Warning: Permanently added '[localhost]:39729' (ECDSA) to the list of known hosts. 2024/10/22 14:03:22 fuzzer started 2024/10/22 14:03:23 dialing manager at localhost:45639 syzkaller login: [ 70.871394] cgroup: Unknown subsys name 'net' [ 70.981938] cgroup: Unknown subsys name 'cpuset' [ 71.039563] cgroup: Unknown subsys name 'rlimit' 2024/10/22 14:03:40 syscalls: 200 2024/10/22 14:03:40 code coverage: enabled 2024/10/22 14:03:40 comparison tracing: enabled 2024/10/22 14:03:40 extra coverage: enabled 2024/10/22 14:03:40 setuid sandbox: enabled 2024/10/22 14:03:40 namespace sandbox: enabled 2024/10/22 14:03:40 Android sandbox: enabled 2024/10/22 14:03:40 fault injection: enabled 2024/10/22 14:03:40 leak checking: enabled 2024/10/22 14:03:40 net packet injection: enabled 2024/10/22 14:03:40 net device setup: enabled 2024/10/22 14:03:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/22 14:03:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/22 14:03:40 USB emulation: enabled 2024/10/22 14:03:40 hci packet injection: enabled 2024/10/22 14:03:40 wifi device emulation: enabled 2024/10/22 14:03:40 802.15.4 emulation: enabled 2024/10/22 14:03:40 fetching corpus: 0, signal 0/0 (executing program) 2024/10/22 14:03:41 starting 8 fuzzer processes 14:03:42 executing program 3: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000004, 0x80010, 0xffffffffffffffff, 0x8000000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)=""/247, 0xf7}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x40000000) r4 = syz_io_uring_setup(0x1e59, &(0x7f00000002c0)={0x0, 0x9b1b, 0x0, 0x0, 0x32, 0x0, r3}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x109800, 0x0) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x5) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000440)) r7 = syz_open_dev$usbmon(&(0x7f0000000480), 0x0, 0x40040) read$usbmon(r7, &(0x7f00000004c0)=""/4096, 0x1000) syz_io_uring_setup(0x5e7a, &(0x7f00000014c0)={0x0, 0x3662, 0x1, 0x3, 0x1ac, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001540), &(0x7f0000001580)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r8, &(0x7f00000015c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2007, @fd=r7, 0x6, 0xff, 0xff, 0x916b340b1320796, 0xfb62816764a4259b, {0x3, r9}}, 0xfffffffb) r10 = syz_open_dev$usbmon(&(0x7f0000001600), 0x4, 0x8000) ioctl$MON_IOCQ_URB_LEN(r10, 0x9201) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0xd6dd4) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000001640), 0x211600, 0x0) ioctl$MON_IOCX_GET(r11, 0x40189206, &(0x7f0000001740)={&(0x7f0000001680), &(0x7f00000016c0)=""/70, 0x46}) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000001880)={&(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000017c0)=""/173, 0xad}) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x5101) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x8840) 14:03:42 executing program 4: read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x401, 0x6, 0x3, 0x0, 0x1}, 0x8) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/113, 0x71}, {&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/48, 0x30}, {&(0x7f0000000400)=""/13, 0xd}], 0x8, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x1, 0x61, &(0x7f0000000580)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x10, r6, 0x8000000) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000001600)={&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000600)=""/4096, 0x1000}) recvfrom$unix(r6, &(0x7f0000001640)=""/130, 0x82, 0x20, &(0x7f0000001700)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000017c0), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x4c, r7, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fffffff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x2]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044900}, 0x48051) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r6) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x54, r9, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x37}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x709}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0xc92f99dfcacf1469}, 0x101) mmap$usbmon(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x8, 0x22910, r4, 0x3) getpeername$unix(r2, &(0x7f0000001a80), &(0x7f0000001b00)=0x6e) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000001b40), 0x0, 0x0) r11 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001d80)='devices.allow\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001dc0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000001ec0)=0xe8) recvmmsg$unix(r4, &(0x7f0000002800)=[{{&(0x7f0000002580)=@abs, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002600)=""/146, 0x92}], 0x1, &(0x7f0000002700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0x1, 0x40, 0x0) r14 = epoll_create(0x4) sendmmsg$unix(r10, &(0x7f000000a3c0)=[{{&(0x7f0000001b80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001c00)}, {&(0x7f0000001c40)="3eca3f2192692e1b2e5c99b0e207710e0777ea7ab2263c4332c47ca08447109f8cf7358683386fed0af0ef3b044e5c55e3b3d98f5d02d7df4da7adb983e3dac3491a5c385f1f6f110f5595a90e3ad2d418bd008a6b11dadd164e3a51b3c4", 0x5e}, {&(0x7f0000001cc0)="aa7114bd690a62b9fae9c9c7fa28c048f3069953f4ed1e4b88914b938f0ad35cde20f2d51f488ca07a4c86479e5a01d1ca4c833e24ea4a4e3744652ee0ceea98", 0x40}, {&(0x7f0000001d00)="d7af", 0x2}], 0x4, &(0x7f000000a1c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r11, r2, r4]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r0, r12, r13}}}, @rights={{0x14, 0x1, 0x1, [r14]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x90, 0x30051}}, {{&(0x7f000000a280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000a380)=[{&(0x7f000000a300)="66a223d926416cefc08582dde32b48e6d534ee6fe62ca4c4f0efa6a50b58ccf4785d813aba15ffa04936a935f1f7ef1fd771e58576b008077c7f1ec1b3249d63e1ada17d9a458efb2a53dd", 0x4b}], 0x1, 0x0, 0x0, 0x1}}], 0x2, 0x40) 14:03:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x801) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001c40), 0x1d28c1, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) write$tcp_mem(r1, &(0x7f0000001d80)={0x1, 0x20, 0x800, 0x20, 0x81}, 0x48) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000002000)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x160, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x140, 0x2a, [@fast_bss_trans={0x37, 0xc9, {0x9, 0x6, "f3a9821b8d5bec3c38bfc16096e34fdc", "6cc51c97db3f767851b1a3d2cb89c6162e33bf9208525833894b1bfa29d42fea", "ff9f44db069ea5f8133618cb1ac8cfe9f49d388df2d0633763a2ff245feb9f62", [{0x2, 0x7, "982fe0015cee1b"}, {0x4, 0x9, "b7b101e4c2a1da5ee9"}, {0x3, 0x28, "1bb9bc083687206d72bc3f950096d41d4147e13614bd8f3e1081769fca43a911184235329c19a928"}, {0x4, 0x2, "57c9"}, {0x4, 0x1a, "b85d02cd2968cf3f98c8ea4f0d8a3ac984a9bc9454d68f9874f5"}, {0x3, 0x17, "ec6e33699e0b17570efa98aa816ae67d492dd3b6b9da26"}]}}, @link_id={0x65, 0x12, {@random="92f265aa771e", @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0x6, 0x7}}, @perr={0x84, 0x1c, {0x4, 0x2, [@not_ext={{}, @device_a, 0x7, "", 0x5}, @not_ext={{}, @device_b, 0x8001, "", 0x1b}]}}, @supported_rates={0x1, 0x2, [{0x6c}, {0x1, 0x1}]}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xab, 0x1}}, @mesh_chsw={0x76, 0x6, {0x8, 0x2, 0x7, 0x4}}, @prep={0x83, 0x25, @ext={{}, 0xff, 0xff, @device_a, 0xed87, @broadcast, 0xfff, 0x1000, @broadcast, 0x6}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000020}, 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x68, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1f, @link='broadcast-link\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}]}, 0x64}}, 0x4040010) syz_genetlink_get_family_id$SEG6(&(0x7f00000022c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x404}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000002e00)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002480)={0x940, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800, 0xf}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}], @NL80211_ATTR_CSA_IES={0x34, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x7, 0x6f99, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x400, 0x85e6, 0x4, 0xc6e8, 0x3f, 0x3f, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x5dd4, 0x8000, 0x2, 0x3f, 0x7]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7f}, @NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x4, 0x8]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x89c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x0, 0x800]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x2b8, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x58a, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x9, 0xe7e, 0x4655, 0xbff5, 0x8, 0x0, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x0, 0x1, 0x3, 0x3, 0x42, 0x1, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x200]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x7, 0x8000, 0x7, 0x8, 0x8000, 0xfff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x5]}]}]}, 0x940}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002e80), r1) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000002f40)={&(0x7f0000002e40), 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000003040)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) recvmmsg$unix(r1, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/7, 0x7}], 0x1, &(0x7f0000003100)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000003240), 0x6e, &(0x7f00000047c0)=[{&(0x7f00000032c0)=""/57, 0x39}, {&(0x7f0000003300)=""/219, 0xdb}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/174, 0xae}, {&(0x7f00000044c0)=""/140, 0x8c}, {&(0x7f0000004580)=""/192, 0xc0}, {&(0x7f0000004640)=""/172, 0xac}, {&(0x7f0000004700)=""/93, 0x5d}, {&(0x7f0000004780)=""/11, 0xb}], 0x9}}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004880)=""/44, 0x2c}, {&(0x7f00000048c0)=""/61, 0x3d}], 0x2, &(0x7f0000004940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f00000049c0), 0x6e, &(0x7f0000005a40)=[{&(0x7f0000004a40)=""/4096, 0x1000}], 0x1, &(0x7f0000005a80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000005b80)=@abs, 0x6e, &(0x7f0000005fc0)=[{&(0x7f0000005c00)=""/251, 0xfb}, {&(0x7f0000005d00)=""/110, 0x6e}, {&(0x7f0000005d80)=""/161, 0xa1}, {&(0x7f0000005e40)=""/50, 0x32}, {&(0x7f0000005e80)=""/177, 0xb1}, {&(0x7f0000005f40)=""/69, 0x45}], 0x6, &(0x7f0000006040)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000006180), 0x6e, &(0x7f0000006340)=[{&(0x7f0000006200)=""/33, 0x21}, {&(0x7f0000006240)=""/240, 0xf0}], 0x2, &(0x7f0000006380)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000006500), 0x6e, &(0x7f0000006800)=[{&(0x7f0000006580)=""/85, 0x55}, {&(0x7f0000006600)=""/234, 0xea}, {&(0x7f0000006700)=""/24, 0x18}, {&(0x7f0000006740)=""/148, 0x94}], 0x4, &(0x7f0000006840)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x7, 0x2143, &(0x7f0000006ac0)={0x0, 0x3938700}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006b40), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000006c00)={&(0x7f0000006b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006bc0)={&(0x7f0000006b80)={0x30, r5, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x1}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000006d80)={&(0x7f0000006c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006d40)={&(0x7f0000006cc0)={0x68, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x81, @media='eth\x00'}}}, ["", "", ""]}, 0x68}}, 0x4040001) 14:03:42 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "5cb304406e70fe6a7bce30f511da65de"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e5168067fa789072e05243eae63a4a7a"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b8dc35ac14ed3035f3c3fea5e892c0a6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b4a3a54897e56b1c2c3fc73478e42338"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7edc120cc286c0a273d4eaf94cb276c6"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "d1959b3a5f88fdd5f9cae42883f7a942"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)={0x394, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xa9e4, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x33c, 0x2a, [@tim={0x5, 0xce, {0x1, 0x59, 0x3, "544af041b80e4e2b8e7920c65b64b9585b411afd91f9a250675582271cba3623a7ca357ad30f68acd5bfc10b4450321973a9418952ee1429ef4f68df1378811b4072a1dfbe4a3c3d60d3b6d535d0283d174469215460c767336bc890a47dc77446d33bd7fcd107d923e937fb613980cc16889c528f9da0af4acdb2e25368dd19a17aa1d68ed622d10a6604520b0650b15ce154d345fb84965ea233faeeabf95b268ae1ec8b3fe1baafbe23634903d5834bae3d0adf74c69d86a1c3bca1ce40e8f93964dff51f9f2e4ec519"}}, @measure_req={0x26, 0x9e, {0x1, 0x1, 0x4e, "653a13b4f9d4f3ba43e63c02140009fa4175a5d8188c20c8d73508773170a6c8ba66cf1d1b4af2b8ae3efe1db9099390e3be287def7cdd349278c5854915d00505c6e66b1a25e88aa20c0819d0dacf0c5e354d522fdca9990dba36757152bf7c1cbe689880eef61d50fc923384f997c70140518fdf6567463bbd86ba16a44127a893139a16663a2d458d5efe8d567a3c595c53a2d2746279ba762d"}}, @ht={0x2d, 0x1a, {0x800, 0x2, 0x6, 0x0, {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3}, 0x8, 0x20, 0x48}}, @prep={0x83, 0x1f, @not_ext={{}, 0x4, 0x3, @broadcast, 0x2, "", 0x52, 0xf7e, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x10, 0x3, @broadcast, 0x37, @broadcast, 0x7fff, 0x0, @broadcast, 0xff}}, @perr={0x84, 0xdc, {0x6, 0xe, [@ext={{}, @broadcast, 0x0, @device_a, 0x21}, @not_ext={{}, @device_a, 0x8, "", 0x29}, @ext={{}, @device_b, 0x4, @device_b, 0x3f}, @ext={{}, @broadcast, 0x80000000, @device_a, 0x13}, @not_ext={{}, @broadcast, 0xfffffff9, "", 0x30}, @ext={{}, @device_a, 0x6, @device_b, 0x23}, @ext={{}, @device_b, 0x101, @broadcast, 0xc}, @not_ext={{}, @device_b, 0x7, "", 0x12}, @not_ext={{}, @device_b, 0x7fff, "", 0x36}, @not_ext={{}, @broadcast, 0x6, "", 0x3b}, @not_ext={{}, @device_a, 0xfff, "", 0x29}, @not_ext={{}, @broadcast, 0xd17, "", 0x33}, @ext={{}, @device_b, 0x9, @broadcast, 0x9}, @not_ext={{}, @broadcast, 0x1ff, "", 0x9}]}}, @fast_bss_trans={0x37, 0x7c, {0x9c, 0x1, "03a792dd495f00873933ab37ceda467d", "51753c08ab1091d040216d3953dac5715af23ce6442dcc33bcc3152b09ebbd01", "8b7a3b2ec8cbed86c54377a34d34367634e8960c119260308f659eb82b83017c", [{0x4, 0x28, "164be0a55682f6a06ec76550b3950b5ff734e180aa3b6f72867b62236f86e1cdf7efd502634f2eab"}]}}, @cf={0x4, 0x6, {0x34, 0x3, 0x0, 0x40}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x394}, 0x1, 0x0, 0x0, 0x8800}, 0x4001884) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r4, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x3f}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xbc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40011) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000840), 0x6e, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/254, 0xfe}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/49, 0x31}, {&(0x7f0000001a00)=""/151, 0x97}, {&(0x7f0000001ac0)=""/8, 0x8}], 0x5, &(0x7f0000001b80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x2020) ioctl$EVIOCSABS2F(r7, 0x401845ef, &(0x7f0000001c40)={0x8, 0x8, 0x10001, 0x1, 0x2, 0x5}) syz_genetlink_get_family_id$ipvs(&(0x7f0000001c80), r8) r11 = syz_open_dev$evdev(&(0x7f0000001cc0), 0xfffffffffffffe01, 0xd0200) ioctl$EVIOCGABS2F(r11, 0x8018456f, &(0x7f0000001d00)=""/42) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r9, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x68, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40448c0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r10, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4000) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000002100)={&(0x7f0000002000), 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x58, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x80, 0x35}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4884) sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40060}, 0x0) ioctl$EVIOCGID(r11, 0x80084502, &(0x7f0000002240)=""/229) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x71}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 14:03:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f627c15}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9be8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b95}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a2d119d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2aa66b17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26662d26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69d6d0dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ea18358}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38592ba4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50a2696d}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e2616af}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x181c35e3}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70722345}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb39f13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79107218}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x378876ae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a8c0887}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x188}, 0x1, 0x0, 0x0, 0x4004804}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x23}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd8, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb784}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0xd8}, 0x1, 0x0, 0x0, 0x28001}, 0x800) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48095}, 0x4800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c8, r4, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a8b5b8262dcf66021aaef43d20ce922c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fe45566c68c28a6936d0c4d9776bee17bee3a7dfe70718e41dcca897cf1d8572"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x100}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9389e916b2b09a391a4af48d31f0f674dcff7c05f9656c5cb23a5f1fc63282bb"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="746ccc0bf286e89926ac761b7979ca2b6ceabb87e0b454ef"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="83847260634e64c0e9502cf58b01a875"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3afa7e93135829f4bce8d7bfedc9b7c2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "48d3f42c6795e8a6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f6eff56325ee1a753624621ddb9f2174"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3fc5e63a84a93408aabc278a3ac1e9eab3797b63c32d78bc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "396de98ec20552e7"}]}, @NL80211_ATTR_REKEY_DATA={0xb4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5ee8e970d1d6ab973437e1313cde4e7aeddb142b94bbac15"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a56e3ee47e9c6dbe0088e008f3345055b04307f5782017894d7b1136659fcbb3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f763e437bc9d64ff05574cab3ef1043a57b81ba107bfe993bccac7d6933a9815"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a4f9bcbf93e8d815c55e957273f31226a05d4c72f5356f40cde08b8c929cd5c7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5cb7c8f8c7a9d240"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5f9c6e6b289668e08a607de2ad235438"}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x1}, 0x40004) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x68, r3, 0x100, 0x5, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4004045) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}}, 0x20000080) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xe0, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5740}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4138f949}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000f00), 0x2803, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000014c0), 0x80000001, 0x40800) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000001500)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c4041}, 0x24004001) [ 89.032955] audit: type=1400 audit(1729605822.137:7): avc: denied { execmem } for pid=274 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:03:42 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x49, 0x29, 0x1, {0x7, [{{0x8, 0x1, 0x4}, 0x7ff, 0x3, 0x7, './file0'}, {{0x40, 0x2, 0x3}, 0x1000, 0x40, 0x7, './file0'}]}}, 0x49) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x103e56) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000140)=""/66, 0x42}, {&(0x7f00000001c0)=""/131, 0x83}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/234, 0xea}, {&(0x7f0000001440)=""/5, 0x5}, {&(0x7f0000001480)=""/26, 0x1a}, {&(0x7f00000014c0)=""/49, 0x31}, {&(0x7f0000001500)=""/158, 0x9e}, {&(0x7f00000015c0)=""/116, 0x74}], 0xa, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}], 0x1, 0x100, &(0x7f0000001800)={0x0, 0x3938700}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001840)=@abs, 0x6e, &(0x7f0000001a80)=[{&(0x7f00000018c0)=""/132, 0x84}, {&(0x7f0000001980)=""/39, 0x27}, {&(0x7f00000019c0)=""/157, 0x9d}], 0x3, &(0x7f0000001ac0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}, 0x30) write$P9_RGETATTR(r0, &(0x7f0000001c40)={0xa0, 0x19, 0x1, {0x10, {0x4, 0x3, 0x4}, 0x45, 0x0, r8, 0x1000, 0x7, 0xe0, 0x100, 0x3, 0xfd, 0x1, 0x200, 0x3, 0x10001, 0x3, 0x8000, 0x10000, 0x40, 0x7fff}}, 0xa0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) write$P9_RGETLOCK(r7, &(0x7f0000001d00)={0x25, 0x37, 0x2, {0x0, 0x8, 0x2, 0x0, 0x7, '@*!/@*\''}}, 0x25) write$P9_RLCREATE(r2, &(0x7f0000001d40)={0x18, 0xf, 0x2, {{0x7dca9fce03b8cc91, 0x1, 0x4}, 0x1}}, 0x18) recvmsg$unix(r4, &(0x7f0000002080)={&(0x7f0000001d80)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/70, 0x46}, {&(0x7f0000001e80)=""/190, 0xbe}, {&(0x7f0000001f40)=""/22, 0x16}, {&(0x7f0000001f80)=""/14, 0xe}], 0x4, &(0x7f0000002000)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x0) recvmsg$unix(r3, &(0x7f0000003240)={&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/25, 0x19}], 0x2, &(0x7f00000031c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x1) getpeername$unix(r9, &(0x7f0000003280)=@abs, &(0x7f0000003300)=0x6e) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000003340)={0x15, 0x65, 0xffff, 0xfffff1f4, 0x8, '9P2000.u'}, 0x15) connect$unix(r6, &(0x7f0000003380)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000003440)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r9, 0x0, &(0x7f0000003400)='.\x00', 0xda, 0x10800, 0x23456}, 0x0) recvmmsg$unix(r1, &(0x7f0000006940)=[{{&(0x7f0000003480)=@abs, 0x6e, &(0x7f0000004800)=[{&(0x7f0000003500)=""/69, 0x45}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/67, 0x43}, {&(0x7f0000004600)=""/197, 0xc5}, {&(0x7f0000004700)=""/222, 0xde}], 0x5}}, {{&(0x7f0000004880), 0x6e, &(0x7f0000004b80)=[{&(0x7f0000004900)=""/240, 0xf0}, {&(0x7f0000004a00)=""/127, 0x7f}, {&(0x7f0000004a80)=""/211, 0xd3}], 0x3, &(0x7f0000004bc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004c00), 0x6e, &(0x7f0000005240)=[{&(0x7f0000004c80)=""/88, 0x58}, {&(0x7f0000004d00)=""/149, 0x95}, {&(0x7f0000004dc0)=""/85, 0x55}, {&(0x7f0000004e40)=""/252, 0xfc}, {&(0x7f0000004f40)=""/253, 0xfd}, {&(0x7f0000005040)=""/114, 0x72}, {&(0x7f00000050c0)=""/188, 0xbc}, {&(0x7f0000005180)=""/147, 0x93}], 0x8, &(0x7f00000052c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000005400), 0x6e, &(0x7f0000006880)=[{&(0x7f0000005480)=""/159, 0x9f}, {&(0x7f0000005540)=""/24, 0x18}, {&(0x7f0000005580)=""/107, 0x6b}, {&(0x7f0000005600)=""/27, 0x1b}, {&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000006640)=""/131, 0x83}, {&(0x7f0000006700)=""/84, 0x54}, {&(0x7f0000006780)=""/25, 0x19}, {&(0x7f00000067c0)=""/162, 0xa2}], 0x9}}], 0x4, 0x40000020, &(0x7f0000006a40)={0x0, 0x989680}) write$9p(r10, &(0x7f0000006a80)="aaf592dbc41c247d545e650a157072e998f7557fcb847c9a8eebe003aa58b6a72c5e1c13d7d33fb13404516028111dd0f6ba8f941c795307b3c95ed224c16a3a038aff", 0x43) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000006b00), 0x404000, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f0000006cc0)={&(0x7f0000006b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000006c80)={&(0x7f0000006b80)={0xc8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x30}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb3e6}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008080}, 0x20090) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006d40)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x77359400}, 0x1, 0x0, 0x1}, 0xe0) 14:03:42 executing program 6: ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000000)=""/122) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)=""/166, 0xa6}, {&(0x7f00000001c0)=""/249, 0xf9}, {&(0x7f00000002c0)=""/191, 0xbf}], 0x3, &(0x7f00000003c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x40000000) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440), 0x0) sendmsg$unix(r4, &(0x7f0000000980)={&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000500)="526e111c03222d58924cff7e5578200d55ad4d59f92df29d089600f2fdcc21b297a605bb74c1020c6c724ac326759351f5c6e1b3512292f05cbb5ccdd2faa5166468a25a881da4228cd69d3225333a8a13c4e4ac3ebc197ef10c492e2630a43f9cf1350ba182c3d397b984dd834439e7a5dfe74eec0643694f645d80ebf8e11a4dde12768028643a624a81920564c6f16218013f0e5a6cc1d59cfc2feaec1dd1f63f41ffd33786dc938ca632b0e8acd3724f46209398505cfc96e057c21e022941251397b296eee61a4f9daf7ccca470c38eeced8e02f9ac92", 0xd9}, {&(0x7f0000000600)="8055ef6ea9ba829ca8d28b6db28810b6ace20e1b6fa360bd43d45f36af28028638fb16b3ea", 0x25}, {&(0x7f0000000640)="f2d6aeec4b99c95b5ff2f8075317fe4310f6d0b702932f76a35de24fb31bef72", 0x20}, {&(0x7f0000000680)="6ad79054c6c9f0ba250a29ca2b67b029dd6856667b2028488dc762fe01cef1955757267e6d58f26cb460af6f6a340dea06ef891339ab942e4ce727cd22e13385ba9db4eaf7494ce2961e2c0f5a", 0x4d}, {&(0x7f0000000700)="78ff2a250d074cc07ec1cbd67e03bdce5d64fc45752aabd117cf31f77a8971cc9d211617df379660f10d7df2d37baaffadc3e96ac4b0c74bad0303131ed55817cd93c2a03e0a12e3ba622f77ab304dd65c442f30cad27b3eb265c477f550357402e349c46bd3f9feafcee0c16e8ddbba6f90049c10536e971c4dac35d27bd7a8576aeeca4fa9817d0d4c9623329178e148dc984f928bc6b021a1c043d23a68501f095f910d", 0xa5}, {&(0x7f00000007c0)="ef87d646c210916b15ac1ff200f7c18989b9f6152ee1186020f5068c01ec4a275ef3fe57213895a67ea2fa672a0d1ef6d50e7dd0401c807abd5302dc6f01bdccbf2272cb738d61667c53ee0868b2cca184f93480c650d3d18e509ea7e8c46afe7a3c23e8841b219111eb4aed", 0x6c}, {&(0x7f0000000840)="9db544a37f27a095ad2b19c1c91870d0c23580718b7f982d935874bf483d13722174b5f22a31909529f0b90c1791f45407e89f390eb4a1992cae8718a0238244fa88994a7e63b274b626c1a2b01bc2b4958b90773af71eb570d64c65dbcacf99ea61c7cf20cfc8f99c900b8d3487fd713f8e5b8fab090902b33ce410217b385555ef5d92b6b7cbe1d5dedfbdf012b08ef0f247b558f668284e6a6f", 0x9b}], 0x7, 0x0, 0x0, 0x48810}, 0x4000001) r5 = socket$unix(0x1, 0x0, 0x0) r6 = socket$inet(0x2, 0x4, 0x4b) r7 = openat$cgroup_devices(r0, &(0x7f0000000fc0)='devices.allow\x00', 0x2, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001000), 0x222800, 0x0) recvmsg$unix(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000016c0)=""/155, 0x9b}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2, &(0x7f00000027c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x40002000) r15 = openat$null(0xffffffffffffff9c, &(0x7f0000002900), 0x101000, 0x0) r16 = socket$nl_xfrm(0x10, 0x3, 0x6) r17 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002940), 0x200, 0x0) sendmmsg$unix(r5, &(0x7f0000002ac0)=[{{&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000a40)="c216cb6dc6571d5d3b62fac51fd721b5db695e1969108265acc5941c54a0e9a7da149d3da81ea56470d97e9009a4064f4f3445fff96751c50e75cc29651842a54e1936ec0552972e220adc8423e4f0dcc08d823482e287f9f3d142bf089b82150b65164fc6a5a40461ddd6eb2515ae932e3946112bd8ad26a77042c3bc5470c8812181d11b220617dac793cb64bd88f2c468eb5291ed64451360308bf8df", 0x9e}, {&(0x7f0000000b00)="7ac8a75f797651e44e491e43916fad816220d047fe844f2c8e1b10b71fd43ee704a23d190d1087c28def4055b6beaaa82bdd2a32b33413e207d8f5b1103ee351b07e79ce0177aa98e1ed037de0790e0e95a9c4f001735566ba6108b22e25864c14d7e1a7eef6370c66d74673a2793dd82b67eb7725e82afeaecee94df61de3c56dd574c68803835d6e4f1ed54ab51788f275be32afaba751bb01dd84", 0x9c}, {&(0x7f0000000bc0)="87e5dac3a1f4ce7cd32d6ca137e2e883c2cf94f440072e0730dfd79ca795b0636921f4ff8771eaef", 0x28}, {&(0x7f0000000c00)="c6b93c1c4965df36a49f654d8cc8ccdc512749fd32af50ca58fd76c6f9aa420df80760d4986816ceacebddec1e87aa8ac94cd649078af2fc44c65135a1588682a441eb09ec3431a3b9606c910746385531be7da0234e1a8ece57609ea8d17088a4aa019d38f15bbbc8ffbbbe2b4977227bd1", 0x72}, {&(0x7f0000000c80)="c95d9bb477978ffee37cf239bc81300eac4b4d0e855c35fea809217c5f0c8b82181049e5a80123ef8ebb10506545e5dd512ee9b5c065de08e89b56c98d28fb70a5017ad15a1e34f6044492fe66c1b9f2a7cfabd24e60cd76da449e836111dd7318f5798867386ce48b4b2198e0d7c3971d1fb0306a46756ea2f8fe4ed7a281aa9a8d3c5a4b5e646a692aa5f773c84a8bccc83b5d0f0ad796b53fdbc766a2e4f65e031cdfc345c9be65475de5f52e994d67f44fc4bf4e", 0xb6}, {&(0x7f0000000d40)="766b73104a0522b19f03d4fe820b0e29642fadae3cb209950d267e264d4a28729a468a3fc40015514a806a5e0571f2e41d237b466c10ce5d952cbaa704864618143345f81aca1e59722dd7eb05d399f3dd43873859bfb51fb4b02da1dbdca35f1307eb187724cc8974f2ad88fbae1a", 0x6f}, {&(0x7f0000000dc0)="650dceba0de439e191e42d504f7da9ccc76f3a83cce2f36c03c3d0eca095d7dbac7f4bd3a39c822c", 0x28}, {&(0x7f0000000e00)="3216fedc39430ea5a40ba326487ad4c60a6558c7481b63da20ec08c1b96989da8ed29eec54d4c7065d10abf500581e607d82d5793e72f050df59d50178b380348863193813f2ed90ab10f9a13c01e6128d3405055db1121cba6ce9d4c14f8e6fec1a796724e1edf057213242b7f1b88ecb0f02db18a356f8cec7f1459344db2c8a3bee0000d6425e9f1c2b8a0cae", 0x8e}, {&(0x7f0000000ec0)="f5e8e560ffc75c0e65f488ef20cfac9239bfc16e4bc5449fc01f27ed29306dfe3089260d3ba5ccb23335281e18b4d7235b447da78f5d81614aa71bf876", 0x3d}], 0x9, &(0x7f0000002980)=[@rights={{0x20, 0x1, 0x1, [r0, r6, r3, r7]}}, @rights={{0x20, 0x1, 0x1, [r3, r8, r3, r4]}}, @rights={{0x28, 0x1, 0x1, [r4, r3, r1, 0xffffffffffffffff, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r4, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r4, r4, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r15, r3, r16, r3, r3, r17, 0xffffffffffffffff]}}], 0x138, 0x1}}], 0x1, 0x10) r18 = accept4$unix(r9, &(0x7f0000002b00), &(0x7f0000002b80)=0x6e, 0x1400) accept4$unix(r18, &(0x7f0000002bc0)=@abs, &(0x7f0000002c40)=0x6e, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000002cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r12, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x24, 0x0, 0x4, 0x1, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r19}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x895}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r14, 0x6, &(0x7f0000002e00)={0x800, 0x0, &(0x7f0000002dc0)=[r12, 0xffffffffffffffff, r13]}, 0x3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002e40), 0x80000, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000002ec0)=@abs, &(0x7f0000002f40)=0x6e) 14:03:42 executing program 7: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000001, 0x2, 0x7}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40040d0}, 0x4084) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x16, 0x5, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}}}, ["", "", ""]}, 0x3c}}, 0x4044801) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004010) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6a, 0x3e}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0xb, 0x2a, [@dsss={0x3, 0x1, 0xa9}, @ibss={0x6, 0x2, 0x80}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x10) epoll_pwait2(r1, &(0x7f0000000600)=[{}, {}], 0x2, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f0000000680)={[0xffffffffffffff56]}, 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=@migrate={0xc4, 0x21, 0x0, 0x70bd26, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 0x4e24, 0x5, 0xa, 0x80, 0xa0, 0x3a, 0x0, 0xee01}, 0x6e6bbd}, [@replay_val={0x10, 0xa, {0x70bd28, 0x70bd27, 0x6}}, @algo_comp={0x63, 0x3, {{'lzjh\x00'}, 0xd8, "e3b719efef5007ad3c64003f12a4dd5ef89d29eee2dbdbbccce9db"}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x22}, @void, @val={0xc, 0x99, {0x9, 0x3a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000a00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4894}, 0x40080c0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x7c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x15}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "15fe1e30da9ff88bac1ac1e5231fe60d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "67da5e75d31bfbc1d28cd4feaea8014c"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "eb57f6737c65ea5c89669528e40a0983"}, @NL80211_ATTR_PMK={0x14, 0xfe, "794d829d84bb09edd9e0b78dd5116457"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14000801}, 0x20008000) r6 = getpid() rt_tgsigqueueinfo(r6, 0xffffffffffffffff, 0x3c, &(0x7f0000000cc0)={0x7, 0x4, 0x2}) [ 90.405471] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.407029] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.409731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.417299] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.430494] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.433640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.446110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.449515] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.451900] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.455331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.457778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.459309] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.465898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.469342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.472706] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.475347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.490391] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.492258] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.493498] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.494608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.497586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.498389] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.499573] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.500389] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.503955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.505798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.506724] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.508407] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.509242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.510973] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.549594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.555333] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.556259] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.557426] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.558396] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.559491] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.560671] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.562542] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.564703] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.565910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.567385] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.568213] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.569586] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.570489] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.572439] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.582775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.591330] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.592726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.526839] Bluetooth: hci0: command tx timeout [ 92.528237] Bluetooth: hci3: command tx timeout [ 92.528813] Bluetooth: hci1: command tx timeout [ 92.591166] Bluetooth: hci2: command tx timeout [ 92.592063] Bluetooth: hci6: command tx timeout [ 92.592707] Bluetooth: hci4: command tx timeout [ 92.654772] Bluetooth: hci5: command tx timeout [ 92.655563] Bluetooth: hci7: command tx timeout [ 94.574256] Bluetooth: hci1: command tx timeout [ 94.574795] Bluetooth: hci3: command tx timeout [ 94.575322] Bluetooth: hci0: command tx timeout [ 94.638388] Bluetooth: hci4: command tx timeout [ 94.638990] Bluetooth: hci6: command tx timeout [ 94.640239] Bluetooth: hci2: command tx timeout [ 94.704156] Bluetooth: hci5: command tx timeout [ 94.704702] Bluetooth: hci7: command tx timeout [ 96.622198] Bluetooth: hci0: command tx timeout [ 96.622749] Bluetooth: hci3: command tx timeout [ 96.623815] Bluetooth: hci1: command tx timeout [ 96.686260] Bluetooth: hci6: command tx timeout [ 96.686803] Bluetooth: hci2: command tx timeout [ 96.687461] Bluetooth: hci4: command tx timeout [ 96.751206] Bluetooth: hci5: command tx timeout [ 96.751774] Bluetooth: hci7: command tx timeout [ 98.670228] Bluetooth: hci1: command tx timeout [ 98.670763] Bluetooth: hci3: command tx timeout [ 98.671581] Bluetooth: hci0: command tx timeout [ 98.734336] Bluetooth: hci2: command tx timeout [ 98.734867] Bluetooth: hci4: command tx timeout [ 98.735508] Bluetooth: hci6: command tx timeout [ 98.798190] Bluetooth: hci5: command tx timeout [ 98.798733] Bluetooth: hci7: command tx timeout [ 150.307632] syz-executor.3 (282) used greatest stack depth: 23552 bytes left [ 153.038785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.040830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.043749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.053334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.055956] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.059421] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.222027] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.225694] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.227481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.231778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.234643] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.236547] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.287239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.294976] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.316286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.324866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.338665] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.342652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.401919] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.404637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.409703] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.410681] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.411951] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.414429] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.415732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.418250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.420551] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.422413] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.423771] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.425243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.427355] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.430990] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.442896] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.448289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.449542] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.450772] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.454443] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.455972] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.460733] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.461771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.468557] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.473973] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.475171] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.476827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.478485] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.484217] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.485850] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.487220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.118212] Bluetooth: hci0: command tx timeout [ 155.310411] Bluetooth: hci1: command tx timeout [ 155.502321] Bluetooth: hci2: command tx timeout [ 155.566247] Bluetooth: hci4: command tx timeout [ 155.566907] Bluetooth: hci3: command tx timeout [ 155.567784] Bluetooth: hci7: command tx timeout [ 155.568432] Bluetooth: hci5: command tx timeout [ 155.569029] Bluetooth: hci6: command tx timeout [ 157.168164] Bluetooth: hci0: command tx timeout [ 157.359390] Bluetooth: hci1: command tx timeout [ 157.551256] Bluetooth: hci2: command tx timeout [ 157.615244] Bluetooth: hci5: command tx timeout [ 157.616458] Bluetooth: hci3: command tx timeout [ 157.617797] Bluetooth: hci4: command tx timeout [ 157.617826] Bluetooth: hci7: command tx timeout [ 157.618278] Bluetooth: hci6: command tx timeout [ 159.215368] Bluetooth: hci0: command tx timeout [ 159.407122] Bluetooth: hci1: command tx timeout [ 159.598300] Bluetooth: hci2: command tx timeout [ 159.662337] Bluetooth: hci7: command tx timeout [ 159.664037] Bluetooth: hci4: command tx timeout [ 159.664287] Bluetooth: hci5: command tx timeout [ 159.666177] Bluetooth: hci3: command tx timeout [ 159.666235] Bluetooth: hci6: command tx timeout [ 161.263142] Bluetooth: hci0: command tx timeout [ 161.454259] Bluetooth: hci1: command tx timeout [ 161.647245] Bluetooth: hci2: command tx timeout [ 161.710283] Bluetooth: hci5: command tx timeout [ 161.710963] Bluetooth: hci3: command tx timeout [ 161.713412] Bluetooth: hci4: command tx timeout [ 161.714056] Bluetooth: hci7: command tx timeout [ 161.716427] Bluetooth: hci6: command tx timeout [ 215.550832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.560777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.567987] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.573254] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.575387] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.578414] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.674822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.677456] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.679570] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.683801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.686875] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.688257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.889014] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.912812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.913965] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.915598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.916710] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.918477] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.919626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.929427] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.930794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.931616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.933485] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.935961] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.937130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.939093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.939211] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.941809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.944450] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.952328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.017901] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.020309] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.021887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.025165] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.027850] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.029143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.142748] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.180473] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.210079] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.212879] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.214470] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.215695] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.462926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.480809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.508416] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.554300] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.559322] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.564335] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.649998] Bluetooth: hci0: command tx timeout [ 217.710143] Bluetooth: hci1: command tx timeout [ 217.966294] Bluetooth: hci4: command tx timeout [ 218.030193] Bluetooth: hci3: command tx timeout [ 218.094317] Bluetooth: hci2: command tx timeout [ 218.096485] Bluetooth: hci5: command tx timeout [ 218.286195] Bluetooth: hci6: command tx timeout [ 218.670378] Bluetooth: hci7: command tx timeout [ 219.694165] Bluetooth: hci0: command tx timeout [ 219.758459] Bluetooth: hci1: command tx timeout [ 220.014273] Bluetooth: hci4: command tx timeout [ 220.078186] Bluetooth: hci3: command tx timeout [ 220.144137] Bluetooth: hci2: command tx timeout [ 220.144638] Bluetooth: hci5: command tx timeout [ 220.334401] Bluetooth: hci6: command tx timeout [ 220.718285] Bluetooth: hci7: command tx timeout [ 221.742165] Bluetooth: hci0: command tx timeout [ 221.806139] Bluetooth: hci1: command tx timeout [ 222.062233] Bluetooth: hci4: command tx timeout [ 222.126309] Bluetooth: hci3: command tx timeout [ 222.191172] Bluetooth: hci5: command tx timeout [ 222.191679] Bluetooth: hci2: command tx timeout [ 222.382132] Bluetooth: hci6: command tx timeout [ 222.766344] Bluetooth: hci7: command tx timeout [ 223.790168] Bluetooth: hci0: command tx timeout [ 223.854165] Bluetooth: hci1: command tx timeout [ 224.110187] Bluetooth: hci4: command tx timeout [ 224.174249] Bluetooth: hci3: command tx timeout [ 224.238190] Bluetooth: hci2: command tx timeout [ 224.238687] Bluetooth: hci5: command tx timeout [ 224.430167] Bluetooth: hci6: command tx timeout [ 224.814240] Bluetooth: hci7: command tx timeout [ 278.145173] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.146920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.151081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.162088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.166201] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.168482] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.196680] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.200105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.207344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.216532] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.219629] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.221458] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.267244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.279942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.291444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.303015] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.310015] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.312498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.394839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.419510] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.425744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.441296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.453752] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.457411] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.462400] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.492912] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.502208] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.515524] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.528949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.530918] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.536890] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.550383] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.557205] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.562233] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.565588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.569514] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.573272] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.576616] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.577780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.580640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.581886] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.585913] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.603816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.605222] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.606222] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.625346] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.651344] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.667518] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.238225] Bluetooth: hci1: command tx timeout [ 280.238325] Bluetooth: hci0: command tx timeout [ 280.367107] Bluetooth: hci2: command tx timeout [ 280.496175] Bluetooth: hci3: command tx timeout [ 280.622159] Bluetooth: hci7: command tx timeout [ 280.878244] Bluetooth: hci4: command tx timeout [ 280.878316] Bluetooth: hci6: command tx timeout [ 280.879574] Bluetooth: hci5: command tx timeout [ 282.286184] Bluetooth: hci1: command tx timeout [ 282.286743] Bluetooth: hci0: command tx timeout [ 282.414130] Bluetooth: hci2: command tx timeout [ 282.542279] Bluetooth: hci3: command tx timeout [ 282.670137] Bluetooth: hci7: command tx timeout [ 282.926222] Bluetooth: hci6: command tx timeout [ 282.926304] Bluetooth: hci5: command tx timeout [ 282.926692] Bluetooth: hci4: command tx timeout [ 284.335224] Bluetooth: hci0: command tx timeout [ 284.335736] Bluetooth: hci1: command tx timeout [ 284.462145] Bluetooth: hci2: command tx timeout [ 284.590129] Bluetooth: hci3: command tx timeout [ 284.718139] Bluetooth: hci7: command tx timeout [ 284.974211] Bluetooth: hci6: command tx timeout [ 284.974713] Bluetooth: hci5: command tx timeout [ 284.975227] Bluetooth: hci4: command tx timeout [ 286.382266] Bluetooth: hci0: command tx timeout [ 286.382456] Bluetooth: hci1: command tx timeout [ 286.511354] Bluetooth: hci2: command tx timeout [ 286.638235] Bluetooth: hci3: command tx timeout [ 286.766287] Bluetooth: hci7: command tx timeout [ 287.023105] Bluetooth: hci6: command tx timeout [ 287.023161] Bluetooth: hci4: command tx timeout [ 287.023584] Bluetooth: hci5: command tx timeout [ 340.468873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.481766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.485233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.505336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.516701] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.524422] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.696389] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.698155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.703519] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.706873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.712545] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.713670] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.744252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.745855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.750663] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.765346] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.768003] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.770905] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.809299] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.816954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.819517] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.828554] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.831415] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.833773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.837251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.843704] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.859591] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.865408] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.869518] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.877460] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.879839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.882401] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.885779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.888729] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.890860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.895666] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.898615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.898708] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.907299] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.907408] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.910589] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.911855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.935278] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.940317] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.944395] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.957685] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.973364] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.977401] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.574700] Bluetooth: hci0: command tx timeout [ 342.766435] Bluetooth: hci1: command tx timeout [ 342.831118] Bluetooth: hci2: command tx timeout [ 342.895175] Bluetooth: hci3: command tx timeout [ 342.960187] Bluetooth: hci5: command tx timeout [ 343.023136] Bluetooth: hci4: command tx timeout [ 343.086139] Bluetooth: hci7: command tx timeout [ 343.150234] Bluetooth: hci6: command tx timeout [ 344.623592] Bluetooth: hci0: command tx timeout [ 344.814757] Bluetooth: hci1: command tx timeout [ 344.878459] Bluetooth: hci2: command tx timeout [ 344.942542] Bluetooth: hci3: command tx timeout [ 345.006199] Bluetooth: hci5: command tx timeout [ 345.070189] Bluetooth: hci4: command tx timeout [ 345.135085] Bluetooth: hci7: command tx timeout [ 345.198639] Bluetooth: hci6: command tx timeout [ 346.671314] Bluetooth: hci0: command tx timeout [ 346.863085] Bluetooth: hci1: command tx timeout [ 346.927186] Bluetooth: hci2: command tx timeout [ 346.991130] Bluetooth: hci3: command tx timeout [ 347.054397] Bluetooth: hci5: command tx timeout [ 347.121125] Bluetooth: hci4: command tx timeout [ 347.183196] Bluetooth: hci7: command tx timeout [ 347.249106] Bluetooth: hci6: command tx timeout [ 348.718207] Bluetooth: hci0: command tx timeout [ 348.911067] Bluetooth: hci1: command tx timeout [ 348.975108] Bluetooth: hci2: command tx timeout [ 349.039174] Bluetooth: hci3: command tx timeout [ 349.103140] Bluetooth: hci5: command tx timeout [ 349.168057] Bluetooth: hci4: command tx timeout [ 349.231100] Bluetooth: hci7: command tx timeout [ 349.294264] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 14:08:52 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000200 RCX=ffffffff815978fd RDX=0000000000000001 RSI=0000000000000014 RDI=ffff888009494000 RBP=0000000000000014 RSP=ffff888028697e50 R8 =0000000000000000 R9 =fffffbfff0c7e4e9 R10=ffffffff863f274f R11=0000000000000001 R12=ffff888009494000 R13=00007ff48ccf0000 R14=ffff888015cc1bc0 R15=0000000000000000 RIP=ffffffff818d3586 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff48ca7d540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff48ccf0000 CR3=0000000026426000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c14ea0 RDI=ffff88802e860a40 RBP=ffffffff84ddd920 RSP=ffff88802775fb40 R8 =0000000000000000 R9 =00000000ffffffff R10=0000000000000004 R11=0000000000000116 R12=000000000000011b R13=ffff888016150068 R14=0000000000000001 R15=ffff8880090e8c80 RIP=ffffffff81253e6a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3200000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007eff983c4478 CR3=000000002fc52000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=4700352e322e325f4342494c4700362e XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000006d69747465 XMM04=006d6f72667663657200796164666f65 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000