Warning: Permanently added '[localhost]:6551' (ECDSA) to the list of known hosts. 2025/06/07 04:14:57 fuzzer started 2025/06/07 04:14:57 dialing manager at localhost:40003 syzkaller login: [ 102.512821] cgroup: Unknown subsys name 'net' [ 102.677304] cgroup: Unknown subsys name 'cpuset' [ 102.718682] cgroup: Unknown subsys name 'rlimit' 2025/06/07 04:15:21 syscalls: 217 2025/06/07 04:15:21 code coverage: enabled 2025/06/07 04:15:21 comparison tracing: enabled 2025/06/07 04:15:21 extra coverage: enabled 2025/06/07 04:15:21 setuid sandbox: enabled 2025/06/07 04:15:21 namespace sandbox: enabled 2025/06/07 04:15:21 Android sandbox: enabled 2025/06/07 04:15:21 fault injection: enabled 2025/06/07 04:15:21 leak checking: enabled 2025/06/07 04:15:21 net packet injection: enabled 2025/06/07 04:15:21 net device setup: enabled 2025/06/07 04:15:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/07 04:15:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/07 04:15:21 USB emulation: enabled 2025/06/07 04:15:21 hci packet injection: enabled 2025/06/07 04:15:21 wifi device emulation: enabled 2025/06/07 04:15:21 802.15.4 emulation: enabled 2025/06/07 04:15:21 fetching corpus: 0, signal 0/0 (executing program) 2025/06/07 04:15:22 starting 8 fuzzer processes 04:15:22 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000200)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, &(0x7f0000000240)={@dev}, &(0x7f0000000280)=0x14) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x25c, 0x14, 0x400, 0x70bd2d, 0x25dfdbfb, {0x15, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "5c112c69fd4f98a8b2e0c3921c0bf1aa66e995e6852b4d0738560b314ed9bdcd4548a91c005494b1499d553c1e0c6f1bb7344b60c6970057eb697b782a5c3f84b5dde6fe6a92b7a1562f5eb012f3d572a96658c568fb2139cfc9ec363390df681e6b9ec900ef2e2a6b0e52e828e6d1cf830c23b42cb9372cb9ff344016815b9634bd0f6b61fe22733a53f79a362d38bf076dbd568ca71a2b6cee39d3b41615af9b0f55f9602b3aa459fe58e47ea250f59caec88d03f733ea8c5eb2"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "0784d008145051b268815fbf94c7736df656c8f20169d76eb2ccbb246bce4e2f99f2296444e56cfb12e65cafa9"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "05522a47c024ce7d799c33756e57fc090f84809b8433836c24036c1d58b43a47a384373f00742b9fce7cd7f4051bdcecdffd28745a4f8fb389dc24e2e1c63dbf0949f8839766a30a39dd214a7225ce41bffed9259a71793778a252e76569f3fe0f97be5d3e47c7000e70af2a98698ae138991c42dbe35427a08a819180c23b28f92ce5873f06a061f69bbd83b58f1d5564e032dd70db2233201da23eb00440d31f6671cc478ad87cc142fc20dfa64b66b9b1abc57abbf39e6ed8ce69f0315254456ebf0a9852d5bd9de2e01dc057d52b921ed2262dfc2d4de363cb8c54a5565d96f56d50"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "58200b806ec5900fbbabf8547f7df679cf7d219e5ccacb1469cd362a5192ebb43d8c811926605de87556286092d2aeb026aa2cb21e7b73ea2c8925a375d71bb5076eb5dd124ae39a45ad250311e4c25af6ca45803ea5c32cfb07ed77e0b7ea485d4712f8641e3a"}]}, 0x25c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1a}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x22213a97}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7ff}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040800}, 0x4040000) r1 = syz_open_dev$evdev(&(0x7f0000000780), 0x7fffffff, 0x301102) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000007c0)=""/217) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000008c0)='lp\x00', 0x3) r2 = syz_open_dev$vcsn(&(0x7f0000000900), 0x1, 0x6d0082) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000940)={0xaad, 0x9, 0x1, 0x6, 0x9}, 0x14) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000980)={0x6, 0x14, 0xff, 0x100, "faa328999e7f2640398e17e9e88475107596c89f7c9d8fb02a9a8541afe1c68a"}) r3 = syz_open_dev$vcsn(&(0x7f00000009c0), 0x0, 0x404000) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000a00)=""/77) r4 = syz_open_dev$mouse(&(0x7f0000000a80), 0x613d, 0x640) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000ac0)) r5 = syz_open_dev$vcsn(&(0x7f0000000b00), 0xffffffffffffffff, 0x600) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000b40)=""/95) r6 = syz_mount_image$iso9660(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x1f, 0x2, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="dfcbdd2bb50f5115a14cacb216586b3110753a472ab700fde228148d63e7b6f9080e191cfd1327e7cc1ff39cc40334f6d3d1371408f76a08de6fb5b01f0ecac4c00274b75377d0226b66c0449f123b6e028d3a52e6bc5d31d9d31e390685b32a7d7aaea4fc5f835eb3f5712b93d40493767ebc11ba330d44f64e630257ad39a16f95de5d093ce87284e084e6dd6d5332f23624d695994367a50b46", 0x9b, 0xfffffffffffffffc}, {&(0x7f0000000d00)="7118d024bbe1481dfd4d913f999400e4bb82947347e9a7b2497634d57b5f22262bedd3b6ab748690f10a78bbec8e4b35815e59206e7478bb9850d6aa67e42a26d51935eda6bb9524bd02c89a4107359c08279581566d65cefa0a48d13d728c926c9694001bd6b4fee64c4e4aa896321052c4e0283c509ff11c637a824e3d12590392b6dd623a25f654876331190ac069d186a6b70a89de", 0x97, 0x3}], 0x210008, &(0x7f0000000e00)={[{@nocompress}, {@sbsector={'sbsector', 0x3d, 0x40}}, {@nojoliet}], [{@dont_measure}, {@fsname={'fsname', 0x3d, '/dev/input/mouse#\x00'}}, {@fowner_lt={'fowner<', 0xee00}}, {@appraise}, {@measure}]}) faccessat2(r6, &(0x7f0000000ec0)='./file0\x00', 0x2a, 0x0) 04:15:22 executing program 1: socketpair(0xb, 0x2, 0x3398, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x38}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x54}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x34}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x4008098) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x120, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xff, 0x29}}}}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc010}, 0xc000) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x400, 0x70bd25, 0x1, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7e}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x80) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000480)=0x10000, 0x4) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x127240, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xff}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x69c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x15}, 0x4000004) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x2}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2c811}, 0xc000) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000780), 0x240000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, r7, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x391}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6e}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x800]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x1, 0x3]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40855}, 0x24000084) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r7, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, 0x2c}}, 0x80) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f0000000ac0)={@id={0x2, 0x0, @c}}) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) 04:15:22 executing program 2: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x8000, 0x8a) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000142}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "114e2a8bca"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b47887f1e1"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6231e7e869"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), r0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20048045) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20048001) r4 = socket$netlink(0x10, 0x3, 0x1d) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000) r7 = openat$incfs(0xffffffffffffffff, &(0x7f00000008c0)='.pending_reads\x00', 0x4140, 0x21) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r1, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8014) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r4) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r8, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x49}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8041) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r8, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x28c, 0x2a}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044041}, 0x10000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 04:15:22 executing program 3: name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@FILEID_INO32_GEN={0x8, 0x1, {0xb9, 0xfffff949}}, &(0x7f0000000080), 0x400) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)={{0x77359400}, {r0, r1/1000+60000}}) symlinkat(&(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00') mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file2\x00', 0xc8, 0x21ede7c3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3f9, 0x70}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_NOP={0x0, 0x4}, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000400)={@id={0x2, 0x0, @a}}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@isofs_parent={0x14, 0x2, {0x400, 0x4, 0xffe0, 0x7, 0x0, 0x4}}, &(0x7f0000000500), 0x400) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x404040, 0x0) unlinkat(r4, &(0x7f0000000580)='./file2\x00', 0x0) linkat(r4, &(0x7f00000005c0)='./file1\x00', r4, &(0x7f0000000600)='./file0/file0\x00', 0x400) faccessat(r4, &(0x7f0000000640)='./file2\x00', 0x4) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r2, 0x1, 0x70bd26, 0x4, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x4000001) r5 = syz_open_dev$mouse(&(0x7f0000000780), 0xef7, 0x10000) mknodat$loop(r5, &(0x7f00000007c0)='./file1\x00', 0x10, 0x0) r6 = socket(0x26, 0x5, 0xac) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000b80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000840)={0x2e8, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc3, 0x7f}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x23e, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @tim={0x5, 0xcc, {0xde, 0xf9, 0x1, "c7207d706929e9a7b4d25b909c083654d675c7c1e84f3aeb0af8c42c07254d41f9aaa745a275d55e22f4e817326f197dd27794056d7020ccd52be96d53732ae33b4981f1a67164df7a28b19b1292cf97c5f626b018565a20b99a949631022f7c29f80070e75c1ddaff5031489e48101966b3a0e7755a7e981912335ba2b7b1016628d7598c3da5c1d6efce38a5c084274bed62f95064aa94f7c77a992874df87ae88f5e984a76586b5845f536d37696721f758100c63aa25de1e92337d290c9195e5584162b0a99ee1"}}, @perr={0x84, 0x122, {0x40, 0x12, [@ext={{}, @device_b, 0x1f, @broadcast, 0x35}, @not_ext={{}, @broadcast, 0x1, "", 0x18}, @not_ext={{}, @device_a, 0x9d, "", 0x15}, @not_ext={{}, @device_b, 0x7c15, "", 0x11}, @ext={{}, @device_b, 0x2, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xffff3d6b, "", 0x32}, @not_ext={{}, @broadcast, 0x4, "", 0x21}, @ext={{}, @device_a, 0x0, @broadcast, 0x41}, @ext={{}, @device_b, 0x5, @device_b, 0x31}, @ext={{}, @device_a, 0x0, @broadcast, 0x15}, @ext={{}, @broadcast, 0xfff, @broadcast, 0x14}, @ext={{}, @device_a, 0x1, @device_b, 0x27}, @not_ext={{}, @broadcast, 0x0, "", 0x14}, @ext={{}, @device_a, 0xff, @device_b, 0x3b}, @ext={{}, @broadcast, 0x2, @device_a, 0x3c}, @not_ext={{}, @device_b, 0x1c8800, "", 0x20}, @not_ext={{}, @device_a, 0xfffffffd, "", 0x23}, @not_ext={{}, @device_b, 0x7, "", 0xb}]}}, @ibss={0x6, 0x2, 0xbb77}, @rann={0x7e, 0x15, {{0x1, 0xf}, 0xe1, 0xc8, @broadcast, 0xffff, 0x3, 0x2}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x3f, 0x48}}, @link_id={0x65, 0x12, {@random="735e806ffc36", @device_b, @device_b}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8ce89884e739"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dc68ff69e811"}, @NL80211_ATTR_IE={0x53, 0x2a, [@ht={0x2d, 0x1a, {0x300, 0x0, 0x4, 0x0, {0xffffffffffff0001, 0x6, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x2}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}}, @dsss={0x3, 0x1, 0xad}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @peer_mgmt={0x75, 0x16, {0x1, 0x40, @void, @val=0x1b, @val="3fd799afa60949246c95832a5414b8af"}}, @ibss={0x6, 0x2, 0x8}, @supported_rates={0x1, 0x6, [{0x30}, {0x24}, {0xc}, {0x3}, {0x30}, {0xc}]}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x81}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x8000}, 0x80) [ 127.274692] audit: type=1400 audit(1749269722.704:7): avc: denied { execmem } for pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:15:22 executing program 4: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/19) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000040)=[0x9, 0x10001]) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x8, 0x2) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x200000) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)) r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x9, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f00000001c0)={@id={0x2, 0x0, @auto="c5dc5d09aeab95bd1437aa24bb20644b"}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000200)={{0x0, 0xb6, 0x6, 0x1, 0x80000000, 0x200, 0x1, 0x7ff, 0x1, 0x9, 0x4, 0x9, 0x3, 0x7, 0x9}}) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000001200)={0xa0000010}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000001240)=[0x63, 0x1f4a]) connect$netlink(r2, &(0x7f0000001280)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x47}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x10) r4 = syz_open_dev$mouse(&(0x7f00000013c0), 0x7, 0x581084) write$nbd(r4, &(0x7f0000001400)={0x67446698, 0x1, 0x3, 0x2, 0x3, "49a40694374ef3353011466512cf72488ddba780f0cd465a8beda701901897ef3d131d224dff21a8da017db12db2f4b265cf2aa5417442a37db47818c3ccfce9cf92f11d0ac369f3de73abce2b807af778cdd2f2a2e5af7cd4a25c1eaa7e5edc7ec050fe4d61fd2fc6518bf8316b4856cc9cbd9262f588677fb81d1011d3c104e76e799e8d6760cdce693d9b10e17cb09442e435bfbc897c452fee6c07f9336888d51aaaf3bf111e3eb0e313e1e81eed57586de1af7dd2f3a47e57c8745159d43d5cf5de6575089dff57a6a417770eea18938fbf"}, 0xe4) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000001500)={0x9, 0x9, 0xffff, 0x7f, 0x10000, 0x1}) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001540)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000001580)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28) epoll_wait(r2, &(0x7f00000015c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x80) 04:15:22 executing program 5: sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, 0x0, 0x2b0, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4c410}, 0x4001) r0 = syz_open_dev$mouse(&(0x7f00000002c0), 0x5, 0x10000) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x41}}}}, [@NL80211_ATTR_STA_FLAGS={0x2c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x6, 0x2]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1000}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r1, 0x118, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x2000c051) r2 = syz_open_dev$mouse(&(0x7f0000000580), 0x1, 0x10c01) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4090) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x88, r3, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980), 0x2000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r5, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9622, 0x2}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000b00), 0x80, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x48, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x45}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x14044880}, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r4) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x5c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c085}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000e00)=0x1, &(0x7f0000000e40)=0x4) 04:15:22 executing program 6: syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0x280080) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000040)=""/190) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x8, 0x80) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000005, 0x4010, r0, 0x10000000) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x2, 0x1) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x4) r2 = syz_open_dev$mouse(&(0x7f0000000240), 0x6, 0x38280) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000280)={{0x0, 0x4, 0x6, 0x10001, 0x80000000, 0x8, 0x6, 0x3f, 0x2, 0x1, 0x1, 0x6, 0x0, 0x0, 0x2}}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001280), 0x11b400, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f00000012c0)={r3, 0x5}) openat$bsg(0xffffffffffffff9c, &(0x7f00000022c0), 0x1, 0x0) r5 = socket(0x8, 0x6, 0x8) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000002300), 0x4) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x78, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x26}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8f63}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5a}, @NL80211_ATTR_VENDOR_DATA={0x38, 0xc5, "288f28a83e1509914fa1fbfb86c223c584e194d3c57800d6c0ea0fbc5517c129724ceca08cc96519ed3f3d59b0b8dc81c8189979"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80000001}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xff}]}, 0x78}}, 0x40004) r6 = openat$incfs(r4, &(0x7f0000002480)='.pending_reads\x00', 0x327000, 0x0) linkat(r6, &(0x7f00000024c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000002500)='./file0\x00', 0x400) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x6c, 0x0, 0x410, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_io_uring_setup(0x1e23, &(0x7f0000002680)={0x0, 0xcafe, 0x2, 0x3, 0xc6, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000002700)=0x0, &(0x7f0000002740)) syz_io_uring_submit(r7, 0x0, &(0x7f00000028c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000002780), &(0x7f0000002880)='./file0\x00', 0x10, 0x6000}, 0x81) 04:15:22 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40005) r1 = socket(0x3, 0x1, 0x4) epoll_wait(r0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x14) r3 = syz_open_dev$evdev(&(0x7f0000000340), 0x8, 0x400000) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000380)=""/226) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x400200, 0x0) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f00000004c0)=""/15) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x12202, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000540), 0x484202, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}}, 0x20000840) r6 = syz_open_dev$vcsn(&(0x7f00000006c0), 0x8, 0x151000) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000700)) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000780), r5) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r7, 0x8, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000054}, 0x4c40) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000880)) [ 128.701752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.707179] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.710567] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.719280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.726682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.757857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.769045] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.771325] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.778402] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.784453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.826945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.830992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.833257] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.839017] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.844273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.875712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.887152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.903415] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.929016] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.940011] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.953246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.955876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.980582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.982855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.988356] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.995710] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.004058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.012173] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.016749] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.022187] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.027184] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 129.036107] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.045089] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 129.068921] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.089219] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 129.093088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.098083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.107310] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.108012] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.114181] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 130.775605] Bluetooth: hci0: command tx timeout [ 130.838596] Bluetooth: hci1: command tx timeout [ 130.901907] Bluetooth: hci2: command tx timeout [ 131.095249] Bluetooth: hci5: command tx timeout [ 131.095268] Bluetooth: hci3: command tx timeout [ 131.157583] Bluetooth: hci6: command tx timeout [ 131.157596] Bluetooth: hci7: command tx timeout [ 131.223570] Bluetooth: hci4: command tx timeout [ 132.822869] Bluetooth: hci0: command tx timeout [ 132.885559] Bluetooth: hci1: command tx timeout [ 132.950709] Bluetooth: hci2: command tx timeout [ 133.142632] Bluetooth: hci3: command tx timeout [ 133.142779] Bluetooth: hci5: command tx timeout [ 133.205566] Bluetooth: hci7: command tx timeout [ 133.205779] Bluetooth: hci6: command tx timeout [ 133.269582] Bluetooth: hci4: command tx timeout [ 134.869585] Bluetooth: hci0: command tx timeout [ 134.934079] Bluetooth: hci1: command tx timeout [ 134.998640] Bluetooth: hci2: command tx timeout [ 135.190065] Bluetooth: hci3: command tx timeout [ 135.190561] Bluetooth: hci5: command tx timeout [ 135.254419] Bluetooth: hci6: command tx timeout [ 135.255875] Bluetooth: hci7: command tx timeout [ 135.317965] Bluetooth: hci4: command tx timeout [ 136.917683] Bluetooth: hci0: command tx timeout [ 136.982404] Bluetooth: hci1: command tx timeout [ 137.045880] Bluetooth: hci2: command tx timeout [ 137.238447] Bluetooth: hci3: command tx timeout [ 137.238581] Bluetooth: hci5: command tx timeout [ 137.301715] Bluetooth: hci7: command tx timeout [ 137.302625] Bluetooth: hci6: command tx timeout [ 137.365821] Bluetooth: hci4: command tx timeout [ 191.788848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.793613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.796767] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.806715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.812188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.851938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.860052] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.862464] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.871086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.878534] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.936340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.951192] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.954006] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.968003] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.984135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.073120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.082769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.099910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.106737] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.123462] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.125455] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.146401] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.156830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.164007] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.168805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.172383] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.188375] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.192056] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.199226] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.200059] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.201234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.220362] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.231182] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.236966] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.244030] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.323934] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 192.346197] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 192.358880] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 192.374794] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 192.387976] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.879001] Bluetooth: hci0: command tx timeout [ 193.942555] Bluetooth: hci1: command tx timeout [ 194.070580] Bluetooth: hci2: command tx timeout [ 194.261749] Bluetooth: hci3: command tx timeout [ 194.325575] Bluetooth: hci4: command tx timeout [ 194.389685] Bluetooth: hci5: command tx timeout [ 194.390256] Bluetooth: hci6: command tx timeout [ 194.453713] Bluetooth: hci7: command tx timeout [ 195.925625] Bluetooth: hci0: command tx timeout [ 195.989827] Bluetooth: hci1: command tx timeout [ 196.117670] Bluetooth: hci2: command tx timeout [ 196.309769] Bluetooth: hci3: command tx timeout [ 196.373864] Bluetooth: hci4: command tx timeout [ 196.437676] Bluetooth: hci6: command tx timeout [ 196.438269] Bluetooth: hci5: command tx timeout [ 196.502994] Bluetooth: hci7: command tx timeout [ 197.975544] Bluetooth: hci0: command tx timeout [ 198.037556] Bluetooth: hci1: command tx timeout [ 198.165678] Bluetooth: hci2: command tx timeout [ 198.358164] Bluetooth: hci3: command tx timeout [ 198.421561] Bluetooth: hci4: command tx timeout [ 198.487534] Bluetooth: hci6: command tx timeout [ 198.487949] Bluetooth: hci5: command tx timeout [ 198.549574] Bluetooth: hci7: command tx timeout [ 200.021865] Bluetooth: hci0: command tx timeout [ 200.086566] Bluetooth: hci1: command tx timeout [ 200.215535] Bluetooth: hci2: command tx timeout [ 200.405897] Bluetooth: hci3: command tx timeout [ 200.469756] Bluetooth: hci4: command tx timeout [ 200.533719] Bluetooth: hci5: command tx timeout [ 200.534217] Bluetooth: hci6: command tx timeout [ 200.597807] Bluetooth: hci7: command tx timeout [ 254.056196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.060180] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.065476] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.078087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.085931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.213537] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.227829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.230995] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.239717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.244817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.474011] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.480255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.485352] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.493093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.498060] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.504019] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.509982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.531375] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 254.535060] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.538781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.542428] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.550777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 254.571125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.587846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 254.595344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 254.637313] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.644034] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.652098] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.669982] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.672316] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.677264] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.688112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.696228] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.698453] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.707409] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.712442] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.772095] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.775267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.787235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.795089] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.149675] Bluetooth: hci0: command tx timeout [ 256.342706] Bluetooth: hci1: command tx timeout [ 256.661761] Bluetooth: hci3: command tx timeout [ 256.662571] Bluetooth: hci2: command tx timeout [ 256.853577] Bluetooth: hci4: command tx timeout [ 256.854274] Bluetooth: hci7: command tx timeout [ 256.917576] Bluetooth: hci6: command tx timeout [ 256.981613] Bluetooth: hci5: command tx timeout [ 258.198765] Bluetooth: hci0: command tx timeout [ 258.391774] Bluetooth: hci1: command tx timeout [ 258.710591] Bluetooth: hci2: command tx timeout [ 258.711086] Bluetooth: hci3: command tx timeout [ 258.902595] Bluetooth: hci7: command tx timeout [ 258.903087] Bluetooth: hci4: command tx timeout [ 258.966621] Bluetooth: hci6: command tx timeout [ 259.031887] Bluetooth: hci5: command tx timeout [ 260.245573] Bluetooth: hci0: command tx timeout [ 260.437969] Bluetooth: hci1: command tx timeout [ 260.758896] Bluetooth: hci3: command tx timeout [ 260.759379] Bluetooth: hci2: command tx timeout [ 260.949617] Bluetooth: hci4: command tx timeout [ 260.950090] Bluetooth: hci7: command tx timeout [ 261.014780] Bluetooth: hci6: command tx timeout [ 261.077787] Bluetooth: hci5: command tx timeout [ 262.295740] Bluetooth: hci0: command tx timeout [ 262.486618] Bluetooth: hci1: command tx timeout [ 262.806901] Bluetooth: hci2: command tx timeout [ 262.807391] Bluetooth: hci3: command tx timeout [ 262.999532] Bluetooth: hci7: command tx timeout [ 263.000032] Bluetooth: hci4: command tx timeout [ 263.063931] Bluetooth: hci6: command tx timeout [ 263.125606] Bluetooth: hci5: command tx timeout [ 316.583966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.589767] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.595338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.603434] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.608207] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.658774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.663162] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.666664] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.677003] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.683020] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.938440] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.947816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.964891] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.965996] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.967058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.970425] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.972347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.978157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.998373] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.006757] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.008991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 317.010367] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.014652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.028119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.033018] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.033107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.041956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.063864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.074769] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 317.084473] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.086338] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.109629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.112922] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 317.116982] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.118902] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 317.149261] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.154466] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 317.172889] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 317.187112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.221075] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.679575] Bluetooth: hci0: command tx timeout [ 318.741636] Bluetooth: hci1: command tx timeout [ 319.190729] Bluetooth: hci4: command tx timeout [ 319.191938] Bluetooth: hci3: command tx timeout [ 319.254094] Bluetooth: hci7: command tx timeout [ 319.255353] Bluetooth: hci2: command tx timeout [ 319.256336] Bluetooth: hci5: command tx timeout [ 319.319016] Bluetooth: hci6: command tx timeout [ 320.725889] Bluetooth: hci0: command tx timeout [ 320.789579] Bluetooth: hci1: command tx timeout [ 321.237639] Bluetooth: hci3: command tx timeout [ 321.238121] Bluetooth: hci4: command tx timeout [ 321.301674] Bluetooth: hci7: command tx timeout [ 321.302126] Bluetooth: hci2: command tx timeout [ 321.302399] Bluetooth: hci5: command tx timeout [ 321.365645] Bluetooth: hci6: command tx timeout [ 322.773585] Bluetooth: hci0: command tx timeout [ 322.837567] Bluetooth: hci1: command tx timeout [ 323.285824] Bluetooth: hci3: command tx timeout [ 323.286090] Bluetooth: hci4: command tx timeout [ 323.349702] Bluetooth: hci7: command tx timeout [ 323.350156] Bluetooth: hci5: command tx timeout [ 323.350640] Bluetooth: hci2: command tx timeout [ 323.413772] Bluetooth: hci6: command tx timeout [ 324.821616] Bluetooth: hci0: command tx timeout [ 324.885631] Bluetooth: hci1: command tx timeout [ 325.333790] Bluetooth: hci3: command tx timeout [ 325.334277] Bluetooth: hci4: command tx timeout [ 325.397659] Bluetooth: hci2: command tx timeout [ 325.397947] Bluetooth: hci5: command tx timeout [ 325.398800] Bluetooth: hci7: command tx timeout [ 325.462677] Bluetooth: hci6: command tx timeout [ 378.667377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.672038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.675272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.682166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.687814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.811300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.816328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.820890] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.844455] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.857243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.860808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.865426] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.872287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.883771] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.897675] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.906245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.908659] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.918232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.925395] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.953972] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.956856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.979912] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.987056] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.031116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.047297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.049084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.055011] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.069258] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.074324] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.079742] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.092385] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 379.103024] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.107233] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 379.122404] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.135984] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.164241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.188419] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.212178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.242076] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.253137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.757620] Bluetooth: hci0: command tx timeout [ 380.949589] Bluetooth: hci1: command tx timeout [ 381.013598] Bluetooth: hci3: command tx timeout [ 381.077769] Bluetooth: hci2: command tx timeout [ 381.207559] Bluetooth: hci4: command tx timeout [ 381.269778] Bluetooth: hci6: command tx timeout [ 381.270594] Bluetooth: hci7: command tx timeout [ 381.335534] Bluetooth: hci5: command tx timeout [ 382.805882] Bluetooth: hci0: command tx timeout [ 382.999531] Bluetooth: hci1: command tx timeout [ 383.062695] Bluetooth: hci3: command tx timeout [ 383.126597] Bluetooth: hci2: command tx timeout [ 383.254574] Bluetooth: hci4: command tx timeout [ 383.319711] Bluetooth: hci6: command tx timeout [ 383.320173] Bluetooth: hci7: command tx timeout [ 383.382613] Bluetooth: hci5: command tx timeout [ 384.854580] Bluetooth: hci0: command tx timeout [ 385.045780] Bluetooth: hci1: command tx timeout [ 385.110900] Bluetooth: hci3: command tx timeout [ 385.174582] Bluetooth: hci2: command tx timeout [ 385.303685] Bluetooth: hci4: command tx timeout [ 385.366715] Bluetooth: hci7: command tx timeout [ 385.367230] Bluetooth: hci6: command tx timeout [ 385.429578] Bluetooth: hci5: command tx timeout [ 386.902839] Bluetooth: hci0: command tx timeout [ 387.094595] Bluetooth: hci1: command tx timeout [ 387.159116] Bluetooth: hci3: command tx timeout [ 387.222805] Bluetooth: hci2: command tx timeout [ 387.350620] Bluetooth: hci4: command tx timeout [ 387.414572] Bluetooth: hci7: command tx timeout [ 387.415082] Bluetooth: hci6: command tx timeout [ 387.478717] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 04:20:25 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888016abff58 RCX=ffff888016abf21c RDX=0000000000000004 RSI=ffffffff85c1cbc0 RDI=ffff8880154f9b80 RBP=ffffffff85c1cbc0 RSP=ffff888016abf1f8 R8 =0000000000000001 R9 =ffff888016abf308 R10=000000000003b6cd R11=00000000000c4cf3 R12=ffffffff81354102 R13=ffff888016abf21c R14=0000000000000004 R15=0000000000000004 RIP=ffffffff815140aa RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6abe159540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6abe22a710 CR3=0000000030774000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81353e09 RBX=0000000000000001 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff85c1cbc0 RBP=ffff88802c247848 RSP=ffff88802c247770 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6cd R11=00000000000c4cf3 R12=0000000000000000 R13=ffff88802c247838 R14=ffff88801655b700 R15=ffff88802c2477f0 RIP=ffffffff8151b0e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f19989354a1 CR3=000000002c753000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000