Warning: Permanently added '[localhost]:34083' (ECDSA) to the list of known hosts. 2025/06/21 12:28:37 fuzzer started 2025/06/21 12:28:38 dialing manager at localhost:33119 syzkaller login: [ 94.088811] cgroup: Unknown subsys name 'net' [ 94.229658] cgroup: Unknown subsys name 'cpuset' [ 94.287985] cgroup: Unknown subsys name 'rlimit' 2025/06/21 12:28:52 syscalls: 2214 2025/06/21 12:28:52 code coverage: enabled 2025/06/21 12:28:52 comparison tracing: enabled 2025/06/21 12:28:52 extra coverage: enabled 2025/06/21 12:28:52 setuid sandbox: enabled 2025/06/21 12:28:52 namespace sandbox: enabled 2025/06/21 12:28:52 Android sandbox: enabled 2025/06/21 12:28:52 fault injection: enabled 2025/06/21 12:28:52 leak checking: enabled 2025/06/21 12:28:52 net packet injection: enabled 2025/06/21 12:28:52 net device setup: enabled 2025/06/21 12:28:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/21 12:28:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/21 12:28:52 USB emulation: enabled 2025/06/21 12:28:52 hci packet injection: enabled 2025/06/21 12:28:52 wifi device emulation: enabled 2025/06/21 12:28:52 802.15.4 emulation: enabled 2025/06/21 12:28:52 fetching corpus: 0, signal 0/0 (executing program) 2025/06/21 12:28:54 starting 8 fuzzer processes 12:28:54 executing program 0: r0 = gettid() ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x798}) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) tee(r2, r1, 0x2, 0x2) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x25) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes256, 0x8, @desc2}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) r5 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000001580)={r5}) getresuid(&(0x7f0000001640)=0x0, &(0x7f0000001680), &(0x7f00000016c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001700)={{0x1, 0x1, 0x18, r4, {0x0, 0xee01}}, './file0\x00'}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001740)={r5, r6, r9}, 0xc) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f0000001780)={0x0, 0x7a}) setxattr$incfs_metadata(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), &(0x7f0000001840)="bcc85e7b6ee273305dafdc8c3ce02eeb65e6b47d1ef66c24400aecc19e4c5cbafa971dca27f03e83e7fa829292098bd232cb0f25", 0x34, 0x2) open_tree(r4, &(0x7f0000001880)='./file0\x00', 0x8001) openat2(0xffffffffffffff9c, &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x301840, 0x10, 0x14}, 0x18) r10 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_SET(r10, 0x1, &(0x7f0000001a80)={{0x2, 0x0, 0x0, r7, r9, 0x90, 0x6}, 0x1ff, 0x8, 0x6, 0x800, r5, r0, 0x1c00}) 12:28:54 executing program 1: ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x15) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000000)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0xfffffffe) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x1, 0x4000) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x24, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xb}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x2}]}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r2, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x15}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x48844) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000340)={0x1, 0x7e4}) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa0, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x8c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7, 0xcc9c, 0x1ff, 0x79, 0x1]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x43}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x3ff, 0x259b, 0xb15f, 0xffff5215, 0x7ff, 0x9, 0xbcf, 0x2]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x221, 0x0, 0xfff, 0x2, 0x2, 0x800]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) read$hiddev(r1, &(0x7f0000000600)=""/189, 0xbd) r3 = memfd_secret(0x80000) ioctl$HIDIOCGFLAG(r3, 0x8004480e, &(0x7f00000006c0)) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r4, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40081) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) write$P9_RSTATu(r3, &(0x7f0000000900)={0x74, 0x7d, 0x1, {{0x0, 0x5d, 0x5, 0x3, {0x4, 0x4}, 0x7100000, 0x75b, 0x6, 0xffff, 0x1, '-', 0x12, '/dev/input/mouse#\x00', 0x12, '/dev/input/mouse#\x00', 0x5, '+%]y\\'}, 0x2, '{[', r5, 0xee01, r6}}, 0x74) 12:28:54 executing program 2: write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x8000, 0x7, 0x81}, 0xc) syncfs(0xffffffffffffffff) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@empty, @in=@multicast2, 0x4e24, 0xfffb, 0x4e24, 0x400, 0x2, 0xa0, 0x0, 0x2b, 0x0, r2}, {0x2, 0x7ff, 0xffffffffffff8696, 0x20, 0x9, 0xfffffffffffffff7, 0x1, 0xb0}, {0x5, 0x5, 0xcbff, 0x3}, 0x3ff, 0x6e6bbf, 0x2, 0x1, 0x2, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x32}, 0xa, @in=@local, 0x3503, 0x4, 0x1, 0x4, 0x1, 0x3f, 0xfffffff9}}, 0xe8) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @private=0xa010101}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @multicast1}, 0x48, 0x0, 0x0, 0x0, 0xff, &(0x7f00000002c0)='ip6gretap0\x00', 0x3dc, 0x10001, 0x1000}) r3 = fsmount(r0, 0x1, 0x8) r4 = signalfd(r3, &(0x7f0000000380)={[0x3]}, 0x8) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f00000003c0)={0x88, @empty, 0x4e22, 0x3, 'sed\x00', 0x1, 0x401, 0x1f}, 0x2c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x1, 0x8, 0x5, 0x1, {{0x23, 0x4, 0x3, 0x1, 0x8c, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x6f, 0x3, [{0x4, 0x10, "55fdcb3bbdf66fb180f2b2b33b35"}, {0x0, 0x10, "f36b5f84d99e1bad32774bcadf76"}, {0x7, 0x11, "231c0bcb3ae715388b1403ccbc107a"}, {0x5, 0x6, "84abbfd5"}, {0x0, 0x12, "d23455415a979e8628c10e49358cd5a1"}, {0x0, 0x8, "fcbe381de5d8"}, {0x2, 0xd, "587405ac42129e01758ade"}, {0x6, 0xb, "bf5a4038df0adb2d5e"}]}, @ssrr={0x89, 0x7, 0xa8, [@rand_addr=0x64010102]}]}}}}}) r5 = fcntl$dupfd(r0, 0x406, r1) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r3) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x90001}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r6, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x656}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000640)={0x0, "c5602636e4e836394f7fce6ff1d00d2b"}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001640)={0x0, 0x80000000, @start={r7, 0x0, "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", "59ad1023ad521e9e8198382b3b8bfcc5267ce9ec5ec90f31ef6a518a803fb0d4c3874b0467a48af127c2ee2fefa07cd755a6638c30b88c1cba6817834dbcbb3be52efac1c910303fa6529abbfa6cf6dfbf06a9ccfb60f21fa7835cd3305cc0fa2d509801d74327e5abcd9067ebd9cafa797d243f634220d986da759f1184458c7426053a93a8ee6d398650ba50f179820b838dffa9f8790456b95b879a0ea946b281e8e1c782beb6fc0cec423a8038df6b2fc84880eb774d872ae8db355711a54f5546c8c956671d3619d5bb481d2ee60a032af33f4df5299bc29c75346104cab82fb4c72e879253be9e113f6584630820d96785efc3b0ff8b3979a262bc95d202d558207e29844f50c1af89111d0245c1a43e249f44969b1e2a82aff7f61d57d620d62a742eb6635c16d40c22935119298b89248c20fc7b585a04052cde88d3b0bd5a10444d670015134a0417c3e353324dcb6928561e6d527bf202209e09b6b977f37614da845d3c49fb4cada758510004396fe1a32f59d2878383db7df4df53e07f9e0fd80b060efc838fb752e44f9681cfe43a02b1e4dbdfc5916fe84e815e286fcde9cc9abb5f015469ebd38192dd90c9657afa661493413685c0c0c59d95264808ef3a9b7b5e6cb76c7fd9333f86601725a743731f1ac8e1648adb0bd5904e76a5aa94b36a539e533baf15bdbf034bd52c65bb27eb72341faad1a716b18be3f8631a819008b07ce9e1d7c0cb16e34d114400565d6f9759eea3a78a2b022ca03a199dfe5babdacb3f195e0f33e4b4eab1ca97a8d19af1a3ab4850df3b0207db174954bf5da00f42bdd63db1b20cfa84b47e33cb97ffa3d37c2847b58e3c00427079bc46f5a0068ba62d8d1d642f32a2645140230b74c78dd47c8c5e7b1bd94b08a1136b95561cc1b6722457544986b76db0579bf5c56e257fd14b738ec97e904299f56a415836769bbffe65c70d8708f56a2ddceb413fbcd485c5acceaee27591a1a9a1e011e123a9215e8abb3e1bb965ac4a10132255d30bc9f0c465a7658c9baace96b1aca66b823155035e16581d4e209e24990a23af25ed4a595c7040ec2d9dae237124f85e775a2a0a8782e0542b794f92cf183298571f38e8661b6b2916db9a677493896c1436c0d5703605569479669227f76e7741737b62d9eb1468b1df5229fc8f3902e311cdb3e75cdc6e61070d04bfe8da88e51f93d284b5e252a433a8b81ae8c0525c8d4649fb50e03f6710bd53e214ca893a9d23ab743a5008cdd97ff787688b9c9af610dd77a5a6627095c210e7edb021c7e351ac2b0506e1c7b1fdbe9b0bd9b92a97942ec6c0174afa6af014d894d32878bc5d081b80857a7f0944b23a288b3b09822d1dfeceb21ce57245d8fbb39865a7849e526a0f1e9a5875855617221ed963c31cd514fc293571d5ac807a8d8c6bfdf119a484bd3f"}, [0x7fff, 0x1000, 0x0, 0x5, 0x100000000, 0x9, 0xa34c, 0x101, 0x3, 0x1000, 0x1, 0xd5, 0x7fffffff, 0x5, 0x3, 0x7, 0x4, 0x4, 0x403, 0x8001, 0x6, 0x5, 0x0, 0x200, 0x1, 0x0, 0x0, 0x80, 0x5, 0x4, 0xfffffffffffffff7, 0x7fffffff, 0x5, 0x2, 0x1, 0xc1, 0x8, 0x69, 0x6, 0x3, 0x2, 0x4, 0x1, 0x3, 0x800, 0x8, 0x203b, 0x2, 0x2, 0x7fffffff, 0x9, 0x4, 0x4, 0x100, 0x7, 0x8, 0x3, 0x9, 0x8, 0xd32, 0x3, 0x8, 0x0, 0x9]}) readahead(r1, 0x8, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x4c, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1783}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x95b}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000021c0)={0x0, 0x6, [0x6, 0x2, 0x7f, 0x0, 0xffffffffffffff80, 0x4]}) 12:28:54 executing program 3: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x3, 0x6, '\b2U', 0xfa, 0x4}) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006a40)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f0000001300)=[{&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/116, 0x74}], 0x3, &(0x7f0000001340)=""/23, 0x17}, 0x1}, {{&(0x7f0000001380)=@can, 0x80, &(0x7f0000003580)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/120, 0x78}, {&(0x7f0000003480)=""/85, 0x55}, {&(0x7f0000003500)=""/85, 0x55}], 0x5, &(0x7f0000003600)=""/93, 0x5d}, 0x9}, {{&(0x7f0000003680)=@nfc, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003700)=""/240, 0xf0}, {&(0x7f0000003800)=""/70, 0x46}, {&(0x7f0000003880)=""/189, 0xbd}, {&(0x7f0000003940)=""/116, 0x74}, {&(0x7f00000039c0)=""/121, 0x79}], 0x5, &(0x7f0000003ac0)=""/168, 0xa8}, 0x4}, {{&(0x7f0000003b80)=@hci, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003c00)=""/15, 0xf}, {&(0x7f0000003c40)=""/44, 0x2c}], 0x2, &(0x7f0000003cc0)=""/147, 0x93}, 0xa6fa}, {{&(0x7f0000003d80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/241, 0xf1}, {&(0x7f0000004f00)=""/35, 0x23}, {&(0x7f0000004f40)=""/47, 0x2f}], 0x4, &(0x7f0000004fc0)=""/205, 0xcd}, 0x5}, {{&(0x7f00000050c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005200)=[{&(0x7f0000005140)=""/130, 0x82}], 0x1, &(0x7f0000005240)=""/45, 0x2d}, 0x8001}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000005280)=""/62, 0x3e}], 0x1}, 0xfffffff7}, {{&(0x7f0000005300)=@phonet, 0x80, &(0x7f0000006900)=[{&(0x7f0000005380)=""/114, 0x72}, {&(0x7f0000005400)=""/126, 0x7e}, {&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/227, 0xe3}, {&(0x7f0000006580)=""/202, 0xca}, {&(0x7f0000006680)=""/202, 0xca}, {&(0x7f0000006780)=""/56, 0x38}, {&(0x7f00000067c0)=""/7, 0x7}, {&(0x7f0000006800)=""/6, 0x6}, {&(0x7f0000006840)=""/191, 0xbf}], 0xa, &(0x7f00000069c0)=""/122, 0x7a}, 0x9e}], 0x8, 0x161, &(0x7f0000006c40)={0x0, 0x989680}) write$bt_hci(r0, &(0x7f0000006c80)={0x1, @write_remote_amp_assoc={{0x140b, 0x4a}, {0xc8, 0x8001, 0x8, "fec62518ab42670dec3fc4530205a058b19d110a33a803ab5b889424e9ff551b06458c93153df02109be97be7e1bd572b280f0839f75f72273c4cead8e9aab0790f593ec72"}}}, 0x4e) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000006d00)={0x3, 0x1, 0x1}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000006d80), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000006e80)={&(0x7f0000006d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006e40)={&(0x7f0000006dc0)={0x54, r2, 0x10, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0xc054) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000006f80)={&(0x7f0000006ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000006f40)={&(0x7f0000006f00)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x25}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000846) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000007200)={&(0x7f0000006fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000071c0)={&(0x7f0000007040)={0x15c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x1f754400ee74b1c8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x810000}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000007240)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000007280)={0x1, 'ip6_vti0\x00', {}, 0x6}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000072c0), 0x281, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000007300), 0x111000, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000007340)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000073c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000007540)={&(0x7f0000007400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007500)={&(0x7f0000007440)={0xac, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e5a1ba196e"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20040001}, 0x180d1f61b2719534) ioctl$sock_ifreq(0xffffffffffffffff, 0x8917, &(0x7f0000007580)={'veth0_to_hsr\x00', @ifru_names}) [ 110.382471] audit: type=1400 audit(1750508934.981:7): avc: denied { execmem } for pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:28:54 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x40804) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x9c, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '/^]\\{.\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x12}, 0xc800) clock_adjtime(0x3, &(0x7f0000000480)={0x200, 0x4dad, 0x1c000000000, 0x8, 0x100, 0x1ff, 0x0, 0x1, 0x5, 0x1, 0x9, 0x9, 0x6, 0x9, 0x0, 0x10001, 0x9, 0x9, 0x9, 0x0, 0x100000000, 0x1e02, 0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0x2}) syz_genetlink_get_family_id$nbd(&(0x7f0000000580), r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x94}, 0x800) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, ':!:-\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20000011) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x10c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe8c}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffc00}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2b88}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x10c}}, 0x20000800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000a40)={'filter\x00', 0x0, 0x0, 0x0, [0x1ff, 0xffe00000, 0x6, 0x9, 0x3ff]}, &(0x7f0000000ac0)=0x78) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000b40)={0x8, &(0x7f0000000b00)=[{0x60e, 0x9, 0x0, 0x1f9}, {0x5, 0x81, 0x2, 0x80000001}, {0x8, 0x7, 0x2, 0x95}, {0x3, 0x1f, 0x9, 0xae62}, {0x81, 0xff, 0x9, 0x9}, {0x0, 0x9, 0x40, 0x8}, {0x0, 0x81, 0x7f, 0xfff}, {0x7c6, 0x7f, 0x0, 0x8000}]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xd8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:chkpwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:dhcpd_unit_file_t:s0\x00'}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc880}, 0x4800) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000d40)={{0x0, 0xd1e, 0x9, 0x10001, 0x7fffffff, 0x10000, 0xee, 0x7fff, 0x1, 0x2, 0x5, 0x879ce84, 0x1, 0x8}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00), 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8001}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x20008081) 12:28:55 executing program 5: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@initdev, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', r0, 0x29, 0xb8, 0xf9, 0x8, 0x52, @mcast1, @private2, 0x7800, 0x700, 0x2}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x3, 'bond_slave_1\x00', {0xb1}, 0xfffd}) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80800) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x200501, 0x0) recvmsg(r2, &(0x7f00000016c0)={&(0x7f0000000240), 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/221, 0xdd}, {&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000500)=""/43, 0x2b}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000580)=""/169, 0xa9}], 0x6, &(0x7f00000006c0)=""/4096, 0x1000}, 0x40010001) fcntl$getown(r1, 0x9) r3 = socket$inet(0x2, 0xa, 0xbf) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000001740)={0x7, &(0x7f0000001700)=[{0x1, 0x9, 0x4}, {0x8000, 0x3, 0x5}, {0x8001, 0x1f, 0x6, 0xffffffff}, {0x1f, 0x0, 0x5, 0x6fc233a7}, {0x3, 0x8, 0x4, 0x6e1}, {0x0, 0x3, 0x3, 0x7fffffff}, {0xa25c, 0x9, 0x3, 0x8000}]}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000001780)={0x8, 'veth0_to_bond\x00', {'veth0_to_team\x00'}, 0x7f}) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000017c0)) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000001800)={'bond_slave_1\x00', {0x2, 0x0, @multicast2}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x11) ioctl$KDADDIO(r2, 0x4b34, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r2) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000001a40)={&(0x7f0000001940), 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x28, r4, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x72}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x2010040) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000001a80)={0xe, "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"}) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000001e80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x24008000) 12:28:55 executing program 6: sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x3, 0x3, 0x801, 0x0, 0x0, {0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xffffffff}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x280000, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x5, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x480100}, 0xc, &(0x7f0000000780)={&(0x7f0000000280)={0x4fc, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6005}, @NL80211_ATTR_FRAME={0x25, 0x33, @mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_b, @initial, {0x8, 0x7f}}, @addba_resp={0x3, 0x1, {0xff, 0x62, {0x0, 0x0, 0x7, 0x4}, 0xff}}}}, @NL80211_ATTR_FRAME={0x494, 0x33, @mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_a, @broadcast, @initial, {0x3, 0x200}}, 0x4100, 0x55, @default, @void, @val={0x2d, 0x1a, {0x8010, 0x2, 0x6, 0x0, {0x94a, 0x7a, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x10001, 0x9}}, [{0xdd, 0x4b, "990a4d7b721890fc4ec1ca42d6eef8bd2dd6449d687f5780212ac78d21b7b8a262d2d6192359e9da0ade0c56f370f0cd1a851ffdbebda05698374f24cce035f3b124a5b46b72db73f80969"}, {0xdd, 0xd4, "5d36152bee367f8c53e4a236d725921459c4200be8b325e69db4add20438b5a1749be7bb2fb3a1b81bf206f193389ba937c01f22dc56b6bf3e9509d4c577635ffce53c4afdb39c2b156a27b8d10c87351858bf60541e8e6cf08517e230e11f7f5c23da1513ccab991f3540a7074ab5969e9fce066cef6fa703e0d3ec77f603d96b690b8597ef41a5f64489e905c887d000ac960db4fac18c2dc94ec348a58a636f03b946b8e2abda9d0ff47ce4adff7e035c6538226f324c4ed40e6b5669926a6111e01d349717d3e63d17d4a63af91d30ef19cc"}, {0xdd, 0xd7, "088020e3a4f3cd2157469bef00806adb4dbe59b7b197ffa47f7935a1779495b7b51a2e941894903f5ed4077bdce4ae123c03d0dfde3ab58c3020064bee1486f57546233d4ae87589bebfa5f5e67aa0cce5a61535abe97a71713648e38908697c466619436c092ea63133f5c68ce2b819a7f54e60865dbeb294b2678d0fca9474e36495c921e9a74477d9ba0769a35c10c6b365e5f1ce6e9ac4d657094303882222915da704804e9ab104d886c58686914280982aca0dadc8de4b984fab7608bf8667c8da3e6ee9f47364cf961fdf8f6f7ab8d958feb9b0"}, {0xdd, 0x1a, "7437621b6113af7b21d27e3e5c15b6de402c9b4b245242932bf7"}, {0xdd, 0xd2, "e9735f4237fe617dda3a2e41181548f17e5dea9a25e4df65a797c0f9f852acad4590e7ded40b83b6f0f6b7f38a7feb2740590d9b8f485df9a4957c9b0a7b607a979ef76d12c85757c7a2385291a92110a485ed4edc908c7d054cf5684d04d8092c41612278ccff9ef9b6c0b0f34202ddea613e51ce0286c6271c9cfe519290d60edc24e4196b414e2af51bed58c93f7a3a0fcac8937b454a21c8c707cba0477bbb9d3cfac5f01dc942ad7b6037ea29830f0e5fbe1339f6a4403d14984f3b3c1cf8d27123fb621b3c46d0d8896def41710cc4"}, {0xdd, 0xbd, "4c5e1333d4f18e81ac4af51e0dcc2330eb3d6dfc60ffcfbc88e0d83097cf538a4a2ec7fb32e4bbc8d9c9f3f3b356ac47998bbbcb552366176fbf588954dd6ac7cfeea222d17fb82a1eddd0c17f0981a8d9dea0f1d5610fbc41f73610b594a0248dee2e918d06ab706e2ceba643b673d3b2b89046f26a8a0760e4f2e4f8b0d88a47606f2baedf4f2637e41b2ed475071a333abe85866dd90c40d2fa6172dd5123f836dbebb70f77628b41a75c6396dfc962973d7b414b3016e523d034e3"}, {0xdd, 0x77, "fe19538a2dc5fbcc937fccaa5b1616b7a8023bbf67eb0452b416d03a7b4232e04090e9aee8c2b10c21649af4465743471ca272eaa75758045869e34d2bc737b0de1b35e43b1f3810cbadf405bf2b5297aee1d3f6986abab06b538e6df8c7d38cd4474e34afc6e5c18af67a9d06efd9968dd351e98c908b"}, {0xdd, 0x30, "63a4f88cdc72cd201cfe4cee4d30251c8737d5ed2d153ed7ae298a9a59f69807d143264fa0a087684e1ba9afb90e76f1"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9100}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x4fc}, 0x1, 0x0, 0x0, 0x48084}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xe8, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000800}, 0x40001) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xac, r1, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xffff}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x9303}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x200}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x46a0}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xd0}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r0) getpeername$packet(r0, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000dc0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000003a40)={'erspan0\x00', &(0x7f00000039c0)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x5, 0x5, {{0x9, 0x4, 0x1, 0x8, 0x24, 0x66, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_addr={0x44, 0xc, 0x5f, 0x1, 0x5, [{@local, 0x6}]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000003e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003a80)={0x31c, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x288, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x72, 0x4, "eb48dd49f4b7b6c6b2b83b88e419df56e9316333ecc9d490ac9a79ea349d3a7af348a0e3afa56e89ed0d8d848cd8a16d39c1cc1ca8b4dabc2729dcb2acdd32ba0b74542b1e828136e50685da027f8fa4608e40be68a99f235cddefbe92a0edeecc8411366dd36b6d71361bd1775d"}, @ETHTOOL_A_BITSET_VALUE={0xc5, 0x4, "6d69fba51032a67ff15c28d92474d0250340f2e9edbc9eff73fe11ee9ca3158425fb8c5cd30a1330a302a3b1c4ab82e3f216e6e6cce1eb37939bf7d18ac188494043f3935ab2ae1a9440c8d1aed2b25202bb1e8463ab011ebc197f7414da626a6b935ad30d141586cf504b83bc8271e9f460811435f2bfa255e90f59ed98e2bb55a3d003867fd555584a7c0e484c04dd8464c0ce537ce1943ca31165bc065100824d7c6da385901c4087471ed9cde6f49d2f7df49587d84272b52c0e8e99d72aeb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6226}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '^-{+:*\xf9\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb4, 0x5, "adb13caa3f9ac82ddd5e84dfd09185f9334f160d5bb5dcf64a00d0d8b40326c21eb16e0e7fe37eadff9e3356ebb7b8413210e0eff0751534cf26655d2ac60790793e07cb0394beaf0ead526db66cfc714eda45a390abda07af8f186c6e0597b36ff434de2975f5b6aaa19bef32706bf2504071fce5092a7d50ab419840e6cb85ce737cc6b7749bbf500717f95cb1ddad18f14a3dc507268aa43f38c1e70593e13529c38c9c012c9652b657644b1b935f"}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4040040}, 0x48040) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003e40), 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000003e80)={@mcast2, 0x64, r5}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000003ec0)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000004000)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f40)={0x50, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000004040)='/sys/block/loop1', 0x8800, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000004080), &(0x7f00000040c0)=0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000004340)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004300)={&(0x7f0000004280)={0x7c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc020}, 0x44800) 12:28:55 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x26, 0x8, 0x0, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7, 0x20, 0x7fffffff, 0x6}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000200)={0x2, 0x18, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x42}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x19, 0x34, @random="603d3d40a9d3a8a2ce037e45498bd41cc2ba3954e7"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="562062d305742c7e14ec1eb6b11159a7303eb186d84fa7ecedc7"}, @NL80211_ATTR_SSID={0xf, 0x34, @random="587154e276f8a7d258950b"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_SSID={0x11, 0x34, @random="e2f2ce36fa6942c415198ec20e"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x44000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl2\x00', r0, 0x4, 0x6, 0x7f, 0x401, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x80, 0x700, 0x1, 0x44b9}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000004c0)={0x7, 'veth0\x00', {0x1}, 0x4}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x80) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) r3 = open(&(0x7f0000000640)='./file0\x00', 0x24042, 0x2) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, r4, 0x300, 0x70bd28, 0x7, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0xc004090) r5 = memfd_secret(0x0) openat$cgroup_pressure(r5, &(0x7f0000000800)='io.pressure\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r3) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x5c000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r6, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1c}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x58}}, 0x4004004) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}]}, 0x38}}, 0x40) socket$inet6_udplite(0xa, 0x2, 0x88) [ 111.674363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.678537] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.679895] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.684576] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.688394] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.744931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.752252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.758667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.778002] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.794689] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.826694] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.833613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.835935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.847151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.851669] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.859209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.862075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.875766] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.879207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.891668] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.892658] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.897146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.904108] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.905454] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.906546] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.908672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.913569] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.914396] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.915554] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.923149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.934895] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.937465] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.946525] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.956562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.960982] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.965825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.010907] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 112.017825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.024066] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.042541] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.773098] Bluetooth: hci0: command tx timeout [ 113.835598] Bluetooth: hci1: command tx timeout [ 113.899691] Bluetooth: hci2: command tx timeout [ 113.963483] Bluetooth: hci4: command tx timeout [ 114.028373] Bluetooth: hci7: command tx timeout [ 114.028984] Bluetooth: hci3: command tx timeout [ 114.091376] Bluetooth: hci6: command tx timeout [ 114.155650] Bluetooth: hci5: command tx timeout [ 115.821618] Bluetooth: hci0: command tx timeout [ 115.884417] Bluetooth: hci1: command tx timeout [ 115.947342] Bluetooth: hci2: command tx timeout [ 116.012450] Bluetooth: hci4: command tx timeout [ 116.076330] Bluetooth: hci3: command tx timeout [ 116.076815] Bluetooth: hci7: command tx timeout [ 116.141348] Bluetooth: hci6: command tx timeout [ 116.203632] Bluetooth: hci5: command tx timeout [ 117.867775] Bluetooth: hci0: command tx timeout [ 117.932501] Bluetooth: hci1: command tx timeout [ 117.996530] Bluetooth: hci2: command tx timeout [ 118.060649] Bluetooth: hci4: command tx timeout [ 118.123612] Bluetooth: hci7: command tx timeout [ 118.123669] Bluetooth: hci3: command tx timeout [ 118.187599] Bluetooth: hci6: command tx timeout [ 118.251770] Bluetooth: hci5: command tx timeout [ 119.915706] Bluetooth: hci0: command tx timeout [ 119.979347] Bluetooth: hci1: command tx timeout [ 120.043377] Bluetooth: hci2: command tx timeout [ 120.107830] Bluetooth: hci4: command tx timeout [ 120.171350] Bluetooth: hci3: command tx timeout [ 120.171477] Bluetooth: hci7: command tx timeout [ 120.236396] Bluetooth: hci6: command tx timeout [ 120.300502] Bluetooth: hci5: command tx timeout [ 171.810939] syz-executor.1 (290) used greatest stack depth: 24960 bytes left [ 174.266649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.270648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.275025] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.282636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.286639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.347890] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.349956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.352594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.354838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.356759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.358962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.364841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.370179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.375651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.378117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.429705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.435587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.442150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.462782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.469043] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.507601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.523442] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.526610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.529864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.535367] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.538756] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.571381] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.575706] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.578677] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.584742] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.592421] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.593364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.599115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.600801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.612229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.616988] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.622899] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.626401] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.645549] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.656023] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.365578] Bluetooth: hci0: command tx timeout [ 176.491548] Bluetooth: hci1: command tx timeout [ 176.491856] Bluetooth: hci2: command tx timeout [ 176.619479] Bluetooth: hci3: command tx timeout [ 176.619616] Bluetooth: hci4: command tx timeout [ 176.683414] Bluetooth: hci7: command tx timeout [ 176.748372] Bluetooth: hci5: command tx timeout [ 176.749010] Bluetooth: hci6: command tx timeout [ 178.412445] Bluetooth: hci0: command tx timeout [ 178.539655] Bluetooth: hci2: command tx timeout [ 178.539883] Bluetooth: hci1: command tx timeout [ 178.667744] Bluetooth: hci3: command tx timeout [ 178.668178] Bluetooth: hci4: command tx timeout [ 178.731401] Bluetooth: hci7: command tx timeout [ 178.796487] Bluetooth: hci6: command tx timeout [ 178.796616] Bluetooth: hci5: command tx timeout [ 180.460339] Bluetooth: hci0: command tx timeout [ 180.589312] Bluetooth: hci2: command tx timeout [ 180.589473] Bluetooth: hci1: command tx timeout [ 180.716371] Bluetooth: hci4: command tx timeout [ 180.716451] Bluetooth: hci3: command tx timeout [ 180.779619] Bluetooth: hci7: command tx timeout [ 180.843369] Bluetooth: hci5: command tx timeout [ 180.843488] Bluetooth: hci6: command tx timeout [ 182.508388] Bluetooth: hci0: command tx timeout [ 182.635429] Bluetooth: hci1: command tx timeout [ 182.636493] Bluetooth: hci2: command tx timeout [ 182.763423] Bluetooth: hci4: command tx timeout [ 182.764532] Bluetooth: hci3: command tx timeout [ 182.827342] Bluetooth: hci7: command tx timeout [ 182.891385] Bluetooth: hci5: command tx timeout [ 182.891658] Bluetooth: hci6: command tx timeout [ 236.735230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.739066] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.742247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.753575] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.763130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.819597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.833677] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.838581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.855843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.860722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.943545] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.948839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.951435] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.964946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.967606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.974842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.987158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.021820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.029376] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.055141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.064731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.076717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.081425] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.114798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.161980] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.173338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.173539] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.180198] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.191974] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.196329] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.198995] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.205525] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.216645] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.220323] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.263172] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.266057] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.270863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.295250] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.335412] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.343219] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.828360] Bluetooth: hci0: command tx timeout [ 238.955364] Bluetooth: hci1: command tx timeout [ 239.019730] Bluetooth: hci2: command tx timeout [ 239.148367] Bluetooth: hci4: command tx timeout [ 239.276613] Bluetooth: hci7: command tx timeout [ 239.339388] Bluetooth: hci5: command tx timeout [ 239.339569] Bluetooth: hci3: command tx timeout [ 239.467400] Bluetooth: hci6: command tx timeout [ 240.876337] Bluetooth: hci0: command tx timeout [ 241.003560] Bluetooth: hci1: command tx timeout [ 241.067755] Bluetooth: hci2: command tx timeout [ 241.195651] Bluetooth: hci4: command tx timeout [ 241.325317] Bluetooth: hci7: command tx timeout [ 241.387377] Bluetooth: hci3: command tx timeout [ 241.387847] Bluetooth: hci5: command tx timeout [ 241.518308] Bluetooth: hci6: command tx timeout [ 242.923398] Bluetooth: hci0: command tx timeout [ 243.051481] Bluetooth: hci1: command tx timeout [ 243.116537] Bluetooth: hci2: command tx timeout [ 243.244737] Bluetooth: hci4: command tx timeout [ 243.373516] Bluetooth: hci7: command tx timeout [ 243.435388] Bluetooth: hci3: command tx timeout [ 243.435461] Bluetooth: hci5: command tx timeout [ 243.563578] Bluetooth: hci6: command tx timeout [ 244.973323] Bluetooth: hci0: command tx timeout [ 245.099411] Bluetooth: hci1: command tx timeout [ 245.165304] Bluetooth: hci2: command tx timeout [ 245.291525] Bluetooth: hci4: command tx timeout [ 245.419402] Bluetooth: hci7: command tx timeout [ 245.483977] Bluetooth: hci3: command tx timeout [ 245.484657] Bluetooth: hci5: command tx timeout [ 245.612508] Bluetooth: hci6: command tx timeout [ 298.818241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.825068] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.831753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.842059] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.850667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.007923] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.012766] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.018083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.030449] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.039779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.110138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.125030] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.135326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.140047] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.142433] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.147144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.156850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.165850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.196890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.204953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.254443] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.279260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.284811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.314141] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.323671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.324332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.369878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.381254] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.385152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.398609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.400072] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.401102] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.403678] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.409517] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.422077] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.435842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.441942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.444747] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.462751] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.495971] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.908357] Bluetooth: hci0: command tx timeout [ 301.099499] Bluetooth: hci1: command tx timeout [ 301.228371] Bluetooth: hci3: command tx timeout [ 301.291611] Bluetooth: hci2: command tx timeout [ 301.483570] Bluetooth: hci7: command tx timeout [ 301.485039] Bluetooth: hci5: command tx timeout [ 301.547600] Bluetooth: hci6: command tx timeout [ 301.548227] Bluetooth: hci4: command tx timeout [ 302.955560] Bluetooth: hci0: command tx timeout [ 303.147556] Bluetooth: hci1: command tx timeout [ 303.275552] Bluetooth: hci3: command tx timeout [ 303.339472] Bluetooth: hci2: command tx timeout [ 303.531438] Bluetooth: hci5: command tx timeout [ 303.531926] Bluetooth: hci7: command tx timeout [ 303.596735] Bluetooth: hci4: command tx timeout [ 303.597190] Bluetooth: hci6: command tx timeout [ 305.004319] Bluetooth: hci0: command tx timeout [ 305.195376] Bluetooth: hci1: command tx timeout [ 305.323503] Bluetooth: hci3: command tx timeout [ 305.387332] Bluetooth: hci2: command tx timeout [ 305.579407] Bluetooth: hci5: command tx timeout [ 305.579893] Bluetooth: hci7: command tx timeout [ 305.643407] Bluetooth: hci6: command tx timeout [ 305.643866] Bluetooth: hci4: command tx timeout [ 307.051621] Bluetooth: hci0: command tx timeout [ 307.244311] Bluetooth: hci1: command tx timeout [ 307.372344] Bluetooth: hci3: command tx timeout [ 307.435490] Bluetooth: hci2: command tx timeout [ 307.627607] Bluetooth: hci7: command tx timeout [ 307.628089] Bluetooth: hci5: command tx timeout [ 307.691409] Bluetooth: hci4: command tx timeout [ 307.691875] Bluetooth: hci6: command tx timeout [ 359.267576] syz-executor.0 (7995) used greatest stack depth: 24784 bytes left [ 361.284807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.294048] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.297420] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.303930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.308786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.313602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.326007] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.329900] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.353313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.359564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.484965] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.492708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.494945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.506086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.520777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.547096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.551213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.554832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.566784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.588360] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.688591] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.704643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.714987] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.726791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.732929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.853926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.864906] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.879512] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.913160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.918035] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.932812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.937536] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.939863] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.945907] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.947649] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.963858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.998089] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.026120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.045078] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.058145] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.372680] Bluetooth: hci0: command tx timeout [ 363.435544] Bluetooth: hci1: command tx timeout [ 363.627414] Bluetooth: hci2: command tx timeout [ 363.820498] Bluetooth: hci3: command tx timeout [ 363.947356] Bluetooth: hci4: command tx timeout [ 364.076428] Bluetooth: hci5: command tx timeout [ 364.139427] Bluetooth: hci7: command tx timeout [ 364.203388] Bluetooth: hci6: command tx timeout [ 365.419618] Bluetooth: hci0: command tx timeout [ 365.483489] Bluetooth: hci1: command tx timeout [ 365.675644] Bluetooth: hci2: command tx timeout [ 365.869307] Bluetooth: hci3: command tx timeout [ 365.995715] Bluetooth: hci4: command tx timeout [ 366.123398] Bluetooth: hci5: command tx timeout [ 366.187573] Bluetooth: hci7: command tx timeout [ 366.251429] Bluetooth: hci6: command tx timeout [ 367.468378] Bluetooth: hci0: command tx timeout [ 367.533511] Bluetooth: hci1: command tx timeout [ 367.723508] Bluetooth: hci2: command tx timeout [ 367.915545] Bluetooth: hci3: command tx timeout [ 368.043550] Bluetooth: hci4: command tx timeout [ 368.171634] Bluetooth: hci5: command tx timeout [ 368.236477] Bluetooth: hci7: command tx timeout [ 368.299630] Bluetooth: hci6: command tx timeout [ 369.516399] Bluetooth: hci0: command tx timeout [ 369.579577] Bluetooth: hci1: command tx timeout [ 369.771410] Bluetooth: hci2: command tx timeout [ 369.964678] Bluetooth: hci3: command tx timeout [ 370.091511] Bluetooth: hci4: command tx timeout [ 370.219909] Bluetooth: hci5: command tx timeout [ 370.283577] Bluetooth: hci7: command tx timeout [ 370.347554] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 12:33:56 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81353d2d RDI=fffffbfff0b83988 RBP=ffffffff85c1cc40 RSP=ffff888029b1f790 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=0000000000096dec R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff888029b1f878 RIP=ffffffff8151aff2 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555572592400 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdc071d5000 CR3=000000002a640000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff0000000000ff00000000000000ff00 XMM02=000000000000000000ff000000000000 XMM03=000000000000000000ff0000000000ff XMM04=0000ff00000000000000ff0000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000ffffffff RBX=0000000000000000 RCX=828a7dc2b759b861 RDX=00000000fb075ec2 RSI=0000000032ff91ed RDI=00000000cb96c0b4 RBP=ffffffff85c1cc40 RSP=ffff888026e073f8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff8151b063 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe477784438 CR3=000000003405c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249 XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000