Warning: Permanently added '[localhost]:18337' (ECDSA) to the list of known hosts. 2024/11/01 04:56:27 fuzzer started 2024/11/01 04:56:28 dialing manager at localhost:45639 syzkaller login: [ 75.742384] cgroup: Unknown subsys name 'net' [ 75.869197] cgroup: Unknown subsys name 'cpuset' [ 75.939983] cgroup: Unknown subsys name 'rlimit' 2024/11/01 04:56:53 syscalls: 2217 2024/11/01 04:56:53 code coverage: enabled 2024/11/01 04:56:53 comparison tracing: enabled 2024/11/01 04:56:53 extra coverage: enabled 2024/11/01 04:56:53 setuid sandbox: enabled 2024/11/01 04:56:53 namespace sandbox: enabled 2024/11/01 04:56:53 Android sandbox: enabled 2024/11/01 04:56:53 fault injection: enabled 2024/11/01 04:56:53 leak checking: enabled 2024/11/01 04:56:53 net packet injection: enabled 2024/11/01 04:56:53 net device setup: enabled 2024/11/01 04:56:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/01 04:56:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/01 04:56:53 USB emulation: enabled 2024/11/01 04:56:53 hci packet injection: enabled 2024/11/01 04:56:53 wifi device emulation: enabled 2024/11/01 04:56:53 802.15.4 emulation: enabled 2024/11/01 04:56:53 fetching corpus: 50, signal 16068/17901 (executing program) 2024/11/01 04:56:53 fetching corpus: 100, signal 28223/31639 (executing program) 2024/11/01 04:56:53 fetching corpus: 150, signal 35417/40343 (executing program) 2024/11/01 04:56:53 fetching corpus: 200, signal 42928/49170 (executing program) 2024/11/01 04:56:54 fetching corpus: 250, signal 50238/57707 (executing program) 2024/11/01 04:56:54 fetching corpus: 300, signal 52661/61489 (executing program) 2024/11/01 04:56:54 fetching corpus: 350, signal 56065/66137 (executing program) 2024/11/01 04:56:54 fetching corpus: 400, signal 60718/71794 (executing program) 2024/11/01 04:56:54 fetching corpus: 450, signal 63844/75973 (executing program) 2024/11/01 04:56:54 fetching corpus: 500, signal 66681/79909 (executing program) 2024/11/01 04:56:55 fetching corpus: 550, signal 71075/85141 (executing program) 2024/11/01 04:56:55 fetching corpus: 600, signal 72940/88018 (executing program) 2024/11/01 04:56:55 fetching corpus: 650, signal 75449/91442 (executing program) 2024/11/01 04:56:55 fetching corpus: 700, signal 78139/95063 (executing program) 2024/11/01 04:56:55 fetching corpus: 750, signal 79631/97526 (executing program) 2024/11/01 04:56:55 fetching corpus: 800, signal 81240/100045 (executing program) 2024/11/01 04:56:56 fetching corpus: 850, signal 82742/102411 (executing program) 2024/11/01 04:56:56 fetching corpus: 900, signal 84765/105247 (executing program) 2024/11/01 04:56:56 fetching corpus: 950, signal 87706/108751 (executing program) 2024/11/01 04:56:57 fetching corpus: 1000, signal 89943/111627 (executing program) 2024/11/01 04:56:57 fetching corpus: 1050, signal 92526/114784 (executing program) 2024/11/01 04:56:57 fetching corpus: 1100, signal 94439/117363 (executing program) 2024/11/01 04:56:57 fetching corpus: 1150, signal 96378/119917 (executing program) 2024/11/01 04:56:58 fetching corpus: 1200, signal 97820/122031 (executing program) 2024/11/01 04:56:58 fetching corpus: 1250, signal 99432/124228 (executing program) 2024/11/01 04:56:58 fetching corpus: 1300, signal 100710/126183 (executing program) 2024/11/01 04:56:59 fetching corpus: 1350, signal 101804/127953 (executing program) 2024/11/01 04:56:59 fetching corpus: 1400, signal 103173/129946 (executing program) 2024/11/01 04:56:59 fetching corpus: 1450, signal 104236/131666 (executing program) 2024/11/01 04:57:00 fetching corpus: 1500, signal 105516/133509 (executing program) 2024/11/01 04:57:00 fetching corpus: 1550, signal 107486/135739 (executing program) 2024/11/01 04:57:00 fetching corpus: 1600, signal 108459/137381 (executing program) 2024/11/01 04:57:00 fetching corpus: 1650, signal 109395/138911 (executing program) 2024/11/01 04:57:01 fetching corpus: 1700, signal 110665/140619 (executing program) 2024/11/01 04:57:01 fetching corpus: 1750, signal 111594/142083 (executing program) 2024/11/01 04:57:01 fetching corpus: 1800, signal 112436/143455 (executing program) 2024/11/01 04:57:01 fetching corpus: 1850, signal 113214/144831 (executing program) 2024/11/01 04:57:02 fetching corpus: 1900, signal 114099/146252 (executing program) 2024/11/01 04:57:02 fetching corpus: 1950, signal 115422/147867 (executing program) 2024/11/01 04:57:02 fetching corpus: 2000, signal 116210/149209 (executing program) 2024/11/01 04:57:03 fetching corpus: 2050, signal 116763/150346 (executing program) 2024/11/01 04:57:03 fetching corpus: 2100, signal 118065/151909 (executing program) 2024/11/01 04:57:03 fetching corpus: 2150, signal 119311/153402 (executing program) 2024/11/01 04:57:04 fetching corpus: 2200, signal 120241/154700 (executing program) 2024/11/01 04:57:04 fetching corpus: 2250, signal 121277/156045 (executing program) 2024/11/01 04:57:04 fetching corpus: 2300, signal 121980/157197 (executing program) 2024/11/01 04:57:05 fetching corpus: 2350, signal 123722/158894 (executing program) 2024/11/01 04:57:05 fetching corpus: 2400, signal 124301/159931 (executing program) 2024/11/01 04:57:05 fetching corpus: 2450, signal 125027/161031 (executing program) 2024/11/01 04:57:05 fetching corpus: 2500, signal 125803/162192 (executing program) 2024/11/01 04:57:06 fetching corpus: 2550, signal 126583/163333 (executing program) 2024/11/01 04:57:06 fetching corpus: 2600, signal 127459/164440 (executing program) 2024/11/01 04:57:07 fetching corpus: 2650, signal 128411/165573 (executing program) 2024/11/01 04:57:07 fetching corpus: 2700, signal 129101/166574 (executing program) 2024/11/01 04:57:07 fetching corpus: 2750, signal 129751/167533 (executing program) 2024/11/01 04:57:08 fetching corpus: 2800, signal 130440/168531 (executing program) 2024/11/01 04:57:08 fetching corpus: 2850, signal 131097/169481 (executing program) 2024/11/01 04:57:08 fetching corpus: 2900, signal 132182/170670 (executing program) 2024/11/01 04:57:09 fetching corpus: 2950, signal 132803/171574 (executing program) 2024/11/01 04:57:09 fetching corpus: 3000, signal 133363/172450 (executing program) 2024/11/01 04:57:09 fetching corpus: 3050, signal 133902/173300 (executing program) 2024/11/01 04:57:10 fetching corpus: 3100, signal 134546/174192 (executing program) 2024/11/01 04:57:10 fetching corpus: 3150, signal 135390/175137 (executing program) 2024/11/01 04:57:11 fetching corpus: 3200, signal 136074/176004 (executing program) 2024/11/01 04:57:11 fetching corpus: 3250, signal 136730/176875 (executing program) 2024/11/01 04:57:11 fetching corpus: 3300, signal 137760/177846 (executing program) 2024/11/01 04:57:11 fetching corpus: 3350, signal 138179/178600 (executing program) 2024/11/01 04:57:12 fetching corpus: 3400, signal 139168/179547 (executing program) 2024/11/01 04:57:12 fetching corpus: 3450, signal 139817/180334 (executing program) 2024/11/01 04:57:12 fetching corpus: 3500, signal 140388/181062 (executing program) 2024/11/01 04:57:13 fetching corpus: 3550, signal 140804/181750 (executing program) 2024/11/01 04:57:13 fetching corpus: 3600, signal 141427/182512 (executing program) 2024/11/01 04:57:13 fetching corpus: 3650, signal 141830/183139 (executing program) 2024/11/01 04:57:14 fetching corpus: 3700, signal 142326/183787 (executing program) 2024/11/01 04:57:14 fetching corpus: 3750, signal 143015/184507 (executing program) 2024/11/01 04:57:14 fetching corpus: 3800, signal 143832/185241 (executing program) 2024/11/01 04:57:15 fetching corpus: 3850, signal 144376/185891 (executing program) 2024/11/01 04:57:15 fetching corpus: 3900, signal 145147/186571 (executing program) 2024/11/01 04:57:15 fetching corpus: 3950, signal 145687/187224 (executing program) 2024/11/01 04:57:15 fetching corpus: 4000, signal 146144/187876 (executing program) 2024/11/01 04:57:16 fetching corpus: 4050, signal 146528/188488 (executing program) 2024/11/01 04:57:16 fetching corpus: 4100, signal 147040/189071 (executing program) 2024/11/01 04:57:16 fetching corpus: 4150, signal 147610/189692 (executing program) 2024/11/01 04:57:16 fetching corpus: 4200, signal 148191/190292 (executing program) 2024/11/01 04:57:17 fetching corpus: 4250, signal 148691/190846 (executing program) 2024/11/01 04:57:17 fetching corpus: 4300, signal 149072/191389 (executing program) 2024/11/01 04:57:17 fetching corpus: 4350, signal 149467/191937 (executing program) 2024/11/01 04:57:17 fetching corpus: 4400, signal 149919/192479 (executing program) 2024/11/01 04:57:18 fetching corpus: 4450, signal 150419/193025 (executing program) 2024/11/01 04:57:18 fetching corpus: 4500, signal 150849/193533 (executing program) 2024/11/01 04:57:18 fetching corpus: 4550, signal 151183/194029 (executing program) 2024/11/01 04:57:19 fetching corpus: 4600, signal 151904/194514 (executing program) 2024/11/01 04:57:19 fetching corpus: 4650, signal 152369/194996 (executing program) 2024/11/01 04:57:19 fetching corpus: 4700, signal 152673/195459 (executing program) 2024/11/01 04:57:19 fetching corpus: 4750, signal 153271/195946 (executing program) 2024/11/01 04:57:20 fetching corpus: 4800, signal 153979/196415 (executing program) 2024/11/01 04:57:20 fetching corpus: 4850, signal 154537/196850 (executing program) 2024/11/01 04:57:20 fetching corpus: 4900, signal 154952/197281 (executing program) 2024/11/01 04:57:20 fetching corpus: 4950, signal 155407/197623 (executing program) 2024/11/01 04:57:21 fetching corpus: 5000, signal 155785/197623 (executing program) 2024/11/01 04:57:21 fetching corpus: 5050, signal 156142/197623 (executing program) 2024/11/01 04:57:21 fetching corpus: 5100, signal 156373/197623 (executing program) 2024/11/01 04:57:22 fetching corpus: 5150, signal 156918/197623 (executing program) 2024/11/01 04:57:22 fetching corpus: 5200, signal 157774/197623 (executing program) 2024/11/01 04:57:22 fetching corpus: 5250, signal 158238/197623 (executing program) 2024/11/01 04:57:22 fetching corpus: 5300, signal 158582/197623 (executing program) 2024/11/01 04:57:22 fetching corpus: 5350, signal 158887/197623 (executing program) 2024/11/01 04:57:23 fetching corpus: 5400, signal 159234/197623 (executing program) 2024/11/01 04:57:23 fetching corpus: 5450, signal 159532/197623 (executing program) 2024/11/01 04:57:23 fetching corpus: 5500, signal 159801/197623 (executing program) 2024/11/01 04:57:23 fetching corpus: 5550, signal 160176/197623 (executing program) 2024/11/01 04:57:23 fetching corpus: 5600, signal 160475/197623 (executing program) 2024/11/01 04:57:24 fetching corpus: 5650, signal 160887/197623 (executing program) 2024/11/01 04:57:24 fetching corpus: 5700, signal 161134/197623 (executing program) 2024/11/01 04:57:24 fetching corpus: 5750, signal 161544/197623 (executing program) 2024/11/01 04:57:24 fetching corpus: 5800, signal 162177/197623 (executing program) 2024/11/01 04:57:24 fetching corpus: 5850, signal 162503/197623 (executing program) 2024/11/01 04:57:24 fetching corpus: 5900, signal 163004/197623 (executing program) 2024/11/01 04:57:25 fetching corpus: 5950, signal 163241/197623 (executing program) 2024/11/01 04:57:25 fetching corpus: 6000, signal 163622/197623 (executing program) 2024/11/01 04:57:25 fetching corpus: 6050, signal 164075/197623 (executing program) 2024/11/01 04:57:25 fetching corpus: 6100, signal 164365/197623 (executing program) 2024/11/01 04:57:26 fetching corpus: 6150, signal 164678/197623 (executing program) 2024/11/01 04:57:26 fetching corpus: 6200, signal 165096/197623 (executing program) 2024/11/01 04:57:26 fetching corpus: 6250, signal 165573/197627 (executing program) 2024/11/01 04:57:26 fetching corpus: 6300, signal 165793/197627 (executing program) 2024/11/01 04:57:27 fetching corpus: 6350, signal 166248/197627 (executing program) 2024/11/01 04:57:27 fetching corpus: 6400, signal 166606/197627 (executing program) 2024/11/01 04:57:27 fetching corpus: 6450, signal 166963/197627 (executing program) 2024/11/01 04:57:28 fetching corpus: 6500, signal 167310/197629 (executing program) 2024/11/01 04:57:28 fetching corpus: 6550, signal 167596/197629 (executing program) 2024/11/01 04:57:28 fetching corpus: 6600, signal 167892/197629 (executing program) 2024/11/01 04:57:28 fetching corpus: 6650, signal 168178/197629 (executing program) 2024/11/01 04:57:29 fetching corpus: 6700, signal 168541/197629 (executing program) 2024/11/01 04:57:29 fetching corpus: 6750, signal 168822/197629 (executing program) 2024/11/01 04:57:29 fetching corpus: 6800, signal 169011/197629 (executing program) 2024/11/01 04:57:30 fetching corpus: 6850, signal 169278/197629 (executing program) 2024/11/01 04:57:30 fetching corpus: 6900, signal 169499/197629 (executing program) 2024/11/01 04:57:30 fetching corpus: 6950, signal 169905/197629 (executing program) 2024/11/01 04:57:31 fetching corpus: 7000, signal 170116/197629 (executing program) 2024/11/01 04:57:31 fetching corpus: 7050, signal 170420/197629 (executing program) 2024/11/01 04:57:31 fetching corpus: 7100, signal 170676/197629 (executing program) 2024/11/01 04:57:31 fetching corpus: 7150, signal 170910/197629 (executing program) [ 139.166602] hrtimer: interrupt took 2644210 ns 2024/11/01 04:57:32 fetching corpus: 7200, signal 172061/197629 (executing program) 2024/11/01 04:57:32 fetching corpus: 7250, signal 172291/197629 (executing program) 2024/11/01 04:57:32 fetching corpus: 7300, signal 172792/197629 (executing program) 2024/11/01 04:57:32 fetching corpus: 7350, signal 173098/197629 (executing program) 2024/11/01 04:57:33 fetching corpus: 7400, signal 173361/197629 (executing program) 2024/11/01 04:57:33 fetching corpus: 7450, signal 173528/197629 (executing program) 2024/11/01 04:57:33 fetching corpus: 7500, signal 174364/197637 (executing program) 2024/11/01 04:57:34 fetching corpus: 7550, signal 174588/197637 (executing program) 2024/11/01 04:57:34 fetching corpus: 7600, signal 174802/197637 (executing program) 2024/11/01 04:57:34 fetching corpus: 7650, signal 175022/197637 (executing program) 2024/11/01 04:57:34 fetching corpus: 7700, signal 175186/197637 (executing program) 2024/11/01 04:57:35 fetching corpus: 7750, signal 175575/197637 (executing program) 2024/11/01 04:57:35 fetching corpus: 7800, signal 175851/197637 (executing program) 2024/11/01 04:57:35 fetching corpus: 7850, signal 176461/197989 (executing program) 2024/11/01 04:57:36 fetching corpus: 7900, signal 176859/197989 (executing program) 2024/11/01 04:57:36 fetching corpus: 7950, signal 177084/197989 (executing program) 2024/11/01 04:57:36 fetching corpus: 8000, signal 177308/197989 (executing program) 2024/11/01 04:57:37 fetching corpus: 8050, signal 177541/197989 (executing program) 2024/11/01 04:57:37 fetching corpus: 8100, signal 177721/197989 (executing program) 2024/11/01 04:57:37 fetching corpus: 8150, signal 177999/197989 (executing program) 2024/11/01 04:57:38 fetching corpus: 8200, signal 178242/197989 (executing program) 2024/11/01 04:57:38 fetching corpus: 8250, signal 178447/197989 (executing program) 2024/11/01 04:57:38 fetching corpus: 8300, signal 178796/197989 (executing program) 2024/11/01 04:57:39 fetching corpus: 8350, signal 179100/197989 (executing program) 2024/11/01 04:57:39 fetching corpus: 8400, signal 179281/197989 (executing program) 2024/11/01 04:57:39 fetching corpus: 8450, signal 179493/197989 (executing program) 2024/11/01 04:57:39 fetching corpus: 8500, signal 179713/197989 (executing program) 2024/11/01 04:57:40 fetching corpus: 8550, signal 180037/197989 (executing program) 2024/11/01 04:57:40 fetching corpus: 8600, signal 180304/197989 (executing program) 2024/11/01 04:57:40 fetching corpus: 8650, signal 180460/197989 (executing program) 2024/11/01 04:57:41 fetching corpus: 8700, signal 180699/197989 (executing program) 2024/11/01 04:57:41 fetching corpus: 8750, signal 180879/197989 (executing program) 2024/11/01 04:57:41 fetching corpus: 8800, signal 181199/197991 (executing program) 2024/11/01 04:57:41 fetching corpus: 8850, signal 181490/197991 (executing program) 2024/11/01 04:57:42 fetching corpus: 8900, signal 181723/197991 (executing program) 2024/11/01 04:57:42 fetching corpus: 8950, signal 182145/197991 (executing program) 2024/11/01 04:57:42 fetching corpus: 9000, signal 182386/197991 (executing program) 2024/11/01 04:57:42 fetching corpus: 9050, signal 182746/197991 (executing program) 2024/11/01 04:57:43 fetching corpus: 9100, signal 182871/197991 (executing program) 2024/11/01 04:57:43 fetching corpus: 9150, signal 183146/197991 (executing program) 2024/11/01 04:57:44 fetching corpus: 9200, signal 183357/197991 (executing program) 2024/11/01 04:57:44 fetching corpus: 9250, signal 183529/197991 (executing program) 2024/11/01 04:57:44 fetching corpus: 9300, signal 183688/197991 (executing program) 2024/11/01 04:57:44 fetching corpus: 9350, signal 183801/197991 (executing program) 2024/11/01 04:57:45 fetching corpus: 9400, signal 184097/197991 (executing program) 2024/11/01 04:57:45 fetching corpus: 9450, signal 184309/197991 (executing program) 2024/11/01 04:57:45 fetching corpus: 9500, signal 184590/197991 (executing program) 2024/11/01 04:57:45 fetching corpus: 9550, signal 184745/197991 (executing program) 2024/11/01 04:57:45 fetching corpus: 9600, signal 184933/197991 (executing program) 2024/11/01 04:57:46 fetching corpus: 9650, signal 185185/197991 (executing program) 2024/11/01 04:57:46 fetching corpus: 9700, signal 185477/197991 (executing program) 2024/11/01 04:57:46 fetching corpus: 9750, signal 185835/197991 (executing program) 2024/11/01 04:57:46 fetching corpus: 9800, signal 185978/197991 (executing program) 2024/11/01 04:57:46 fetching corpus: 9850, signal 186164/197992 (executing program) 2024/11/01 04:57:47 fetching corpus: 9900, signal 186410/197992 (executing program) 2024/11/01 04:57:47 fetching corpus: 9950, signal 186684/197992 (executing program) 2024/11/01 04:57:47 fetching corpus: 10000, signal 186901/197992 (executing program) 2024/11/01 04:57:48 fetching corpus: 10050, signal 187067/197992 (executing program) 2024/11/01 04:57:48 fetching corpus: 10100, signal 187294/197992 (executing program) 2024/11/01 04:57:48 fetching corpus: 10150, signal 187465/197992 (executing program) 2024/11/01 04:57:49 fetching corpus: 10200, signal 187689/197992 (executing program) 2024/11/01 04:57:49 fetching corpus: 10250, signal 187865/197992 (executing program) 2024/11/01 04:57:49 fetching corpus: 10300, signal 188151/197992 (executing program) 2024/11/01 04:57:50 fetching corpus: 10350, signal 188312/197992 (executing program) 2024/11/01 04:57:50 fetching corpus: 10400, signal 188446/197992 (executing program) 2024/11/01 04:57:50 fetching corpus: 10450, signal 188821/197992 (executing program) 2024/11/01 04:57:50 fetching corpus: 10500, signal 188969/197992 (executing program) 2024/11/01 04:57:50 fetching corpus: 10550, signal 189233/197992 (executing program) 2024/11/01 04:57:50 fetching corpus: 10600, signal 189403/197992 (executing program) 2024/11/01 04:57:50 fetching corpus: 10650, signal 189572/197992 (executing program) 2024/11/01 04:57:51 fetching corpus: 10700, signal 189729/197992 (executing program) 2024/11/01 04:57:51 fetching corpus: 10741, signal 189848/197992 (executing program) 2024/11/01 04:57:51 fetching corpus: 10741, signal 189848/197992 (executing program) 2024/11/01 04:57:54 starting 8 fuzzer processes 04:57:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x22, 0xa, 0xfffffff7, &(0x7f0000004280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000004380)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004400), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000004500)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004440)={0x68, r8, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000004940)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004900)={&(0x7f0000004580)={0x374, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x84, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f281cf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26171e4b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ee8}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45acb4d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x113d8aa7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9372}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc60c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x376ad7e6}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d29c76b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e21}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e32b592}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e519f22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66ea43d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x141da497}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeac5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x788eb9ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2042}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4aa4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c0e543d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6061}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13c5ac6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f25}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf58}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x230cc625}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x148, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64fa0846}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41f3fc62}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x971c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28ad81ed}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18cf97fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76ce85b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d4badbf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ced3dc3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5941876b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x314ef81e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d3ed4b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x229b251b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x455af3ae}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b1e3e40}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f12f811}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7087}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x679aae02}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x155544c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1501e0b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f0ba972}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ddc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x91f257e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c8e0740}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58a68b21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e61}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71ba5c8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2852380d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x394d82e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8dda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d88}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x578c3591}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70501935}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70035c90}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe0, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1252b959}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x490b2b57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a97b71e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1710b1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46384363}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd50a31b}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xda09288}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2730cc1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e826b8f}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc26716}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f516c1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a794a5e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d80b1b9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x652bae33}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71291d9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2812e180}]}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x20044094}, 0x40) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000004a80)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004a40)={&(0x7f00000049c0)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044001}, 0x48010) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000004ac0)={'wpan4\x00'}) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000004c00)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b40)={0x64, 0x0, 0x405, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0xf}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x240080d4) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000004d40)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004c80)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdd}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x58c01c04}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x804) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000004e40)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004e00)={&(0x7f0000004dc0)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2435edcd9546"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x33}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000091}, 0x4000000) 04:57:54 executing program 1: setresgid(0xee00, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r1, 0xee01) getgid() getgid() add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) getgid() getgid() r2 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001400)={0x0, 0x0, 0x0}, &(0x7f0000001440)=0xc) r4 = getegid() setresgid(r3, r4, r2) r5 = add_key(&(0x7f0000001480)='cifs.idmap\x00', &(0x7f00000014c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key(&(0x7f0000001500)='id_legacy\x00', &(0x7f0000001540)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$link(0x8, r5, r6) fstat(0xffffffffffffffff, &(0x7f0000001580)) r7 = add_key$fscrypt_v1(&(0x7f0000001600), &(0x7f0000001640)={'fscrypt:', @desc3}, &(0x7f0000001680)={0x0, "ef513a30a0dddb8637ca9b52396609410f4190622ff3a6f0406c3c11cf37e554af88ba756b505c5d5c205e9149e6283f53ad0a162de2347a9682f48aefd68b6f", 0x16}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r7, 0x0) getgid() 04:57:54 executing program 3: sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x100, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x13}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xff24cd8e9f49ec7c}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x7}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x3e}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x100}, 0x1, 0x0, 0x0, 0x805}, 0x4008090) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000a}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd8, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff8001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x423}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xd8}}, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000480)={'bond_slave_0\x00', {0x2, 0x0, @empty}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000004c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}}) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc8, 0x17, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4084004}, 0x4000001) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000800}, 0x40) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1e4, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffb8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x68822b8b}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a4eee030c1ba1e8b7996a88aea454b1dcbf8bcfc53af"}}, @TIPC_NLA_NODE_ID={0x73, 0x3, "ab0bd7fb13d7675f2af111e55f51b3b8bb61c509f95ba12fd31637d7330fdf13c0fce56c343b52c7edb90b15ebc594ad608603d2f63d793e88936e31a2850cc47c89bf1ebb10956bb4055f223e8ad72b6bf42ce639e43918deb598f9408e969d2678cb2871dec5002d4134719ff43c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "faf348ec3e56aee551e4a02f81399aa12d0a7a54012243439454829a006603be23f1c2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7210}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x12c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9f14}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x214}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4015}, 0x20000010) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x69b6}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400602}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4008004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r3) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x22}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="96af074f8cc0"}, @NL80211_ATTR_SSID={0x6, 0x34, @random="39cf"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000800}, 0x40) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20040040) r7 = syz_mount_image$tmpfs(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0xf4dd, 0x0, &(0x7f0000000f40), 0x1010000, &(0x7f0000000f80)={[{@size={'size', 0x3d, [0x35, 0x70, 0x37, 0x6b, 0x31, 0x37, 0x70, 0x34]}}, {@huge_never}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'wlan0\x00'}}, {@dont_hash}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, 'nl80211\x00'}}, {@dont_measure}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x35, 0x31, 0x61, 0x61, 0x38, 0x69, 0x66], 0x2d, [0x33, 0x31, 0x66, 0x38], 0x2d, [0x32, 0x33, 0x34, 0x39], 0x2d, [0x35, 0x31, 0x64, 0x30], 0x2d, [0x65, 0x62, 0x35, 0x52, 0x62, 0x36, 0x36, 0x32]}}}]}) openat(r7, &(0x7f0000001080)='./file0/file0\x00', 0x48000, 0x0) 04:57:54 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20008084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00'}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x280001, 0x0) fallocate(r1, 0x20, 0xffffffffffffffe1, 0x8) fremovexattr(r1, &(0x7f0000000200)=@random={'system.', '\xff\xff'}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000240)) r3 = openat(r1, &(0x7f0000000280)='./file0\x00', 0xa0000, 0x82) sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="ddd6c6", 0x3}, {&(0x7f0000000340)="a6c980348e17455bb767c02dcf2409bd821a6dc807672b6e56cad288e87e39fa1d93e02043a3b994e4bb94d24ec0392d35b9f065a8fb38eb19b809e7aa83631d49a010232335c9c5414e537c96", 0x4d}], 0x2}, 0x40090) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x3884082c}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81f1, 0x42}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "08ad32312275500838fc193480dc3090"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x10000}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "c56f57b71f0faf19560b373dbac8558a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "b829ad70b9274940ec0f38a23e18149b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b76260a1b4aada9c163549687185fbbc"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x25}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) pwritev(r3, &(0x7f00000007c0)=[{&(0x7f00000005c0)="e7669f74f45d2821e050df01abce6294ec24f6b55f87982a13d1d22bbb6d6a8ff0305c49e0e6e3c9cc66b9a43f0e78c0b88f684eb91bd8ea", 0x38}, {&(0x7f0000000600)="c9d8695debc833440322b532cf00fe7b628d5cfce75e1005ad9abdb661d1cf33a4c6c03c079c93bb34b2075a56633f386b440061d2b6dcf507460869b73db474fa1b131b1e7a65acc26078198338cc6769dd8e4c8539e6d4158a768b8d1983af7c4093d45fb2936bab19394775a9d03a94cfc78df074d2c7fa4a9a833a9c3c9a685a877925c2bf365f71f88ee3048d3819c04b9709822548c7bb1fdcb72aa6e86203ba4ed18a1749ed1f375e87c5e88331409f2a05c49b537f3c8a84db1cd86847b6d4", 0xc3}, {&(0x7f0000000700)="271a0464b6f94a03561dd1bad8c8d5bb02d3687c5c889678aa2367ea29085db1800417f903402d0ece66a47a7ca698c4a920c2f2dc1fcfe3856fa04ec272950a599f8c72efe49d2b83293f5f7e0e0960db55513ea8e74867adb16c3b9bb52e984951e234e6677fdfe51d9c24b712d1c1bb3401add3af752fefc8c7a5808eaec626b6075b13e99a911879a48cf4799aef19d0", 0x92}], 0x3, 0x8a68, 0x7f) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1ec, r4, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4dd6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7f, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90a9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc383}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb0a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7be}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000e00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x234, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x96}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1dc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xec6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe1}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x339f9011}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "91f7ad292e4199974c6ba0eaa6ab51321842b93d96"}}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6d4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000ec0)={'syztnl0\x00', &(0x7f0000000e40)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x2, 0x581, 0x4d, @mcast1, @remote, 0x10, 0x7800, 0x0, 0x53fee64c}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000f40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) 04:57:54 executing program 4: fcntl$setpipe(0xffffffffffffffff, 0x407, 0xb75) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_fh={0x8, 0x1, {0x3ff}}, 0x40200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x3) sendfile(r0, r0, 0x0, 0x8000) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000000c0)=""/119) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000140)) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x89080) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000001c0)) r2 = accept$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) recvmmsg$unix(r2, &(0x7f00000005c0)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)=""/119, 0x77}, {&(0x7f00000003c0)=""/46, 0x2e}], 0x2, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}], 0x1, 0x40000000, &(0x7f0000000600)) getsockopt$inet_buf(r7, 0x0, 0x2f, &(0x7f0000000640)=""/133, &(0x7f0000000700)=0x85) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000740)={0x2b, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e24, 0x1, 'lblc\x00', 0x35, 0x3, 0x55}, 0x2c) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000780)={0x0, 0x4, [@remote, @empty, @local, @multicast]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file1\x00'}) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000900)=0xe8) setxattr$security_evm(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980), &(0x7f00000009c0)=@sha1={0x1, "211fe8dc17c07ffe70e36cbf8d8ce68ff66d9aa5"}, 0x15, 0x1) getsockopt$inet_udp_int(r5, 0x11, 0xa, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80), 0x100, 0x0) getsockopt$inet_buf(r9, 0x0, 0x28, &(0x7f0000000ac0)=""/4096, &(0x7f0000001ac0)=0x1000) [ 161.572186] audit: type=1400 audit(1730437074.476:7): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:57:54 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x599880, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r3 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0xbaa8d9dc3d875385, 0x198) open_by_handle_at(r3, &(0x7f0000000100)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x4, 0xf7, 0xcf, 0x101}}, 0x100) syz_io_uring_setup(0x16c3, &(0x7f0000000140)={0x0, 0xf354, 0x20, 0x2, 0xcd, 0x0, r2}, &(0x7f00007ff000/0x800000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r6 = accept$packet(r2, 0x0, &(0x7f0000000240)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r7}}, 0x8) close_range(0xffffffffffffffff, r6, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/time\x00') r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x7f, &(0x7f0000000300)=[r1, r8, r9, r6], 0x4, 0x0, 0x0, {0x0, r10}}, 0x0) setxattr$security_selinux(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:etc_t:s0\x00', 0x1b, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000480)={@desc={0x1, 0x0, @desc2}}) r12 = openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0x60800, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0xa, 0x0, r13) 04:57:54 executing program 7: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000040)={0xebc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xff, "84fcd7fc431ec3"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001040)={r1, 0x8}) preadv(r0, &(0x7f0000003440)=[{&(0x7f0000002040)=""/21, 0x15}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/207, 0xcf}, {&(0x7f0000003180)=""/200, 0xc8}, {&(0x7f0000003280)=""/79, 0x4f}, {&(0x7f0000003300)=""/94, 0x5e}, {&(0x7f0000003380)=""/107, 0x6b}, {&(0x7f0000003400)=""/27, 0x1b}], 0x8, 0x6, 0xfffffffd) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000034c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) pread64(r2, &(0x7f0000003500)=""/96, 0x60, 0x100000001) r3 = eventfd(0xfffffeff) dup2(r2, r3) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000003580), 0x543880, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003600), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000003840)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003800)={&(0x7f0000003640)={0x1bc, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97c32ba62eacba80"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="427940e13155389e46d3f3317e8c4a79"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fea8fa3444421b0d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cbb0835c7ae3219d65095bc0726f8702e80158983fe51ef5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6f0379a32cd7b0f3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="87de382c33b2878d53f06eccb7fd616d3c1a7d4b87876e8a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5ac9a863fcd20ed5e8a060f37d48c6cd"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x203}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x91e1}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "50b8f0128d08394c"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x19}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fbf27813715afa04e118d34671111086"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="03d35918a32c7942ea41d6df26d0deaf"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "20b2cf83c35a7eea"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="54bdbb07f4f8654b51dc58658c656edb78103c68d1ed5af2f0bf64e58ada8e4f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8d8bd6d96c70a6f993a81e50abe83a8b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fffffff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b4265a69999885f10cd54968ffbde2c7b301e0be0c6b6114"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8ef41ece52417ea0db5c9a25e6e3ae33c26e5ebd32257678"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0fe6bcdf1a2ab9eeb901eab5b1d5f9ac"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b7df42308533aefb69ac05c518ce8c00"}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8000844}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000003880)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0\x00'}) fcntl$getownex(r4, 0x10, &(0x7f00000038c0)={0x0, 0x0}) r7 = getpgrp(0xffffffffffffffff) r8 = epoll_create(0x1000) kcmp(r6, r7, 0x5, r2, r8) r9 = syz_open_dev$hiddev(&(0x7f0000003900), 0x2, 0x1) fsetxattr$security_ima(r9, &(0x7f0000003940), &(0x7f0000003980)=@md5={0x1, "82f7bd37d6225f31dd3e72295782115c"}, 0x11, 0x0) fcntl$addseals(r8, 0x409, 0x3) 04:57:54 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0xc040) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r2, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x4000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5c07, 0x5}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0x40}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x2d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x20040014) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r4, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6b}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40805) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000800)={r1, 0x0, 0x2, 0xc9c4}) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6ea}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4473}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044005}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, r4, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x2c}}}}, [@NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x800}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x30, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1b, 0x1}, {0x36, 0x1}, {0x16}]}]}, 0x60}}, 0x10) r6 = dup2(r5, r1) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80800020}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "19b05d0fdd2eb912685edcf2d4420f20"}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000001) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r7, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x100c0}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r6) [ 163.020201] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.022655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.025690] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.028078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.030246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.032921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.035750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.041010] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.043094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.046311] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.052823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.054675] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.063622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.067414] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 163.070278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.073307] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.076999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.078485] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.081904] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.085836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.088224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.090006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.090666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.096445] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.097976] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 163.099270] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.100189] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.102805] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.103959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.105113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.110363] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 163.124170] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 163.127516] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 163.131266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.145282] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 163.152988] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 163.154101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.155169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.159337] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.167574] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 163.175317] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 163.175414] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 163.177373] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.179020] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 163.182278] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 163.183435] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 163.185493] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 163.187102] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 165.161065] Bluetooth: hci2: command tx timeout [ 165.162315] Bluetooth: hci0: command tx timeout [ 165.163599] Bluetooth: hci1: command tx timeout [ 165.226088] Bluetooth: hci6: command tx timeout [ 165.227276] Bluetooth: hci7: command tx timeout [ 165.227912] Bluetooth: hci5: command tx timeout [ 165.227958] Bluetooth: hci3: command tx timeout [ 165.228579] Bluetooth: hci4: command tx timeout [ 167.210575] Bluetooth: hci0: command tx timeout [ 167.211103] Bluetooth: hci1: command tx timeout [ 167.211610] Bluetooth: hci2: command tx timeout [ 167.272658] Bluetooth: hci4: command tx timeout [ 167.273162] Bluetooth: hci3: command tx timeout [ 167.273677] Bluetooth: hci7: command tx timeout [ 167.274130] Bluetooth: hci5: command tx timeout [ 167.274625] Bluetooth: hci6: command tx timeout [ 169.257647] Bluetooth: hci2: command tx timeout [ 169.258189] Bluetooth: hci1: command tx timeout [ 169.258718] Bluetooth: hci0: command tx timeout [ 169.321934] Bluetooth: hci5: command tx timeout [ 169.323470] Bluetooth: hci6: command tx timeout [ 169.325063] Bluetooth: hci7: command tx timeout [ 169.326583] Bluetooth: hci3: command tx timeout [ 169.326641] Bluetooth: hci4: command tx timeout [ 171.304707] Bluetooth: hci2: command tx timeout [ 171.306185] Bluetooth: hci0: command tx timeout [ 171.307461] Bluetooth: hci1: command tx timeout [ 171.368680] Bluetooth: hci4: command tx timeout [ 171.369199] Bluetooth: hci7: command tx timeout [ 171.369242] Bluetooth: hci3: command tx timeout [ 171.369947] Bluetooth: hci6: command tx timeout [ 171.370233] Bluetooth: hci5: command tx timeout [ 222.914735] syz-executor.5 (296) used greatest stack depth: 23616 bytes left [ 225.894766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.897884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.899241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.902482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.903818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.905688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.906955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.910997] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.913234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.915849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.920237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.922475] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.925436] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.927674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.930541] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 225.932645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.933055] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.935292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.937067] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.939170] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.944141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.945173] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.969039] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.977945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.992463] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.997225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.998922] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.004817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 226.005036] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 226.007102] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 226.008153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.008688] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.010224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.010919] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 226.013002] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 226.014680] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 226.014882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.017693] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 226.022253] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.026875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.028433] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.032762] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 226.039666] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 226.042868] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 226.045848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 226.060650] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 226.063221] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 226.067706] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.009646] Bluetooth: hci1: command tx timeout [ 228.009748] Bluetooth: hci0: command tx timeout [ 228.073990] Bluetooth: hci4: command tx timeout [ 228.074029] Bluetooth: hci3: command tx timeout [ 228.136857] Bluetooth: hci6: command tx timeout [ 228.138697] Bluetooth: hci7: command tx timeout [ 228.139344] Bluetooth: hci5: command tx timeout [ 228.140818] Bluetooth: hci2: command tx timeout [ 230.059586] Bluetooth: hci1: command tx timeout [ 230.059608] Bluetooth: hci0: command tx timeout [ 230.120633] Bluetooth: hci3: command tx timeout [ 230.121952] Bluetooth: hci4: command tx timeout [ 230.184727] Bluetooth: hci5: command tx timeout [ 230.184853] Bluetooth: hci2: command tx timeout [ 230.186217] Bluetooth: hci7: command tx timeout [ 230.187347] Bluetooth: hci6: command tx timeout [ 232.104658] Bluetooth: hci1: command tx timeout [ 232.105632] Bluetooth: hci0: command tx timeout [ 232.168658] Bluetooth: hci3: command tx timeout [ 232.170013] Bluetooth: hci4: command tx timeout [ 232.233646] Bluetooth: hci7: command tx timeout [ 232.234475] Bluetooth: hci2: command tx timeout [ 232.235133] Bluetooth: hci6: command tx timeout [ 232.235179] Bluetooth: hci5: command tx timeout [ 234.153103] Bluetooth: hci0: command tx timeout [ 234.153122] Bluetooth: hci1: command tx timeout [ 234.216604] Bluetooth: hci4: command tx timeout [ 234.218015] Bluetooth: hci3: command tx timeout [ 234.280636] Bluetooth: hci2: command tx timeout [ 234.282015] Bluetooth: hci7: command tx timeout [ 234.282064] Bluetooth: hci5: command tx timeout [ 234.282104] Bluetooth: hci6: command tx timeout [ 288.259927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.263218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.266778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.271029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.273776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 288.276045] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 288.376326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.379409] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.383762] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.388583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.394305] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 288.398193] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.499653] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.510652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.513000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.515976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.524168] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 288.525338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.559630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.566823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.576837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.583196] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.588193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.590128] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 288.591154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.605059] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.626717] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.649445] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.653082] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 288.654272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.670223] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.671775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.672811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.677197] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.678630] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 288.679626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.686278] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 288.687950] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 288.688962] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 288.691182] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 288.692650] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 288.693831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 288.719129] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.729784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.783720] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 288.801789] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 288.824263] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 288.832808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 290.345594] Bluetooth: hci0: command tx timeout [ 290.472693] Bluetooth: hci1: command tx timeout [ 290.537619] Bluetooth: hci2: command tx timeout [ 290.664672] Bluetooth: hci4: command tx timeout [ 290.665472] Bluetooth: hci3: command tx timeout [ 290.728737] Bluetooth: hci7: command tx timeout [ 290.857557] Bluetooth: hci5: command tx timeout [ 290.920705] Bluetooth: hci6: command tx timeout [ 292.394551] Bluetooth: hci0: command tx timeout [ 292.521585] Bluetooth: hci1: command tx timeout [ 292.585588] Bluetooth: hci2: command tx timeout [ 292.713679] Bluetooth: hci4: command tx timeout [ 292.714166] Bluetooth: hci3: command tx timeout [ 292.777590] Bluetooth: hci7: command tx timeout [ 292.906528] Bluetooth: hci5: command tx timeout [ 292.971665] Bluetooth: hci6: command tx timeout [ 294.440578] Bluetooth: hci0: command tx timeout [ 294.569781] Bluetooth: hci1: command tx timeout [ 294.633548] Bluetooth: hci2: command tx timeout [ 294.760593] Bluetooth: hci3: command tx timeout [ 294.761159] Bluetooth: hci4: command tx timeout [ 294.825843] Bluetooth: hci7: command tx timeout [ 294.952562] Bluetooth: hci5: command tx timeout [ 295.016552] Bluetooth: hci6: command tx timeout [ 296.489568] Bluetooth: hci0: command tx timeout [ 296.616683] Bluetooth: hci1: command tx timeout [ 296.681583] Bluetooth: hci2: command tx timeout [ 296.808742] Bluetooth: hci4: command tx timeout [ 296.809247] Bluetooth: hci3: command tx timeout [ 296.872588] Bluetooth: hci7: command tx timeout [ 297.000681] Bluetooth: hci5: command tx timeout [ 297.064557] Bluetooth: hci6: command tx timeout [ 350.823754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.827018] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.829324] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.832760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.836176] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 350.838783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 351.109141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.110742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.114221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.118338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.124601] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 351.127210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.229987] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.246739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.290926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.292929] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.297356] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.301692] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 351.312076] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.313576] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.314946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.317431] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.318887] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.320234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.321312] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.321413] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.325860] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 351.327401] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.329102] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 351.330799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.336143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.338790] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.341706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.344629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 351.345023] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 351.345923] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 351.348789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.349809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.366067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 351.378941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 351.381619] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 351.383990] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.476738] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 351.517894] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 351.542004] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 351.555265] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 351.557971] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 351.560136] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 352.886689] Bluetooth: hci0: command tx timeout [ 353.320615] Bluetooth: hci1: command tx timeout [ 353.384637] Bluetooth: hci2: command tx timeout [ 353.385539] Bluetooth: hci6: command tx timeout [ 353.386302] Bluetooth: hci3: command tx timeout [ 353.448716] Bluetooth: hci5: command tx timeout [ 353.449713] Bluetooth: hci4: command tx timeout [ 353.576639] Bluetooth: hci7: command tx timeout [ 354.920627] Bluetooth: hci0: command tx timeout [ 355.368603] Bluetooth: hci1: command tx timeout [ 355.433214] Bluetooth: hci3: command tx timeout [ 355.434354] Bluetooth: hci6: command tx timeout [ 355.435708] Bluetooth: hci2: command tx timeout [ 355.496657] Bluetooth: hci5: command tx timeout [ 355.498126] Bluetooth: hci4: command tx timeout [ 355.624597] Bluetooth: hci7: command tx timeout [ 356.968659] Bluetooth: hci0: command tx timeout [ 357.416675] Bluetooth: hci1: command tx timeout [ 357.480627] Bluetooth: hci2: command tx timeout [ 357.481129] Bluetooth: hci3: command tx timeout [ 357.481682] Bluetooth: hci6: command tx timeout [ 357.544588] Bluetooth: hci5: command tx timeout [ 357.545087] Bluetooth: hci4: command tx timeout [ 357.672761] Bluetooth: hci7: command tx timeout [ 359.016565] Bluetooth: hci0: command tx timeout [ 359.465061] Bluetooth: hci1: command tx timeout [ 359.528597] Bluetooth: hci6: command tx timeout [ 359.529110] Bluetooth: hci3: command tx timeout [ 359.529769] Bluetooth: hci2: command tx timeout [ 359.592669] Bluetooth: hci4: command tx timeout [ 359.593166] Bluetooth: hci5: command tx timeout [ 359.721525] Bluetooth: hci7: command tx timeout [ 413.526770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.529555] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.535712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.553032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.576821] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 413.585658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.744319] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.750021] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.753645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.761291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.771193] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 413.777048] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.881995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.885130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.890716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.891748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.896737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.897659] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.908099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.909790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.912228] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 413.915714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.917392] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 413.920230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.962169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.984712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.986781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.989915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 413.991392] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 413.993801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 413.996587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 413.998103] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 413.999202] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 414.017219] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 414.018837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 414.023214] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 414.024569] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 414.027016] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 414.027870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 414.039807] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 414.041823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 414.046938] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 414.049001] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 414.055097] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 414.057066] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 414.058809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 414.060901] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 414.073032] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 415.657635] Bluetooth: hci0: command tx timeout [ 415.850658] Bluetooth: hci1: command tx timeout [ 415.977583] Bluetooth: hci3: command tx timeout [ 415.978848] Bluetooth: hci2: command tx timeout [ 416.104822] Bluetooth: hci4: command tx timeout [ 416.106755] Bluetooth: hci5: command tx timeout [ 416.169594] Bluetooth: hci7: command tx timeout [ 416.170401] Bluetooth: hci6: command tx timeout [ 417.704782] Bluetooth: hci0: command tx timeout [ 417.896538] Bluetooth: hci1: command tx timeout [ 418.024625] Bluetooth: hci3: command tx timeout [ 418.025327] Bluetooth: hci2: command tx timeout [ 418.152946] Bluetooth: hci4: command tx timeout [ 418.154655] Bluetooth: hci5: command tx timeout [ 418.216578] Bluetooth: hci6: command tx timeout [ 418.218380] Bluetooth: hci7: command tx timeout [ 419.752560] Bluetooth: hci0: command tx timeout [ 419.944928] Bluetooth: hci1: command tx timeout [ 420.074520] Bluetooth: hci2: command tx timeout [ 420.075058] Bluetooth: hci3: command tx timeout [ 420.200577] Bluetooth: hci4: command tx timeout [ 420.201136] Bluetooth: hci5: command tx timeout [ 420.264578] Bluetooth: hci6: command tx timeout [ 420.266030] Bluetooth: hci7: command tx timeout [ 421.800619] Bluetooth: hci0: command tx timeout [ 421.993613] Bluetooth: hci1: command tx timeout [ 422.120627] Bluetooth: hci3: command tx timeout [ 422.121297] Bluetooth: hci2: command tx timeout [ 422.248605] Bluetooth: hci5: command tx timeout [ 422.249165] Bluetooth: hci4: command tx timeout [ 422.312686] Bluetooth: hci7: command tx timeout [ 422.313228] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 05:02:57 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff86bdbd66 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffff88803087f500 RSP=ffff88803087f438 R8 =ffffffff86bdbd6a R9 =ffff88803087f4e8 R10=000000000003c001 R11=00000000000bfee9 R12=ffff88803087f508 R13=ffff88803087f4f0 R14=ffff88803087f4e9 R15=ffff88803087f4a8 RIP=ffffffff811493cc RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1f5fb3d540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1f5fdb0000 CR3=00000000316be000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73 XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000000c RBX=ffff88801d1f78c0 RCX=ffff888009a625a4 RDX=dffffc0000000000 RSI=ffff888009a625c0 RDI=ffff888009a61b80 RBP=ffff888009a61b80 RSP=ffff88801d1f7898 R8 =0000000000000001 R9 =fffffbfff0fda9d4 R10=ffffffff87ed4ea7 R11=ffff88806cf42090 R12=0000000000000008 R13=0000000000000000 R14=0000000000000000 R15=0000000000000004 RIP=ffffffff812f9085 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3c6449c540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3c646374a1 CR3=000000000f562000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000