Warning: Permanently added '[localhost]:44854' (ECDSA) to the list of known hosts. 2025/05/24 03:11:27 fuzzer started 2025/05/24 03:11:27 dialing manager at localhost:46087 syzkaller login: [ 93.798182] cgroup: Unknown subsys name 'net' [ 93.935222] cgroup: Unknown subsys name 'cpuset' [ 93.990624] cgroup: Unknown subsys name 'rlimit' 2025/05/24 03:11:43 syscalls: 2214 2025/05/24 03:11:43 code coverage: enabled 2025/05/24 03:11:43 comparison tracing: enabled 2025/05/24 03:11:43 extra coverage: enabled 2025/05/24 03:11:43 setuid sandbox: enabled 2025/05/24 03:11:43 namespace sandbox: enabled 2025/05/24 03:11:43 Android sandbox: enabled 2025/05/24 03:11:43 fault injection: enabled 2025/05/24 03:11:43 leak checking: enabled 2025/05/24 03:11:43 net packet injection: enabled 2025/05/24 03:11:43 net device setup: enabled 2025/05/24 03:11:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/24 03:11:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/24 03:11:43 USB emulation: enabled 2025/05/24 03:11:43 hci packet injection: enabled 2025/05/24 03:11:43 wifi device emulation: enabled 2025/05/24 03:11:43 802.15.4 emulation: enabled 2025/05/24 03:11:43 fetching corpus: 0, signal 0/0 (executing program) 2025/05/24 03:11:46 starting 8 fuzzer processes 03:11:46 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x580, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x80000001}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x800}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x39}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x80000000}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008840}, 0x4004040) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xdf}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x555c}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040005}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x16e48fbd, 0x77}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "864e2b1aefda7a59d28bb0195f2e1c14"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x40801) lsetxattr$trusted_overlay_opaque(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0), 0x2, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000500)={0x1000, {{0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {{0xa, 0x4e23, 0x4, @mcast1, 0x20000000}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x2bd7}}, './file0\x00'}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41045}, 0x801) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x18, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x2400c041) ioctl(r3, 0x8, &(0x7f0000000980)="107584388a14f412c466c68f1d3659dd652b8fc502d6629701fbe45fd61a65b0ebd40c54a021e63240a517b7d87437de94a05ff2cd2a689762f16288717006f44ef1156c60f3c7ef22bc8823983b826968e56e822a607cd23476040f9fa914277d8670be0954226f0d4c97fe47cafe65df39bde90800f054") r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0, @out_args}, './file0/../file0\x00'}) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000a80)=0x101, 0x4) setxattr$trusted_overlay_origin(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), &(0x7f0000000b40), 0x2, 0x3) sync() connect$inet(r0, &(0x7f0000000b80)={0x2, 0x4e20, @empty}, 0x10) 03:11:46 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbe}}, './file0\x00'}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x181100, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x5c020, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x80}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x7}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0x0}}, './file1\x00'}) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000180)=0xfff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r6, r7}}, './file0\x00'}) ioctl$TCGETA(r8, 0x5405, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) setxattr$incfs_size(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=0x4, 0x8, 0x3) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) r9 = dup3(0xffffffffffffffff, r8, 0x0) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f0000000480)={0xa, &(0x7f0000000440)=[{0x6}, {0x8001, 0xd385}, {0x800}, {0x9564, 0x9}, {0x1abe, 0x7}, {0x2, 0x3}, {0x3ff, 0x7}, {0x6, 0x9}, {0x4, 0x6}, {0x8, 0x9}]}) r10 = perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x80, 0x3, 0x2, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x100000001, 0xffff}, 0x44060, 0x400, 0x537a, 0x8, 0x8, 0x6, 0xff01, 0x0, 0x9319, 0x0, 0x8000800000}, r8, 0x2, r3, 0x7) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000540)=[r2, r2, r10, r0], 0x4) socketpair(0x2c, 0x9, 0x5, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$NFNL_MSG_CTHELPER_GET(r11, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xac, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2cd1}}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}]}]}, 0xac}}, 0x0) r12 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000740), 0x222ac0, 0x0) ioctl$LOOP_CHANGE_FD(r12, 0x4c06, r11) 03:11:46 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x438, 0x3f4, 0x400, 0x70bd2b, 0x25dfdbfd, {0x4, 0x2, 0x7, [0x2, 0x9, 0x80000000, 0x42, 0x4, 0xfffffffc, 0x13, 0x3f, 0x5, 0x200, 0x8, 0x156, 0x5, 0x2, 0x1, 0x0, 0x0, 0x101, 0xfff, 0x9, 0x9, 0x101, 0x1, 0x80, 0x2, 0x7, 0x8001, 0x800, 0x4b5, 0x8fd, 0x7, 0x3ff, 0xfb, 0x80000001, 0xfffffffa, 0x7, 0xfffffffb, 0xfffff863, 0x7f, 0x101, 0x8000, 0x8f2, 0xbda, 0x400, 0x48e3, 0x40, 0x22, 0xfffffffd, 0xce23, 0x5, 0x6, 0x9, 0x4, 0x499, 0x8, 0x6, 0x3, 0xfffff27e, 0x4, 0xffffffff, 0x10001, 0x5, 0x7fff, 0xfffffffd], [0x3, 0x790, 0x3ff, 0x1, 0x401, 0xdd2d, 0x401, 0x400, 0x1, 0x7f, 0x9, 0x9, 0x6, 0xffffffff, 0x4a90, 0x40000000, 0x4, 0xd6, 0x400, 0x401, 0xfffffc00, 0x5, 0x9, 0xa8, 0x1, 0x0, 0x3b, 0x20, 0x80000000, 0xff, 0x5, 0x0, 0x0, 0x1, 0x448, 0x10001, 0x1f, 0x4, 0x4, 0x14, 0x80, 0x2, 0x2, 0x7ff, 0x3ff, 0x4, 0x4, 0x5, 0x7d, 0x1, 0xfff, 0x401, 0x10001, 0x80000000, 0x100000, 0x6, 0x5, 0x5, 0x7, 0x81, 0x10, 0x8, 0x0, 0x400], [0x8, 0x40, 0x7f64feea, 0x2, 0x21977bf7, 0x9, 0xfdc3, 0x3, 0xfff, 0x8, 0xffff, 0x6000, 0x1ff, 0x6, 0x1, 0x0, 0xffff, 0x6, 0x7, 0x1, 0x8001, 0xae, 0x5e13fa22, 0x6, 0xfead, 0x9, 0x200, 0x227d, 0x2, 0x1, 0x5, 0x401, 0x6, 0x4, 0x4, 0x100, 0x4, 0x7f, 0xfffffc01, 0x3, 0x1, 0x8a1e, 0x7fa4ac56, 0x950, 0x4, 0x401, 0x200, 0x6, 0x5, 0x4, 0x6, 0x814, 0x6, 0x0, 0x200, 0xae4, 0x5, 0x8000, 0x7, 0x4, 0x7, 0x1, 0x5, 0x9], [0x8, 0x964, 0x7fffffff, 0x6, 0x77283551, 0x1388, 0x3, 0x2, 0x9, 0x4f4, 0x7, 0x1, 0x3, 0x0, 0x2, 0x82, 0xff, 0x8, 0x0, 0x24d, 0xff, 0x1ff, 0x7, 0xcc, 0xfffffffd, 0x4, 0xffff, 0x1f, 0x0, 0x8, 0xfffffffa, 0xff, 0x7ff, 0x8, 0x5, 0x3, 0x6, 0x4, 0x10000, 0x3ff, 0x58, 0x3, 0x4, 0x3, 0x9, 0xfffff99d, 0x5, 0x6, 0xfffffffe, 0x9, 0x0, 0x3000, 0x71b, 0xff, 0x35, 0x38a4, 0x0, 0x4, 0x10000, 0x7f6, 0x7ff, 0x6, 0x9, 0x732], 0x18, ['[\x00', ':&-}(\'#*\\`\x00', '\x00', '}-\x00', '},[(\x00', '\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x80}, 0x880) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x4, 0x70bd2b, 0x3, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000006c0)={r0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xac, r2, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x78}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x38, 0xbe, "c42726ea12c846b4eddadfcc29dcc6bfbbd8be9cb2c0cde1b42141fb05ebf89251ce2f2757bc4fe445e2e89a90c66bc75732bfc9"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3ff}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x20, 0x13, [{0x1}, {0x3}, {0xc}, {0x5}, {0x1b}, {0x9, 0x1}, {0x8, 0x1}, {0x1b, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x6c}, {0x6c, 0x1}, {0x6, 0x1}, {0x1b, 0x1}, {0x25}, {0x2}, {0xb, 0x1}, {0xb}, {0x18}, {0x9, 0x1}, {0x16, 0x1}, {0x12, 0x1}, {0x4a}, {0x9, 0x1}, {0x48}, {0x12}, {0x1b, 0x1}, {0x24}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x558}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000080) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000008c0), 0x101101, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r2, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x200, 0x3c}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008800}, 0x20008080) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=0x6) fcntl$getown(r0, 0x9) open(&(0x7f0000000ac0)='./file0\x00', 0x8000, 0x146) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000b00)={0x7, 0x0, 'client1\x00', 0xffffffff80000001, "17924eb727763454", "ca2541da923361c2caf92d1f85be179f1d2b85d8739482302f7e31b8591f1c18", 0x774, 0xfffffffa}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000bc0)={0x1, 0xce, 0x3}) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x10) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000d40)) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000e80), 0x402003, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000001100)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x28c6880}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xd0, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x34004001}, 0x20000080) [ 112.392298] audit: type=1400 audit(1748056306.374:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:11:46 executing program 3: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0xe, 0x11, 0x19e, &(0x7f0000000000)="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"}) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000440)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0xd, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6637c7ce}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffff01}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000740)={0x4}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780), 0x4) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f00000007c0)={0x2, 0x9, 0xc, 0x8, 0x3, 0x4, @msf={0x1, 0xaf, 0xe0}, @msf={0x80, 0x40, 0x4}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TIOCEXCL(r1, 0x540c) fcntl$setpipe(r1, 0x407, 0x9b15) ioctl$TIOCCONS(r1, 0x541d) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000880)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f00000008c0)={0x5, 0x5, 0x0, 'queue1\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000980)={{0x1, 0x1, 0x18, r2, {0x401}}, './file0\x00'}) fsetxattr$security_selinux(r4, &(0x7f00000009c0), &(0x7f0000000a00)='system_u:object_r:systemd_passwd_agent_exec_t:s0\x00', 0x31, 0x2) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc015}, 0x1) 03:11:46 executing program 4: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000000)=""/4096, 0x1000) keyctl$update(0x2, 0x0, &(0x7f0000001000)="5d9d094d941e4e3d56a6946a928d1412f09a1781eee22957e0359cf7c4a9930a84755cb88034df8af300108a2b8bf720e1bbe2aeb23f71988d84e1ecb0496225df4210bb06ffe591b673c931805e045842ca71d528c6190339d764858e69a5ed83a91062acec8dbd6467cf5c500f3b161f1398682fccbdcf40e84aaaf8292d2f26941fc8901d48770f7d188407fa92d79965faf781e1942515b9e02a2ce904d7ce383c7aea0ce312466ca7de2de82f4792e049fef6332301453ceec0c36cd9ccfb3087a8235aa51d2171b12765f48c7ff62734c2890ba58e5bd31eb8696808a78595d55a14d47c3288919c708d4770482f5446e9c12627a0f9957a969a13224b52c81bb0cb1146117d500ac927a425373268ea3a2947afabfee418c1acd3f4f5ed4ef2ec435ac8a3ae2724ab35a76016b442a64d1ed0d99ced3bc6163aa580bd090a070ac248c394ca6e77484ad88670d111f2adc9e88c94128bb81ba2613b3895f4a8404f210053fa7bdf40d26e785e7b2866a4623410f972ad4566e6882662ed67d1d0cd19b1115c3a49e3374cf20a39945f3f5c6c6e028d76f9928bf2ab519708d1d6e84709fb306b056647d4010d8a4218debf8e6d32894a72fa71886bc1fd471229e765df7fb4b70f745cbafec726bea9b074b93b8a949f5c961c3d443a6806df052fe0ddab51fe7810110f8f6c42ee4eee62329adee5d30a0a889365e906f9a8bfa2c0c8b33db0d0936d16a0c3821787c2cdcf1fd4f12fc3af551b5de88e53f305f764463d054a3d528f9f8e2e665100c4337ae3d0365c7d4b87ed5ac7c9ec3a74d118ff6eb3d35232e07ca3bb784fa7168789b95755632b0df3676de40ddb5f87cb1825e23ba6f64aa8b7732cd2ad7697237979e0889673a4e96579fcd3d8e1e7d941be03fa833770f1dda8071ecf15840f3fb23e953d27f92c9971d24c4a4f663f41fd257657a77af08f4bee1c09defa9c024a42d395f093cfedc285b69ba4c5cb4c4cd29959a6c20aac9f8bd595af42f5a4341f67fe61089e89ea255c458739cebc304b07ad236491ae14dea062fd61e6c406f3643228a4fa15e75ea57f6939fa4545e14b8cb238f3b7dbf8ca4ff89ef2c6c10ef02c70940047e29cf409c0aa1c72ed4045a35628a3e29a540fc2167d109cf3a2102303a7ba974714c43bab1499b0ad6c62d3cd0a92f7358a1c10d6fc9af9b8f8042d6aec4603c8f58494ff7328cd9b37a7602d52b2199fa04cf81589cf7bc324c65367a21e9cac617bc599baf2eb1c2808ad42a94c4a7c2d3e7926ffb8b2deac3fc0997215729bb21226dad8ccd3d37dad0d8671d2b30a42e33ff7184fcbd610b12e724adb2cc8e0e3c44a2d1c9d5644beb3d5c302484b3dad1d4007f9dc46bf7fdebf8c4b300f8cf2a7667d5ba7b6905ab1e19854919323b9bc85e3a53cbfbec2013faf573d00ace67238e6a8f0bf375e6a987079fb2372a0bd5e28c86777ce2bbd8723c05e79d83fdd79e003d24676c500a1cd4eff0e085b9dba346458fd81dfa23a7266e81c035beec8465dee4844a0893414b74904890313290d46338e92406cde559ef8e13b83c4cf78bc62adf6a9d5c1d702e7c74a0d0c56cd4347a18c666b0f836d10012df43ffe0ced16b8c96f04a5f742adcb13b27b89cc34d6bc538485f8ca96a611461a79edf817b721917f91f37aefb92d1401ba3d6161862a29e0d81a79d94097181d42c6c33174ad11b7a7791b014f599a8d595c6da6957ededb3257bf287b451f158f041948b7e04042b64fb16af3382e5c082b75bc0de64bce81ab0e32c663df6d0822c425a3623515697b303ea22b1cb6c46cd5e9f23292cc4ffe685d3b80da0d4583297514391128d28092d060ea4f6eee206f8437f1ad7426083f5639246b4ee2d788f095a4052e0306cb217ac6bd655850af0a64e1ad77c92e2e2a9ea8a9086c4c24538b14da1ff2a4d10d79f0ac8b7c62c23f7e709d221a69c11ee584bc54cdb6723f3088e730bd93b365086410f00bbc0ea9e0b8c9ec72ab608f89c1904f5e90227ce1421e2752908bc2cc312d56f07588f1d0af25bfe97e3a7eb7afb2a8012d652ffcbed2890e2acd9278e1e31033cb963ef59973651f4a97b8aeb0d45f27144e59c3be868c1edba409a5a983993b8fbccc26631f01dc29642306a54b5436e0f849908b935854f37dc13d09471f6521718ffbb4136487b4565d06820ee100f288723f37f146a21200b0a9782ef74d4c7c05bbd3b8f0e75fcbc3dfecdcf6d46c7b163ac74c5f56bf5dd1e95ddd27d3c67cc5b05366066eb25d082127ad2f9e3ff89fc99b40170f3aa72a4e1148676795148bca5a3f98a716653086522f8a045c659485f4369dc3e7b8c12deedf590e011bcb3db1688a6a30f99b820cc0ffb8511afdf1255953218763aa9313c5a3796cd7560b74828b05a72e83a307b4f2266932ea9ec659fb81c181214502bdbefece70add189253d989198dd94a6d5230e3fb9acf7be08770b178c4483c16350e9f349241517430c84e8714a1aebc3fd8733a673eeb8e3b0f556181e511aa6059198417f73b96c6b73cdccbd59552689e52852e63d0d6bbbdda2b6a5b6a110683d6e991ef01e13239e613b7cf5c88ebdfb679534e6fc156f3f99cabffc0d48e4224a2889fc8695ce0a65f22334c9cae54a97eb2027e668d0819ff100343ddd729c7428ead25c678f157898e3aa281e8dea900a28c4db8211193ae6c61ad6c11eaa73e09c8633695da6033df1e5983cc13196f2b06f42e06b91355174623f72184f685b7ede9e9c228150b102523c1b31ef9dbf626ae6937530d7b4a77450923154e9a8b05b3be9736442df66a501568b75710da036b9b9e3d14cf6a142a596e1e01de89964c1ab7b236ba616061311c1e00c702a67333e959c10aa3d7c4842b4720f2477231477cd2f2fd5d0ce03c2a732f7c83e3d46427a964060459e3c665a557c664780b1728b05745b64568b00387c8cc75ddc77aa31fe426ae1257961ca4cb833bb9805fdf298a4bcd06448627fc41a93b81490dfeac187262f2c7be83007bc27e7d43b4af084d8fdf782421ede6425e66722c3a209a21529415cd9206bda6796c6fc7dcb6a70e5fdc6b2f6cc958a268a1b64d392bf1c03d4274ec2c00f87ae5ba304d5494f1eef3e729c106f1058480725191fb6ac5d297a00139aa483c704288abdaa7e3b8b96073bf9a4da978dba7e2ea491d9ac5a1c030d54855b648d903d4b529e442313cae879ad02a44f32fa1adabebd14cc0286153929cbb78a2eb7627c9fe9be443cca944e45303b691da4fac23d7c0ff98fb0511ad38bc1c176a2a49ac76384db0c2e1df5eb746074990f285e0588287da292b9de26b9dbea2bc5b1dc741f832f1a708d85cce977e8fdf32b22747bb6f249b1c20eeb0b4df4170699077180fb52b88e447f855305ce5859a364f440f627933a7eb39993ab5c4cfe43d78535e7406bdd911f09ea961cd26f9b7cc312ed0b033ba4fad4fbdbeee0b3b086a2faa19c240f2709f119a80ba773ce83896ca5caef0fef72af79820c848132da8281aecb24f50c252831288e13d22ded6540bc9775725c2111bac2840b6e5605610eee80b0970ee9a591478cfb8040ac8d330ad559643f4ab81f1bf4b78e79f9795be0961cb488677645fda627ed1acc62325eee1cf171099fd8628f52c65555fe26ef733b6e17f71c291736338443da538146552703cf5f9a8155409282a98d1fb1034ce948a8bff2377abbf69cf01810b3b41f3fc5ae09ce0f9deaf7226a4f36ec49e5221e819111aeb380ebe044d64eb4fb919319d3e3bcebad5b4abfa1231567ccfc9cee9fd43e99cb28e8145b204e3067e683d5beb7996bb5e3d4062b3381c10486afc00b0942367ba009746bc41681e462234b3f5384da49afc7ce5aa3bed35d2aa3ec0772b5ce58e7316be8559e258b51e14d3769fe499c03f5aa98296b31aa2d7c72380f18de504dab9589bbd8f3ce0b8385bf5dab66a0cf3a56234481d68229c598d6db5a2830733cbfb393182f073dbf97b49b021ac8c4aa5077d777e16eea85232c6bad796fef49d0f4f9e7d8d34a903f7b6c7c788ea4c770cf957998a559200f7c7d623ed1883aac5d684a337d06d3fe82d18baac1a87359189002cff8f1ead414f3390978bb8ef1e5a8cc45e5d8967338551cd3702923907a0c3ad28f08c0b10ebe571c5f476a731da7ac3ee56e8e55cdc58d1a84f7ee9af1cf40d25f8156105a8ba01054b3d700289faf38b44d3772cef614902a93a7a27cdd4512d49df168cbc4a78aa9a2096b334ee4b4faf064219fa005602aa5e575426e8a8565f62e736d415495656f7291275c3c583cae68216d0c0bf4cc31005b1c2cb5798ff31bab8eb0775371484209daacb127a17139b40b8655dd35b4f46f993514c7fb2b33ccbcdccd2ba9dc96d83edd183379e35ce1453d2570fe7a5da0d55508d65883e29f2821fdc3058924081c5dc8836dffbd605a359c7d338816b4a5d6c32bca9aba5b66f8168850e9968e267bc361be14e25cddb3cb9b99cb81e447e4cebcb92147ad6a557f3309a3ad676bce8d8028b70b9010a83fad5cf1c913003c58b08bceb73615c0fd08d67a94deb20282f4f29f470519299b3dfa4bd5424f5e8bf91dd66bb903e0a4c8111673ec79cb9141a467b6c44b87af55e5f461aa8e49b6b0b097df04f5de3ad18913b94096919ef26ce9cced2a06ac097939769dc5a91d40deeb6f732aaf438694d6a56c2033ad9adcb33e5aff128ac00339169cac987f0f51445e4026c054adc46720ddc4375aa018dc796a36bb266a2e9f862f01a90ec260f65694f05d1b76bda910e75bad49d6e1dc08a1fcd4879e923fe0474c9e334bac3297943bb55ecdf06f48c947bd06ca6989316ef76912df4cfb390e659d5d314b43370ec78a2d3b8be39b76de2ebda2064961c31ae6cd0dd8d1147dfce46632d948c6880d73e71035979e267b4b70d5b65ecc3908a06abfb049d3ac6eb5d17ae6dc735bf8533214f8893dbbea1ba471d2b449a40e20b315f235a6eef8b39d20496418c482a3a40f9c4f677e523b889b1f3fecadca82f8bfc977adab0fd664fe74c2f92779cb1600bc50399e3d75e1d18e165d3e6a3f406e193b78224966458137cd1c091fa69c33630ca449eb914d7affb665fee12c217e52a9dc634c4fbdc097474fe6ab8a508bd9a130ae8c3d024b71c817c3a1fb52e8a7be052c131127d9c9fc8896527328f9e6d549bbf4fec5d5bde5e7a21a91929381e5dfe2ff5c8501f69c56ee4bc494bbbbe3d478eb7dd0d614a7247d4cedfb2cb6e98371cce6041625e9e88ae418aad297fdd931dac568d43197a821bdaaf01a994c4b43fd3e763a7071ba33311f28bba847d7fa2831168f8fc839510fc4efccdf7a6d859fb9d85d921962b4fa8d53bdb99f9c11bc8633c6d855f5296dc2500101666367bbaaeb1369d676016dc78acf3a5d5560ad92cb569dbbc712501409114c929289fdc96effa8f9cf601f0f0751848d28f1eddaa7eae9ee926791cefc8228c4b73293a141fe11dfba5bdc1cfeaa910cea73f5eb4129a963347aec5793c9c5503ff657a97ee136e13c4272e481e6be4d2a2560c1ac048d075787a9dd342b32fd71f653730d161a1b260e636e3f57faa2c2a4195afc9ddd6f068ca9712fc35a4213d521fa4031cc6a3b15db6863b8d6c7d0df1f15bce6f22e8ae55e6cb63d12784526d00e101506c92be4d61c77e08ae21593010309dfc4a1dfb29c44fe75b7e2553d97856261d3c6d700dc3c007aaf", 0x1000) keyctl$link(0x8, 0x0, 0xfffffffffffffff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000002000), 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c044}, 0x20002840) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002180)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4001210}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2d510b77dbf4"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x81) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000025c0)={&(0x7f0000002340)={0x24c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fffffff, 0x41}}}}, [@NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "632685544f087c07"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a6986cd490dd99223c37a7d951d346442b1fd75c36dfff35"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="00f94c68a41524779f658d14b08671b4b5dbc24f14a4e2ac"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f53fb68804d6284a295d4f32902cd264"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ef09daffc89f00ec"}]}, @NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="92141059a20054a59d4b7b8d3a026fba"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "22fccfb5b5c0aa9c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7c3bfc9928e1440c1f8c51903e7e34120cd2ee9f65af5275"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8ecf056f73feb4d1"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6285cefe836c53c34a915ba7c03793406007011eabb6bb32"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8d14aa2b33fca1de4732a2d2d3a4bd23"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="88741a5eeb51af2e2f282d8e7f1aec15"}]}, @NL80211_ATTR_REKEY_DATA={0xc8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c89ff977f63c29dcfe790bb9cb000051"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6781c8ee4662fbdcc14820ec80c49efc"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="47c8168bfae8821d259eb030b5cb24ea6fe2e0d9289b40797e022a3753a246c1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="10c535bf339aaf5ae6ec0b75a080af930d0e211d4cdd5d07"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x18}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a8b265e93d6eec20171200671e336414fd666c92268546211f5638865698d76c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="745b17cb3d32317029857dbd1223373d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "33c0f455e418b5b3"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0327ae2b6133e0f2374051fbaefa6eadf4cdb73e1d5eaa8e4c7502bb3c124ba1"}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40084}, 0x40) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x80, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x42004004}, 0x800) r3 = eventfd(0x7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000002780)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ppoll(&(0x7f00000027c0)=[{r1, 0x1000}, {r3, 0x40}, {r4, 0x40}], 0x3, &(0x7f0000002800)={0x0, 0x989680}, &(0x7f0000002840)={[0x100]}, 0x8) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000028c0), 0x808000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000002900)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) r7 = accept(r4, &(0x7f0000002940)=@sco={0x1f, @none}, &(0x7f00000029c0)=0x80) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r4, {0xffffb97d}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a40)={0xb8, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r4}, {0x8, 0x1, r7}, {0x8, 0x1, r8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffff8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x44004) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000002b80)={0x0, 0xde, 0xdd}, 0x0, &(0x7f0000002bc0)="940b31940eab2feddc65b539f49144af3afc920fa5686a5cc1742a1021513257a7b9857cc7a627cf912ad400e749d04d8c9e7f49cb281be0ea8dbe7fc2d8002b35991964353565979e3ff6040af5dd7d42d15476e3aba8435c6685851b6dff496511eb3a0c5be1331aa6a527634bbb783c98e1636e18ba01d81423d8d7558c528bbf220a90c691f32e61f8e4ac5c4648bd3d637d1884b3b586307263b52ed0dafd7e70deb375cbc05a3ef43ce86ef9e85de71a8fd892e8e2b40e2b97adf184ed03250f418f8bf2f3b2b76e09e544ad156bf133df01b5781549c26b6daf73", &(0x7f0000002cc0)=""/221) 03:11:46 executing program 6: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x4) r2 = syz_open_dev$rtc(&(0x7f0000000100), 0xfffffffffffffffa, 0x40e000) fcntl$setlease(r2, 0x400, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe0, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x187}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x10, 0x4, "28811a1c6010e0c1bac9bf89"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6c9a6e8d869c8a96fd80d19704"}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f62eb4180dfa"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x240000c0}, 0x11) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x2080, 0x0) getresgid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) fchownat(r3, &(0x7f0000000340)='./file0\x00', 0xee01, r4, 0x1000) fcntl$setsig(r0, 0xa, 0x28) r5 = accept4(r0, 0x0, &(0x7f0000000440), 0x180800) write$selinux_attr(r3, &(0x7f0000000480)='system_u:object_r:nvram_device_t:s0\x00', 0x24) r6 = signalfd4(r5, &(0x7f00000007c0)={[0x2]}, 0x8, 0x800) pread64(r6, &(0x7f0000000800)=""/49, 0x31, 0x1) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000840), 0x8000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r8, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x49}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008800) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000a00)=0x1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}]}, 0x24}}, 0x60000) 03:11:46 executing program 5: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x180, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x81}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x400}, {0xc, 0x90, 0x19}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x100}, {0xc, 0x90, 0x7}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40001}, 0x40800) r1 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20008010) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x4, 0x10000, 0x171, 0x0, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000805}, 0xd0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x111000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000540)={0x3, 0x9, 0x0, 'queue1\x00', 0x400}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x98, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "e30504d1a4d47d682cdb7ee74029fd71"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x43}, @NL80211_ATTR_PMKID={0x14, 0x55, "c390624ff522dc723ef493dee3749d9f"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x14, 0x34, @random="1e6d31c38e192bb4ba3b94143862568b"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0xc, 0x34, @random="88c6c3438c873283"}, @NL80211_ATTR_PMKID={0x14, 0x55, "434a4d2d84fe2dacb07464499d22d1c8"}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendto$packet(r3, &(0x7f0000000780)="2b43fc2f8311a53e673028fd023e46900e404fe02a56dcf1223187ab610d4f79d7820032ca729bf1595093e82b1445af", 0x30, 0x10, &(0x7f00000007c0)={0x11, 0x1b, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) mknodat$loop(r1, &(0x7f0000000800)='./file0\x00', 0x4, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000008c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x2004c085}, 0x4048804) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2404c804}, 0x4008080) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000bc0)={{0x2, 0x4e23, @remote}, {0x1, @broadcast}, 0x48, {0x2, 0x4e24, @remote}, 'veth0_to_bond\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000c40)={@private2, 0x80}) 03:11:46 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x15b8}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="5404b487bf83"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x128, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xab88, @private0, 0x600}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x4000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x508, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x60800) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/slabinfo\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x801) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r3) r5 = dup(r3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r6, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x28}, 0x1, 0x0, 0x0, 0x43fe5855d87f3c43}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000a00)={&(0x7f00000008c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x90) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x65cd98870e2a2e59) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000b80)) [ 114.026889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.032118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.036126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.044853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.050056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.054151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.055855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.059107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.080378] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.097763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.099455] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.101985] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.102160] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.104792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.110284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.114324] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.123206] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.125010] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.139252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.139273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.156107] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.160126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 114.165689] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 114.173677] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 114.185799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.219069] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.224594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.227817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.253612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.260049] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.281983] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 114.294146] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 114.296138] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.302193] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 114.308216] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.311165] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.333938] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 114.340334] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.343032] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 114.351551] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.159268] Bluetooth: hci0: command tx timeout [ 116.159905] Bluetooth: hci1: command tx timeout [ 116.223277] Bluetooth: hci4: command tx timeout [ 116.223950] Bluetooth: hci2: command tx timeout [ 116.224644] Bluetooth: hci3: command tx timeout [ 116.286820] Bluetooth: hci5: command tx timeout [ 116.414543] Bluetooth: hci7: command tx timeout [ 116.415288] Bluetooth: hci6: command tx timeout [ 118.206556] Bluetooth: hci0: command tx timeout [ 118.209573] Bluetooth: hci1: command tx timeout [ 118.270881] Bluetooth: hci3: command tx timeout [ 118.271316] Bluetooth: hci2: command tx timeout [ 118.272535] Bluetooth: hci4: command tx timeout [ 118.334513] Bluetooth: hci5: command tx timeout [ 118.462700] Bluetooth: hci7: command tx timeout [ 118.463227] Bluetooth: hci6: command tx timeout [ 120.254575] Bluetooth: hci1: command tx timeout [ 120.255057] Bluetooth: hci0: command tx timeout [ 120.319543] Bluetooth: hci2: command tx timeout [ 120.319573] Bluetooth: hci4: command tx timeout [ 120.319638] Bluetooth: hci3: command tx timeout [ 120.383504] Bluetooth: hci5: command tx timeout [ 120.510557] Bluetooth: hci7: command tx timeout [ 120.511019] Bluetooth: hci6: command tx timeout [ 122.302570] Bluetooth: hci0: command tx timeout [ 122.304643] Bluetooth: hci1: command tx timeout [ 122.366671] Bluetooth: hci2: command tx timeout [ 122.367894] Bluetooth: hci3: command tx timeout [ 122.368319] Bluetooth: hci4: command tx timeout [ 122.430503] Bluetooth: hci5: command tx timeout [ 122.558518] Bluetooth: hci6: command tx timeout [ 122.559022] Bluetooth: hci7: command tx timeout [ 174.245316] syz-executor.2 (287) used greatest stack depth: 25232 bytes left [ 174.309949] syz-executor.1 (285) used greatest stack depth: 25152 bytes left [ 176.981852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.982855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.984519] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.985304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.986565] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.987900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.991141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.993225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.999433] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.002447] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.045159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.050944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.055319] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.062719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.066039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.158907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.161142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.165485] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.173143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.177598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.184820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.185828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.198944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.202570] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.210475] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.343110] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.357768] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.369147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.370814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.377024] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.379951] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.405607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.436221] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.441691] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.444452] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.446328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.448475] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.454834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.506933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.522458] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.070897] Bluetooth: hci0: command tx timeout [ 179.071711] Bluetooth: hci1: command tx timeout [ 179.134558] Bluetooth: hci2: command tx timeout [ 179.262718] Bluetooth: hci4: command tx timeout [ 179.263367] Bluetooth: hci3: command tx timeout [ 179.519737] Bluetooth: hci6: command tx timeout [ 179.583516] Bluetooth: hci7: command tx timeout [ 179.584169] Bluetooth: hci5: command tx timeout [ 181.119564] Bluetooth: hci1: command tx timeout [ 181.120044] Bluetooth: hci0: command tx timeout [ 181.183582] Bluetooth: hci2: command tx timeout [ 181.310607] Bluetooth: hci3: command tx timeout [ 181.311088] Bluetooth: hci4: command tx timeout [ 181.566722] Bluetooth: hci6: command tx timeout [ 181.633609] Bluetooth: hci5: command tx timeout [ 181.634105] Bluetooth: hci7: command tx timeout [ 183.166950] Bluetooth: hci0: command tx timeout [ 183.167858] Bluetooth: hci1: command tx timeout [ 183.230792] Bluetooth: hci2: command tx timeout [ 183.359120] Bluetooth: hci4: command tx timeout [ 183.361524] Bluetooth: hci3: command tx timeout [ 183.615884] Bluetooth: hci6: command tx timeout [ 183.678804] Bluetooth: hci7: command tx timeout [ 183.679681] Bluetooth: hci5: command tx timeout [ 185.214648] Bluetooth: hci1: command tx timeout [ 185.215143] Bluetooth: hci0: command tx timeout [ 185.278899] Bluetooth: hci2: command tx timeout [ 185.406561] Bluetooth: hci4: command tx timeout [ 185.407059] Bluetooth: hci3: command tx timeout [ 185.662573] Bluetooth: hci6: command tx timeout [ 185.727208] Bluetooth: hci5: command tx timeout [ 185.728206] Bluetooth: hci7: command tx timeout [ 239.061881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.068397] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.073631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.099191] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.106148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.188374] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.196298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.199337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.207366] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.208393] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.211263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.215193] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.219917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.223373] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.225684] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.304290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.317730] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.321282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 239.334066] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.344342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.346972] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 239.348786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 239.350402] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 239.354458] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 239.360738] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 239.363117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.372570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.394340] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.396131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.409936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.419223] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.496362] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.496587] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.501873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.505284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.512960] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.517732] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.533054] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.540505] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.543595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.151512] Bluetooth: hci0: command tx timeout [ 241.278630] Bluetooth: hci2: command tx timeout [ 241.343565] Bluetooth: hci1: command tx timeout [ 241.407485] Bluetooth: hci5: command tx timeout [ 241.470865] Bluetooth: hci3: command tx timeout [ 241.534538] Bluetooth: hci4: command tx timeout [ 241.598597] Bluetooth: hci6: command tx timeout [ 241.599510] Bluetooth: hci7: command tx timeout [ 243.198652] Bluetooth: hci0: command tx timeout [ 243.326496] Bluetooth: hci2: command tx timeout [ 243.392451] Bluetooth: hci1: command tx timeout [ 243.454999] Bluetooth: hci5: command tx timeout [ 243.518773] Bluetooth: hci3: command tx timeout [ 243.582679] Bluetooth: hci4: command tx timeout [ 243.646501] Bluetooth: hci7: command tx timeout [ 243.646972] Bluetooth: hci6: command tx timeout [ 245.247636] Bluetooth: hci0: command tx timeout [ 245.374501] Bluetooth: hci2: command tx timeout [ 245.438512] Bluetooth: hci1: command tx timeout [ 245.502647] Bluetooth: hci5: command tx timeout [ 245.566662] Bluetooth: hci3: command tx timeout [ 245.630520] Bluetooth: hci4: command tx timeout [ 245.695824] Bluetooth: hci6: command tx timeout [ 245.696322] Bluetooth: hci7: command tx timeout [ 247.296462] Bluetooth: hci0: command tx timeout [ 247.422616] Bluetooth: hci2: command tx timeout [ 247.486521] Bluetooth: hci1: command tx timeout [ 247.550733] Bluetooth: hci5: command tx timeout [ 247.614723] Bluetooth: hci3: command tx timeout [ 247.678823] Bluetooth: hci4: command tx timeout [ 247.742697] Bluetooth: hci7: command tx timeout [ 247.743171] Bluetooth: hci6: command tx timeout [ 301.395030] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.399605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.403975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.410337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.414868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.586176] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 301.590337] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 301.595985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 301.604173] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 301.610934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 301.740262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.752612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.766145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.780093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.802716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.805042] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.816933] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.838903] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.858130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.873053] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.929264] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.957361] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.960928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.975336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.004288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.024948] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.027270] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.033009] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.033166] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.036766] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.043275] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.044978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.047700] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.055224] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.066026] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.072537] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.083649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.095017] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.123088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.134281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.488534] Bluetooth: hci0: command tx timeout [ 303.679853] Bluetooth: hci1: command tx timeout [ 303.870763] Bluetooth: hci2: command tx timeout [ 303.934751] Bluetooth: hci3: command tx timeout [ 304.190521] Bluetooth: hci6: command tx timeout [ 304.254516] Bluetooth: hci7: command tx timeout [ 304.318636] Bluetooth: hci5: command tx timeout [ 304.319387] Bluetooth: hci4: command tx timeout [ 305.534839] Bluetooth: hci0: command tx timeout [ 305.727327] Bluetooth: hci1: command tx timeout [ 305.918559] Bluetooth: hci2: command tx timeout [ 305.982556] Bluetooth: hci3: command tx timeout [ 306.238784] Bluetooth: hci6: command tx timeout [ 306.302810] Bluetooth: hci7: command tx timeout [ 306.366759] Bluetooth: hci4: command tx timeout [ 306.367255] Bluetooth: hci5: command tx timeout [ 307.582589] Bluetooth: hci0: command tx timeout [ 307.774628] Bluetooth: hci1: command tx timeout [ 307.967496] Bluetooth: hci2: command tx timeout [ 308.030768] Bluetooth: hci3: command tx timeout [ 308.286802] Bluetooth: hci6: command tx timeout [ 308.350553] Bluetooth: hci7: command tx timeout [ 308.414583] Bluetooth: hci5: command tx timeout [ 308.415070] Bluetooth: hci4: command tx timeout [ 309.630528] Bluetooth: hci0: command tx timeout [ 309.823496] Bluetooth: hci1: command tx timeout [ 310.014558] Bluetooth: hci2: command tx timeout [ 310.078531] Bluetooth: hci3: command tx timeout [ 310.334492] Bluetooth: hci6: command tx timeout [ 310.400141] Bluetooth: hci7: command tx timeout [ 310.463048] Bluetooth: hci4: command tx timeout [ 310.463575] Bluetooth: hci5: command tx timeout [ 361.861954] syz-executor.2 (7989) used greatest stack depth: 25072 bytes left [ 363.857575] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.863604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.868207] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.876339] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.886285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.011328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.015937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.019358] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.031983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.048091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.096495] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.098783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.103383] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.110137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.112007] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.117153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.123052] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.126703] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.139982] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.144243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.207991] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.218016] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.245035] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.261780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.263290] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.271676] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.273266] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.277784] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.280312] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.286330] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.291111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.292799] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.302705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.306978] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.312900] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.329067] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.339801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.362935] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.389923] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.397189] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.950681] Bluetooth: hci0: command tx timeout [ 366.142534] Bluetooth: hci1: command tx timeout [ 366.207493] Bluetooth: hci3: command tx timeout [ 366.208217] Bluetooth: hci2: command tx timeout [ 366.334840] Bluetooth: hci7: command tx timeout [ 366.399737] Bluetooth: hci5: command tx timeout [ 366.462715] Bluetooth: hci6: command tx timeout [ 366.527035] Bluetooth: hci4: command tx timeout [ 367.999753] Bluetooth: hci0: command tx timeout [ 368.192487] Bluetooth: hci1: command tx timeout [ 368.254546] Bluetooth: hci2: command tx timeout [ 368.255033] Bluetooth: hci3: command tx timeout [ 368.382609] Bluetooth: hci7: command tx timeout [ 368.448518] Bluetooth: hci5: command tx timeout [ 368.511539] Bluetooth: hci6: command tx timeout [ 368.574490] Bluetooth: hci4: command tx timeout [ 370.047471] Bluetooth: hci0: command tx timeout [ 370.239479] Bluetooth: hci1: command tx timeout [ 370.302720] Bluetooth: hci3: command tx timeout [ 370.303203] Bluetooth: hci2: command tx timeout [ 370.432584] Bluetooth: hci7: command tx timeout [ 370.495495] Bluetooth: hci5: command tx timeout [ 370.558504] Bluetooth: hci6: command tx timeout [ 370.623689] Bluetooth: hci4: command tx timeout [ 372.094521] Bluetooth: hci0: command tx timeout [ 372.286486] Bluetooth: hci1: command tx timeout [ 372.350640] Bluetooth: hci2: command tx timeout [ 372.351119] Bluetooth: hci3: command tx timeout [ 372.478786] Bluetooth: hci7: command tx timeout [ 372.542744] Bluetooth: hci5: command tx timeout [ 372.606783] Bluetooth: hci6: command tx timeout [ 372.671934] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 03:16:55 Registers: info registers vcpu 0 RAX=ffffffff818c9b75 RBX=ffffea00001d3f80 RCX=ffffffff818c9b96 RDX=ffff88800f8e1b80 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff888028917af8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000004c R13=dffffc0000000000 R14=0000000000000000 R15=ffff888028917d88 RIP=ffffffff818c9b97 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f11954fa540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1195560b90 CR3=000000003628b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff817ba006 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf31850 RBP=ffff88800e9ff818 RSP=ffff888009747c08 R8 =0000000000000000 R9 =fffffbfff0c83eca R10=ffffffff8641f657 R11=0000000000000001 R12=ffff888009405500 R13=ffffea0000354b40 R14=0000000000000000 R15=ffff88800d52d400 RIP=ffffffff817ba0a4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fababf51269 CR3=000000001ab4b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000ff0000000000000000 XMM02=ff0000000000000000ff000000000000 XMM03=00ff000000000000ff00000000000000 XMM04=0000000000ff00000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000