Warning: Permanently added '[localhost]:61598' (ECDSA) to the list of known hosts. 2025/04/28 12:59:00 fuzzer started 2025/04/28 12:59:00 dialing manager at localhost:46629 syzkaller login: [ 93.210734] cgroup: Unknown subsys name 'net' [ 93.336724] cgroup: Unknown subsys name 'cpuset' [ 93.375311] cgroup: Unknown subsys name 'rlimit' 2025/04/28 12:59:15 syscalls: 2214 2025/04/28 12:59:15 code coverage: enabled 2025/04/28 12:59:15 comparison tracing: enabled 2025/04/28 12:59:15 extra coverage: enabled 2025/04/28 12:59:15 setuid sandbox: enabled 2025/04/28 12:59:15 namespace sandbox: enabled 2025/04/28 12:59:15 Android sandbox: enabled 2025/04/28 12:59:15 fault injection: enabled 2025/04/28 12:59:15 leak checking: enabled 2025/04/28 12:59:15 net packet injection: enabled 2025/04/28 12:59:15 net device setup: enabled 2025/04/28 12:59:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/28 12:59:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/28 12:59:15 USB emulation: enabled 2025/04/28 12:59:15 hci packet injection: enabled 2025/04/28 12:59:15 wifi device emulation: enabled 2025/04/28 12:59:15 802.15.4 emulation: enabled 2025/04/28 12:59:15 fetching corpus: 0, signal 0/0 (executing program) 2025/04/28 12:59:17 starting 8 fuzzer processes 12:59:17 executing program 0: r0 = socket(0x29, 0x4, 0x9) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"2f3ece6ead3e540c772c28b0c9d1d6ef", 0x0, 0x0, {0x1000, 0xf8000000}, {0x58, 0x100}, 0x5, [0xb7, 0xfffffffffffffffc, 0x7ff, 0x400, 0x1dba, 0x7, 0x6, 0x6, 0xae, 0xffffffff, 0xfffffffffffffeff, 0x3, 0x9, 0x39, 0x7f, 0x1]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"3d00415c32e9d1fd5fe173f815631e21", 0x0, r1, {0x7, 0x60000}, {0x40, 0xfffffffd}, 0x40, [0x8, 0x3f, 0xffffffffffffffe1, 0x80, 0x4, 0x400, 0x5, 0x6, 0xffffffff, 0x40, 0x4, 0x0, 0x8, 0x1, 0x9f, 0x3ff]}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000200)=0x1ff) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=0x1000) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001280)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000012c0)=""/4096, &(0x7f00000022c0)=0x1000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000002340), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x271d93251d6d8f7b}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000002480), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000002640)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002600)={&(0x7f00000024c0)={0x11c, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9614}, {0x6, 0x11, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x9}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002740)={'sit0\x00', &(0x7f00000026c0)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0xa7, 0x8001, 0x10, @loopback, @remote, 0x40, 0x40, 0x4c17d1cd, 0x19ad}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002880)={&(0x7f0000002680), 0xc, &(0x7f0000002840)={&(0x7f0000002780)={0xa8, 0x0, 0x20, 0x2, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xf}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x54) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002900), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000002b80)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002940)={0x1ec, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x72}}}}, [@NL80211_ATTR_PROBE_RESP={0x152, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x78, 0x80, [@random={0x87, 0x72, "6cf0df1818a7fb2c1c9f25cda0a4ca0271235816996382cc2506deb158987e1a58e5155c57f7b44689550975f946c6035acff63c66092a39863858f43c23cb80954b40e4bc8fc5516f1210a3a8bbd82ba07d625d25bb4a786ee43a333deab66888fc305e87e7a5e037bd3ae5b2a99cf7a550"}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000}, 0x448c0) pwrite64(r0, &(0x7f0000002bc0)="797f80415de12af8e0aabb89933e5fa8a29fabeb8f62a878c799ebef60ec6844cac3139e0cc2f32dd659293625bad49d3102f9ad2c0d5ed4b7b789c7f767aa7098176b26ee254f0e1e198bfe9cbfa4adb16067dc513cdff4ecd349b39b650ba21625e8c1b31e0a7bc6232b30733656c2618c0f211a600cdde22a33acd351e44ebce0852e85f0f3226b63c4e41386373be81dcea22bb0d0b4f2fac66fb9bef91e4c899993055899af3d2e3fea20e9e9e8bc88888bac43cdab8e735e53d1d7948ca7bd091478fd4a07777f094b464904351980f929cdb72af2", 0xd8, 0x1a) fdatasync(r2) getuid() syz_genetlink_get_family_id$tipc2(&(0x7f0000002cc0), r0) 12:59:17 executing program 1: r0 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000080)="6a1f8ecc83ea52f7afd3b74c2b", 0xd, 0x3}, {&(0x7f00000000c0)="e65081303341c6f9390cfa83fea1514121e8a163a6908f9018fd767151ce7969649dc63711e71ec33f9e76269545254e92f2353770b7cd91cc1773dcb2fedb2d53b1570b4a13340e3c9d83b113a3e584053f6f37914cccc5f7221f40fba8f5db816673ba5ae05570591f967a1563d8cd91e285867a884ed2182d9fa9c5165d8a29484d26b57d4b5d7fd1f73df7573640ba8dc604f4e14bf2db1dbc9545f38ba5cc8a1455511b7c3ee856720331", 0xad, 0xfffffffffffffffb}, {&(0x7f0000000180), 0x0, 0x2}], 0xa0, &(0x7f0000000240)={[{'[\'-'}, {':,\\}[&'}], [{@seclabel}, {@audit}, {@euid_lt}, {@smackfsdef={'smackfsdef', 0x3d, '\\%]!/&{#'}}, {@dont_appraise}]}) r1 = openat(r0, &(0x7f00000002c0)='./file0\x00', 0x40, 0x60) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4008804) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x73a5aa23}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x40088c4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe8, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x400}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) lchown(&(0x7f0000000740)='./file0\x00', 0xee00, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2110}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x20044041) r5 = syz_open_dev$vcsa(&(0x7f0000000980), 0x80000001, 0x200) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004005) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) name_to_handle_at(r7, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=@fuse_with_parent={0x18, 0x82, {{0x3ff, 0x7ff, 0x1}, {0x9b, 0x3f, 0x7}}}, &(0x7f0000000c00), 0x400) syz_mount_image$tmpfs(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x9, 0x1, &(0x7f0000000d00)=[{&(0x7f0000000cc0)="c71c0f1085ec71a5f48f34c50e4b93fdea589adfdfd6", 0x16, 0x80000000}], 0x40, &(0x7f0000000d40)={[{@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x33, 0x38, 0x2d, 0xdfefa0a50e59de0, 0x38, 0x34, 0x34]}}, {@size={'size', 0x3d, [0x34]}}, {@huge_never}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@seclabel}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@pcr={'pcr', 0x3d, 0x7f}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'veth1_virt_wifi\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x37, 0x64, 0x39, 0x62, 0x35, 0x64, 0x37], 0x2d, [0x39, 0x63, 0x66, 0x33], 0x2d, [0x62, 0x63, 0x30, 0x32], 0x2d, [0x36, 0x35, 0x66, 0x37], 0x2d, [0x62, 0x63, 0x38, 0x34, 0x0, 0x64, 0x19, 0x63]}}}, {@uid_lt={'uid<', 0xee00}}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000001100)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f40)={0x168, r8, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x44}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8031}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac01, 0xfac09]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12:59:17 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2100000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x1ff}}, {@cache_none}, {@debug={'debug', 0x3d, 0x1f}}, {@posixacl}, {@fscache}, {@cache_loose}], [{@obj_role={'obj_role', 0x3d, '{+!'}}]}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x2f, 0x0, 0x0, 0x2, 0x20, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x80, 0x8, 0x2}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff5ae1, 0x42}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4884}, 0x80000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000380)='\']-', 0x0, r0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc3}}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000400)={@id={0x2, 0x0, @d}, 0x10, 0x0, '\x00', @d}) recvmsg$unix(r0, &(0x7f0000000780)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000500)=""/162, 0xa2}, {&(0x7f00000005c0)=""/12, 0xc}, {&(0x7f0000000600)=""/48, 0x30}], 0x3, &(0x7f0000000680)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x12100) r16 = pidfd_open(r9, 0x0) r17 = syz_open_dev$usbmon(&(0x7f00000007c0), 0x8, 0x48000) r18 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r18, 0x2271, &(0x7f0000000840)) readv(r12, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/46, 0x2e}, {&(0x7f00000008c0)=""/195, 0xc3}, {&(0x7f00000009c0)=""/157, 0x9d}, {&(0x7f0000000a80)=""/116, 0x74}], 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r17}, './file0\x00'}) mknodat$loop(r6, &(0x7f0000000b80)='./file1\x00', 0x2, 0x1) r19 = fcntl$getown(r15, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000d40)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000000e40)=0xe8) sendmmsg$unix(r14, &(0x7f0000002080)=[{{&(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000c40)="00c58594aca82fd27af529333d9dc5a7b9f2c06140254b843cb46aed315348886afe585877c3119a3df8f1dab639ad7ce63cc9eb3cbe19e8d5f023d522a2bb3f6ce2338425d122706790f3c251626cbbd2d09c47b7eafb19abaae3a6b355277bc95781677cae3295d488bba64179ac9925761a99cbe9ee184c2932ef31effdcc0c150356fd932070f1a3b4017955b4164f32dd9a0b0cc8120429c7b7aaee", 0x9e}], 0x1, &(0x7f0000000e80)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r10}}}, @rights={{0x2c, 0x1, 0x1, [r8, r7, r13, r5, r16, r17, r4]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r14, r3]}}], 0x88, 0x4040080}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000f40)="0b50077c9ece726154396f49cfb1cefa8ffdf09b9243dbeac43ef06ecb07ac97b595a0c6deb448aa4cb98d4d53bc9e23968f82cf66b480a909ed7697108de3a461cbc0e48f6254729d25836194d87be240df3a01cbc14e4c48f45b98140ce39333ebd18d6ebf457a82bc985cd88ffc2af74a71a2719ee4a6267fc240ff7b7d35f2dce24e0894b48f013320d400d450e13b7114d1b2d3a1de7237e9db6ab14653fa32f16cb37e6dc3d932f5d33ff9a9344dec152910adc1fe84a0f80e57e87a68d15af2eec04cff0a943016acd78b19ed2cdece395c6e2f5c2fd9d3d0f3f12dbf857a017e3ba952cec093c1442ca6f5be679e2c49da", 0xf5}, {&(0x7f0000001040)="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", 0x1000}], 0x2, 0x0, 0x0, 0x8000}}], 0x2, 0x1) 12:59:17 executing program 3: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.impure\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)="5d8782827f68b25a0cce4883722d1187e41407932f2c7489146360ef4f6524fdd61d9ec7b70bd47e47abb40cdc71a6ac86157884c3092b16f7786f2645f9cdf06ba275a6c55c70b31853c5963dc1c03793c94f88b3bc76999009e4ab0cde349597c00ada7050f53626269ee049400e5930dbf83ca9bf86dc4a8540b368813d761a52d3d7393c4e39e88b6180c4ff96aa9be8f5b0c1ae3a5a4db715487d4b1482376963c7a256300ca4e81972c9a69a54625317200d7586592969d6a50bc929eb3df2d7fd8f689c8fda447785dd8c3bd749ca", 0xd2}, 0x68) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8000) sendmsg$802154_dgram(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000280)={&(0x7f0000000240)="e70931fe556d930afac9414e823445eba18cde", 0x13}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r1 = syz_open_dev$mouse(&(0x7f0000000300), 0x0, 0x400080) r2 = openat$incfs(r1, &(0x7f0000000340)='.pending_reads\x00', 0x1, 0x10) fcntl$notify(r2, 0x402, 0x24) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000380)=0x81) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000400)=0x3) r4 = getpid() ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(r4, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000480)={r5, 0xffffffffffffffff, 0x7}) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r5) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) getpeername(r2, &(0x7f0000000500)=@x25={0x9, @remote}, &(0x7f0000000580)=0x80) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000005c0)={0x4, 0x3, 0x5}) r6 = dup(r0) ioctl$KDGETKEYCODE(r6, 0x4b4c, &(0x7f0000000600)={0x3, 0x2}) 12:59:17 executing program 4: ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000000000)={0x16}) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000680)={0x24, &(0x7f00000004c0)={0x40, 0xb, 0xbe, {0xbe, 0x21, "929a6f2ea9a1778c997abf319477374fe812e422a85d2617661eff0aa038bd9227d467cfaff945eca65d464313eadd9280ecb2d45fc8f0c88d173b308813d719a76af120f745db2c0fdaa1ff6b7e6904e8f4b3c3ac26bb38f70bcdd4e84205f28f3edd033933b46b74e495dcfcb176495ae989b29e4238a42644656d0002ca024d402c3d7e81b835fb5e6b9f1cd0fdc105e941a9a17f3b02316dcc073f6b21b8ec167a92175465879113f972c180b4b7d90b09d3468bd00983246ac4"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, &(0x7f0000000600)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x65, 0x1, {0x22, 0xbe4}}}}, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x40, 0xf, 0xe5, "1219f47e0ccb63f29ecedf76c0776ea92ad53c4855fae4957fe3f1a6b56040b46f8222bfc14793c55780e151afb6933e37a79c54334abab157accd88418494037e3037ad3e96b8597657a024ebbc91c3fd7864bbe19b5df9b78a922bc2cf615e24032377c32e14641d5dd953f3c40a984f0257b34de4192fcb60ca280fbfe319a9f65bb28546fdab676420297ffb3d3308c131bb3644fa30a2d6d55360962ff77e6b41cbc5a9c4226a402fdbf470987c83669e4ade34ec919110f4f42da9b15c8dc602574520c7ffc93a8ca63c17348301bf03c73ad15e78ffbe60075359a9ce98ada7beda"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000840)={0x20, 0x1, 0x5, "dcbc4be479"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x2}}) r0 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) preadv(r0, &(0x7f0000001c00)=[{&(0x7f0000000940)=""/96, 0x60}, {&(0x7f00000009c0)=""/9, 0x9}, {&(0x7f0000000a00)=""/235, 0xeb}, {&(0x7f0000000b00)=""/219, 0xdb}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x5, 0x7fff, 0x3) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001c80)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000001cc0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001d80)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000001d00)="82cf9eeb6a976f8c7656e2c7e8281a5f1bd73b1e301955f6f7f1540a7e70c20e27109b421e6d0aa4c2206a64ec8f911e43ce9713acbce5a109fe964f0a7cf4db17e6884e92fea2e0134dca07ffc10192f3617f5641354959", 0x58, r2}, 0x68) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000001e00)={{0x3f, 0x593}, 0x100, './file0\x00'}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000001f40)=0x2) ioctl$RTC_UIE_OFF(r1, 0x7004) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) pread64(r3, &(0x7f0000001f80)=""/121, 0x79, 0xd9) r4 = socket(0x25, 0x6, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000002000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x0) r5 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000002040)={0x4, 0x0, {0x1, @usage=0x1ca, 0x0, 0x4, 0x80000000, 0x6, 0x8, 0x6, 0x24, @usage=0x2e, 0xffffff42, 0x40, [0x0, 0x8000000000000, 0x7f, 0x7, 0xfffffffffffffe00, 0x7fff]}, {0x0, @struct={0x1ff, 0xffffff80}, 0x0, 0x6, 0x6, 0x9, 0x400, 0x4, 0x77, @struct={0x7fff, 0xf94f}, 0x7, 0x80, [0x8, 0x0, 0x3, 0x7fff, 0x4, 0xffffffffffffffff]}, {0x1, @usage=0x2, 0x0, 0xec84, 0x100000001, 0x6bdda93e, 0x7ff, 0x3, 0xa0, @struct={0x6, 0x40}, 0x7fffffff, 0x0, [0x7, 0x8, 0x7, 0xa81f, 0x5, 0x2]}, {0x0, 0x1, 0x7ff}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000004b00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) [ 110.249488] audit: type=1400 audit(1745845157.758:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:59:17 executing program 5: sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x34403000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1e}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x71b98171}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fffffff}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22f}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x40) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x68b7bafd2f8fe7d9}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x4100, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x48054}, 0x4040005) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x20}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/module/snd_seq', 0x6000, 0x69) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d4}, 0x4004081) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xdc, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d78125f308"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "4eda"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @random="9c2efa6a20b8"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000880)=@type=0x3) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x50, r5, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x811}, 0x4) r7 = fsopen(&(0x7f0000001280)='msdos\x00', 0x0) write$binfmt_elf64(r7, &(0x7f00000012c0)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x8a, 0x20, 0x6, 0x8, 0x2, 0x3, 0x101, 0x98, 0x40, 0x1b2, 0x8, 0x7, 0x38, 0x1, 0x70, 0x3f, 0x148}, [{0x2, 0x4, 0x5, 0x7, 0x2, 0xfffffffffffffffd, 0x8000, 0x1}], "74622e9818b03c79fe6f5df9155945c7b52eac297577e87be4b17e1faf2418f2c4e616934796e2c439c73565f4c9292b68258a459c0a40c116c946036b644fee2d3bc7fbba321d9d42f95e9e1b78c2f547778ea533de6e4246883233cbde76d0a307ad9f304a6b841d9337e35462ad", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xae7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001dc0), 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x44, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040050}, 0x40) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x27}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000894}, 0x40000) 12:59:17 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, 0x19, 0x8, 0x70bd2b, 0x25dfdbfe, {0x1}, [@generic="5c917679d5be8aff7de469abfac532fe1b54645d6b10a963fb8d524dba03a604377bc383882c453f86e0fa9bda9eb796624be05176cbe2a5e6473b962a0bbeaea2ada7454fd92698b24c97e7d6cf48d1c4ff8d9a18d4fe0886e9f4e5200a72ada311138ea9615404254b8f4f119455a57c6296ea8b4b0ba4a96411e7b62a91ee888cb6a5d9fd9dfa13fa85684a9bb81896aec8f754cbe9ce6b4b87a69e27fefb0c678456d92ae18816ff2bfe45a8b4736bf7e294f7bf6b252004fbcc98f1ef98b22796706bc85dd343e24f771b9889cd85b5a7a570e894962f6d7d2220a55b2595c2585803e38ca4da8cf9", @typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@mcast1}, @generic="aa9110317110a586", @nested={0xc, 0x23, 0x0, 0x1, [@typed={0x8, 0x55, 0x0, 0x0, @pid=r0}]}, @typed={0x8, 0x54, 0x0, 0x0, @str='\\-)\x00'}, @generic]}, 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x35716dc238f086e4) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000240)) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='wg1\x00', 0x4) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x29010900}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x8c11) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000003c0)=0x5) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$binfmt_misc(r1, &(0x7f0000000400)={'syz1', "cb018e45bd333acbed26af2f295a86029345614b185c96a56e37fbebee2c751b5455f0999bde23589f0154b3f705624de25edcfd1f27e87dcae29caad5f33aa1aac73a2a4d34864098294c5855e5b5bbae2496b75b5c84d787afc022fae10257fd25c7065d48aff6c551d92e29dd223a80adc37283c000bab103fe"}, 0x7f) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080}, 0x8004) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0) syncfs(r3) syz_io_uring_setup(0x7633, &(0x7f0000000600)={0x0, 0x52a1, 0x8, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000680)=0x0, &(0x7f00000006c0)) syz_io_uring_setup(0x728, &(0x7f0000000700)={0x0, 0xb031, 0x4, 0x0, 0x289}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000780), &(0x7f00000007c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000800)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x14}, 0x7fff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = dup(r6) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000840)) ioctl$KDGKBDIACR(r7, 0x4b4a, &(0x7f0000000880)=""/138) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001f40)={0x0, 0x1, 0x6}, 0x10) 12:59:17 executing program 7: time(&(0x7f0000000000)) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x170, r1, 0x10b, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xdf39, 0x62}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x61, 0x5b, "cf3ba2a9bd639a9118bd43330bbc258230a9c42b773f2225f6d501e9c9332d7824d66fbcf572ca92cfa1056d04aecbcbdef224d0d34be0807471af4663816c1b34064e67dbe00b1ca3aa0f6eeef2512284f71cfd51f70ef86a31ea14c3"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0xc4, 0x5b, "85d649522a740da03f92437a1ee92aacdb710538b299edc3a70e334e88ff4bc6ab40574eb3d962e28769efeee99149048a77d6860b6035077ea7b0087072cc00dfe1ae53922660cbb1a1aafd9302923aa3c455a2c17a6bcb3e51c5e196f4b49d72ea57db4f209c0041d3a600bd97991b25f39444c75be5403872575ebfdf5e283163e5075f27e259c567333b5c1f064d0b91da82f0becafc10b1229e4c582605d728f05543b4cf8103dae2c9ad7bc6224fffcca067793e15e5902d8e60f85fd8"}, @NL80211_ATTR_FRAME_MATCH={0xd, 0x5b, "1fafcda866aec65aa7"}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040000}, 0x40040) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000380)={0x3, 0x100, 0x8000, 0x1ff, 0x2000, 0x630b}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0xa43, 0x4) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="ca21aeac85a31fdc29b172e9191d85826b6c9e45ce8b62b296adb6de407c82ab37", 0x21, 0xfffffffffffffffc) r2 = socket$inet6(0xa, 0x800, 0x1ff) bind(r2, &(0x7f00000004c0)=@sco={0x1f, @none}, 0x80) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x7) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000540)={0xbb, {{0xa, 0x4e22, 0xfffffff8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}}}, 0x88) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000640), r0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) pipe(&(0x7f0000000780)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7fffffff, 0x27}}}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x800) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000980), 0x105242) [ 111.790751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.796732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.802176] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.803522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.810196] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.811179] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.813669] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.817400] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.824772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.825979] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.826961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.830846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.831706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.836108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.843918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.846543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.846813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.849807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.859830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.866717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.873234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.883938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.899718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.923988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.929833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.932628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.935116] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.936873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.938274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.941218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.943345] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.947815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.978328] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.981385] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.983257] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.987273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.992186] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.008155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.019692] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.030456] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.938081] Bluetooth: hci1: command tx timeout [ 113.939860] Bluetooth: hci0: command tx timeout [ 113.940030] Bluetooth: hci2: command tx timeout [ 114.000342] Bluetooth: hci3: command tx timeout [ 114.001838] Bluetooth: hci4: command tx timeout [ 114.002592] Bluetooth: hci7: command tx timeout [ 114.065598] Bluetooth: hci6: command tx timeout [ 114.127691] Bluetooth: hci5: command tx timeout [ 115.983909] Bluetooth: hci2: command tx timeout [ 115.985616] Bluetooth: hci0: command tx timeout [ 115.986144] Bluetooth: hci1: command tx timeout [ 116.048068] Bluetooth: hci4: command tx timeout [ 116.049168] Bluetooth: hci7: command tx timeout [ 116.049285] Bluetooth: hci3: command tx timeout [ 116.112699] Bluetooth: hci6: command tx timeout [ 116.177667] Bluetooth: hci5: command tx timeout [ 118.032119] Bluetooth: hci0: command tx timeout [ 118.032982] Bluetooth: hci1: command tx timeout [ 118.033514] Bluetooth: hci2: command tx timeout [ 118.095616] Bluetooth: hci3: command tx timeout [ 118.095697] Bluetooth: hci4: command tx timeout [ 118.096202] Bluetooth: hci7: command tx timeout [ 118.160485] Bluetooth: hci6: command tx timeout [ 118.225478] Bluetooth: hci5: command tx timeout [ 120.079587] Bluetooth: hci2: command tx timeout [ 120.080219] Bluetooth: hci1: command tx timeout [ 120.080802] Bluetooth: hci0: command tx timeout [ 120.144028] Bluetooth: hci7: command tx timeout [ 120.145743] Bluetooth: hci4: command tx timeout [ 120.146281] Bluetooth: hci3: command tx timeout [ 120.208961] Bluetooth: hci6: command tx timeout [ 120.272036] Bluetooth: hci5: command tx timeout [ 174.893244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.894351] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.898818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.900030] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.903006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.905675] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.909262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.911112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.929308] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.939589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.074080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.085683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.088160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.103998] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.112702] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.117611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.121378] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.128629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.134286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.138738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.193103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.198817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.204977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.217844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.226010] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.227115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.233736] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.239944] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.244859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.245846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.247841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.248952] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.252378] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.254480] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.258801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.269112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.273553] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.275702] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.293224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.316549] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.975628] Bluetooth: hci0: command tx timeout [ 176.975692] Bluetooth: hci1: command tx timeout [ 177.231607] Bluetooth: hci4: command tx timeout [ 177.231624] Bluetooth: hci2: command tx timeout [ 177.295522] Bluetooth: hci6: command tx timeout [ 177.359596] Bluetooth: hci3: command tx timeout [ 177.360645] Bluetooth: hci7: command tx timeout [ 177.425506] Bluetooth: hci5: command tx timeout [ 179.024469] Bluetooth: hci1: command tx timeout [ 179.024555] Bluetooth: hci0: command tx timeout [ 179.279561] Bluetooth: hci2: command tx timeout [ 179.279601] Bluetooth: hci4: command tx timeout [ 179.344501] Bluetooth: hci6: command tx timeout [ 179.407516] Bluetooth: hci7: command tx timeout [ 179.408499] Bluetooth: hci3: command tx timeout [ 179.471513] Bluetooth: hci5: command tx timeout [ 181.071808] Bluetooth: hci1: command tx timeout [ 181.072480] Bluetooth: hci0: command tx timeout [ 181.327722] Bluetooth: hci4: command tx timeout [ 181.328525] Bluetooth: hci2: command tx timeout [ 181.392778] Bluetooth: hci6: command tx timeout [ 181.457459] Bluetooth: hci3: command tx timeout [ 181.457945] Bluetooth: hci7: command tx timeout [ 181.519515] Bluetooth: hci5: command tx timeout [ 183.119530] Bluetooth: hci0: command tx timeout [ 183.119829] Bluetooth: hci1: command tx timeout [ 183.375532] Bluetooth: hci2: command tx timeout [ 183.375586] Bluetooth: hci4: command tx timeout [ 183.440752] Bluetooth: hci6: command tx timeout [ 183.503631] Bluetooth: hci7: command tx timeout [ 183.504092] Bluetooth: hci3: command tx timeout [ 183.567501] Bluetooth: hci5: command tx timeout [ 235.463495] syz-executor.2 (2154) used greatest stack depth: 24400 bytes left [ 237.866250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.869544] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.874222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.876003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.877149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.880375] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.887224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.889723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.891202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.894878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.930439] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.936038] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.938615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.948584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.953790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.996647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.010644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.034662] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.062073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.074620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.257627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.271977] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.279784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.295150] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.303692] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.307030] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.308839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.310646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.326865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.327457] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.331789] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.355009] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.357365] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.359838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.362822] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.376068] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.383314] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.386982] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.388316] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.391771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.951605] Bluetooth: hci1: command tx timeout [ 239.952634] Bluetooth: hci0: command tx timeout [ 240.015931] Bluetooth: hci2: command tx timeout [ 240.143795] Bluetooth: hci3: command tx timeout [ 240.399842] Bluetooth: hci4: command tx timeout [ 240.464606] Bluetooth: hci6: command tx timeout [ 240.465620] Bluetooth: hci7: command tx timeout [ 240.465861] Bluetooth: hci5: command tx timeout [ 241.999630] Bluetooth: hci0: command tx timeout [ 241.999853] Bluetooth: hci1: command tx timeout [ 242.063500] Bluetooth: hci2: command tx timeout [ 242.192649] Bluetooth: hci3: command tx timeout [ 242.449635] Bluetooth: hci4: command tx timeout [ 242.511889] Bluetooth: hci6: command tx timeout [ 242.512856] Bluetooth: hci7: command tx timeout [ 242.513390] Bluetooth: hci5: command tx timeout [ 244.047836] Bluetooth: hci1: command tx timeout [ 244.048805] Bluetooth: hci0: command tx timeout [ 244.112538] Bluetooth: hci2: command tx timeout [ 244.239526] Bluetooth: hci3: command tx timeout [ 244.495510] Bluetooth: hci4: command tx timeout [ 244.561061] Bluetooth: hci5: command tx timeout [ 244.562660] Bluetooth: hci7: command tx timeout [ 244.563230] Bluetooth: hci6: command tx timeout [ 246.097717] Bluetooth: hci1: command tx timeout [ 246.097790] Bluetooth: hci0: command tx timeout [ 246.159574] Bluetooth: hci2: command tx timeout [ 246.290538] Bluetooth: hci3: command tx timeout [ 246.543539] Bluetooth: hci4: command tx timeout [ 246.607563] Bluetooth: hci7: command tx timeout [ 246.608560] Bluetooth: hci6: command tx timeout [ 246.608799] Bluetooth: hci5: command tx timeout [ 300.448867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.451855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.455792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.461066] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.464048] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.527375] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.537152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.540984] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.545607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.551646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.721281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.723835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.730871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.746850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.751152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.777256] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.786931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.789777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.837903] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.841220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.843292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.844926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.853944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.864760] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.867066] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.876863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.911602] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.917050] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.933947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.962337] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.114076] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.115325] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.149175] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.165836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.212157] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.215239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.220501] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.240923] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.265815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.336867] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.479574] Bluetooth: hci0: command tx timeout [ 302.607889] Bluetooth: hci1: command tx timeout [ 302.800603] Bluetooth: hci2: command tx timeout [ 302.927534] Bluetooth: hci3: command tx timeout [ 302.992750] Bluetooth: hci4: command tx timeout [ 303.055558] Bluetooth: hci5: command tx timeout [ 303.311539] Bluetooth: hci7: command tx timeout [ 303.439799] Bluetooth: hci6: command tx timeout [ 304.527735] Bluetooth: hci0: command tx timeout [ 304.658586] Bluetooth: hci1: command tx timeout [ 304.847969] Bluetooth: hci2: command tx timeout [ 304.976461] Bluetooth: hci3: command tx timeout [ 305.039782] Bluetooth: hci4: command tx timeout [ 305.104814] Bluetooth: hci5: command tx timeout [ 305.360519] Bluetooth: hci7: command tx timeout [ 305.488744] Bluetooth: hci6: command tx timeout [ 306.576809] Bluetooth: hci0: command tx timeout [ 306.703832] Bluetooth: hci1: command tx timeout [ 306.896880] Bluetooth: hci2: command tx timeout [ 307.025518] Bluetooth: hci3: command tx timeout [ 307.087543] Bluetooth: hci4: command tx timeout [ 307.151805] Bluetooth: hci5: command tx timeout [ 307.409718] Bluetooth: hci7: command tx timeout [ 307.538502] Bluetooth: hci6: command tx timeout [ 308.624622] Bluetooth: hci0: command tx timeout [ 308.751711] Bluetooth: hci1: command tx timeout [ 308.943551] Bluetooth: hci2: command tx timeout [ 309.072017] Bluetooth: hci3: command tx timeout [ 309.135548] Bluetooth: hci4: command tx timeout [ 309.201478] Bluetooth: hci5: command tx timeout [ 309.455533] Bluetooth: hci7: command tx timeout [ 309.583623] Bluetooth: hci6: command tx timeout [ 363.238080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.243880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.250856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.255793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.260537] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.303466] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.307781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.310784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.315328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.319074] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.429279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.432913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.435606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.443771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.447235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.546008] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.551853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.556094] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.560102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.566063] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.646680] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.664681] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.700866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.747054] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.752293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.848304] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.850035] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.852395] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.856365] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.857467] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.858925] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.860034] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.861435] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.862615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.916607] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.920004] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.924515] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.945774] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.951235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.973352] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.328558] Bluetooth: hci0: command tx timeout [ 365.393490] Bluetooth: hci1: command tx timeout [ 365.519601] Bluetooth: hci2: command tx timeout [ 365.647572] Bluetooth: hci3: command tx timeout [ 365.840484] Bluetooth: hci4: command tx timeout [ 366.031718] Bluetooth: hci6: command tx timeout [ 366.096065] Bluetooth: hci7: command tx timeout [ 366.096090] Bluetooth: hci5: command tx timeout [ 367.375604] Bluetooth: hci0: command tx timeout [ 367.440837] Bluetooth: hci1: command tx timeout [ 367.569486] Bluetooth: hci2: command tx timeout [ 367.696667] Bluetooth: hci3: command tx timeout [ 367.888480] Bluetooth: hci4: command tx timeout [ 368.081289] Bluetooth: hci6: command tx timeout [ 368.143534] Bluetooth: hci5: command tx timeout [ 368.143590] Bluetooth: hci7: command tx timeout [ 369.424523] Bluetooth: hci0: command tx timeout [ 369.487628] Bluetooth: hci1: command tx timeout [ 369.615912] Bluetooth: hci2: command tx timeout [ 369.743542] Bluetooth: hci3: command tx timeout [ 369.937523] Bluetooth: hci4: command tx timeout [ 370.127509] Bluetooth: hci6: command tx timeout [ 370.191685] Bluetooth: hci5: command tx timeout [ 370.192809] Bluetooth: hci7: command tx timeout [ 371.473138] Bluetooth: hci0: command tx timeout [ 371.537455] Bluetooth: hci1: command tx timeout [ 371.663798] Bluetooth: hci2: command tx timeout [ 371.792875] Bluetooth: hci3: command tx timeout [ 371.983940] Bluetooth: hci4: command tx timeout [ 372.176529] Bluetooth: hci6: command tx timeout [ 372.240507] Bluetooth: hci7: command tx timeout [ 372.241123] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 13:04:19 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff888036360000 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff888036360a58 RDI=ffff888036360000 RBP=0000000000000000 RSP=ffff8880165af4d0 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000000 R11=0000000000000003 R12=ffff888036360a58 R13=0000000000000000 R14=0000000000000005 R15=ffff888036360a58 RIP=ffffffff81516833 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fbee6792540 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc6ede8fd8 CR3=0000000037e9a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00000000ffffffff RCX=ffffffff81b7396c RDX=ffff8880376f3780 RSI=ffffffff81b73a44 RDI=0000000000000005 RBP=ffff88802f677c38 RSP=ffff88802f677a88 R8 =0000000000000000 R9 =ffffed10019b61c1 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff8880167fe900 R15=ffff88802f677c38 RIP=ffffffff84b07600 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe5300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7d66727260 CR3=000000000e408000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000