Warning: Permanently added '[localhost]:40264' (ECDSA) to the list of known hosts. 2024/10/19 11:13:29 fuzzer started 2024/10/19 11:13:30 dialing manager at localhost:45639 syzkaller login: [ 65.330918] cgroup: Unknown subsys name 'net' [ 65.437279] cgroup: Unknown subsys name 'cpuset' [ 65.462677] cgroup: Unknown subsys name 'rlimit' 2024/10/19 11:13:47 syscalls: 206 2024/10/19 11:13:47 code coverage: enabled 2024/10/19 11:13:47 comparison tracing: enabled 2024/10/19 11:13:47 extra coverage: enabled 2024/10/19 11:13:47 setuid sandbox: enabled 2024/10/19 11:13:47 namespace sandbox: enabled 2024/10/19 11:13:47 Android sandbox: enabled 2024/10/19 11:13:47 fault injection: enabled 2024/10/19 11:13:47 leak checking: enabled 2024/10/19 11:13:47 net packet injection: enabled 2024/10/19 11:13:47 net device setup: enabled 2024/10/19 11:13:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/19 11:13:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/19 11:13:47 USB emulation: enabled 2024/10/19 11:13:47 hci packet injection: enabled 2024/10/19 11:13:47 wifi device emulation: enabled 2024/10/19 11:13:47 802.15.4 emulation: enabled 2024/10/19 11:13:47 fetching corpus: 0, signal 0/0 (executing program) 2024/10/19 11:13:48 starting 8 fuzzer processes 11:13:48 executing program 0: sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0x4840) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x59}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x2800}, 0x400c000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x40000220) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000500)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x43}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4000}, @NL80211_ATTR_PMKID={0x14, 0x55, "e090bf80e3e24dcdd208cd07efec5d79"}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "bbdc72e6d3dfc481b2b4a2cb3b0cc07a"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x25}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x64}}}}}, 0x20}}, 0x488a4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xfc, r4, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x200, 0xa}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40051}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/185, 0xb9}, {&(0x7f0000000c00)=""/194, 0xc2}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x0) io_cancel(0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x3, 0x2, r2, &(0x7f0000000a40)="ed12ba45587d6b6b8aaae7f3e8b16165942a3ac7ac026fd35f96b81acb997a00eca0587e0fa60a689aae525fc3b715f3500b8a624f325e55c3ea196b8fd9444fa83e62d0a64ec9a88537b0cdf16b899512ff05f5c46eb6370d473f1961d78e1b7e6af9c972a6ff717e9cae579b1150a453cba2d29710cc888e69b9be1315f8a1", 0x80, 0x2, 0x0, 0x2, r7}, &(0x7f0000000e80)) sendmsg$NL80211_CMD_STOP_AP(r9, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r3, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r10, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x44, r0, 0x200, 0x6, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}}, 0x4000) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xa4, r0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x4a}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x81}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0xfffffffffffffffc, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x701, 0x6, 0x5}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_IE={0x2a, 0x2a, [@random={0x9, 0x14, "d443b4330a68abd11cdc26b1fdba043cee8ba45b"}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x0, 0x1, 0x7ff, 0xc2}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x200048c0}, 0x4000800) sendmsg$NL80211_CMD_ADD_TX_TS(r8, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x50, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x2e}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xb}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xffff}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x93}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008050}, 0x11) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, r0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x101}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x200000c0) 11:13:48 executing program 1: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x49}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x20000040) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80002080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e4213294cd"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x64}}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000004c0)={{0x0, 0x401, 0x8, 0xffffffffffffffff, 0x3, 0xfffffffffffffffa, 0x40, 0x1f, 0x7fff, 0x3, 0x7fff, 0x9, 0x3, 0x10001, 0x100}, 0x18, [0x0, 0x0, 0x0]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, r3, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffffffff, 0x15}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x4014) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x25}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="e7edf1bd1ffb"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x397}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x372}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4000090) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x20}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x40}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x24a44000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r5, 0x21c, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x6c, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8001}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2400c80d}, 0x4008) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000d40)={&(0x7f0000000c40), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r7, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x68, r7, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9e22ac96dae9"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x4) 11:13:48 executing program 2: keyctl$invalidate(0x15, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000000)=""/35, 0x23) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "4bf0145bedfde8fbb1321daada71ad4dc63629158a23be5706549e47458c69e1547cc04c28f6ab2417b1813c858430612dfdd20ab8f7e8237be1d4b43e460a97", 0x28}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={r0, 0x42, 0x3f}, &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'blake2s-224-generic\x00'}}, &(0x7f0000000200)="9f9a73c06f1588886c75917926745721846aa5b490f6e5ffe5b9f104f4c897062afffca0f8c1a6fca665455f53f40de6631a4cbb6aa2cde59e1f0af1c28cbea908a1", &(0x7f0000000280)=""/63) r1 = add_key(&(0x7f00000002c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="84707c660670ea033b639faf1d0685f467efe8b0e6a58f67cf2bbf1555ab4f92c836e3039979de1667976ff229f39f363aa7139137c1d031aa0910c9e0b8f1a658887e1b986d65ab3a69401f231af5e9a188a22af1c95da708195ae88a415b63a2664f1401de0672893ee95fa9b62e7206df0347fc2be8028326b93752feeed201d0bf3bdbea", 0x86, r0) keyctl$revoke(0x3, r1) r2 = request_key(&(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='\x00', r0) keyctl$revoke(0x3, r2) r3 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @auto=[0x66, 0x33, 0x36, 0x33, 0x67, 0x0, 0x39, 0x35, 0x36, 0x33, 0x63, 0x66, 0x30, 0x33, 0x38, 0x32]}, &(0x7f0000000540)={0x0, "d1f256985d92fe5ad19a1d53f5b49e41d500275a771cd20e411bdaed21d475eb52c8dd7ddbae22d93f0fdcbfee9dce51e02b184080ac0befec9647785170d641", 0x2f}, 0x48, r0) keyctl$invalidate(0x15, r3) r4 = add_key(&(0x7f00000005c0)='big_key\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="bb6e2181e55e06bcf95a92c5dac997c6b6688670aa4e8426e2748986dd82677d2c1794", 0x23, 0xfffffffffffffffd) r5 = request_key(&(0x7f0000000680)='user\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)='syz', 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000740)=@keyring={'key_or_keyring:', r5}) r6 = add_key(&(0x7f0000000780)='rxrpc\x00', &(0x7f00000007c0)={'syz', 0x1}, &(0x7f0000000800)="8e0f21e683cd7fc050edd33c369f85b168b73207cce191cdd7a9b5fe6d9c2c66861c71ae48b53d8894489c213da94e7321161a6ca83e7de7b7027ab4589d671d1d2fbcac60e91faef8ea07033e06aa4219043076d412d3467c0ba1a5e906669d0410fc44f7236e7733032fd9a7aa072e02f066a5d49ef4445a8c697e3d0bb6667a4ecece3d5679e7d06ae307d45aa444ccd14673b54dd83bafd480959a74b7258b6c348e926e093852b21a1f567561480cd0fce1956131cc4551c3f3d2db3628de6205acda66", 0xc6, r1) keyctl$describe(0x6, r6, &(0x7f0000000900)=""/76, 0x4c) keyctl$assume_authority(0x10, r3) keyctl$revoke(0x3, r0) r7 = add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f00000009c0)={'fscrypt:', @desc3}, &(0x7f0000000a00)={0x0, "dfca3c22d086eba125034d76a669cbed89b4825be7b06fe4a52b7e3af23d53c08bba9929a1a2a471c9786206a6e875aaf27575662869e35871d18cf05722ed30", 0x1e}, 0x48, r2) keyctl$chown(0x4, r7, 0xee01, 0xee01) keyctl$search(0xa, 0x0, &(0x7f0000000b00)='ceph\x00', &(0x7f0000000b40)={'syz', 0x3}, 0xfffffffffffffffb) 11:13:49 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000200)={r0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001200)={[{0x2b, 'devices'}, {0x2d, 'net_prio'}, {0x2b, 'hugetlb'}, {0x2d, 'net_cls'}, {0x2d, 'freezer'}]}, 0x2e) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x20082, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x4c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x206824a15bbb6652) io_cancel(0x0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x5, 0x1000, 0xffffffffffffffff, &(0x7f00000013c0)="d09f8870b15e9e477fa914655fafd3d43597cb625421ac4c86bd0af380295f5a20b7542898c4b1ebb46dee04cf15a5c0501f50b8c9b9e1d2f36021da6f2345c5aeb4ac78397941486f2d851fcd451dcf955a6b6687afab4f477bf69dd16e1579bd10081529ea263be1d4a6f91af0f032645fe487632bb99b361d6d9c5e113eb93ee2e91528b1330bee9371b7603183cea5510e09bceb34c7ae23145608586be1b21475b5f2f9b0a0c9ea2038ffbedb3ed4f5de", 0xb3, 0xffffffffffffffff, 0x0, 0x2, r1}, &(0x7f00000014c0)) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001500)={r0, 0x7f}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002540), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r4 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x23}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4c810) r5 = socket(0x29, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000039c0), r4) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000003a80)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003a00)={0x28, r6, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffff7, 0xb}}}}, ["", "", "", "", ""]}, 0x28}}, 0x4000000) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000003b80)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x20, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000004180)={0x2, &(0x7f0000004140)=[{0x2, 0x0, 0x20, 0x9}, {0x4, 0x40, 0x9, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000041c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000004240)={r8, 0x2, r5, 0x6, 0x80000}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000004380)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40800) [ 83.282876] audit: type=1400 audit(1729336429.044:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:13:49 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x220, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '/%&:*&-+\xbc\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x8010) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:dhcp_etc_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xb0}}, 0x20008800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}}, 0x20000081) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80, 0x31}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000700), 0xc, &(0x7f0000000b80)={&(0x7f0000000780)={0x3d4, r3, 0x51e, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0xb}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x3, 0x6c2, 0xff00, 0x33b9, 0x9, 0x6, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x9}, {0x4, 0x8}, {}, {0x0, 0x5}, {0x1, 0x9}, {0x5, 0x8}, {0x4, 0x5}, {0x4, 0x8}, {0x4}, {0x0, 0x8}, {0x7, 0x3}, {0x1}, {0x7, 0x9}, {0x4, 0x3}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x7, 0x8}, {0x5, 0xa}, {0x0, 0x8}, {}, {0x3, 0x1d}, {0x3, 0x6}, {0x6}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0x2}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x9}, {0x1, 0x3}, {0x4, 0x2}, {0x0, 0x2}, {0x6, 0x4}, {0x4, 0x9}, {0x2, 0x9}, {0x7, 0x7}, {0x4, 0xa}, {0x4, 0xa}, {0x7, 0x5}, {0x3, 0x6}, {0x0, 0x1}, {0x7, 0x4}, {0x7, 0x9}, {0x5}, {0x7, 0x5}, {0x5, 0x2}, {0x4, 0x5}, {0x3, 0x9}, {0x5, 0xa}, {0x4, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x4}, {0x4, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x3, 0x1b, 0x48, 0x2, 0x5, 0x48, 0x30, 0xc, 0x36, 0x30, 0x9, 0x0, 0x0, 0x4, 0x60, 0x48, 0xd, 0x4, 0x4, 0x16, 0x1b, 0x2, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x4, 0x3e, 0x7, 0x6, 0x400, 0x8]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x8, 0x6, 0xa0, 0x7, 0x5, 0x7, 0x400]}}]}]}, @NL80211_ATTR_TX_RATES={0x2f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{}, {0x3, 0x2}, {0x3, 0x1}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0xa}, {0x1, 0x2}, {0x2, 0x9}, {0x7, 0x8}, {0x3, 0x3}, {0x2, 0x2}, {0x0, 0x8}, {0x7, 0x5}, {0x2, 0xa}, {0x4, 0x6}, {0x0, 0xa}, {0x1, 0x6}, {0x6}, {0x5, 0x7}, {0x3, 0x6}, {0x6, 0x1}, {0x5, 0x3}, {0x1, 0x2}, {0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x2, 0x8}, {0x7, 0x8}, {0x7, 0xa}, {0x0, 0x6}, {0x7, 0x6}, {0x4, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x2}, {0x4, 0x9}, {0x0, 0x7}, {0x1, 0x4}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0x3}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x8}, {0x6, 0x2}, {0x1, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x1000, 0x0, 0x0, 0xfff, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x3}, {0x1, 0x6}, {0x7, 0x4}, {0x2, 0x2}, {0x4, 0x1}, {0x3, 0x3}, {0x7, 0x4}, {0x2, 0x6}, {0x5, 0x6}, {0x4, 0x1}, {0x4, 0x9}, {0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x5}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x8}, {0x6, 0x4}, {0x7, 0x6}, {0x1, 0x5}, {0x3, 0x5}, {0x1}, {0x1}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x3}, {0x3, 0x1}, {0x6, 0x3}, {0x6, 0x3}, {0x0, 0x5}, {0x2}, {0x7, 0xa}, {0x2, 0x6}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x6}, {0x2, 0x9}, {0x6, 0x8}, {0x0, 0x6}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x5}, {0x3, 0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x8}, {}, {0x1, 0x5}, {0x7, 0x7}, {0x3}, {0x0, 0x6}, {0x1, 0x1}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x9}, {0x5, 0x9}, {0x7}, {0x6, 0x7}, {0x6, 0x9}, {0x5, 0xa}, {0x2, 0x3}, {0x3, 0x8}, {0x1, 0x3}, {0x7, 0xa}, {0x4, 0x3}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x1b, 0x30, 0x6, 0x16, 0xb, 0x12, 0x18, 0x9, 0x3, 0x6, 0x4, 0x5, 0x9, 0x6c, 0x24, 0x36, 0x0, 0x5eb79e01e83444f1, 0x3, 0x24, 0x24, 0xc, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x9, 0x1, 0xfc00, 0x1f, 0x5, 0x9, 0x4]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x7, 0x1, 0x7, 0x80, 0x3a6, 0x7, 0x1ff]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x1, 0x5}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3b, 0x4, 0x6, 0x40, 0x3b, 0x8, 0x7]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0x9, 0xb, 0x5, 0x2, 0x5, 0x9, 0x2, 0xb, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x892b, 0x6, 0x3, 0x4, 0x8c8, 0x8, 0x1]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x2, 0xb, 0x1, 0x6c, 0x30, 0x24, 0x18, 0x12, 0x60, 0x6c, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0xc, 0x16, 0x36, 0x24, 0x6c, 0xb, 0x9b, 0x24, 0x2, 0x1, 0x5e, 0x18, 0x4, 0x16, 0x4, 0x9, 0x12, 0x18, 0x1b]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0x5}, {0x5, 0x4}, {0x7, 0x6}, {0x5, 0x2}, {0x7, 0x4}, {0x7, 0x9}, {0x1, 0x17}, {0x4, 0x9}, {0x6, 0x4}, {0x1}, {0x4, 0x5}, {0x6, 0xa}, {0x1, 0xa}, {0x3, 0x2}, {0x2, 0x2}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x5}, {}, {0x6, 0x7}, {0x3, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x19, 0x12, 0x60, 0xedea515459e01caa, 0x2, 0x18, 0x30, 0x4, 0xc, 0x18, 0x12, 0x16, 0x1b, 0x16, 0x2, 0x3, 0x24, 0x48, 0x30, 0x2, 0x30, 0x18, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb8, 0xfffa, 0x20, 0xfffb, 0x0, 0x6, 0x3, 0xcec2]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x4, 0x18, 0x4, 0x12, 0x18, 0xc, 0x2, 0xc, 0x3, 0x60, 0x24, 0x5, 0x3, 0x16, 0x30, 0x60]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x9}, {0x7, 0xa}, {0x1, 0xa}, {0x2, 0x9}, {0x4}, {0x6, 0x3}, {0x0, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x7}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x24, 0x36, 0x30, 0x9, 0x18, 0x48, 0x30, 0x1e, 0x9, 0x12, 0x36, 0x36, 0x18, 0xb, 0x3f, 0x48, 0x6, 0x16, 0x36, 0x1, 0xb, 0x30, 0x48, 0x4, 0x0, 0x2, 0x36, 0xb, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xff, 0x1, 0x2, 0x0, 0xada0, 0x6, 0x7]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x12f84721ad0605d5}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x2}, {0x5, 0x9}, {0x3, 0x4}, {0x7, 0x1}, {0x0, 0x5}, {0x4, 0x5}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x7, 0x6}, {0x5, 0x8}, {0x0, 0xa}, {0x6, 0x3}, {0x4}, {0x6, 0x8}, {0x2, 0x7}, {0x3, 0x4}, {0x3, 0x5}, {0x2, 0x8}, {0x6}, {0x1, 0xa}, {0x3, 0x4}, {0x6, 0x3}, {0x6, 0x2}, {0x5, 0x9}, {0x0, 0xa}, {0x6, 0x8}, {0x5, 0x8}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x7}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x2, 0x3}, {0x7, 0x7}, {0x0, 0x3}, {0x3, 0x8}, {0x5, 0x7}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x3}, {0x0, 0x6}, {0x3, 0xa}, {0x0, 0x4}, {0x2, 0xa}, {0x7}, {0x5, 0x2}, {0x3, 0x4}, {0x1, 0x2}, {0x4, 0x5}, {0x4, 0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x6, 0x1, 0x1, 0x1, 0x200, 0xf73, 0x101]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x9}, {0x0, 0xa}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x8}, {0x4, 0x3}, {0x1, 0x9}, {0x3, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x8}, {0x2, 0x8}, {0x0, 0x4}, {0x1, 0x6}, {0x7, 0xa}, {0x5, 0xa}, {0x4, 0x5}, {0x2, 0x7}, {0x4, 0x7}, {0x5}, {0x1, 0x2}, {0x2, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x0, 0x5}, {0x6, 0x9}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x2, 0x7}, {0x4, 0x7}, {0x0, 0xa}, {0x2, 0x9}, {0x2, 0x1}, {0x4, 0x7}, {0x1, 0x7}, {0x2, 0xa}, {0x6, 0x9}, {0x1, 0x2}, {0x0, 0x6}, {0x6}, {0x1, 0xa}, {0x4, 0x9}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x5, 0x5}, {0x1, 0x5}, {0x1, 0x2}, {0x3, 0x3}, {0x2, 0x1}, {0x1, 0x7}, {0x2, 0x3}, {0x7, 0x4}, {0x6, 0x7}, {}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x5, 0x6}, {0x5, 0x3}, {0x3, 0x2}, {0x5, 0x7}, {0x2, 0x8}, {0x5, 0x1}, {0x5, 0x5}, {0x3, 0x6}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x2, 0x6}, {0x0, 0x1}, {0x0, 0x9}, {0x4, 0x2}, {0x5, 0x8}, {0x2, 0x2}, {0x2, 0x4}]}]}]}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x8080}, 0x800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00)={[{0x2b, 'cpu'}]}, 0x5) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000000dc0)={0x2b0, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac06}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x54a, 0x6, 0x6, 0x2ac6, 0x5, 0x2, 0x1, 0x1, 0x7ff, 0x67, 0x80, 0x5, 0xfffd, 0x9, 0x1, 0x7]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xc, 0x34, @random="6002f028deb1e057"}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_FILS_KEK={0x17, 0xf2, "dbab3cecf9fd188291ba29d2c535cc85a04f33"}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xe054ec846a6f4467, {0x280, 0x0, 0x6, 0x81}}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="441cdc588f28"}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4}, 0x41) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x34, r4, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d8fcc8c8484a3472bd03b690991693ee"}, @NL80211_ATTR_BSSID={0xa}]}, 0x34}}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001240), 0x6e, &(0x7f0000001580)=[{&(0x7f00000012c0)=""/149, 0x95}, {&(0x7f0000001380)=""/21, 0x15}, {&(0x7f00000013c0)=""/132, 0x84}, {&(0x7f0000001480)=""/157, 0x9d}, {&(0x7f0000001540)}], 0x5, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x20, r4, 0x32, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x59}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x860) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x10}, @val={0x8}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) 11:13:49 executing program 5: msgctl$IPC_RMID(0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/50) r0 = msgget(0x3, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = msgget(0x2, 0x80) msgctl$IPC_RMID(r1, 0x0) r2 = msgget$private(0x0, 0x462) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000040)=""/48) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000080)=""/172) r3 = msgget(0x2, 0x490) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000140)=""/213) r4 = msgget(0x2, 0x0) msgctl$IPC_INFO(r4, 0x3, &(0x7f0000000240)=""/115) r5 = msgget$private(0x0, 0x45) msgctl$IPC_STAT(r5, 0x2, &(0x7f00000002c0)=""/23) r6 = msgget$private(0x0, 0x400) msgctl$MSG_INFO(r6, 0xc, &(0x7f0000000300)=""/96) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000380)=""/202) msgctl$IPC_STAT(r6, 0x2, &(0x7f0000000480)=""/33) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f00000004c0)=""/160) 11:13:49 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='timerslack_ns\x00') setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x20001001) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0x45}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x80}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='sched\x00') setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0xff, 0x5, 0xd0, 0x3ff}]}, 0x10) r4 = getgid() getgroups(0x2, &(0x7f0000001580)=[0xee01, r4]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000015c0)='fd/3\x00') ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000001600)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x8000) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000001740)={0x0, 0x6}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x28, 0x0, 0x1, 0x70bd2c, 0x40, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c844}, 0x880) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x44, r1, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40000000, 0x40}}}}, [@NL80211_ATTR_IE={0x21, 0x2a, [@challenge={0x10, 0x1, 0x8e}, @mic={0x8c, 0x18, {0xd95, "4cd6d9352608", @long="b1cbe4a6a09ec02862e292cd52bca2b4"}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x24008000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000002980)=@req3={0x9, 0x2, 0x6, 0x1, 0x3ff, 0x7, 0x100}, 0x1c) r6 = add_key$keyring(&(0x7f00000029c0), &(0x7f0000002a00)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r6, 0x0, &(0x7f0000002a40)='nl80211\x00') sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x34, r1, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000008) 11:13:49 executing program 7: io_setup(0xffffffff, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x79aa, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x9, 0x80000, 0x4, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x20002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000240)=0x9, 0x4) sendto$packet(r2, &(0x7f0000000280)="d27ace5202369437086fd612e1249f667756706e15895d34b53d2c83e5adc585967c0cb6e12320758dbe4c59ecb8c714fa2600fc023842a1c58e1b024a3104c0e70f6ec807f49415b0118cb6441d421e0adf4600a1e907e40a9d9bdb59fc66b49b82412c40bd19c442fd04a5c821164c47b26a18a8db8d3df0971813e8902f2b14dfc762c6b3b799cdaa51916608cbe698f3b7a0b688839731e4c2", 0x9b, 0x4008000, &(0x7f0000000340)={0x11, 0x1, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x101c00, 0x0) r8 = syz_io_uring_complete(0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/86, 0x56}, {&(0x7f0000000a80)=""/239, 0xef}, {&(0x7f0000000b80)=""/123, 0x7b}], 0x3, &(0x7f0000000c40)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x0) io_submit(r0, 0x6, &(0x7f0000000e80)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x8, r1, &(0x7f0000000380), 0x0, 0x8000, 0x0, 0x1, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xffff, r5, &(0x7f0000000480)="f8c3d839be70496edaeafdfa0a4c99dfd13f59bd04fe99fc7c28a30b2464ec38450e5fd52a2f1029e8cc78628d08cc6df004402ab64cd60b50a77a0034b172798006c37f22869fe020110b66eaffc6457ca8aad7d778ce7109346e1299710360a2e48cc78ee87e81c6e747411739359e7a4aebcdb2", 0x75, 0x3, 0x0, 0x0, r3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x8, r6, &(0x7f0000000540)="c1b6c86621684655a556b3d1532a17d0608fb13445b302b439bbd0a780beb8ccd25f6d2705a842e0871ff455d939b10ea55c183d73e531ef52fd3a82370f84fb41103ba138ab8f7994da2507293165685d023f5491248f0dab5301d870abdbe701980f6c762756413a35d4e47c2df6cdc07d2011f2122a8ff20a7dfd5271d2dcfdee2e1131e5b44b60203e696c53eb2ea8967ee566662cda8d19278be85a4758a729e5775e7422e95e0533586d5c881bfd0f", 0xb2, 0xca4, 0x0, 0x1, r3}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x6, r3, &(0x7f0000000640)="591986db416b398efc4267173638d6bcecb05ccd0c9bf548cae52ed8d4f7f12db79809453ed802025466d22380501d826066d44e9c0fc4ccd603c996d29671eb176c14d50658d24a92fbb51e5163ac35beae50e4e547fe5730bc22a7eae5a70c73065c6036c22109597e25a6f3b4c206cf4069be99297840d9794f6b5cd9ca1f6cc59285a5de27b82d2f8ced4bdfb5869d45deafd29a8d251a401374fe35df30bb1a2f05893e08f85c5d265328d2c45ba5c8d2fe81c0f5dd7ae0195a3d7265ece76e", 0xc2, 0x0, 0x0, 0x3, r7}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x8000, r8, &(0x7f0000000880)="5c436f48ff96a15154feb5acda1ea8255eea0e683e659968fcf9c85938dea3c0a64433df6f75ccf7747bfdb3a5559256cc401a8ca935eabcccae970371b8a2a82951fc769ac712a4838790042c8ef045f6f87cfc37fed4db6e301e3d82011f87004be0872e1fa51f2e2cf4363c252237d923dbbbe16847bef360733f6a183e1cfa9f3668fac73269530e19e2cabf8b1ec6b1ed2a4cb0238eab09d3dfa109e33a23f8a16cf375f480459b96524fcc12835c3845d1fe5280f056c281449deef42def0393cbcd53b908b50773125d5bf3a09a7f0a42da17f9f976", 0xd9, 0x401, 0x0, 0x1, r9}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f0000000d80)="d3b729291f62912499d27437d7d7286e3cd957e075fe386e159db17c36d4163a8097fd905b3d5df3c16b2392899a475f3ec43d9e711be1a4729c0a96b13f280e71cdc848f94de2cf5a7f25f8f0918411d19e2f4ccd21e451c4f13c901a44614a122b7b0a24b6d670ffbaaa6a281e228f4ffd851b51d0f28aa2b117116082203e2af64e3fcf0b6b4ff3a4d851b1d914485fa30cb263d11bbb5fd2ce", 0x9b, 0x2, 0x0, 0x0, r3}]) ioctl$PTP_PIN_SETFUNC2(r7, 0x40603d10, &(0x7f0000000ec0)={'\x00', 0x80, 0x0, 0x2}) ioctl$PTP_PIN_SETFUNC2(r10, 0x40603d10, &(0x7f0000000f40)={'\x00', 0x477f2320, 0x0, 0x3}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0), 0x500, 0x0) socketpair(0x29, 0xa, 0x2fc, &(0x7f0000001000)) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000001080)={'\x00', 0x0, 0x3, 0x80000001}) [ 84.764180] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.768377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.771037] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.772213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.777398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.786549] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.787383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.815826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.822067] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.823948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.824985] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.830882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.831887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.834040] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.836085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.839483] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.840463] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.842223] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.845592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.847667] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.851906] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.867212] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.874406] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.877949] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.879023] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.879954] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.881284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.881620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.883805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.885758] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.887283] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.889005] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.904422] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.907831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.920716] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.922555] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.931873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.934468] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.935554] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.943495] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.949428] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.956471] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.997385] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.015988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.017543] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.018560] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.027516] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.028580] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.877273] Bluetooth: hci2: command tx timeout [ 86.878081] Bluetooth: hci1: command tx timeout [ 86.938723] Bluetooth: hci3: command tx timeout [ 86.943969] Bluetooth: hci0: command tx timeout [ 87.001218] Bluetooth: hci4: command tx timeout [ 87.011082] Bluetooth: hci7: command tx timeout [ 87.131950] Bluetooth: hci5: command tx timeout [ 87.193287] Bluetooth: hci6: command tx timeout [ 88.922279] Bluetooth: hci2: command tx timeout [ 88.923828] Bluetooth: hci1: command tx timeout [ 88.986350] Bluetooth: hci3: command tx timeout [ 88.988088] Bluetooth: hci0: command tx timeout [ 89.049302] Bluetooth: hci7: command tx timeout [ 89.050984] Bluetooth: hci4: command tx timeout [ 89.177319] Bluetooth: hci5: command tx timeout [ 89.241385] Bluetooth: hci6: command tx timeout [ 90.970230] Bluetooth: hci2: command tx timeout [ 90.971783] Bluetooth: hci1: command tx timeout [ 91.033234] Bluetooth: hci3: command tx timeout [ 91.034972] Bluetooth: hci0: command tx timeout [ 91.097235] Bluetooth: hci7: command tx timeout [ 91.098762] Bluetooth: hci4: command tx timeout [ 91.225386] Bluetooth: hci5: command tx timeout [ 91.289301] Bluetooth: hci6: command tx timeout [ 93.017306] Bluetooth: hci1: command tx timeout [ 93.017917] Bluetooth: hci2: command tx timeout [ 93.082468] Bluetooth: hci3: command tx timeout [ 93.083043] Bluetooth: hci0: command tx timeout [ 93.145994] Bluetooth: hci7: command tx timeout [ 93.146961] Bluetooth: hci4: command tx timeout [ 93.276176] Bluetooth: hci5: command tx timeout [ 93.338324] Bluetooth: hci6: command tx timeout [ 144.616123] syz-executor.3 (286) used greatest stack depth: 24288 bytes left [ 147.568536] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.571235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.576981] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.604465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.608241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.611967] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.810926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.815658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.816917] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.825405] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.827747] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.828906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.878281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.881350] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.884771] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.894472] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.900650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.904455] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.907631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.909995] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.911623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.914212] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.934287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.942363] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.943897] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.945437] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.959574] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.974478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.982285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.983422] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.010485] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.012204] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.025352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.026527] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.027470] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.028671] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.041317] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.048322] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.050925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.053882] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.064664] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.067330] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.079647] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.095798] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.098183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.109374] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.119641] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.121800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.658202] Bluetooth: hci0: command tx timeout [ 149.914289] Bluetooth: hci1: command tx timeout [ 149.978179] Bluetooth: hci2: command tx timeout [ 150.041165] Bluetooth: hci3: command tx timeout [ 150.106967] Bluetooth: hci5: command tx timeout [ 150.106994] Bluetooth: hci4: command tx timeout [ 150.170206] Bluetooth: hci7: command tx timeout [ 150.170251] Bluetooth: hci6: command tx timeout [ 151.707141] Bluetooth: hci0: command tx timeout [ 151.963149] Bluetooth: hci1: command tx timeout [ 152.025262] Bluetooth: hci2: command tx timeout [ 152.090277] Bluetooth: hci3: command tx timeout [ 152.153230] Bluetooth: hci4: command tx timeout [ 152.154307] Bluetooth: hci5: command tx timeout [ 152.217198] Bluetooth: hci7: command tx timeout [ 152.220383] Bluetooth: hci6: command tx timeout [ 153.753285] Bluetooth: hci0: command tx timeout [ 154.009363] Bluetooth: hci1: command tx timeout [ 154.073464] Bluetooth: hci2: command tx timeout [ 154.139217] Bluetooth: hci3: command tx timeout [ 154.201399] Bluetooth: hci5: command tx timeout [ 154.201910] Bluetooth: hci4: command tx timeout [ 154.265213] Bluetooth: hci6: command tx timeout [ 154.265296] Bluetooth: hci7: command tx timeout [ 155.801190] Bluetooth: hci0: command tx timeout [ 156.057472] Bluetooth: hci1: command tx timeout [ 156.121179] Bluetooth: hci2: command tx timeout [ 156.185497] Bluetooth: hci3: command tx timeout [ 156.249195] Bluetooth: hci4: command tx timeout [ 156.249879] Bluetooth: hci5: command tx timeout [ 156.314389] Bluetooth: hci7: command tx timeout [ 156.314922] Bluetooth: hci6: command tx timeout [ 212.879702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.881002] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.882306] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.883394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.884725] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.886298] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.888141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.890119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.891035] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.892523] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.893403] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.894434] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.895409] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.896722] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.898663] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.900166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.900568] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.902464] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.902905] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.904177] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.906913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.911342] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.913887] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.921042] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.924647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.928349] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.928431] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.931520] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.935236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.951858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.953025] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.962836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.964913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.966830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.968441] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.988690] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.989937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.991390] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.992786] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.993813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.999748] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.005598] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.006690] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.008305] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.009746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.016822] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.018191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.040349] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.004213] Bluetooth: hci0: command tx timeout [ 215.065230] Bluetooth: hci3: command tx timeout [ 215.065384] Bluetooth: hci6: command tx timeout [ 215.066165] Bluetooth: hci7: command tx timeout [ 215.130271] Bluetooth: hci2: command tx timeout [ 215.131397] Bluetooth: hci4: command tx timeout [ 215.132095] Bluetooth: hci5: command tx timeout [ 215.133153] Bluetooth: hci1: command tx timeout [ 217.049179] Bluetooth: hci0: command tx timeout [ 217.113323] Bluetooth: hci6: command tx timeout [ 217.114772] Bluetooth: hci7: command tx timeout [ 217.116129] Bluetooth: hci3: command tx timeout [ 217.178127] Bluetooth: hci1: command tx timeout [ 217.178617] Bluetooth: hci4: command tx timeout [ 217.204003] Bluetooth: hci5: command tx timeout [ 217.204666] Bluetooth: hci2: command tx timeout [ 219.097490] Bluetooth: hci0: command tx timeout [ 219.161199] Bluetooth: hci7: command tx timeout [ 219.161700] Bluetooth: hci6: command tx timeout [ 219.162241] Bluetooth: hci3: command tx timeout [ 219.225524] Bluetooth: hci5: command tx timeout [ 219.226053] Bluetooth: hci2: command tx timeout [ 219.226240] Bluetooth: hci4: command tx timeout [ 219.226611] Bluetooth: hci1: command tx timeout [ 221.145533] Bluetooth: hci0: command tx timeout [ 221.209237] Bluetooth: hci6: command tx timeout [ 221.209365] Bluetooth: hci7: command tx timeout [ 221.210550] Bluetooth: hci3: command tx timeout [ 221.274593] Bluetooth: hci4: command tx timeout [ 221.274631] Bluetooth: hci2: command tx timeout [ 221.275958] Bluetooth: hci5: command tx timeout [ 221.276661] Bluetooth: hci1: command tx timeout [ 250.052531] hrtimer: interrupt took 4435321 ns [ 271.658716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.660446] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.665223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.670650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.686299] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.698223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.779435] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.782027] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.783366] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.785801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.787512] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.788616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.857774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.860367] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.871175] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.890644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.893428] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.895348] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.914446] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.915941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.918299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.945212] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.947230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.957554] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.972598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.981420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.994511] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.997820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.000277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.007684] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.011180] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.014823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.016609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.030704] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.036156] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.038469] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.064771] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.069151] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.071478] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.103821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.110307] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.112537] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.166018] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.183487] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.191248] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.246910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.263717] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.269297] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.753158] Bluetooth: hci0: command tx timeout [ 273.817153] Bluetooth: hci1: command tx timeout [ 273.946425] Bluetooth: hci2: command tx timeout [ 274.009167] Bluetooth: hci3: command tx timeout [ 274.073289] Bluetooth: hci4: command tx timeout [ 274.137415] Bluetooth: hci5: command tx timeout [ 274.138384] Bluetooth: hci6: command tx timeout [ 274.396157] Bluetooth: hci7: command tx timeout [ 275.801285] Bluetooth: hci0: command tx timeout [ 275.865822] Bluetooth: hci1: command tx timeout [ 275.993326] Bluetooth: hci2: command tx timeout [ 276.059129] Bluetooth: hci3: command tx timeout [ 276.121263] Bluetooth: hci4: command tx timeout [ 276.185426] Bluetooth: hci5: command tx timeout [ 276.186879] Bluetooth: hci6: command tx timeout [ 276.442123] Bluetooth: hci7: command tx timeout [ 277.849134] Bluetooth: hci0: command tx timeout [ 277.913157] Bluetooth: hci1: command tx timeout [ 278.041180] Bluetooth: hci2: command tx timeout [ 278.105292] Bluetooth: hci3: command tx timeout [ 278.170801] Bluetooth: hci4: command tx timeout [ 278.233266] Bluetooth: hci5: command tx timeout [ 278.234983] Bluetooth: hci6: command tx timeout [ 278.489339] Bluetooth: hci7: command tx timeout [ 279.897343] Bluetooth: hci0: command tx timeout [ 279.961730] Bluetooth: hci1: command tx timeout [ 280.089170] Bluetooth: hci2: command tx timeout [ 280.153415] Bluetooth: hci3: command tx timeout [ 280.217166] Bluetooth: hci4: command tx timeout [ 280.281322] Bluetooth: hci5: command tx timeout [ 280.283274] Bluetooth: hci6: command tx timeout [ 280.538104] Bluetooth: hci7: command tx timeout [ 334.064230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.065764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.066917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.071831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.073562] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.074552] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.119900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.121463] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.122624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.125025] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.134781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.137954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.145765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.151281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.156649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.162222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.172155] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.175274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.250378] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.253871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.255906] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.264796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.276018] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.287335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.304458] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.305820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.306948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.309571] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.313692] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.317136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.376878] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.380858] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.382713] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.387645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.391434] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.394292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.396272] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.398344] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.403462] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.415296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.421491] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.425500] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.500558] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.519401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.542529] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.601731] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.611280] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.616155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.089213] Bluetooth: hci0: command tx timeout [ 336.153218] Bluetooth: hci1: command tx timeout [ 336.217280] Bluetooth: hci2: command tx timeout [ 336.346312] Bluetooth: hci4: command tx timeout [ 336.411080] Bluetooth: hci3: command tx timeout [ 336.537159] Bluetooth: hci5: command tx timeout [ 336.538852] Bluetooth: hci6: command tx timeout [ 336.731128] Bluetooth: hci7: command tx timeout [ 338.139082] Bluetooth: hci0: command tx timeout [ 338.202267] Bluetooth: hci1: command tx timeout [ 338.267091] Bluetooth: hci2: command tx timeout [ 338.393129] Bluetooth: hci4: command tx timeout [ 338.458299] Bluetooth: hci3: command tx timeout [ 338.586234] Bluetooth: hci5: command tx timeout [ 338.587643] Bluetooth: hci6: command tx timeout [ 338.779178] Bluetooth: hci7: command tx timeout [ 340.186291] Bluetooth: hci0: command tx timeout [ 340.251211] Bluetooth: hci1: command tx timeout [ 340.313512] Bluetooth: hci2: command tx timeout [ 340.441151] Bluetooth: hci4: command tx timeout [ 340.505469] Bluetooth: hci3: command tx timeout [ 340.633153] Bluetooth: hci6: command tx timeout [ 340.634568] Bluetooth: hci5: command tx timeout [ 340.826292] Bluetooth: hci7: command tx timeout [ 342.233168] Bluetooth: hci0: command tx timeout [ 342.298882] Bluetooth: hci1: command tx timeout [ 342.362816] Bluetooth: hci2: command tx timeout [ 342.489164] Bluetooth: hci4: command tx timeout [ 342.554247] Bluetooth: hci3: command tx timeout [ 342.681262] Bluetooth: hci5: command tx timeout [ 342.682769] Bluetooth: hci6: command tx timeout [ 342.873128] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 11:18:50 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff812eea56 RDX=fffffbfff0c7e4ea RSI=0000000000000008 RDI=ffffffff863f2748 RBP=ffffffff85ce51c0 RSP=ffff8880099e7680 R8 =0000000000000000 R9 =fffffbfff0c7e4e9 R10=ffffffff863f274f R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=000000000003a6cc RIP=ffffffff812eea5e RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562e967ac4c8 CR3=000000000cfc0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88803596d280 RCX=ffffffff8178d140 RDX=0000000000000003 RSI=ffffffff8178cf86 RDI=ffffffff85c20df0 RBP=ffffffff85c4f5a0 RSP=ffff8880296a7e38 R8 =0000000000000001 R9 =fffffbfff0fda9d4 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=00007fdb2d8ca018 R14=ffff888014e1e5c0 R15=0000000000000000 RIP=ffffffff81383d3f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdb2d414540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdb2d8ca018 CR3=0000000031612000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000