Warning: Permanently added '[localhost]:41161' (ECDSA) to the list of known hosts. 2025/04/27 00:01:46 fuzzer started 2025/04/27 00:01:47 dialing manager at localhost:46629 syzkaller login: [ 95.463899] cgroup: Unknown subsys name 'net' [ 95.606205] cgroup: Unknown subsys name 'cpuset' [ 95.651749] cgroup: Unknown subsys name 'rlimit' 2025/04/27 00:02:03 syscalls: 214 2025/04/27 00:02:03 code coverage: enabled 2025/04/27 00:02:03 comparison tracing: enabled 2025/04/27 00:02:03 extra coverage: enabled 2025/04/27 00:02:03 setuid sandbox: enabled 2025/04/27 00:02:03 namespace sandbox: enabled 2025/04/27 00:02:03 Android sandbox: enabled 2025/04/27 00:02:03 fault injection: enabled 2025/04/27 00:02:03 leak checking: enabled 2025/04/27 00:02:03 net packet injection: enabled 2025/04/27 00:02:03 net device setup: enabled 2025/04/27 00:02:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/27 00:02:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/27 00:02:03 USB emulation: enabled 2025/04/27 00:02:03 hci packet injection: enabled 2025/04/27 00:02:03 wifi device emulation: enabled 2025/04/27 00:02:03 802.15.4 emulation: enabled 2025/04/27 00:02:03 fetching corpus: 0, signal 0/0 (executing program) 2025/04/27 00:02:05 starting 8 fuzzer processes 00:02:05 executing program 0: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{0x4, 0x1f}, {0xd12000000, 0x2}, 0x10000, 0x1}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000080)={{0x7, 0x6}, {0x5, 0x74}, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = socket(0x1d, 0x80000, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040094}, 0x4000840) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xb2, 0x52}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4d}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x81}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x402580}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffc}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8579b17fe19c0e65}, 0x40000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r7, 0x614, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r8, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x6008010}, 0x4008024) 00:02:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x15}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x48}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4000005) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40c0091) r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x12c, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_SSID={0x1c, 0x34, @random="4a0aea3e7fb70cce37eb04a56eb5e803ef44243d342724f0"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b, @device_b}}]}, @NL80211_ATTR_IE={0x6d, 0x2a, [@random_vendor={0xdd, 0x67, "3a54b00dcb27c51275c641b009d3fb5ab1246e42dde74982f98b55cdce332f16bb88c9670f4444d7bd6008d3b5c32752648ac06dd80107366d4c773710c157a6c99a288fc495ef76afab11ba57a2dee8d26fe53eac0933ec4cab5fa54eb5784d749c4a21682b12"}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x1b, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @link_id={0x65, 0x12, {@random="71364af4bcfa", @device_b}}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x40, 0xc}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9fdde5497e36"}, @NL80211_ATTR_SSID={0x17, 0x34, @random="51985efcf552d37732a24e156123eb556b6995"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4054) r7 = socket(0x5, 0xa, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r7) r8 = syz_open_dev$vcsa(&(0x7f0000000800), 0x6708ae2d, 0x8000) sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x20000000) r9 = syz_open_dev$vcsa(&(0x7f0000000940), 0x1, 0x381080) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, r10, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000040) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 00:02:05 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x8000) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x4, 0x35) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x640041) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f00000000c0)=""/4096) r2 = syz_mount_image$nfs(&(0x7f00000010c0), &(0x7f0000001100)='./file0\x00', 0x3, 0x2, &(0x7f0000001280)=[{&(0x7f0000001140)="fe4790116b69ea850dd65a66f55e9e95b7070838a88a46a7e541c0ddc80f7c30fbcdc146aa07f0d2c8523da40cfbddd05eea3a6d77c7fe08da672ce39af3524edc85f1cb221b50ae896db8064d5892220aff25ab1531c4477327e28d3d750c71afd654e651c2934fc2e864b8bf3abc4f26e1986903554474bf135c606470f2b7e22a9f6e12796e446cad69d4", 0x8c, 0x5333}, {&(0x7f0000001200)="6d9d7345e34f2ce042d939d0cda5dc2a0c5ca0def49dfe97f085df8c04e292d852edfd125ff63413d5f613ce5d2132a29ccedd828332e792f8959300e6f30e99e3ec2aae", 0x44, 0x400}], 0x0, &(0x7f00000012c0)={[{'^\'-%(&(-^D'}, {'/dev/input/event#\x00'}], [{@fowner_eq}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) r3 = syz_mount_image$nfs(&(0x7f0000001380), &(0x7f00000013c0)='./file0\x00', 0x7fff, 0x6, &(0x7f0000001840)=[{&(0x7f0000001400)="0caa3c27fd450b3ad03417ee43ea829efa1810d98294220c2b29da5eb780d4d5c167de7db7a0599f8188cd7feae23c1d19fbfd108147e4b0c74364f074eeb8b4c8e8fbd1c695245bd85c54796f2e61ca53999b17b58f472a964a3e3963eab27d0a388bf01327516869d663f0b518a2b2fa73b37a8d550a6101c3ae0b1ad8f7d1653a711ef5405d9c6fc73ffe3b2f55875c31bf916c578fa750083a48707a42b2aac49d74e2cddd06816e631ebf4dcd86648b6bd23ba7a76bb640f49576a683127d0cfc948aa437db1e0bc2e425", 0xcd, 0x455a}, {&(0x7f0000001500)="0d103b2d5957c6cee7e7a4cbb6a3c630439108a3ad2c46d473af16bafba2386beb1b706885e7895b64b4fecbceac58965e79ce2faf0134c8e17e04c64c50609477c1d10ca5f69315431414e14f84a99d7764b5d8a547923f3fabecec5311074efd201e8587f31ae5a860a3e3514125acbf447460be363463bbb8bbc32403393056b62cb364aa9cd89251a1757fe173e21ee9981bbe54b6d4995ae6155ecb2d9fc0fcf86eefdac3b7e3bebb26a270e248d70d355ee26fbf4993f88933065af91cd72b1765e0d49858dda0a67ea4c9b8f31842c01c7310e8552b19090a224ba1020e6f75dd3f5927445b", 0xe9, 0xcb}, {&(0x7f0000001600)="82cece467428eea71959356999d4dab5fc48c4b1322acf450a3e52eb02771d21e6324128b5e700898373a83926f917d58a9d36ad123ae20c9303e5aa5f986b55e25f282cc29db551cd67ee7d430dbaca44b5abe215694b67fcfdc0914ace8695bb97d6dbcdd7b0fe6095bce74a59b6aa10f1e5b6f836677147d6d604ffa617ead4b3f8ba0c1dbb7c26385190710352f0ac232b880440", 0x96, 0xffffffffffffffed}, {&(0x7f00000016c0)="a46f9ee64896f1a22b2409a1ee9e0bf847509b922a783c77d79eb5b86aaf288e7ce3512cf8ddb2e1ce3d6e8720aa8c3cfeaa4c9b2487318fc950c82ab5d1782ba48794419eebf178b85b0decf34e3d567c2407258df38db70a1c3174b40bd8725f2af5e10b21b70f23875d51e28c", 0x6e, 0x4}, {&(0x7f0000001740)="d9635fc50f999206089c19b337771a398f5c8ed67696e192", 0x18, 0x6}, {&(0x7f0000001780)="da60ac9efd6541863fa8677bf449eb043476c54ddfceaa8d1516d860ea5805ac3e3faab2e6580c265861197caf69e3f42082209cbcd4a0417a58dec1c315ef9caab5be55c9173883178eebbe4ebe1d2b8a6be67d2c43790e70ebc28753599b811570d2b948f4e4aa26d07c211f5b246050e5bf11be2c0969c3b5cb367b496631fb8bab", 0x83, 0xffffffffffffffff}], 0x200a000, &(0x7f0000001900)={[{'^'}, {'&\\{'}, {}, {'\xe0}'}, {'fscontext'}, {'*]0)'}, {'.\xd6$:\xcc](O\x98'}, {':'}, {'$('}], [{@obj_type={'obj_type', 0x3d, '.{'}}, {@dont_measure}, {@fowner_gt}, {@appraise_type}]}) renameat(0xffffffffffffffff, &(0x7f0000001340)='./file0\x00', r3, &(0x7f0000001980)='./file0\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x50, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000001b40), 0x1, 0x2ca100) ioctl$EVIOCSABS2F(r5, 0x401845ef, &(0x7f0000001b80)={0x8, 0x7, 0x3, 0x4c1, 0x9, 0x4}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001bc0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/stat\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000001c40)='./file0\x00', r2, &(0x7f0000001c80)='./file1\x00', 0x2) getdents64(r3, &(0x7f0000001cc0)=""/60, 0x3c) r8 = syz_open_dev$vcsa(&(0x7f0000001d00), 0x7, 0x200000) ioctl$EVIOCGMTSLOTS(r8, 0x8040450a, &(0x7f0000001d40)=""/48) r9 = syz_open_dev$vcsa(&(0x7f0000001d80), 0x0, 0x20000) openat$incfs(r9, &(0x7f0000001dc0)='.pending_reads\x00', 0x0, 0x81) 00:02:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x189000) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/52) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/4096) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x30}}, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f00000011c0)='.log\x00', 0x242, 0x20) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x38, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81e, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000015}, 0xa56405224dabf280) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001340), r2) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480), r2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x44, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3d9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3309}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x81008}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x18, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c000}, 0x4080) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x40, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}}, 0x2820) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x24, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) r5 = socket(0xb, 0x1, 0x7) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x7c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40061}, 0x6) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x80, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x11) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001b40)=0x5) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000001b80)) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x52}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x5) [ 113.350810] audit: type=1400 audit(1745712125.198:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:02:05 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0xa0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000180)={0x11, 0x56, &(0x7f0000000100)="66f7d0783aa0716d32eb5dbee07d3bc4851eef3a457c3d6487112e4edc9ce0c2d7fcbe7356816f616a4318f5827d6845bcd555b71b3a2e970a721581b0e42096ee0edb38ac6edffcbd89186e15057fa5611dadd5f9cd"}) fchownat(r0, &(0x7f00000001c0)='./file1\x00', 0xee00, 0xffffffffffffffff, 0x1800) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x2) socketpair(0x9, 0x1, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb8b4, 0x54}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8084}, 0x80d0) mknodat$loop(r0, &(0x7f00000003c0)='./file0\x00', 0x10, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000400)=0xffffffff) fchmodat(r2, &(0x7f0000000440)='./file0\x00', 0x41) r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) mknodat(r4, &(0x7f0000000480)='./file2\x00', 0x8000, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r5) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r5) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000000540)={'\x00', 0xffffffff, 0x0, 0x8}) openat$incfs(r0, &(0x7f00000005c0)='.pending_reads\x00', 0x20200, 0x3cd99aeb8ea1dc18) 00:02:05 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_send_signal(r0, 0x33, &(0x7f0000000000)={0x41, 0xffff918d, 0x9}, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+60000}, {0x77359400}}) statx(r0, &(0x7f0000000140)='./file0\x00', 0x1000, 0x10, &(0x7f0000000180)) r4 = syz_mount_image$nfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000380)=[{&(0x7f0000000300)="b44ff84a637781ccefdb82f1f39e410b9069dd9008f9fd56fa54afd593b01a141ea8b6cbbb954b55ee86", 0x2a, 0x88}, {&(0x7f0000000340), 0x0, 0x1}], 0x200000, &(0x7f00000003c0)={[{}, {'\']'}], [{@obj_user}]}) r5 = syz_open_dev$vcsa(&(0x7f0000000440), 0xf2b, 0x41e800) linkat(r4, &(0x7f0000000400)='./file0\x00', r5, &(0x7f0000000480)='./file0/file0\x00', 0x400) r6 = syz_mount_image$nfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x77, 0x1, &(0x7f0000000600)=[{&(0x7f0000000540)="730c7647e7bd345bee3268946e1778fbdae67701346cb95ca10b639a7972559e4016687203e7ef0a55c43e1b843dd5714fd5d8483c73b2535d4fb5e5cff5bb798686ce1cfacc49efff2a7761550980a70402c08d490da0507b08a0a3557e18031effd381636d5ddc2cbc7872097919e6e35fff471208cdfbf88b117f0302689b2777c690966e3fcf88ea638ba0cbb2cd1ff1ebaca4470182bf0309977a", 0x9d, 0x3}], 0x40, &(0x7f0000000640)={[{'\']'}, {'/dev/vcsa#\x00'}, {'+{+'}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '/dev/vcsa#\x00'}}, {@pcr={'pcr', 0x3d, 0x24}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.'}}]}) name_to_handle_at(r6, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@xfs_parent={0x1c, 0x82, {0x8000, 0x5, 0x2}}, &(0x7f0000000740), 0x1000) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) clock_settime(0x2, &(0x7f00000007c0)={r7, r8+60000000}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xb8, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x60}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x3, 0x7}, {0x80, 0x2}, {0x2d, 0x2}], "922225a56bf54e67"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x8, 0x1}, {0x1, 0x7}, {0x1, 0x5}], "da2b26824fc753b5"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7f, 0x7}, {0x1f, 0x7}, {0x3f, 0x3}, {0x2, 0x6}, {0x74, 0x2}, {0x0, 0x5}, {0x5, 0x9}, {0x36, 0x3}, {0x7}, {0x9, 0x6}, {0x3f, 0x4}], "d04e68aabec7c8ef"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x6, 0x7}, {0x3}, {0x2, 0x4}, {0x4, 0x3}, {0x9, 0x1}, {0x40}, {0x4, 0x3}, {0x1}, {0xaf, 0x5}, {0x8, 0x6}, {0x8, 0x3}, {0x7, 0x5}, {}, {0x5, 0x4}, {0x2, 0x2}, {0x6}, {0x3, 0x5}], "aca528fae92efe5c"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x1, 0x1}, {0x0, 0x1}, {0x3, 0x7}], "cd5a457171af5d26"}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x42) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/cpuinfo\x00', 0x0, 0x0) faccessat(r9, &(0x7f00000009c0)='./file0\x00', 0x51) faccessat2(0xffffffffffffffff, &(0x7f0000000a00)='./file0/file0\x00', 0x81, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x51}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20048010) 00:02:05 executing program 6: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000011) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r0, 0xc92, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48c2}, 0x40000) getgid() r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x16c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc5b, 0x75}}}}, [@NL80211_ATTR_IE={0x78, 0x2a, [@ibss={0x6, 0x2, 0x7f}, @preq={0x82, 0x67, @not_ext={{0x0, 0x1}, 0x4, 0xff, 0x170, @broadcast, 0x96, "", 0x8, 0x7, 0x7, [{{0x1, 0x0, 0x1}, @device_a, 0x10001}, {{0x0, 0x0, 0x1}, @device_b, 0x31}, {{}, @device_b, 0x1}, {{}, @broadcast, 0x10d}, {{0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x1f}, {{}, @broadcast, 0x1ff}]}}, @ibss={0x6, 0x2, 0x6}, @erp={0x2a, 0x1, {0x1, 0x1}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0xc8, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4, 0xfa, 0x22, 0x7}}, @random_vendor={0xdd, 0xb1, "26365d027a3e37a8a856e1e82bd3765899b323629cede67d7d51332f1a2d46bb98935dc910c979dcad4878fd564ba63b3f9eba9073e6cd1a921ca8cd6290ded4a9bdf85f22ab940f193610612137b883f0be0bd8c0ec83520a1bc5b321a51ea9d441a5ca5f4aa5b57c6dfdb64fc50091bce1624ecad7ad9531deaa2a973c53d92f94cd12cb79c42b4500f04e746378e0c514a333d91663325214f516f6682f7471e33b93fdc3c585622ee2d93422ad0100"}, @erp={0x2a, 0x1, {0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0x64, 0xa7}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x400c890}, 0x8000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r4, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x30}}, 0x20000400) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x124, r3, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0xd4, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2f38854c}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x122}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x43bfea1d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x200}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6e}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000901) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8300020}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r5, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48841}, 0x48800) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r5, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42}, 0x4010) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x9c, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x2400800c}, 0x40090) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8820}, 0x54) r7 = syz_open_dev$vcsa(&(0x7f0000000e00), 0x7, 0x420200) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x74, r8, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8804) 00:02:05 executing program 7: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x141a40, 0x2d) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000040)={0xf0d6, 0x1}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x80, 0x1) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f00000001c0)={'\x00', 0xb5, 0x1, 0x2}) statx(r0, &(0x7f0000000240)='./file0\x00', 0x6000, 0x2, &(0x7f0000000280)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2f}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4c8c4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, &(0x7f0000000500)={0x8, 0xa}) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40044) statx(r3, &(0x7f0000000680)='./file0\x00', 0x2000, 0x1, &(0x7f00000006c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f00000008c0)={'\x00', 0x5, 0x3}) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x8001) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000a40)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) [ 114.787582] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.790520] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.795230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.801516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.805617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.860822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.865791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.868571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.874277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.878743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.880567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.885661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.907472] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.910652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.916193] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.923984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.926866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.937753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.942871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.958230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.002200] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.039609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.043573] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.046364] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.048401] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.053668] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.057131] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.062821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.076426] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.136794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.155822] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.160534] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.162910] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.164800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.171271] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.175889] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.202240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.223556] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.269578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.300227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.870598] Bluetooth: hci0: command tx timeout [ 116.933408] Bluetooth: hci1: command tx timeout [ 117.061373] Bluetooth: hci3: command tx timeout [ 117.062985] Bluetooth: hci2: command tx timeout [ 117.125112] Bluetooth: hci6: command tx timeout [ 117.253313] Bluetooth: hci7: command tx timeout [ 117.254130] Bluetooth: hci4: command tx timeout [ 117.382099] Bluetooth: hci5: command tx timeout [ 118.918271] Bluetooth: hci0: command tx timeout [ 118.981234] Bluetooth: hci1: command tx timeout [ 119.109080] Bluetooth: hci2: command tx timeout [ 119.109535] Bluetooth: hci3: command tx timeout [ 119.173051] Bluetooth: hci6: command tx timeout [ 119.301098] Bluetooth: hci7: command tx timeout [ 119.301548] Bluetooth: hci4: command tx timeout [ 119.429029] Bluetooth: hci5: command tx timeout [ 120.965157] Bluetooth: hci0: command tx timeout [ 121.031020] Bluetooth: hci1: command tx timeout [ 121.158997] Bluetooth: hci3: command tx timeout [ 121.159457] Bluetooth: hci2: command tx timeout [ 121.221193] Bluetooth: hci6: command tx timeout [ 121.349076] Bluetooth: hci4: command tx timeout [ 121.349548] Bluetooth: hci7: command tx timeout [ 121.478342] Bluetooth: hci5: command tx timeout [ 123.013295] Bluetooth: hci0: command tx timeout [ 123.077058] Bluetooth: hci1: command tx timeout [ 123.205235] Bluetooth: hci2: command tx timeout [ 123.205755] Bluetooth: hci3: command tx timeout [ 123.269389] Bluetooth: hci6: command tx timeout [ 123.397280] Bluetooth: hci7: command tx timeout [ 123.397817] Bluetooth: hci4: command tx timeout [ 123.526988] Bluetooth: hci5: command tx timeout [ 175.451905] syz-executor.6 (290) used greatest stack depth: 23672 bytes left [ 177.768680] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.771567] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.773838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.776422] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.778102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.781399] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.790008] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.793538] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.797458] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.799252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.917256] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.948802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.962628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.970447] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.974809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.991932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.994842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.997808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.999769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.000874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.002458] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.004393] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.024698] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.027047] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.035456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.057338] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.058751] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.065806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.070542] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.072344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.077160] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.083902] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.088807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.090307] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.091134] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.091980] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.093519] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.096175] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.101467] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.155410] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.846376] Bluetooth: hci1: command tx timeout [ 179.846431] Bluetooth: hci0: command tx timeout [ 180.102066] Bluetooth: hci2: command tx timeout [ 180.165061] Bluetooth: hci4: command tx timeout [ 180.168531] Bluetooth: hci3: command tx timeout [ 180.229045] Bluetooth: hci5: command tx timeout [ 180.485073] Bluetooth: hci6: command tx timeout [ 181.190329] Bluetooth: hci7: command tx timeout [ 181.893066] Bluetooth: hci0: command tx timeout [ 181.896035] Bluetooth: hci1: command tx timeout [ 182.149613] Bluetooth: hci2: command tx timeout [ 182.213247] Bluetooth: hci3: command tx timeout [ 182.213581] Bluetooth: hci4: command tx timeout [ 182.277094] Bluetooth: hci5: command tx timeout [ 182.533143] Bluetooth: hci6: command tx timeout [ 183.238215] Bluetooth: hci7: command tx timeout [ 183.941132] Bluetooth: hci1: command tx timeout [ 183.941371] Bluetooth: hci0: command tx timeout [ 184.197075] Bluetooth: hci2: command tx timeout [ 184.261060] Bluetooth: hci3: command tx timeout [ 184.264005] Bluetooth: hci4: command tx timeout [ 184.325323] Bluetooth: hci5: command tx timeout [ 184.584076] Bluetooth: hci6: command tx timeout [ 185.286063] Bluetooth: hci7: command tx timeout [ 185.989090] Bluetooth: hci1: command tx timeout [ 185.989142] Bluetooth: hci0: command tx timeout [ 186.245081] Bluetooth: hci2: command tx timeout [ 186.310232] Bluetooth: hci4: command tx timeout [ 186.310312] Bluetooth: hci3: command tx timeout [ 186.373423] Bluetooth: hci5: command tx timeout [ 186.631035] Bluetooth: hci6: command tx timeout [ 187.334574] Bluetooth: hci7: command tx timeout [ 240.059475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.064743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.068436] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.070667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.077261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.078797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.080796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.080919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.096926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.100037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.148750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.150804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.152590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.161723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.165704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.172195] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.184839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.210223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.220491] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.255539] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.273147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.277483] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.303470] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.343501] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.346694] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.361265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.363467] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.367831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.385374] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.407371] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.526932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.545619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.570265] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.579739] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.589453] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.591772] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.656724] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.658520] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.681482] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.699667] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.117332] Bluetooth: hci0: command tx timeout [ 242.118633] Bluetooth: hci1: command tx timeout [ 242.245118] Bluetooth: hci2: command tx timeout [ 242.373060] Bluetooth: hci3: command tx timeout [ 242.437649] Bluetooth: hci4: command tx timeout [ 242.501838] Bluetooth: hci5: command tx timeout [ 242.629681] Bluetooth: hci6: command tx timeout [ 242.821068] Bluetooth: hci7: command tx timeout [ 244.165099] Bluetooth: hci0: command tx timeout [ 244.165597] Bluetooth: hci1: command tx timeout [ 244.294005] Bluetooth: hci2: command tx timeout [ 244.421088] Bluetooth: hci3: command tx timeout [ 244.485065] Bluetooth: hci4: command tx timeout [ 244.549198] Bluetooth: hci5: command tx timeout [ 244.678012] Bluetooth: hci6: command tx timeout [ 244.869274] Bluetooth: hci7: command tx timeout [ 246.214014] Bluetooth: hci0: command tx timeout [ 246.214512] Bluetooth: hci1: command tx timeout [ 246.341086] Bluetooth: hci2: command tx timeout [ 246.469811] Bluetooth: hci3: command tx timeout [ 246.533060] Bluetooth: hci4: command tx timeout [ 246.597069] Bluetooth: hci5: command tx timeout [ 246.725092] Bluetooth: hci6: command tx timeout [ 246.917165] Bluetooth: hci7: command tx timeout [ 248.262289] Bluetooth: hci1: command tx timeout [ 248.262810] Bluetooth: hci0: command tx timeout [ 248.389430] Bluetooth: hci2: command tx timeout [ 248.518348] Bluetooth: hci3: command tx timeout [ 248.581217] Bluetooth: hci4: command tx timeout [ 248.645155] Bluetooth: hci5: command tx timeout [ 248.773247] Bluetooth: hci6: command tx timeout [ 248.965160] Bluetooth: hci7: command tx timeout [ 302.934525] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.939144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.943357] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.957521] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.964596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.062052] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.066368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.068830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.081798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.086063] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.095840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.100431] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.104825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.132601] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.138607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.140688] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.141842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.165284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.189279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.192218] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.263479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.273002] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.278750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.339540] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.345689] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.362024] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.377452] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.410820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.441669] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.445861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.457723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.460303] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.464275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.518097] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.545431] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.567419] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.585142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.587417] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.591337] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.612341] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.029226] Bluetooth: hci0: command tx timeout [ 305.157160] Bluetooth: hci1: command tx timeout [ 305.221154] Bluetooth: hci2: command tx timeout [ 305.286362] Bluetooth: hci3: command tx timeout [ 305.477433] Bluetooth: hci4: command tx timeout [ 305.541237] Bluetooth: hci5: command tx timeout [ 305.797117] Bluetooth: hci7: command tx timeout [ 305.925712] Bluetooth: hci6: command tx timeout [ 307.077398] Bluetooth: hci0: command tx timeout [ 307.207003] Bluetooth: hci1: command tx timeout [ 307.270057] Bluetooth: hci2: command tx timeout [ 307.333443] Bluetooth: hci3: command tx timeout [ 307.525468] Bluetooth: hci4: command tx timeout [ 307.589167] Bluetooth: hci5: command tx timeout [ 307.845111] Bluetooth: hci7: command tx timeout [ 307.973093] Bluetooth: hci6: command tx timeout [ 309.125243] Bluetooth: hci0: command tx timeout [ 309.254205] Bluetooth: hci1: command tx timeout [ 309.318311] Bluetooth: hci2: command tx timeout [ 309.382005] Bluetooth: hci3: command tx timeout [ 309.573265] Bluetooth: hci4: command tx timeout [ 309.637054] Bluetooth: hci5: command tx timeout [ 309.893077] Bluetooth: hci7: command tx timeout [ 310.022982] Bluetooth: hci6: command tx timeout [ 311.173061] Bluetooth: hci0: command tx timeout [ 311.302072] Bluetooth: hci1: command tx timeout [ 311.366425] Bluetooth: hci2: command tx timeout [ 311.430870] Bluetooth: hci3: command tx timeout [ 311.622141] Bluetooth: hci4: command tx timeout [ 311.685048] Bluetooth: hci5: command tx timeout [ 311.942346] Bluetooth: hci7: command tx timeout [ 312.069132] Bluetooth: hci6: command tx timeout [ 365.530848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.541159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.543762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.558469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.563092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.636027] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.640455] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.654110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.663631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.668337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.750500] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.755541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.758618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.769890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.786727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.823384] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.832233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.837523] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.850517] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.862714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.921429] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.927587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.931586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.934788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.943771] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.948637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.950928] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.956856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.962680] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.964718] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.012318] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.016872] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.028900] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.031394] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.036308] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.040750] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.047511] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.050763] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.056796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.066682] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.623984] Bluetooth: hci0: command tx timeout [ 367.750035] Bluetooth: hci1: command tx timeout [ 367.878032] Bluetooth: hci2: command tx timeout [ 367.941055] Bluetooth: hci3: command tx timeout [ 368.005349] Bluetooth: hci4: command tx timeout [ 368.072035] Bluetooth: hci6: command tx timeout [ 368.133168] Bluetooth: hci5: command tx timeout [ 368.133875] Bluetooth: hci7: command tx timeout [ 369.670150] Bluetooth: hci0: command tx timeout [ 369.798898] Bluetooth: hci1: command tx timeout [ 369.926654] Bluetooth: hci2: command tx timeout [ 369.990977] Bluetooth: hci3: command tx timeout [ 370.054431] Bluetooth: hci4: command tx timeout [ 370.118059] Bluetooth: hci6: command tx timeout [ 370.182333] Bluetooth: hci7: command tx timeout [ 370.182822] Bluetooth: hci5: command tx timeout [ 371.718094] Bluetooth: hci0: command tx timeout [ 371.846048] Bluetooth: hci1: command tx timeout [ 371.975156] Bluetooth: hci2: command tx timeout [ 372.038652] Bluetooth: hci3: command tx timeout [ 372.101283] Bluetooth: hci4: command tx timeout [ 372.165297] Bluetooth: hci6: command tx timeout [ 372.229949] Bluetooth: hci5: command tx timeout [ 372.230485] Bluetooth: hci7: command tx timeout [ 373.765020] Bluetooth: hci0: command tx timeout [ 373.893010] Bluetooth: hci1: command tx timeout [ 374.022194] Bluetooth: hci2: command tx timeout [ 374.088204] Bluetooth: hci3: command tx timeout [ 374.150015] Bluetooth: hci4: command tx timeout [ 374.214015] Bluetooth: hci6: command tx timeout [ 374.278056] Bluetooth: hci7: command tx timeout [ 374.278596] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 00:07:15 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff817afc36 RDX=fffffbfff0c81d83 RSI=0000000000000008 RDI=ffffffff8640ec10 RBP=ffff888008c4b780 RSP=ffff8880361173a0 R8 =0000000000000000 R9 =fffffbfff0c81d82 R10=ffffffff8640ec17 R11=ffff88806ce3b950 R12=ffff88806ce3b950 R13=0000000000000200 R14=ffffea0000ce7d40 R15=ffff8880247cb6f0 RIP=ffffffff817afc3e RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6e5374c6f4 CR3=000000003460a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f6e5375b47000007f6e5375af20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff88806cf31850 RBP=ffffffff85c1bac0 RSP=ffff88806cf08990 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b0c2 R11=000000000000bb21 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf08a78 RIP=ffffffff815184a3 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f863ab771f0 CR3=00000000253b4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000