Warning: Permanently added '[localhost]:63243' (ECDSA) to the list of known hosts. 2025/11/16 03:29:58 fuzzer started 2025/11/16 03:29:58 dialing manager at localhost:37161 syzkaller login: [ 50.045493] cgroup: Unknown subsys name 'net' [ 50.098194] cgroup: Unknown subsys name 'cpuset' [ 50.117948] cgroup: Unknown subsys name 'rlimit' 2025/11/16 03:30:09 syscalls: 2214 2025/11/16 03:30:09 code coverage: enabled 2025/11/16 03:30:09 comparison tracing: enabled 2025/11/16 03:30:09 extra coverage: enabled 2025/11/16 03:30:09 setuid sandbox: enabled 2025/11/16 03:30:09 namespace sandbox: enabled 2025/11/16 03:30:09 Android sandbox: enabled 2025/11/16 03:30:09 fault injection: enabled 2025/11/16 03:30:09 leak checking: enabled 2025/11/16 03:30:09 net packet injection: enabled 2025/11/16 03:30:09 net device setup: enabled 2025/11/16 03:30:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/16 03:30:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/16 03:30:09 USB emulation: enabled 2025/11/16 03:30:09 hci packet injection: enabled 2025/11/16 03:30:09 wifi device emulation: enabled 2025/11/16 03:30:09 802.15.4 emulation: enabled 2025/11/16 03:30:09 fetching corpus: 50, signal 25173/26978 (executing program) 2025/11/16 03:30:09 fetching corpus: 100, signal 35632/39099 (executing program) 2025/11/16 03:30:09 fetching corpus: 150, signal 50213/55077 (executing program) 2025/11/16 03:30:09 fetching corpus: 200, signal 56814/63143 (executing program) 2025/11/16 03:30:09 fetching corpus: 250, signal 62309/70044 (executing program) 2025/11/16 03:30:09 fetching corpus: 300, signal 67412/76491 (executing program) 2025/11/16 03:30:09 fetching corpus: 350, signal 73011/83340 (executing program) 2025/11/16 03:30:10 fetching corpus: 400, signal 76425/88064 (executing program) 2025/11/16 03:30:10 fetching corpus: 450, signal 80547/93369 (executing program) 2025/11/16 03:30:10 fetching corpus: 500, signal 83292/97398 (executing program) 2025/11/16 03:30:10 fetching corpus: 550, signal 86657/101903 (executing program) 2025/11/16 03:30:10 fetching corpus: 600, signal 89313/105708 (executing program) 2025/11/16 03:30:10 fetching corpus: 650, signal 91804/109297 (executing program) 2025/11/16 03:30:10 fetching corpus: 700, signal 94899/113404 (executing program) 2025/11/16 03:30:10 fetching corpus: 750, signal 97544/117097 (executing program) 2025/11/16 03:30:10 fetching corpus: 800, signal 99940/120549 (executing program) 2025/11/16 03:30:11 fetching corpus: 850, signal 102772/124303 (executing program) 2025/11/16 03:30:11 fetching corpus: 900, signal 104485/127034 (executing program) 2025/11/16 03:30:11 fetching corpus: 950, signal 106774/130249 (executing program) 2025/11/16 03:30:11 fetching corpus: 1000, signal 108144/132660 (executing program) 2025/11/16 03:30:11 fetching corpus: 1050, signal 109994/135470 (executing program) 2025/11/16 03:30:11 fetching corpus: 1100, signal 112364/138698 (executing program) 2025/11/16 03:30:11 fetching corpus: 1150, signal 113368/140732 (executing program) 2025/11/16 03:30:11 fetching corpus: 1200, signal 114899/143184 (executing program) 2025/11/16 03:30:11 fetching corpus: 1250, signal 116471/145642 (executing program) 2025/11/16 03:30:11 fetching corpus: 1300, signal 118023/148076 (executing program) 2025/11/16 03:30:12 fetching corpus: 1350, signal 119971/150797 (executing program) 2025/11/16 03:30:12 fetching corpus: 1400, signal 121256/152971 (executing program) 2025/11/16 03:30:12 fetching corpus: 1450, signal 122192/154865 (executing program) 2025/11/16 03:30:12 fetching corpus: 1500, signal 123155/156769 (executing program) 2025/11/16 03:30:12 fetching corpus: 1550, signal 124510/158963 (executing program) 2025/11/16 03:30:12 fetching corpus: 1600, signal 125504/160850 (executing program) 2025/11/16 03:30:12 fetching corpus: 1650, signal 126916/163030 (executing program) 2025/11/16 03:30:12 fetching corpus: 1700, signal 128338/165195 (executing program) 2025/11/16 03:30:12 fetching corpus: 1750, signal 129154/166867 (executing program) 2025/11/16 03:30:12 fetching corpus: 1800, signal 130721/169111 (executing program) 2025/11/16 03:30:13 fetching corpus: 1850, signal 131862/171034 (executing program) 2025/11/16 03:30:13 fetching corpus: 1900, signal 133992/173690 (executing program) 2025/11/16 03:30:13 fetching corpus: 1950, signal 135232/175664 (executing program) 2025/11/16 03:30:13 fetching corpus: 2000, signal 136276/177469 (executing program) 2025/11/16 03:30:13 fetching corpus: 2050, signal 136858/178885 (executing program) 2025/11/16 03:30:13 fetching corpus: 2100, signal 138028/180746 (executing program) 2025/11/16 03:30:13 fetching corpus: 2150, signal 138984/182384 (executing program) 2025/11/16 03:30:13 fetching corpus: 2200, signal 140138/184202 (executing program) 2025/11/16 03:30:13 fetching corpus: 2250, signal 140777/185675 (executing program) 2025/11/16 03:30:13 fetching corpus: 2300, signal 141803/187347 (executing program) 2025/11/16 03:30:14 fetching corpus: 2350, signal 142895/189075 (executing program) 2025/11/16 03:30:14 fetching corpus: 2400, signal 144141/190840 (executing program) 2025/11/16 03:30:14 fetching corpus: 2450, signal 144791/192215 (executing program) 2025/11/16 03:30:14 fetching corpus: 2500, signal 145879/193837 (executing program) 2025/11/16 03:30:14 fetching corpus: 2550, signal 146536/195246 (executing program) 2025/11/16 03:30:14 fetching corpus: 2600, signal 147375/196742 (executing program) 2025/11/16 03:30:14 fetching corpus: 2650, signal 148169/198182 (executing program) 2025/11/16 03:30:14 fetching corpus: 2700, signal 148951/199577 (executing program) 2025/11/16 03:30:14 fetching corpus: 2750, signal 149660/200937 (executing program) 2025/11/16 03:30:15 fetching corpus: 2800, signal 150259/202212 (executing program) 2025/11/16 03:30:15 fetching corpus: 2850, signal 151048/203614 (executing program) 2025/11/16 03:30:15 fetching corpus: 2900, signal 151616/204897 (executing program) 2025/11/16 03:30:15 fetching corpus: 2950, signal 152430/206269 (executing program) 2025/11/16 03:30:15 fetching corpus: 3000, signal 153210/207584 (executing program) 2025/11/16 03:30:15 fetching corpus: 3050, signal 154081/208983 (executing program) 2025/11/16 03:30:15 fetching corpus: 3100, signal 154686/210222 (executing program) 2025/11/16 03:30:15 fetching corpus: 3150, signal 155160/211347 (executing program) 2025/11/16 03:30:15 fetching corpus: 3200, signal 155908/212669 (executing program) 2025/11/16 03:30:16 fetching corpus: 3250, signal 156879/214100 (executing program) 2025/11/16 03:30:16 fetching corpus: 3300, signal 158064/215584 (executing program) 2025/11/16 03:30:16 fetching corpus: 3350, signal 158534/216745 (executing program) 2025/11/16 03:30:16 fetching corpus: 3400, signal 159198/217942 (executing program) 2025/11/16 03:30:16 fetching corpus: 3450, signal 159634/219070 (executing program) 2025/11/16 03:30:16 fetching corpus: 3500, signal 160245/220220 (executing program) 2025/11/16 03:30:16 fetching corpus: 3550, signal 160682/221285 (executing program) 2025/11/16 03:30:16 fetching corpus: 3600, signal 161187/222344 (executing program) 2025/11/16 03:30:16 fetching corpus: 3650, signal 161651/223420 (executing program) 2025/11/16 03:30:16 fetching corpus: 3700, signal 162133/224498 (executing program) 2025/11/16 03:30:17 fetching corpus: 3750, signal 162658/225565 (executing program) 2025/11/16 03:30:17 fetching corpus: 3800, signal 163131/226643 (executing program) 2025/11/16 03:30:17 fetching corpus: 3850, signal 164001/227864 (executing program) 2025/11/16 03:30:17 fetching corpus: 3900, signal 164616/228982 (executing program) 2025/11/16 03:30:17 fetching corpus: 3950, signal 165276/230079 (executing program) 2025/11/16 03:30:17 fetching corpus: 4000, signal 165651/231091 (executing program) 2025/11/16 03:30:17 fetching corpus: 4050, signal 166249/232173 (executing program) 2025/11/16 03:30:17 fetching corpus: 4100, signal 166873/233234 (executing program) 2025/11/16 03:30:17 fetching corpus: 4150, signal 167343/234191 (executing program) 2025/11/16 03:30:17 fetching corpus: 4200, signal 168280/235310 (executing program) 2025/11/16 03:30:18 fetching corpus: 4250, signal 168716/236256 (executing program) 2025/11/16 03:30:18 fetching corpus: 4300, signal 169062/237196 (executing program) 2025/11/16 03:30:18 fetching corpus: 4350, signal 169697/238253 (executing program) 2025/11/16 03:30:18 fetching corpus: 4400, signal 170273/239239 (executing program) 2025/11/16 03:30:18 fetching corpus: 4450, signal 170697/240179 (executing program) 2025/11/16 03:30:18 fetching corpus: 4500, signal 171150/241127 (executing program) 2025/11/16 03:30:18 fetching corpus: 4550, signal 171600/242101 (executing program) 2025/11/16 03:30:18 fetching corpus: 4600, signal 172053/243010 (executing program) 2025/11/16 03:30:18 fetching corpus: 4650, signal 172489/243897 (executing program) 2025/11/16 03:30:18 fetching corpus: 4700, signal 172892/244828 (executing program) 2025/11/16 03:30:18 fetching corpus: 4750, signal 173239/245705 (executing program) 2025/11/16 03:30:19 fetching corpus: 4800, signal 173783/246622 (executing program) 2025/11/16 03:30:19 fetching corpus: 4850, signal 174367/247550 (executing program) 2025/11/16 03:30:19 fetching corpus: 4900, signal 174820/248401 (executing program) 2025/11/16 03:30:19 fetching corpus: 4950, signal 175524/249374 (executing program) 2025/11/16 03:30:19 fetching corpus: 5000, signal 175977/250284 (executing program) 2025/11/16 03:30:19 fetching corpus: 5050, signal 176672/251182 (executing program) 2025/11/16 03:30:19 fetching corpus: 5100, signal 177212/252068 (executing program) 2025/11/16 03:30:19 fetching corpus: 5150, signal 177808/252940 (executing program) 2025/11/16 03:30:19 fetching corpus: 5200, signal 178271/253794 (executing program) 2025/11/16 03:30:20 fetching corpus: 5250, signal 178640/254581 (executing program) 2025/11/16 03:30:20 fetching corpus: 5300, signal 179197/255429 (executing program) 2025/11/16 03:30:20 fetching corpus: 5350, signal 179680/256254 (executing program) 2025/11/16 03:30:20 fetching corpus: 5400, signal 179991/257067 (executing program) 2025/11/16 03:30:20 fetching corpus: 5450, signal 180570/257930 (executing program) 2025/11/16 03:30:20 fetching corpus: 5500, signal 181589/258870 (executing program) 2025/11/16 03:30:20 fetching corpus: 5550, signal 182075/259647 (executing program) 2025/11/16 03:30:20 fetching corpus: 5600, signal 182446/260417 (executing program) 2025/11/16 03:30:20 fetching corpus: 5650, signal 182898/261192 (executing program) 2025/11/16 03:30:20 fetching corpus: 5700, signal 183236/261946 (executing program) 2025/11/16 03:30:21 fetching corpus: 5750, signal 183685/262703 (executing program) 2025/11/16 03:30:21 fetching corpus: 5800, signal 184144/263447 (executing program) 2025/11/16 03:30:21 fetching corpus: 5850, signal 184615/264215 (executing program) 2025/11/16 03:30:21 fetching corpus: 5900, signal 185019/264898 (executing program) 2025/11/16 03:30:21 fetching corpus: 5950, signal 185385/265614 (executing program) 2025/11/16 03:30:21 fetching corpus: 6000, signal 185628/266256 (executing program) 2025/11/16 03:30:21 fetching corpus: 6050, signal 186051/267000 (executing program) 2025/11/16 03:30:21 fetching corpus: 6100, signal 186519/267729 (executing program) 2025/11/16 03:30:21 fetching corpus: 6150, signal 187032/268486 (executing program) 2025/11/16 03:30:21 fetching corpus: 6200, signal 187459/269178 (executing program) 2025/11/16 03:30:22 fetching corpus: 6250, signal 187862/269930 (executing program) 2025/11/16 03:30:22 fetching corpus: 6300, signal 189041/270701 (executing program) 2025/11/16 03:30:22 fetching corpus: 6350, signal 189297/271341 (executing program) 2025/11/16 03:30:22 fetching corpus: 6400, signal 189540/272017 (executing program) 2025/11/16 03:30:22 fetching corpus: 6450, signal 189911/272642 (executing program) 2025/11/16 03:30:22 fetching corpus: 6500, signal 190360/273326 (executing program) 2025/11/16 03:30:22 fetching corpus: 6550, signal 190668/273980 (executing program) 2025/11/16 03:30:22 fetching corpus: 6600, signal 190995/274671 (executing program) 2025/11/16 03:30:22 fetching corpus: 6650, signal 191260/275336 (executing program) 2025/11/16 03:30:22 fetching corpus: 6700, signal 191649/275959 (executing program) 2025/11/16 03:30:23 fetching corpus: 6750, signal 191924/276545 (executing program) 2025/11/16 03:30:23 fetching corpus: 6800, signal 192216/277197 (executing program) 2025/11/16 03:30:23 fetching corpus: 6850, signal 192474/277841 (executing program) 2025/11/16 03:30:23 fetching corpus: 6900, signal 192740/278491 (executing program) 2025/11/16 03:30:23 fetching corpus: 6950, signal 193182/279158 (executing program) 2025/11/16 03:30:23 fetching corpus: 7000, signal 193498/279688 (executing program) 2025/11/16 03:30:23 fetching corpus: 7050, signal 193908/279688 (executing program) 2025/11/16 03:30:23 fetching corpus: 7100, signal 194255/279688 (executing program) 2025/11/16 03:30:23 fetching corpus: 7150, signal 194556/279688 (executing program) 2025/11/16 03:30:23 fetching corpus: 7200, signal 194918/279691 (executing program) 2025/11/16 03:30:23 fetching corpus: 7250, signal 195226/279691 (executing program) 2025/11/16 03:30:24 fetching corpus: 7300, signal 195598/279691 (executing program) 2025/11/16 03:30:24 fetching corpus: 7350, signal 195876/279691 (executing program) 2025/11/16 03:30:24 fetching corpus: 7400, signal 196259/279691 (executing program) 2025/11/16 03:30:24 fetching corpus: 7450, signal 196535/279691 (executing program) 2025/11/16 03:30:24 fetching corpus: 7500, signal 196831/279691 (executing program) 2025/11/16 03:30:24 fetching corpus: 7550, signal 197225/279691 (executing program) 2025/11/16 03:30:24 fetching corpus: 7600, signal 197539/279691 (executing program) 2025/11/16 03:30:24 fetching corpus: 7650, signal 197876/279691 (executing program) 2025/11/16 03:30:24 fetching corpus: 7700, signal 198311/279691 (executing program) 2025/11/16 03:30:24 fetching corpus: 7750, signal 198637/279691 (executing program) 2025/11/16 03:30:24 fetching corpus: 7800, signal 199021/279691 (executing program) 2025/11/16 03:30:25 fetching corpus: 7850, signal 199339/279692 (executing program) 2025/11/16 03:30:25 fetching corpus: 7900, signal 199726/279692 (executing program) 2025/11/16 03:30:25 fetching corpus: 7950, signal 200176/279692 (executing program) 2025/11/16 03:30:25 fetching corpus: 8000, signal 200412/279692 (executing program) 2025/11/16 03:30:25 fetching corpus: 8050, signal 200618/279692 (executing program) 2025/11/16 03:30:25 fetching corpus: 8100, signal 200989/279692 (executing program) 2025/11/16 03:30:25 fetching corpus: 8150, signal 201381/279692 (executing program) 2025/11/16 03:30:25 fetching corpus: 8200, signal 201707/279704 (executing program) 2025/11/16 03:30:25 fetching corpus: 8250, signal 202007/279704 (executing program) 2025/11/16 03:30:25 fetching corpus: 8300, signal 202305/279704 (executing program) 2025/11/16 03:30:25 fetching corpus: 8350, signal 202703/279704 (executing program) 2025/11/16 03:30:26 fetching corpus: 8400, signal 202924/279704 (executing program) 2025/11/16 03:30:26 fetching corpus: 8450, signal 203222/279704 (executing program) 2025/11/16 03:30:26 fetching corpus: 8500, signal 203553/279704 (executing program) 2025/11/16 03:30:26 fetching corpus: 8550, signal 203823/279704 (executing program) 2025/11/16 03:30:26 fetching corpus: 8600, signal 204096/279704 (executing program) 2025/11/16 03:30:26 fetching corpus: 8650, signal 204440/279704 (executing program) 2025/11/16 03:30:26 fetching corpus: 8700, signal 204682/279704 (executing program) 2025/11/16 03:30:26 fetching corpus: 8750, signal 204862/279704 (executing program) 2025/11/16 03:30:26 fetching corpus: 8800, signal 205299/279704 (executing program) 2025/11/16 03:30:26 fetching corpus: 8850, signal 205626/279704 (executing program) 2025/11/16 03:30:27 fetching corpus: 8900, signal 205930/279704 (executing program) 2025/11/16 03:30:27 fetching corpus: 8950, signal 206143/279704 (executing program) 2025/11/16 03:30:27 fetching corpus: 9000, signal 206435/279704 (executing program) 2025/11/16 03:30:27 fetching corpus: 9050, signal 206793/279705 (executing program) 2025/11/16 03:30:27 fetching corpus: 9100, signal 207121/279705 (executing program) 2025/11/16 03:30:27 fetching corpus: 9150, signal 207303/279705 (executing program) 2025/11/16 03:30:27 fetching corpus: 9200, signal 207639/279705 (executing program) 2025/11/16 03:30:27 fetching corpus: 9250, signal 208001/279705 (executing program) 2025/11/16 03:30:27 fetching corpus: 9300, signal 208380/279705 (executing program) 2025/11/16 03:30:27 fetching corpus: 9350, signal 208880/279717 (executing program) 2025/11/16 03:30:28 fetching corpus: 9400, signal 209197/279717 (executing program) 2025/11/16 03:30:28 fetching corpus: 9450, signal 209490/279717 (executing program) 2025/11/16 03:30:28 fetching corpus: 9500, signal 210345/279717 (executing program) 2025/11/16 03:30:28 fetching corpus: 9550, signal 210694/279717 (executing program) 2025/11/16 03:30:28 fetching corpus: 9600, signal 210946/279717 (executing program) 2025/11/16 03:30:28 fetching corpus: 9650, signal 211235/279717 (executing program) 2025/11/16 03:30:28 fetching corpus: 9700, signal 211427/279717 (executing program) 2025/11/16 03:30:28 fetching corpus: 9750, signal 211678/279717 (executing program) 2025/11/16 03:30:28 fetching corpus: 9800, signal 211989/279717 (executing program) 2025/11/16 03:30:28 fetching corpus: 9850, signal 212228/279717 (executing program) 2025/11/16 03:30:28 fetching corpus: 9900, signal 212442/279717 (executing program) 2025/11/16 03:30:29 fetching corpus: 9950, signal 212794/279717 (executing program) 2025/11/16 03:30:29 fetching corpus: 10000, signal 213023/279717 (executing program) 2025/11/16 03:30:29 fetching corpus: 10050, signal 213287/279717 (executing program) 2025/11/16 03:30:29 fetching corpus: 10100, signal 213629/279717 (executing program) 2025/11/16 03:30:29 fetching corpus: 10150, signal 213883/279720 (executing program) 2025/11/16 03:30:29 fetching corpus: 10200, signal 214113/279720 (executing program) 2025/11/16 03:30:29 fetching corpus: 10250, signal 214312/279720 (executing program) 2025/11/16 03:30:29 fetching corpus: 10300, signal 214578/279720 (executing program) 2025/11/16 03:30:29 fetching corpus: 10350, signal 214722/279720 (executing program) 2025/11/16 03:30:29 fetching corpus: 10400, signal 214985/279720 (executing program) 2025/11/16 03:30:29 fetching corpus: 10450, signal 215286/279720 (executing program) 2025/11/16 03:30:30 fetching corpus: 10500, signal 215504/279721 (executing program) 2025/11/16 03:30:30 fetching corpus: 10550, signal 215802/279721 (executing program) 2025/11/16 03:30:30 fetching corpus: 10600, signal 216076/279721 (executing program) 2025/11/16 03:30:30 fetching corpus: 10650, signal 216366/279721 (executing program) 2025/11/16 03:30:30 fetching corpus: 10700, signal 216565/279721 (executing program) 2025/11/16 03:30:30 fetching corpus: 10750, signal 216867/279721 (executing program) 2025/11/16 03:30:30 fetching corpus: 10800, signal 217074/279721 (executing program) 2025/11/16 03:30:30 fetching corpus: 10850, signal 217682/279721 (executing program) 2025/11/16 03:30:30 fetching corpus: 10900, signal 218005/279721 (executing program) 2025/11/16 03:30:30 fetching corpus: 10950, signal 218202/279721 (executing program) 2025/11/16 03:30:31 fetching corpus: 11000, signal 218474/279721 (executing program) 2025/11/16 03:30:31 fetching corpus: 11050, signal 218703/279721 (executing program) 2025/11/16 03:30:31 fetching corpus: 11100, signal 218890/279723 (executing program) 2025/11/16 03:30:31 fetching corpus: 11150, signal 219037/279723 (executing program) 2025/11/16 03:30:31 fetching corpus: 11200, signal 219249/279725 (executing program) 2025/11/16 03:30:31 fetching corpus: 11250, signal 219463/279725 (executing program) 2025/11/16 03:30:31 fetching corpus: 11300, signal 219755/279725 (executing program) 2025/11/16 03:30:31 fetching corpus: 11350, signal 219957/279725 (executing program) 2025/11/16 03:30:31 fetching corpus: 11400, signal 220202/279725 (executing program) 2025/11/16 03:30:31 fetching corpus: 11450, signal 220402/279725 (executing program) 2025/11/16 03:30:31 fetching corpus: 11500, signal 220572/279725 (executing program) 2025/11/16 03:30:32 fetching corpus: 11550, signal 220836/279725 (executing program) 2025/11/16 03:30:32 fetching corpus: 11600, signal 221078/279725 (executing program) 2025/11/16 03:30:32 fetching corpus: 11650, signal 221295/279725 (executing program) 2025/11/16 03:30:32 fetching corpus: 11700, signal 221520/279725 (executing program) 2025/11/16 03:30:32 fetching corpus: 11750, signal 221701/279725 (executing program) 2025/11/16 03:30:32 fetching corpus: 11800, signal 221876/279725 (executing program) 2025/11/16 03:30:32 fetching corpus: 11850, signal 222065/279725 (executing program) 2025/11/16 03:30:32 fetching corpus: 11900, signal 222337/279725 (executing program) 2025/11/16 03:30:32 fetching corpus: 11950, signal 222706/279725 (executing program) 2025/11/16 03:30:32 fetching corpus: 12000, signal 222899/279725 (executing program) 2025/11/16 03:30:32 fetching corpus: 12050, signal 223037/279725 (executing program) 2025/11/16 03:30:32 fetching corpus: 12100, signal 223238/279725 (executing program) 2025/11/16 03:30:33 fetching corpus: 12150, signal 223477/279725 (executing program) 2025/11/16 03:30:33 fetching corpus: 12200, signal 223788/279725 (executing program) 2025/11/16 03:30:33 fetching corpus: 12250, signal 224012/279725 (executing program) 2025/11/16 03:30:33 fetching corpus: 12300, signal 224228/279725 (executing program) 2025/11/16 03:30:33 fetching corpus: 12350, signal 224470/279730 (executing program) 2025/11/16 03:30:33 fetching corpus: 12400, signal 224674/279730 (executing program) 2025/11/16 03:30:33 fetching corpus: 12450, signal 224817/279730 (executing program) 2025/11/16 03:30:33 fetching corpus: 12500, signal 225087/279730 (executing program) 2025/11/16 03:30:33 fetching corpus: 12550, signal 225341/279730 (executing program) 2025/11/16 03:30:33 fetching corpus: 12600, signal 225511/279730 (executing program) 2025/11/16 03:30:34 fetching corpus: 12650, signal 225721/279730 (executing program) 2025/11/16 03:30:34 fetching corpus: 12700, signal 225887/279730 (executing program) 2025/11/16 03:30:34 fetching corpus: 12750, signal 226130/279730 (executing program) 2025/11/16 03:30:34 fetching corpus: 12800, signal 226280/279730 (executing program) 2025/11/16 03:30:34 fetching corpus: 12850, signal 226503/279730 (executing program) 2025/11/16 03:30:34 fetching corpus: 12900, signal 226759/279730 (executing program) 2025/11/16 03:30:34 fetching corpus: 12950, signal 227010/279730 (executing program) 2025/11/16 03:30:34 fetching corpus: 13000, signal 227252/279730 (executing program) 2025/11/16 03:30:34 fetching corpus: 13050, signal 227467/279732 (executing program) 2025/11/16 03:30:34 fetching corpus: 13100, signal 227661/279732 (executing program) 2025/11/16 03:30:34 fetching corpus: 13150, signal 227926/279732 (executing program) 2025/11/16 03:30:35 fetching corpus: 13200, signal 228081/279732 (executing program) 2025/11/16 03:30:35 fetching corpus: 13250, signal 228277/279732 (executing program) 2025/11/16 03:30:35 fetching corpus: 13300, signal 228466/279732 (executing program) 2025/11/16 03:30:35 fetching corpus: 13350, signal 228641/279732 (executing program) 2025/11/16 03:30:35 fetching corpus: 13400, signal 228821/279733 (executing program) 2025/11/16 03:30:35 fetching corpus: 13450, signal 229231/279733 (executing program) 2025/11/16 03:30:35 fetching corpus: 13500, signal 229387/279733 (executing program) 2025/11/16 03:30:35 fetching corpus: 13550, signal 229597/279733 (executing program) 2025/11/16 03:30:35 fetching corpus: 13600, signal 230239/279733 (executing program) 2025/11/16 03:30:35 fetching corpus: 13650, signal 230432/279733 (executing program) 2025/11/16 03:30:36 fetching corpus: 13700, signal 230596/279733 (executing program) 2025/11/16 03:30:36 fetching corpus: 13750, signal 230841/279733 (executing program) 2025/11/16 03:30:36 fetching corpus: 13800, signal 231013/279733 (executing program) 2025/11/16 03:30:36 fetching corpus: 13850, signal 231192/279733 (executing program) 2025/11/16 03:30:36 fetching corpus: 13900, signal 231406/279733 (executing program) 2025/11/16 03:30:36 fetching corpus: 13950, signal 231559/279733 (executing program) 2025/11/16 03:30:36 fetching corpus: 14000, signal 231789/279733 (executing program) 2025/11/16 03:30:36 fetching corpus: 14050, signal 231977/279733 (executing program) 2025/11/16 03:30:36 fetching corpus: 14100, signal 232145/279733 (executing program) 2025/11/16 03:30:36 fetching corpus: 14150, signal 232402/279733 (executing program) 2025/11/16 03:30:37 fetching corpus: 14200, signal 232640/279733 (executing program) 2025/11/16 03:30:37 fetching corpus: 14250, signal 232784/279733 (executing program) 2025/11/16 03:30:37 fetching corpus: 14300, signal 232985/279733 (executing program) 2025/11/16 03:30:37 fetching corpus: 14350, signal 233188/279733 (executing program) 2025/11/16 03:30:37 fetching corpus: 14400, signal 233342/279733 (executing program) 2025/11/16 03:30:37 fetching corpus: 14450, signal 233566/279733 (executing program) 2025/11/16 03:30:37 fetching corpus: 14500, signal 233729/279733 (executing program) 2025/11/16 03:30:37 fetching corpus: 14550, signal 233917/279733 (executing program) 2025/11/16 03:30:37 fetching corpus: 14600, signal 234112/279733 (executing program) 2025/11/16 03:30:37 fetching corpus: 14650, signal 234232/279733 (executing program) 2025/11/16 03:30:38 fetching corpus: 14700, signal 234419/279733 (executing program) 2025/11/16 03:30:38 fetching corpus: 14750, signal 234625/279733 (executing program) 2025/11/16 03:30:38 fetching corpus: 14800, signal 234853/279733 (executing program) 2025/11/16 03:30:38 fetching corpus: 14850, signal 235035/279734 (executing program) 2025/11/16 03:30:38 fetching corpus: 14900, signal 235243/279734 (executing program) 2025/11/16 03:30:38 fetching corpus: 14950, signal 235393/279734 (executing program) 2025/11/16 03:30:38 fetching corpus: 15000, signal 235543/279734 (executing program) 2025/11/16 03:30:38 fetching corpus: 15050, signal 235709/279734 (executing program) 2025/11/16 03:30:38 fetching corpus: 15100, signal 235879/279734 (executing program) 2025/11/16 03:30:38 fetching corpus: 15150, signal 236151/279734 (executing program) 2025/11/16 03:30:39 fetching corpus: 15200, signal 236313/279734 (executing program) 2025/11/16 03:30:39 fetching corpus: 15250, signal 236487/279734 (executing program) 2025/11/16 03:30:39 fetching corpus: 15300, signal 236633/279734 (executing program) 2025/11/16 03:30:39 fetching corpus: 15350, signal 236865/279734 (executing program) 2025/11/16 03:30:39 fetching corpus: 15400, signal 237052/279734 (executing program) 2025/11/16 03:30:39 fetching corpus: 15450, signal 237311/279734 (executing program) 2025/11/16 03:30:39 fetching corpus: 15500, signal 237524/279734 (executing program) 2025/11/16 03:30:39 fetching corpus: 15550, signal 237682/279734 (executing program) 2025/11/16 03:30:39 fetching corpus: 15600, signal 237854/279735 (executing program) 2025/11/16 03:30:39 fetching corpus: 15650, signal 238011/279735 (executing program) 2025/11/16 03:30:40 fetching corpus: 15700, signal 238191/279735 (executing program) 2025/11/16 03:30:40 fetching corpus: 15750, signal 238396/279735 (executing program) 2025/11/16 03:30:40 fetching corpus: 15800, signal 238556/279735 (executing program) 2025/11/16 03:30:40 fetching corpus: 15850, signal 238688/279735 (executing program) 2025/11/16 03:30:40 fetching corpus: 15900, signal 238922/279735 (executing program) 2025/11/16 03:30:40 fetching corpus: 15950, signal 239042/279735 (executing program) 2025/11/16 03:30:40 fetching corpus: 16000, signal 239215/279735 (executing program) 2025/11/16 03:30:40 fetching corpus: 16050, signal 239420/279735 (executing program) 2025/11/16 03:30:40 fetching corpus: 16100, signal 239596/279735 (executing program) 2025/11/16 03:30:40 fetching corpus: 16150, signal 239818/279735 (executing program) 2025/11/16 03:30:40 fetching corpus: 16200, signal 239994/279735 (executing program) 2025/11/16 03:30:41 fetching corpus: 16250, signal 240160/279735 (executing program) 2025/11/16 03:30:41 fetching corpus: 16300, signal 240330/279735 (executing program) 2025/11/16 03:30:41 fetching corpus: 16350, signal 240500/279754 (executing program) 2025/11/16 03:30:41 fetching corpus: 16400, signal 240648/279754 (executing program) 2025/11/16 03:30:41 fetching corpus: 16450, signal 240910/279754 (executing program) 2025/11/16 03:30:41 fetching corpus: 16500, signal 241039/279754 (executing program) 2025/11/16 03:30:41 fetching corpus: 16550, signal 241194/279754 (executing program) 2025/11/16 03:30:41 fetching corpus: 16600, signal 241320/279754 (executing program) 2025/11/16 03:30:41 fetching corpus: 16601, signal 241321/279754 (executing program) 2025/11/16 03:30:41 fetching corpus: 16601, signal 241321/279754 (executing program) 2025/11/16 03:30:43 starting 8 fuzzer processes 03:30:43 executing program 0: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0xfffffffd, 0x4, 0x5c}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) r1 = io_uring_setup(0x5b7c, &(0x7f0000000080)={0x0, 0x70a7, 0x8, 0x1, 0x317}) r2 = dup2(r0, r1) fcntl$getflags(r2, 0xb) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0/../file0\x00'}) recvfrom(r2, &(0x7f0000000140)=""/160, 0xa0, 0x20, &(0x7f0000000200)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0/../file0\x00'}) faccessat2(r4, &(0x7f00000002c0)='./file0\x00', 0x100, 0x1300) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname(r5, &(0x7f0000000300)=@caif, &(0x7f0000000380)=0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x20, 0x3f, 0x2, 0xa, @private1={0xfc, 0x1, '\x00', 0xe3}, @rand_addr=' \x01\x00', 0x80, 0x8, 0xff, 0x8}}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000480)={0x0, 0x2, 0x1, 0x3, 0x1b, "70a4405255841e18"}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000004c0)) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000500)={0xa208, 0x1, 0x3, 0x7fff, 0x7}, 0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) mount$cgroup(0x0, &(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000580), 0x8000, &(0x7f00000005c0)={[{}, {@clone_children}, {@cpuset_v2_mode}, {@none}, {}, {@clone_children}]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0/../file0\x00'}) mq_timedsend(r6, &(0x7f0000000640)="53e888684c7c929aebc3f8139ed935d789a1130fe807e9e127625edd65783c2032361032391cf3fd3d00ca2416b8095927003a27f0f4d72db34acbf94f5ac17c0df4da6ae096727336427b2307420825e992742cbbfe24762e363355f88c205a7fa1f7bee63df25095668554326c87", 0x6f, 0x100000001, &(0x7f00000006c0)={0x77359400}) getsockname$inet6(r3, &(0x7f0000000700)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000740)=0x1c) 03:30:43 executing program 1: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000001c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000200)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000240)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000280)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000002c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000340)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000480)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000004c0)) 03:30:43 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x80) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c8, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x1b4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf7, 0x4, "265fa728bc3719d9334700003dbdeb9fa04600ca1bceb41ec6f1b6fbbe55d347ca46f85c4fd8906a552b604ffe321d0a6b3f141d16db720a8b4341cc2943fd69a83fbe2f25a85527b432156b2342ac8d2026fc154a4e68144e3dccb6f550fafa8784090550d1ec6ace5c8bcc1f9729b2f9ac96e29f068b575219508d19c36e2eee540af5fae3c9d6593a4eb85dc6dab5320d8812e81bf942140cfd463fd0f99033c20ef6274889802675b0e1aeac3ecc2b216bf58979ab5e10e44e6b96a2239515910e687d55f61c08279b2c0edfe3da1f1ab135bfec04a2f873ba15f4f0aa4e3d2d64053246d51abc59ad6c5c8a4949c8ea48"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4dad11d2}, @ETHTOOL_A_BITSET_MASK={0xad, 0x5, "e13162e2e4df8c9c7c3a44284661b9c79f43aafd463fdecd39ab6322fdac58af33f98095f0c4f507852a5879bb5b545bf949db369c2ccce8dffcaf5066abd97856639e31389a6ad4cb5742ed4bf26704ab206dab175308a4a6decc7877e93eae4b9141e4efac670b50467af759fc109c195e1eb3b99e4eb8c7e169e3b8a8f1e8fd5dc6f5bc298701751145c87ccdefddf8d16879a83627f9b1393a005fb0ea7e3d464b49ec3c8985c9"}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x800}, 0x80000) r1 = dup2(r0, r0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000300)='-&@%//[+k!*^!@$\'\\#[1+/@:\x00', 0x0, r0) r2 = dup2(r1, r1) fsmount(r2, 0x1, 0x9) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f00000003c0)) dup3(r0, r0, 0x80000) bind$802154_raw(r2, &(0x7f0000000440)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x50, r4, 0x27697000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) bind(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x2, 0x2, {0xa, 0x4e21, 0x10000, @local, 0x8}}}, 0x80) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000540)={0x2, 'veth1_to_team\x00', {0x91}, 0x5}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000580)=0x5100, 0x4) r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$unix(r6, &(0x7f00000005c0)=@abs, &(0x7f0000000640)=0x6e) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd0, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x97, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @preq={0x82, 0x57, @ext={{0x0, 0x0, 0x1}, 0x7b, 0x4, 0x8, @broadcast, 0x5ecf, @device_b, 0x9, 0x9, 0x5, [{{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @broadcast, 0x1}, {{}, @device_a, 0x479}, {{0x0, 0x0, 0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0x9}]}}, @perr={0x84, 0x35, {0x0, 0x3, [@ext={{}, @device_a, 0x9, @device_b, 0x15}, @not_ext={{}, @device_b, 0x8, "", 0x38}, @ext={{}, @device_b, 0xfffffffb, @broadcast, 0x37}]}}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040880}, 0x8000) 03:30:43 executing program 7: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000000c0)) fcntl$notify(r0, 0x402, 0x33) r1 = fsopen(&(0x7f0000000100)='binder\x00', 0x1) r2 = fsmount(r1, 0x0, 0x71) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0/file0\x00'}) ioctl$VT_RELDISP(r3, 0x5605) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0/file1\x00'}) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000200)='\\\x00', &(0x7f0000000240)="c0ed7874ed9c6dc1b3b566c934d1725b026164bb61d3e10f3f1df436a7dfe02f10236d435dfa2f89b32f16f0861999184f9a6243653e37177ce1eeecb083d24f0b310d301c101a28020a77f7a37eef2f50a0d4bf20a0ac5400708e19bfe412d4336cc617c7ec3531c2e5a4755b75ba220bd16bbe1ac76a688dfb2bbb52ea66076e9020844e57d9cbde", 0x89) statx(r3, &(0x7f0000000300)='./file0/file0\x00', 0x2000, 0x400, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fcntl$getown(r2, 0x9) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000440)={{0x3, r5, 0xffffffffffffffff, 0xee00, 0x0, 0x42, 0x9}, 0x9, 0xd893, 0x76, 0x9, r6, 0xffffffffffffffff, 0x4}) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f00000004c0)={'\x00', 0x9, 0x2, 0x2}) r7 = syz_open_pts(r3, 0x400) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000540), &(0x7f0000000580)='./file0/file1\x00', 0xe, 0x3) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) [ 94.295741] audit: type=1400 audit(1763263843.310:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:30:43 executing program 3: ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000080)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000000)={0x1, 0x2, 0x2, 0xffffffff, {0x2, 0x6da, 0x3, 0xc5b, 0x8}, [0x9, 0xff]}}, @name="4cc0892750f9c52d0c9f3c94584e13a8041ef3c0f1cc2d4bdce36689a210e6f2836c9c8a1a5bbd3970680c2ebd6602db30330d8a441d66c9bbdfa9fdc5ef069991f1630906e5828cc4436715f75ca82d71390be5cdb9c41e362a13b4dcecf468e14368dcfd7215cfe178d02ad4eb46753571e7c29bf9a549882c376117ceff672686058e8268a9384eaa9a4242493eec7dd0d4abb0ed59b5cfe17b2f2cc1346d00b48f44710ff1fb49558a4209f3453f92e6c230d19850333bc0d564cf5c9e159a20e866975279368a18c0ba4b4fbeccf5976be8ac306454bfd69a41ff7b59b466e8661af041fc576688411dec814fd9fca6c8754a6f9f6de204b859ec5111e3c7206eed44ebe1f17498d7c4d0441ff8a57b25409721b47e7ecf8872e6f7831e385169969a11f0f3faef3836a7db3e19a60be098e589afb17765be5b78daf0a4c599023cbf53b8bef33d5902eec2ec097c5416fd6b41e7e76f06288d01dec931ffb6bb394ccf3f905907840efe61b30665b2cdf62a8d2010150f7fcff848c79392c27d35fe5443b19567211668b3589c701fb0efc14d6788fdc1bc7b2b18817d5f0e7210ceacfaab7661c849de31379ee85840474277b3f338863f628d3c15d8dc1930feb48bab4b0bc2d6904605b3678b6c221fa209b1d2c20bec48755c30e50a164b69a7934dde1ac3fb596b8bc385a47c6f2fadc8ddc9d7c3916d42230317b5d996358bdb08b7e3f61a76ec2f7c7b004d19c7bad0a8b8df6a017b4701ee540d04bfd96718dc7fb1bc72b1c42d59bcee556b09d9a55d5b576d39c514447a857ff5807336edf2522344303bb13c5848760c6f54493731ade1aa17e98bba7f39ca067b66f6306ff387ab9b81db1587cd50f277ad05791a1c74c090271fe5543772013ce751e8c79079223e3d35fb24f8c79f4dc153651dfe903f65e6056e4dea8ed329b6d543d92bcb64d7b3d8d445f3b76bf33fc993ca30d58a16a535d29919e250343db95847946c09b0144ed3b24a49c4dbccf85ad533784323ed5f456cd9ed91faa5884b42007d5c4e2e91b449aeb5dfc2fc5601491cbf96f3271ba0f8c33a34c0e03f9fc4261e61069b60886296fe770967cddc0f4477b95ae9d38a44169ce9b4b01a330632d1a0244ccb05cee3ec79ed6c0acb6c9b564cfd712c1ee2c0a454705c4bd6fcc4e3998a2647631d772b476bcbe3d55ad556db9d1c8dc2201f69e4f9b33f2a29a545b96ee82eabb224b4ef471388abafedc2101e81785e33bf1eba8912bef56d140cacf737035efffb4252992171019a3ef5377db617269fe991cadb0d150c23113bea4153a8f278ca3ea4d194f7bc2b4932f3f1d892a20544aa72a4400e092324385a981507e9d8fecbaf475fcbd9685ca4ecd8a95d1667440dc7fada213b0b6b9b9a598ba1b8e2ddf99d81bbf2efd43fc139d879471332a9bc28ef90a850adbf7e88dfd259533ee11b7a7b0258f293fcad5ec493d876603faf2e76bef379271b064e49a0ee86f2cf83be0857bacc05c93ebde89aa9fbebd8fa38e294ff58aa865f51a669fdf0a3863c13841e25289fd4877506cd494a7bd350c27cf6a6ec8c3ecc70528a4c093d216d82abb383e7e308104635b6e91cffc02974c9ae2b642b61aa34c1e2afd21b21148ac363b81c51c58145710b7c7de37ef0c3c6d00f6353bd8325732ef3706f16f6001e244446b904bb53d4cd0e272b42d1ba0bc8c567afb2f4cd74cdee196f56372120aaba292597e4c981b7fb5b204b0007979948936ae17ee2290ea4810e2fe45a884d3f3e3a9cab00805efaefa270b0235356ffcc1a9fa398edb14d8c06e914af67b9237381824a942d15a4f26c203150b8355b9f8700055d7312678ac1aa038bfb6f18c9ada05e293ba8e65b60e0617d6391a3fccc83268cec7a4ef2a9a1b8bc3438964975691c5379c109f5b3ddbafdf4c4bde94fbe368d116756ace0794b5a2a4ad2b53004f7275925159020d90a2133c6e78a1ab4a9359200bcb700ec3916e0d47a970081ada7a5ee019193bf7684e70f39b4e0355e0c6bb86e9af50fc65b8eaaa56a39a999214201f1138fd8faf0b45e4f6decffbe2a3c0278c14ce03218cd9373755572c2134fed2c22d98e11c134df9f273d3244dc008416fa57629e9a29089ae2d15f19fc994135446b9ff9bf679e59624f7586ec54295172b9e01482b84b132a164d9295717f5353d1b05cb8f076c34798b9dce2a934fe7df138d078af830fc3fc2bedde06d028cecfce71fd651caa2334483ab7b5dd61c8385a7de2395680773b8ebcfe05338d819b66caa84ddd894309f3f1fb25d21447d7cf5836004db651e5fc1dfa21e9ddb6eb90a8c1181ec3fad0365240c748ac0760a3981379ed92ed53597292cf3bfca890fa241caae02c241d60d35410a2dea417cfd3fba30c37d98968aa65d9b503ea6d45d24252349632a90519ecab8e0a2f34fc5ba6a437463376fc45f3e0251f78817555fcc7f8f89fd6ffa683f6fec04743ee19d524ecfbf1edbf77b6e77d02f9794726646a396ceda054858d2a8db2a45a619f18e4ace513670bc95aba63517cb58b9b204a7eb2c3dd0a1a07636099c3a909d27c62aa9fe9df7d825e9aa5901ec9f1406712f81679a57b0e16edab5136feb328fa4ba55be4bfdf49bb16afcc0339e97ed13938239a16df27a9b052c0936aaf16316171510ac553881f10cac581680820106b5bec3d51eb5a900d89749e61ee1ba43031e7709a2e608de9aea30de7c120fca41ce95e7079e55e0c1e2ea64948b75955412aa28e39b34d151a989182d1cdc7bf60f68798bff6bccd2f61e363b8a0fc8c24eac736a02c7312c11e2b093f1e8e6c8bc261e72031d8f39cdd1f64bb8b36d04290f92184a64c71f78f5307ba7300e45da1dc264ccbe26f5617f70940a3b40e10a4a5973976c78e1ca1417d545154763419d1122535055d32249d5de8a468b3bef307359f1e69f58f827251bbca065b02d2dd1b245983e2b09fe781678b6a6facdae8d8bf77a85822efbdd6f7739099a508ab5a46cc9ee4672286e44d6b371d4c633ae8a975982904a59244c66806a825b9e9c4a23632530e48b6b93881d0937a1fe9693ec961603658446cd3ec81c0db551cb8d5e6166b4a77db6765a45a53249425ed2d78eb92999fc90c13f00536de8433968035d91f29626f61da07cd1476b1dc84b5ba17a6aae64c730c7ab91a501ebbfe88e1f4bcbec97ecea152987cff7816ba5ab20114ef446e1a89d73617fd67ad59f4d8b7ef509ba723dab5160d1b372a44d1b1a5987240853ddb82f5e9a5424dabb1262256994bd63ed8faf58cbd6790ce5818152b7caba512b2e46b61ac5dca06db231468b5d6c6606a90eef357f3bf9c92da4001e4aa192fa8ccf5a3db9a7b3d5d4ca2360ac7491e760f583c7eb86fb624a1860136e3d7117f6db5b5d00f404402b0d8f9c2c74f9b1743cbb1470e99664701d0d7e32d11a7faa093c8aaf4c5647855b60cb26c56f795ce38271bc015fb0290fcc5374eb0c4e637dd9377bfaa0414d6293d522d0a792245527688e94a871e9f45a3e5aaca7881ea732801b403c7de45c7a01b49483a8fb0abea02c0b9ea5e16cba35fcbb140ef9ef6b4665ee88f9fb8bf2042958eb7d2e22d77419ff5e70c42eed188e21d78f0a1757703a3cfea3b8d7fd5f956a43dddd80f1ad46c79edd82538e375c454155d6767804e1e4fb000300cb2099c10619ee8b4aef1a57e4fad28950bf709de80d36b744c94341a0c68754a9718dcb359d25cdb05478131b5b325dbbed74c449e70ca868c564fcb94ec2afeb926d341c0b5e82173a9d845e0636ca6677b34180a651e9fcd84242abdbfcbe48177caaf7933640f3fa392cd84dc20aed9fb6f434d6b2667dd2fc61b5bc8a07563e7be32fe2f1d552af7b1a75479adff2de3e472d1e129ee783071aeecbd50f254ec9b6403f9517eee48ea1d41913fa6fdf95fb61b27117186401e798fd07482161a3b3316e449f11b488b4b15088a4a59c00ba2a2a8d7190cfb7535761ce5621733f743f780bdb6eb28df2785a4523429bb45cab1b897f25f398f6a02cfcce1f7acf393f668f5e366f964d8a9630145fcf677b79939d400b2159ffe73286517e5a79e2cb836ea788f83be79ebbd0d0ebcd89d198edcc8468048952ce3dbd57b750aad8b1d98655643f4e61e23ad02567b64cbe6f3a42149cdd073df210377d55b3e4195839a5411f6c144c1bd9800ccc82b91f957452907ebda1ecf2bd17e56b8a0458eb95dc362e5969e7d3ffd4ea2ab47bfcfb16be5d2253a37f6aa0452a6c2f433808914acdb3586c9d8f6ee8d28d682fd435ea38d1928e20d4f9596484b596a4f574ce95f388c47551a7b1fcd3ab964cbff194ec2dd69daf3905fec31c89d86ca85c4e8fa4ea2f645fc5415628947c2fe70c5e2f4e6b79f2ba706ca6cf34f7303805a616381f520f279c9189a7040c25d3482945eaa49c4e1f4786223228792852f897c664b41510a860bb516379fc7c4171d5aab617c3353a8b4783ce207137cdbf666ece31aedc182040813b8f03a5ec3e88500e6a46143971e54bab45f18752c84dc59cf3b734fc38d499982cc651cc269ef0ea0a52bdb502933e297e4a5dfebccb4202f4f6c0bd38250ad3d2e05e5e3fe83e34fb83561336a6afb08c87f887f85998d597bfd7f185917abba21f60d3de5a8b37a5f5ab08798c1d20f9fa0327777c2b3cdbcbaaf922bb6442147c9ae9dc272513d675362b1e21c9530227796c92f36a3ecd41a82470a0cec5fac82f99b66eed6727e13a432b9a408b775e326026a1760e22ea2bd6d3846716aecae291fa86bd3eac21399814a3e9ab08a7bf67419cb867af3d50ff7fd03ad7ce2933427d761967247b68781a3f1172e6b970bbc98da10978a5c5bd84d07ad669e4cdd2e938d594c1caa57c352d1e90a65e4cd552bde6966df093aedfb2099b6abd7d00f6658dc0be5da71c2ebf2607e296b91d5f953689e2463a4c60e36419f6f82be6ec895faa177e498efae58cc2347dc90027c64da26439f5385e16cc0776d94657c24a6e35b2aefdca01bd0ec06f8638c91d839b9aa3ba31b6e20988d9b3a309a8abda0ca9ea7db8ada63aa0dfdc28c5767fa85d436d305d1a2ae31bf4178e24748351509c8260b102d4c5cb3ae53df0283af13c90cf948ec9a2046ccde3a732785a6f73089c43cf253048192cad53c05760907a36031172d15a117785414557b10c3dba9ef54e6656fe32fcc4b03ac18f90fd2af38688cb2db96067a5ef06a07d09f8cc1c836b60361a3bafafcdaa2cd378ff60f4f6c0e2321dcec412acdc3194fea8a88b32ac1feb2501e4221483106598bcca41d5cf0607c77022aff46ee83af2fa5b5e4d2770c583f4b1948b2ec5db5d5b478158e39679df7c211bd5da69f79877c4b7e87873672da9b212090e2c1e9587d761ece79b369e9b453b96c1526f580e7da5ed516f445a1033072401a1b673eddcf1a0bb3ae0d2b11e83b02a76f56ebddd58d6c35393b0daa3988c10062cce2c26e85c6a5236944f716d5a4611de82b638d2866aad0845cf2566c7f6cea9e4759c4ed4474ce1e0949a2d99483d9c7e85a450bb394c9103137489bccab1eaa4766c87d09d72d6f7ccf8e78cdfc477fe7e6452e4c0dbf6c809fbef041176c71e7ff6ff06bf4233ca71425e7aa04c175a263e1d26205906e5f77"}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000002780)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f00000010c0), 0x6e, &(0x7f0000002140)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002180), 0x6e, &(0x7f00000025c0)=[{&(0x7f0000002200)=""/228, 0xe4}, {&(0x7f0000002300)=""/204, 0xcc}, {&(0x7f0000002400)=""/240, 0xf0}, {&(0x7f0000002500)}, {&(0x7f0000002540)=""/26, 0x1a}, {&(0x7f0000002580)=""/62, 0x3e}], 0x6, &(0x7f0000002640)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x98}}], 0x2, 0x40, &(0x7f00000027c0)={r0, r1+10000000}) r16 = geteuid() sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000001080), 0xc, &(0x7f0000002a40)={&(0x7f0000002800)={0x20c, 0x0, 0x2, 0x3, 0x70bd28, 0x25dfdbfb, {0xc, 0x0, 0x8}, [@typed={0xc, 0x25, 0x0, 0x0, @u64=0x2}, @generic="4235885cf83f3c9f5c49337d25feea1f49e886fec27add027be2a2a0f5fe88e3fc397f47fea3a2", @nested={0xab, 0x19, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @pid=r9}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0xc, 0x14, 0x0, 0x0, @u64=0x4}, @typed={0x16, 0x2f, 0x0, 0x0, @str=')$/$*]&\\:!]:],]%%\x00'}, @typed={0x48, 0x26, 0x0, 0x0, @binary="8ef3155ae88c5a62c8aae8537e6da3e307daa6b00b9a3abb7ae555e0a40dec8675c54fd5959afeffba7df4e653e44c59bcb3a18649796ba8ad1ac5fecd5876cfd21c4e95"}, @typed={0x8, 0x13, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="eae4eb", @generic="2ff48dea6a245f2673ddfc43"]}, @typed={0x8, 0x22, 0x0, 0x0, @uid=r16}, @nested={0x104, 0x20, 0x0, 0x1, [@generic="fd4e4ac143227b793ac0dfe0d6162ed6f594ad844971e204224375b7aa5b20d959e947bc04d208b9fd654e07e46b2e06cca8fb7c51716113737efd786325c25277a6b3a04c69ce73995d", @generic="62d6426930905d266bb8fa169a194c5d4ef699a7b437f33fa6c9d9", @typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@loopback}, @generic="901bd86b0dc925e07333516652427cb05f73ed9656595c2c48a5822bc2eafa4a1656dd759f33d227c8bd5e2a43d21ce0cb16c4375a013d0e85c62a3209004dc0e6a844f78d99090ef37e20af7aeded56bcd18364224b31cc4d1594c50a0797e6137a06530a8b46dd2b4ec86979270b0f680f7e6f5b63fa065ebcc3439c96ef52cc349c7e6f05552ba7c2d4417278e06bddb5c2"]}, @typed={0xc, 0x7d, 0x0, 0x0, @u64=0xffff}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20008015}, 0x800) fsetxattr$trusted_overlay_upper(r7, &(0x7f0000002ac0), &(0x7f0000002b00)={0x0, 0xfb, 0x71, 0x4, 0x5, "84350a2855e99a52e51a10df0d413510", "17a68c24c13c98d57e7922d24b68d2af413f70e83466430ae756b1d0dc0f718d65d73e1ef49ed2336efc5ab6b2bf1af141adad0b88cc178cbf8ee0fada4aaf88c5691330f41c7fed616c826375335214b93f8cf28ca723ae532d4a0b"}, 0x71, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000002b80)={0x0, 0xab17, 0x1000}) r17 = dup(r10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000002bc0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r19 = pidfd_getfd(r10, 0xffffffffffffffff, 0x0) r20 = pidfd_getfd(r17, r12, 0x0) r21 = openat$random(0xffffffffffffff9c, &(0x7f0000003000), 0x47a000, 0x0) lstat(&(0x7f0000003300)='./file0\x00', &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = gettid() newfstatat(0xffffffffffffff9c, &(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r26 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000003500), 0x98001, 0x0) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000003580)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000003680)=0xe8) sendmmsg$unix(r18, &(0x7f0000003880)=[{{&(0x7f0000002c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002c80)="757113693e8120da73a509e14c65da159c7aa948d6d34fc967a4bc2c284a2e450f99917c532268ba46777272f6bc01d250a13f82e86ab42aadbe214c5eb71c4fd08d27abba42875978087e7c0b5a0cdec79dc56c00e79b1f589c60eaaf4621268b9fb9eaa8299ff3644e00b2a1845cb264bb6d0d18034782c212dacfa5b2b751de9e4ed1d29d20e34f7718ac66a82122e564e90e8479a18f82a2c76c32ed602c888ff7ab84bed8dd4cd44ac1", 0xac}, {&(0x7f0000002d40)="1cc3fb1961f76fec79e04360ab09dc36e69b00cd0d32a2f3a1c3d6ed9cce95eab8ecc242972e0c8539509513453c0ca36d8d7c4d8445ab3741360063e2112587d225ea781fcefccd0555b198d6e1a57ec687a74f0a7733ad8df16db4aa22cae509267cc51df5855e4b293b0f8309577443251be905acd0d9ae852be759c2179dfb79ac1701", 0x85}, {&(0x7f0000002e00)="0f7c1ab8e4ead728de88129ddb3624e1713412273290814e7d8d36e1c4df828d1f3365c7f8ecfc986014327754d7ea8d772190764e4a499c398282e5af4e43f83aeb9293696a67febb1c35818e", 0x4d}], 0x3, 0x0, 0x0, 0x40052}}, {{&(0x7f0000002ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002f40)="f750ba8a81ec9a485490f42af90206091a7ecf27aa8c8d14bbaaae35c927aa51cb32d37e5d07461b9fc9fd7a081a0afc27c3e5610d9304839ba856610245ab5123910957", 0x44}], 0x1, &(0x7f0000003040)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r9, r16, r15}}}, @rights={{0x28, 0x1, 0x1, [r19, 0xffffffffffffffff, r20, r5, r3, r17]}}, @rights={{0x24, 0x1, 0x1, [r10, r13, r4, r21, r5]}}, @rights={{0x1c, 0x1, 0x1, [r8, r6, r11]}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0xc0, 0x10}}, {{&(0x7f0000003100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003180), 0x0, 0x0, 0x0, 0x4000040}}, {{&(0x7f00000031c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000003240)="99dad689813014d75db1b2529a6d8ec0982a5ea0b2b9bf5aba90a699da0f32174e8904615981d493506990ca4bb237c57215d7", 0x33}, {&(0x7f0000003280)="e5357c4c8d1ab6a60cff9f682a4771e20cea185ca8a6d4a40265a978af43414e", 0x20}], 0x2, &(0x7f0000003800)=[@cred={{0x1c, 0x1, 0x2, {r14, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r24, r25, r15}}}, @rights={{0x14, 0x1, 0x1, [r26]}}, @cred={{0x1c, 0x1, 0x2, {r14, r27}}}], 0x78, 0xc084}}], 0x4, 0x20000000) 03:30:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3c}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x40}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x706}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x100}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfc2b}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x0, 0x4875, 0xff, 0xffffffff, 0xffffffff, 0x1000, 0x3, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xa05, 0xfcb, 0x5ff, 0x1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000880}, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3f}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x90}, 0x1, 0x0, 0x0, 0x4001}, 0x4008001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xc4, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40041}, 0x1) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r8, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x7fff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x24044004) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008081}, 0x4008014) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r10, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c014}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xc0, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x6}, {0x9}, {0x1, 0x2}], "345d6b018c3d11c1"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x82}, {0xc0, 0x5}, {0xb5}, {0x1, 0x1}, {0x1}, {0x2b}, {0x9, 0x6}, {0x5, 0x7}, {0x1f, 0x4}, {0x5}, {0x2, 0x6}, {0x2, 0x7}, {0x80, 0x2}, {0x80, 0x3}, {0x0, 0x5}, {0xae, 0x5}], "88665e364fecfc2d"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x7f, 0x9}, {0x4, 0x5}, {0x3, 0x1}, {0x40, 0x7}, {0x3c, 0x6}], "1c801374ca9e57de"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x81, 0x6}, {0x5, 0x3}, {0x77, 0x7}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x1}, {0x2a, 0x7}, {0x7f, 0x6}], "4c8b94e662cafcff"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x1, 0x7}, {0x1, 0x3}, {0xfa, 0x3}, {0x7e}, {0x20, 0x1}, {0x1, 0x7}, {0xff, 0x6}, {0x85, 0x1}, {0x7, 0x4}, {0xff, 0x7}, {0x1f}, {0x2, 0x1}, {0x1, 0x3}, {0x8, 0x2}, {0x8, 0x1}, {0x2, 0x7}, {0x80, 0x3}, {0x1f}], "6d07b7d40f0cc022"}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40008b3}, 0x0) 03:30:43 executing program 5: keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\x00', &(0x7f0000000040)) keyctl$get_keyring_id(0x0, 0x0, 0x1) keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/215, 0xd7) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x38, 0x32, 0x38, 0x65, 0x32, 0x30, 0xf, 0x63, 0x39, 0x34, 0x63, 0x65, 0x63, 0x30, 0x31, 0x30]}, &(0x7f0000000200)={0x0, "80eb2c36c165848a53d9e965f26f58a11dea4178b41e5ceeb0bdb05c726e8fe33bdfb0cd34c29b86193078adfea4e60ef01835749ac713e0cf9b015f222c74cb", 0x12}, 0x48, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r0, 0x29) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @auto=[0x38, 0x38, 0x64, 0x36, 0x31, 0x62, 0x31, 0x30, 0x62, 0x35, 0x30, 0x30, 0x63, 0x66, 0x31, 0x37]}, &(0x7f0000000300)={0x0, "34c8e4b5e24bfc3faea758647c1f46573e37879a92564d433b146db51e434eeffe4e7808d8a4a5f6fb76e95ed06814a8617976519cfb9c181d709cb698698adb", 0x17}, 0x48, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000380)='trusted\x00', &(0x7f00000003c0)={'syz', 0x0}, r2) keyctl$get_keyring_id(0x0, r1, 0x8001) r3 = add_key(&(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="1cd50b29b77954b1d81e9713b446210ba3be02231a360a51072b40255846efdd681b80383ad8c7ee668c4451a1087ff754b9fe386f17edfbbcd0b030d205ac69d7550ed1262bb1fe0bff97c086bfbb9d887c9a2ed5da3c3675336afdb09df06340d1e01bb891fffd099cde02b0cb91beecb5cf598d9288efadc01e3b12c8f68945a6f3cb6c1ebe74b0fe2904d1f450632064fcbba4952c8b223509e8b2a5e6e1630184a4d5b3a9df9671e45fa093e0cd98e50cb256530b0a1f18b1c323bea2724245f38120977ab0f3aae8fcab343e1de74d877de97720162be9e14373c0c11630ef0d768d28961e4f2576ad15c4a13c42960aacfaacc63710a3db68961dc6dab45e9e092476e53099b4d1392a8b1b922b253dce76d61d269766b589552a7e5292cece5f7ed71244e91f73557154e80c913bc48fb21bdb54550a6cd475fafa0109561a7fdbb4d92a7ba7fde6f1388937bcb13f73c49684521bf5400f74a51ba94e452cf6a043691f7155e338317338767d704a8d195c770eed22d1539c77df728e87b72e7cb906547ec8a9e744cef48ac61373246bdd4464758a7390e5f1b41a167e68605c3822ae836dfd90b73a390069bf3f76d1b4a28696bc033260979536e85f2f3fc30525e48bc03b80ff3629d128fae8c4b28f136570cee98b49fd09034d8a26e20e5ee668fec96f8b90a788a6cb133b09b63ccfef82cc44bd0553fc29d6d5ed57f035c033ec2fe72a57946b3fe38d0243ff20eccf8e691ce5e28c0591e3c821dae79447badc2fcf3f64701eb61feb0e74b17bb2b01c9108e0e01468df15eaf1859737f3834e509b7c2b34b6df4daae2d470734dbfc73f687f664027a50dc8dbf7ed18475d71b308f55695b1bf685069462cab95714bb17a3c7e2151a091fda98466e04bde9b3173735b1c6f332b8dc026466ab4c3252ef87cecf138cce0d5e59a501cdc50630d4bfa50a08e3c96b0ad3e3b986e98e1ed6bae2ea89d7ad24adaf707d1b1ac2375beb3fdf25581ecb8b9bdd24cf5d2a5a9fb4d48f6bf6f781cc555e37103c3639ad2bb7f996129684945ca783be9089e08b221317688eba750b710bc5f1c6661672be550e520950fe38843abfb40e04c9df20ae9f907ad84d70f23db7ad0e0797666c71920a9ecdf6b450a5107ab72a3bd7342ff26864fa52d629b9c489902d5933e1da48150ab751f96ec315e6f03272ab93199f20f6a3debb4064b55a3e6739878920b82d252cb4b9752ce0b3edfc3273c5e1fd5e8448e36afe81e3fef7e90bf07ec90662de2dc568c5c9f4135a1e80806e86d551d788a460c9bdb1f94306b2215eab47529f57e1f49a930d46ff845a31dbf9f6c4adc82c3a74d81a5b8dfedc4259c22661f1bea1cd8f3547ee09fcef4c85b2bdd65e308a3e63677d9a1739a4e91401c3c808582eb41313327d5794ed62bb7ac33b477a8d0aaa1039be96d769c98695c6a76f2aae7c688c55fe6b222649a8c7ce51c09f53f234c49d1dfcba0871ef24012cb30a76d9bc1b2eedf41af6302afc52323f776054d54693870a93c134904ea88cd5262e03618d76c381ccf1a514371a1ab278162778622f2915b330f5511c60431f2f7402fb42738253250907e5b1e1013b61aed257ee615c51a0f9366a1cf3d8b072f9caa6164d1ef0c0f989fe700f94642cdcedc239392c583f18484311d24346a236c1b7c0e28df5b70d3a27b2bdb1b36bd591636c17832e1ab4e997355502bb32deb0ad3f8161603916800a4be7407b11894a03fd4a05c7bd0426823779b109170c8ca2da02c9cc6a193cb7d315409605b6786914e0f77398799d07b583a6f4b28550fe53a7133cb5be14ac612fae4483d84dece5a770b0a27e118987ed16708c2aefcf5983fa385759cd566e80081434d6dc37e32b6b242dc811e8149274d8b41bcd0c58f52400fb2ee347b7a737475a319f1f378f3d29984fbffa2299136ba0b0aa6238162d2def926193e0bceb2b6c906630a2ef8199ea9b658987bc8fdf32160f77786918869d882d666c8558c3135913747a9fdd4c59f4eb6436951a5bc6263ba0d810296edaeabb61d242c8e7256d87366d2b20e53f4e965aefdfe2ee68154ace4410057f508e8adb8483d94b9e9dcd32812e895a7c29954910beb56e407a4f0408109414583d72bd57895149bd77c64a54c345d07e8b67e7ff35a498780a411b766be08bddca45970e8a316f10fcfa3908af2512090817e6d2d3115cf651578334d3b16dafeef3d4475e4b56faca9e474ce3ab23ed406dcf1a36985042f8e9ff6a6083000190739cab5fd9ef55ceb5dd46079c0b7ab4b5890e6f1651e5c69a2b7525fa6f5fe1e877b87469b2bf92e56f0f4612d726618185a51d6fe592465c816f90e3ac801ab661ebb9ebf74f96eb460aff73bc57c2286c0ee96a8ee126baa0fb3e11aa3e0f19227e41479261fdaeadc00135ecafc03bc7d22551f86b2858c9b9ef7e45ee3734484bf11b449d3a6d392fa061a67896f8a7cf6d445c456943d37f902f4a43f6180548b512d23b2e3c883d3478d33ca080948f9ad003808f2f973cd2b90cdda8b32a95b0e9106e196dad22f989fb30c7617afc1135644dd19a39ba6a1f6e38991253ce135e22d6405544cd3aab6e71c6613b4df8675253877d684a06b0054d29f830e45acc9e16cb520ed061e41b79aea8391042549c64b6bd1984693451b98f6126a8acb3aa2a33b38fc2e5e69cdd717b6064def4f5ddaf624ef2f98e7a20e3b7e015ad31a4bc7e7e3facdab511649202caf4508290030ca3444b3f006edb4b09d0133620c4b08045e2203867b9e9ee093bbb91bcf8430c6fe6c3ed2f258f01642c74bd40be88d168fbb93b8968d153b0bbf4cbc04d6a9cb1d5924836ff3e95fd553d283057a568edce735cdc894f3f6a5e9a6300d90876df14a866a343cde80252d74881f56107b59cb25dc7e85b640392fa789f5125b8d7b1bd3878ea89cb92f60ec56cd4020b142b5833b48b87cdd2230273819e9d25446d65614f03abe473c8c4af3214da29c1c22b9fd72e90b501e76698f334a857e6c87ac0edc1e5bf35a6b341b175896eefb5c8a97b4d59d17633f9ba09a9fb81b6e8538443868bc145b2cea025efb06be6af229e2d6bba8eb2d216be0d84ada67dd8a03fdac6a1e82eae2ade4fe86ec8d9e94be74a7b1390c4184f3998169b5aabbb182a97b7abc265c1b025546c9b286b6f2cd6c4559700870939e4a2d2f4e552d88c9cd8098387b5ac65e0c30fe445e2ccc515f48eb167020c3ea7b7218e6009d8fc95071a885851d8afe1f562d6b714af15ee434313f9afd4782930ed2db9c16f8c3093b62f8fac5f8415cd2c8b82e1f7622edee171726352534321a24d55ee93cb878e0881afc32ae82555ccccd9ad8191de447ba42c89036394a2b293f9b0fea4e4acb4d743dfa7a84fa9614e05f509c1f4cc2e89473a21b7f8a5ff471398aa2fe807a3d66c25344747ecdffa50d68412fee2b54cecfc93bb25f289772dd430b5d2a36a85a2bf973ce35c14400fa54e4a844b44654a214ef07f6ab4af1be26e42803903fa74b77cc4f2d3b25a4eda7e90feb775391732ca90a51b221c0d676e68ab40e5495ee0aca66b996f516324ffa331ae4cab8652a9fcf880d60c879a3e0bc574dfc9cb4725426f6c67a1c4523a11545ee0f891941d6a5cea387f369dd89c4503c24478162491b8e7c9be86b58aab05997509e03ba12b445327b94d68844f992e1d877ed7a08a93aad70b2b1461f0a810dd37ebfe6d8de8fe6e33abee45e845120263a68f504be59a13ca5996735c6cdcf818eae6da2037a0cf1a25c7b2424aef45fa1c3d38f714dcb80a6b4ef0ede4739f71a89f37b7c8e68a053ebe3be561f29ea9c0b5b142fd4acca338ffffd08d01341f979a26202027f46c26d8100f285621039ae0e480b1e4e4138ed1bb17cdcd82d560b8a136ceacdf4411373df2e47533368ed9f17ac684cb9df2bc99fc96170b73fc21075aa3e03705cf4bc53f8e084034da347d783ce0efaee670d615464098609de3865eda85f7c25d7f7a54a91bfab35e534432bec97560eaa5cabf50aaaac2db815009349bdcaf116f3217830f1d0ccf8ca181ee54477dac1a3d9a3427ef74997b164831c5294714f400f6f7b2a93599c49e5f835bd515584b04243b8835fc038af7898cd2b7dd9bc912b3f012fc87c53a6aefed542c520c1d29e1112c60c86d7e908c28c71a0df8ff0a887becf53f34c3775d0d85a353a2c0500a29ed96bb22d41955e5bfeec6643794e48d31e887ff3f3275c98165fa61309a14cb56df783dcca8dd36b12c07ac38f1932f71a3ef0aa4fff913ae97301a955a2ce599c220331295176d4ffbf96233627c9000acae33936deaa6c83036bb1d86597ad26d9a561924ecd2e1800b9144b3564e4a4b1d180aa879329cd0469ccc10691c2e5511e628f3e94de0d572d8491e760035e3f9b38827bb9293fd4fd4110273c5cfbaa35f6979aa02c450df07da16031f13e1aabbbecd75a4a976fd994f156545d8bb3ac9a73eeb39bbdb0bb320d75937fddcae12381cb07156914e831664284d652cdcc37665bf43151d79ca805cb30f3eb3df900e0934370fd245125affb2994924e12da251505b7bb95f41f8b8a52c3c414d4a83200ef0097a386ce78401b1855ac36ec96f6a1698ab8bc21372d4f41140fba566b3cdb9eebb97469d16d616bee34c7e325cb8df9da3d5ee468acc2f744392e5f455926239f334f96213ef7dd410343859c38e029b24670edb2cbeafabd5f88b3a99d6d1c6f51edd4c6c8113d12fbbc5c941771611d0e18dcabef4ee5f54d3fbe793ba7e198ed83f7245a48d0ba9e01acad2dbabc999cc9b9940907c160484d7dce1b69af263474fddef6c43b7848f9e421d97fbac6bc47d03a3ce81309c198e0dd9fda4bf2cb5a17de027f3d2c0b82f6231415c5e05a2adb52de7276a61ec6964f844138a92b983f82a90eafeb35d5aa6563af96046e7392341e765327eceb5cbf1d4bc2091019a462ce43d523854d8420cace1a7d716017f9b7424be0d200dc9a95cce42eaa7a8ec04940154e9be6a45f2ec84d3ecb496511582c30bfe281fe58f6a3e82f156964e50b4a9c63f66670f5a4b424100677c9e569121565c1f737adf9d1f789585a798eff8157f1413c52417d097fdcea147deef8bf2b7c02a50c5c26515ad41fb86d7f7a49eb08f97e680ff010a7a02f11b91eee5a529b9dd8378b58993ec0044da11f2bb72d9a05a9dfcb9c4981afe049c03343da68ed4ac9a36bb4034cbf2f8808d7ccfecd652723281f717de8a31f50ebff3e06dd7cc8430572dd3d5499dd9b3b038e3b6d20dc155d31f0b1864599a939a0b49b4cca97f0c182c0ad4605de0365e8887c0207d4865e4a73b90872c4432719f54e20a004a8cf4f27df372f65a2c6597e8e9419ac0966388ec61dbbca53805af03d2c53479bc637a29ec57190f0f8603becbf7fd1bda7145ead5f7d2334f4ee38ce0eb1379e9870e4a44cc896d4f009008168c29bad8d2d4e625cb0457a92a7de419567ac98a78f1c1bf5395054e6eb4f63ad6043e5cbd7e91f2c973304201942718d253659c4c13613b0dbefc632f816cc9c56df2374706c824c8430f2006d0925748d22b9537d38b8b9d39cb40f884580ed63aaa75dbbdc16205bd70c34f826b1f41aa4e69d63c65216d526177546470fc17c7e74f1332d9ad7f063972f450a4f9bb66d59e3789a9fd8bbba97873064f01495c37b119b027a73034caf3da1d09c85c3a0b463fd25beabd4cd", 0x1000, r0) r4 = add_key$fscrypt_provisioning(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x1}, &(0x7f0000001580)={0x3, 0x0, @c}, 0x29, r0) keyctl$get_keyring_id(0x0, r4, 0x800) keyctl$describe(0x6, r0, &(0x7f00000015c0)=""/142, 0x8e) r5 = add_key$fscrypt_v1(&(0x7f0000001680), &(0x7f00000016c0)={'fscrypt:', @auto=[0x64, 0x0, 0x32, 0x62, 0x32, 0x61, 0x62, 0x38, 0x64, 0x38, 0x32, 0x30, 0x31, 0x31, 0x63, 0x34]}, &(0x7f0000001700)={0x0, "765a24b652b9ab9c0a2b315d4d16d06e42630ca4dfaa80ffee6117b6c975fbd087b894a3e819a3074871fdef09b603830c37ea3f13448cae4111b9ed980cf58d", 0x39}, 0x48, r2) keyctl$describe(0x6, r5, &(0x7f0000001780)=""/73, 0x49) add_key(&(0x7f0000001800)='encrypted\x00', &(0x7f0000001840)={'syz', 0x2}, &(0x7f0000001880)="a15f4d257fc21c4eb8047acacb0acddd5e5e67e7c69e4f39a38b55870a9f9d01ade7c8d3d57b0d61cb24b8db603076af436e296ea921b9869d2d954583e13a1510c73d744a9c000d09f28eaa8bc5b56ac052ea75c0d72d3d81374a0aad93d995e832c879f07d68937bb4bee18c1152aef63bcd0be743762e8860ef074b36e0650e4428b1d6e917ee5c5aac2f2b191447d7cc148799741ddaeab07a16a12bd700f54d89579c6fdb4f7276f68621fa728f0d222417330ec322bb8a42c2ac1d72eecc0adb441fd09e14521f71525f4084c8c34e710417ec7cf2e5f8ce05f36bf5d141d4d48deca339cf1d44", 0xea, r5) r6 = add_key$user(&(0x7f0000001980), &(0x7f00000019c0)={'syz', 0x0}, &(0x7f0000001a00)="3cf18a82c9276bcc18f08ace3e72c08070c60c5bb3cb5d387cefeb6d1303104cf7318705bb22c3dcbfaa10b0c04dadbb", 0x30, r5) keyctl$describe(0x6, r6, &(0x7f0000001a40)=""/40, 0x28) r7 = add_key$fscrypt_provisioning(&(0x7f0000001a80), &(0x7f0000001ac0)={'syz', 0x2}, &(0x7f0000001b00)={0x2, 0x0, @d}, 0x18, r3) keyctl$describe(0x6, r7, &(0x7f0000001b40)=""/187, 0xbb) 03:30:43 executing program 6: r0 = epoll_create1(0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x2, {0x1a, 0x113, 0x4, 0xc671, 0x40ed}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fork() getgroups(0x8, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01, 0x0]) r4 = socket$inet6(0xa, 0x1, 0x200) r5 = syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x2, 0x3, &(0x7f0000001440)=[{&(0x7f0000000300)="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", 0x1000, 0x55e}, {&(0x7f0000001300)="879759858a29f93c03e9d455b5420fb7594963b6c385d5c9d0a4f3130352028bf7a58a3d1d121b7c67440664069672e4f3adf805a45c76db0317bea187d22831f41a1811cd75d4eb18e5db1a26973a30e0f2384384874f6580c04f3fd4fd5239ca261637d88b11a6850c8649b620a4bd6c", 0x71, 0x3}, {&(0x7f0000001380)="20b3503d5dbddf98c9d6b0641c134de1bad00785ef658f48e05493b957636682a2f7626c727c93517a8a5effdb10d3b9182397ec0cc8282b7ed3e3a628048311a097a160d1c25a1f2dbe7865027bd9e4ba6150bd30e364309ecc76d433544381bdef48d541dfaaafaea12446732589dbc1141c7c0ac8076827e56fd2a505d2f93f0d9d78a0e624a573c1890ed2cc51c072ad3c4ca70b0e", 0x97, 0x5}], 0x4010, &(0x7f00000014c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@noinit_itable}], [{@hash}, {@appraise_type}, {@euid_lt}, {@obj_type={'obj_type', 0x3d, 'trusted.overlay.redirect\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_user={'subj_user', 0x3d, '^:'}}]}) statx(0xffffffffffffff9c, &(0x7f0000001580)='./file0/file0\x00', 0x100, 0x800, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = pidfd_open(0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000016c0)=""/8, 0x8}, {&(0x7f0000001700)=""/212, 0xd4}, {&(0x7f0000001800)=""/22, 0x16}, {&(0x7f0000001840)=""/149, 0x95}, {&(0x7f0000001900)=""/211, 0xd3}, {&(0x7f0000001a00)=""/29, 0x1d}, {&(0x7f0000001a40)=""/155, 0x9b}], 0x7, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000001c80), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001d00)=""/132, 0x84}], 0x1, &(0x7f0000001e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000001f00)=@abs, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001f80)=""/130, 0x82}, {&(0x7f0000002040)=""/20, 0x14}, {&(0x7f0000002080)=""/47, 0x2f}], 0x3, &(0x7f0000002100)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000002200), 0x6e, &(0x7f0000003440)=[{&(0x7f0000002280)=""/116, 0x74}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/43, 0x2b}, {&(0x7f0000003340)=""/211, 0xd3}], 0x4, &(0x7f0000003480)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003500)=""/2, 0x2}, {&(0x7f0000003540)=""/149, 0x95}, {&(0x7f0000003600)=""/31, 0x1f}], 0x3, &(0x7f0000003680)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}], 0x5, 0x3, &(0x7f0000003840)={0x77359400}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000039c0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="6ecf6f0e55d3a9f246f6af9090989787fd9e208441b049c4524cc2f4ed8e0b39a1918123dc6e946f2973f6b3523f5572ddfae1dee7f1391f72d98e3915f5c28927b5b0f082c2b4c4442349a1896dec826139501cd0db5e0be9d2605c7dfb15e2dd5706cb69b0ed882e7ba0b97566d16d229237b249d873af7a9168cd6f98de1cc32913d1819fa48549c752af2aaed137e6ee39e9c3322462455fa6", 0x9b}], 0x1, &(0x7f0000003880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r4, r5, r0, r0, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r6}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}], 0x140, 0x8804}, 0x0) process_madvise(r13, &(0x7f0000003a80)=[{&(0x7f0000003a00)="852c635f479816a5a589c320f7de5a8db6983452b122d0aa3cfb7d1e76c5440e9df9dad6d38bd4dbbd4ae2690edaa0367e7f5787d012d864b3f7806ee277212380b7c0", 0x43}], 0x1, 0x2, 0x0) sendto$inet6(r10, &(0x7f0000003ac0)="d8bd74b9146e191cf6e0b6205c6e499b8a02ffa954640eea929cfbef7b79a8d586ec8807ab86d6853aee9317412dace81c21561f19477bdf2f58d2c7091509fcec0c6e50bf553293c28d7a3d10aadb24facdb55721b1b34323916c45e16f84766b61bb91baa7e989321002fadfc524a3dc31", 0x72, 0x80c0, &(0x7f0000003b40)={0xa, 0x4e23, 0x8000, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7fff}, 0x1c) close(r12) getgroups(0x1, &(0x7f0000003b80)=[r9]) getgroups(0x1, &(0x7f0000003bc0)=[r14]) recvmmsg$unix(r11, &(0x7f0000005600)=[{{&(0x7f0000003c00), 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003c80)=""/4096, 0x1000}], 0x1, &(0x7f0000004cc0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000004dc0), 0x6e, &(0x7f0000005040)=[{&(0x7f0000004e40)=""/183, 0xb7}, {&(0x7f0000004f00)=""/77, 0x4d}, {&(0x7f0000004f80)=""/146, 0x92}], 0x3, &(0x7f0000005080)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000050c0)=@abs, 0x6e, &(0x7f0000005300)=[{&(0x7f0000005140)=""/180, 0xb4}, {&(0x7f0000005200)=""/199, 0xc7}], 0x2, &(0x7f0000005340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f00000053c0)=@abs, 0x6e, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/247, 0xf7}, {&(0x7f0000005540)=""/106, 0x6a}], 0x2}}], 0x4, 0x40000022, &(0x7f0000005700)={0x77359400}) lstat(&(0x7f0000005740)='./file0\x00', &(0x7f0000005780)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000005840)={0x1f, 0x1, 0x1}, 0x6) [ 95.402248] ================================================================== [ 95.402842] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 95.403373] Read of size 2 at addr ffff88800d8707b8 by task kworker/u11:2/294 [ 95.403934] [ 95.403989] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.404079] CPU: 0 UID: 0 PID: 294 Comm: kworker/u11:2 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 95.404096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 95.404104] Workqueue: hci0 hci_cmd_work [ 95.404120] Call Trace: [ 95.404125] [ 95.404129] dump_stack_lvl+0xca/0x120 [ 95.404146] print_report+0xcb/0x610 [ 95.404163] ? __virt_addr_valid+0x100/0x5d0 [ 95.404177] ? hci_cmd_work+0x66d/0x6d0 [ 95.404191] ? hci_cmd_work+0x66d/0x6d0 [ 95.404206] kasan_report+0xca/0x100 [ 95.404220] ? hci_cmd_work+0x66d/0x6d0 [ 95.404236] hci_cmd_work+0x66d/0x6d0 [ 95.404251] process_one_work+0x8e1/0x19c0 [ 95.404271] ? __pfx_process_one_work+0x10/0x10 [ 95.404287] ? rcuwait_wake_up+0x27/0x290 [ 95.404304] ? move_linked_works+0x172/0x270 [ 95.404317] ? assign_work+0x196/0x240 [ 95.404333] worker_thread+0x67e/0xe90 [ 95.404349] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 95.404364] ? __pfx_worker_thread+0x10/0x10 [ 95.404380] kthread+0x3c8/0x740 [ 95.404395] ? __pfx_kthread+0x10/0x10 [ 95.404409] ? ret_from_fork+0x79/0x7a0 [ 95.404422] ? lock_release+0xc8/0x290 [ 95.404440] ? __pfx_kthread+0x10/0x10 [ 95.404454] ret_from_fork+0x67a/0x7a0 [ 95.404466] ? __pfx_ret_from_fork+0x10/0x10 [ 95.404478] ? __switch_to+0x759/0x1060 [ 95.404494] ? __pfx_kthread+0x10/0x10 [ 95.404508] ret_from_fork_asm+0x1a/0x30 [ 95.404528] [ 95.404532] [ 95.411947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.412116] Allocated by task 292: [ 95.412125] kasan_save_stack+0x24/0x50 [ 95.413505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.413788] kasan_save_track+0x14/0x30 [ 95.413802] __kasan_slab_alloc+0x59/0x70 [ 95.413815] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 95.419053] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.419112] __alloc_skb+0x2ab/0x370 [ 95.420846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.420976] hci_cmd_sync_alloc+0x34/0x300 [ 95.426393] __hci_cmd_sync_sk+0xf7/0x5c0 [ 95.426710] __hci_cmd_sync_status_sk+0x4d/0x1a0 [ 95.427070] hci_dev_open_sync+0x10ef/0x1f60 [ 95.427406] hci_power_on+0xdb/0x5d0 [ 95.427691] process_one_work+0x8e1/0x19c0 [ 95.428011] worker_thread+0x67e/0xe90 [ 95.428307] kthread+0x3c8/0x740 [ 95.428566] ret_from_fork+0x67a/0x7a0 [ 95.428859] ret_from_fork_asm+0x1a/0x30 [ 95.429166] [ 95.429295] Freed by task 297: [ 95.429535] kasan_save_stack+0x24/0x50 [ 95.429836] kasan_save_track+0x14/0x30 [ 95.430134] kasan_save_free_info+0x3a/0x60 [ 95.430460] __kasan_slab_free+0x43/0x70 [ 95.430766] kmem_cache_free+0x26f/0x500 [ 95.431074] kfree_skbmem+0x18a/0x1f0 [ 95.431367] sk_skb_reason_drop+0x10e/0x1b0 [ 95.431685] vhci_read+0x3d5/0x5d0 [ 95.431956] vfs_read+0x1eb/0xc70 [ 95.432223] ksys_read+0x121/0x240 [ 95.432490] do_syscall_64+0xbf/0x430 [ 95.432778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.433159] [ 95.433288] The buggy address belongs to the object at ffff88800d870780 [ 95.433288] which belongs to the cache skbuff_head_cache of size 232 [ 95.434214] The buggy address is located 56 bytes inside of [ 95.434214] freed 232-byte region [ffff88800d870780, ffff88800d870868) [ 95.435081] [ 95.435221] The buggy address belongs to the physical page: [ 95.435630] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xd870 [ 95.436203] anon flags: 0x100000000000000(node=0|zone=1) [ 95.436599] page_type: f5(slab) [ 95.436852] raw: 0100000000000000 ffff8880096c78c0 ffffea0000361340 0000000000000005 [ 95.437416] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 95.437977] page dumped because: kasan: bad access detected [ 95.438391] [ 95.438520] Memory state around the buggy address: [ 95.438881] ffff88800d870680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.439413] ffff88800d870700: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 95.439938] >ffff88800d870780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.440462] ^ [ 95.440836] ffff88800d870800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 95.441361] ffff88800d870880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 95.441885] ================================================================== [ 95.442474] Disabling lock debugging due to kernel taint [ 95.447263] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.452484] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.453287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.456429] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.457545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.527117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.539523] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.544041] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.545205] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.546459] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.554273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.559226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.563056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.567653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.569333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.589048] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.598290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.603659] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.604678] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.605649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.607918] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.608997] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.609887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.610958] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.612879] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.613154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.614685] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.616970] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.618662] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.623304] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.624559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.625794] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.626314] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.628957] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.643070] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.501425] Bluetooth: hci1: command tx timeout [ 97.501885] Bluetooth: hci0: command tx timeout [ 97.629476] Bluetooth: hci2: command tx timeout [ 97.629908] Bluetooth: hci3: command tx timeout [ 97.693925] Bluetooth: hci7: command tx timeout [ 97.695247] Bluetooth: hci5: command tx timeout [ 97.696409] Bluetooth: hci4: command tx timeout [ 97.758396] Bluetooth: hci6: command tx timeout [ 99.549508] Bluetooth: hci1: command tx timeout [ 99.549944] Bluetooth: hci0: command tx timeout [ 99.677472] Bluetooth: hci3: command tx timeout [ 99.677893] Bluetooth: hci2: command tx timeout [ 99.742480] Bluetooth: hci4: command tx timeout [ 99.742874] Bluetooth: hci5: command tx timeout [ 99.743257] Bluetooth: hci7: command tx timeout [ 99.806395] Bluetooth: hci6: command tx timeout [ 101.597481] Bluetooth: hci0: command tx timeout [ 101.597509] Bluetooth: hci1: command tx timeout [ 101.726457] Bluetooth: hci2: command tx timeout [ 101.726507] Bluetooth: hci3: command tx timeout [ 101.789515] Bluetooth: hci7: command tx timeout [ 101.789535] Bluetooth: hci5: command tx timeout [ 101.789557] Bluetooth: hci4: command tx timeout [ 101.854400] Bluetooth: hci6: command tx timeout [ 103.645440] Bluetooth: hci0: command tx timeout [ 103.645901] Bluetooth: hci1: command tx timeout [ 103.773488] Bluetooth: hci2: command tx timeout [ 103.773912] Bluetooth: hci3: command tx timeout [ 103.837411] Bluetooth: hci7: command tx timeout [ 103.837837] Bluetooth: hci4: command tx timeout [ 103.838216] Bluetooth: hci5: command tx timeout [ 103.901428] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 03:30:44 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff1100153cf29 RCX=ffffffff815592bf RDX=ffff88800f7cb780 RSI=ffffffff815592ad RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88800a9e7940 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff8880160cb780 R15=ffff88800a9e7a20 RIP=ffffffff815592af RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f13662a1e20 CR3=000000001e5f3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f13686127c000007f13686127c8 XMM02=00007f13686127e000007f13686127c0 XMM03=00007f13686127c800007f13686127c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff88801637f468 R8 =0000000000000000 R9 =ffffed1001460046 R10=0000000000000074 R11=0000000000000001 R12=0000000000000074 R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0 RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2cf7266070 CR3=000000000ddbe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003f847ae147ae147b XMM02=00000000000000000000000000000000 XMM03=00000000000000003f73f2c2516ae106 XMM04=353834535253434f4954246c74636f69 XMM05=303030303030663778302826202c3130 XMM06=3034393533373778307b3d2930633630 XMM07=24656d616e6b636f737465670a297d30 XMM08=663778302826202c3372283674656e69 XMM09=6178307b3d2930303730303030303030 XMM10=69727040202c307830202c307830202c XMM11=3030663778302826202c7d3265746176 XMM12=0a29633178303d293034373030303030 XMM13=35303263383866353533333633653236 XMM14=35326664333665656237663161663761 XMM15=22373863363233343535383636353930