Warning: Permanently added '[localhost]:64925' (ECDSA) to the list of known hosts. 2025/01/21 04:00:57 fuzzer started 2025/01/21 04:00:58 dialing manager at localhost:44833 syzkaller login: [ 58.693224] cgroup: Unknown subsys name 'net' [ 58.800242] cgroup: Unknown subsys name 'cpuset' [ 58.839009] cgroup: Unknown subsys name 'rlimit' [ 65.528474] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 76.017538] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/21 04:01:16 syscalls: 2217 2025/01/21 04:01:16 code coverage: enabled 2025/01/21 04:01:16 comparison tracing: enabled 2025/01/21 04:01:16 extra coverage: enabled 2025/01/21 04:01:16 setuid sandbox: enabled 2025/01/21 04:01:16 namespace sandbox: enabled 2025/01/21 04:01:16 Android sandbox: enabled 2025/01/21 04:01:16 fault injection: enabled 2025/01/21 04:01:16 leak checking: enabled 2025/01/21 04:01:16 net packet injection: enabled 2025/01/21 04:01:16 net device setup: enabled 2025/01/21 04:01:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/21 04:01:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/21 04:01:16 USB emulation: enabled 2025/01/21 04:01:16 hci packet injection: enabled 2025/01/21 04:01:16 wifi device emulation: enabled 2025/01/21 04:01:16 802.15.4 emulation: enabled 2025/01/21 04:01:16 fetching corpus: 49, signal 15600/16743 (executing program) 2025/01/21 04:01:16 fetching corpus: 99, signal 18156/20121 (executing program) 2025/01/21 04:01:17 fetching corpus: 149, signal 19142/21881 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/23395 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/24271 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/25136 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/26023 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/26925 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/27800 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/28689 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/29594 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/30491 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/31404 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/32293 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/33185 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/34079 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/34959 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/35721 (executing program) 2025/01/21 04:01:17 fetching corpus: 191, signal 19837/35721 (executing program) 2025/01/21 04:01:21 starting 8 fuzzer processes 04:01:21 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) recvmmsg$unix(r0, &(0x7f0000000100), 0x0, 0x10040, &(0x7f0000000140)={0x0, 0x989680}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x1) getsockopt$netlink(r0, 0x10e, 0xc, &(0x7f00000002c0)=""/67, &(0x7f0000000340)=0x43) recvfrom(r0, &(0x7f0000000380)=""/123, 0x7b, 0x40010101, &(0x7f0000000400)=@in6={0xa, 0x4e22, 0x80000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x3}, 0x80) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x40000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000006c0)=@buf={0xfb, &(0x7f00000005c0)="f1a765038d2820a9d6a99b393849ff518740ea9dc87a87a618b5dd2650195dffa6fe713ec18fea1496f6d2ee0276c34fafa989282770c63ac26e67738b881bdae4017d7fce5d3fc68626b02486c75ecd173705eae3e54ef00516a9cef3b0209a2018413af17b8c037ab2fd46fce69ec6a8038b3a960915216bbbc8140f4a496935c5ce92e271b01b072b36c432ef149bb4fd27571a5d01bc8db7364a2799b8d490853bcc1f7574fc2878e2e7b6a97a06b04fab3b480ad247ef01d41d1f2c5a03e286c3e46a8e44225665ce22d4a437f0db7343a201e43a288d8c1daa528343ffb03f3db07913ba541331d2f484c1203bd690768ed2ed65c6506d64"}) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x9c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9028}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x41}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xc}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x5}, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000880)={0x1, 'vlan1\x00', {}, 0x101}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xa8, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x50, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x4}, {0x23, 0x0, @random="b01c1105794f3b988f6ef6fe01cb978f1ef6804311cbe01c072e337e003be1"}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x424}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xd5}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x6}, {0x8}, {0x8, 0x0, 0xe8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000881) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/class/bdi', 0x10840, 0x1) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x6c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xef}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcc7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) 04:01:21 executing program 1: prctl$PR_SET_ENDIAN(0x14, 0x8621ffd180190329) prctl$PR_SET_ENDIAN(0x14, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) prctl$PR_SET_ENDIAN(0x14, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_ENDIAN(0x14, 0xfe32da9c946af73a) prctl$PR_SET_ENDIAN(0x14, 0x1) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x1) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x1) prctl$PR_SET_ENDIAN(0x14, 0x1) prctl$PR_SET_ENDIAN(0x14, 0x1) prctl$PR_SET_ENDIAN(0x14, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x1) prctl$PR_SET_ENDIAN(0x14, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) 04:01:21 executing program 3: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x7, 'veth0_virt_wifi\x00', {0x1f}, 0x1}) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='vlan0\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x884) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400, 0x208) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000280)={0x8, 0x9, 0xffc0000, 0x2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x75e885a5, 0x1000, {{0x1f, 0x4, 0x1, 0x1c, 0x7c, 0x68, 0x0, 0x0, 0x29, 0x0, @local, @local, {[@ssrr={0x89, 0xb, 0x8f, [@loopback, @private=0xa010100]}, @noop, @lsrr={0x83, 0x7, 0x37, [@local]}, @timestamp={0x44, 0x28, 0x8, 0x0, 0x6, [0x7, 0x9, 0xc6b5, 0x6, 0x0, 0x6, 0x8, 0x5, 0x0]}, @end, @generic={0x82, 0xf, "0109c184faf186b30f301623b0"}, @ssrr={0x89, 0xb, 0x41, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}]}, @lsrr={0x83, 0xf, 0x19, [@dev={0xac, 0x14, 0x14, 0x3b}, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x840) sendmsg$nl_generic(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd8, 0x41, 0x300, 0x70bd2a, 0x25dfdbff, {0xc}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x44, 0x0, 0x0, @fd=r2}, @generic="edd04677e1224bc0f868b9e19ef98ab5fd2d7a0c4b70ae316747b65162b26d9643ff91dc2e55f16f3f9e49ccb04ddf5f88112ac4c2420877d2dcb8fe43a700802c1386b57157b6df64205ffb4630dcd8e7410a3017189378baae7e6f7d18a8d5bec997d81afcf569960cdf26f8e93f5b13ff4713e0e874a68c8aeaae5a2b59529561d001df6c4d051c5e2c8e0df33e1d8f69bef326871af9bac51dfbfa4a0c4299d98e053cb6cfee0b5a47444714ff03a0d9e9"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4005}, 0x400c094) sendmsg(r1, &(0x7f0000000940)={&(0x7f0000000680)=@nfc={0x27, 0x1, 0x1, 0x3}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="d8b6ae1bcb11d0d9439e75556fd04f1a273449a258e42f2421c00cf49dc0bdfb6466421911c2f1ee3537d3f9181f57ea65f1cd20782936b26d462752cedc0e17b0596beac3c3aa4cfd40edf108c34db1acc568fd2563419c1b35ad28d03b716aa206ce47cd2c72fe8178782a15a87462485e2d7b3dfa321a5ecda56238acba44b6da6700b5f39250394276531abce1c22f71f0bfc875ecc9b63345093f2651edb8e5ac3a292ad0e9cefb152ddcbd922405fe8d080e24d87f08d5e12853087692f544af02097d85de953adb20cb0228b9edddb3d0f22bb8aedbe83da68bfeab8bccc7b85407786190a082ec9a58ebf1f264ced552bd95c7e5", 0xf8}, {&(0x7f0000000800)="50c5e407c0f36a14ab71786c76b5b7ea2a0c2b8a72a8cec6d78fd484ef81f02f879375f37faf3eead8419b020231abc38d6156d7cd3c5a3f46647238e5d02ec229e2ffe7ca3468083957335b18be02753d89c432f4309c", 0x57}, {&(0x7f0000000880)="e6895001a73ca0ded90ac492cf1129f68e1d233a15c06325fdb67db512b5ffae15e2c36034e60e6d153951919d509cbbdb43fecbabad04ea49d67f07f9e3dfd391ac9093e143f7", 0x47}], 0x3}, 0x80) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x190, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x190}, 0x1, 0x0, 0x0, 0x24044010}, 0x40001) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000c40), 0x34080, 0x0) dup2(r5, r6) r7 = openat$cgroup_type(r2, &(0x7f0000000c80), 0x2, 0x0) fchown(r7, 0x0, 0xffffffffffffffff) 04:01:21 executing program 4: sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000040)={0x1280, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xadac}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7a31}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9ba}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x12b7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_NODE={0x1144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x96, 0x3, "9aeb5b9f9a897fa143126f38fd2fb7d9b3cb5d53ebf2930049d98014777b0b642546e54154db59d190701516b52bedcf13b248ca631fc8b4a23cde056d33edd13467ad380133575fcfe700d38e4c17fdf68eebfbe668bc2bf01987b5761fda646355ecf5869ada1c1f6de0137c773a1d005d787cfef07eccd35479fe23b9983480c35ccb16e8b0c8692416770966bd68648b"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f41801e94b66968fc49dad2711c7fb0961e05d2fa9cc71f6"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0xa, 0x3, "2fe7deb1b56a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "0aa9c9017e59d554d0b45a76171bcd9b07d9a6d8fbb2bc873806"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x25}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2e77}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1966}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x30}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}]}]}, 0x1280}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000805) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000015c0), 0x101400, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001600)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10008090) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001940)=0x0) sendmsg$unix(r2, &(0x7f00000019c0)={&(0x7f0000001740)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f00000017c0)="1c516f3a2af57b57b8ed40567c419de0b59a860d867d94ee917ae01d0ef0545bb8495aba6c76b2c0164b58b159373a37", 0x30}, {&(0x7f0000001800)="b17a3e7ba59182f89bd75999d4617a4bafcd03822fe810b9f75e91b0ac6ab1d15a559bc4bc72726246b6960e24edc6905d2dd292349e4e749b738cec1ef44e52aa0099ca08c59fc9b19346e5a2ebadbb2bc32b78791d10d4172406aa6d7683b01647bd14aaeb2a4f6260b4d0baab239f1882ad265aac28005abc0d621cd289cda95f7cec5bc83eb7bce57f4c7fab0d618de7cd5928594af6837c05ddca73d37a6dc25307453554f7ff1ff54b0dc389f484e945f7a4195ac3124511923f6a47d1b330c08c33330257afdc46f39b08443d1147eb6a16ed82166b687c44768af61d06fae9a2e2efdc6b2555284bf6918d0d99dd1a2508fc", 0xf6}], 0x2, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee01}}}], 0x20, 0x40}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000001a00)={{0xca000000, 0x7ca}, 0x100, './file0\x00'}) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000001c00)={'broute\x00', 0x0, 0x3, 0x2a, [0x7, 0x1, 0x9, 0x1f, 0x2, 0x3], 0x6, &(0x7f0000001b40)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001bc0)=""/42}, &(0x7f0000001c80)=0x78) r5 = accept4(r3, &(0x7f0000001cc0)=@phonet, &(0x7f0000001d40)=0x80, 0x80000) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xfffffeff}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3f}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0xc4801) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000002000), 0x0, 0x80) symlinkat(&(0x7f0000001fc0)='./file0/file0\x00', r7, &(0x7f0000002040)='./file0\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x11, 0x4d5, @udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 04:01:21 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa3}, @l2cap_cid_signaling={{0x9f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0xec}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x5675}}, @l2cap_conf_rsp={{0x5, 0xcf, 0x2a}, {0x6, 0xfff8, 0x8000, [@l2cap_conf_ews={0x7, 0x2, 0xffff}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0xf297, 0x3, 0x7, 0xa385}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8a, 0x5, 0x100, 0x7, 0x9e}}]}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x7ff, 0xd8}}, @l2cap_conf_rsp={{0x5, 0x7f, 0xd}, {0x7, 0x3, 0x8, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3f, 0x2}, {0x3}}, @l2cap_info_rsp={{0xb, 0x3, 0x2f}, {0x7, 0x5e73, "b6c43e3bdf3d8a4fe2378dde725867a3b68a033a5559d79088dc5189220e3466b283b8cb89634f5d117632"}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x4, 0x74}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x1, 0x1}}]}}, 0xa8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x0, 0x6, 0x2, 0x3}}}, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2b}, "a878f1c83e6e9af2037d95e1d5aaf7374b7df4f37cf3d36014f39d601e3329409b814967a07a057e11398d"}, 0x2f) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "ed502da8cb55b151"}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "16cb8357daae3af6"}}}, 0x11) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x158, 0x9a}, "e1ccab92fa884a8bc260eb9a1292ec4a014073d892e1adc8e0fada2635da0a97f058b02577dfec2c22e09bcb0d2b9f2c35cec627e8abf1a0abceff8bc9836ae55700068a9b36eb7a09a6a32b3eee11f83ddafb6aa5fe600e14da8fd5d1d3eb3e4ec85b6ee817b2732d495df8289f174362159cb97e14122ddf1ffd064928b2ecc3d7e834aac5e5ba14b7d236555fdad54e7de7a82c7d0847ab76"}, 0x9e) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2}, "52c1"}, 0x6) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "b4f95d56166c175cc6cd1654f97ee1dc6f86fe4a8071582db7616d4104996c76272aac0d99c35cd8b2b755c9459acf7550c1d911825e24170202108372b570a8bbed8e89c6f1cc6fd7dcd1768629583270782751b9aa13fabcf4ff43877e54e3084e38bf3d8c36630fa9648a0ac0fbb47498cc78189d6e9bd0ec482189bc1b2874b16b82aff7193b218126f5e15d10fbe75d37cb190b39"}, 0x9b) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x8, 0xdf04}}}}, 0x11) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_conf_rsp={{0x5, 0x20, 0x6}, {0x7, 0x8, 0x7fff}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x9, 0x3f}}]}}, 0x1b) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0xc}, {0x8, 0x7, 0x7ff, 0x2, [0x81, 0x8]}}}}, 0x19) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x27}, "4f6b79a64b06d18d1aef19c84724fd8f818def1fcee8865f714cbbed7ef7b1be4c28dd25e804a2"}, 0x2b) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x7fff, 0xbd}}, @l2cap_move_chan_rsp={{0xf, 0x60, 0x4}, {0x8000, 0xfff}}]}}, 0x19) syz_emit_vhci(&(0x7f0000000580)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x20}, "5ce785ed24ac31c862c24a23c043cf5b803f8bf4805f475bbfd45f1ced1cbd2d"}, 0x24) syz_emit_vhci(&(0x7f0000000600)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xe5, 0x7, 0x5, 0x400}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x8}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x7}}, @l2cap_conn_rsp={{0x3, 0xf6, 0x8}, {0x6, 0x0, 0x1, 0x40}}, @l2cap_conf_rsp={{0x5, 0x8, 0x20}, {0xffff, 0xffe0, 0x5, [@l2cap_conf_ews={0x7, 0x2, 0x2e}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0xfa, 0x2, 0x8001, 0x3, 0x80000000, 0x3f}}]}}, @l2cap_conn_rsp={{0x3, 0xf2, 0x8}, {0x7, 0x6, 0xc3, 0x8}}, @l2cap_conf_rsp={{0x5, 0x2, 0x1b}, {0x4, 0x6, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x1, 0x2, 0x3, 0x0, 0x2}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x7c) syz_emit_vhci(&(0x7f0000000680)=@HCI_VENDOR_PKT, 0x2) 04:01:21 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x86100, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$nl_generic(r1, &(0x7f00000013c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f00000000c0)={0x12b4, 0x1c, 0x400, 0x70bd2a, 0x25dfdbfc, {0x13}, [@generic="7c078dd760b098e117f6561f2d70a05275321899613e449b2c2c42bdcf8cd8f2b240679b48d492e42501e041af2b2ac7b3a1f16ca647657b287e09", @typed={0x8, 0x22, 0x0, 0x0, @fd=r0}, @nested={0xad, 0x16, 0x0, 0x1, [@typed={0xc, 0x1f, 0x0, 0x0, @u64=0xffff}, @generic="88853531d488eded1039c2320f39fe6f46", @typed={0x8, 0x4d, 0x0, 0x0, @uid=r3}, @generic="27b757d18a251190ba1643f2b2d851f26dce20b5adabcfebf7bbc2e66c3d334469c0e538a8660393b8e80d0721340674eb9294ca94c0bef457db4776c1b7a41e3ae74af6fc68e1d216a5ff06e10333bca3679bfdff82a08c7d7ce14095ecc439089bcbf774c6bec61df2ad5d8b76d94c0b24544eeacbb24925f015029673df703e3fcf33"]}, @generic="fd5ea6cb", @generic="a2d9ef51be40465a4ed672012b2e86ec1b79944389f68484b88effa977e348283c65be415926743b038275c66ae6b2d4fcf55bf831ac89c67e2312d1c6ec36573acc978be51442c33fc165df9c99e5df1c02a924f271fff965ad728d18133cb79dac97840fa1a199104896fc2a55f47f95cb0062a9183a53a9e70deb121bd6f940f4456b63a7c58e76eb6005611c7c891d0c058507d60c3ad5530bd45e18f6daf08573eec5143942e95058f120139215ec1be8423e23f6a5b537f1f969b2db2db395573466894699196a3e294b79d3152c5328f0d8", @generic="88bdbe2fe89ad00a77987c5f06bb7626e0d6877db076c298729e75ace8d69b94186f431e023ee4e9a0d007bc2d5c6f7ccee3b825468984b8f0929a97c61da51ac7795da219e3e0d9e828d19e58f1c76cf19ced163fb2604fb513c66eda3b3d6b9223afe667bd5ce5ed96569a3dcdd9b5093bf39eaab99e77bfd6146c1dca3944a38071910a644d86d088a8f1896d997e02a1c86589e7ffb4d16454f20d3efcd3b0f1fff0e566528f5560ded263c02a837420a0efcf970df34f7a565bb0d6a6d65a87", @nested={0x100c, 0x68, 0x0, 0x1, [@generic="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", @typed={0x5, 0x65, 0x0, 0x0, @str='\x00'}]}, @typed={0x4, 0x8a}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000000) chown(&(0x7f0000001400)='./file0\x00', r3, r4) r5 = accept4$inet6(r2, &(0x7f0000001440)={0xa, 0x0, 0x0, @private1}, &(0x7f0000001480)=0x1c, 0x1000) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f00000014c0)) execveat(r1, &(0x7f0000001500)='./file0\x00', &(0x7f0000001600)=[&(0x7f0000001540)='/proc/thread-self\x00', &(0x7f0000001580)='][!\x00', &(0x7f00000015c0)='/proc/thread-self\x00'], &(0x7f00000017c0)=[&(0x7f0000001640)='/proc/thread-self\x00', &(0x7f0000001680)='\x00', &(0x7f00000016c0)=',{\xfc[-+(&d\x00', &(0x7f0000001700)='/proc/thread-self\x00', &(0x7f0000001740)='\x00', &(0x7f0000001780)='/proc/thread-self\x00'], 0x1b00) process_mrelease(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000001800)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x3c, 0xd, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4000001) setsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000001940)="be28f1deff1a09c67f32dd03dcf4d5c01110cc90e237b2", 0x17) r7 = pidfd_getfd(r1, r5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000001980)={0x2af, 0x10000, 0x2fa, 0x6}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000001d40)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000001e40)=0xe8) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000001e80)=0x0) syz_mount_image$nfs(&(0x7f00000019c0), &(0x7f0000001a00)='./file0/file0\x00', 0x9, 0x4, &(0x7f0000001cc0)=[{&(0x7f0000001a40)="baab99ec6ad323bddd8f3ddbe8839861358bcce94455d77da1afc2f3b22ad85181e93a6b2ccbf3aa8913a06d55a889e434d0b90ba7e0d8699db251f8", 0x3c, 0x3}, {&(0x7f0000001a80)="a75a379606b9057ae646aec279acac92e7865119d920081e625151f69dd1248dbf92e61a7a4724b0375fa119b9c9004da55f1a0949c68c06c6a5756f1ae82fc2dfc858a08eaa2c7ec38e9401df7eac841a58846f125e12f4267f642feaccd9e3c189780ebd675dc50feedfc5d361dd8fa584854b8b7181ed90431fcad42fdc96197c71ff8be1b2bf395f1203138ef481247a1639f74286df7a511cb1495b02ba6fc1f46313e47a98452abb2d1a7af2f07af797ec78643b77ee7c22c68ccfbf8c649804db01", 0xc5, 0x1}, {&(0x7f0000001b80)="e571a3b13b63e3b801097a4ffc8d9e1cb539dad9d1776c0a97aab2e39cfad7d92fecec22e4174920db24e33ceb039f3fd6f5e7d7aa681bdcfd2b65d9616e5caadf62f56dda8061e094757ae8a66a2dd4aed8df4fe24c6d0254", 0x59}, {&(0x7f0000001c00)="db7089de9ec907f26d73a2f969ad411f6b53c65aedbed83a771e4f9917d25469659ab0c2198585982d9ff886ef1cd32431b0d377f6554df42fd338ef97a5ffa6c358de35e2ee537cb8c9de0fd95dbc4f90b37f065b2f597a96bb3772a72b8fe403a672579032fd91803e547e5ec62212b06fd3eeded50e5e9cd20272b5823b6f76375dc58399e10645d72492e9bb16", 0x8f, 0x50}], 0x1200804, &(0x7f0000001ec0)={[{'+@(/#@:'}], [{@measure}, {@context={'context', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r8}}, {@subj_type={'subj_type', 0x3d, '+}:]*'}}, {@measure}, {@dont_appraise}, {@fowner_eq={'fowner', 0x3d, r9}}]}) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000001f40)={0x0, 0x6}) [ 82.072180] audit: type=1400 audit(1737432081.960:7): avc: denied { execmem } for pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:01:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1b0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x8000, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x24048024) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x1, 0x3, 0x8}) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x19}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netdevsim0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40005) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4c60a1b415cb2f35b370850b0f"}]}, 0x38}}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000008c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={0x318, r3, 0x28e1ca69074a1e6a, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffff9}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ffc32e935c001edf6d8512778fbaef10"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d206ee7e7cfede75ae4e87e066f119ed3ffc543c59507106"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc1}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="159815cb2ae06804910dc631dc0b8239"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6d9db22360715952aa0a6be90d1c7e5c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="98c6272d0d440bb0665b077e68c952e54c90f794a25ca53ad8d912495c030635"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b37daf756e2000aa2c3f213dd973ddac3631fc4ed53411b3"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="85fa29e27ad7cb2f929ad56a7fbe2446"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5fcd681fa244a921"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="55b0cc198fb8f0779d67e69dc8a790df"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ab1434b386d9d7c74a39870f600ee03ead7d3a048eb8001d1404c8d74ee2af0f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e8d11d2bc037c7c62f21fabe3aa809d83f014516932b9dcaaa9a8beb350e2a84"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fdf114bfd47da15186da3a2db53edbec4eb769fa057572bb"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="31e38d63feca484f7e826784778971df"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1728b80e7b54a048"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="23d5f4ec2acc499bc1526bfdfc2760cebc7d585f503e86d15bcb968fa3fb6545"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5593d0ede261186a"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "92c4ed4628b2afdf"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="10c0bb74d70760dd94a90842c5023f4270f73430ab6e5f6c11b0d6e08a634a51"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3eb02e1488232edb357fb0f94e069bdba7b752723295169d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f26fd1991808ea1383d9d288ea1f8a2e5f4894512d6d1045840090fba6610f73"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf140}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f05495dbd5cb89580f87cd2f099101a99bdaecec3eac22a2ff1c80a8b423cdfa"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "963ba86de775d408"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5a47314bb1641438b88df3bb032a62b730386387e3d56100ff69f3cccad3f137"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "444fad8f06a198e5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac1e054141d71ce1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7fb9c1dd6d537445b59db98138a9c43ca2182f82fe66b66e0034edc59d16717e"}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x4008001}, 0x4081) clock_gettime(0x0, &(0x7f0000008180)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000007f00)=[{{&(0x7f0000000900), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000000980)=""/167, 0xa7}, {&(0x7f0000000a40)=""/223, 0xdf}, {&(0x7f0000000b40)=""/208, 0xd0}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/6, 0x6}, {&(0x7f0000001c80)=""/225, 0xe1}, {&(0x7f0000001d80)=""/205, 0xcd}, {&(0x7f0000001e80)=""/152, 0x98}, {&(0x7f0000001f40)=""/106, 0x6a}], 0x9, &(0x7f0000002080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002140)=""/68, 0x44}, {&(0x7f00000021c0)=""/163, 0xa3}, {&(0x7f0000002280)=""/207, 0xcf}, {&(0x7f0000002380)=""/27, 0x1b}, {&(0x7f00000023c0)=""/34, 0x22}, {&(0x7f0000002400)=""/162, 0xa2}, {&(0x7f00000024c0)=""/79, 0x4f}], 0x7, &(0x7f00000025c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002600), 0x6e, &(0x7f0000003700)=[{&(0x7f0000002680)=""/107, 0x6b}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x2, &(0x7f0000003740)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000003880), 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000003900)=""/174, 0xae}, {&(0x7f00000039c0)=""/240, 0xf0}, {&(0x7f0000003ac0)=""/212, 0xd4}], 0x3, &(0x7f0000003c00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x138}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003d40)=""/228, 0xe4}, {&(0x7f0000003e40)=""/176, 0xb0}, {&(0x7f0000003f00)=""/195, 0xc3}, {&(0x7f0000004000)=""/40, 0x28}, {&(0x7f0000004040)=""/192, 0xc0}, {&(0x7f0000004100)=""/202, 0xca}], 0x6, &(0x7f0000004280)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000004300)=@abs, 0x6e, &(0x7f0000005900)=[{&(0x7f0000004380)=""/188, 0xbc}, {&(0x7f0000004440)=""/65, 0x41}, {&(0x7f00000044c0)=""/176, 0xb0}, {&(0x7f0000004580)=""/254, 0xfe}, {&(0x7f0000004680)=""/213, 0xd5}, {&(0x7f0000004780)=""/4096, 0x1000}, {&(0x7f0000005780)=""/163, 0xa3}, {&(0x7f0000005840)=""/174, 0xae}], 0x8, &(0x7f0000005980)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000005a00), 0x6e, &(0x7f0000005ec0)=[{&(0x7f0000005a80)=""/251, 0xfb}, {&(0x7f0000005b80)=""/105, 0x69}, {&(0x7f0000005c00)=""/219, 0xdb}, {&(0x7f0000005d00)=""/130, 0x82}, {&(0x7f0000005dc0)=""/165, 0xa5}, {&(0x7f0000005e80)=""/34, 0x22}], 0x6, &(0x7f0000005f40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000006000), 0x6e, &(0x7f00000063c0)=[{&(0x7f0000006080)=""/169, 0xa9}, {&(0x7f0000006140)=""/156, 0x9c}, {&(0x7f0000006200)=""/188, 0xbc}, {&(0x7f00000062c0)=""/246, 0xf6}], 0x4, &(0x7f0000006400)}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f00000067c0)=[{&(0x7f00000064c0)=""/45, 0x2d}, {&(0x7f0000006500)=""/169, 0xa9}, {&(0x7f00000065c0)=""/17, 0x11}, {&(0x7f0000006600)=""/240, 0xf0}, {&(0x7f0000006700)=""/181, 0xb5}], 0x5, &(0x7f0000006840)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000006900), 0x6e, &(0x7f0000007dc0)=[{&(0x7f0000006980)=""/4096, 0x1000}, {&(0x7f0000007980)=""/182, 0xb6}, {&(0x7f0000007a40)=""/220, 0xdc}, {&(0x7f0000007b40)=""/68, 0x44}, {&(0x7f0000007bc0)=""/12, 0xc}, {&(0x7f0000007c00)=""/139, 0x8b}, {&(0x7f0000007cc0)=""/10, 0xa}, {&(0x7f0000007d00)=""/135, 0x87}], 0x8, &(0x7f0000007e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0xa, 0x10100, &(0x7f00000081c0)={r5, r6+10000000}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000008240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f0000008680)={&(0x7f0000008200)={0x10, 0x0, 0x0, 0x410}, 0xc, &(0x7f0000008640)={&(0x7f0000008280)={0x3c0, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc}}}, [@NL80211_ATTR_IE={0xef, 0x2a, [@random={0x7f, 0xcc, "e1fecbbc6de504415122fa0150bb5b70860d41549ef8b3c82957a6b82f7dcce5a6f9ff7954759def17e1c2afb92b63463fc39fed4a762118deec726a4f7acf71f455a0abcf1df854cd3a287ff6c9818420aabc7202b829ee87958f5dd532cd682afb38571ec4a3b39b29f6d09d09b2de62bb627ff90f35ed256f4724da9e05e46befc1e426d34463b9698ab8cd22b31b2c57ecff9f0be7c9ee19ffc55325ee9ee55faa607f7f7288863198f566e88e81eb6b21cb37744fe263d168aad92018c1404646a9c7ba4c657d1a445f"}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1, 0x0, 0x6, 0x1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x5, 0x49}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8d}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x100}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9b}, @NL80211_ATTR_IE={0x31, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @mic={0x8c, 0x10, {0xfd9, "92df95d20849", @short="4431b7fcfe0e2a10"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x41}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x57, 0x6}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @chsw_timing={0x68, 0x4, {0x6, 0x5}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5a9}, @NL80211_ATTR_IE={0xed, 0x2a, [@ssid={0x0, 0x1c, @random="9544fb374cf0b7fe923f5757c0d3f4984ad5269a4888134fd2a19085"}, @mesh_chsw={0x76, 0x6, {0x5, 0x1, 0x31}}, @chsw_timing={0x68, 0x4, {0x0, 0x401}}, @supported_rates={0x1, 0x3, [{0x1b}, {0x16, 0x1}, {0x12, 0x1}]}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @challenge={0x10, 0x1, 0x24}, @perr={0x84, 0x94, {0x84, 0x8, [@ext={{}, @device_a, 0x101, @device_a, 0x4}, @ext={{}, @broadcast, 0x96, @device_b, 0x41}, @ext={{}, @broadcast, 0x4, @broadcast, 0x28}, @ext={{}, @device_a, 0x1, @broadcast, 0x25}, @ext={{}, @device_b, 0x101, @broadcast, 0x8}, @ext={{}, @device_a, 0x5bd9, @device_a, 0xc}, @ext={{}, @device_b, 0x4, @device_a, 0x2e}, @not_ext={{}, @broadcast, 0x9, "", 0x29}]}}, @link_id={0x65, 0x12, {@random="afb21b6e742a", @device_a, @broadcast}}]}, @NL80211_ATTR_IE={0x15c, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x24, 0x5}}, @gcr_ga={0xbd, 0x6}, @random={0x4, 0xa6, "0d978297a4ccdfe236652a9ba95e35e5ea300ee7af302359b45acd35227d9a1a1e0e38f7e0b6b0c53bf6bc4dfa79dd38b878c5b9187b3d941f3b6db58b38418c27435f814afeb81ef3b668c9add3d63645cb8873ac6c6101b3b6c359a3fca7ae59c60fb079d434148640e65aa55969f53114dcbd8d1907b894d73d5baf3448735ba80091be5d95137714cd85b876e6079a1656f304b8acdd36356f3dd0f5279f80c8f115a63b"}, @challenge={0x10, 0x1, 0x2f}, @random={0x0, 0x9d, "fd98c4f7514428136c71ccdb295b42a6092b4c4a523abd2359ec1c605edbb3a55134e8db09f056eff986b1ec05e5781397b10ececb9afa7d1fe109a8198c0ce8fc523523e32af7de238f59edf16ecdd712740f3b82a74ea1df48dc513ad20273a5a1ac3812368716bf37ad5368c66854eca7beed200fd97175cf0ceb780185ecd53e45614a4b7fc83d997bd388eab548a2407352f2f40e23f395eede95"}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x2000004}, 0x1) r11 = dup(0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f00000086c0), 0x0) getsockname$packet(r9, &(0x7f0000008700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000008740)=0x14) setsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000008780)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, r12}, 0xc) openat$full(0xffffffffffffff9c, &(0x7f00000087c0), 0x501e00, 0x0) 04:01:22 executing program 7: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200000, 0x10, 0x16e2e9ee9d6c90e3}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x800}}, './file1\x00'}) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0xe) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000240)=""/13, 0xd}, {&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x5, &(0x7f00000013c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x10002) openat2(r4, &(0x7f00000014c0)='./file1\x00', &(0x7f0000001500)={0x800, 0x4, 0x10}, 0x18) connect$unix(r2, &(0x7f0000001540)=@abs={0x1, 0x0, 0x4e22}, 0x6e) chroot(&(0x7f00000015c0)='./file0\x00') r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) getpeername$unix(r6, &(0x7f0000001640), &(0x7f00000016c0)=0x6e) open$dir(&(0x7f0000001700)='./file1\x00', 0x101000, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000001780)={{0x1, 0x1, 0x18, r5, {0x2177}}, './file0\x00'}) setxattr$incfs_metadata(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), &(0x7f0000001840)="5db9b55068cbaffe999812394a1ee68ad22634ee1c8a1fe455adbb92f0b2c46ab1c33d97c3f319a45a8223459888bb2af2570a1605e40a93332f731df8ab70d3572054989b1e87b89cd0255521b65446de2ebb8d79a98bd1ebd97b4aeb18ebfdda56b6033f89f50c435fc083ad5bb6b42b20ec6d5c127b01d21a52ffa94672f9d68ad3435fe698ba77554fa3fb45b2a27699c2859419c24ef85e6a76b7206af0f391297b34151c10cbb97785d7c73980b77b0c3ca4c79b784e6c83c759540a526975e0e56a29768d1eea71afacfce9e8ea79a39d0ef83fd305cdbd5c724a6a40b674576d0861b877620ad543", 0xec, 0x0) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000001940)=0x3, 0x4) getpeername$unix(r3, &(0x7f0000001980), &(0x7f0000001a00)=0x6e) ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000001a40)={0x8000, 0xf889}) lsetxattr$trusted_overlay_upper(&(0x7f0000001a80)='./file1\x00', &(0x7f0000001ac0), &(0x7f0000001b00)={0x0, 0xfb, 0xae, 0x1, 0xc9, "6c1c413024fa03d6d73e9892f80cf241", "8d8825976394ba76bd021d084b57d2154195f0853ea824fe492a4d185d53e90849f3368debf1ed58de94ad9aea87c1c4056017c2fd2a89d40b878b3c5e3517175ff42afe8517b0edce9702b4d23ad4e9c0a98b51225f24066e05ffef6a24521487f1a6841de703f915299f4a0c8a9d6b10d0a34040c495cb79cc4925a508406422ad44aabba5b5d50ddec9d1f874434cbf677bea742f3479d5"}, 0xae, 0x3) mount$bind(&(0x7f0000001bc0)='./file1\x00', &(0x7f0000001c00)='./file1\x00', &(0x7f0000001c40), 0x4210, 0x0) lsetxattr(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)=@known='user.incfs.size\x00', &(0x7f0000001d00), 0x0, 0x2) [ 83.547855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.550208] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.552224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.558276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.561577] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.564099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.662741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.666651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.670073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.671876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.673488] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.675489] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.679486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.683330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.684181] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.687126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.689100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.690081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.756973] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.759417] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.769506] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.771126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.774044] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.775799] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.778140] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.782086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.784265] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.787163] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.789048] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.792476] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.797209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.800091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.801659] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.802835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.805875] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.808088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.809904] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.810258] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.811178] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.814656] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.816904] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.818402] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.822093] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.824216] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.826397] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.829312] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.831172] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.833430] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.629137] Bluetooth: hci0: command tx timeout [ 85.757170] Bluetooth: hci1: command tx timeout [ 85.820905] Bluetooth: hci2: command tx timeout [ 85.885218] Bluetooth: hci3: command tx timeout [ 85.885633] Bluetooth: hci4: command tx timeout [ 85.948852] Bluetooth: hci6: command tx timeout [ 85.949037] Bluetooth: hci5: command tx timeout [ 85.949104] Bluetooth: hci7: command tx timeout [ 87.677609] Bluetooth: hci0: command tx timeout [ 87.805060] Bluetooth: hci1: command tx timeout [ 87.868788] Bluetooth: hci2: command tx timeout [ 87.934822] Bluetooth: hci3: command tx timeout [ 87.934973] Bluetooth: hci4: command tx timeout [ 87.996844] Bluetooth: hci6: command tx timeout [ 87.997155] Bluetooth: hci5: command tx timeout [ 87.997769] Bluetooth: hci7: command tx timeout [ 89.724745] Bluetooth: hci0: command tx timeout [ 89.852744] Bluetooth: hci1: command tx timeout [ 89.916792] Bluetooth: hci2: command tx timeout [ 89.981511] Bluetooth: hci4: command tx timeout [ 89.981534] Bluetooth: hci3: command tx timeout [ 90.044828] Bluetooth: hci7: command tx timeout [ 90.044917] Bluetooth: hci5: command tx timeout [ 90.045394] Bluetooth: hci6: command tx timeout [ 91.772736] Bluetooth: hci0: command tx timeout [ 91.900766] Bluetooth: hci1: command tx timeout [ 91.964783] Bluetooth: hci2: command tx timeout [ 92.028925] Bluetooth: hci3: command tx timeout [ 92.029840] Bluetooth: hci4: command tx timeout [ 92.092848] Bluetooth: hci6: command tx timeout [ 92.093560] Bluetooth: hci5: command tx timeout [ 92.094002] Bluetooth: hci7: command tx timeout [ 139.615485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.615606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.826920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.827002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.161820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.161900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.395232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.395313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.984726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.984800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.169254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.169338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.349520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.349588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.556860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.557003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.763461] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 141.763640] Bluetooth: Wrong link type (-22) [ 141.765243] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 141.765304] Bluetooth: Wrong link type (-22) [ 141.766367] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 141.766436] Bluetooth: Wrong link type (-22) [ 141.767492] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 141.767559] Bluetooth: Wrong link type (-22) [ 141.768061] Bluetooth: hci3: SCO packet for unknown connection handle 344 [ 141.768190] Bluetooth: hci3: link tx timeout [ 141.768293] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.789409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.789476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.794416] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 141.794478] Bluetooth: Wrong link type (-22) [ 141.794622] Bluetooth: hci3: link tx timeout [ 141.794698] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.797122] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 141.797167] Bluetooth: Wrong link type (-22) [ 141.797237] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 141.797276] Bluetooth: Wrong link type (-22) [ 141.797348] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 141.797386] Bluetooth: Wrong link type (-22) [ 141.797455] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 141.797494] Bluetooth: Wrong link type (-22) [ 141.797768] Bluetooth: hci3: link tx timeout [ 141.797806] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.809956] Bluetooth: hci3: SCO packet for unknown connection handle 344 [ 141.835978] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 141.836055] Bluetooth: Wrong link type (-22) [ 141.837823] Bluetooth: hci3: link tx timeout [ 141.837880] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa 04:02:21 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa3}, @l2cap_cid_signaling={{0x9f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0xec}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x5675}}, @l2cap_conf_rsp={{0x5, 0xcf, 0x2a}, {0x6, 0xfff8, 0x8000, [@l2cap_conf_ews={0x7, 0x2, 0xffff}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0xf297, 0x3, 0x7, 0xa385}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8a, 0x5, 0x100, 0x7, 0x9e}}]}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x7ff, 0xd8}}, @l2cap_conf_rsp={{0x5, 0x7f, 0xd}, {0x7, 0x3, 0x8, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3f, 0x2}, {0x3}}, @l2cap_info_rsp={{0xb, 0x3, 0x2f}, {0x7, 0x5e73, "b6c43e3bdf3d8a4fe2378dde725867a3b68a033a5559d79088dc5189220e3466b283b8cb89634f5d117632"}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x4, 0x74}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x1, 0x1}}]}}, 0xa8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x0, 0x6, 0x2, 0x3}}}, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2b}, "a878f1c83e6e9af2037d95e1d5aaf7374b7df4f37cf3d36014f39d601e3329409b814967a07a057e11398d"}, 0x2f) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "ed502da8cb55b151"}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "16cb8357daae3af6"}}}, 0x11) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x158, 0x9a}, "e1ccab92fa884a8bc260eb9a1292ec4a014073d892e1adc8e0fada2635da0a97f058b02577dfec2c22e09bcb0d2b9f2c35cec627e8abf1a0abceff8bc9836ae55700068a9b36eb7a09a6a32b3eee11f83ddafb6aa5fe600e14da8fd5d1d3eb3e4ec85b6ee817b2732d495df8289f174362159cb97e14122ddf1ffd064928b2ecc3d7e834aac5e5ba14b7d236555fdad54e7de7a82c7d0847ab76"}, 0x9e) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2}, "52c1"}, 0x6) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "b4f95d56166c175cc6cd1654f97ee1dc6f86fe4a8071582db7616d4104996c76272aac0d99c35cd8b2b755c9459acf7550c1d911825e24170202108372b570a8bbed8e89c6f1cc6fd7dcd1768629583270782751b9aa13fabcf4ff43877e54e3084e38bf3d8c36630fa9648a0ac0fbb47498cc78189d6e9bd0ec482189bc1b2874b16b82aff7193b218126f5e15d10fbe75d37cb190b39"}, 0x9b) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x8, 0xdf04}}}}, 0x11) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_conf_rsp={{0x5, 0x20, 0x6}, {0x7, 0x8, 0x7fff}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x9, 0x3f}}]}}, 0x1b) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0xc}, {0x8, 0x7, 0x7ff, 0x2, [0x81, 0x8]}}}}, 0x19) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x27}, "4f6b79a64b06d18d1aef19c84724fd8f818def1fcee8865f714cbbed7ef7b1be4c28dd25e804a2"}, 0x2b) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x7fff, 0xbd}}, @l2cap_move_chan_rsp={{0xf, 0x60, 0x4}, {0x8000, 0xfff}}]}}, 0x19) syz_emit_vhci(&(0x7f0000000580)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x20}, "5ce785ed24ac31c862c24a23c043cf5b803f8bf4805f475bbfd45f1ced1cbd2d"}, 0x24) syz_emit_vhci(&(0x7f0000000600)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xe5, 0x7, 0x5, 0x400}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x8}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x7}}, @l2cap_conn_rsp={{0x3, 0xf6, 0x8}, {0x6, 0x0, 0x1, 0x40}}, @l2cap_conf_rsp={{0x5, 0x8, 0x20}, {0xffff, 0xffe0, 0x5, [@l2cap_conf_ews={0x7, 0x2, 0x2e}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0xfa, 0x2, 0x8001, 0x3, 0x80000000, 0x3f}}]}}, @l2cap_conn_rsp={{0x3, 0xf2, 0x8}, {0x7, 0x6, 0xc3, 0x8}}, @l2cap_conf_rsp={{0x5, 0x2, 0x1b}, {0x4, 0x6, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x1, 0x2, 0x3, 0x0, 0x2}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x7c) syz_emit_vhci(&(0x7f0000000680)=@HCI_VENDOR_PKT, 0x2) [ 142.144140] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.144240] Bluetooth: Wrong link type (-22) [ 142.145430] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 142.145500] Bluetooth: Wrong link type (-22) [ 142.145603] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.145686] Bluetooth: Wrong link type (-22) [ 142.145796] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.145849] Bluetooth: Wrong link type (-22) [ 142.146060] Bluetooth: hci3: link tx timeout [ 142.146111] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.151797] Bluetooth: hci3: SCO packet for unknown connection handle 344 [ 142.154783] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 142.154859] Bluetooth: Wrong link type (-22) [ 142.155695] Bluetooth: hci3: link tx timeout [ 142.155745] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.208935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.209000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 04:02:22 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa3}, @l2cap_cid_signaling={{0x9f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0xec}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x5675}}, @l2cap_conf_rsp={{0x5, 0xcf, 0x2a}, {0x6, 0xfff8, 0x8000, [@l2cap_conf_ews={0x7, 0x2, 0xffff}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0xf297, 0x3, 0x7, 0xa385}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8a, 0x5, 0x100, 0x7, 0x9e}}]}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x7ff, 0xd8}}, @l2cap_conf_rsp={{0x5, 0x7f, 0xd}, {0x7, 0x3, 0x8, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3f, 0x2}, {0x3}}, @l2cap_info_rsp={{0xb, 0x3, 0x2f}, {0x7, 0x5e73, "b6c43e3bdf3d8a4fe2378dde725867a3b68a033a5559d79088dc5189220e3466b283b8cb89634f5d117632"}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x4, 0x74}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x1, 0x1}}]}}, 0xa8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x0, 0x6, 0x2, 0x3}}}, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2b}, "a878f1c83e6e9af2037d95e1d5aaf7374b7df4f37cf3d36014f39d601e3329409b814967a07a057e11398d"}, 0x2f) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "ed502da8cb55b151"}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "16cb8357daae3af6"}}}, 0x11) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x158, 0x9a}, "e1ccab92fa884a8bc260eb9a1292ec4a014073d892e1adc8e0fada2635da0a97f058b02577dfec2c22e09bcb0d2b9f2c35cec627e8abf1a0abceff8bc9836ae55700068a9b36eb7a09a6a32b3eee11f83ddafb6aa5fe600e14da8fd5d1d3eb3e4ec85b6ee817b2732d495df8289f174362159cb97e14122ddf1ffd064928b2ecc3d7e834aac5e5ba14b7d236555fdad54e7de7a82c7d0847ab76"}, 0x9e) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2}, "52c1"}, 0x6) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "b4f95d56166c175cc6cd1654f97ee1dc6f86fe4a8071582db7616d4104996c76272aac0d99c35cd8b2b755c9459acf7550c1d911825e24170202108372b570a8bbed8e89c6f1cc6fd7dcd1768629583270782751b9aa13fabcf4ff43877e54e3084e38bf3d8c36630fa9648a0ac0fbb47498cc78189d6e9bd0ec482189bc1b2874b16b82aff7193b218126f5e15d10fbe75d37cb190b39"}, 0x9b) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x8, 0xdf04}}}}, 0x11) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_conf_rsp={{0x5, 0x20, 0x6}, {0x7, 0x8, 0x7fff}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x9, 0x3f}}]}}, 0x1b) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0xc}, {0x8, 0x7, 0x7ff, 0x2, [0x81, 0x8]}}}}, 0x19) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x27}, "4f6b79a64b06d18d1aef19c84724fd8f818def1fcee8865f714cbbed7ef7b1be4c28dd25e804a2"}, 0x2b) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x7fff, 0xbd}}, @l2cap_move_chan_rsp={{0xf, 0x60, 0x4}, {0x8000, 0xfff}}]}}, 0x19) syz_emit_vhci(&(0x7f0000000580)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x20}, "5ce785ed24ac31c862c24a23c043cf5b803f8bf4805f475bbfd45f1ced1cbd2d"}, 0x24) syz_emit_vhci(&(0x7f0000000600)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xe5, 0x7, 0x5, 0x400}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x8}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x7}}, @l2cap_conn_rsp={{0x3, 0xf6, 0x8}, {0x6, 0x0, 0x1, 0x40}}, @l2cap_conf_rsp={{0x5, 0x8, 0x20}, {0xffff, 0xffe0, 0x5, [@l2cap_conf_ews={0x7, 0x2, 0x2e}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0xfa, 0x2, 0x8001, 0x3, 0x80000000, 0x3f}}]}}, @l2cap_conn_rsp={{0x3, 0xf2, 0x8}, {0x7, 0x6, 0xc3, 0x8}}, @l2cap_conf_rsp={{0x5, 0x2, 0x1b}, {0x4, 0x6, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x1, 0x2, 0x3, 0x0, 0x2}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x7c) syz_emit_vhci(&(0x7f0000000680)=@HCI_VENDOR_PKT, 0x2) [ 142.429912] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.429991] Bluetooth: Wrong link type (-22) [ 142.431159] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 142.431221] Bluetooth: Wrong link type (-22) [ 142.432329] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.432399] Bluetooth: Wrong link type (-22) [ 142.432484] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.432535] Bluetooth: Wrong link type (-22) [ 142.432717] Bluetooth: hci3: link tx timeout [ 142.432767] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.441246] Bluetooth: hci3: SCO packet for unknown connection handle 344 [ 142.452859] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 142.452954] Bluetooth: Wrong link type (-22) [ 142.454974] Bluetooth: hci3: link tx timeout [ 142.455032] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa 04:02:22 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa3}, @l2cap_cid_signaling={{0x9f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0xec}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x5675}}, @l2cap_conf_rsp={{0x5, 0xcf, 0x2a}, {0x6, 0xfff8, 0x8000, [@l2cap_conf_ews={0x7, 0x2, 0xffff}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0xf297, 0x3, 0x7, 0xa385}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8a, 0x5, 0x100, 0x7, 0x9e}}]}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x7ff, 0xd8}}, @l2cap_conf_rsp={{0x5, 0x7f, 0xd}, {0x7, 0x3, 0x8, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3f, 0x2}, {0x3}}, @l2cap_info_rsp={{0xb, 0x3, 0x2f}, {0x7, 0x5e73, "b6c43e3bdf3d8a4fe2378dde725867a3b68a033a5559d79088dc5189220e3466b283b8cb89634f5d117632"}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x4, 0x74}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x1, 0x1}}]}}, 0xa8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x0, 0x6, 0x2, 0x3}}}, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2b}, "a878f1c83e6e9af2037d95e1d5aaf7374b7df4f37cf3d36014f39d601e3329409b814967a07a057e11398d"}, 0x2f) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "ed502da8cb55b151"}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "16cb8357daae3af6"}}}, 0x11) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x158, 0x9a}, "e1ccab92fa884a8bc260eb9a1292ec4a014073d892e1adc8e0fada2635da0a97f058b02577dfec2c22e09bcb0d2b9f2c35cec627e8abf1a0abceff8bc9836ae55700068a9b36eb7a09a6a32b3eee11f83ddafb6aa5fe600e14da8fd5d1d3eb3e4ec85b6ee817b2732d495df8289f174362159cb97e14122ddf1ffd064928b2ecc3d7e834aac5e5ba14b7d236555fdad54e7de7a82c7d0847ab76"}, 0x9e) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2}, "52c1"}, 0x6) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "b4f95d56166c175cc6cd1654f97ee1dc6f86fe4a8071582db7616d4104996c76272aac0d99c35cd8b2b755c9459acf7550c1d911825e24170202108372b570a8bbed8e89c6f1cc6fd7dcd1768629583270782751b9aa13fabcf4ff43877e54e3084e38bf3d8c36630fa9648a0ac0fbb47498cc78189d6e9bd0ec482189bc1b2874b16b82aff7193b218126f5e15d10fbe75d37cb190b39"}, 0x9b) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x8, 0xdf04}}}}, 0x11) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_conf_rsp={{0x5, 0x20, 0x6}, {0x7, 0x8, 0x7fff}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x9, 0x3f}}]}}, 0x1b) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0xc}, {0x8, 0x7, 0x7ff, 0x2, [0x81, 0x8]}}}}, 0x19) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x27}, "4f6b79a64b06d18d1aef19c84724fd8f818def1fcee8865f714cbbed7ef7b1be4c28dd25e804a2"}, 0x2b) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x7fff, 0xbd}}, @l2cap_move_chan_rsp={{0xf, 0x60, 0x4}, {0x8000, 0xfff}}]}}, 0x19) syz_emit_vhci(&(0x7f0000000580)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x20}, "5ce785ed24ac31c862c24a23c043cf5b803f8bf4805f475bbfd45f1ced1cbd2d"}, 0x24) syz_emit_vhci(&(0x7f0000000600)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xe5, 0x7, 0x5, 0x400}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x8}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x7}}, @l2cap_conn_rsp={{0x3, 0xf6, 0x8}, {0x6, 0x0, 0x1, 0x40}}, @l2cap_conf_rsp={{0x5, 0x8, 0x20}, {0xffff, 0xffe0, 0x5, [@l2cap_conf_ews={0x7, 0x2, 0x2e}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0xfa, 0x2, 0x8001, 0x3, 0x80000000, 0x3f}}]}}, @l2cap_conn_rsp={{0x3, 0xf2, 0x8}, {0x7, 0x6, 0xc3, 0x8}}, @l2cap_conf_rsp={{0x5, 0x2, 0x1b}, {0x4, 0x6, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x1, 0x2, 0x3, 0x0, 0x2}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x7c) syz_emit_vhci(&(0x7f0000000680)=@HCI_VENDOR_PKT, 0x2) [ 142.531789] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.531856] Bluetooth: Wrong link type (-22) [ 142.531952] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 142.532004] Bluetooth: Wrong link type (-22) [ 142.532097] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.532148] Bluetooth: Wrong link type (-22) [ 142.532234] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.532285] Bluetooth: Wrong link type (-22) [ 142.532435] Bluetooth: hci3: link tx timeout [ 142.532484] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.541345] Bluetooth: hci3: SCO packet for unknown connection handle 344 [ 142.543688] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 142.543775] Bluetooth: Wrong link type (-22) [ 142.545493] Bluetooth: hci3: link tx timeout [ 142.545550] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa 04:02:22 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa3}, @l2cap_cid_signaling={{0x9f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0xec}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x5675}}, @l2cap_conf_rsp={{0x5, 0xcf, 0x2a}, {0x6, 0xfff8, 0x8000, [@l2cap_conf_ews={0x7, 0x2, 0xffff}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0xf297, 0x3, 0x7, 0xa385}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8a, 0x5, 0x100, 0x7, 0x9e}}]}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x7ff, 0xd8}}, @l2cap_conf_rsp={{0x5, 0x7f, 0xd}, {0x7, 0x3, 0x8, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3f, 0x2}, {0x3}}, @l2cap_info_rsp={{0xb, 0x3, 0x2f}, {0x7, 0x5e73, "b6c43e3bdf3d8a4fe2378dde725867a3b68a033a5559d79088dc5189220e3466b283b8cb89634f5d117632"}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x4, 0x74}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x1, 0x1}}]}}, 0xa8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x0, 0x6, 0x2, 0x3}}}, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2b}, "a878f1c83e6e9af2037d95e1d5aaf7374b7df4f37cf3d36014f39d601e3329409b814967a07a057e11398d"}, 0x2f) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "ed502da8cb55b151"}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "16cb8357daae3af6"}}}, 0x11) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x158, 0x9a}, "e1ccab92fa884a8bc260eb9a1292ec4a014073d892e1adc8e0fada2635da0a97f058b02577dfec2c22e09bcb0d2b9f2c35cec627e8abf1a0abceff8bc9836ae55700068a9b36eb7a09a6a32b3eee11f83ddafb6aa5fe600e14da8fd5d1d3eb3e4ec85b6ee817b2732d495df8289f174362159cb97e14122ddf1ffd064928b2ecc3d7e834aac5e5ba14b7d236555fdad54e7de7a82c7d0847ab76"}, 0x9e) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2}, "52c1"}, 0x6) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "b4f95d56166c175cc6cd1654f97ee1dc6f86fe4a8071582db7616d4104996c76272aac0d99c35cd8b2b755c9459acf7550c1d911825e24170202108372b570a8bbed8e89c6f1cc6fd7dcd1768629583270782751b9aa13fabcf4ff43877e54e3084e38bf3d8c36630fa9648a0ac0fbb47498cc78189d6e9bd0ec482189bc1b2874b16b82aff7193b218126f5e15d10fbe75d37cb190b39"}, 0x9b) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x8, 0xdf04}}}}, 0x11) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_conf_rsp={{0x5, 0x20, 0x6}, {0x7, 0x8, 0x7fff}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x9, 0x3f}}]}}, 0x1b) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0xc}, {0x8, 0x7, 0x7ff, 0x2, [0x81, 0x8]}}}}, 0x19) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x27}, "4f6b79a64b06d18d1aef19c84724fd8f818def1fcee8865f714cbbed7ef7b1be4c28dd25e804a2"}, 0x2b) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x7fff, 0xbd}}, @l2cap_move_chan_rsp={{0xf, 0x60, 0x4}, {0x8000, 0xfff}}]}}, 0x19) syz_emit_vhci(&(0x7f0000000580)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x20}, "5ce785ed24ac31c862c24a23c043cf5b803f8bf4805f475bbfd45f1ced1cbd2d"}, 0x24) syz_emit_vhci(&(0x7f0000000600)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xe5, 0x7, 0x5, 0x400}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x8}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x7}}, @l2cap_conn_rsp={{0x3, 0xf6, 0x8}, {0x6, 0x0, 0x1, 0x40}}, @l2cap_conf_rsp={{0x5, 0x8, 0x20}, {0xffff, 0xffe0, 0x5, [@l2cap_conf_ews={0x7, 0x2, 0x2e}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0xfa, 0x2, 0x8001, 0x3, 0x80000000, 0x3f}}]}}, @l2cap_conn_rsp={{0x3, 0xf2, 0x8}, {0x7, 0x6, 0xc3, 0x8}}, @l2cap_conf_rsp={{0x5, 0x2, 0x1b}, {0x4, 0x6, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x1, 0x2, 0x3, 0x0, 0x2}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x7c) [ 142.717849] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.717923] Bluetooth: Wrong link type (-22) [ 142.718022] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 142.718074] Bluetooth: Wrong link type (-22) [ 142.718156] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.718208] Bluetooth: Wrong link type (-22) [ 142.718299] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.718350] Bluetooth: Wrong link type (-22) [ 142.718768] Bluetooth: hci3: SCO packet for unknown connection handle 344 [ 142.718942] Bluetooth: hci3: link tx timeout [ 142.719006] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.723158] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 142.723203] Bluetooth: Wrong link type (-22) [ 142.723326] Bluetooth: hci3: link tx timeout [ 142.723361] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa 04:02:22 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa3}, @l2cap_cid_signaling={{0x9f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0xec}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x5675}}, @l2cap_conf_rsp={{0x5, 0xcf, 0x2a}, {0x6, 0xfff8, 0x8000, [@l2cap_conf_ews={0x7, 0x2, 0xffff}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0xf297, 0x3, 0x7, 0xa385}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8a, 0x5, 0x100, 0x7, 0x9e}}]}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x7ff, 0xd8}}, @l2cap_conf_rsp={{0x5, 0x7f, 0xd}, {0x7, 0x3, 0x8, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3f, 0x2}, {0x3}}, @l2cap_info_rsp={{0xb, 0x3, 0x2f}, {0x7, 0x5e73, "b6c43e3bdf3d8a4fe2378dde725867a3b68a033a5559d79088dc5189220e3466b283b8cb89634f5d117632"}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x4, 0x74}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x1, 0x1}}]}}, 0xa8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x0, 0x6, 0x2, 0x3}}}, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2b}, "a878f1c83e6e9af2037d95e1d5aaf7374b7df4f37cf3d36014f39d601e3329409b814967a07a057e11398d"}, 0x2f) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "ed502da8cb55b151"}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "16cb8357daae3af6"}}}, 0x11) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x158, 0x9a}, "e1ccab92fa884a8bc260eb9a1292ec4a014073d892e1adc8e0fada2635da0a97f058b02577dfec2c22e09bcb0d2b9f2c35cec627e8abf1a0abceff8bc9836ae55700068a9b36eb7a09a6a32b3eee11f83ddafb6aa5fe600e14da8fd5d1d3eb3e4ec85b6ee817b2732d495df8289f174362159cb97e14122ddf1ffd064928b2ecc3d7e834aac5e5ba14b7d236555fdad54e7de7a82c7d0847ab76"}, 0x9e) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2}, "52c1"}, 0x6) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "b4f95d56166c175cc6cd1654f97ee1dc6f86fe4a8071582db7616d4104996c76272aac0d99c35cd8b2b755c9459acf7550c1d911825e24170202108372b570a8bbed8e89c6f1cc6fd7dcd1768629583270782751b9aa13fabcf4ff43877e54e3084e38bf3d8c36630fa9648a0ac0fbb47498cc78189d6e9bd0ec482189bc1b2874b16b82aff7193b218126f5e15d10fbe75d37cb190b39"}, 0x9b) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x8, 0xdf04}}}}, 0x11) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_conf_rsp={{0x5, 0x20, 0x6}, {0x7, 0x8, 0x7fff}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x9, 0x3f}}]}}, 0x1b) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0xc}, {0x8, 0x7, 0x7ff, 0x2, [0x81, 0x8]}}}}, 0x19) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x27}, "4f6b79a64b06d18d1aef19c84724fd8f818def1fcee8865f714cbbed7ef7b1be4c28dd25e804a2"}, 0x2b) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x7fff, 0xbd}}, @l2cap_move_chan_rsp={{0xf, 0x60, 0x4}, {0x8000, 0xfff}}]}}, 0x19) syz_emit_vhci(&(0x7f0000000580)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x20}, "5ce785ed24ac31c862c24a23c043cf5b803f8bf4805f475bbfd45f1ced1cbd2d"}, 0x24) syz_emit_vhci(&(0x7f0000000600)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xe5, 0x7, 0x5, 0x400}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x8}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x7}}, @l2cap_conn_rsp={{0x3, 0xf6, 0x8}, {0x6, 0x0, 0x1, 0x40}}, @l2cap_conf_rsp={{0x5, 0x8, 0x20}, {0xffff, 0xffe0, 0x5, [@l2cap_conf_ews={0x7, 0x2, 0x2e}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0xfa, 0x2, 0x8001, 0x3, 0x80000000, 0x3f}}]}}, @l2cap_conn_rsp={{0x3, 0xf2, 0x8}, {0x7, 0x6, 0xc3, 0x8}}, @l2cap_conf_rsp={{0x5, 0x2, 0x1b}, {0x4, 0x6, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x1, 0x2, 0x3, 0x0, 0x2}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x7c) [ 142.903330] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.903407] Bluetooth: Wrong link type (-22) [ 142.903508] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 142.903561] Bluetooth: Wrong link type (-22) [ 142.903644] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.903857] Bluetooth: Wrong link type (-22) [ 142.903942] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 142.903994] Bluetooth: Wrong link type (-22) [ 142.904340] Bluetooth: hci3: SCO packet for unknown connection handle 344 [ 142.904481] Bluetooth: hci3: link tx timeout [ 142.904542] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.906469] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 142.906513] Bluetooth: Wrong link type (-22) [ 142.906637] Bluetooth: hci3: link tx timeout [ 142.907811] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa 04:02:22 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa3}, @l2cap_cid_signaling={{0x9f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0xec}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x5675}}, @l2cap_conf_rsp={{0x5, 0xcf, 0x2a}, {0x6, 0xfff8, 0x8000, [@l2cap_conf_ews={0x7, 0x2, 0xffff}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0xf297, 0x3, 0x7, 0xa385}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8a, 0x5, 0x100, 0x7, 0x9e}}]}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x7ff, 0xd8}}, @l2cap_conf_rsp={{0x5, 0x7f, 0xd}, {0x7, 0x3, 0x8, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3f, 0x2}, {0x3}}, @l2cap_info_rsp={{0xb, 0x3, 0x2f}, {0x7, 0x5e73, "b6c43e3bdf3d8a4fe2378dde725867a3b68a033a5559d79088dc5189220e3466b283b8cb89634f5d117632"}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x4, 0x74}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x1, 0x1}}]}}, 0xa8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x0, 0x6, 0x2, 0x3}}}, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2b}, "a878f1c83e6e9af2037d95e1d5aaf7374b7df4f37cf3d36014f39d601e3329409b814967a07a057e11398d"}, 0x2f) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "ed502da8cb55b151"}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "16cb8357daae3af6"}}}, 0x11) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x158, 0x9a}, "e1ccab92fa884a8bc260eb9a1292ec4a014073d892e1adc8e0fada2635da0a97f058b02577dfec2c22e09bcb0d2b9f2c35cec627e8abf1a0abceff8bc9836ae55700068a9b36eb7a09a6a32b3eee11f83ddafb6aa5fe600e14da8fd5d1d3eb3e4ec85b6ee817b2732d495df8289f174362159cb97e14122ddf1ffd064928b2ecc3d7e834aac5e5ba14b7d236555fdad54e7de7a82c7d0847ab76"}, 0x9e) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2}, "52c1"}, 0x6) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "b4f95d56166c175cc6cd1654f97ee1dc6f86fe4a8071582db7616d4104996c76272aac0d99c35cd8b2b755c9459acf7550c1d911825e24170202108372b570a8bbed8e89c6f1cc6fd7dcd1768629583270782751b9aa13fabcf4ff43877e54e3084e38bf3d8c36630fa9648a0ac0fbb47498cc78189d6e9bd0ec482189bc1b2874b16b82aff7193b218126f5e15d10fbe75d37cb190b39"}, 0x9b) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x8, 0xdf04}}}}, 0x11) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_conf_rsp={{0x5, 0x20, 0x6}, {0x7, 0x8, 0x7fff}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x9, 0x3f}}]}}, 0x1b) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0xc}, {0x8, 0x7, 0x7ff, 0x2, [0x81, 0x8]}}}}, 0x19) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x27}, "4f6b79a64b06d18d1aef19c84724fd8f818def1fcee8865f714cbbed7ef7b1be4c28dd25e804a2"}, 0x2b) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x7fff, 0xbd}}, @l2cap_move_chan_rsp={{0xf, 0x60, 0x4}, {0x8000, 0xfff}}]}}, 0x19) syz_emit_vhci(&(0x7f0000000580)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x20}, "5ce785ed24ac31c862c24a23c043cf5b803f8bf4805f475bbfd45f1ced1cbd2d"}, 0x24) syz_emit_vhci(&(0x7f0000000600)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x77}, @l2cap_cid_signaling={{0x73}, [@l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0xe5, 0x7, 0x5, 0x400}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x8}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x7}}, @l2cap_conn_rsp={{0x3, 0xf6, 0x8}, {0x6, 0x0, 0x1, 0x40}}, @l2cap_conf_rsp={{0x5, 0x8, 0x20}, {0xffff, 0xffe0, 0x5, [@l2cap_conf_ews={0x7, 0x2, 0x2e}, @l2cap_conf_ews={0x7, 0x2}, @l2cap_conf_efs={0x6, 0x10, {0xfa, 0x2, 0x8001, 0x3, 0x80000000, 0x3f}}]}}, @l2cap_conn_rsp={{0x3, 0xf2, 0x8}, {0x7, 0x6, 0xc3, 0x8}}, @l2cap_conf_rsp={{0x5, 0x2, 0x1b}, {0x4, 0x6, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x1, 0x2, 0x3, 0x0, 0x2}}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x7c) [ 143.053293] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 143.053372] Bluetooth: Wrong link type (-22) [ 143.054500] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 143.054572] Bluetooth: Wrong link type (-22) [ 143.055784] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 143.055846] Bluetooth: Wrong link type (-22) [ 143.055930] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 143.055982] Bluetooth: Wrong link type (-22) [ 143.056122] Bluetooth: hci3: link tx timeout [ 143.056171] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.066953] Bluetooth: hci3: SCO packet for unknown connection handle 344 [ 143.074917] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 143.074996] Bluetooth: Wrong link type (-22) [ 143.077060] Bluetooth: hci3: link tx timeout [ 143.077100] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.313797] [ 143.314040] ====================================================== [ 143.314636] WARNING: possible circular locking dependency detected [ 143.315241] 6.13.0-rc7-next-20250120 #1 Not tainted [ 143.315729] ------------------------------------------------------ [ 143.316315] kworker/u8:0/11 is trying to acquire lock: [ 143.320304] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.321325] [ 143.321325] but task is already holding lock: [ 143.321883] ffff888012f78768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 143.322791] [ 143.322791] which lock already depends on the new lock. [ 143.322791] [ 143.323546] [ 143.323546] the existing dependency chain (in reverse order) is: [ 143.324236] [ 143.324236] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 143.324871] __mutex_lock+0x13d/0xb50 [ 143.325309] wiphy_register+0x1b2e/0x25d0 [ 143.325784] ieee80211_register_hw+0x23a4/0x3d60 [ 143.326290] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 143.326825] init_mac80211_hwsim+0x389/0x870 [ 143.327314] do_one_initcall+0xf9/0x640 [ 143.327769] kernel_init_freeable+0x53d/0x7a0 [ 143.328262] kernel_init+0x1e/0x2d0 [ 143.328659] ret_from_fork+0x48/0x80 [ 143.329067] ret_from_fork_asm+0x1a/0x30 [ 143.329524] [ 143.329524] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 143.330118] __lock_acquire+0x29fd/0x4580 [ 143.330604] lock_acquire+0x19b/0x520 [ 143.331054] __mutex_lock+0x13d/0xb50 [ 143.331515] unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.332142] unregister_netdevice_queue+0x224/0x2e0 [ 143.332700] _cfg80211_unregister_wdev+0x57b/0x700 [ 143.333269] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 143.333837] ieee80211_unregister_hw+0x55/0x3a0 [ 143.334372] hwsim_exit_net+0x3a0/0x730 [ 143.334841] ops_exit_list+0xb3/0x180 [ 143.335290] cleanup_net+0x546/0xad0 [ 143.335737] process_one_work+0x8ee/0x1a10 [ 143.336240] worker_thread+0x674/0xe70 [ 143.336716] kthread+0x3ab/0x720 [ 143.337148] ret_from_fork+0x48/0x80 [ 143.337569] ret_from_fork_asm+0x1a/0x30 [ 143.338092] [ 143.338092] other info that might help us debug this: [ 143.338092] [ 143.338842] Possible unsafe locking scenario: [ 143.338842] [ 143.339414] CPU0 CPU1 [ 143.339861] ---- ---- [ 143.340307] lock(&rdev->wiphy.mtx); [ 143.340708] lock(rtnl_mutex); [ 143.341285] lock(&rdev->wiphy.mtx); [ 143.341912] lock(rtnl_mutex); [ 143.342266] [ 143.342266] *** DEADLOCK *** [ 143.342266] [ 143.342829] 4 locks held by kworker/u8:0/11: [ 143.343269] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 143.344280] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 143.345259] #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 143.346173] #3: ffff888012f78768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 143.347196] [ 143.347196] stack backtrace: [ 143.347631] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250120 #1 [ 143.348444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 143.349230] Workqueue: netns cleanup_net [ 143.349652] Call Trace: [ 143.349915] [ 143.350146] dump_stack_lvl+0xca/0x120 [ 143.350572] print_circular_bug+0x47b/0x750 [ 143.351014] check_noncircular+0x2e9/0x3c0 [ 143.351447] ? __pfx_check_noncircular+0x10/0x10 [ 143.351930] ? pick_eevdf+0x3a4/0x560 [ 143.352332] ? srso_return_thunk+0x5/0x5f [ 143.352777] ? find_held_lock+0x2c/0x110 [ 143.353214] ? lockdep_lock+0xba/0x1b0 [ 143.353634] ? __pfx_lockdep_lock+0x10/0x10 [ 143.354098] ? __pfx_lock_release+0x10/0x10 [ 143.354543] __lock_acquire+0x29fd/0x4580 [ 143.354984] ? __pfx___lock_acquire+0x10/0x10 [ 143.355444] ? __pfx_try_to_wake_up+0x10/0x10 [ 143.355904] lock_acquire+0x19b/0x520 [ 143.356300] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.356885] ? __pfx_lock_acquire+0x10/0x10 [ 143.357327] ? srso_return_thunk+0x5/0x5f [ 143.357775] ? lock_release+0x20f/0x6f0 [ 143.358186] ? srso_return_thunk+0x5/0x5f [ 143.358626] ? lock_is_held_type+0x9e/0x120 [ 143.359079] ? srso_return_thunk+0x5/0x5f [ 143.359523] __mutex_lock+0x13d/0xb50 [ 143.359928] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.360507] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.361097] ? srso_return_thunk+0x5/0x5f [ 143.361540] ? synchronize_rcu_expedited+0x38a/0x420 [ 143.362058] ? __pfx___mutex_lock+0x10/0x10 [ 143.362506] ? __pfx_autoremove_wake_function+0x10/0x10 [ 143.363052] ? srso_return_thunk+0x5/0x5f [ 143.363491] ? kasan_quarantine_put+0x84/0x1e0 [ 143.363977] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 143.364430] ? srso_return_thunk+0x5/0x5f [ 143.364870] unregister_netdevice_many_notify+0x1612/0x1c80 [ 143.365439] ? __virt_addr_valid+0x2e8/0x5d0 [ 143.365904] ? __pfx_lock_release+0x10/0x10 [ 143.366344] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 143.366947] ? find_held_lock+0x2c/0x110 [ 143.367378] ? srso_return_thunk+0x5/0x5f [ 143.367823] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 143.368334] ? srso_return_thunk+0x5/0x5f [ 143.368773] ? lock_release+0x20f/0x6f0 [ 143.369181] ? __pfx_lock_release+0x10/0x10 [ 143.369618] ? srso_return_thunk+0x5/0x5f [ 143.370072] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 143.370602] ? srso_return_thunk+0x5/0x5f [ 143.371045] unregister_netdevice_queue+0x224/0x2e0 [ 143.371548] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 143.372096] ? up_write+0x195/0x520 [ 143.372488] _cfg80211_unregister_wdev+0x57b/0x700 [ 143.372998] ? srso_return_thunk+0x5/0x5f [ 143.373438] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 143.373948] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 143.374505] ? srso_return_thunk+0x5/0x5f [ 143.374941] ? srso_return_thunk+0x5/0x5f [ 143.375375] ? synchronize_rcu+0x1ff/0x260 [ 143.375808] ieee80211_unregister_hw+0x55/0x3a0 [ 143.376282] hwsim_exit_net+0x3a0/0x730 [ 143.376692] ? __pfx_hwsim_exit_net+0x10/0x10 [ 143.377148] ? srso_return_thunk+0x5/0x5f [ 143.377586] ? netdev_run_todo+0x788/0x1040 [ 143.378035] ? __pfx_hwsim_exit_net+0x10/0x10 [ 143.378491] ops_exit_list+0xb3/0x180 [ 143.378894] cleanup_net+0x546/0xad0 [ 143.379287] ? __pfx_cleanup_net+0x10/0x10 [ 143.379729] process_one_work+0x8ee/0x1a10 [ 143.380181] ? __pfx_lock_acquire+0x10/0x10 [ 143.380618] ? __pfx_process_one_work+0x10/0x10 [ 143.381116] ? srso_return_thunk+0x5/0x5f [ 143.381553] ? move_linked_works+0x172/0x270 [ 143.382007] ? srso_return_thunk+0x5/0x5f [ 143.382444] ? assign_work+0x196/0x240 [ 143.382862] worker_thread+0x674/0xe70 [ 143.383278] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 143.383813] ? __pfx_worker_thread+0x10/0x10 [ 143.384278] kthread+0x3ab/0x720 [ 143.384646] ? __pfx_kthread+0x10/0x10 [ 143.385057] ? srso_return_thunk+0x5/0x5f [ 143.385491] ? finish_task_switch.isra.0+0x206/0x840 [ 143.386036] ? __pfx_kthread+0x10/0x10 [ 143.386449] ret_from_fork+0x48/0x80 [ 143.386829] ? __pfx_kthread+0x10/0x10 [ 143.387239] ret_from_fork_asm+0x1a/0x30 [ 143.387679] 04:02:23 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa3}, @l2cap_cid_signaling={{0x9f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0xec}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x5675}}, @l2cap_conf_rsp={{0x5, 0xcf, 0x2a}, {0x6, 0xfff8, 0x8000, [@l2cap_conf_ews={0x7, 0x2, 0xffff}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0xf297, 0x3, 0x7, 0xa385}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8a, 0x5, 0x100, 0x7, 0x9e}}]}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x7ff, 0xd8}}, @l2cap_conf_rsp={{0x5, 0x7f, 0xd}, {0x7, 0x3, 0x8, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3f, 0x2}, {0x3}}, @l2cap_info_rsp={{0xb, 0x3, 0x2f}, {0x7, 0x5e73, "b6c43e3bdf3d8a4fe2378dde725867a3b68a033a5559d79088dc5189220e3466b283b8cb89634f5d117632"}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x4, 0x74}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x1, 0x1}}]}}, 0xa8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x0, 0x6, 0x2, 0x3}}}, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2b}, "a878f1c83e6e9af2037d95e1d5aaf7374b7df4f37cf3d36014f39d601e3329409b814967a07a057e11398d"}, 0x2f) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "ed502da8cb55b151"}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "16cb8357daae3af6"}}}, 0x11) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x158, 0x9a}, "e1ccab92fa884a8bc260eb9a1292ec4a014073d892e1adc8e0fada2635da0a97f058b02577dfec2c22e09bcb0d2b9f2c35cec627e8abf1a0abceff8bc9836ae55700068a9b36eb7a09a6a32b3eee11f83ddafb6aa5fe600e14da8fd5d1d3eb3e4ec85b6ee817b2732d495df8289f174362159cb97e14122ddf1ffd064928b2ecc3d7e834aac5e5ba14b7d236555fdad54e7de7a82c7d0847ab76"}, 0x9e) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2}, "52c1"}, 0x6) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "b4f95d56166c175cc6cd1654f97ee1dc6f86fe4a8071582db7616d4104996c76272aac0d99c35cd8b2b755c9459acf7550c1d911825e24170202108372b570a8bbed8e89c6f1cc6fd7dcd1768629583270782751b9aa13fabcf4ff43877e54e3084e38bf3d8c36630fa9648a0ac0fbb47498cc78189d6e9bd0ec482189bc1b2874b16b82aff7193b218126f5e15d10fbe75d37cb190b39"}, 0x9b) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x8, 0xdf04}}}}, 0x11) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_conf_rsp={{0x5, 0x20, 0x6}, {0x7, 0x8, 0x7fff}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x9, 0x3f}}]}}, 0x1b) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0xc}, {0x8, 0x7, 0x7ff, 0x2, [0x81, 0x8]}}}}, 0x19) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x27}, "4f6b79a64b06d18d1aef19c84724fd8f818def1fcee8865f714cbbed7ef7b1be4c28dd25e804a2"}, 0x2b) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x7fff, 0xbd}}, @l2cap_move_chan_rsp={{0xf, 0x60, 0x4}, {0x8000, 0xfff}}]}}, 0x19) syz_emit_vhci(&(0x7f0000000580)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x20}, "5ce785ed24ac31c862c24a23c043cf5b803f8bf4805f475bbfd45f1ced1cbd2d"}, 0x24) [ 143.444953] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 143.445018] Bluetooth: Wrong link type (-22) [ 143.445102] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 143.445147] Bluetooth: Wrong link type (-22) [ 143.445215] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 143.445260] Bluetooth: Wrong link type (-22) [ 143.445328] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 143.445372] Bluetooth: Wrong link type (-22) [ 143.445816] Bluetooth: hci3: SCO packet for unknown connection handle 344 [ 143.445940] Bluetooth: hci3: link tx timeout [ 143.445992] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa 04:02:23 executing program 2: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xa3}, @l2cap_cid_signaling={{0x9f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x0, 0x2}, {0xec}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_info_req={{0xa, 0x5, 0x2}, {0x5675}}, @l2cap_conf_rsp={{0x5, 0xcf, 0x2a}, {0x6, 0xfff8, 0x8000, [@l2cap_conf_ews={0x7, 0x2, 0xffff}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x1, 0xf297, 0x3, 0x7, 0xa385}}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x8a, 0x5, 0x100, 0x7, 0x9e}}]}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x7ff, 0xd8}}, @l2cap_conf_rsp={{0x5, 0x7f, 0xd}, {0x7, 0x3, 0x8, [@l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3f, 0x2}, {0x3}}, @l2cap_info_rsp={{0xb, 0x3, 0x2f}, {0x7, 0x5e73, "b6c43e3bdf3d8a4fe2378dde725867a3b68a033a5559d79088dc5189220e3466b283b8cb89634f5d117632"}}, @l2cap_move_chan_req={{0xe, 0x20, 0x3}, {0x4, 0x74}}, @l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x1, 0x1}}]}}, 0xa8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x0, 0x6, 0x2, 0x3}}}, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2b}, "a878f1c83e6e9af2037d95e1d5aaf7374b7df4f37cf3d36014f39d601e3329409b814967a07a057e11398d"}, 0x2f) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "ed502da8cb55b151"}}}, 0x11) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "16cb8357daae3af6"}}}, 0x11) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0x158, 0x9a}, "e1ccab92fa884a8bc260eb9a1292ec4a014073d892e1adc8e0fada2635da0a97f058b02577dfec2c22e09bcb0d2b9f2c35cec627e8abf1a0abceff8bc9836ae55700068a9b36eb7a09a6a32b3eee11f83ddafb6aa5fe600e14da8fd5d1d3eb3e4ec85b6ee817b2732d495df8289f174362159cb97e14122ddf1ffd064928b2ecc3d7e834aac5e5ba14b7d236555fdad54e7de7a82c7d0847ab76"}, 0x9e) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x2}, "52c1"}, 0x6) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "b4f95d56166c175cc6cd1654f97ee1dc6f86fe4a8071582db7616d4104996c76272aac0d99c35cd8b2b755c9459acf7550c1d911825e24170202108372b570a8bbed8e89c6f1cc6fd7dcd1768629583270782751b9aa13fabcf4ff43877e54e3084e38bf3d8c36630fa9648a0ac0fbb47498cc78189d6e9bd0ec482189bc1b2874b16b82aff7193b218126f5e15d10fbe75d37cb190b39"}, 0x9b) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x9, 0x4}, {0x8, 0xdf04}}}}, 0x11) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000440)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_conf_rsp={{0x5, 0x20, 0x6}, {0x7, 0x8, 0x7fff}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x9, 0x3f}}]}}, 0x1b) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0xc}, {0x8, 0x7, 0x7ff, 0x2, [0x81, 0x8]}}}}, 0x19) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x27}, "4f6b79a64b06d18d1aef19c84724fd8f818def1fcee8865f714cbbed7ef7b1be4c28dd25e804a2"}, 0x2b) syz_emit_vhci(&(0x7f0000000540)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x7fff, 0xbd}}, @l2cap_move_chan_rsp={{0xf, 0x60, 0x4}, {0x8000, 0xfff}}]}}, 0x19) syz_emit_vhci(&(0x7f0000000580)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x20}, "5ce785ed24ac31c862c24a23c043cf5b803f8bf4805f475bbfd45f1ced1cbd2d"}, 0x24) [ 143.578243] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 143.578310] Bluetooth: Wrong link type (-22) [ 143.578394] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 143.578440] Bluetooth: Wrong link type (-22) [ 143.578510] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 143.578555] Bluetooth: Wrong link type (-22) [ 143.578632] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 143.578960] Bluetooth: Wrong link type (-22) [ 143.579073] Bluetooth: hci3: link tx timeout [ 143.579115] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.590060] Bluetooth: hci3: SCO packet for unknown connection handle 344 [ 143.804797] Bluetooth: hci3: command 0x0406 tx timeout [ 145.746772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.750316] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.753838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.755032] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.756054] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.758190] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.762362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.762386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.765805] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.766226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.767869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.768636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.798414] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.800627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.804833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.808976] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.810459] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.817344] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.819112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.820698] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.823471] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.827083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.828023] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.829890] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.832129] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.833045] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.833864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.843400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.848630] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.851611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.856883] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.866945] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.887597] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.887612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.890022] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.891066] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.894201] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.894853] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.895176] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.906756] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.911812] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.914007] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.837743] Bluetooth: hci0: command tx timeout [ 147.837941] Bluetooth: hci1: command tx timeout [ 147.900752] Bluetooth: hci4: command tx timeout [ 147.900836] Bluetooth: hci5: command tx timeout [ 147.900903] Bluetooth: hci2: command tx timeout [ 147.965727] Bluetooth: hci7: command tx timeout [ 148.030689] Bluetooth: hci6: command tx timeout [ 149.884801] Bluetooth: hci0: command tx timeout [ 149.884827] Bluetooth: hci1: command tx timeout [ 149.948882] Bluetooth: hci2: command tx timeout [ 149.949017] Bluetooth: hci5: command tx timeout [ 149.949141] Bluetooth: hci4: command tx timeout [ 150.013692] Bluetooth: hci7: command tx timeout [ 150.076707] Bluetooth: hci6: command tx timeout [ 151.932771] Bluetooth: hci0: command tx timeout [ 151.932806] Bluetooth: hci1: command tx timeout [ 151.996796] Bluetooth: hci4: command tx timeout [ 151.996869] Bluetooth: hci5: command tx timeout [ 151.996932] Bluetooth: hci2: command tx timeout [ 152.061734] Bluetooth: hci7: command tx timeout [ 152.124939] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 04:02:23 Registers: info registers vcpu 0 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283e2e5 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=0000000000000073 R11=2f72656b726f776b R12=0000000000000073 R13=0000000000000001 R14=ffff888008fea021 R15=ffff8880095deeb8 RIP=ffffffff8283e33d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005605536fda28 CR3=00000000163a8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000413cc26800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000002 RBX=0000000000000020 RCX=1ffff11002925448 RDX=dffffc0000000000 RSI=ffffffff8257e979 RDI=0000000000000007 RBP=0000000000000fc0 RSP=ffff88803c017e88 R8 =0000000000000020 R9 =0000000000000020 R10=8080000000800000 R11=0000000000000000 R12=0000000000000022 R13=ffff88801492a220 R14=0000000000003030 R15=ffff88801492a240 RIP=ffffffff8171a3d0 RFL=00040213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f34bed528c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a941f7f3e0 CR3=000000000d042000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=3a316963683a68746f6f7465756c622b XMM03=003030323a316963683a68746f6f7465 XMM04=000055a941fd8160000055a941f7c950 XMM05=00000000000000000000000000000000 XMM06=000055a941f7c9700000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000