Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:31235' (ECDSA) to the list of known hosts. 2025/06/25 01:19:36 fuzzer started 2025/06/25 01:19:37 dialing manager at localhost:42423 syzkaller login: [ 84.191243] cgroup: Unknown subsys name 'net' [ 84.290481] cgroup: Unknown subsys name 'cpuset' [ 84.317410] cgroup: Unknown subsys name 'rlimit' 2025/06/25 01:19:54 syscalls: 2214 2025/06/25 01:19:54 code coverage: enabled 2025/06/25 01:19:54 comparison tracing: enabled 2025/06/25 01:19:54 extra coverage: enabled 2025/06/25 01:19:54 setuid sandbox: enabled 2025/06/25 01:19:54 namespace sandbox: enabled 2025/06/25 01:19:54 Android sandbox: enabled 2025/06/25 01:19:54 fault injection: enabled 2025/06/25 01:19:54 leak checking: enabled 2025/06/25 01:19:54 net packet injection: enabled 2025/06/25 01:19:54 net device setup: enabled 2025/06/25 01:19:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/25 01:19:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/25 01:19:54 USB emulation: enabled 2025/06/25 01:19:54 hci packet injection: enabled 2025/06/25 01:19:54 wifi device emulation: enabled 2025/06/25 01:19:54 802.15.4 emulation: enabled 2025/06/25 01:19:54 fetching corpus: 0, signal 0/0 (executing program) 2025/06/25 01:19:55 starting 8 fuzzer processes 01:19:55 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0x3, 0x7, 0x8, 0x80, 0x2, 0x1, 0xff80}, 0xc) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x20, 0x10, 0x9, 0x30, {{0x8, 0x4, 0x1, 0x8, 0x20, 0x66, 0x0, 0x7a, 0x29, 0x0, @multicast1, @private=0xa010102, {[@rr={0x7, 0xb, 0x10, [@broadcast, @multicast1]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000015}, 0x4040044) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x40, 0x7, 0x6, 0x400, {{0x9, 0x4, 0x3, 0x8, 0x24, 0x67, 0x0, 0x80, 0x29, 0x0, @private=0xa010101, @private=0xa010101, {[@noop, @lsrr={0x83, 0xb, 0xef, [@broadcast, @empty]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000010c0)={'syztnl1\x00', &(0x7f0000001040)={'sit0\x00', r4, 0x4, 0x80, 0x6, 0x9, 0x8, @mcast1, @remote, 0x80, 0x10, 0x9, 0x2}}) sendmmsg$inet(r2, &(0x7f0000001180)=[{{&(0x7f0000000500)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000540)="638cc8366383df55d78ad54e64ccea7b47700cdb33846b7ca9876f6c7e623682bd271b6af623d04b0d1f270ac7759a71d2e27235b13fdafe7590bdb57db45f49b6df1d8d2a95902dd3546250fe371dbf1dc372dd1aec97c313be973e3281f58fa6dc184175e4343f52c3c19c295dcfbf5333d1544c6bc0f8e53a5704bd39c24198287b52ec6676047efd43417a610549d6590e6653af81511772fc0079f220e04ab98b6c00220232c975898a2ac94d45aafecaa8bccea4", 0xb7}, {&(0x7f0000000600)="072821bdbdf25b98108299dc0b847bad0faf4c9a3176cc9a10db166e7f4b35cafd4dfafb24c0aa83ca4990d6fbe5129a33c86716783c3d46291c48e6ff4133badaa64ad62039a670cdd00725836172", 0x4f}], 0x2, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffe0}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@generic={0x83, 0x10, "75abebd2ce7c748d548c0b0bf35d"}, @generic={0x2f73d1c4257281f1, 0x9, "b4f7ff241b18d3"}, @rr={0x7, 0x1b, 0xb9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, @empty, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}]}, @ssrr={0x89, 0x1f, 0x4c, [@multicast2, @private=0xa010100, @local, @empty, @broadcast, @remote, @remote]}, @timestamp_addr={0x44, 0x54, 0x75, 0x1, 0x2, [{@local, 0x1ada}, {@multicast1, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xb0f}, {@loopback, 0x2}, {@multicast2, 0x5}, {@remote, 0x400}, {@empty, 0x8}, {@loopback, 0x9}, {@private=0xa010102, 0x8}]}, @lsrr={0x83, 0x2b, 0xf3, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}, @local, @private=0xa010101, @broadcast, @multicast2, @rand_addr=0x64010101, @remote, @broadcast]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x34c}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x32, [@broadcast]}, @lsrr={0x83, 0xf, 0xfb, [@local, @broadcast, @broadcast]}, @lsrr={0x83, 0x23, 0xf3, [@rand_addr=0x64010100, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @multicast1, @empty, @empty]}, @noop, @rr={0x7, 0xf, 0x7b, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}], 0x1e0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000980)}, {&(0x7f00000009c0)="c6b2e620da1e7e03d61ef2643e92a446", 0x10}, {&(0x7f0000000a00)="8e627c38b499a54f12dc970ed81074afcdfbdbdc924d66c34bdd43ac02f29c49e480e156e356eedddaef58699b958245f7066adfbefb499d8cb6c8bfa62cfbe48c0418f1ded0f0a4e7b6336e781f3cd86adac6618f91ea3dfb0b2e61f8888fedd7cb00585fe14376cd842e629ed3c90eac2118236e08f3dcec2970e30b6db166a748cde7a73e41e63500f534ad590afb9003239d046531493f7fb61ece", 0x9d}, {&(0x7f0000000ac0)="38935b1ea2af965958ca526b06a4d1b3e4662a9304a37f45943dc51bba071fc27102788f86c1b346326dc097218cee5cc86fa07cd79a5ff1acfaf91901ce06fc66d0f30752677a89552f453d50f505c8b7a45f90be4ec596f84ca22a6fd784c99e84cf2db35e74b6fd8a2049b45d074b7b6ca7a631cd4e06f846462637869bc82dde1e9c2bfd85eb7bd8cc2abe3efd17e109a7e13bcd6fb3886c8021d7403bfb5e2b33e6ef490dd8afdee5457043416b40e56df80bc2e2aa39c4c5ce599ec26e6601c115fdaa20f9dc3d6dd1f6184b52113b53be36bb2156c3", 0xd9}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c00)="4715127a5c307d3b256099d2e0a1ffba5ad97c1a0d0195211ebe667a3dbe5cce49b6566d5e25185678604484d2164650ba574ccc9447", 0x36}, {&(0x7f0000000c40)="58f67f", 0x3}], 0x2}}, {{&(0x7f0000000cc0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000d00)="d7114517b4c5e8bbf74cc769989ea515c890e6747117df4e5db3aef5cd14bb75b7eb81841d5c07a4468eaf32c5d81092d9cc67db8ecabea5336b8b6145bfed88aaef401974a7e2005b972e3b9f7415be5cb3526a4dda92ad4229794cd5b9027921d2507a7aae94924cbc0adbf45ca14b277ec7cc", 0x74}, {&(0x7f0000000d80)="0a9b0a76dea90391e789275cd67caa36bc0e3c711641832c351de1d0cebd1d2191b011f486d0d39ddece4e8f6a41de5463646d6bd61fe96fc3926130d2f39137142599fb451b1b40ab577b753cb1f5d076a6ce09f1ee1f3ffedc858cbe73ca5beafda67dd751", 0x66}, {&(0x7f0000000e00)="7a97c6a81017e5ff48621361a6c23c0d62041d1cbbb0abadd8be447832ba95527527afcd40a691add188097609cf1504263eb98de49c6c27fcdd81c75fcc4bfe20c320e9970f1c457fa6f32dacebe374d0912414df3bffb73a9fe7798431deb5648db0ce0622ce62257900c927607af4a76d604391042da3b3a2ca9bfb3795a1acb87bc20bcab22c0c34d57445eebbd07f1e39216e8100fc0cd5", 0x9a}, {&(0x7f0000000ec0)="31ad9751ef356c2bcc2eb5cf3102c280d373686b53c6e1a5aa5e9531c439fb37", 0x20}, {&(0x7f0000000f00)="3d695d3d76644fefe0b6093acdf70b247a967b6d89de0a51e950e943a34aa7adc1aa433979d5cc0584d82167c63cf380e753daa16f98e51a837f7ee8d7338f834047c6712c6bd51dcca7df429c1f867d5ce9fdc86a2615901f423f51ce77b85559b416586f79e767ce2e81f61d488fcad0ab6fc4e0ba03c22b0cae6a0fdbb0b604e0989209fea96ebd1d", 0x8a}], 0x5, &(0x7f0000001100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x50}}], 0x4, 0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000001280)=@gcm_128={{}, "aaba2d5fffd9704c", "8fd3aa18081192185a03def3cf702df7", "1c1d7057", "dda04495cf2b8876"}, 0x28) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000012c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f0000001300)={0x87, @dev={0xac, 0x14, 0x14, 0x41}, 0x4e22, 0x0, 'fo\x00', 0x10, 0x5, 0x2d}, 0x2c) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r10, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 01:19:55 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000140)={0x0, 'wg0\x00', 0x2}, 0x18) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x200082) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe34a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x60}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040801) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x202, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc011}, 0x40) bind$bt_hci(r0, &(0x7f0000000600)={0x1f, 0x2, 0x4}, 0x6) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x440, 0x0) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r6 = openat$cgroup_subtree(r5, &(0x7f0000000700), 0x2, 0x0) fstat(r6, &(0x7f0000000740)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x214, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x2c}}, 0x8000) r8 = syz_open_dev$vcsn(&(0x7f0000000b80), 0x3, 0x80002) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r8, &(0x7f0000001280)={&(0x7f0000000bc0), 0xc, &(0x7f0000001240)={&(0x7f0000000c00)={0x624, r4, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x7c, 0xfa, "b6d9ba5c59c145149bedb2ebd342325e9bb6cf0f8f965175d6cbdb25a7eba45bff985b8e2367ee7b1c18a6baea4c2ee08712214547edee205e1c941891c4d7a7873f7bb27aa20b9a675adf70036f993e4d32f9545155c2612d16f4734d4a2855816bc1cb4910fdacf7063d056d9d4138140485eb94560301"}, @NL80211_ATTR_FILS_ERP_REALM={0x6c, 0xfa, "f7ec4c2ff49105241aff7604314b156f01551d3c23c26c82f9bc8564f3e7fe2f79a049b657581b8f78a896eaba4ae112db4234f58a970933ee2b2dcd50663cd17719ff06e4e1185433f55994a826eda38c3e4bb401be78f6085bac3785b6ec91890487bef3cd6fe2"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "93c52628cdf09625b959ff"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "14ae4d0935f6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0xa4, 0xfa, "a0c38741ada2ca16482e4707e0fa54f64b9b69ebd6cd3d2a58a316136a244a784a3b919b451f3bf8a9c00ca265609ad18246669a0b4049d9c4159d8f1001c93571882352b15f6a51715f7235b51f9afe044d28aa041f8791784e824dfbdf4175d9510b8ffb05cf7e19b08a15341adc3c74d11f0d401da4dfdb605df7e3202c44fe77f6895da4d38a3130b5e21bc5af19cb8883d8e87eb61ce2d596c107e53e6c"}, @NL80211_ATTR_FILS_ERP_REALM={0x85, 0xfa, "cabb091f8c652023dadf38ef2f63cfe2563f84f33396187f402d78d2a71ef6950321417b875d8c89fa14bc68488b52136e04f148793d9f60433d24d5d961048d44cc1946ba62b63ecc2c4b7569c918ca6fe8cf39617e01fd6f5e9836c0335315cd7731bc7693002874ac0ab36cdce378744d81a001d64850e5ed03c4f1c5517212"}], @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0xcc, 0x0, 0x42, 0x3f}}]}, @NL80211_ATTR_IE={0x17e, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x2c, 0x6}}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0xc7, "29c77336d44e1ba98a03a864556d2436b5f01badf9379d377961c92a95303ba159af68b782e89d73969bce4f98df5168cea842236f7ee7db6f1605db2cb69acc5ccb004538560183d32e4e69c42f665a3def67fc423391eb0bb831e3393792ce21fbbe37703f638aaa8565477748ab4f41ab73239798c3814ef57c0e79eead7f39129d7e92922f95f77bd3b5cd6bc41b4f6f57a85b7bb0ed4d48001b76a337197e06415fe8396863e315c3928d9054dc7903700370072a95bfa06bb46560a362996405d78528bf"}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @fast_bss_trans={0x37, 0x7c, {0x7f, 0x1, "c05935650e6fe01dd3aab2a008bd8c03", "2049948271912ef36ce80cfb4e02c7d0b3d0b47bdacad8da2258bbfacdb966fa", "1f174ce7b840f3024de3f6f0b34372ae99dbba9b9dfdd14ae410902f3b7cea32", [{0x3, 0x28, "d21f1aa196a43307766e1b5304d6bab954ee444fc78552e1c44908a075532b6b2abb0818875768ab"}]}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x21}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mic={0x8c, 0x10, {0x85e, "1a70be8a3493", @short="108d9639ab86eadf"}}]}, @NL80211_ATTR_IE={0x98, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x7, 0x2, @device_b, 0x3f, @device_a, 0x7, 0x7fffffff, @device_a, 0x1ff}}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x4c, @ext={{}, 0x0, 0x1, 0x80, @device_b, 0x20, @device_a, 0x8, 0xfff, 0x4, [{{0x1, 0x0, 0x1}, @device_b, 0x4}, {{0x1}, @device_b, 0x1}, {{}, @device_a, 0x9}, {{}, @device_a, 0x4c}]}}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x7, 0x5, @broadcast, 0x80000001, 0x6, 0x3}}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x7d}, 0x7a, 0x81, @broadcast, 0xa314, 0x200, 0x2}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x90, 0xfa, "f90fba26dca894152ff5fb74f609fc6d095705dee4fbc89552bedc844f4ee2aa0ce2d6c2ab71ecc96f1ce8e08158c09ce009b1093cf0f6ab3e0e813224fa8825aa0e490455a4f00516562652e7b58fc5d4f9e35319f2cea75fc5364512baeebc4c4a7c0f5d4144ae2cf5bb459b6a37ead0e333616c205079445415642ddda5d57f35cba64e8f9f043813a983"}, @NL80211_ATTR_FILS_ERP_RRK={0xe7, 0xfc, "9a1ce96f58d42f073ede3d394571f51549594b37c1e35f5a6ec276e101b5b07579fb72bb1f37a1e070ff562322df3251a34ec1ddfb8ef521249ded22602cf2a202f16ebad203d25a0c6c01d018852bdcb2084d3f3c93130786f056c8cc92ba8949c477e573213c8663b31df79cb64cc244ab65e86f9b3e668d12137274f0b9fc12009e8c1c94ec4f8a63977ac0ebf0e6950684351e9472f6975638d87f4b6b11732899d7a743bee2303c7a962c2430eb1f9cab82d70024b54343cef8c2b5a5995823777014af904beaa5a4cf599f526a328fda03d16aec4b5003d9c74ac21a21486ec2"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "0dbb78"}]]}, 0x624}, 0x1, 0x0, 0x0, 0x10}, 0x8001) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x18, 0x3f9, 0x10, 0x70bd25, 0x25dfdbfe, {0x1, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000000) 01:19:55 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb63}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xbeb}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x44}}, 0x20040800) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x22f}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x841) r1 = syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x206540) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x30080, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4001) r3 = accept4$inet(r2, &(0x7f0000000640)={0x2, 0x0, @dev}, &(0x7f0000000680)=0x10, 0x0) fcntl$setflags(r3, 0x2, 0x1) r4 = signalfd(r2, &(0x7f00000006c0)={[0x10001]}, 0x8) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000700)=@gcm_256={{0x303}, "10532ea11b6f1ded", "4795f3e2ec3b21472f601bc8b449271c687ba0163d0db464cb930ca39a41f01a", "69c2973d", "af75632c803f997c"}, 0x38) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000007c0)={{r1}, 0x0, 0x8, @inherit={0x70, &(0x7f0000000740)={0x1, 0x5, 0x1ff, 0xffffffff, {0x7991eceba9c5c2aa, 0x6, 0x101, 0x775, 0x5}, [0x4, 0x5, 0x1, 0xb865, 0x4]}}, @subvolid}) r5 = openat2(r1, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x40000, 0xcd, 0x1}, 0x18) mknodat$null(r5, &(0x7f0000001840)='./file0\x00', 0x2, 0x103) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000001b00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x1fc, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa0, 0x3, "358e6bd58840f54c0c8f265714ac832f55324342ca8260bb032b9cff6b32465f365fee6c7df4912cb86a4a9bbbfe491162bfd3032a4057f966049421a533fb6967f9f037a72b8376cd53324300b92a7cc393ac87ae567daf14aae6cd91de7163f27fc60a51daa0ee1e99c347aeadfb42822444dda724804b7e8e922abec58ed08ceedfa8c66b7cd675319a504d06510213309b3548db606b348211c6"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "69e07301182e8cd7e036622db20597294173f1ca3a8c541e551a66d6110f36b4"}}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x342}]}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004055) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, r0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x24004094) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001d40)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) sendmsg$nl_generic(r6, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x50, 0x1d, 0x20, 0x70bd27, 0x25dfdbfe, {0xa}, [@typed={0x8, 0x8e, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x34, 0x36, 0x0, 0x1, [@typed={0x8, 0x74, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x4, 0x36}, @typed={0x8, 0x1d, 0x0, 0x0, @uid=0xee00}, @typed={0x14, 0x46, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x24001) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f0000001ec0)={0x6}) 01:19:55 executing program 3: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x49}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0xf3, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x1, 0x5, 0x2, 0x112f}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x1, 0xb4, 0x9, 0x0, @local, @private1, 0x8, 0x700, 0x0, 0x6}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000580)={0x39c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5798}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6d2f}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb2}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffe000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000009c0)={0xffffffffffffffff, 0x9, 0x1, 0x3}) writev(r4, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="437805bb571101b702950fd1d400c6742eac3266a7cac12e1bad8e152a1b6d67dfbf9fd07927da69dbd742ef83ee35e223feabcdd1672d98375571e1e0d985cca7f9ba7d50eee38b3a9d5ac3f4faf4fdd1f78b067e7a369d8734bc4093330474bd73a02f83a3098032cce03e69a78beb957c50969b36247ad64625f720d29e10ce8f0ee10cbb96e2b5e8d9fb42c1ab98f30a59a087", 0x95}], 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000b00)) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x2000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000b80)={0x1da, 0x2, 0x80, 0xfffffffffffeffff, 0xe6c8, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000bc0)={0xf993, 0x1, {0x1, 0x3, 0x9, 0x1, 0x3}, 0x400}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r5, {0x7fffffff}}, './file0\x00'}) getsockname(r6, &(0x7f0000000c80)=@nl=@unspec, &(0x7f0000000d00)=0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) read$char_usb(r6, &(0x7f0000000e40)=""/162, 0xa2) prctl$PR_CAPBSET_READ(0x17, 0x7) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008084}, 0x4000000) [ 102.975928] audit: type=1400 audit(1750814395.981:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:19:55 executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000340)=0x80) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x86800082}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x810) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={0x320, 0x12, 0x400, 0x70bd2b, 0x25dfdbfe, {0x11, 0x7, 0xff, 0x5, {0x4e23, 0x4e23, [0x8, 0x4, 0x7fffffff, 0x6], [0x1, 0x73, 0x7ff, 0x7], 0x0, [0x6, 0x150]}, 0x2, 0xb7b}, [@INET_DIAG_REQ_BYTECODE={0xef, 0x1, "69f0fb18fdf733a6c36fbd45eb651b33c9ca1dc3a55e84b7b70eced173afb88f366c32444ea62d7867b7193ae716e1aaf5503d6844c0e695a499d7c67b5b0f64cc2838709f01c40e9eb6ac8dee7297566ba2f46674bec73f8c34cc54a3d5cb215796437cc5f321c269d186d6f68c3eb38029e8ee1aa17675b4d7c31bcd25ef5ab01115490b39a75bc3ac93577042ef7ad66e5e930e86b33afa092bfd68685e215a6ae65a2a0b2090c177e5a2fba4be1cd3767853201eae135769cfd768b75b505c5e2373980f76ca090d124b9d338fa32489ac4978571963a6446ac80a4cafc3da100cb0e0c3c39620eb07"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "0153d5c7927f5888ad412b8bd7ba9c58430884df8086bb8080dda094e92d"}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "8349f028eadd0639b1fea67a0b76850e05eeae59578e198d7ccd3f39e7692df4f21e"}, @INET_DIAG_REQ_BYTECODE={0x60, 0x1, "416fc2f03f09fc715afdb67c76801b1d36caebe3847e28216e725ff2630f627031774d35ccaf5a45a0c0befdd9040bd6012de0313fd4cffbb7ef4193142361b5566adcaa7518b00e81b6cd18a3bab5b7c150eaa8e4d7485990f08cba"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "cca6acd39df1d3b222d2b6287ca0b0481c0cb304fd7d708b9edf7a7f26d24bc2b627441d9aa28cc2697fcf18ca9b2b83799ac6a378a89128588f21dc0e59dee1046671515ba3de2307"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "51006291e9b6759f83eefb842c6caf4b582635c95d1ad2e87394b17ff8abb9377f75f8d55cd136c57ff1e89e9b421ba309ff5e8aa37b2d1bf7dcff3ff253d37fdd1c03f173244dbfce69fb33903554c86788722e245c79744150aeae046c27f4b749720f2d8cd90b161b4f2644b6d00d2233dbde9d7b20551535ceb0a8fbc88c644018539054b9ca5878ccccaa77bb8f90634c63832276293057f8ad4e0b779601602de7de5d70f5175a67f06a3511c6251d13e15577491d9f8e4367895c85cd81b56f9a12475cb8133e569e0acc516bd1a0b3502fcaf19f33f46f665075b210fe"}]}, 0x320}, 0x1, 0x0, 0x0, 0x4010}, 0x20040021) r1 = accept$inet(r0, 0x0, &(0x7f0000000880)) sendmsg$sock(r1, &(0x7f0000000dc0)={&(0x7f00000008c0)=@ax25={{0x3, @bcast, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)="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", 0xfb}, {&(0x7f0000000a40)="4c340fbfe407f972d3248f70ba48bf0afbeb7b99164cf28ce68f23a27694f18609051faadb09431756aeada0db6678faf64e2801366a5bdef183a54816c618f36cff5172816fa0bda5d5d94fe7e0d6d4628d7f49f59b94c8c35789e6e94ccad28d51af35386ee27caafd1b6ef387fedbf645457c12ff8a6289e236d0bfb3265d281174", 0x83}, {&(0x7f0000000b00)="3a015b1041f86f120bed56e45054a8930c9f0430cb01cdc2bd5bce89fbb9169edc958e0f8ee73f0c2accfbf24b429b4e9287f23d330a1172ae223f9443ddc3d265705ee2986663a99554b238d974579e3f9ccd7d1a9097563037d04c4e0b84310968cd5d89106dda4288de31200f72cfbb7bf9508599758dbdb046d3d089de05a16e0051815f8e393708b741a476105a", 0x90}, {&(0x7f0000000bc0)="16049fa4f283d80d722cbd84fc3d7d12191ad3b324464072f50a4224275a8b6f0d2271a63a48cf13135ffb62b4d20de19deeee342988ae23b165339aa8800d26d171876c651857d02d8b00a156fea9509f2ba52fde2d77621650a91f71e48cc4d98725430f5a455b9466af840f9e0ca541", 0x71}, {&(0x7f0000000c40)="139c37b3166677d6d2ddeaa5e19a08fb5b0104bb20e23f2e38d8ee3114bd4695dad01d2165262880ee3eda53715f99b9ff0b93113812f7f97efb58b9d189c2e3afcc559af1649dc3fbc6ee3f282c4ef7dcbe2af658db005902ea25f5bf1d5174e70f9ee4641d35160c9ee51ad6ff1a1ae4c0ff", 0x73}, {&(0x7f0000000cc0)="73d96c5cb796b0d2a38ecd75da2757eb2a34bfd320ba0330097fb9bb18e97e4a363e1627", 0x24}], 0x6, &(0x7f0000000d80)=[@txtime={{0x18, 0x1, 0x3d, 0xcdfb}}], 0x18}, 0x4000) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000e00)={@remote, @loopback}, 0xc) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000ec0)={0x11c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffe0}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x24bb}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xffff1bcd, @loopback, 0xffffff01}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x68a7, @initdev={0xac, 0x1e, 0x2, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @mcast1, 0xa22}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff33}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40008c1}, 0xc810) syz_emit_ethernet(0x12b, &(0x7f0000001080)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @val={@val={0x9100, 0x2, 0x1, 0x2}, {0x8100, 0x1, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x0, 0x0, 0x1}, {}, {0xffff}, {0x7f}, {0x6, 0x0, 0x1}, {0x1e, 0x0, 0x1}, {0x80}, {0x4, 0x0, 0x1}, {0x6}], @ipv4=@generic={{0xa, 0x4, 0x3, 0xb, 0xf1, 0x65, 0x0, 0x9, 0x62, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x10, 0xd4, 0x0, 0x0, [0x1, 0x101, 0x0]}, @end]}}, "96b36a6b750c9b43bb84720d8ce70566cf44538490e261bee797cbcd95a63934b4cccac8c3a51297bf72420804382fcf13132a6a7df209043cb8f3048f67bac6b7bd0bb0d31a4a8bcb5b356ec9bf29dd6f5cfc6b1d5d2ae674b7acbab66c975dd4c958156c4d57be889f12bda5c57e139b4aeaf8549235ec2d1d5ab72ba13bc11fde6bcb90ba2bdd1f19212520d24f7044a1621a79c794b56d23278ea721341c72ed28c699bfa0ca619ebd089a8ffebb9bb77241bf34deada0018dfca5647fa6632e1936b217a9283e"}}}}}, &(0x7f00000011c0)={0x0, 0x1, [0xbad, 0x872, 0x1bb, 0xa49]}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/power/wakeup_count', 0x8180, 0x50) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000001240), &(0x7f0000001280)=0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1, {0x9393}}, './file1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r3) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000001680)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8d2bacbbbe7e3c2e}, 0xc, &(0x7f0000001640)={&(0x7f00000013c0)={0x264, r5, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c224db571b403b0b530189845b5ef369872e8339232e0b06"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="46d4a7dde3d926d20473172a56b6fbacf93a0b0f430bf028415c8e82b57faf98"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="08de2c4fccf21de35cd4bfa5074bd4d8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "292f42df4be72079"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4e6cc40519b30e72cb215ba2f485a3eb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "947c58f28af4c904"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="22fd3f81b40a89245787011621a85207f374930a70edee72ed2768132342e822"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x40}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d7637f065426b47f"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ca609343e363ef435637e9df5d21764a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffc00}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b42edf93d334409bbabb4f3b1869a33da1790f057f637ad0b07c7d7c6abc44f8"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="497a36fb9c5d898377ae75844c0cf8b1d5c11f8b732c55e3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5efac5178173aabd09f8cf3dfc7ef9e07757bc1879842e62"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6c1c3cec84eb2c05805b0c31ed29cc9f"}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c225af1a4294f8ab71293c0c732d84425b7132fcdb243c4c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9de86312780a8419440f73a1fab06ed2ee01015de9ef82c3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="030dbcfe00dad6a98314326288c4dd8c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f7468f5f0f4671b24740d69953e2a6c34c8b35e619e7f754"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="358b796154d2639418520036cbb8ef4341730de3d0883101"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="596e1cc69ef2aa87dfc42bb44a0bf8b1236932245fce51d2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5c}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2bd4a7e355240aeafad840431cfd48036f4c7f84667bf155"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="41609c1682bc7b07066cf8390fab99da"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x10040000}, 0x1) r6 = syz_mount_image$nfs(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0x1, 0x3, &(0x7f0000001900)=[{&(0x7f0000001740)="11dd6572b56abbc4af546abad0aa937c33c93478de36a79b000dbe260c97d482ef2441240c3e48483b75906a3e161a07ec30e7a31336fd3a8f495c818aed9ba2ea992c23b3e27577154bb7c44dc04ec3092e75a794d24fee9f2d5ac499efd02fb03138a3f80059a11cd684677e05849f2abeb90160aa02e1eedd17ad0b126b8142f613faaed2d2e46872b3b3579e7102bdff2f48a3a99e00d8e0595ce590f61f6e8eae279c5150489b61c2d320c8fd01d138364d", 0xb4, 0x6}, {&(0x7f0000001800), 0x0, 0x9}, {&(0x7f0000001840)="e9208e3131ff531264a90ed1cb244e37bff42d3c4cb5b2a67bafdfde7a2965108194cbeefe67530951e278d139e82ecb8098bdf9a672bace349654edc17894b9168a8526c1a43546fe77b167d9dc37a67ac79b19bb466471791ad4123e8b28a5f2708451632cdd5b7ff022e8bb11ce20c0a3ea50856879d85ef47cb7209e20313f5a450de76c0c7e4b5dde74dd1d6568c9f4f3d95c9fd7185973c34d9b25", 0x9e, 0xfffffffffffffffd}], 0x0, &(0x7f0000001980)={[{}, {'\x00'}, {'(*:-\xe7'}, {'@:+<--'}], [{@uid_eq}]}) mknodat$loop(r6, &(0x7f00000019c0)='./file0\x00', 0x2, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000001ac0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001b00)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000001c00)=0xe8) mount$9p_xen(&(0x7f0000001a00), &(0x7f0000001a40)='./file1\x00', &(0x7f0000001a80), 0x42080, &(0x7f0000001c40)={'trans=xen,', {[{@noextend}, {@nodevmap}, {@access_uid={'access', 0x3d, r7}}, {@dfltuid={'dfltuid', 0x3d, r8}}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@cache_none}], [{@fsuuid={'fsuuid', 0x3d, {[0x18, 0x39, 0x38, 0x65, 0x66, 0x32, 0x63, 0x32], 0x2d, [0x66, 0x65, 0x66, 0x32], 0x2d, [0x31, 0x38, 0x34, 0x64], 0x2d, [0x61, 0x65, 0x32, 0x61], 0x2d, [0x31, 0x37, 0x0, 0x32, 0x63, 0x62, 0x34, 0x62]}}}]}}) 01:19:56 executing program 5: r0 = socket$packet(0x11, 0x1, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_io_uring_complete(0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080)={0x0, @aes128, 0x0, @desc3}) write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x2}, 0x7) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x1}}, 0x14) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000280)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/233, 0xe9}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000002c0)) semctl$GETZCNT(0xffffffffffffffff, 0x2, 0xf, &(0x7f00000003c0)=""/174) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0xffffff5d}}, './file0\x00'}) write$P9_RXATTRWALK(r2, &(0x7f00000004c0)={0xf, 0x1f, 0x2, 0x1000}, 0xf) r3 = openat$incfs(r2, &(0x7f0000000500)='.log\x00', 0x402402, 0x525557895660020a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000540)={0x7, 'wg2\x00', {0x8}, 0x1}) lsetxattr$security_ima(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), &(0x7f0000000600)=@sha1={0x1, "c76361e3b473a6db2bb8c7133bf4ba982ec006a0"}, 0x15, 0x3) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000000640)=""/202) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000880)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/tty/drivers\x00', 0x0, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000940)=0x2, 0x4) fcntl$dupfd(r4, 0x406, r4) 01:19:56 executing program 6: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) fstat(r0, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x501100, 0x0) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'bond_slave_1\x00'}) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x8) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f00000002c0)) r4 = accept(r2, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000380)=0x80) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0)={0x1ff, 0x8, 0x0, 0x10000, 0x3}, 0x14) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r5) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7223}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9481}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000580), &(0x7f00000005c0)={'L-', 0x4}, 0x16, 0x3) r7 = openat$incfs(r3, &(0x7f0000000600)='.log\x00', 0x20102, 0x1) getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, &(0x7f0000000640)=""/48, &(0x7f0000000680)=0x30) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00000006c0), 0x10) clock_gettime(0x0, &(0x7f0000006980)) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000006d00)={&(0x7f0000006a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006cc0)={&(0x7f0000006a80)={0x22c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd0}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf6}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa94}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc52}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x568}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "c040800f8252802535030dd6a491392511889e9fd10ce624"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaff6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0xc1}, 0x2000c840) 01:19:56 executing program 7: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{}, 0x5, 0x0, 0x1f}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ppoll(&(0x7f0000000080)=[{r2, 0x1000}, {r2, 0x8000}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x800]}, 0x8) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x81, 0x1, 0xb, 0x2, 0x2, 0x6, 0xfffffffe, 0x23a, 0x38, 0x3ac, 0x2751fc2, 0x1, 0x20, 0x2, 0xf3df, 0x3}, [{0x60000000, 0x1, 0x20, 0x0, 0x4aa, 0x6, 0x0, 0xb076}, {0x7, 0x6, 0xffffffff, 0xa13, 0x8, 0x1, 0x4e00000, 0x6}], "38e318b3bc99daf784e81484b1", ['\x00', '\x00', '\x00', '\x00']}, 0x485) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), r2) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) fsetxattr$security_selinux(r1, &(0x7f0000000740), &(0x7f0000000780)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)='./file0\x00', 0xd3, 0x440040, 0x23456}, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file1\x00'}) r5 = fsopen(&(0x7f0000000880)='ramfs\x00', 0x1) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000008c0)={0xfff, 0x3, 0x3, 0x0, 0x0, [{{r5}, 0x984}, {{r1}, 0x20}, {{}, 0xfff}]}) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000940)) clone3(&(0x7f0000001b80)={0x3200200, &(0x7f0000000980)=0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000a00), {0x3a}, &(0x7f0000000a40)=""/218, 0xda, &(0x7f0000000b40)=""/4096, &(0x7f0000001b40), 0x0, {r2}}, 0x58) io_submit(0x0, 0x1, &(0x7f0000001c80)=[&(0x7f0000001c40)={0x0, 0x0, 0x0, 0x8, 0x9, r6, &(0x7f0000001c00)="aba73d063340424a8f577a0d", 0xc, 0x9, 0x0, 0x1}]) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f000006f400)={0x8001, [], 0x6, "7e8cc9200299a0"}) [ 104.550620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.553927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.557791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.563799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.569660] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.623854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.631620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.634244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.640265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.645947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.649110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.655672] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.660854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.664728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.669938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.686330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.697391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.711000] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.741299] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.748153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.760460] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.772726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.775598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.784568] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.788660] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.809477] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.826623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.842653] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.851630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.854050] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 104.859583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.867965] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 104.871054] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 104.878908] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 104.883961] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 104.962592] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 104.974582] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 104.986298] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 105.002823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 105.027628] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 106.637238] Bluetooth: hci0: command tx timeout [ 106.764635] Bluetooth: hci2: command tx timeout [ 106.766457] Bluetooth: hci1: command tx timeout [ 106.827362] Bluetooth: hci3: command tx timeout [ 106.893362] Bluetooth: hci4: command tx timeout [ 106.955276] Bluetooth: hci5: command tx timeout [ 106.956291] Bluetooth: hci6: command tx timeout [ 107.147215] Bluetooth: hci7: command tx timeout [ 108.684663] Bluetooth: hci0: command tx timeout [ 108.811619] Bluetooth: hci2: command tx timeout [ 108.812645] Bluetooth: hci1: command tx timeout [ 108.876129] Bluetooth: hci3: command tx timeout [ 108.939553] Bluetooth: hci4: command tx timeout [ 109.003226] Bluetooth: hci6: command tx timeout [ 109.003811] Bluetooth: hci5: command tx timeout [ 109.196311] Bluetooth: hci7: command tx timeout [ 110.731177] Bluetooth: hci0: command tx timeout [ 110.860147] Bluetooth: hci2: command tx timeout [ 110.860666] Bluetooth: hci1: command tx timeout [ 110.924466] Bluetooth: hci3: command tx timeout [ 110.988441] Bluetooth: hci4: command tx timeout [ 111.051210] Bluetooth: hci5: command tx timeout [ 111.051688] Bluetooth: hci6: command tx timeout [ 111.244140] Bluetooth: hci7: command tx timeout [ 112.779929] Bluetooth: hci0: command tx timeout [ 112.908709] Bluetooth: hci1: command tx timeout [ 112.909539] Bluetooth: hci2: command tx timeout [ 112.971185] Bluetooth: hci3: command tx timeout [ 113.036738] Bluetooth: hci4: command tx timeout [ 113.101548] Bluetooth: hci6: command tx timeout [ 113.102695] Bluetooth: hci5: command tx timeout [ 113.293769] Bluetooth: hci7: command tx timeout [ 164.787515] syz-executor.0 (281) used greatest stack depth: 25024 bytes left [ 164.857706] syz-executor.3 (280) used greatest stack depth: 24912 bytes left [ 165.061812] syz-executor.5 (283) used greatest stack depth: 24848 bytes left [ 167.069782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.072604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.075848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.078322] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.084123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.093976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.096896] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.101786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.107602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.110763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.133387] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.139398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.143664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.162464] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.171781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.257949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.272448] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.275818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.279214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.286955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.291351] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.293334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.314722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.323907] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.335422] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.337674] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.345635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.370834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.394786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.400612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 167.402966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.404487] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 167.405973] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 167.414284] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 167.416641] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.422583] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 167.430269] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 167.436451] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 167.489831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 167.492745] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 169.227220] Bluetooth: hci3: command tx timeout [ 169.227244] Bluetooth: hci1: command tx timeout [ 169.227466] Bluetooth: hci0: command tx timeout [ 169.355432] Bluetooth: hci4: command tx timeout [ 169.483291] Bluetooth: hci2: command tx timeout [ 169.484468] Bluetooth: hci7: command tx timeout [ 169.547421] Bluetooth: hci5: command tx timeout [ 169.611298] Bluetooth: hci6: command tx timeout [ 171.275439] Bluetooth: hci3: command tx timeout [ 171.275469] Bluetooth: hci0: command tx timeout [ 171.275556] Bluetooth: hci1: command tx timeout [ 171.404375] Bluetooth: hci4: command tx timeout [ 171.532552] Bluetooth: hci7: command tx timeout [ 171.533034] Bluetooth: hci2: command tx timeout [ 171.597088] Bluetooth: hci5: command tx timeout [ 171.659119] Bluetooth: hci6: command tx timeout [ 173.323319] Bluetooth: hci3: command tx timeout [ 173.323821] Bluetooth: hci1: command tx timeout [ 173.323856] Bluetooth: hci0: command tx timeout [ 173.453110] Bluetooth: hci4: command tx timeout [ 173.579422] Bluetooth: hci7: command tx timeout [ 173.579572] Bluetooth: hci2: command tx timeout [ 173.644476] Bluetooth: hci5: command tx timeout [ 173.708321] Bluetooth: hci6: command tx timeout [ 175.371226] Bluetooth: hci3: command tx timeout [ 175.371726] Bluetooth: hci0: command tx timeout [ 175.372707] Bluetooth: hci1: command tx timeout [ 175.500353] Bluetooth: hci4: command tx timeout [ 175.627343] Bluetooth: hci7: command tx timeout [ 175.630140] Bluetooth: hci2: command tx timeout [ 175.692176] Bluetooth: hci5: command tx timeout [ 175.756134] Bluetooth: hci6: command tx timeout [ 229.271666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.273697] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.275473] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.280257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.282779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.335592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.338959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.340287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.345528] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.349612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.423688] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.444364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.445516] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.459631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.462572] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.465462] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.465633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.471393] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.480935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.486556] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.578471] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.618769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.619963] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.631456] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.640052] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.684838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.686318] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.688419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.691565] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.695392] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.714588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 229.723941] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.725254] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 229.734649] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.743899] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.751435] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 229.778396] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 229.786672] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.801533] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 229.811681] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 231.309107] Bluetooth: hci0: command tx timeout [ 231.372594] Bluetooth: hci1: command tx timeout [ 231.499195] Bluetooth: hci2: command tx timeout [ 231.563164] Bluetooth: hci3: command tx timeout [ 231.755181] Bluetooth: hci4: command tx timeout [ 231.820472] Bluetooth: hci5: command tx timeout [ 231.885109] Bluetooth: hci6: command tx timeout [ 231.947131] Bluetooth: hci7: command tx timeout [ 233.356375] Bluetooth: hci0: command tx timeout [ 233.419233] Bluetooth: hci1: command tx timeout [ 233.547510] Bluetooth: hci2: command tx timeout [ 233.611185] Bluetooth: hci3: command tx timeout [ 233.804260] Bluetooth: hci4: command tx timeout [ 233.867182] Bluetooth: hci5: command tx timeout [ 233.931184] Bluetooth: hci6: command tx timeout [ 233.995304] Bluetooth: hci7: command tx timeout [ 235.403637] Bluetooth: hci0: command tx timeout [ 235.467269] Bluetooth: hci1: command tx timeout [ 235.598119] Bluetooth: hci2: command tx timeout [ 235.659406] Bluetooth: hci3: command tx timeout [ 235.851994] Bluetooth: hci4: command tx timeout [ 235.915249] Bluetooth: hci5: command tx timeout [ 235.979203] Bluetooth: hci6: command tx timeout [ 236.043330] Bluetooth: hci7: command tx timeout [ 237.452371] Bluetooth: hci0: command tx timeout [ 237.517184] Bluetooth: hci1: command tx timeout [ 237.644369] Bluetooth: hci2: command tx timeout [ 237.708285] Bluetooth: hci3: command tx timeout [ 237.899147] Bluetooth: hci4: command tx timeout [ 237.964157] Bluetooth: hci5: command tx timeout [ 238.028126] Bluetooth: hci6: command tx timeout [ 238.091196] Bluetooth: hci7: command tx timeout [ 291.749677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.757681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.763203] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.772032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.779844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.845852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.856624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.864350] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.904322] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.917169] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.936308] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.938937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 291.947667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.951229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.957211] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.970912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.983861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.993710] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.010676] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.013462] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.016800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.018804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.021548] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.034709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.038985] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.242298] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.245237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.247633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.254879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.259224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.280795] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 292.302580] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 292.323226] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 292.335629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 292.354598] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.358343] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 292.382832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.423557] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.489332] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.546774] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.837123] Bluetooth: hci0: command tx timeout [ 294.027213] Bluetooth: hci1: command tx timeout [ 294.091169] Bluetooth: hci2: command tx timeout [ 294.091916] Bluetooth: hci4: command tx timeout [ 294.219179] Bluetooth: hci3: command tx timeout [ 294.411173] Bluetooth: hci5: command tx timeout [ 294.476444] Bluetooth: hci7: command tx timeout [ 294.603129] Bluetooth: hci6: command tx timeout [ 295.886096] Bluetooth: hci0: command tx timeout [ 296.075148] Bluetooth: hci1: command tx timeout [ 296.140262] Bluetooth: hci4: command tx timeout [ 296.140688] Bluetooth: hci2: command tx timeout [ 296.268179] Bluetooth: hci3: command tx timeout [ 296.462302] Bluetooth: hci5: command tx timeout [ 296.524113] Bluetooth: hci7: command tx timeout [ 296.651349] Bluetooth: hci6: command tx timeout [ 297.933174] Bluetooth: hci0: command tx timeout [ 298.123152] Bluetooth: hci1: command tx timeout [ 298.188432] Bluetooth: hci2: command tx timeout [ 298.188910] Bluetooth: hci4: command tx timeout [ 298.315371] Bluetooth: hci3: command tx timeout [ 298.509013] Bluetooth: hci5: command tx timeout [ 298.571272] Bluetooth: hci7: command tx timeout [ 298.700659] Bluetooth: hci6: command tx timeout [ 299.980193] Bluetooth: hci0: command tx timeout [ 300.172330] Bluetooth: hci1: command tx timeout [ 300.235614] Bluetooth: hci4: command tx timeout [ 300.236307] Bluetooth: hci2: command tx timeout [ 300.364167] Bluetooth: hci3: command tx timeout [ 300.557646] Bluetooth: hci5: command tx timeout [ 300.620382] Bluetooth: hci7: command tx timeout [ 300.748288] Bluetooth: hci6: command tx timeout [ 354.469892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.471958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.473745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.477463] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.480849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.718704] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.724830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.728278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.734752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.742626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.981185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.985628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.995311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.005628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.009252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.095723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.101349] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.129506] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.135545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.137762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.224482] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 355.241224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 355.254633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 355.268296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 355.269710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 355.273699] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 355.280341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 355.284264] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 355.289305] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 355.294885] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.315323] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 355.317005] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 355.332039] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 355.334260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.343315] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 355.359398] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.374676] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.379485] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.417217] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.420731] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.556222] Bluetooth: hci0: command tx timeout [ 356.813319] Bluetooth: hci1: command tx timeout [ 357.068422] Bluetooth: hci2: command tx timeout [ 357.196347] Bluetooth: hci3: command tx timeout [ 357.387160] Bluetooth: hci6: command tx timeout [ 357.451188] Bluetooth: hci7: command tx timeout [ 357.451845] Bluetooth: hci4: command tx timeout [ 357.515163] Bluetooth: hci5: command tx timeout [ 358.603288] Bluetooth: hci0: command tx timeout [ 358.859522] Bluetooth: hci1: command tx timeout [ 359.115907] Bluetooth: hci2: command tx timeout [ 359.243220] Bluetooth: hci3: command tx timeout [ 359.436382] Bluetooth: hci6: command tx timeout [ 359.501122] Bluetooth: hci4: command tx timeout [ 359.501905] Bluetooth: hci7: command tx timeout [ 359.563821] Bluetooth: hci5: command tx timeout [ 360.653214] Bluetooth: hci0: command tx timeout [ 360.907141] Bluetooth: hci1: command tx timeout [ 361.163370] Bluetooth: hci2: command tx timeout [ 361.291486] Bluetooth: hci3: command tx timeout [ 361.483496] Bluetooth: hci6: command tx timeout [ 361.548137] Bluetooth: hci4: command tx timeout [ 361.548611] Bluetooth: hci7: command tx timeout [ 361.611419] Bluetooth: hci5: command tx timeout [ 362.699230] Bluetooth: hci0: command tx timeout [ 362.955838] Bluetooth: hci1: command tx timeout [ 363.212326] Bluetooth: hci2: command tx timeout [ 363.339482] Bluetooth: hci3: command tx timeout [ 363.531268] Bluetooth: hci6: command tx timeout [ 363.595327] Bluetooth: hci7: command tx timeout [ 363.596282] Bluetooth: hci4: command tx timeout [ 363.659394] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 01:25:05 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=00007ffdb315f648 RCX=ffffffff8678c6e6 RDX=ffff88802c0d8000 RSI=0000000000000001 RDI=ffff88806ce08a88 RBP=ffff88802c0d0000 RSP=ffff88806ce08a08 R8 =ffffffff8678c6ea R9 =0000000000000000 R10=000000000003b53d R11=0000000000000003 R12=0000000000000001 R13=ffff88806ce08ac0 R14=ffff88802c0d7f58 R15=ffff88806ce08a78 RIP=ffffffff81353ffe RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe3a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbfa6bc96f4 CR3=0000000027acc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fbfa6bd847000007fbfa6bd7f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000bf23007 RBX=1ffff1100715ffa7 RCX=ffffffff819d2151 RDX=ffff88802b510000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffffff8581a260 RSP=ffff888038affcf0 R8 =0000000000000001 R9 =0000000000000000 R10=000000000bf23007 R11=0000000000000001 R12=00007f5aaba60000 R13=ffff8880161adc40 R14=000000000bf23067 R15=ffff888034679b50 RIP=ffffffff81738d90 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5aab831540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5aaba60000 CR3=00000000283d9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000