Warning: Permanently added '[localhost]:22306' (ECDSA) to the list of known hosts. 2025/04/28 09:47:14 fuzzer started 2025/04/28 09:47:14 dialing manager at localhost:46629 syzkaller login: [ 94.011950] cgroup: Unknown subsys name 'net' [ 94.142010] cgroup: Unknown subsys name 'cpuset' [ 94.177888] cgroup: Unknown subsys name 'rlimit' 2025/04/28 09:47:30 syscalls: 2214 2025/04/28 09:47:30 code coverage: enabled 2025/04/28 09:47:30 comparison tracing: enabled 2025/04/28 09:47:30 extra coverage: enabled 2025/04/28 09:47:30 setuid sandbox: enabled 2025/04/28 09:47:30 namespace sandbox: enabled 2025/04/28 09:47:30 Android sandbox: enabled 2025/04/28 09:47:30 fault injection: enabled 2025/04/28 09:47:30 leak checking: enabled 2025/04/28 09:47:30 net packet injection: enabled 2025/04/28 09:47:30 net device setup: enabled 2025/04/28 09:47:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/28 09:47:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/28 09:47:30 USB emulation: enabled 2025/04/28 09:47:30 hci packet injection: enabled 2025/04/28 09:47:30 wifi device emulation: enabled 2025/04/28 09:47:30 802.15.4 emulation: enabled 2025/04/28 09:47:30 fetching corpus: 0, signal 0/0 (executing program) 2025/04/28 09:47:32 starting 8 fuzzer processes 09:47:32 executing program 0: r0 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7ff, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000080)="814321537b6fdb0224faa40c4871f6d04813321e7d0c3ba0fff66d33323ba9dd9b0a4fd75c7bf832e0c3c6ae1a836bda8e8d4e0acbf37b73ed0957736603675047e18d77dbcb6502805bac0701319d3560d901e8ce52a514fdc8a59244b7fc8a2eddd684db7aaf3ca5592829a93f105600d08dced0e9ddbad6b381a51b6e3c2f16e83645a5f53e7dcb28b1aa484936861119feddc73629f63c5f5e2a1cfe26be71185ca68c5fbbb22e65820b05b8894d4c428927a0163ed468902abd7964d283e27d95a1a104591b8135a7e8e8e62583", 0xd0, 0x2}, {&(0x7f0000000180)="a782c132984f8c6fff5ec2b26b751d1542715456a0aa0e64d718e2c93e355e35d41ab2b59e7d9cafab4be4c01f88eb4c5fd1bc58749010ae96c330a9780838f5bc9f45b6339a4630f0874e900841281138794a609516583b8cc0897b42f83d455dca2081d5f8504957f7c2d978dcb8f3d800aed4a99e7049af4cb3cce8b7884bd172b64bf600c1c64aa8699b545bf3dc85aca296f7fed9f77e364b01bd5520", 0x9f, 0x8}, {&(0x7f0000000240)="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", 0xfb, 0x6}, {&(0x7f0000000340)="928886235d384d52971cd772a7fb673444b1b7499b3bec2666e4e6d5450d0295872e6f52257e905e605d9cea30aa25c16b009507c8f31ba7ed3a32de99c5fdfff038eed82f475217d173497f8765906efcca2e929f3f9f39a13ab3fa079481b3e9e101ac4127feb5facc2692906519cebe28cf07845f0c04dd6eb55cf4ed81b34b9de9930eb01d76d4e53d6d95c1e0aa3cb3d908956a0efdb8e0b39f5fb43cbeda150cde3a52f2d588762878f1f2a9b48879cf5ca5f8", 0xb6, 0x5}, {&(0x7f0000000400)="354d432cad2707486eca551aa9c7176d016e87af10258f851a7ddae69235c6e09253a1e51d11e6316b151f2328363053c856d404fb9de50f7f4d4f2ab4814b5eda97e7195deee3c94272cf0e26dcb0ec206e33761b04c81c9b7eaa1db89eac6af844be2b068a3025542ec42614b98f74b556b2e13bfb570aaec961d016a992ebf170706ad49ce962bccfa0548fd029dd72bc7b353b3aab", 0x97, 0x8}, {&(0x7f00000004c0)="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", 0xff}], 0xa00421, &(0x7f0000000680)={[{')\'*+%'}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@obj_role={'obj_role', 0x3d, '<['}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@smackfshat={'smackfshat', 0x3d, '}\''}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.:'}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001740)={&(0x7f0000000740)=""/4096, 0x1000, 0x20, 0x1}) clock_gettime(0x0, &(0x7f00000044c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004400)=[{{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001800)=""/142, 0x8e}, {&(0x7f00000018c0)=""/63, 0x3f}, {&(0x7f0000001900)=""/186, 0xba}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/234, 0xea}, {&(0x7f0000002ac0)=""/233, 0xe9}, {&(0x7f0000002bc0)=""/77, 0x4d}, {&(0x7f0000002c40)=""/146, 0x92}], 0x8, &(0x7f0000002d80)=""/228, 0xe4}}, {{&(0x7f0000002e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002f00)=""/4096, 0x1000}], 0x1, &(0x7f0000003f40)=""/192, 0xc0}, 0x1000}, {{&(0x7f0000004000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004080)=""/171, 0xab}, {&(0x7f0000004140)=""/101, 0x65}, {&(0x7f00000041c0)=""/95, 0x5f}, {&(0x7f0000004240)}, {&(0x7f0000004280)=""/189, 0xbd}], 0x5, &(0x7f00000043c0)=""/50, 0x32}, 0x10000}], 0x3, 0x2102, &(0x7f0000004500)={r1, r2+10000000}) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000004540)=0xffff72d2) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000004800)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000047c0)={&(0x7f00000045c0)={0x1d8, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6c}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x34}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x51b8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4fca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff38e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x982}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5ae7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x99}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb7a94a35}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000004840)={0x3, 0xf, "85aa2536e8f6108113990111da14fd"}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000004900)={'tunl0\x00', &(0x7f0000004880)={'ip_vti0\x00', 0x0, 0x40, 0x80, 0x0, 0x7ff, {{0x17, 0x4, 0x3, 0x5, 0x5c, 0x68, 0x0, 0x10, 0x4, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x17, 0xf7, [@rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast]}, @end, @timestamp={0x44, 0xc, 0x90, 0x0, 0x6, [0x400, 0x3]}, @timestamp_addr={0x44, 0x24, 0xac, 0x1, 0x0, [{@broadcast, 0x1}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4b000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}}}}}) get_mempolicy(&(0x7f0000004940), &(0x7f0000004980), 0x80000001, &(0x7f0000ffe000/0x1000)=nil, 0x4) r5 = accept4(r4, &(0x7f00000049c0)=@in={0x2, 0x0, @remote}, &(0x7f0000004a40)=0x80, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000004ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000004bc0)={&(0x7f0000004a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b00)={0x7c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xd8, 0x6d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000004c00)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_WOWLAN(r7, &(0x7f0000005080)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005040)={&(0x7f0000004c80)={0x3c0, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2b}, @void, @val={0xc, 0x99, {0xbdf, 0x5e}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x2f8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x250, 0x4, 0x0, 0x1, [{0x240, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0x8f, 0x2, "e5e9ddbffc2103eacdd5c47e521005464fe5757630164014bf9b3130d55237ba5d27dfbee71a13fc023c87b0fd74cee4203ed6e4101caf0bd71955e3cb4ea4b76416419fb64f8c70795bb5f46feac038e1b0832e50415daa24499485d30d5ede070de5948e6cad6ee989b61329b4ba389fabe39e6d586620bf80b17e832a9069bfa04d99ee991e49e8af7b"}, @NL80211_PKTPAT_MASK={0xc6, 0x1, "baf8be4c2a3bbba3c3a37984712fa51a3d61a4d772c490f33fa018d0856bced7e5f65cabe9ebadcc670d591ffc598f3a1d8e207cd7e2fa550453639c3153ab509f824819283e4bda7e67578931744244202a0c771867d05002fd030225698074ee845e1eb2817754f736832691a686584e88c18a3edce7be6a7821221bc35cb23f97566f10eec44ba1436465d4770374a61ab04e891f0ca24de300e3a3bd3492a5a4cca731d63a41556db26a683ae5c79f00055032df7e4f1b101063207055445815"}, @NL80211_PKTPAT_MASK={0xdb, 0x1, "44599540c6a701e11d55ea02e8911c2658bbb6c37a5ada75a6f4e5c438c2b17b0a275f2b9d395de5d6b45171e7c3070a4bb60e8890fd589737093519e89539e0342c4ea862126c7d267e55e888a36e0201acb94cbaae9c2de044dbf8b17cd00f36abbe8e5b159007501c65cdbb2758c549d95dd58afb3139af71418e13af2d552b997646f7e916304954b244a836c82d507cd025fa0586a6e04dfcae622415140670455694451beae69215997cdb64a69af29cdcd4ec0dfbcb858dc325bc204abe5b26c8442a3de0791f331861e86dce17abb1a27f8a2a"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}]}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7f}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x80, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @multicast1}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x5000}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x58, 0x6, "64dbffd735c5ed03bb25d3fa825a9bbbbac56d21f39a215f2e825c2d47616ed9d7c085a6590e9596299b39689bf41d0155cf964533c8b7978680c6aa98b5aa1275d247a5206559c649d5734994b53beaef89bd34"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xa0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x90, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x3}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x67, 0xb, "1d00e0433dff8529a7cbb4f412983563262a89ec0264a52011249e22f8571cef7bdc62c1395b56acc2ec356e34e317c1cf4bc120a0f329f0444e60913f9a2e0f4836a6f2da64208adf333885ce90d3e9eec205dc1629c50d0ecd0430d7bb980e5e94d6"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x1a, 0xb, "562a0028801c49809d0108e20f204e9f9e9b596c34c5"}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x8010}, 0x840) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000005240)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000050c0)=""/156, 0x9c, 0x1, &(0x7f0000005180)=""/173, 0xad}, &(0x7f0000005280)=0x40) pwrite64(r7, &(0x7f00000052c0)="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", 0x1000, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000006540)={&(0x7f00000062c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000006400)=[{&(0x7f0000006340)=""/169, 0xa9}], 0x1, &(0x7f0000006440)=""/245, 0xf5}, 0x2021) connect$bt_sco(r4, &(0x7f0000006580)={0x1f, @none}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f00000065c0)='status\x00') ioctl$SCSI_IOCTL_DOORLOCK(r8, 0x5380) 09:47:32 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsetxattr(r1, &(0x7f0000000040)=@random={'btrfs.', '+^\x00'}, &(0x7f0000000080)='\'\x00', 0x2, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000100)={0x7fffffff, 0x40, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@generic, &(0x7f0000000200)=0x80, 0x80000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000240)={{0x0, 0x3ff, 0x4, 0x9, 0x1, 0x7, 0x6, 0x9363, 0x73e5aece, 0x4, 0x8, 0xffffffffffff0000, 0x0, 0x6, 0xfffffffffffffff8}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000300)={{r3, 0x9, 0x7, 0x1, 0x3142, 0x7, 0x2, 0x401, 0x5, 0x4, 0x9, 0x401, 0x200, 0x7, 0x100000001}}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x108, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xaf}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xba}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd160}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x60}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x46}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x108}, 0x1, 0x0, 0x0, 0x48c0}, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000001540)={0x0, 0x80, 0x1f, 0x6, 0x5b, 0x9, 0x0, 0x400, 0x18408, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000001500), 0x6}, 0x828, 0xffffffffffffffff, 0x4, 0x5, 0x8, 0xad14, 0xfffb, 0x0, 0x400, 0x0, 0xffffffffffffff81}, 0xffffffffffffffff, 0xc, r1, 0x8) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000015c0), 0x100, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000002640)={'filter\x00', 0x0, 0x3, 0x1000, [0x5, 0x2, 0x3, 0xfffffffffffffff7, 0x4, 0x6], 0x1, &(0x7f0000001600)=[{}], &(0x7f0000001640)=""/4096}, &(0x7f00000026c0)=0x78) ioctl$VT_RELDISP(r5, 0x5605) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) unlink(&(0x7f0000002700)='./file0\x00') ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000002740)={r1, 0x20, 0x7fffffff, 0x7}) ioctl$KDADDIO(r6, 0x4b34, 0xff) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000028c0)={'nat\x00', 0x0, 0x3, 0xb5, [0x3ff, 0x6, 0x3ff, 0x40, 0x3ff, 0x4f], 0x5, &(0x7f0000002780)=[{}, {}, {}, {}, {}], &(0x7f0000002800)=""/181}, &(0x7f0000002940)=0x78) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000002980)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f00000029c0)={0x5, 0x5, 0x0, 0xbb3, 0x9b}) ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0x6) 09:47:32 executing program 2: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000000)=""/81) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x1c00, 0x2417, 0x10001}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000140)=""/207, &(0x7f0000000240)=0xcf) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x109800, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r0, 0x9, 0x2, 0x8}) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000300)=[0x8, 0x1000]) r2 = socket$inet6(0xa, 0x80000, 0x3) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000340)=0x4, 0x4) r3 = signalfd(r0, &(0x7f0000000380)={[0x3]}, 0x8) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000003c0)=0x1, 0x4) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x60000811) pwrite64(r1, &(0x7f0000000500)="3cce04", 0x3, 0x3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/reboot', 0x135000, 0x80) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000580)) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) ioctl$FITHAW(r5, 0xc0045878) r6 = syz_open_dev$vcsu(&(0x7f0000000600), 0x8, 0x101000) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000640)={'nat\x00', 0xc3, "1136e5c032698d4f70c71dce1bb3fe211069e088c302d775da834b45fd080dfde0cb5f441d2a441122852ea950f82516f947bd8195ec05ec8ab3f14df4196b47673960395fbf7fa5fd518fdb0e4b3849dc07bcb456bdb8f071df5e0cce07dd6daf2427c9f58a7f03d5c5bba65480c6037f656ac2d3c010dceb2f8337de0d67671b9738d69b3e051702b8b07e5c8c975cb32a391a07959019ac4d453c40098459686a9867123a34fcbdbb5b4a1e96936eec58a292af6f4f0d72e13cf7b8031017224331"}, &(0x7f0000000740)=0xe7) [ 112.052546] audit: type=1400 audit(1745833652.828:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:47:32 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "c5d29b17ffb485be", "a5d8f3a504bf0c801b74bc76c805c39b6bdbe93ab66ff4d234dc9b3670af9737", "1e8062d4", "0b90670551009c37"}, 0x38) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x44085) r4 = syz_open_dev$hiddev(&(0x7f0000000300), 0x2, 0x200800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000340)) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x200040c0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_timeval(r5, 0x1, 0x0, &(0x7f0000000640), 0x10) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x8) pipe(&(0x7f0000000680)={0xffffffffffffffff}) r7 = open_tree(r1, &(0x7f00000006c0)='./file0\x00', 0x0) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x5b}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9d862ef65ae832fd2d5ee67a35"}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1e0, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6f}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x406}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x49dd6348}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x398}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x421}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x40}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x667}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x0, 0x6, 0x5, 0x40, 0x3, 0x9]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ee}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x92}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x51}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x525aec5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xe5, 0x3, 0x3, 0x2, 0x80000001]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x800, 0x9, 0x0, 0xffffff19, 0x6]}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x201}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x100, 0x101]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xcb46}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x2, 0x6, 0x10001, 0x0, 0x7, 0xb2, 0x6, 0x6, 0x7458000]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x673}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x40}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5, 0x52a6, 0x4e4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x560}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000040}, 0x80801) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000b00)=0x8f, 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 09:47:32 executing program 4: getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0x8e, [0x8000, 0x5, 0x6f, 0x8, 0x0, 0x1], 0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=""/142}, &(0x7f0000000200)=0x78) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)={@empty, @broadcast, 0x0, 0x9, [@dev={0xac, 0x14, 0x14, 0x32}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010101, @multicast2, @loopback, @empty, @multicast2]}, 0x34) r2 = openat$incfs(r0, &(0x7f00000002c0)='.log\x00', 0x6b8002, 0x4) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000300)={0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 'dh\x00', 0x20, 0xfffffff7, 0x7}, 0x2c) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000380)={0x3a, @empty, 0x4e24, 0x2, 'nq\x00', 0x13, 0xc, 0x40}, 0x2c) write$P9_RFLUSH(r1, &(0x7f00000003c0)={0x7, 0x6d, 0x1}, 0x7) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000540)) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000780)={{r0}, 0x6, &(0x7f0000000740)=[0x9, 0x0, 0x8000, 0x3, 0x4, 0x9], 0xffffffffffffffe1, 0x1, [0x3, 0x9, 0x7c0000000, 0xfffffffffffffffd]}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x400100, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000cc0)={{'\x00', 0x2}, {0x4}, 0x2, 0x0, 0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)="e1f9db6c99cc28a364cd34d4b53968701a66e57e8e5aad864fe2262c29b62b4bcb1270d845b5e64e4cb8a2b7a7b89940e8542f18bfe5fcf1ea9a926d9319aa2635a4f84b61054c16d456856f071fb07c5dd5e4bcd8ee0a5e036cf41a9344466a2a0281881c965908e5448335c2eca58138f55aa2c7d95af0dcebbf9b501dd06959b7e537ddc9e606663d6982b472776a325b16d8839dbf0105b656d8ec3285263215584fd54930c2856019db2482f4017fba6bc0a4617f84200fb8e8b2ae722a0283440b5ab9ec581452f3ed875389722cc930396ca5cefe2d38f6f3b61895bc3a90302cca26a5c7914a8c59acb0947a28c0b75de31559ce924c99785ac2556bdd69e31b68a024f3203f0d0ea40ac7d4fc79dbe4cfa12ccbf3dd6a4d2c003575b0e5c43410e19ce645d073657cd08e06bb1d467944705abfb915bcce5366a0572223ac846bfca099cb69da21658c33c38b81acdaaee1bf8efb741409f2e50b4c932b0e595588270a79dd031288b45be3e5e017c64d45308e78fbef8ea6daf206cef03525b6460cf1351c74684a14664a8d51f6b50c8b437b", 0x198, 0x0, &(0x7f0000000a80)={0x2, 0x1a7, {0x0, 0xc, 0xff, "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", 0x9b, "ee859d58bb59a118d1e3b708bea01d5d6b6811afed17b1b92f59dcbc4d45baec2f098c3a235f3500f97afd11a8cff8af2b529cfc00dd3a24e3a7cd2d14bb3120e9b326a6cb27ad3f128d1373ca08792327cd1c753c7225e19e848c2fe480b74e8d89724d9a6bd2d686d9d09ba6807907cda7778b7065da6bd76f1a804038d6084e94312277687bd3426f86ee3f788c8c444def478fe301f467beb9"}, 0x56, "e9a234028d1e0c90969619ae6bb949d8b93da9a0b9349e6fe70233915edc7ea04613efb6d4caa47fef4f658491f61b5d5240298f984bbee7d3a37800c67d75cb78d0070b77aeba7f50e854465f0586fc56b9bb443ccf"}, 0x209}) r5 = openat(r0, &(0x7f0000000d40)='./file0\x00', 0x509840, 0x4) mkdir(&(0x7f0000000d80)='./file1\x00', 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCRTMSG(r6, 0x890d, &(0x7f0000000e00)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @multicast1}, 0xf, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000dc0)='macsec0\x00', 0xffffffffffffffde, 0x20, 0x6}) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000fc0)={'veth0_to_team\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x8c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000) 09:47:32 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'bridge_slave_1\x00', {}, 0x8001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000080)) r3 = accept(r1, &(0x7f0000000480)=@rc={0x1f, @none}, &(0x7f0000000500)=0x80) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000540)=""/136, &(0x7f0000000600)=0x88) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) write$bt_hci(r3, &(0x7f0000000680)={0x1, @link_key_reply={{0x40b, 0x16}, {@any, "e25f046e81f32e00f5e667900988a257"}}}, 0x1a) sendmsg$AUDIT_GET(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x10, 0x3e8, 0x100, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000007c0)={'veth0_to_team\x00', {0x2, 0x0, @private}}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x89) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000000c00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000840)={0x368, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xd8, 0x45, "fd139a44eebc4a9d0eb433a2859caa325fedfa1e89aaad7f8e55dccf3a0ddc633995a1fd3b24a0085c0c84bc43acd7e88205353a1344044699d1a5ed19bba1a6b616552617c3e67afb7dc3b1491b0cad34d5050198298b63eab188dace1489b40623265d967d1fd0af57f6f40f693db7ba3829b89833d9a47dc469f263d7c7cdd65777cc4ab28ae26bce14644bf3393c4ba744de1c2b3a881362c52dd1699500cd416dca536cd1942292b6ef408e6850344cac4800b1b62cb8740d9d27d619f7db6de3d9ba152a1e3c6e25048fbe8535d8084929"}, @NL80211_ATTR_TESTDATA={0xf9, 0x45, "138160a39fec6a1311dfdbed8a336bff3e59ac4fd935e930b7e4763647f84c1728fbec5a8ae2829f5d5f82ab4902677768abb42545432a79e9aa61f6fd3c249897c36f5240dda5eff2420054a5959cdde12557a524ea5bde2efa3bf500fe7667166fb023264d91a02e8f8b843b3ae8aedae8c355821b0241c2853e30cc5026ade375dc29e49222f44c75532ec95b63108ae67b47e54be76a644aaec5f90a2946cdf6d10b71c7f5bf56dd0de8f69ffa12a4883d8ba0e5b02a927714bf614a75f8dd3a2fb174a6f05707e97d9c8daf2013eb1a461236b21f72d6d8b7809cda624101845ecc549667d12e0c4c6e32a95bb86af304b8df"}, @NL80211_ATTR_TESTDATA={0x32, 0x45, "17eb95ca91f08293ed0d3894f1aed46e68c4925e1ec3b18b2d7c247c4727045a26e1435a85898c32e29fe6af733e"}, @NL80211_ATTR_TESTDATA={0xc4, 0x45, "5b25c126aa6efaa588df8063c1ca8e63a5fc31e0fdc8d48b68d59fc1e572b4b103b8b531cd06c3e4933934aa35ff76a2d3e59c4f7301806bd5b62735f5cbdbe93cc2baa0511b015da6bccd191e168b93a4d72d1d6a297f2f9c85b14188ceda0459506812865b447f1c12d62001ae58b140e0c5f357aa1fe188689f6f4fce5517ae0211a3a8f4f3cd2bf96921112f8f70a000be43df3257fc0551a93bfb3a5cc838a926563c5ea87bf6599f1308ff7761a8edb92ecfc63cd646d06c56d7514b31"}, @NL80211_ATTR_TESTDATA={0x87, 0x45, "0ecf908ac63f2513af6ec4abcecbcb86b6f911ffb46ab9fa5764def53b76cd2958dfd8cfcbffa8f0d7f4244b951a202e4a66ea127a712bba03d61075ca1a9a32d4325cbc3e78a3f2763bcdf84c9840a14a6788629a958ee006fd89aa8bf06632a0ddd4910ef474d363a9c4841858d1ba70d7f572142235686b75e02d92eb28a9ebb122"}]}, 0x368}, 0x1, 0x0, 0x0, 0x4c8d1}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000c40)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r3) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, r6, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040020) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r6, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x28}, 0x1, 0x0, 0x0, 0x20080090}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000f40)=0x2e673630, 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000001040)={@mcast1, 0x4e}) 09:47:32 executing program 6: sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x1, 0x1, 0x0, {0x8001, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x10000, 0x3f}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @random="59758587817f"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4004010}, 0x4004000) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xac8e6400c63fb91b}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x170, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x134, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xeb6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x21b8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2953}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3452}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6b}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x800}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf0a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1f3d5a3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x58}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000001}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5d}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x137d6714}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}]}, {0x4}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}]}, 0x170}, 0x1, 0x0, 0x0, 0x48090}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x2000, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r0, 0x4, 0xd6, 0x81, 0x42312534, 0x60, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl0\x00', r1, 0x2f, 0x3f, 0x20, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfa, 0x0}}, @mcast2, 0x8, 0x70f, 0xfffffffa, 0x100}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000009c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x6d35cf36758bee6c}, 0x20000000) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f0000000a00)={0xd, {{0xa, 0x4e23, 0x101, @loopback}}, {{0xa, 0x4e20, 0x10000, @private2, 0xffff0000}}}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x410000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x44084) sendmsg$inet(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000cc0)="2503e709486c8fe9c318d1e910b5f49ddf90fb08a656894d", 0x18}, {&(0x7f0000000d00)="7c9d615f62e3f7a7415dc23a50ab559edd004c1dc84460cec729fefc9f83cc7462236fa43b90db3e4164f5e777a2", 0x2e}], 0x2}, 0x400c084) alarm(0x100) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) open_by_handle_at(r7, &(0x7f0000000e00)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x8, 0x3, 0x4, 0x1}}, 0x10000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x78, r6, 0x10d, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf0}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x58, r6, 0x22, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x100}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x8001}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x1f}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x3}]}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x20}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x400}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x84) 09:47:32 executing program 7: ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/223) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x70}}, './file0\x00'}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000140)={0x8001, 0x9, 0x6}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000180)={{}, "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"}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = dup3(r0, r0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000001580)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f00000011c0)={0x37c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x335, 0x33, @mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x7f}, @broadcast, @device_b, @random="a68268a44ffb", {0x5, 0x98}}, @ver_80211n={0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x2, 0x5f, @random=0x1, @void, @void, [{0xdd, 0x66, "1eae20c13730a9ccb5c8749a2dbdb5d792c9db75874671c8b214d92486448df43207549eb26d2dd296f8b10852d3c0e576eb0938818ae74e6135df7158c531b1789dcb4164466a8310cf04c20d3c874665b408bfae8de411b12634284de58bced9122ab5e1ba"}, {0xdd, 0xc9, "ec35cdc92db8d4617d6eb8d89a91aa66b0f5145a1111531c801825a5be6ea5fe479a30642af92a942a4f45af8ccb91c46c3beb0ad8c08c6a62c09ee7bea3f478bb875adccfe737dc05e0f4567a4edeeb50352eaf5300f8b4355ec26e8dabf734312ac5646a433d7befdc6b91c9b35e50ec31fefe97ea412e2c227fbf9363dbffda138f7d313af54103450c4ad4c37478fbadd4adc58119acdfb5bbef3aaea825dc2c0e2a6b6876a116bb59d159c6a70be4862eb62ecdeaff50b4a159ba99417c36ccb13e4a5a9eb670"}, {0xdd, 0x8, "eb175ce738e25a40"}, {0xdd, 0x3a, "eaef2a1f2ef827828f60a8f99445dd0a1b5f07ca18eef1c802092aeb46a25289555928b9df4886398e77aebb45e0ba41718d254e2381643b6153"}, {0xdd, 0xbe, "34e3e1664755dcd6de4ba6d8c7cf6a2942b64b5d7765c7f042159deeba88ec29db077d3de72667745ed6072b1ae2f456389678f8a4a1c26b2d0d3681c2a2b2be8a7c30e7de4e9a3b78e4bef7f830f16e5a58a4053593b4b478cc215b364eecfbe69a7149daa191cfe0b36ca371022ad541075c223d22a211c1674ec61903b7cad077defa3b6724b02f47c9341aa1303c52147ce25e6907ed33f4d014be016305722beaa96b7859fe14924cda03bef5fb325b39c013df4d90893ca2e63800"}, {0xdd, 0x9e, "4d7fb96db1852de0d857984f44e2ad903427e55d66fda6e0ba0899ecfc835f6a59fcb93b203ffbc2bba69176a458a9fc79e45330cfb0005111384e689b35ffd2d4ec49c52cd8bb5053fa34125b5a37b21959cc707fd767be2caddcb739282f5af32ee929b8c90d5ac6266df37d9529b0216d3146a7d5f55870872e5f422fd9e1076f8a225a837c12315322b7906cdf765edead56962634cc234a6fec0d8b"}, {0xdd, 0x34, "75241e5a3973221ecb69f567b217f5112f9c991f501d9b7277d9df5c0c0296cd71bee2db0961b4b6e0094e73df86b10753e4da30"}]}}, @NL80211_ATTR_MAC={0xa}]}, 0x37c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) fcntl$getownex(r1, 0x10, &(0x7f00000015c0)) r2 = syz_open_pts(r1, 0x4200) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000001600)) r3 = fsmount(r0, 0x0, 0x70) ioctl$TIOCNOTTY(r3, 0x5422) openat$procfs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/consoles\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000001680)={{0x9, 0x80}, 'port1\x00', 0x2, 0x1040, 0x1ff, 0x9, 0x80000000, 0x8, 0x1ff, 0x0, 0x1, 0x7}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001740), 0x840, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0x8) ioctl$TIOCNOTTY(r1, 0x5422) open(&(0x7f0000001780)='./file0\x00', 0x286600, 0x40) [ 113.294247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.299360] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.301908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.312705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.318684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.570294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.581498] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.586146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.598419] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.606078] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.609765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.622520] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.632534] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.638679] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.654452] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.697675] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.704908] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.722128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.739155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.741635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.746031] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.747883] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.752460] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.754937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.761996] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.764129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.770683] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.772297] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.773988] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.781276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.788031] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.793498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.810655] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.818607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.831300] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.858942] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.863117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.902837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.908856] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.928805] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.372899] Bluetooth: hci0: command tx timeout [ 115.692471] Bluetooth: hci1: command tx timeout [ 115.756258] Bluetooth: hci2: command tx timeout [ 115.884283] Bluetooth: hci6: command tx timeout [ 115.884305] Bluetooth: hci5: command tx timeout [ 115.948953] Bluetooth: hci4: command tx timeout [ 115.948969] Bluetooth: hci3: command tx timeout [ 116.012335] Bluetooth: hci7: command tx timeout [ 117.421991] Bluetooth: hci0: command tx timeout [ 117.741337] Bluetooth: hci1: command tx timeout [ 117.805757] Bluetooth: hci2: command tx timeout [ 117.932941] Bluetooth: hci6: command tx timeout [ 117.932992] Bluetooth: hci5: command tx timeout [ 117.996834] Bluetooth: hci3: command tx timeout [ 117.997226] Bluetooth: hci4: command tx timeout [ 118.061619] Bluetooth: hci7: command tx timeout [ 119.470269] Bluetooth: hci0: command tx timeout [ 119.788265] Bluetooth: hci1: command tx timeout [ 119.853335] Bluetooth: hci2: command tx timeout [ 119.980581] Bluetooth: hci5: command tx timeout [ 119.982027] Bluetooth: hci6: command tx timeout [ 120.044316] Bluetooth: hci4: command tx timeout [ 120.045023] Bluetooth: hci3: command tx timeout [ 120.109367] Bluetooth: hci7: command tx timeout [ 121.517661] Bluetooth: hci0: command tx timeout [ 121.838258] Bluetooth: hci1: command tx timeout [ 121.900563] Bluetooth: hci2: command tx timeout [ 122.029286] Bluetooth: hci6: command tx timeout [ 122.029772] Bluetooth: hci5: command tx timeout [ 122.094199] Bluetooth: hci3: command tx timeout [ 122.094255] Bluetooth: hci4: command tx timeout [ 122.156353] Bluetooth: hci7: command tx timeout [ 176.060773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.065293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.067368] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.074845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.077477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.127225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.131087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.132566] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.141595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.149640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.196363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.202708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.207924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.246964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.258027] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.264569] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.278385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.285035] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.288620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.290931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.296702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.300079] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.308989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.311817] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.313839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.314406] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.328972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.332657] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.334009] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.336608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.340634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.343475] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.351031] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.352864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.358682] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.359652] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.385743] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.388635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.429249] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.462658] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.157330] Bluetooth: hci0: command tx timeout [ 178.221574] Bluetooth: hci1: command tx timeout [ 178.348597] Bluetooth: hci2: command tx timeout [ 178.412301] Bluetooth: hci5: command tx timeout [ 178.413028] Bluetooth: hci3: command tx timeout [ 178.476282] Bluetooth: hci4: command tx timeout [ 178.476983] Bluetooth: hci6: command tx timeout [ 178.927264] Bluetooth: hci7: command tx timeout [ 180.204287] Bluetooth: hci0: command tx timeout [ 180.268282] Bluetooth: hci1: command tx timeout [ 180.396562] Bluetooth: hci2: command tx timeout [ 180.460353] Bluetooth: hci3: command tx timeout [ 180.460769] Bluetooth: hci5: command tx timeout [ 180.524517] Bluetooth: hci6: command tx timeout [ 180.524932] Bluetooth: hci4: command tx timeout [ 180.973280] Bluetooth: hci7: command tx timeout [ 182.253233] Bluetooth: hci0: command tx timeout [ 182.317441] Bluetooth: hci1: command tx timeout [ 182.445347] Bluetooth: hci2: command tx timeout [ 182.509240] Bluetooth: hci5: command tx timeout [ 182.509660] Bluetooth: hci3: command tx timeout [ 182.573260] Bluetooth: hci4: command tx timeout [ 182.573674] Bluetooth: hci6: command tx timeout [ 183.021229] Bluetooth: hci7: command tx timeout [ 184.301263] Bluetooth: hci0: command tx timeout [ 184.364337] Bluetooth: hci1: command tx timeout [ 184.493442] Bluetooth: hci2: command tx timeout [ 184.556258] Bluetooth: hci3: command tx timeout [ 184.556699] Bluetooth: hci5: command tx timeout [ 184.620575] Bluetooth: hci6: command tx timeout [ 184.621020] Bluetooth: hci4: command tx timeout [ 185.070712] Bluetooth: hci7: command tx timeout [ 238.270813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.274855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.276525] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.286744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.291682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.396836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.402755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.405010] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.419228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.425657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.504295] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.504794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.511533] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.513616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.514973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.525294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.529408] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.530905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.544479] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.546954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.634799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.637172] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.638411] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.644181] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.653888] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.670322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.673035] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.675994] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.685580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.687087] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.838905] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.841564] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.843900] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.850142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.855304] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.867586] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.883669] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.952370] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.957946] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.960646] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.365296] Bluetooth: hci0: command tx timeout [ 240.494282] Bluetooth: hci1: command tx timeout [ 240.621380] Bluetooth: hci2: command tx timeout [ 240.622874] Bluetooth: hci3: command tx timeout [ 240.748473] Bluetooth: hci4: command tx timeout [ 241.068311] Bluetooth: hci7: command tx timeout [ 241.133832] Bluetooth: hci5: command tx timeout [ 241.388857] Bluetooth: hci6: command tx timeout [ 242.413311] Bluetooth: hci0: command tx timeout [ 242.540473] Bluetooth: hci1: command tx timeout [ 242.668479] Bluetooth: hci3: command tx timeout [ 242.668974] Bluetooth: hci2: command tx timeout [ 242.796781] Bluetooth: hci4: command tx timeout [ 243.116243] Bluetooth: hci7: command tx timeout [ 243.181422] Bluetooth: hci5: command tx timeout [ 243.436851] Bluetooth: hci6: command tx timeout [ 244.462373] Bluetooth: hci0: command tx timeout [ 244.588419] Bluetooth: hci1: command tx timeout [ 244.716655] Bluetooth: hci3: command tx timeout [ 244.717364] Bluetooth: hci2: command tx timeout [ 244.844684] Bluetooth: hci4: command tx timeout [ 245.164646] Bluetooth: hci7: command tx timeout [ 245.228448] Bluetooth: hci5: command tx timeout [ 245.484296] Bluetooth: hci6: command tx timeout [ 246.508441] Bluetooth: hci0: command tx timeout [ 246.636667] Bluetooth: hci1: command tx timeout [ 246.764348] Bluetooth: hci2: command tx timeout [ 246.764906] Bluetooth: hci3: command tx timeout [ 246.892611] Bluetooth: hci4: command tx timeout [ 247.213967] Bluetooth: hci7: command tx timeout [ 247.276559] Bluetooth: hci5: command tx timeout [ 247.532234] Bluetooth: hci6: command tx timeout [ 298.682701] syz-executor.7 (5224) used greatest stack depth: 24400 bytes left [ 300.676807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.682641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.686899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.698278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.704106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.001693] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.014324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.020424] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.022852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.057709] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.059634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.060685] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.066493] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.069595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.078414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.081915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.088955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.117124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.135781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.145597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.214098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.225477] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.266911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.269221] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.272006] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.286729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.288978] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.290970] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.301550] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.305907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.319673] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.342516] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.355884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.375143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.375647] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.388329] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.396283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.396730] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.493761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.518747] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.764274] Bluetooth: hci0: command tx timeout [ 303.148338] Bluetooth: hci2: command tx timeout [ 303.149353] Bluetooth: hci1: command tx timeout [ 303.213261] Bluetooth: hci3: command tx timeout [ 303.404501] Bluetooth: hci4: command tx timeout [ 303.468330] Bluetooth: hci6: command tx timeout [ 303.596735] Bluetooth: hci7: command tx timeout [ 303.597821] Bluetooth: hci5: command tx timeout [ 304.813511] Bluetooth: hci0: command tx timeout [ 305.197467] Bluetooth: hci2: command tx timeout [ 305.197941] Bluetooth: hci1: command tx timeout [ 305.263272] Bluetooth: hci3: command tx timeout [ 305.455323] Bluetooth: hci4: command tx timeout [ 305.517278] Bluetooth: hci6: command tx timeout [ 305.645300] Bluetooth: hci5: command tx timeout [ 305.645783] Bluetooth: hci7: command tx timeout [ 306.861610] Bluetooth: hci0: command tx timeout [ 307.245445] Bluetooth: hci2: command tx timeout [ 307.245900] Bluetooth: hci1: command tx timeout [ 307.310233] Bluetooth: hci3: command tx timeout [ 307.500233] Bluetooth: hci4: command tx timeout [ 307.565482] Bluetooth: hci6: command tx timeout [ 307.694280] Bluetooth: hci7: command tx timeout [ 307.694764] Bluetooth: hci5: command tx timeout [ 308.909405] Bluetooth: hci0: command tx timeout [ 309.292467] Bluetooth: hci1: command tx timeout [ 309.292951] Bluetooth: hci2: command tx timeout [ 309.357287] Bluetooth: hci3: command tx timeout [ 309.549441] Bluetooth: hci4: command tx timeout [ 309.613282] Bluetooth: hci6: command tx timeout [ 309.741407] Bluetooth: hci5: command tx timeout [ 309.741886] Bluetooth: hci7: command tx timeout [ 363.263232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.271911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.276340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.289075] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.294123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.424421] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.427776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.429859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.460744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.463493] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.466036] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.468684] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.473035] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.479415] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.480999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.484082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.487394] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.489130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.496356] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.499594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.608490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.632993] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.635703] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.646714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.660884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.041477] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.055485] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.059572] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.061032] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.091866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.126417] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.130752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.134638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.140973] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.145315] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.148536] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.154650] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.159850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.178841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.191438] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.356366] Bluetooth: hci0: command tx timeout [ 365.548290] Bluetooth: hci2: command tx timeout [ 365.549616] Bluetooth: hci3: command tx timeout [ 365.676441] Bluetooth: hci1: command tx timeout [ 365.933530] Bluetooth: hci4: command tx timeout [ 366.252499] Bluetooth: hci7: command tx timeout [ 366.316436] Bluetooth: hci5: command tx timeout [ 366.317046] Bluetooth: hci6: command tx timeout [ 367.404384] Bluetooth: hci0: command tx timeout [ 367.596424] Bluetooth: hci3: command tx timeout [ 367.596602] Bluetooth: hci2: command tx timeout [ 367.724233] Bluetooth: hci1: command tx timeout [ 367.980544] Bluetooth: hci4: command tx timeout [ 368.300404] Bluetooth: hci7: command tx timeout [ 368.364581] Bluetooth: hci6: command tx timeout [ 368.365048] Bluetooth: hci5: command tx timeout [ 369.452827] Bluetooth: hci0: command tx timeout [ 369.645435] Bluetooth: hci3: command tx timeout [ 369.645916] Bluetooth: hci2: command tx timeout [ 369.774248] Bluetooth: hci1: command tx timeout [ 370.028240] Bluetooth: hci4: command tx timeout [ 370.348817] Bluetooth: hci7: command tx timeout [ 370.414381] Bluetooth: hci5: command tx timeout [ 370.414769] Bluetooth: hci6: command tx timeout [ 371.501517] Bluetooth: hci0: command tx timeout [ 371.694193] Bluetooth: hci2: command tx timeout [ 371.694221] Bluetooth: hci3: command tx timeout [ 371.821179] Bluetooth: hci1: command tx timeout [ 372.076251] Bluetooth: hci4: command tx timeout [ 372.396251] Bluetooth: hci7: command tx timeout [ 372.460567] Bluetooth: hci5: command tx timeout [ 372.461365] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 09:52:43 Registers: info registers vcpu 0 RAX=0000000000000005 RBX=ffff888012fb1bc0 RCX=0000000000000200 RDX=b503ba001073dead RSI=ffff888012fb2690 RDI=ffff888012fb2690 RBP=0000000000000000 RSP=ffff88806ce088a8 R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000000 R11=0000000000011948 R12=ffff888012fb2690 R13=0000000000000000 R14=0000000000000003 R15=ffff888012fb2618 RIP=ffffffff81511bd3 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4e915a71f0 CR3=000000000ed8e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000002 RCX=dfb8078e475e76a4 RDX=0000000000000000 RSI=000000008301a466 RDI=ffff88806cf31850 RBP=ffff88806cf08a48 RSP=ffff88806cf08980 R8 =0000000000000003 R9 =0000000000000001 R10=0000000000000000 R11=000000000002498b R12=0000000000000000 R13=ffff88806cf08a38 R14=ffff888015c3b780 R15=ffff88806cf089f0 RIP=ffffffff813508f5 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f89f52ab27c CR3=0000000029a40000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000