Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:65043' (ECDSA) to the list of known hosts. 2025/11/14 17:26:24 fuzzer started 2025/11/14 17:26:24 dialing manager at localhost:37161 syzkaller login: [ 44.158643] cgroup: Unknown subsys name 'net' [ 44.207495] cgroup: Unknown subsys name 'cpuset' [ 44.227557] cgroup: Unknown subsys name 'rlimit' 2025/11/14 17:26:34 syscalls: 2214 2025/11/14 17:26:34 code coverage: enabled 2025/11/14 17:26:34 comparison tracing: enabled 2025/11/14 17:26:34 extra coverage: enabled 2025/11/14 17:26:34 setuid sandbox: enabled 2025/11/14 17:26:34 namespace sandbox: enabled 2025/11/14 17:26:34 Android sandbox: enabled 2025/11/14 17:26:34 fault injection: enabled 2025/11/14 17:26:34 leak checking: enabled 2025/11/14 17:26:34 net packet injection: enabled 2025/11/14 17:26:34 net device setup: enabled 2025/11/14 17:26:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/14 17:26:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/14 17:26:34 USB emulation: enabled 2025/11/14 17:26:34 hci packet injection: enabled 2025/11/14 17:26:34 wifi device emulation: enabled 2025/11/14 17:26:34 802.15.4 emulation: enabled 2025/11/14 17:26:34 fetching corpus: 50, signal 28379/30147 (executing program) 2025/11/14 17:26:34 fetching corpus: 100, signal 34983/38453 (executing program) 2025/11/14 17:26:34 fetching corpus: 150, signal 44600/49546 (executing program) 2025/11/14 17:26:34 fetching corpus: 200, signal 54509/60774 (executing program) 2025/11/14 17:26:34 fetching corpus: 250, signal 58964/66615 (executing program) 2025/11/14 17:26:34 fetching corpus: 300, signal 63292/72245 (executing program) 2025/11/14 17:26:34 fetching corpus: 350, signal 66322/76600 (executing program) 2025/11/14 17:26:35 fetching corpus: 400, signal 70093/81653 (executing program) 2025/11/14 17:26:35 fetching corpus: 450, signal 74021/86727 (executing program) 2025/11/14 17:26:35 fetching corpus: 500, signal 78057/91881 (executing program) 2025/11/14 17:26:35 fetching corpus: 550, signal 81798/96634 (executing program) 2025/11/14 17:26:35 fetching corpus: 600, signal 83822/99799 (executing program) 2025/11/14 17:26:35 fetching corpus: 650, signal 86399/103451 (executing program) 2025/11/14 17:26:35 fetching corpus: 700, signal 88540/106685 (executing program) 2025/11/14 17:26:35 fetching corpus: 750, signal 92690/111648 (executing program) 2025/11/14 17:26:35 fetching corpus: 800, signal 94765/114720 (executing program) 2025/11/14 17:26:35 fetching corpus: 850, signal 96751/117714 (executing program) 2025/11/14 17:26:36 fetching corpus: 900, signal 98481/120450 (executing program) 2025/11/14 17:26:36 fetching corpus: 950, signal 100766/123646 (executing program) 2025/11/14 17:26:36 fetching corpus: 1000, signal 103369/127078 (executing program) 2025/11/14 17:26:36 fetching corpus: 1050, signal 105692/130172 (executing program) 2025/11/14 17:26:36 fetching corpus: 1100, signal 107355/132712 (executing program) 2025/11/14 17:26:36 fetching corpus: 1150, signal 108668/134918 (executing program) 2025/11/14 17:26:36 fetching corpus: 1200, signal 109680/136902 (executing program) 2025/11/14 17:26:36 fetching corpus: 1250, signal 112453/140262 (executing program) 2025/11/14 17:26:37 fetching corpus: 1300, signal 114362/142914 (executing program) 2025/11/14 17:26:37 fetching corpus: 1350, signal 116799/145942 (executing program) 2025/11/14 17:26:37 fetching corpus: 1400, signal 117991/147948 (executing program) 2025/11/14 17:26:37 fetching corpus: 1450, signal 119242/149972 (executing program) 2025/11/14 17:26:37 fetching corpus: 1500, signal 120730/152223 (executing program) 2025/11/14 17:26:37 fetching corpus: 1550, signal 122410/154521 (executing program) 2025/11/14 17:26:37 fetching corpus: 1600, signal 123795/156572 (executing program) 2025/11/14 17:26:37 fetching corpus: 1650, signal 124870/158430 (executing program) 2025/11/14 17:26:37 fetching corpus: 1700, signal 126088/160323 (executing program) 2025/11/14 17:26:37 fetching corpus: 1750, signal 126994/162014 (executing program) 2025/11/14 17:26:38 fetching corpus: 1800, signal 127976/163742 (executing program) 2025/11/14 17:26:38 fetching corpus: 1850, signal 129046/165457 (executing program) 2025/11/14 17:26:38 fetching corpus: 1900, signal 130037/167126 (executing program) 2025/11/14 17:26:38 fetching corpus: 1950, signal 131821/169325 (executing program) 2025/11/14 17:26:38 fetching corpus: 2000, signal 133092/171172 (executing program) 2025/11/14 17:26:38 fetching corpus: 2050, signal 135075/173481 (executing program) 2025/11/14 17:26:38 fetching corpus: 2100, signal 136361/175239 (executing program) 2025/11/14 17:26:38 fetching corpus: 2150, signal 137326/176760 (executing program) 2025/11/14 17:26:38 fetching corpus: 2200, signal 138858/178674 (executing program) 2025/11/14 17:26:38 fetching corpus: 2250, signal 139650/180076 (executing program) 2025/11/14 17:26:39 fetching corpus: 2300, signal 140569/181581 (executing program) 2025/11/14 17:26:39 fetching corpus: 2350, signal 141646/183131 (executing program) 2025/11/14 17:26:39 fetching corpus: 2400, signal 142545/184550 (executing program) 2025/11/14 17:26:39 fetching corpus: 2450, signal 143667/186103 (executing program) 2025/11/14 17:26:39 fetching corpus: 2500, signal 144664/187585 (executing program) 2025/11/14 17:26:39 fetching corpus: 2550, signal 145640/189008 (executing program) 2025/11/14 17:26:39 fetching corpus: 2600, signal 146484/190356 (executing program) 2025/11/14 17:26:39 fetching corpus: 2650, signal 147404/191733 (executing program) 2025/11/14 17:26:39 fetching corpus: 2700, signal 148428/193130 (executing program) 2025/11/14 17:26:40 fetching corpus: 2750, signal 149218/194356 (executing program) 2025/11/14 17:26:40 fetching corpus: 2800, signal 150018/195596 (executing program) 2025/11/14 17:26:40 fetching corpus: 2850, signal 150800/196854 (executing program) 2025/11/14 17:26:40 fetching corpus: 2900, signal 151912/198224 (executing program) 2025/11/14 17:26:40 fetching corpus: 2950, signal 152428/199300 (executing program) 2025/11/14 17:26:40 fetching corpus: 3000, signal 153221/200480 (executing program) 2025/11/14 17:26:40 fetching corpus: 3050, signal 154360/201808 (executing program) 2025/11/14 17:26:40 fetching corpus: 3100, signal 155072/202933 (executing program) 2025/11/14 17:26:40 fetching corpus: 3150, signal 155767/204053 (executing program) 2025/11/14 17:26:40 fetching corpus: 3200, signal 156223/205071 (executing program) 2025/11/14 17:26:41 fetching corpus: 3250, signal 156673/206039 (executing program) 2025/11/14 17:26:41 fetching corpus: 3300, signal 157235/207085 (executing program) 2025/11/14 17:26:41 fetching corpus: 3350, signal 157992/208181 (executing program) 2025/11/14 17:26:41 fetching corpus: 3400, signal 158598/209214 (executing program) 2025/11/14 17:26:41 fetching corpus: 3450, signal 159433/210314 (executing program) 2025/11/14 17:26:41 fetching corpus: 3500, signal 160364/211459 (executing program) 2025/11/14 17:26:41 fetching corpus: 3550, signal 160886/212411 (executing program) 2025/11/14 17:26:41 fetching corpus: 3600, signal 161761/213503 (executing program) 2025/11/14 17:26:41 fetching corpus: 3650, signal 162593/214571 (executing program) 2025/11/14 17:26:41 fetching corpus: 3700, signal 163232/215544 (executing program) 2025/11/14 17:26:42 fetching corpus: 3750, signal 163940/216565 (executing program) 2025/11/14 17:26:42 fetching corpus: 3800, signal 164704/217552 (executing program) 2025/11/14 17:26:42 fetching corpus: 3850, signal 165250/218460 (executing program) 2025/11/14 17:26:42 fetching corpus: 3900, signal 165951/219371 (executing program) 2025/11/14 17:26:42 fetching corpus: 3950, signal 166411/220238 (executing program) 2025/11/14 17:26:42 fetching corpus: 4000, signal 167044/221105 (executing program) 2025/11/14 17:26:42 fetching corpus: 4050, signal 167646/221996 (executing program) 2025/11/14 17:26:42 fetching corpus: 4100, signal 168212/222888 (executing program) 2025/11/14 17:26:42 fetching corpus: 4150, signal 168655/223704 (executing program) 2025/11/14 17:26:42 fetching corpus: 4200, signal 169414/224661 (executing program) 2025/11/14 17:26:43 fetching corpus: 4250, signal 169965/225501 (executing program) 2025/11/14 17:26:43 fetching corpus: 4300, signal 170218/226224 (executing program) 2025/11/14 17:26:43 fetching corpus: 4350, signal 170915/227073 (executing program) 2025/11/14 17:26:43 fetching corpus: 4400, signal 171553/227943 (executing program) 2025/11/14 17:26:43 fetching corpus: 4450, signal 172006/228708 (executing program) 2025/11/14 17:26:43 fetching corpus: 4500, signal 172730/229542 (executing program) 2025/11/14 17:26:43 fetching corpus: 4550, signal 173312/230342 (executing program) 2025/11/14 17:26:43 fetching corpus: 4600, signal 173922/231140 (executing program) 2025/11/14 17:26:43 fetching corpus: 4650, signal 174448/231916 (executing program) 2025/11/14 17:26:44 fetching corpus: 4700, signal 174913/232642 (executing program) 2025/11/14 17:26:44 fetching corpus: 4750, signal 175262/233336 (executing program) 2025/11/14 17:26:44 fetching corpus: 4800, signal 175766/234104 (executing program) 2025/11/14 17:26:44 fetching corpus: 4850, signal 176236/234857 (executing program) 2025/11/14 17:26:44 fetching corpus: 4900, signal 176661/235542 (executing program) 2025/11/14 17:26:44 fetching corpus: 4950, signal 177478/236338 (executing program) 2025/11/14 17:26:44 fetching corpus: 5000, signal 178198/237093 (executing program) 2025/11/14 17:26:44 fetching corpus: 5050, signal 178740/237736 (executing program) 2025/11/14 17:26:44 fetching corpus: 5100, signal 179168/238390 (executing program) 2025/11/14 17:26:45 fetching corpus: 5150, signal 179717/239064 (executing program) 2025/11/14 17:26:45 fetching corpus: 5200, signal 180394/239778 (executing program) 2025/11/14 17:26:45 fetching corpus: 5250, signal 180812/240424 (executing program) 2025/11/14 17:26:45 fetching corpus: 5300, signal 181678/241139 (executing program) 2025/11/14 17:26:45 fetching corpus: 5350, signal 182169/241809 (executing program) 2025/11/14 17:26:45 fetching corpus: 5400, signal 182575/242428 (executing program) 2025/11/14 17:26:45 fetching corpus: 5450, signal 182997/243036 (executing program) 2025/11/14 17:26:45 fetching corpus: 5500, signal 183560/243637 (executing program) 2025/11/14 17:26:45 fetching corpus: 5550, signal 184110/244260 (executing program) 2025/11/14 17:26:46 fetching corpus: 5600, signal 184537/244882 (executing program) 2025/11/14 17:26:46 fetching corpus: 5650, signal 184971/245456 (executing program) 2025/11/14 17:26:46 fetching corpus: 5700, signal 185413/246029 (executing program) 2025/11/14 17:26:46 fetching corpus: 5750, signal 185776/246591 (executing program) 2025/11/14 17:26:46 fetching corpus: 5800, signal 186203/247151 (executing program) 2025/11/14 17:26:46 fetching corpus: 5850, signal 186688/247720 (executing program) 2025/11/14 17:26:46 fetching corpus: 5900, signal 187049/248246 (executing program) 2025/11/14 17:26:46 fetching corpus: 5950, signal 187483/248778 (executing program) 2025/11/14 17:26:46 fetching corpus: 6000, signal 187918/249311 (executing program) 2025/11/14 17:26:47 fetching corpus: 6050, signal 188283/249840 (executing program) 2025/11/14 17:26:47 fetching corpus: 6100, signal 188624/250413 (executing program) 2025/11/14 17:26:47 fetching corpus: 6150, signal 189820/250972 (executing program) 2025/11/14 17:26:47 fetching corpus: 6200, signal 190274/251496 (executing program) 2025/11/14 17:26:47 fetching corpus: 6250, signal 190863/252008 (executing program) 2025/11/14 17:26:47 fetching corpus: 6300, signal 191181/252485 (executing program) 2025/11/14 17:26:47 fetching corpus: 6350, signal 191673/252611 (executing program) 2025/11/14 17:26:47 fetching corpus: 6400, signal 191983/252611 (executing program) 2025/11/14 17:26:47 fetching corpus: 6450, signal 192331/252611 (executing program) 2025/11/14 17:26:47 fetching corpus: 6500, signal 192651/252611 (executing program) 2025/11/14 17:26:48 fetching corpus: 6550, signal 192948/252611 (executing program) 2025/11/14 17:26:48 fetching corpus: 6600, signal 193296/252611 (executing program) 2025/11/14 17:26:48 fetching corpus: 6650, signal 193698/252611 (executing program) 2025/11/14 17:26:48 fetching corpus: 6700, signal 194039/252611 (executing program) 2025/11/14 17:26:48 fetching corpus: 6750, signal 194294/252611 (executing program) 2025/11/14 17:26:48 fetching corpus: 6800, signal 194663/252611 (executing program) 2025/11/14 17:26:48 fetching corpus: 6850, signal 194930/252612 (executing program) 2025/11/14 17:26:48 fetching corpus: 6900, signal 195154/252612 (executing program) 2025/11/14 17:26:48 fetching corpus: 6950, signal 195461/252612 (executing program) 2025/11/14 17:26:48 fetching corpus: 7000, signal 195868/252612 (executing program) 2025/11/14 17:26:49 fetching corpus: 7050, signal 196213/252612 (executing program) 2025/11/14 17:26:49 fetching corpus: 7100, signal 196981/252612 (executing program) 2025/11/14 17:26:49 fetching corpus: 7150, signal 197298/252612 (executing program) 2025/11/14 17:26:49 fetching corpus: 7200, signal 197802/252614 (executing program) 2025/11/14 17:26:49 fetching corpus: 7250, signal 198197/252618 (executing program) 2025/11/14 17:26:49 fetching corpus: 7300, signal 198466/252618 (executing program) 2025/11/14 17:26:49 fetching corpus: 7350, signal 198740/252618 (executing program) 2025/11/14 17:26:49 fetching corpus: 7400, signal 199171/252618 (executing program) 2025/11/14 17:26:49 fetching corpus: 7450, signal 199559/252618 (executing program) 2025/11/14 17:26:49 fetching corpus: 7500, signal 199788/252618 (executing program) 2025/11/14 17:26:49 fetching corpus: 7550, signal 200127/252618 (executing program) 2025/11/14 17:26:50 fetching corpus: 7600, signal 200498/252618 (executing program) 2025/11/14 17:26:50 fetching corpus: 7650, signal 200724/252621 (executing program) 2025/11/14 17:26:50 fetching corpus: 7700, signal 201072/252621 (executing program) 2025/11/14 17:26:50 fetching corpus: 7750, signal 201308/252621 (executing program) 2025/11/14 17:26:50 fetching corpus: 7800, signal 201777/252621 (executing program) 2025/11/14 17:26:50 fetching corpus: 7850, signal 202077/252621 (executing program) 2025/11/14 17:26:50 fetching corpus: 7900, signal 202452/252621 (executing program) 2025/11/14 17:26:50 fetching corpus: 7950, signal 202711/252621 (executing program) 2025/11/14 17:26:50 fetching corpus: 8000, signal 202920/252621 (executing program) 2025/11/14 17:26:50 fetching corpus: 8050, signal 203269/252621 (executing program) 2025/11/14 17:26:50 fetching corpus: 8100, signal 203453/252623 (executing program) 2025/11/14 17:26:51 fetching corpus: 8150, signal 203700/252623 (executing program) 2025/11/14 17:26:51 fetching corpus: 8200, signal 203980/252623 (executing program) 2025/11/14 17:26:51 fetching corpus: 8250, signal 204303/252623 (executing program) 2025/11/14 17:26:51 fetching corpus: 8300, signal 204579/252623 (executing program) 2025/11/14 17:26:51 fetching corpus: 8350, signal 204827/252623 (executing program) 2025/11/14 17:26:51 fetching corpus: 8400, signal 205070/252623 (executing program) 2025/11/14 17:26:51 fetching corpus: 8450, signal 205393/252623 (executing program) 2025/11/14 17:26:51 fetching corpus: 8500, signal 205785/252623 (executing program) 2025/11/14 17:26:51 fetching corpus: 8550, signal 206280/252623 (executing program) 2025/11/14 17:26:51 fetching corpus: 8600, signal 206587/252623 (executing program) 2025/11/14 17:26:51 fetching corpus: 8650, signal 206927/252623 (executing program) 2025/11/14 17:26:52 fetching corpus: 8700, signal 207134/252623 (executing program) 2025/11/14 17:26:52 fetching corpus: 8750, signal 207432/252623 (executing program) 2025/11/14 17:26:52 fetching corpus: 8800, signal 207737/252623 (executing program) 2025/11/14 17:26:52 fetching corpus: 8850, signal 208025/252623 (executing program) 2025/11/14 17:26:52 fetching corpus: 8900, signal 208536/252623 (executing program) 2025/11/14 17:26:52 fetching corpus: 8950, signal 208845/252623 (executing program) 2025/11/14 17:26:52 fetching corpus: 9000, signal 209093/252624 (executing program) 2025/11/14 17:26:52 fetching corpus: 9050, signal 209379/252624 (executing program) 2025/11/14 17:26:52 fetching corpus: 9100, signal 209625/252624 (executing program) 2025/11/14 17:26:52 fetching corpus: 9150, signal 209951/252625 (executing program) 2025/11/14 17:26:52 fetching corpus: 9200, signal 210194/252625 (executing program) 2025/11/14 17:26:53 fetching corpus: 9250, signal 210389/252625 (executing program) 2025/11/14 17:26:53 fetching corpus: 9300, signal 210544/252625 (executing program) 2025/11/14 17:26:53 fetching corpus: 9350, signal 210850/252625 (executing program) 2025/11/14 17:26:53 fetching corpus: 9400, signal 211089/252625 (executing program) 2025/11/14 17:26:53 fetching corpus: 9450, signal 211324/252625 (executing program) 2025/11/14 17:26:53 fetching corpus: 9500, signal 211589/252627 (executing program) 2025/11/14 17:26:53 fetching corpus: 9550, signal 211833/252627 (executing program) 2025/11/14 17:26:53 fetching corpus: 9600, signal 212153/252627 (executing program) 2025/11/14 17:26:53 fetching corpus: 9650, signal 212355/252627 (executing program) 2025/11/14 17:26:53 fetching corpus: 9700, signal 212550/252629 (executing program) 2025/11/14 17:26:54 fetching corpus: 9750, signal 212770/252629 (executing program) 2025/11/14 17:26:54 fetching corpus: 9800, signal 212966/252629 (executing program) 2025/11/14 17:26:54 fetching corpus: 9850, signal 213190/252629 (executing program) 2025/11/14 17:26:54 fetching corpus: 9900, signal 213467/252629 (executing program) 2025/11/14 17:26:54 fetching corpus: 9950, signal 213809/252629 (executing program) 2025/11/14 17:26:54 fetching corpus: 10000, signal 214111/252629 (executing program) 2025/11/14 17:26:54 fetching corpus: 10050, signal 214373/252629 (executing program) 2025/11/14 17:26:54 fetching corpus: 10100, signal 214567/252629 (executing program) 2025/11/14 17:26:54 fetching corpus: 10150, signal 214769/252629 (executing program) 2025/11/14 17:26:55 fetching corpus: 10200, signal 215049/252629 (executing program) 2025/11/14 17:26:55 fetching corpus: 10250, signal 215293/252629 (executing program) 2025/11/14 17:26:55 fetching corpus: 10300, signal 215557/252629 (executing program) 2025/11/14 17:26:55 fetching corpus: 10350, signal 215770/252629 (executing program) 2025/11/14 17:26:55 fetching corpus: 10400, signal 216052/252629 (executing program) 2025/11/14 17:26:55 fetching corpus: 10450, signal 216224/252629 (executing program) 2025/11/14 17:26:55 fetching corpus: 10500, signal 216519/252629 (executing program) 2025/11/14 17:26:55 fetching corpus: 10550, signal 216736/252629 (executing program) 2025/11/14 17:26:56 fetching corpus: 10600, signal 216911/252636 (executing program) 2025/11/14 17:26:56 fetching corpus: 10650, signal 217101/252636 (executing program) 2025/11/14 17:26:56 fetching corpus: 10700, signal 217368/252636 (executing program) 2025/11/14 17:26:56 fetching corpus: 10750, signal 217578/252636 (executing program) 2025/11/14 17:26:56 fetching corpus: 10800, signal 217804/252636 (executing program) 2025/11/14 17:26:56 fetching corpus: 10850, signal 218032/252636 (executing program) 2025/11/14 17:26:56 fetching corpus: 10900, signal 218227/252636 (executing program) 2025/11/14 17:26:56 fetching corpus: 10950, signal 218547/252636 (executing program) 2025/11/14 17:26:56 fetching corpus: 11000, signal 218764/252636 (executing program) 2025/11/14 17:26:56 fetching corpus: 11050, signal 218936/252636 (executing program) 2025/11/14 17:26:56 fetching corpus: 11100, signal 219179/252636 (executing program) 2025/11/14 17:26:57 fetching corpus: 11150, signal 219367/252636 (executing program) 2025/11/14 17:26:57 fetching corpus: 11200, signal 219668/252636 (executing program) 2025/11/14 17:26:57 fetching corpus: 11250, signal 219834/252636 (executing program) 2025/11/14 17:26:57 fetching corpus: 11300, signal 220052/252636 (executing program) 2025/11/14 17:26:57 fetching corpus: 11350, signal 220558/252636 (executing program) 2025/11/14 17:26:57 fetching corpus: 11400, signal 220804/252636 (executing program) 2025/11/14 17:26:57 fetching corpus: 11450, signal 221051/252636 (executing program) 2025/11/14 17:26:57 fetching corpus: 11500, signal 221262/252636 (executing program) 2025/11/14 17:26:57 fetching corpus: 11550, signal 221606/252636 (executing program) 2025/11/14 17:26:57 fetching corpus: 11600, signal 221843/252636 (executing program) 2025/11/14 17:26:57 fetching corpus: 11650, signal 222069/252636 (executing program) 2025/11/14 17:26:58 fetching corpus: 11700, signal 222241/252636 (executing program) 2025/11/14 17:26:58 fetching corpus: 11750, signal 222414/252636 (executing program) 2025/11/14 17:26:58 fetching corpus: 11800, signal 222589/252636 (executing program) 2025/11/14 17:26:58 fetching corpus: 11850, signal 222822/252636 (executing program) 2025/11/14 17:26:58 fetching corpus: 11900, signal 223145/252636 (executing program) 2025/11/14 17:26:58 fetching corpus: 11950, signal 223346/252636 (executing program) 2025/11/14 17:26:58 fetching corpus: 12000, signal 223553/252636 (executing program) 2025/11/14 17:26:58 fetching corpus: 12050, signal 223710/252636 (executing program) 2025/11/14 17:26:58 fetching corpus: 12100, signal 223873/252636 (executing program) 2025/11/14 17:26:58 fetching corpus: 12150, signal 224075/252636 (executing program) 2025/11/14 17:26:58 fetching corpus: 12200, signal 224314/252636 (executing program) 2025/11/14 17:26:59 fetching corpus: 12250, signal 224518/252636 (executing program) 2025/11/14 17:26:59 fetching corpus: 12300, signal 224700/252636 (executing program) 2025/11/14 17:26:59 fetching corpus: 12350, signal 224970/252636 (executing program) 2025/11/14 17:26:59 fetching corpus: 12400, signal 225208/252637 (executing program) 2025/11/14 17:26:59 fetching corpus: 12450, signal 225400/252637 (executing program) 2025/11/14 17:26:59 fetching corpus: 12500, signal 225638/252637 (executing program) 2025/11/14 17:26:59 fetching corpus: 12550, signal 225854/252637 (executing program) 2025/11/14 17:26:59 fetching corpus: 12600, signal 226110/252637 (executing program) 2025/11/14 17:26:59 fetching corpus: 12650, signal 226297/252637 (executing program) 2025/11/14 17:27:00 fetching corpus: 12700, signal 226490/252637 (executing program) 2025/11/14 17:27:00 fetching corpus: 12750, signal 226666/252637 (executing program) 2025/11/14 17:27:00 fetching corpus: 12800, signal 226873/252637 (executing program) 2025/11/14 17:27:00 fetching corpus: 12850, signal 227083/252637 (executing program) 2025/11/14 17:27:00 fetching corpus: 12900, signal 227248/252637 (executing program) 2025/11/14 17:27:00 fetching corpus: 12950, signal 227424/252637 (executing program) 2025/11/14 17:27:00 fetching corpus: 13000, signal 227680/252637 (executing program) 2025/11/14 17:27:00 fetching corpus: 13050, signal 227854/252637 (executing program) 2025/11/14 17:27:00 fetching corpus: 13100, signal 228114/252637 (executing program) 2025/11/14 17:27:00 fetching corpus: 13150, signal 228264/252637 (executing program) 2025/11/14 17:27:00 fetching corpus: 13200, signal 228446/252637 (executing program) 2025/11/14 17:27:01 fetching corpus: 13250, signal 228594/252637 (executing program) 2025/11/14 17:27:01 fetching corpus: 13300, signal 228818/252637 (executing program) 2025/11/14 17:27:01 fetching corpus: 13350, signal 229072/252637 (executing program) 2025/11/14 17:27:01 fetching corpus: 13400, signal 229304/252637 (executing program) 2025/11/14 17:27:01 fetching corpus: 13450, signal 229493/252637 (executing program) 2025/11/14 17:27:01 fetching corpus: 13500, signal 229773/252637 (executing program) 2025/11/14 17:27:01 fetching corpus: 13550, signal 229943/252637 (executing program) 2025/11/14 17:27:01 fetching corpus: 13600, signal 230118/252637 (executing program) 2025/11/14 17:27:01 fetching corpus: 13650, signal 230309/252637 (executing program) 2025/11/14 17:27:01 fetching corpus: 13700, signal 230488/252637 (executing program) 2025/11/14 17:27:02 fetching corpus: 13750, signal 230610/252637 (executing program) 2025/11/14 17:27:02 fetching corpus: 13800, signal 230766/252637 (executing program) 2025/11/14 17:27:02 fetching corpus: 13850, signal 230938/252637 (executing program) 2025/11/14 17:27:02 fetching corpus: 13900, signal 231098/252637 (executing program) 2025/11/14 17:27:02 fetching corpus: 13950, signal 231297/252637 (executing program) 2025/11/14 17:27:02 fetching corpus: 14000, signal 231477/252637 (executing program) 2025/11/14 17:27:02 fetching corpus: 14050, signal 231658/252637 (executing program) 2025/11/14 17:27:02 fetching corpus: 14100, signal 231978/252640 (executing program) 2025/11/14 17:27:02 fetching corpus: 14150, signal 232137/252640 (executing program) 2025/11/14 17:27:02 fetching corpus: 14200, signal 232278/252640 (executing program) 2025/11/14 17:27:03 fetching corpus: 14250, signal 232477/252640 (executing program) 2025/11/14 17:27:03 fetching corpus: 14300, signal 232643/252640 (executing program) 2025/11/14 17:27:03 fetching corpus: 14350, signal 232827/252640 (executing program) 2025/11/14 17:27:03 fetching corpus: 14400, signal 232985/252640 (executing program) 2025/11/14 17:27:03 fetching corpus: 14450, signal 233732/252640 (executing program) 2025/11/14 17:27:03 fetching corpus: 14500, signal 233973/252640 (executing program) 2025/11/14 17:27:03 fetching corpus: 14550, signal 234145/252640 (executing program) 2025/11/14 17:27:03 fetching corpus: 14600, signal 234338/252640 (executing program) 2025/11/14 17:27:03 fetching corpus: 14650, signal 234501/252640 (executing program) 2025/11/14 17:27:03 fetching corpus: 14700, signal 234647/252640 (executing program) 2025/11/14 17:27:04 fetching corpus: 14750, signal 234841/252640 (executing program) 2025/11/14 17:27:04 fetching corpus: 14800, signal 235029/252640 (executing program) 2025/11/14 17:27:04 fetching corpus: 14850, signal 235196/252640 (executing program) 2025/11/14 17:27:04 fetching corpus: 14900, signal 235404/252640 (executing program) 2025/11/14 17:27:04 fetching corpus: 14950, signal 235562/252640 (executing program) 2025/11/14 17:27:04 fetching corpus: 15000, signal 235717/252640 (executing program) 2025/11/14 17:27:04 fetching corpus: 15050, signal 235916/252640 (executing program) 2025/11/14 17:27:04 fetching corpus: 15100, signal 236094/252640 (executing program) 2025/11/14 17:27:04 fetching corpus: 15150, signal 236342/252640 (executing program) 2025/11/14 17:27:04 fetching corpus: 15200, signal 236547/252640 (executing program) 2025/11/14 17:27:05 fetching corpus: 15250, signal 236682/252640 (executing program) 2025/11/14 17:27:05 fetching corpus: 15300, signal 236806/252640 (executing program) 2025/11/14 17:27:05 fetching corpus: 15316, signal 236845/252640 (executing program) 2025/11/14 17:27:05 fetching corpus: 15316, signal 236845/252640 (executing program) 2025/11/14 17:27:07 starting 8 fuzzer processes 17:27:07 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) fcntl$setstatus(r0, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1', [{0x20, '@+,^:'}, {0x20, '-['}], 0xa, "8a5dae1f78a20d44473d44118142942144e5371ffed2fce5974ce26998c8dc897001405c4bf1646a455555efe573d2b6372e865e4a081d31b394769405ad2979a2"}, 0x55) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='*]\x00', &(0x7f0000000180)='e-&!$\x00', &(0x7f00000001c0)='&@$@\x00', &(0x7f0000000200)='#! ', &(0x7f0000000240)='(\x00', &(0x7f0000000280)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000300)='#! ', &(0x7f0000000340)='#! ', &(0x7f0000000380)='\\/%]\\/\x00'], 0x100) r1 = memfd_secret(0x0) preadv2(r1, &(0x7f0000000480)=[{&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000440)=""/60, 0x3c}], 0x2, 0x1, 0x9448, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000500)=0x1, 0x7) r3 = socket$inet6(0xa, 0x1d41e5adb86da209, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x5}}, './file1\x00'}) r4 = openat(r1, &(0x7f0000000580)='./file1\x00', 0x4000, 0x108) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x803, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0x400441, 0x0) io_submit(0x0, 0x2, &(0x7f0000000780)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f00000005c0)="ca4e18148ffb", 0x6, 0x9, 0x0, 0x1, r5}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x2, r6, &(0x7f00000006c0)="5b62fddf0c2e87b3d97c6c789b91eec7417a78c324d6ac8d0d87256f54d399327a232aa76b44f34d55027c075aeb64ba85856f14d504cab44ff4f66fe282e8126941640ffd9f5f603889ff681db2", 0x4e, 0x3, 0x0, 0x2, r4}]) syz_open_dev$vcsn(&(0x7f00000007c0), 0x7, 0x410002) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000800)) r7 = openat(r4, &(0x7f0000000840)='./file0\x00', 0x101000, 0x9d) openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x4c02, 0x3b) r8 = accept(r7, &(0x7f00000008c0)=@ethernet={0x0, @link_local}, &(0x7f0000000940)=0x80) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x4e22, 0x2, 0x4e23, 0x1, 0x2, 0x0, 0x20, 0x62}, {0x401, 0x0, 0x7, 0x310, 0x10000, 0x4, 0x8, 0xf79}, {0xfffffffffffffff7, 0x10001, 0x81, 0x5}, 0x70, 0x0, 0x2, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d3, 0xe27032a7befa976b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3504, 0x3, 0x3, 0x5, 0x9, 0x8001}}, 0xe8) 17:27:07 executing program 1: r0 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x6, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)="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", 0xfa, 0x800}, {&(0x7f0000000180)="30328101202bf9329ea2f44fbc53f2736117960e64006e342c1fcc39f82c5c344520b8cec96d3fd4fbab08076dd67cd7e05423a3e76ad54cb158d44d6b552da225ef3286615d8fb0ba8fef712861a49d809bc41b65d61a80eeba923ccbe936d527", 0x61, 0x1}, {&(0x7f0000000200)="43bd80da4798dc22914cc79e19907688293bb07acbe6d65b0be41c4111095871b002af86aa13973a03206bbde95ad3b70b0b4d0fe37e4de4b5fe2066113444babed35d17b47d", 0x46, 0x8}], 0x9, &(0x7f0000000300)={[{}], [{@uid_gt={'uid>', 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0x80000001, 0x10202) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) r5 = accept4$unix(r1, &(0x7f0000000440), &(0x7f00000004c0)=0x6e, 0x80000) sendmsg(r5, &(0x7f0000001040)={&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000580)="b6a14c1180279e8063d9004688409fafe9bb91960e760e366ebd7fdb2964d201f47eebe6223cb1b0302debd10ac83969e9f76c1bd7249ffdefe39e1a83df5c2ed9ad552ae1455880ce5a8fa9f89ba8c64f278ff702a2cc28c2c715d1ed8cb205c14ea59c9a57e9c93d8b1a05567eb34eb6be5acf5ad07c711a6489676cfcdea7869f205dc604d09ed83315520e34558b8b6856d07409397a947c09316a58712fb34c5242f736d91753ef2e5fc5c97aae43da0c7393ec89dedef9951286f2872f524cddabadd397379a25b2347b74", 0xce}, {&(0x7f0000000680)="69c32896de3b3f0a3f7d3273d12dfca3b1eee9661c51c360077d9492dc5009661bf9366171fcec6863bdb24cadd78fe23af37475e8d221b174e1d3eed8a0b4f2ccefeccc3989c7de51a5266a8258c3ab91244db058ec05dba28074d53985e4748e064c1754bdb2d05c271e70adbd89263deadf", 0x73}, {&(0x7f0000000700)="ad62ef51d346a2ac952705098a6f01fe264a3c9a64a4a3a4af3326a466d857c670102c9c618345610071177b47c18a8a6f2b9a1acbc0e56d25761763f850f69497d6f07e0a56268e1b7270d6f58401bcf684d4355b95cbb430d323457862c0d1d89324f3915ba609ecfa9923ae4ddc531b285d489f0fc878005857714777b35846c839cc4c1e923f9712d099c260acf4fe48ce696cf24fd228d1f08dcfee40753e05f3d244cb7fc4407b16724e5a2def3da6ac4b29fc35a74348", 0xba}, {&(0x7f00000007c0)="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", 0xfc}, {&(0x7f00000008c0)="69853444432cd50b11f377e4ea1e556c5ae839336cb5c34914f4a171765a5188a4bcee1e8af0713af51c1b0cc04c2c22e5dfab41366fa17c16b30076cc2810658a32b4b1e0bc0e3f6e190ccfa54e322b61297b38ebb943fe", 0x58}, {&(0x7f0000000940)="c8e4612afe97b179c508e660b0ce0a3ffd642f2560e3c33bd460b3a570eca6fd06ff1f8f136d0bc8ed6ad7ae04dc004c3abbe484a9", 0x35}], 0x6, &(0x7f0000000a00)=[{0x88, 0x10c, 0x3, "9507c2b02ad79c5673cd4951a596487c6ed1520aba3903ccc7eb7822d19beec529fcc8f39fe29ffabf3d0b7926800e1de1b7e7f7488fa5d12bc00f22848ce88c4722ab76c2ac8bfc63295bf760d718ac370d28b3628328cfa166b9b6435579ae80d5a023c2aa014e2eafa080e3a629a911b07ca545"}, {0x58, 0x112, 0xffff, "8f9ce40e407ffba5821068a734388447f313e950b0ec67595ade2d44ee43ddb1d9fc112554e9462942e548957840f2e29a5fbfb721f1588c08383ca4c050189e15"}, {0x70, 0x10a, 0x3ff, "433bc25713557ea145840e6008bbbe5721665e7e26d0e4ef6bf8aa56874367cf74287b43a5765b8b7e7d15b3ebc1a23e7f73afe53d28617596ac585b539415d478b9ffb7d06a5381491b3353ffe79a16f87ef0855b04183c9b03164a0f1c6525"}, {0xe0, 0x110, 0x8, "8ac603d1ce6dd68c7adf556a6a834a43e898e5a31bd3e3066f7b5dc866b63107716e2c45aab53fe074d1c56390e40f79e31e94b1f4d559d1119c1dbb51ac3ea1f7248fbe8f90716449476f82dceb69f5b1021593dfef9a37f0685cb4d833b22a4d46bb5965e0fa6fb67554da1a9b7c1ec579d27f76204bd30572dbd539e05ea5554e7f828544f0cec13b04e4f3fc651e2d98192bb388ab6f6d0a6f1715e925ed2a6c5b3ab945d79d8d4afbcf449d2c36f5495525d6ca186e928164067c2625db99266c3a43dd9b9c38e0cdd72a"}, {0xf8, 0x101, 0x8, "cda6db4667a4996150f057ed90caddb8d9e4fe4f81e4198a2f7ce4210926977a28a451681f3fed9c4fa88736b51a6c2549e99e54b96ec897ee7b8fa3031e0828bb1124f547ab908f61081e74b8f59e49780d322b889f020da4d5bbc0d1dbf231aeb2c6dc7f9c93b0d6655b41664de39b83ceda90bc9df1a6fddf039eb63e9dae521c303eb71182bd95b6c025991fc87ce25a9cdf1f61632f1654a83e1b307d8d317ddf28b65e426a1d857f2f16d4efcecca9a5959e7f3b2e8d54f5cf6328afed017f3de14abd43690694a3b4f2972bc5ecff09ef7d5795e5ca6f3ad4026ff2c91f91a0"}, {0xb8, 0x111, 0x48c, "c9488e928a5a656c4e1d7e6f02b284d07e3697a084f91c65f843c591c6c51e8a81e3d4b7fd1fdc008497366fc0f10d197b30f854ce23299d988f85a0df6148fdd9a7cb214c0eaae546a630ca9d848e95a08c8e14af45ec46aca2665046429d7cd7a04f4d57bd423ce7bd5cb28a8c6d584930de9d7f0ae81d40f7d4a35ae8d47121330ecbf4bc3897c7207478a78b763c26697c7f6beab4be31c4e2d56c23152a2932719ba83b5cc5"}, {0xa8, 0x102, 0x800, "6ba18580eee8d0705e01034342b99b6dbc4d3c1a3024eb2dc1e068c760e74bbedc26b1e4b45ef399143648eebfbd3627391a08a93693e23263b6555bbec7b00ac032112a9339e369628095e57b4fe7fd50c9ff6353ecba5feeae3b2464cc6ab80bc29d9c00f446a25291ba3b7c94815f3a93915df1444f708df78c52eccce644ca2af0f2712905c9aba6c52cc8986b505f92"}, {0x98, 0x11c, 0x6, "5a663fbcb028d301c56b1eb8256b22b3e7b7f2f01e922d3eabec7c6745473d487f5f81989418992519ddc9f263fd15739b2e0ae15888404e57299214b0c025c5bd36ed3481a33ac168e6f3754bd13c4d27b94639cabecdc3a25458e0b77bdc1f88400447e237405c4552cada021e11c8dfc3df4c4b4321a97e807d0787b08fbaf8"}, {0x100, 0x112, 0x8f3, "306787a6d140f3bcf0db2e43565c5f14bd52347a1f2be02114db4f46c4b7709bdf5fbe9cd991511ad5482f7a27dc892c9753d1c2e30799455fb76d0029a433a4d2ce9b8539d7eb65cf3645508870145d8c017bd04362cc0f3965c5f5e01bcee83c47fa7748ca6fd5f066587fbe915343ff1fed962b03df82a3fddd141c924c9e616421df605b21a96b98938c303d43a74ef76ae4d7cff1a22963ad6bde8a81c077359c4d83ab362da81fc5f93e12ef3da4e094e73cb5c69f2e7019f5ae21a9514db4d96d7bda7a2e46a111ae2890f123718b9b7e768975b17c2a762ce1c63800abbabc084aed65232f15ffa0"}], 0x620}, 0x0) mkdirat(r2, &(0x7f0000001080)='./file0\x00', 0x58) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='\x00', 0x92200, 0x124) renameat(r6, &(0x7f0000001100)='./file0\x00', r0, &(0x7f0000001140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000001180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) renameat(r7, &(0x7f00000011c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001200)='./file0\x00') r8 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000001240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000001280)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) name_to_handle_at(r9, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x8001, 0x8, 0x1000, 0xc227, 0x5}}, &(0x7f0000001340), 0x1000) r10 = syz_open_dev$vcsu(&(0x7f0000001380), 0x1, 0xc8102) ioctl$BTRFS_IOC_BALANCE_CTL(r10, 0x40049421, 0x2) io_setup(0x0, &(0x7f00000013c0)=0x0) io_submit(r11, 0x6, &(0x7f0000003bc0)=[&(0x7f0000001480)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000001400)="bcc0b439bcb46973d8432798ef55d2e4e884f23208d96218465b4969abecd35d8ce2975068d4066bfab6bcc133e9d7deece79312195428397ee681c3838a7048d670f65bec062c238ee2b290005da0e947dd5ec895aee8d174665f9aaf1e01e19c", 0x61, 0xffffffff00000000, 0x0, 0x2, r4}, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f0000001580)="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", 0x1000, 0xab, 0x0, 0x3}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x6, 0x7fff, 0xffffffffffffffff, &(0x7f0000002600)="79c217b20fe9ab861d0eb2924f83211c3de1b4fb7d3a5be6dcfd2ce603d17738cc016f5f2b7ea77492e70f6aba3b966f7cc1c98ca02476c55a814e51f8399c107ddceaa93f6a", 0x46, 0x1, 0x0, 0x3, r2}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x1, 0x8ce7, 0xffffffffffffffff, &(0x7f0000002700)="8070669449e9d53bed4f7f685004ae3cd45cf191a33306f0ae6a0caf0b35dffd3db9c397f084e710ea32b35441621d1da3ade7a2999d3e976df1abb32eecad12f26ebd5248c0a63a49823ba4af054c305edfc2547a50", 0x56, 0x7, 0x0, 0x1, r7}, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x2, 0xf70f, 0xffffffffffffffff, &(0x7f00000039c0)="a5", 0x1, 0xffff, 0x0, 0x2}, &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000003ac0)="855b66d9e7155b5a953eeda708d0bbe0e4310dc70dde3cd94790c7f3a9c8bf9a6b737a2221b17ed52c32d6378abbe633a91681c502da73ef73ed04f8dcc2c257206d5771751d5d2be5d69fbbcf9673227afcd8cade662542f1f0d734ad1cb2932b787ba5927a0899544ffe66f53e49c6f95ce12c0ee5c7f0ea7dfbffb84266ef0b5a", 0x82, 0x1, 0x0, 0x1, r2}]) 17:27:07 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x81000) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3f}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000881}, 0x80) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x2d0401, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x19}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x20008000) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000003c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x2, 0x6}, {0x0, 0x4}, {0x8, 0x5}, {0x9}, {0x5, 0x1}, {0x1, 0x6}, {0x1}], "e16e0d8cb7cce84a"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x5, 0x3}, {0x9, 0x6}, {0x1}, {0x1}, {0x3}], "7af6f33d7f5693f7"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x36, 0x5}, {0x1f}, {0x8, 0x2}, {0x81, 0x7}, {0xf7, 0x5}, {0x5, 0x4}, {0x60, 0x5}, {0x3, 0x3}, {0x1, 0x5}, {0x8, 0x4}, {0xc0, 0x3}, {0x1, 0x1}, {0x4, 0x6}, {0x7e, 0x7}, {0x41, 0x2}, {0xfb, 0x7}, {0x0, 0x5}, {0x6, 0x1}], "7f0a7b6c25bdcdd9"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x40}, {0x4, 0x3}, {0x6, 0x6}], "d4a0af34426870f8"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x41, 0x7}, {0x6, 0x2}, {0x40, 0x7}, {0x6}, {0x5, 0x1}, {0x5a, 0x6}, {0x74, 0x6}, {0x8}, {0x81, 0x1}, {0x50, 0x5}, {}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x6}], "69912d8b0982bce5"}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x78}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xca}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x52}, 0x8003) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000a40)={&(0x7f00000007c0), 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1d0, r0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3b, 0x3, "f78e12df8b402ce3ab0240da2149eecbe6ce26b5769f3faa14d331dadf3a33036321f81997bbc4f18ffe1b26bb57daf3b0c6f7a6828010"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c58540f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xaec}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x633}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x16}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x134, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd460}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "23a7bf44bb18a5f3e96107c5a1d8ad22a675c5c4a5a57d5a4a5a7578b9977a88839f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe0000000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f335b918db14c98065203a505568c9a3e0ca57b99dc61bedd40abd1b22910e"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x4040010) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r6, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000084) 17:27:07 executing program 2: socketpair(0x18, 0x4, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2100010}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4800}, 0x404c800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8881}, 0x20004001) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xdc, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x50}, 0x20008000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x7d2a49c5ad295a0d}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x100, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x3f}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_PROTOINFO={0x14, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x10, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8e}]}}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x95a}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_MARK_MASK={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x40004}, 0x840) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x51) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0xa, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000a00), 0x111600, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="2a8b38e186d5"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x844}, 0x20004044) r6 = syz_open_dev$vcsu(&(0x7f0000000b80), 0xfff, 0x2a0000) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044004}, 0x8001) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d00)={'wpan3\x00'}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000012c0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001280)={&(0x7f0000000dc0)={0x498, r7, 0x828, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x288, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "372599aec6ac0357b4937c053c57482ce9d4a47c5040577c08434dad"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1cb}, @TIPC_NLA_NODE_ID={0xf0, 0x3, "963d8e4c6f5a09f89ed585a254f9aa5a2e95ea242a0b1d3f8ae4f7672c93b2e2e504bb8f448d6f24501260dd4d81a37cafc61ed3ab34c02fd212cd5616637b5dfe949851ad4abdc6afb4311a55a5a1d182f2b9fc9c049cee0c5b0a7434e393d6a3bbacb5086d347ace44933c37e234996aa38baa75761bd2286c8ccb9ef439c63b04085d1fad92d08340b9ba98db51c0f5470679fcd06b74c3704415010031606c52aaa396a90b7e6adfa492872c429dc32d4587b6f480567447a49c3233468aff4e86efa3621bfd01e249bf025b5c755914492d417899435ab0b725c98063d056379007b82abd393d7d2c2c"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "8ebf08141d3e76981b017e3930c0775e513057f2a37e04f4a7424e7e2e93"}}, @TIPC_NLA_NODE_ID={0xee, 0x3, "7f74d25a10bb6e3ec183096be2073e8421a9f2a4cdd6446138494b4d5236d8daa1b4d0844f6268fd004dde1c51bc67f20f1ad040494a2b1aac64792147859fe18be17883fd34c395d105a0776886792e8c06d4db2a7c9a69be971afe80a9f4d35c33683e1613fa45bad0c4a2bfd9d226df5169247e1bc35412fd043152304a29db38ac3617fbbaa4e6db305c0b68d699b185701cff4603b7f0728ebc2a150eb297af5a1043dcd08dd0c8194e6de6f67605bc605a3eaded53147f5b0bc80b41296a010307be152af1731ad29ab242949a6d1290fce314e8e9c96d1cc50360710460e869b16f51c17b58db"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4b5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfc0000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x771}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4c14}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd0a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa08}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x498}, 0x1, 0x0, 0x0, 0x8804}, 0x4008000) syz_open_dev$vcsu(&(0x7f0000001300), 0x746, 0x101000) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x4841) [ 86.895933] audit: type=1400 audit(1763141227.206:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:27:07 executing program 5: write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)={0xe, 0x7, 0x2, {{0x1, '^'}, 0x1000}}, 0xe) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x44a780, 0x4) write$P9_RREADLINK(r2, &(0x7f0000000100)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) write$P9_RLINK(r2, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)="15a7c40cd80c0b445536cb6fac7feef6bd6340e7111ba1fa776666d4ea991120e2be1966267b72cbf5cadd7a6d5478cb4fe28b3d26d657f7e596", 0x3a}, {&(0x7f00000001c0)="3e4d1134ec6e295b8aebf80ac3d6ffa738c71ca62cd79f5622164f30943a80e8c9ca64e786e3b46cf8fadc13e2c39dad2dae6aa36f4fe8fd9be73f9a976bc2dc3379be46452593036e977d54308b5c592e6ae2dc3d358f9334c03e35e75b88", 0x5f}], 0x2, 0x4, 0x80000001) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000280)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x101001, 0x0) sendfile(r1, r4, &(0x7f0000000340)=0x2, 0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x7ff}}, './file0\x00'}) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0xb, 0x801, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x6, 0x1, '#\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '^'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x20008080) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000500)=0x8, &(0x7f0000000540)=0x4) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000580)={0x7, 0x79, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$P9_RSETATTR(r6, &(0x7f0000000600)={0x7, 0x1b, 0x2}, 0x7) dup3(r0, r3, 0x80000) 17:27:07 executing program 4: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000080)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000000c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000100)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000180)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000200)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000240)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000280)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000002c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000340)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000003c0)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000400)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000440)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000480)) prctl$PR_GET_FPEMU(0x9, &(0x7f00000004c0)) 17:27:07 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc068}}, './file0\x00'}) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x1, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44800}, 0x200400cc) r1 = open(&(0x7f0000000140)='./file0\x00', 0x181001, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xea}]}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x4}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8cb7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x1, 0x7}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}]}}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40801}, 0x800) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0xc884) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xfc, 0x0, 0x308, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x25}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r3, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x20000884) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000001780)={&(0x7f0000000780)=""/4096, 0x1000}) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xe4}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = accept$unix(r0, &(0x7f00000018c0)=@abs, &(0x7f0000001940)=0x6e) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000001980)={0x0, 0x7, [0x0, 0x20, 0x8, 0x1f04696e, 0x5, 0x14]}) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x38, 0xa, 0xa, 0xb00, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ac0), 0x40880, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000001b00), 0xe56, 0x400000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x240480a5) 17:27:07 executing program 6: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x83, 0x7f, 0x1a, 0x1b, @local, @dev={0xfe, 0x80, '\x00', 0x29}, 0x700, 0x700, 0xd838}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @loopback}, &(0x7f0000000300)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1d0, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x880}, 0x4001) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r1, 0x29, 0x1, 0x4, 0x1, 0x46, @dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x80, 0xfffffff7, 0x4}}) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000023}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000780)=""/227, 0xe3, 0x16040, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000880)={'syztnl2\x00', r1, 0x10, 0x8, 0x3f, 0x0, {{0x2a, 0x4, 0x1, 0x9, 0xa8, 0x66, 0x0, 0x0, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x17}, {[@cipso={0x86, 0x2c, 0x3, [{0x1, 0x5, "999f43"}, {0x2, 0x3, "e0"}, {0x5, 0x4, 'kp'}, {0x7, 0x8, "0454e56225ea"}, {0x6, 0x2}, {0x7, 0x10, "a042d7a20f4bb8120d9a8caa8f0c"}]}, @generic={0x88, 0x7, "007067f8fe"}, @lsrr={0x83, 0x17, 0x49, [@dev={0xac, 0x14, 0x14, 0x17}, @multicast2, @multicast1, @rand_addr=0x64010102, @empty]}, @timestamp_addr={0x44, 0x1c, 0x74, 0x1, 0x0, [{@private=0xa010101, 0x7f}, {@loopback, 0x40000000}, {@local, 0x1f}]}, @end, @lsrr={0x83, 0x7, 0xee, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0x6, [{@loopback, 0x7}]}, @timestamp_addr={0x44, 0x14, 0x35, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc56}, {@multicast2, 0x2}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'sit0\x00', r5, 0x29, 0x4, 0x40, 0x9, 0xb, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7801, 0x7, 0x5, 0x7fff}}) ioctl$sock_ifreq(0xffffffffffffffff, 0x1, &(0x7f0000000a80)={'veth1_to_bond\x00', @ifru_mtu}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3d}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl0\x00', r4, 0x2f, 0x58, 0xb0, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x8000, 0x7, 0xffffff79, 0x5}}) recvmsg$unix(r7, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000000c40)=""/168, 0xa8}, {&(0x7f0000000d00)=""/128, 0x80}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/247, 0xf7}, {&(0x7f0000003e80)=""/110, 0x6e}, {&(0x7f0000003f00)=""/62, 0x3e}], 0x8, &(0x7f0000003fc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x10040) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000004180)={'syztnl1\x00', &(0x7f0000004100)={'syztnl0\x00', r6, 0x2f, 0x1, 0x7, 0x9, 0x30, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x10, 0x4, 0x3}}) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f00000041c0)={@empty, @remote, 0x0}, &(0x7f0000004200)=0xc) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000004240)={@rand_addr, @local, 0x0}, &(0x7f0000004280)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000043c0)={'syztnl2\x00', &(0x7f0000004340)={'syztnl1\x00', r3, 0x29, 0xe8, 0x97, 0x2, 0x14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x20, 0x0, 0x20000}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f00000045c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004580)={&(0x7f0000004400)={0x164, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x8841) [ 88.032470] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.034288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.035236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.038356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.039651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.043617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.045147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.046462] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.054802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.058500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.094779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.102550] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.103561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.123701] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.125290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.161813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.165062] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.171608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.172287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.200095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.200837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.207854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.214286] ================================================================== [ 88.215455] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 88.216489] Read of size 2 at addr ffff88801dfa0538 by task kworker/u11:3/293 [ 88.220387] [ 88.222520] CPU: 1 UID: 0 PID: 293 Comm: kworker/u11:3 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 88.222550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 88.222564] Workqueue: hci6 hci_cmd_work [ 88.222594] Call Trace: [ 88.222602] [ 88.222611] dump_stack_lvl+0xca/0x120 [ 88.222640] print_report+0xcb/0x610 [ 88.222668] ? __virt_addr_valid+0x100/0x5d0 [ 88.222692] ? hci_cmd_work+0x66d/0x6d0 [ 88.222718] ? hci_cmd_work+0x66d/0x6d0 [ 88.222745] kasan_report+0xca/0x100 [ 88.222771] ? hci_cmd_work+0x66d/0x6d0 [ 88.222801] hci_cmd_work+0x66d/0x6d0 [ 88.222828] process_one_work+0x8e1/0x19c0 [ 88.222864] ? __pfx_process_one_work+0x10/0x10 [ 88.222893] ? rcuwait_wake_up+0x27/0x290 [ 88.222923] ? move_linked_works+0x172/0x270 [ 88.222946] ? assign_work+0x196/0x240 [ 88.222986] worker_thread+0x67e/0xe90 [ 88.223030] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 88.223069] ? __pfx_worker_thread+0x10/0x10 [ 88.223118] kthread+0x3c8/0x740 [ 88.223147] ? __pfx_kthread+0x10/0x10 [ 88.223172] ? ret_from_fork+0x79/0x7a0 [ 88.223194] ? lock_release+0xc8/0x290 [ 88.223226] ? __pfx_kthread+0x10/0x10 [ 88.223253] ret_from_fork+0x67a/0x7a0 [ 88.223273] ? __pfx_ret_from_fork+0x10/0x10 [ 88.223295] ? __switch_to+0x759/0x1060 [ 88.223324] ? __pfx_kthread+0x10/0x10 [ 88.223351] ret_from_fork_asm+0x1a/0x30 [ 88.223385] [ 88.223392] [ 88.245200] Allocated by task 294: [ 88.245752] kasan_save_stack+0x24/0x50 [ 88.246396] kasan_save_track+0x14/0x30 [ 88.247159] __kasan_slab_alloc+0x59/0x70 [ 88.247933] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 88.248891] __alloc_skb+0x2ab/0x370 [ 88.249589] hci_cmd_sync_alloc+0x34/0x300 [ 88.250343] __hci_cmd_sync_sk+0xf7/0x5c0 [ 88.250986] __hci_cmd_sync_status_sk+0x4d/0x1a0 [ 88.251754] hci_dev_open_sync+0x10ef/0x1f60 [ 88.252429] hci_power_on+0xdb/0x5d0 [ 88.253001] process_one_work+0x8e1/0x19c0 [ 88.253659] worker_thread+0x67e/0xe90 [ 88.254260] kthread+0x3c8/0x740 [ 88.254771] ret_from_fork+0x67a/0x7a0 [ 88.255379] ret_from_fork_asm+0x1a/0x30 [ 88.255981] [ 88.256247] Freed by task 309: [ 88.256716] kasan_save_stack+0x24/0x50 [ 88.257307] kasan_save_track+0x14/0x30 [ 88.257888] kasan_save_free_info+0x3a/0x60 [ 88.258531] __kasan_slab_free+0x43/0x70 [ 88.259168] kmem_cache_free+0x26f/0x500 [ 88.259771] kfree_skbmem+0x18a/0x1f0 [ 88.260345] sk_skb_reason_drop+0x10e/0x1b0 [ 88.260979] vhci_read+0x3d5/0x5d0 [ 88.261525] vfs_read+0x1eb/0xc70 [ 88.262058] ksys_read+0x121/0x240 [ 88.262597] do_syscall_64+0xbf/0x430 [ 88.263192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.263937] [ 88.264206] The buggy address belongs to the object at ffff88801dfa0500 [ 88.264206] which belongs to the cache skbuff_head_cache of size 232 [ 88.266038] The buggy address is located 56 bytes inside of [ 88.266038] freed 232-byte region [ffff88801dfa0500, ffff88801dfa05e8) [ 88.267777] [ 88.268050] The buggy address belongs to the physical page: [ 88.268864] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1dfa0 [ 88.270020] flags: 0x100000000000000(node=0|zone=1) [ 88.270766] page_type: f5(slab) [ 88.271356] raw: 0100000000000000 ffff8880096c78c0 ffffea000037a640 dead000000000002 [ 88.272564] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 88.273831] page dumped because: kasan: bad access detected [ 88.274668] [ 88.274924] Memory state around the buggy address: [ 88.275660] ffff88801dfa0400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.276724] ffff88801dfa0480: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 88.277785] >ffff88801dfa0500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.278834] ^ [ 88.279599] ffff88801dfa0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 88.280660] ffff88801dfa0600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 88.281724] ================================================================== [ 88.282856] Disabling lock debugging due to kernel taint [ 88.284174] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.285304] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.286519] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.302945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.304746] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.306026] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.308570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.313463] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.313778] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.316623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.317878] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.320702] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.326778] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.328110] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.329989] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.332396] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.334301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.335139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.062527] Bluetooth: hci0: command tx timeout [ 90.126195] Bluetooth: hci1: command tx timeout [ 90.189446] Bluetooth: hci2: command tx timeout [ 90.381817] Bluetooth: hci4: command tx timeout [ 90.382643] Bluetooth: hci7: command tx timeout [ 90.382762] Bluetooth: hci5: command tx timeout [ 90.383653] Bluetooth: hci6: command tx timeout [ 90.384391] Bluetooth: hci3: command tx timeout [ 92.110387] Bluetooth: hci0: command tx timeout [ 92.175364] Bluetooth: hci1: command tx timeout [ 92.237393] Bluetooth: hci2: command tx timeout [ 92.429499] Bluetooth: hci6: command tx timeout [ 92.429933] Bluetooth: hci4: command tx timeout [ 92.430279] Bluetooth: hci7: command tx timeout [ 92.431104] Bluetooth: hci3: command tx timeout [ 92.431529] Bluetooth: hci5: command tx timeout [ 94.157478] Bluetooth: hci0: command tx timeout [ 94.221414] Bluetooth: hci1: command tx timeout [ 94.285400] Bluetooth: hci2: command tx timeout [ 94.477457] Bluetooth: hci7: command tx timeout [ 94.477900] Bluetooth: hci4: command tx timeout [ 94.477928] Bluetooth: hci3: command tx timeout [ 94.478268] Bluetooth: hci6: command tx timeout [ 94.478729] Bluetooth: hci5: command tx timeout [ 96.206428] Bluetooth: hci0: command tx timeout [ 96.271349] Bluetooth: hci1: command tx timeout [ 96.333433] Bluetooth: hci2: command tx timeout [ 96.525511] Bluetooth: hci5: command tx timeout [ 96.526020] Bluetooth: hci3: command tx timeout [ 96.526580] Bluetooth: hci6: command tx timeout [ 96.526608] Bluetooth: hci4: command tx timeout [ 96.527005] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 17:27:08 Registers: info registers vcpu 0 RAX=ffff888015d725f0 RBX=ffff888015d71bc0 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000003 RBP=ffff888015d72618 RSP=ffff8880163f72e0 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff888015d72690 R13=00000000ffffffff R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81527dcc RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f870d8c48c0 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0e0a064070 CR3=000000000a13b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f0e0a1277c000007f0e0a1277c8 XMM02=00007f0e0a1277e000007f0e0a1277c0 XMM03=00007f0e0a1277c800007f0e0a1277c0 XMM04=ffffffffffffffffffffffffffffff00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8293dc70 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff88801b28f620 R8 =00000000ffffffff R9 =ffffed1003651eb5 R10=0000000000000000 R11=fffffffffffc9b50 R12=0000000000000010 R13=ffffffff889747d0 R14=ffffffff88974780 R15=ffffffff88974a40 RIP=ffffffff8293dcc5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b3d71fd620 CR3=000000000cd98000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000ff0000000000ff0000 XMM02=00000000000000ff0000000000ff0000 XMM03=000000000000000000ff000000000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=000055b3d72100200000000300000006 XMM07=00000000000000000000000000000000 XMM08=732f636f72702f006b63616d7300632e XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000