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0x2}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x9}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe0, 0x6, 0x3, 0x81, 0x364, 0x60, 0x1, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x20, 0x80, 0x4, 0x8, 0x7, 0x2, 0x4]}}]}, @NL80211_BAND_60GHZ={0x118, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x5}, {0x7, 0x3}, {0x7}, {0x0, 0x2}, {0x1, 0x1}, {0x5, 0xa}, {}, {0x0, 0x2}, {0x6, 0x6}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x2}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x3}, {0x1}, {}, {0x5, 0x7}, {0x4, 0x6}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0xa}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x4, 0x8}, {0x2, 0x8}, {0x3, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x3, 0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x2}, {0x6, 0x5}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x6, 0x18, 0x6, 0x1, 0x1b, 0x60, 0x3, 0x36, 0x30, 0x2, 0x5, 0x18, 0x1, 0x9, 0x3a, 0x6c, 0x1, 0x3, 0x16, 0x3, 0x18, 0x24, 0xc]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x1}, {0x7, 0x8}, {0x7, 0x9}, {0x3, 0x6}, {0x1, 0xa}, {0x0, 0x9}, {0x1, 0xa}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0x2}, {0x5, 0x2}, {0x1, 0x2}, {0x3, 0xa}, {0x2, 0x3}, {0x3, 0x5}, {0x0, 0x6}, {}, {0x4, 0x4}, {0x2, 0x7}, {0x2, 0x2}, {0x5}, {0x4, 0xa}, {0x7, 0x9}, {0x3, 0x6}, {0x0, 0x9}, {0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0x1}, {0x6, 0x2}, {0x1, 0x8}, {0x6}, {0x3, 0x6}, {0x6, 0x7}, {0x4, 0x3}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x4}, {0x7, 0x3}, {0x3, 0x2}, {0x7, 0x8}, {0x5}, {0x6, 0xa}, {0x4, 0x5}, {0x2, 0x6}, {0x4, 0x6}, {0x2}, {0x1, 0x6}, {0x3}, {0x7, 0x1}, {0x1, 0x1}, {0x6, 0x7}, {0x1, 0xa}, {0x4, 0x8}, {0x2, 0x6}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x5}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x3, 0x3}, {0x5}, {0x3, 0x2}, {0x3, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x3}, {0x0, 0x6}, {0x3, 0x8}, {0x3, 0x7}, {0x6, 0x6}, {0x4, 0x1}, {0x6, 0x1}, {0x4, 0x7}, {0x6, 0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x7, 0x7}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x2, 0x6}, {0x4}, {0x0, 0x3}, {0x5, 0x4}, {0x4, 0xa}, {0x0, 0x9}, {0x6}, {0x1, 0xa}, {0x1, 0x7}, {0x5, 0x8}, {0x2, 0x9}, {0x1, 0x2}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x2}, {0x1, 0x1}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0x6}, {0x4, 0x1}, {0x4, 0x6}, {0x3, 0x2}, {0x1, 0x1}, {0x1, 0x7}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x9}, {0x0, 0x9}, {0x5, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x6, 0x4}, {0x6, 0xa}, {0x4, 0x7}, {0x3, 0x1}, {0x6, 0x8}, {0x5, 0x8}, {0x5, 0x2}, {0x2, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {0x7, 0xa}, {0x2, 0xa}, {0x1, 0x2}, {0x6, 0x3}, {0x6, 0x4}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x4, 0x1}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0x4}, {0x4, 0x5}, {0x5, 0x1}, {0x3, 0x9}, {0x0, 0x6}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x2}, {0x6}, {0x1}, {0x2, 0x9}, {0x1}, {0x0, 0x7}, {0x3}, {0x7, 0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x6}, {0x6, 0xa}, {0x4, 0x7}, {0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x18, 0x2, 0x18, 0x3, 0x3, 0x9, 0x9, 0x1b, 0x3, 0x2, 0x4, 0x60, 0x12, 0x4]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x36, 0x0, 0x30, 0xc, 0x4, 0x16, 0x56, 0xb, 0x1, 0x60, 0x0, 0x24, 0x24, 0x6, 0x48, 0xb, 0x60, 0x39, 0x2, 0x36, 0x30, 0x60]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xf16af53e565549e7}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x7ff, 0x5, 0x5, 0x8000, 0x0, 0xccd]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x6}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x3, 0x3}, {0x6, 0xa}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x5}, {0x4, 0x2}, {0x6, 0x3}, {}, {0x2, 0x8}, {0x0, 0xa}, {0x0, 0x5}, {0x7, 0x8}, {0x7, 0x2}, {0x4, 0x2}, {0x7, 0x6}, {0x4, 0x2}, {0x1}, {0x6, 0x3}, {0x0, 0xa}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x8}, {0x6}, {0x5, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x3, 0x3, 0x400, 0xd0d, 0x63, 0x3]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x0, 0x6c, 0x60, 0x36, 0xc]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0xc, 0x24, 0x1b, 0x3, 0x1, 0x16, 0xc, 0xb, 0x24, 0x5, 0xc, 0x2, 0x1, 0x16, 0x60, 0x1b, 0x6c, 0xc, 0x30, 0x3, 0x12, 0x18, 0xb, 0x5, 0x12, 0x63, 0xc, 0x1b]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x25df, 0x5, 0x8, 0x7fff, 0x3, 0x5, 0x917]}}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x5, 0x7, 0x8, 0x3, 0x9, 0x7ff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x101, 0x6, 0x3, 0x80, 0x1, 0x81, 0x4]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0xb, 0x6, 0x2]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x2}, {0x4, 0x6}, {0x6, 0x3}, {0x4, 0x9}, {0x1}, {0x0, 0x8}, {0x2, 0x2}, {0x1, 0x7}, {0x5, 0x6}, {0x5}, {0x6, 0x4}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0x6}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8000, 0x81, 0x1004, 0x8, 0x4, 0x1, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x800, 0x0, 0x5, 0x1, 0x5, 0x9bbb, 0x7]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x8}, {0x6, 0x2}, {0x4, 0x2}, {0x1}, {0x7, 0x1}, {0x3, 0x2}, {0x3, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x2, 0x4}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x0, 0x9}, {0x6, 0x9}, {0x0, 0x5}, {0x3, 0x4}, {0x4}, {0x0, 0x6}, {0x6}, {0x5, 0x2}, {0x5}, {0x2, 0x2}, {0x5, 0x6}, {0x4, 0xa}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x9, 0x18, 0x24, 0x12, 0x0, 0x9, 0x1b, 0x12, 0x60, 0x30, 0x5, 0x22, 0x12, 0x16, 0x2e]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x3}, {0x1, 0xa}, {0x7, 0x4}, {0x4, 0x6}, {0x1, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x4, 0x7}, {0x2, 0x1}, {0x1, 0x3}, {0x5, 0x3}, {0x5, 0x1}, {0x1, 0x2}, {0x6, 0x5}, {0x5}, {0x0, 0x5}, {0x4}, {0x3, 0x9}, {0x4, 0x7}, {0x7, 0x6}, {0x4, 0x7}, {0x2, 0x6}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x6}, {0x0, 0x1}, {0x7, 0x5}, {0x7, 0xa}, {0x6, 0x6}, {0x6, 0x8}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x5}, {0x6, 0x2}, {0x2, 0x8}, {0x6, 0x7}, {0x6, 0x6}, {0x1}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x9}, {0x3}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0x48, 0x60, 0x2, 0x2, 0x5]}]}]}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x6, 0x800, 0x9, 0x7, 0x1, 0x3]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x6}, {0x2, 0x6}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x6}, {0x7, 0xa}, {0x6, 0xa}, {0x6, 0x1}, {0x3, 0x5}, {0x1, 0x5}, {0x7, 0x6}, {0x3, 0x5}, {0x0, 0x7}, {0x7, 0x7}, {0x4, 0x3}, {0x4}, {0x4, 0x5}, {0x0, 0xa}, {0x0, 0x6}, {0x0, 0x6}, {0x5}, {0x3, 0x3}, {0x6}, {0x6, 0x2}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0x9}, {0x1}, {0x4, 0x4}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x2, 0x6}, {0x1, 0x3}, {0x6, 0x2}, {0x5, 0x9}, {0x1, 0x4}, {0x7}, {0x3, 0x4}, {0x6, 0x4}, {0x6, 0x4}, {0x4, 0x4}, {0x4, 0x3}, {0x7, 0x5}, {0x4}, {0x1, 0x9}, {0x4, 0x7}, {0x2}, {0x3, 0x8}, {0x1, 0x1}, {0x0, 0xa}, {0x0, 0x4}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x4}, {0x1}, {0x6, 0x9}, {0x7, 0x3}, {0x2, 0x7}, {0x7, 0x6}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x450}, 0x1, 0x0, 0x0, 0x20040000}, 0x2004c090) r4 = socket(0x1f, 0x5, 0x6) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3f}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1904d9a286dc9a8b}, 0x8008800) getpeername(r2, &(0x7f0000000840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000008c0)=0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'sit0\x00', 0x0, 0x29, 0x7f, 0x6, 0x9, 0x29, @dev={0xfe, 0x80, '\x00', 0x1d}, @remote, 0x8000, 0x7800, 0x361, 0xb69}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', r6, 0x29, 0xb4, 0x40, 0x0, 0x0, @private2, @remote, 0x40, 0x40, 0x400, 0x3}}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x200, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x40804) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000c80)={'ip6tnl0\x00', &(0x7f0000000c00)={'syztnl1\x00', r6, 0x29, 0x6e, 0x2d, 0x4, 0xb, @empty, @mcast2, 0x700, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000cc0)={'syztnl2\x00', r8, 0x29, 0x5, 0x5, 0x4, 0x22, @local, @empty, 0x700, 0x80, 0xece, 0x28e11cfa}}) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x35}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x200c054) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000e80)={0x3, 'ip6erspan0\x00', {}, 0x3}) capget(&(0x7f0000000f40)={0x20080522}, &(0x7f0000000f80)={0x5, 0x9, 0xfff, 0x100, 0x2, 0x401}) [ 129.890810] audit: type=1400 audit(1745712206.867:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:03:26 executing program 2: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) write$hidraw(0xffffffffffffffff, &(0x7f0000000040)="76e49aefb5e6380c25fe334f71fa742f7d98dbffdaf758e88a93a87db6dde8e635d378ec0d92844d6677d266e11b8a02757389cade10117204278c29a714682a80b0a9faea3efbf506ca74923617507f412ef286823d9207dadd160922ef7765ade305a2f7f799be5a6b039c97a36d3082924c0d9fcdc686c71c9dfc8042e6fc7a4a93da6c0871890e105a3561b56d3ecc8c155bf5056c959da979228bf1ddf2488b30f26c4b9916d88465175e30519efe97e66905e3c888602cab5c17fa4a0d4801d33efcebe591eb4461eaa24d81b0cc05bec0ede59ef13f1d0b2a6aeb", 0xde) socketpair(0x2b, 0x80000, 0xb0f, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x8, [0x2, 0xfffff89d], 0x99}, 0x10) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000001c0)={0x1, 0x1, "a6c407", 0x8, 0x5}) r1 = socket(0x5, 0x800, 0x5) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000200)="aed2ea8b763460a25ccbfa30b06006771472c03f8eedfee97845243db463e935f9531abdcfb2499883752ca92e94f9ef56e4fe0d5f48de8748c9c7dd6374ea0e691c1a771b77c89cf8842415fe474fb502fd94d51958d41a4961a67227c6ea39287e67e415d896d2894b37e8e189939646270f637c1aec1c71721588d145ff138acc3a31fba4fc793daacfdab360fd9fb2b4e597e3e93f4151a246cb6ca4e11ed917cbe045902c0de70b81fdd92b5fc965db6860") getpeername(r0, &(0x7f00000002c0)=@rc={0x1f, @none}, &(0x7f0000000340)=0x80) socketpair(0xbfee46606da626d7, 0xa, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000003c0)={0x400, [0x0, 0x5], 0x1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x3, 0x7, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40, 0x700, 0x10000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r4, 0x2f, 0x56, 0x3, 0x8d, 0x18, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1, 0x7, 0xfffffffc, 0x5}}) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000580)) syz_open_dev$hidraw(&(0x7f00000005c0), 0x200, 0x480) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000600)={0xfff, [0x3f]}, 0x10) bind$bt_hci(r1, &(0x7f0000000640)={0x1f, 0x1}, 0x6) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x612ae) r5 = accept(r3, &(0x7f0000000680)=@ethernet={0x0, @remote}, &(0x7f0000000700)=0x80) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xbc, 0x0, 0x400, 0x70bd26, 0x100, {{}, {@void, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc000000, {0x2, 0xdd90, 0x6220, 0x4}}}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x24, 0x115, "2413a7db3046c823df6694fc2342611eeaad56681d75e42995c12180bcf6ec26"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac04, 0xfac02, 0xfac0a, 0x87a06, 0xfac05]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf6}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}], @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x2, 0x7f, 0x4, 0x3, 0xffe1, 0x7, 0x0, 0x7fff, 0x3ff, 0x8000, 0xb59, 0x7, 0x8, 0x1f, 0x2, 0x7]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs2/custom1\x00', 0x0, 0x0) 00:03:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x40000000, 0x20000) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8e36a) r1 = syz_open_pts(0xffffffffffffffff, 0x210400) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4100}, 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000180), 0x7, 0x400000) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x4) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000001c0)) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f2, 0x10, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x26000881}, 0x8001) r3 = syz_open_dev$hidraw(&(0x7f0000000300), 0x7, 0x40000) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f0000000340)=""/160) syz_open_dev$hidraw(&(0x7f0000000400), 0x53, 0x2100) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000440)="213f28d07f1a0b1ee9c460ad13f7e2065e4bca7041d26ad9c9f08644007066903c270fe455720991d44c3965bf0353c90f0b7b972cb4c0ef5a732f240c76ee963ed31466ab623290d7be212a0970d6422f43ecafc49040f669bc1491d946f35c730aab81f10b239923c3e62865c6b9bd359c0df80e8ce9d664ba22834c3d1c90e00bb3d01225a29e5d3b96a910bb35", 0x8f, r3}, 0x68) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000580)) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0], 0x1, 0x1}) read$hidraw(r3, &(0x7f0000000640)=""/55, 0x37) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x4, 0x7f, 0x6, 0x3, 0x9, @loopback, @remote, 0x737, 0x8000, 0x20, 0x87c}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/fs/ext4', 0x28080, 0x1de) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x88, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x88}, 0x1, 0x0, 0x0, 0x48044}, 0x40) 00:03:26 executing program 4: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20004000) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x2010, 0xffffffffffffffff, 0x10000000) r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x4, 0x10000) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x1, 0x70bd2a, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x40002}, 0x40000) r4 = memfd_secret(0x80000) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0], 0x2, 0x9}) syz_io_uring_setup(0x4409, &(0x7f00000004c0)={0x0, 0xb91b, 0x0, 0x2, 0x30d, 0x0, r4}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) r5 = syz_open_dev$mouse(&(0x7f00000005c0), 0x6, 0x140) mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000003, 0x10010, r5, 0x10000000) pkey_alloc(0x0, 0x1) 00:03:27 executing program 5: sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x300, 0x70bd27, 0x25dfdbff, {0x0, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@x25, &(0x7f0000000180)=0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000) socketpair(0x18, 0x3, 0x80000000, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x108, 0x464, 0x800, 0x70bd2b, 0x25dfdbfb, "d14f1e6f40fe53a5e9099422cf805da95a902b706f061f60e1bb3456719c839129495946ee658ef4d01dd1800ffa64586c4bb9e0b5bf0126795547dce6f454d18040a38b089705b7a916a39a797090e71f7e14c55cca8dbb6cdf05e44e8305e7efe736b1dfed857e156fddac95d4904bbb78ad5e4778fd0f8af12b8e241c421f2372e663ad7e298ed3a9c4fe3212aaca77a0457800c566f97a348ac699bd6a9b43ae9e0cdec9425fda4038d8b3e5ac1ab4dec1ba39664c05a1012b2a691bee24a531131312f0782c0121bf1992ab1ab094ea4190cc572d28eff34edf82573b5412c1707f8b105f4e612ef96cbee0ca93aea4f8a7c4", [""]}, 0x108}, 0x1, 0x0, 0x0, 0x94}, 0x8883) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xc0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x68, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @random="c3f5f1f93562"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x1ff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7ff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x38abde24}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xba2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1000}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x50}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1421}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xc0}}, 0x44000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x3f2, 0x100, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008004}, 0x80) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x74fc6a830dd4487a}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x90) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4040005}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4050) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, r3, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x76}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x80}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x80}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4008880) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r4, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x34}}, 0x800) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x805) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000001140)={'syztnl1\x00', &(0x7f00000010c0)={'sit0\x00', 0x0, 0x29, 0xd5, 0x4, 0x1000, 0x6e, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x20}, 0x40, 0x7, 0x9, 0x101}}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001680)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001640)={&(0x7f0000001240)={0x3d8, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffad4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffeffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x1}, 0x80881) 00:03:27 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xff, 0x25}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x28}}, 0x40) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x302d4062}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x120, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x63}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x23b}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xee, 0xbe, "de925a5d5bc5e288b53ad3375572c39915ce48695ecfe98b4687cf30750b22a5a220f5e590c1b9ef782a4f51f29243434fc0a6187da5516579a501cf5452aeb8901370aac4f0a7d4297e14ce08ac00b90e61193703de8faeb3ca6f64a68956943a027276b9b875946af8636df04247d9f5d503908f4186b39ff259ad2cf78325d162de0e9fff1063db66d8e59321a567eb6fbffa16c3ebda2fcb2878913cb737cc3ed2d14ffe89ed132f511baf50deac7307ac9380b44e73e58ca9692d45efda77d7618f55dcc06a86c194626b245f571bd9b8ef9ebac44d71eabf3e429488ff0faeb02ddd8e0474d58d"}]}, 0x120}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x94, r3, 0x103, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) r5 = socket(0x1e, 0x80000, 0x0) sendmsg$AUDIT_USER(r5, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb0, 0x3ed, 0x800, 0x70bd2c, 0x25dfdbfc, "653c7dbcbc347dc67f43425a675116fe25d5a44de287f6d3a6bf18b546507b431931b88fb11a51c38ac2b7b5eb9775e777fb76e9830e4030a21cfdd76821d9a4920d7e6d95b06e189011588922fdd2ef34929eb92c68b900578bd4c27f107b1092dafc551d7a5840b39af1dee8ae651ad2290481165b00c0d5ef2f182a19e07ad31fddf5c12ed92f634ba4a31dfcd6860dca92c4a8c5a9260ae4ff7bc655", ["", "", "", ""]}, 0xb0}}, 0x4800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r5) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r6, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x4b}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x26}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x4004004) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xac, r0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcbd, 0x16}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "4c8e1c9a1c19"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "89093833b3f3f317d651d0f967"}, @NL80211_KEY_SEQ={0xf, 0x4, "edfd6c97bb462f75bac425"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "17cfdd5745"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7c730d5e161097b3ea8d82b1f6"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xac}}, 0x2000c051) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000c80)={0x1200, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x280000, 0x62}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x19c, 0x3, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x90, 0x1, "4e0c1413ecddb3b6f9213edd6e0d52cd3d2c225c9a8641dfdd511b85e8ca1f7e502cbad323ab28475a87ccb25472be1d0bc29e7e71e61a5438f2b196a0d118eac847d064aad3c884f426a886af7e734196080e6f0fb7e36797fe979735d328570631b2349426c6a9b0d2fce85d11b87bd34749c94a75e8dafcd37ecd7e65bafe901c4672dbc97a127f717bc4"}}, {0xf8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xf1, 0x2, "606d94bfffce48ed4f7cd7be8c36026a6518db17cac41490d0bab0c00786c84ae2aa4c08bb078d461275ccf3ded7e7e0d7fa1abc524ec657f470e5c36c0a24aadc0981fff6634a1ce9adb78dcd8b796d29e86b554a332075000a7da336cf66db8fa8f1103e23c43be1c5bba49b290df779208713fc99ed69bef2681ebbc001ae37bfa669aa60cacaf643999d5f319568635a94de02e73d70cf1990bd5fde466f54723701977065aa90cd3b71202b0f8232f551bce0be4a7245a82888f2b0a0d7312bccc5fa2c94ffd82992e5850ee442d605242b93c565e3c4efc2732028f4a3db2ac2a1a0a75e2b6a8aa01dfc"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1024, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7fff}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x1200}, 0x1, 0x0, 0x0, 0x1}, 0xf6bc7624a0ceaf12) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001f40), r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, r9, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x440) 00:03:27 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x242080) syz_io_uring_setup(0x1f13, &(0x7f0000000040)={0x0, 0x7200, 0x0, 0x1, 0x31c, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) read$usbmon(0xffffffffffffffff, &(0x7f0000000140)=""/38, 0x26) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0x81, 0x40, 0xffffff81, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, @remote, 0x9, 0x700, 0x7, 0x2}}) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = syz_open_dev$usbmon(&(0x7f0000000280), 0xffffffffffffffff, 0x200080) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x9f4fc) r2 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x8, 0x80) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x1261bd) r3 = memfd_secret(0x80000) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd2d, 0x25dfdbfd, 0x365a, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80000) inotify_init1(0x800) syz_open_dev$usbmon(&(0x7f0000000400), 0x80, 0x242) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) r4 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timerfd_settime(r4, 0x0, &(0x7f0000000480)={{0x77359400}, {r5, r6+60000000}}, &(0x7f00000004c0)) r7 = timerfd_create(0x1, 0x80000) timerfd_settime(r7, 0x1, &(0x7f0000000540)={{}, {0x0, 0x989680}}, &(0x7f0000000580)) [ 131.407394] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.413121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.418027] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.430828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.436404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.619787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.627020] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.630075] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.633281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.644979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.649877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.667808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.678274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.679965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.692444] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.695264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.695968] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.704005] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.727746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.752653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.752953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.778116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.791065] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.821048] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.827143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.832072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.832859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.854259] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.860068] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.867210] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.876213] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.884233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.896209] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.915170] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.920417] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.921465] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.924980] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.959964] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.964155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.976938] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 133.488014] Bluetooth: hci0: command tx timeout [ 133.743855] Bluetooth: hci2: command tx timeout [ 133.807853] Bluetooth: hci1: command tx timeout [ 133.809159] Bluetooth: hci3: command tx timeout [ 133.935748] Bluetooth: hci4: command tx timeout [ 134.000558] Bluetooth: hci5: command tx timeout [ 134.064233] Bluetooth: hci7: command tx timeout [ 134.064994] Bluetooth: hci6: command tx timeout [ 135.536073] Bluetooth: hci0: command tx timeout [ 135.792203] Bluetooth: hci2: command tx timeout [ 135.856057] Bluetooth: hci3: command tx timeout [ 135.857018] Bluetooth: hci1: command tx timeout [ 135.987095] Bluetooth: hci4: command tx timeout [ 136.047656] Bluetooth: hci5: command tx timeout [ 136.111655] Bluetooth: hci6: command tx timeout [ 136.112769] Bluetooth: hci7: command tx timeout [ 137.583811] Bluetooth: hci0: command tx timeout [ 137.840719] Bluetooth: hci2: command tx timeout [ 137.905049] Bluetooth: hci3: command tx timeout [ 137.905131] Bluetooth: hci1: command tx timeout [ 138.032258] Bluetooth: hci4: command tx timeout [ 138.095588] Bluetooth: hci5: command tx timeout [ 138.159723] Bluetooth: hci7: command tx timeout [ 138.159779] Bluetooth: hci6: command tx timeout [ 139.631605] Bluetooth: hci0: command tx timeout [ 139.889594] Bluetooth: hci2: command tx timeout [ 139.952060] Bluetooth: hci3: command tx timeout [ 139.952431] Bluetooth: hci1: command tx timeout [ 140.080116] Bluetooth: hci4: command tx timeout [ 140.143786] Bluetooth: hci5: command tx timeout [ 140.207981] Bluetooth: hci7: command tx timeout [ 140.209073] Bluetooth: hci6: command tx timeout [ 192.031194] syz-executor.0 (290) used greatest stack depth: 24496 bytes left [ 194.963229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.967053] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.971055] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.978911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.982983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.986188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.004437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.008086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.016241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.020553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.056451] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.061586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.069308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.086382] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.094973] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.128824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.133049] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.135317] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.142944] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.146817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.183266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.183878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.194326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.197187] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.210986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.213262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.218156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.224002] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.227627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.236962] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.241839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 195.250986] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 195.256825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 195.258772] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 195.272915] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 195.285342] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 195.320209] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 195.322170] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 195.342040] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.343907] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 197.040592] Bluetooth: hci0: command tx timeout [ 197.104969] Bluetooth: hci1: command tx timeout [ 197.167644] Bluetooth: hci2: command tx timeout [ 197.231981] Bluetooth: hci5: command tx timeout [ 197.296691] Bluetooth: hci3: command tx timeout [ 197.360714] Bluetooth: hci4: command tx timeout [ 197.425541] Bluetooth: hci7: command tx timeout [ 197.489092] Bluetooth: hci6: command tx timeout [ 199.087982] Bluetooth: hci0: command tx timeout [ 199.151640] Bluetooth: hci1: command tx timeout [ 199.215853] Bluetooth: hci2: command tx timeout [ 199.280611] Bluetooth: hci5: command tx timeout [ 199.344665] Bluetooth: hci3: command tx timeout [ 199.408949] Bluetooth: hci4: command tx timeout [ 199.472805] Bluetooth: hci7: command tx timeout [ 199.537610] Bluetooth: hci6: command tx timeout [ 201.136541] Bluetooth: hci0: command tx timeout [ 201.200669] Bluetooth: hci1: command tx timeout [ 201.264909] Bluetooth: hci2: command tx timeout [ 201.329505] Bluetooth: hci5: command tx timeout [ 201.392960] Bluetooth: hci3: command tx timeout [ 201.456937] Bluetooth: hci4: command tx timeout [ 201.520563] Bluetooth: hci7: command tx timeout [ 201.585830] Bluetooth: hci6: command tx timeout [ 203.183569] Bluetooth: hci0: command tx timeout [ 203.247793] Bluetooth: hci1: command tx timeout [ 203.312580] Bluetooth: hci2: command tx timeout [ 203.376582] Bluetooth: hci5: command tx timeout [ 203.440863] Bluetooth: hci3: command tx timeout [ 203.504548] Bluetooth: hci4: command tx timeout [ 203.568514] Bluetooth: hci7: command tx timeout [ 203.632851] Bluetooth: hci6: command tx timeout [ 257.472859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.476405] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.485011] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.496090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.500010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.675247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.679972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.681556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.691925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.702589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.735885] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.741921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.754958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.765270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.788465] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.792988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.797124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.811222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.827974] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.831066] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.837216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.885952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.894830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.897007] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.898466] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.904432] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.910584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.914919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.930951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.936073] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.983743] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.987428] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.991224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 258.001152] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 258.006200] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 258.156166] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 258.171172] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 258.195006] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 258.215541] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 258.219177] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 259.569031] Bluetooth: hci0: command tx timeout [ 259.759644] Bluetooth: hci1: command tx timeout [ 259.887607] Bluetooth: hci2: command tx timeout [ 260.015652] Bluetooth: hci5: command tx timeout [ 260.090858] Bluetooth: hci6: command tx timeout [ 260.143752] Bluetooth: hci4: command tx timeout [ 260.271762] Bluetooth: hci3: command tx timeout [ 260.335820] Bluetooth: hci7: command tx timeout [ 261.616411] Bluetooth: hci0: command tx timeout [ 261.809593] Bluetooth: hci1: command tx timeout [ 261.936600] Bluetooth: hci2: command tx timeout [ 262.063939] Bluetooth: hci5: command tx timeout [ 262.128607] Bluetooth: hci6: command tx timeout [ 262.191644] Bluetooth: hci4: command tx timeout [ 262.319566] Bluetooth: hci3: command tx timeout [ 262.384631] Bluetooth: hci7: command tx timeout [ 263.664887] Bluetooth: hci0: command tx timeout [ 263.855581] Bluetooth: hci1: command tx timeout [ 263.983904] Bluetooth: hci2: command tx timeout [ 264.112147] Bluetooth: hci5: command tx timeout [ 264.176865] Bluetooth: hci6: command tx timeout [ 264.239788] Bluetooth: hci4: command tx timeout [ 264.369017] Bluetooth: hci3: command tx timeout [ 264.431654] Bluetooth: hci7: command tx timeout [ 265.713547] Bluetooth: hci0: command tx timeout [ 265.904881] Bluetooth: hci1: command tx timeout [ 266.031920] Bluetooth: hci2: command tx timeout [ 266.159824] Bluetooth: hci5: command tx timeout [ 266.223586] Bluetooth: hci6: command tx timeout [ 266.289573] Bluetooth: hci4: command tx timeout [ 266.416776] Bluetooth: hci3: command tx timeout [ 266.480514] Bluetooth: hci7: command tx timeout [ 319.682464] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.689852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.703122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.713027] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.719292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.944446] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.948972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.952289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.961372] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.969231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.032246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.037624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.044093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.056069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.060075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 320.155987] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.172399] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.175155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.201392] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.220943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.290420] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.296059] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.319151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.352138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.360065] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.552241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.554876] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 320.560598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.563211] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.579985] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.583782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.610076] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.617744] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 320.625047] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.630971] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 320.679071] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.698630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 320.720689] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 320.733797] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.772363] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 321.775633] Bluetooth: hci0: command tx timeout [ 322.032166] Bluetooth: hci1: command tx timeout [ 322.160574] Bluetooth: hci2: command tx timeout [ 322.415580] Bluetooth: hci3: command tx timeout [ 322.479722] Bluetooth: hci4: command tx timeout [ 322.671930] Bluetooth: hci5: command tx timeout [ 322.864579] Bluetooth: hci7: command tx timeout [ 322.928620] Bluetooth: hci6: command tx timeout [ 323.825526] Bluetooth: hci0: command tx timeout [ 324.079546] Bluetooth: hci1: command tx timeout [ 324.208129] Bluetooth: hci2: command tx timeout [ 324.464534] Bluetooth: hci3: command tx timeout [ 324.527526] Bluetooth: hci4: command tx timeout [ 324.720557] Bluetooth: hci5: command tx timeout [ 324.914518] Bluetooth: hci7: command tx timeout [ 324.976798] Bluetooth: hci6: command tx timeout [ 325.872560] Bluetooth: hci0: command tx timeout [ 326.128545] Bluetooth: hci1: command tx timeout [ 326.255969] Bluetooth: hci2: command tx timeout [ 326.512656] Bluetooth: hci3: command tx timeout [ 326.576838] Bluetooth: hci4: command tx timeout [ 326.768504] Bluetooth: hci5: command tx timeout [ 326.961259] Bluetooth: hci7: command tx timeout [ 327.023530] Bluetooth: hci6: command tx timeout [ 327.921070] Bluetooth: hci0: command tx timeout [ 328.176816] Bluetooth: hci1: command tx timeout [ 328.303552] Bluetooth: hci2: command tx timeout [ 328.560795] Bluetooth: hci3: command tx timeout [ 328.626503] Bluetooth: hci4: command tx timeout [ 328.816548] Bluetooth: hci5: command tx timeout [ 329.007565] Bluetooth: hci7: command tx timeout [ 329.071696] Bluetooth: hci6: command tx timeout [ 382.412944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.423736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.433852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.446394] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.453899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.542440] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.556538] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.574193] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.582188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.589278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.667781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.674013] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.697124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.717267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.738334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.768014] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.788809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.792003] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.794043] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.801359] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.805104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.815417] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.824825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.828040] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.853351] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.988525] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 383.006024] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 383.016368] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 383.023045] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 383.044858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 383.124392] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.175413] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.180648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.186763] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.192683] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.399527] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 383.412128] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 383.414967] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 383.469998] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 383.536725] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 384.496790] Bluetooth: hci0: command tx timeout [ 384.623831] Bluetooth: hci1: command tx timeout [ 384.881580] Bluetooth: hci2: command tx timeout [ 384.944019] Bluetooth: hci4: command tx timeout [ 384.945640] Bluetooth: hci3: command tx timeout [ 385.136029] Bluetooth: hci6: command tx timeout [ 385.328618] Bluetooth: hci5: command tx timeout [ 385.711597] Bluetooth: hci7: command tx timeout [ 386.543601] Bluetooth: hci0: command tx timeout [ 386.671850] Bluetooth: hci1: command tx timeout [ 386.927948] Bluetooth: hci2: command tx timeout [ 386.991921] Bluetooth: hci4: command tx timeout [ 386.992395] Bluetooth: hci3: command tx timeout [ 387.184002] Bluetooth: hci6: command tx timeout [ 387.375570] Bluetooth: hci5: command tx timeout [ 387.759564] Bluetooth: hci7: command tx timeout [ 388.591768] Bluetooth: hci0: command tx timeout [ 388.721582] Bluetooth: hci1: command tx timeout [ 388.975737] Bluetooth: hci2: command tx timeout [ 389.039801] Bluetooth: hci4: command tx timeout [ 389.040218] Bluetooth: hci3: command tx timeout [ 389.233588] Bluetooth: hci6: command tx timeout [ 389.423585] Bluetooth: hci5: command tx timeout [ 389.808649] Bluetooth: hci7: command tx timeout [ 390.639574] Bluetooth: hci0: command tx timeout [ 390.767592] Bluetooth: hci1: command tx timeout [ 391.024857] Bluetooth: hci2: command tx timeout [ 391.087674] Bluetooth: hci3: command tx timeout [ 391.088119] Bluetooth: hci4: command tx timeout [ 391.279924] Bluetooth: hci6: command tx timeout [ 391.472505] Bluetooth: hci5: command tx timeout [ 391.855539] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:08:34 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff813508dd RDI=fffffbfff0b83758 RBP=ffffffff85c1bac0 RSP=ffff88802894f7c8 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b0c2 R11=000000000002498b R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88802894f8c0 RIP=ffffffff84b07600 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b001a42080 CR3=000000002fde2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000ff000000000000 XMM02=000000000000000000ff0000000000ff XMM03=000000ff000000ff000000ff000000ff XMM04=0000ff0000000000ff00000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8190338e RDX=ffff8880289a9bc0 RSI=0000000000000008 RDI=ffffea000085d3c0 RBP=ffffea000085d3c0 RSP=ffff88802ac2fb98 R8 =0000000000000000 R9 =fffff9400010ba78 R10=0000000000000000 R11=1ffff1100d9e6bb1 R12=ffff88802ae2e8c0 R13=800000002174f067 R14=ffff88802ac2fde8 R15=ffff88802ac2fd90 RIP=ffffffff81902293 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe234ec3540 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe2350a75e0 CR3=00000000345a2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000700007fe2353cea90 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000