Warning: Permanently added '[localhost]:41781' (ECDSA) to the list of known hosts. 2025/06/01 08:33:30 fuzzer started 2025/06/01 08:33:31 dialing manager at localhost:34361 syzkaller login: [ 100.133645] cgroup: Unknown subsys name 'net' [ 100.243675] cgroup: Unknown subsys name 'cpuset' [ 100.275125] cgroup: Unknown subsys name 'rlimit' 2025/06/01 08:33:45 syscalls: 204 2025/06/01 08:33:45 code coverage: enabled 2025/06/01 08:33:45 comparison tracing: enabled 2025/06/01 08:33:45 extra coverage: enabled 2025/06/01 08:33:45 setuid sandbox: enabled 2025/06/01 08:33:45 namespace sandbox: enabled 2025/06/01 08:33:45 Android sandbox: enabled 2025/06/01 08:33:45 fault injection: enabled 2025/06/01 08:33:45 leak checking: enabled 2025/06/01 08:33:45 net packet injection: enabled 2025/06/01 08:33:45 net device setup: enabled 2025/06/01 08:33:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/01 08:33:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/01 08:33:45 USB emulation: enabled 2025/06/01 08:33:45 hci packet injection: enabled 2025/06/01 08:33:45 wifi device emulation: enabled 2025/06/01 08:33:45 802.15.4 emulation: enabled 2025/06/01 08:33:45 fetching corpus: 0, signal 0/0 (executing program) 2025/06/01 08:33:46 starting 8 fuzzer processes 08:33:46 executing program 0: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0x9, 0x2, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0)=0x1, 0x2) r2 = syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x20000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x1}, 0xc93) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x8010, r2, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x6, 0x1, {0x0, r4, r2}}, 0x7) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) exit_group(0x0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x50}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1c63}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x288}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2d3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000380)=[r2, r2, 0xffffffffffffffff, r2, r2], 0x5) syz_io_uring_setup(0x3269, &(0x7f00000003c0)={0x0, 0x8a23, 0x8, 0x1, 0x139, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000017) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004001) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000700)=""/211, 0xd3}, {&(0x7f0000000800)=""/235, 0xeb}, {&(0x7f0000000900)=""/81, 0x51}, {&(0x7f0000000980)=""/84, 0x54}, {&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000000a80)=""/53, 0x35}, {&(0x7f0000000ac0)=""/73, 0x49}, {&(0x7f0000000b40)=""/94, 0x5e}, {&(0x7f0000000bc0)=""/231, 0xe7}, {&(0x7f0000000cc0)=""/54, 0x36}], 0xa) openat$cgroup_type(r2, &(0x7f0000000dc0), 0x2, 0x0) r6 = fsopen(&(0x7f0000000e00)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000e40)='0000:00:10.0\x00', &(0x7f0000000e80)="c6bf2b777e", 0x5) 08:33:46 executing program 1: sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0xc041) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x13, 0x7, '/usr/sbin/ntpd\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:logrotate_var_lib_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1f0, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x154, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "ca8a67ea4d28dec23a5197df83663020beb37a607ae8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "876774a0ebccf32da0cae44ca9beb6ac96c3184067ac1e4f02f0e0f081a0e9dfa4"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb7, 0x3, "b7ab47d94fd3b99f69151a1b95cf3f3213777d5c3ee41c2014af30bb5e91c764092ba084ebe2d240c27efca8177b3cfbea062d4c988995d2d961f99512e94db0324d9d717d62c3ac910f987f0a89cb91f297f5d2be7f3238cf3f043ee736e089c76721faa7d157fc22a76ec7708800145b6818d32298eb69695fa564f1e9f4e111e6d83d637c51fce09c3034d45bcf4c8f0fdedbf577788064cc9e085a1eda6083508f5d0ad94507c0a25e4f99172eb46eca35"}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e84c2af}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffab}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r5, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008851}, 0x80) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_log_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r9, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r0) ioperm(0x81, 0x9, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, 0x0, 0xa10, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:xen_device_t:s0\x00'}]}, 0x44}}, 0x20000084) 08:33:46 executing program 2: r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) r1 = perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0xff, 0x7, 0x5, 0x0, 0x6, 0x420, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x8, 0x9}, 0x3466, 0x0, 0xa5, 0x0, 0x100000000, 0x1, 0x5, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0x2, 0x1, 0x7f, 0x0, 0x3f, 0x41, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x620, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0xa00, 0xfffc000000000000, 0x3af, 0x2, 0x7, 0x4b, 0x90f5, 0x0, 0x3, 0x0, 0x255}, 0x0, 0x5, r1, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x80, 0x3, 0x9, 0x81, 0x3, 0x0, 0x9, 0x8400, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffb, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x58212, 0x6, 0x6, 0x9, 0x8, 0x2, 0x0, 0x0, 0xfffff001, 0x0, 0x1}, 0xffffffffffffffff, 0xf, r1, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000002c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0x40000031) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) inotify_add_watch(r3, &(0x7f0000000380)='./file0\x00', 0x100) r5 = perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x80, 0x8, 0x19, 0xd5, 0x0, 0x2, 0x40080, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000003c0), 0x4}, 0x2020, 0x20, 0xd5d000, 0x5, 0x1, 0xfffffff7, 0x3, 0x0, 0xffff, 0x0, 0x200}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000480)='\x00', &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0xc907, @bearer=@udp='udp:syz1\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040051) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_TEE={0x21, 0x59eb46163bd1b79b, 0x0, @fd_index=0x9, 0x0, 0x0, 0x4, 0x0, 0x1, {0x0, 0x0, r5}}, 0x9) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "499972c5530f66ac94e5f89fc7c1d0b0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40880) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), r6) r7 = syz_open_dev$vcsu(&(0x7f0000000800), 0x8, 0x20001) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000780)='NLBL_MGMT\x00', &(0x7f00000007c0)='./file0\x00', r7) fspick(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x1) 08:33:46 executing program 3: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)={'syztnl1\x00', r0, 0x7, 0x41, 0xffffffff, 0x7ff, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x66, 0x0, 0xf, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) r2 = fork() ptrace$getsig(0x4202, r2, 0x9, &(0x7f00000001c0)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x7) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x340000d0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x40080) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x440c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xfff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x229}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4040810) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000a80)={&(0x7f0000000680), 0xc, &(0x7f0000000a40)={&(0x7f0000000700)={0x30c, r4, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x40}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x40}, @NL80211_ATTR_FILS_ERP_REALM={0x22, 0xfa, "0e81906d458d3c942491ea5eb33d023f2130543875ea4c52429a63f3c702"}, @NL80211_ATTR_FILS_ERP_RRK={0xff, 0xfc, "d4dba3cddeb99066dd00835aa370952726a5a95039562dbe2373ae2b1c4d87d4607c350e8727dea246aa0fdaf2768456c61813c15a1c86bef7742ce92b49fd0c0f05c4b196861cdbe51aa12840fcd61b7bde220605fbf1bdc5c6dae44ce18effb619ca6eb7631b9cb4e55ed53e96ce2092f90ec043fdd525b22448d034f2422989615a0bb3406d77fad40e2352bb6b256a5bb32675fbce891fb19b55c26e8f1be001944faf6439b74ba44dd892fb85b30881035ce74f2ac01b9f1c3bfb845b4acb0d4f7c02d79271e14833428ab5ac142163a4c01aa7f2e62c46a773609fb57452240d1e8e5c85e70ff79ac25ab67f53230095f6afb8e533ca9248"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}], @NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfb11}, @NL80211_ATTR_FILS_ERP_REALM={0x4e, 0xfa, "011504f267eba79428e6d1a8fc2c90a5735a436444e98b8b5b6633e069e0ad36459f81374d95d9ac8e4e00ae8f811328d6e9c96fc73926ae6ec262adb5522b3cc61fbc035f996f7ed5ab"}, @NL80211_ATTR_FILS_ERP_REALM={0xdf, 0xfa, "0a804bf4be80dd977525dc2907de86b3867a95765b8806d62de0bfff2cae593ceb75ca211ade7fd32b13960e5cf9fce8fe2119f19c3ef0a5a07dec64edd0a40b638fc96ccd4ad4abaa1227ddda0d727ab8f7ea8d51e9ce815e2cd39cc2641725eb81e49aebe63362224ece2f13edc51859cf150f5450ef9cf1b002c626c81a388dccc8e73cd691c5a9987d630d9464639b0359b49b19a6e838ea7304998a7c76ed6be9ed29f2f3f5786c3b7698de02f7ca4646e22806444c9e054296828cc6727d14ac553971dcee08c1e77cc60aae2013b8e880f8697a76e90fa4"}, @NL80211_ATTR_FILS_ERP_REALM={0x73, 0xfa, "ba8acd89902f3da055502129bf8d0523aac46c3ca6f3b6154bc2e50759c3c064ecc4665499ef9c3df91ff593671e59af6bfd800246a8bc3abcd0ec04fa550b0a4d93a838b5a48d952455ebe957f85749fb7a8ed2b1659baf102e38369df5d3047aff3bf8a13ae1636544c64839b132"}]]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040811) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x40}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, 0x0, 0x103, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x5e}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) [ 115.031644] audit: type=1400 audit(1748766826.441:7): avc: denied { execmem } for pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:33:46 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c004) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}]}, 0x64}}, 0x40000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x4b07, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008810}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc0e7, 0x72}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x18, 0xbd, [0x4, 0x9, 0x2, 0x1, 0xdb80, 0xc000, 0xbecd, 0x1f, 0x8, 0x56c]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x24, 0x1}, {0x30}, {0x0, 0x1}, {0xc, 0x1}, {0x24}, {0x36, 0x1}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8001}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x99}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r5 = socket(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc91d, 0x69}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) getsockname(r3, &(0x7f0000000880)=@phonet, &(0x7f0000000900)=0x80) r6 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x9, 0x480000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r2) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x11000840}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfb33, 0x30}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r8 = fsmount(r6, 0x1, 0x76) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x481}, 0x8000) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) 08:33:46 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5a}, @NL80211_ATTR_MAC={0xa, 0x6, @random="54662f6162a3"}]}, 0x30}}, 0x20000000) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x9, 0x42002) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x120, r3, 0xb41fcf87afc15ec, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfb1, 0x19}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}], @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80806001}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r0, 0x600, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x24000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_IE={0x1b5, 0x2a, [@measure_req={0x26, 0xd6, {0xb1, 0x4, 0x1f, "8f6e8e54f65b98a629984e548a0d9a0d3236603070e656d72462a977ad65dacd585b0d675b1eaef05f13517dc347c0a103c0d07e178826256bd6a30fedb286a178fccdae01ad2a721fa8c27995fdae917dfedf59fed67058a514c8aca66c4cd201b264c13343b237098236b4231e66108f8a11c12a61c0bcc83fb7303da00118f45c4107c7cbbe5ee855a3075a3b7d58540b0854852e735b3a03c55adb0f0446042b681e7799b7754383918b5b5f159b44bb5c111bbbef77ac03733262b3670192e1d14bf52997a0bf764e91c0d472a91cba0e"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xee, 0xb1, 0xff}}, @measure_req={0x26, 0xac, {0x4, 0x80, 0x6, "689b80d41965d9ca9a565445898d72e53bfbafbe55b8310df9aee179653cb4baaae43660cc2d25465a0535ffc92c7a80f8bec3951f493f8056916399245894c2b0e0b6515c9daccfe46d935b071ede3b2075a5ade9d75da861beeca9bf788137972af9803ebf0e04bcb101b5a56b5817c91f5390508c4ac2fd9f77bb6dfd6fbbb63f929fafe9a7aecfecb5c64722b7f80e89de2fd3921b9d022b2d3cfe0ae802fdaab57b55a4e40c47"}}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0x4a}, @ssid={0x0, 0x6, @default_ap_ssid}, @mic={0x8c, 0x10, {0x25e, "59dcbd4b7968", @short="fcd16f917dd73975"}}]}, @NL80211_ATTR_SSID={0x23, 0x34, @random="17b13255d65bd0c5e22bc812ecc62a77b16b8a563d6990355b2496a2380c8b"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x24, 0x34, @random="ee73db1c0d739b99c98385cd6a9a1ad47c713b2347ca8586e370708682b8267a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="105d359b4a12"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x9010}, 0x800) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20800}, 0x4040800) r5 = fsmount(r2, 0x1, 0x70) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x9, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x200080d1}, 0xc150) r6 = fspick(r5, &(0x7f0000000ac0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000b00)='\x03\x03\x03\x03\x03\x03', &(0x7f0000000b40)='./file0\x00', 0xffffffffffffffff) r7 = fsmount(r5, 0x1, 0x4) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xf0, r0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_IE={0xce, 0x2a, [@fast_bss_trans={0x37, 0xaa, {0x4, 0x4, "f075c86baf6308f43aad0297e29235c9", "40638f281d4baa54ac20533350a4797cc8cf8930d0efb31180f8c1574fcedb7f", "01a288d58d4f68c94ce2feafcc3651ecff97d8575edc104012791de068a496b3", [{0x2, 0xb, "979c10240f1b6d10447695"}, {0x4, 0x1e, "c195785e5e624939ad2d825b49f861a5bbee8823a8467390452d3bccd37d"}, {0x1, 0x7, "1544b0dd7b4933"}, {0x3, 0x20, "74f2f026994fb9ced839b7c13f24191c35386420ebe951c724d3c9ed675e5de9"}]}}, @dsss={0x3, 0x1, 0x9}, @rann={0x7e, 0x15, {{0x0, 0x3c}, 0x2, 0x3, @device_a, 0x8, 0x81, 0x7}}, @supported_rates={0x1, 0x2, [{0x30}, {0x6c, 0x1}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20004015}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), 0xffffffffffffffff) r8 = syz_open_dev$vcsu(&(0x7f0000000d80), 0x3f, 0x101000) fspick(r8, &(0x7f0000000dc0)='./file0\x00', 0x1) 08:33:46 executing program 6: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x14, 0x80401, 0x23456, {0x0, r0}}, 0x40) r1 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000180)='sync\x00', 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x5, 0x300) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x3) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8}]}, 0x50}}, 0x880) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffb) r5 = socket(0xf, 0x3, 0x7) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r5) r6 = socket$inet6(0xa, 0x6, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 08:33:46 executing program 7: r0 = fork() ptrace$getsig(0x4202, r0, 0x5, &(0x7f0000000000)) ptrace$getsig(0x4202, r0, 0xf1, &(0x7f0000000080)) r1 = getpgrp(r0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x7f, 0x40, 0x3f, 0x5, 0x0, 0x0, 0x8402, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xdaa3, 0x4, @perf_bp={&(0x7f0000000100), 0x7}, 0x28044, 0x0, 0x6, 0x8, 0x7, 0x2, 0x3, 0x0, 0x5, 0x0, 0xca}, r1, 0xb, 0xffffffffffffffff, 0x18) ptrace$cont(0x1f, r0, 0x1, 0x4) ptrace$cont(0x9, r0, 0x7fffffff, 0x1000) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) r2 = getpid() ptrace$getsig(0x4202, r2, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sched_getscheduler(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) r3 = getpid() sched_getscheduler(r3) ptrace$getsig(0x4202, r0, 0xecd, &(0x7f0000000300)) syz_genetlink_get_family_id$smc(&(0x7f0000000380), 0xffffffffffffffff) getgid() ptrace$cont(0x27, r3, 0x4, 0x80000000) [ 116.543610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.549071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.551865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.555116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.562493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.568381] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.577901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.581010] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.590004] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.601050] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.604439] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.606775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.612464] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.615483] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.618456] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.627516] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.633407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.660089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.662802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.666559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.668995] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.670665] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.690026] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 116.692889] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 116.694930] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 116.704345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.709704] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 116.711596] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 116.713791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 116.717125] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.732629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.734294] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 116.740917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.750759] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.760817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.770967] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 116.773375] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.808233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.823885] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.827300] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 118.671964] Bluetooth: hci0: command tx timeout [ 118.735234] Bluetooth: hci1: command tx timeout [ 118.799278] Bluetooth: hci3: command tx timeout [ 118.799946] Bluetooth: hci2: command tx timeout [ 118.801388] Bluetooth: hci7: command tx timeout [ 118.863262] Bluetooth: hci4: command tx timeout [ 118.863816] Bluetooth: hci6: command tx timeout [ 118.927281] Bluetooth: hci5: command tx timeout [ 120.719761] Bluetooth: hci0: command tx timeout [ 120.783478] Bluetooth: hci1: command tx timeout [ 120.847298] Bluetooth: hci3: command tx timeout [ 120.847750] Bluetooth: hci2: command tx timeout [ 120.848212] Bluetooth: hci7: command tx timeout [ 120.911327] Bluetooth: hci6: command tx timeout [ 120.911790] Bluetooth: hci4: command tx timeout [ 120.977194] Bluetooth: hci5: command tx timeout [ 122.767494] Bluetooth: hci0: command tx timeout [ 122.831207] Bluetooth: hci1: command tx timeout [ 122.895281] Bluetooth: hci7: command tx timeout [ 122.895737] Bluetooth: hci2: command tx timeout [ 122.897221] Bluetooth: hci3: command tx timeout [ 122.959237] Bluetooth: hci4: command tx timeout [ 122.959688] Bluetooth: hci6: command tx timeout [ 123.023208] Bluetooth: hci5: command tx timeout [ 124.815275] Bluetooth: hci0: command tx timeout [ 124.879614] Bluetooth: hci1: command tx timeout [ 124.943299] Bluetooth: hci3: command tx timeout [ 124.943757] Bluetooth: hci2: command tx timeout [ 124.944229] Bluetooth: hci7: command tx timeout [ 125.007433] Bluetooth: hci6: command tx timeout [ 125.007912] Bluetooth: hci4: command tx timeout [ 125.071566] Bluetooth: hci5: command tx timeout [ 178.910082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.914640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.918469] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.928910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.936274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.978643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.992466] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.994913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.998543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.010446] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.011901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.014387] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.015438] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.030425] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.043096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.067394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.071411] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.078887] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.080372] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.083725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.092869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.096378] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.104278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.106763] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 179.115175] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.125995] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 179.127845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 179.132345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.160091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.163456] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 179.171340] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.176987] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.181536] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.199332] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 179.217569] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.223987] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 179.225688] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.231253] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 179.247363] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 179.253022] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 181.008559] Bluetooth: hci0: command tx timeout [ 181.071295] Bluetooth: hci2: command tx timeout [ 181.071931] Bluetooth: hci1: command tx timeout [ 181.137259] Bluetooth: hci4: command tx timeout [ 181.200250] Bluetooth: hci3: command tx timeout [ 181.263266] Bluetooth: hci6: command tx timeout [ 181.329079] Bluetooth: hci5: command tx timeout [ 181.392230] Bluetooth: hci7: command tx timeout [ 183.056352] Bluetooth: hci0: command tx timeout [ 183.120198] Bluetooth: hci2: command tx timeout [ 183.120656] Bluetooth: hci1: command tx timeout [ 183.184274] Bluetooth: hci4: command tx timeout [ 183.248306] Bluetooth: hci3: command tx timeout [ 183.312421] Bluetooth: hci6: command tx timeout [ 183.375256] Bluetooth: hci5: command tx timeout [ 183.441104] Bluetooth: hci7: command tx timeout [ 185.103234] Bluetooth: hci0: command tx timeout [ 185.168785] Bluetooth: hci1: command tx timeout [ 185.169414] Bluetooth: hci2: command tx timeout [ 185.233246] Bluetooth: hci4: command tx timeout [ 185.295422] Bluetooth: hci3: command tx timeout [ 185.360843] Bluetooth: hci6: command tx timeout [ 185.423210] Bluetooth: hci5: command tx timeout [ 185.487241] Bluetooth: hci7: command tx timeout [ 187.152039] Bluetooth: hci0: command tx timeout [ 187.215383] Bluetooth: hci1: command tx timeout [ 187.215881] Bluetooth: hci2: command tx timeout [ 187.279231] Bluetooth: hci4: command tx timeout [ 187.344552] Bluetooth: hci3: command tx timeout [ 187.409181] Bluetooth: hci6: command tx timeout [ 187.472531] Bluetooth: hci5: command tx timeout [ 187.536456] Bluetooth: hci7: command tx timeout [ 241.250085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.253753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.257404] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.277891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.282788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.285950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.295702] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.303918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.319909] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.327977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.348380] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.362946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.366115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.377386] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.385602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.387389] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.392821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.397765] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.404313] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.428426] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.580542] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.583054] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.585316] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.589588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.593239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.624469] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.648076] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.661770] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.663734] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.670798] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.671006] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.676678] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.680305] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.681717] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.726685] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.743761] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.757960] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.759681] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.843494] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.857576] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.343512] Bluetooth: hci0: command tx timeout [ 243.407616] Bluetooth: hci1: command tx timeout [ 243.472424] Bluetooth: hci3: command tx timeout [ 243.472974] Bluetooth: hci2: command tx timeout [ 243.663324] Bluetooth: hci4: command tx timeout [ 243.727573] Bluetooth: hci7: command tx timeout [ 243.920286] Bluetooth: hci5: command tx timeout [ 243.983254] Bluetooth: hci6: command tx timeout [ 245.392631] Bluetooth: hci0: command tx timeout [ 245.456335] Bluetooth: hci1: command tx timeout [ 245.519550] Bluetooth: hci3: command tx timeout [ 245.522184] Bluetooth: hci2: command tx timeout [ 245.712368] Bluetooth: hci4: command tx timeout [ 245.776459] Bluetooth: hci7: command tx timeout [ 245.967218] Bluetooth: hci5: command tx timeout [ 246.032223] Bluetooth: hci6: command tx timeout [ 247.440535] Bluetooth: hci0: command tx timeout [ 247.504436] Bluetooth: hci1: command tx timeout [ 247.567419] Bluetooth: hci2: command tx timeout [ 247.567459] Bluetooth: hci3: command tx timeout [ 247.759293] Bluetooth: hci4: command tx timeout [ 247.824311] Bluetooth: hci7: command tx timeout [ 248.015273] Bluetooth: hci5: command tx timeout [ 248.080482] Bluetooth: hci6: command tx timeout [ 249.487261] Bluetooth: hci0: command tx timeout [ 249.552214] Bluetooth: hci1: command tx timeout [ 249.617174] Bluetooth: hci2: command tx timeout [ 249.617201] Bluetooth: hci3: command tx timeout [ 249.807246] Bluetooth: hci4: command tx timeout [ 249.871217] Bluetooth: hci7: command tx timeout [ 250.063761] Bluetooth: hci5: command tx timeout [ 250.129178] Bluetooth: hci6: command tx timeout [ 303.667262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.672849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.679354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.687465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.692797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.737623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.752772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.758709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.773307] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.784633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.922226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.925363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.929599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.935625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.939353] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.984453] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.018765] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.034749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.052909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.069796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.071034] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.082421] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.090320] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.092570] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.092955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.099709] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.104059] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.108989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.114719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.127010] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.253531] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 304.261008] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 304.265851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 304.272732] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.276815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.657236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.677781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.754736] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 304.817804] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 304.852861] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.744288] Bluetooth: hci0: command tx timeout [ 305.808793] Bluetooth: hci1: command tx timeout [ 305.999350] Bluetooth: hci2: command tx timeout [ 306.193208] Bluetooth: hci5: command tx timeout [ 306.319653] Bluetooth: hci6: command tx timeout [ 306.384539] Bluetooth: hci3: command tx timeout [ 306.575290] Bluetooth: hci4: command tx timeout [ 306.895409] Bluetooth: hci7: command tx timeout [ 307.792229] Bluetooth: hci0: command tx timeout [ 307.856421] Bluetooth: hci1: command tx timeout [ 308.047240] Bluetooth: hci2: command tx timeout [ 308.239393] Bluetooth: hci5: command tx timeout [ 308.367852] Bluetooth: hci6: command tx timeout [ 308.432266] Bluetooth: hci3: command tx timeout [ 308.623223] Bluetooth: hci4: command tx timeout [ 308.943367] Bluetooth: hci7: command tx timeout [ 309.839357] Bluetooth: hci0: command tx timeout [ 309.904535] Bluetooth: hci1: command tx timeout [ 310.095480] Bluetooth: hci2: command tx timeout [ 310.287310] Bluetooth: hci5: command tx timeout [ 310.417109] Bluetooth: hci6: command tx timeout [ 310.480192] Bluetooth: hci3: command tx timeout [ 310.672264] Bluetooth: hci4: command tx timeout [ 310.992384] Bluetooth: hci7: command tx timeout [ 311.887375] Bluetooth: hci0: command tx timeout [ 311.951311] Bluetooth: hci1: command tx timeout [ 312.143509] Bluetooth: hci2: command tx timeout [ 312.337181] Bluetooth: hci5: command tx timeout [ 312.464224] Bluetooth: hci6: command tx timeout [ 312.527213] Bluetooth: hci3: command tx timeout [ 312.719556] Bluetooth: hci4: command tx timeout [ 313.039961] Bluetooth: hci7: command tx timeout [ 366.114987] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.121962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.124764] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.132602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.137241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.194504] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.202666] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.207658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.221450] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.231188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.437467] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.450071] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.452415] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.455953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.465018] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.479740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.483577] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.506402] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.533566] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.543607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.561121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.561348] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.587733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.609315] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.612733] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.617122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.623840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.629445] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.649815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.736753] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.752837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.768691] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.798750] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.839782] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.841953] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.850704] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.870591] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.878664] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.896404] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.931416] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.207383] Bluetooth: hci0: command tx timeout [ 368.272324] Bluetooth: hci1: command tx timeout [ 368.527415] Bluetooth: hci2: command tx timeout [ 368.655238] Bluetooth: hci3: command tx timeout [ 368.720270] Bluetooth: hci5: command tx timeout [ 368.911420] Bluetooth: hci4: command tx timeout [ 368.975255] Bluetooth: hci6: command tx timeout [ 369.039844] Bluetooth: hci7: command tx timeout [ 370.255764] Bluetooth: hci0: command tx timeout [ 370.319618] Bluetooth: hci1: command tx timeout [ 370.575279] Bluetooth: hci2: command tx timeout [ 370.705183] Bluetooth: hci3: command tx timeout [ 370.767232] Bluetooth: hci5: command tx timeout [ 370.959383] Bluetooth: hci4: command tx timeout [ 371.023390] Bluetooth: hci6: command tx timeout [ 371.087322] Bluetooth: hci7: command tx timeout [ 372.304157] Bluetooth: hci0: command tx timeout [ 372.367200] Bluetooth: hci1: command tx timeout [ 372.623443] Bluetooth: hci2: command tx timeout [ 372.751445] Bluetooth: hci3: command tx timeout [ 372.815192] Bluetooth: hci5: command tx timeout [ 373.007537] Bluetooth: hci4: command tx timeout [ 373.071193] Bluetooth: hci6: command tx timeout [ 373.135335] Bluetooth: hci7: command tx timeout [ 374.351306] Bluetooth: hci0: command tx timeout [ 374.415968] Bluetooth: hci1: command tx timeout [ 374.672210] Bluetooth: hci2: command tx timeout [ 374.800185] Bluetooth: hci3: command tx timeout [ 374.863386] Bluetooth: hci5: command tx timeout [ 375.055231] Bluetooth: hci4: command tx timeout [ 375.119271] Bluetooth: hci6: command tx timeout [ 375.183347] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 08:38:49 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffea00001d1300 RCX=ffffffff81a1ca0f RDX=ffff888016a8b700 RSI=ffffffff81a1cb3d RDI=ffffea00001d1330 RBP=ffffea00001d1300 RSP=ffff88801765fad0 R8 =0000000000000000 R9 =fffff9400003a260 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=ffffea00001d1318 RIP=ffffffff81a1cb41 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3cade7d540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3cadfdd270 CR3=00000000349b6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880e571b000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff888026687798 RDI=ffff88806cf31850 RBP=ffff888026680000 RSP=ffff888026687318 R8 =0000000000000001 R9 =ffff8880266873d8 R10=000000000003b6bd R11=0000000000025b74 R12=ffff888026687301 R13=ffff8880266873e0 R14=ffff888026687798 R15=ffff888026687398 RIP=ffffffff815aba10 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562edb601080 CR3=00000000346db000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff00ffffffffffffffffffffff0000ff XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69 XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000