4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/713/file0" dev="sda1" ino=1180 res=1 errno=0 23:15:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:15:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x14}}], {0x14}}, 0x5c}}, 0x0) 23:15:52 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'bridge0\x00'}) 23:15:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x80100) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="74cd9e74cd5f7bbadce97640263ab9a0669bda14f09e7099566827c17bb430ee6d37f280d68272e25f83b7f9c5bae5354c7570f7ff722cff0b0035d953209806ddf145b5aa06aefd5a7b36f036a11ccc35032db650483fb3bf04330000000000000000", 0x63) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c97fa7a7ab53b5f5", 0x13, 0x24004865, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x40c800, 0x9f4b15a4a383cef1) socket$alg(0x26, 0x5, 0x0) (async) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x80100) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="74cd9e74cd5f7bbadce97640263ab9a0669bda14f09e7099566827c17bb430ee6d37f280d68272e25f83b7f9c5bae5354c7570f7ff722cff0b0035d953209806ddf145b5aa06aefd5a7b36f036a11ccc35032db650483fb3bf04330000000000000000", 0x63) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) sendfile(r2, r3, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) (async) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c97fa7a7ab53b5f5", 0x13, 0x24004865, 0x0, 0x0) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x40c800, 0x9f4b15a4a383cef1) (async) [ 690.215848][T19906] Bluetooth: hci6: Frame reassembly failed (-84) 23:15:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) [ 690.270617][ T4090] Bluetooth: hci6: Frame reassembly failed (-84) [ 690.327624][ T27] audit: type=1800 audit(1666480552.791:729): pid=19923 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1155 res=0 errno=0 23:15:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x74) 23:15:54 executing program 2: mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)) 23:15:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x16}}], {0x14}}, 0x5c}}, 0x0) 23:15:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 23:15:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:15:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:15:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x14) [ 692.264530][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:15:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:15:54 executing program 4: openat$sysfs(0xffffffffffffff9c, 0x0, 0x4601, 0x0) 23:15:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x1b, 0x5, 0x640, 0x458, 0x458, 0xffffffff, 0xe8, 0xe8, 0x570, 0x570, 0xffffffff, 0x570, 0x570, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0x6}}}, {{@ipv6={@private1, @private2, [], [], 'syzkaller0\x00', 'pimreg0\x00'}, 0x0, 0x210, 0x258, 0x0, {}, [@common=@frag={{0x30}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@local, @rand_addr=' \x01\x00', @loopback, @private2, @remote, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @rand_addr=' \x01\x00', @loopback, @private0, @remote, @mcast2]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@private1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"10f9"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@broadcast, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'batadv0\x00', 'dvmrp1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"befb"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private}, @ipv6=@private1, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) 23:15:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x18}}], {0x14}}, 0x5c}}, 0x0) [ 692.334172][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 692.334187][ T27] audit: type=1800 audit(1666480554.791:732): pid=19938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1166 res=0 errno=0 23:15:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) [ 692.398221][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) [ 692.410061][ T27] audit: type=1804 audit(1666480554.831:733): pid=19938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/715/file0" dev="sda1" ino=1166 res=1 errno=0 [ 692.434822][T19944] Bluetooth: hci6: Frame reassembly failed (-84) [ 692.449553][T19950] x_tables: duplicate underflow at hook 1 23:15:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7a) 23:15:56 executing program 4: getpeername$llc(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 23:15:56 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)='z', 0x1}, {&(0x7f0000001080)="e1", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)='L', 0x1}], 0x1}}], 0x2, 0x0) 23:15:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:15:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x19}}], {0x14}}, 0x5c}}, 0x0) 23:15:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) [ 694.424461][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 694.424721][ T3648] Bluetooth: hci6: command 0x1003 tx timeout 23:15:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:15:56 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:15:56 executing program 4: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) 23:15:56 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:15:56 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000140), 0x4) 23:15:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) [ 694.470636][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 694.470921][T19964] Bluetooth: hci6: Frame reassembly failed (-84) [ 694.483346][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 694.494163][ T27] audit: type=1800 audit(1666480556.951:734): pid=19966 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1184 res=0 errno=0 23:15:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4000000f) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:15:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x28}}], {0x14}}, 0x5c}}, 0x0) 23:15:57 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) [ 694.560716][ T27] audit: type=1800 audit(1666480557.021:735): pid=19977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1169 res=0 errno=0 23:15:57 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x393000, 0x0) 23:15:57 executing program 4: socketpair(0x1e, 0x4, 0x0, 0x0) 23:15:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) [ 694.617588][ T27] audit: type=1804 audit(1666480557.051:736): pid=19978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/717/file0" dev="sda1" ino=1169 res=1 errno=0 23:15:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x48}}], {0x14}}, 0x5c}}, 0x0) 23:15:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4000000f) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:15:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'macvlan0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'batadv_slave_0\x00', 'nicvf0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@time={{0x38}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 23:15:57 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x311081, 0x0) 23:15:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4c}}], {0x14}}, 0x5c}}, 0x0) [ 694.800605][T20005] x_tables: duplicate underflow at hook 3 23:15:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x8c) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) flock(r1, 0x5) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:15:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:15:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000300)) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2, {[@rr={0x7, 0x17, 0x0, [@multicast1, @local, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @rr={0x7, 0x7, 0x0, [@loopback]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@broadcast}, {}, {@dev}, {@multicast1}, {@broadcast}, {@dev}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'bond_slave_1\x00', {0x2}, 0x5}) 23:15:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x60}}], {0x14}}, 0x5c}}, 0x0) 23:15:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4000000f) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:15:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000980)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x480, 0x5, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}, {0x3d0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x188, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x154, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4c8, 0x5, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, {0x2d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x568, 0x5, 0x0, 0x1, [{0x3f0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x158, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}]}]}, 0xec4}}, 0x0) 23:15:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x68}}], {0x14}}, 0x5c}}, 0x0) 23:15:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:15:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, '\x00\x00\x00\b\x00\x00\x00\b', "a4616bf45c64c5000000878f00", 'ZD\x00\b', "ffffff927fffffff"}, 0x28) sendto$inet6(r0, &(0x7f0000000100)='g', 0x7fd6, 0x8000, 0x0, 0x0) 23:15:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x23000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff7f0000000000002e3f66696c653000"]) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) [ 695.203449][ T27] audit: type=1800 audit(1666480557.661:737): pid=20020 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1171 res=0 errno=0 23:15:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6c}}], {0x14}}, 0x5c}}, 0x0) 23:15:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x8c) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) flock(r1, 0x5) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:15:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, '\x00\x00\x00\b\x00\x00\x00\b', "a4616bf45c64c5000000878f00", 'ZD\x00\b', "ffffff927fffffff"}, 0x28) sendto$inet6(r0, &(0x7f0000000100)='g', 0x7fd6, 0x8000, 0x0, 0x0) 23:15:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) [ 695.680492][ T27] audit: type=1804 audit(1666480557.661:738): pid=20020 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/718/file0" dev="sda1" ino=1171 res=1 errno=0 [ 695.748556][ T27] audit: type=1800 audit(1666480558.211:739): pid=20041 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1171 res=0 errno=0 [ 695.814027][ T27] audit: type=1804 audit(1666480558.211:740): pid=20040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/719/file0" dev="sda1" ino=1171 res=1 errno=0 23:15:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000300)) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2, {[@rr={0x7, 0x17, 0x0, [@multicast1, @local, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @rr={0x7, 0x7, 0x0, [@loopback]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@broadcast}, {}, {@dev}, {@multicast1}, {@broadcast}, {@dev}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'bond_slave_1\x00', {0x2}, 0x5}) 23:15:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:15:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, '\x00\x00\x00\b\x00\x00\x00\b', "a4616bf45c64c5000000878f00", 'ZD\x00\b', "ffffff927fffffff"}, 0x28) sendto$inet6(r0, &(0x7f0000000100)='g', 0x7fd6, 0x8000, 0x0, 0x0) 23:15:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x23000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff7f0000000000002e3f66696c653000"]) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) 23:15:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x74}}], {0x14}}, 0x5c}}, 0x0) 23:15:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x8c) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) flock(r1, 0x5) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x8c) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) flock(r1, 0x5) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendto(r3, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) 23:15:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7a}}], {0x14}}, 0x5c}}, 0x0) 23:15:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000300)) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2, {[@rr={0x7, 0x17, 0x0, [@multicast1, @local, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @rr={0x7, 0x7, 0x0, [@loopback]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@broadcast}, {}, {@dev}, {@multicast1}, {@broadcast}, {@dev}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'bond_slave_1\x00', {0x2}, 0x5}) 23:15:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) [ 696.040197][ T27] audit: type=1800 audit(1666480558.501:741): pid=20054 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1180 res=0 errno=0 23:15:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x300}}], {0x14}}, 0x5c}}, 0x0) 23:15:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) accept4(r0, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000180)=""/167, 0xa7, 0x40002000, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0xfffffffc, @mcast1, 0x8, 0x4}, 0x80) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r4 = socket$tipc(0x1e, 0x2, 0x0) sendto(r4, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x1f, 0x0, 0x0, 0x0) 23:15:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:15:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000300)) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2, {[@rr={0x7, 0x17, 0x0, [@multicast1, @local, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @rr={0x7, 0x7, 0x0, [@loopback]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@broadcast}, {}, {@dev}, {@multicast1}, {@broadcast}, {@dev}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'bond_slave_1\x00', {0x2}, 0x5}) 23:15:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x500}}], {0x14}}, 0x5c}}, 0x0) 23:15:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) accept4(r0, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000180)=""/167, 0xa7, 0x40002000, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0xfffffffc, @mcast1, 0x8, 0x4}, 0x80) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r4 = socket$tipc(0x1e, 0x2, 0x0) sendto(r4, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x1f, 0x0, 0x0, 0x0) [ 697.526914][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 697.526929][ T27] audit: type=1800 audit(1666480559.991:745): pid=20094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1162 res=0 errno=0 23:16:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x23000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff7f0000000000002e3f66696c653000"]) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) 23:16:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x600}}], {0x14}}, 0x5c}}, 0x0) 23:16:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000300)) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2, {[@rr={0x7, 0x17, 0x0, [@multicast1, @local, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @rr={0x7, 0x7, 0x0, [@loopback]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@broadcast}, {}, {@dev}, {@multicast1}, {@broadcast}, {@dev}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'bond_slave_1\x00', {0x2}, 0x5}) 23:16:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async, rerun: 64) accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 64) recvfrom(r0, &(0x7f0000000180)=""/167, 0xa7, 0x40002000, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0xfffffffc, @mcast1, 0x8, 0x4}, 0x80) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r4 = socket$tipc(0x1e, 0x2, 0x0) sendto(r4, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x1f, 0x0, 0x0, 0x0) [ 698.104466][ T3641] Bluetooth: hci6: command 0x1003 tx timeout [ 698.104567][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:16:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) write$binfmt_elf64(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x80, 0x1, 0x3, 0x8000000000000000, 0x2, 0x3e, 0x1, 0x29, 0x40, 0x1a9, 0x4, 0x1f, 0x38, 0x2, 0x0, 0x1f, 0x3f}, [{0x6474e551, 0x1, 0x10001, 0x6, 0x7, 0x9, 0x21c95d01, 0x2e}], "1bcdfb77b84d349ed8154d1c0f3a05d4c197898cbeac844e2bea39ecbf5caee961106cc04aa4f56f6bdda12aa1cf0f242894d55b9b60b8d5a92582742cbb02c173da4142680a9fb025f684cb24bcb7bd3be30eecb0ccade3882f543f903af277e81dda4d53365fd3ad58bb4fd60ec945d5d49a4b94e4a7aae1a91a57c8a7b168f9369526b51adc8d8195c676e5ef7233f9a40c1f1216b50b3d705ab914d4c8765555c3429ca8e9941912bd2f48636aa7a4589884e15c44b1deb877044adafe877ff9dc08afd709e97e93ddd03857b3af9a6088574044d2f8c71e7cbfa63c860798e13c6def"}, 0x15d) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000080)=@generic={0x0, 0x9, 0x8000}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x700}}], {0x14}}, 0x5c}}, 0x0) 23:16:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) [ 698.237293][ T27] audit: type=1800 audit(1666480560.701:746): pid=20120 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1158 res=0 errno=0 23:16:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000300)) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2, {[@rr={0x7, 0x17, 0x0, [@multicast1, @local, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @rr={0x7, 0x7, 0x0, [@loopback]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@broadcast}, {}, {@dev}, {@multicast1}, {@broadcast}, {@dev}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'bond_slave_1\x00', {0x2}, 0x5}) 23:16:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x900}}], {0x14}}, 0x5c}}, 0x0) 23:16:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) [ 698.631752][ T27] audit: type=1804 audit(1666480561.041:747): pid=20125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/724/file0" dev="sda1" ino=1158 res=1 errno=0 23:16:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x9, 0xff, 0x10001, 0x3f, 0x16, "92aee96d6875a9b62d8f6e0d69f8e315aa9af4"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) syz_open_dev$tty20(0xc, 0x4, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000280)={0x3, 0x0, [0xd9, 0x7b, 0x5, 0x5], &(0x7f0000000200)}) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x3) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TCXONC(r1, 0x540a, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8700, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x1) fallocate(r2, 0x0, 0x0, 0x4103fe) ioctl$TIOCGPTPEER(r2, 0x5441, 0x105) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0x9, 0x0, 0x1, 0x3ff, 0x8, "58c1fb38e56c189d0429bbef882fea52678a75"}) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xc) [ 698.723985][ T9338] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa00}}], {0x14}}, 0x5c}}, 0x0) 23:16:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, '\x00\x00\x00\b\x00\x00\x00\b', "a4616bf45c64c5000000878f00", 'ZD\x00\b', "ffffff927fffffff"}, 0x28) sendto$inet6(r0, &(0x7f0000000100)='g', 0x7fd6, 0x8000, 0x0, 0x0) [ 699.236397][T20136] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) write$binfmt_elf64(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x80, 0x1, 0x3, 0x8000000000000000, 0x2, 0x3e, 0x1, 0x29, 0x40, 0x1a9, 0x4, 0x1f, 0x38, 0x2, 0x0, 0x1f, 0x3f}, [{0x6474e551, 0x1, 0x10001, 0x6, 0x7, 0x9, 0x21c95d01, 0x2e}], "1bcdfb77b84d349ed8154d1c0f3a05d4c197898cbeac844e2bea39ecbf5caee961106cc04aa4f56f6bdda12aa1cf0f242894d55b9b60b8d5a92582742cbb02c173da4142680a9fb025f684cb24bcb7bd3be30eecb0ccade3882f543f903af277e81dda4d53365fd3ad58bb4fd60ec945d5d49a4b94e4a7aae1a91a57c8a7b168f9369526b51adc8d8195c676e5ef7233f9a40c1f1216b50b3d705ab914d4c8765555c3429ca8e9941912bd2f48636aa7a4589884e15c44b1deb877044adafe877ff9dc08afd709e97e93ddd03857b3af9a6088574044d2f8c71e7cbfa63c860798e13c6def"}, 0x15d) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000080)=@generic={0x0, 0x9, 0x8000}) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x480, 0x5, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}, {0x3d0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x188, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x154, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4cc, 0x5, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, {0x2d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2c8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x564, 0x5, 0x0, 0x1, [{0x3f0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x51}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}]}]}, 0xec4}}, 0x0) 23:16:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xb00}}], {0x14}}, 0x5c}}, 0x0) 23:16:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) [ 699.408889][ T27] audit: type=1800 audit(1666480561.871:748): pid=20152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1164 res=0 errno=0 [ 699.438753][ T27] audit: type=1804 audit(1666480561.891:749): pid=20150 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/725/file0" dev="sda1" ino=1164 res=1 errno=0 23:16:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x8}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc1", 0x8}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xc00}}], {0x14}}, 0x5c}}, 0x0) 23:16:02 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5}}, @volatile={0x2}]}}, &(0x7f0000000180)=""/139, 0x3e, 0x8b, 0x1}, 0x20) 23:16:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x9, 0xff, 0x10001, 0x3f, 0x16, "92aee96d6875a9b62d8f6e0d69f8e315aa9af4"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async, rerun: 64) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 32) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) (async, rerun: 32) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000280)={0x3, 0x0, [0xd9, 0x7b, 0x5, 0x5], &(0x7f0000000200)}) (async, rerun: 64) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) (rerun: 64) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x3) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TCXONC(r1, 0x540a, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8700, 0x0) (async) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x1) fallocate(r2, 0x0, 0x0, 0x4103fe) ioctl$TIOCGPTPEER(r2, 0x5441, 0x105) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0x9, 0x0, 0x1, 0x3ff, 0x8, "58c1fb38e56c189d0429bbef882fea52678a75"}) ioctl$TCFLSH(r2, 0x540b, 0x0) (async, rerun: 64) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xc) (rerun: 64) 23:16:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}, 0x0) 23:16:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xd00}}], {0x14}}, 0x5c}}, 0x0) 23:16:03 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x10}, 0x10}}, 0x0) pipe2$watch_queue(0x0, 0x80) syz_clone(0x40008000, &(0x7f0000000080)="dee70affd40e7dc91ab782af31ffdafe475fb5d429e924e7a0908762ea897ae7f889ca7846b7825c97d14d2ac173fb15fee9667a49973969cf51e587ba0b579d1e2c617869e708b609bf2ab80c5adeddd986b8bbb1653d086af7d082d6755fa0b6bac9ed9296de684299", 0x6a, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="b7de587ecddcd33ca90cbfdfaf466e6bfe80312a3d33e0290e6f7eb681575e6c9ed36e7f77f55c68aa7838b3515305dcd26c9e7aeab6d4d47230bc9744a5a0b12096773c7b51cf5563997b185dac430b2ce5722101dedbd1c3f2cc") 23:16:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) write$binfmt_elf64(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x80, 0x1, 0x3, 0x8000000000000000, 0x2, 0x3e, 0x1, 0x29, 0x40, 0x1a9, 0x4, 0x1f, 0x38, 0x2, 0x0, 0x1f, 0x3f}, [{0x6474e551, 0x1, 0x10001, 0x6, 0x7, 0x9, 0x21c95d01, 0x2e}], "1bcdfb77b84d349ed8154d1c0f3a05d4c197898cbeac844e2bea39ecbf5caee961106cc04aa4f56f6bdda12aa1cf0f242894d55b9b60b8d5a92582742cbb02c173da4142680a9fb025f684cb24bcb7bd3be30eecb0ccade3882f543f903af277e81dda4d53365fd3ad58bb4fd60ec945d5d49a4b94e4a7aae1a91a57c8a7b168f9369526b51adc8d8195c676e5ef7233f9a40c1f1216b50b3d705ab914d4c8765555c3429ca8e9941912bd2f48636aa7a4589884e15c44b1deb877044adafe877ff9dc08afd709e97e93ddd03857b3af9a6088574044d2f8c71e7cbfa63c860798e13c6def"}, 0x15d) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000080)=@generic={0x0, 0x9, 0x8000}) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f228", 0x3) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) [ 700.744806][ T3641] Bluetooth: hci6: command 0x1003 tx timeout [ 700.750905][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:16:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/snmp6\x00') read$FUSE(r2, &(0x7f0000002400)={0x2020}, 0x2020) 23:16:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xe00}}], {0x14}}, 0x5c}}, 0x0) 23:16:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f228", 0x3) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x9, 0xff, 0x10001, 0x3f, 0x16, "92aee96d6875a9b62d8f6e0d69f8e315aa9af4"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) syz_open_dev$tty20(0xc, 0x4, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000280)={0x3, 0x0, [0xd9, 0x7b, 0x5, 0x5], &(0x7f0000000200)}) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x3) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TCXONC(r1, 0x540a, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8700, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x1) fallocate(r2, 0x0, 0x0, 0x4103fe) ioctl$TIOCGPTPEER(r2, 0x5441, 0x105) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0x9, 0x0, 0x1, 0x3ff, 0x8, "58c1fb38e56c189d0429bbef882fea52678a75"}) ioctl$TCFLSH(r2, 0x540b, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x9, 0xff, 0x10001, 0x3f, 0x16, "92aee96d6875a9b62d8f6e0d69f8e315aa9af4"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) (async) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000280)={0x3, 0x0, [0xd9, 0x7b, 0x5, 0x5], &(0x7f0000000200)}) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x3) (async) fallocate(r1, 0x0, 0x0, 0x4103fe) (async) ioctl$TCXONC(r1, 0x540a, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8700, 0x0) (async) creat(&(0x7f0000000140)='./file0\x00', 0x1) (async) fallocate(r2, 0x0, 0x0, 0x4103fe) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x105) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0x9, 0x0, 0x1, 0x3ff, 0x8, "58c1fb38e56c189d0429bbef882fea52678a75"}) (async) ioctl$TCFLSH(r2, 0x540b, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0xc) (async) [ 700.810002][ T27] audit: type=1800 audit(1666480563.271:750): pid=20175 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1184 res=0 errno=0 23:16:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000001c0)=""/160, 0xa0}, {&(0x7f0000000280)=""/207, 0xcf}], 0x4, &(0x7f00000003c0)=""/167, 0xa7}, 0x8000}, {{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/84, 0x54}], 0x3}, 0x1ff}], 0x2, 0x40002040, &(0x7f0000000500)={0x77359400}) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f228", 0x3) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xf00}}], {0x14}}, 0x5c}}, 0x0) [ 700.884168][ T27] audit: type=1804 audit(1666480563.301:751): pid=20182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/726/file0" dev="sda1" ino=1184 res=1 errno=0 23:16:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d", 0x4) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1100}}], {0x14}}, 0x5c}}, 0x0) 23:16:03 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x1238, &(0x7f0000000000)=[{&(0x7f0000000180)={0x114, 0x29, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be1fd750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bb2fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5300"]}]}, 0x114}], 0x1}, 0x0) 23:16:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d", 0x4) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1200}}], {0x14}}, 0x5c}}, 0x0) [ 700.953853][T20198] Bluetooth: hci6: Frame reassembly failed (-84) [ 700.979658][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) [ 701.069186][T20222] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 701.086910][T20222] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. 23:16:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/snmp6\x00') read$FUSE(r2, &(0x7f0000002400)={0x2020}, 0x2020) 23:16:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d", 0x4) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1400}}], {0x14}}, 0x5c}}, 0x0) 23:16:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000001c0)=""/160, 0xa0}, {&(0x7f0000000280)=""/207, 0xcf}], 0x4, &(0x7f00000003c0)=""/167, 0xa7}, 0x8000}, {{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/84, 0x54}], 0x3}, 0x1ff}], 0x2, 0x40002040, &(0x7f0000000500)={0x77359400}) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:05 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x1238, &(0x7f0000000000)=[{&(0x7f0000000180)={0x114, 0x29, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be1fd750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bb2fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5300"]}]}, 0x114}], 0x1}, 0x0) 23:16:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1600}}], {0x14}}, 0x5c}}, 0x0) 23:16:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/snmp6\x00') read$FUSE(r2, &(0x7f0000002400)={0x2020}, 0x2020) 23:16:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x437, 0x3, 0xd6f, 0x20, 0xa, "798d2e208a62797cedf51667d499df6a13819d"}) sendfile(r1, r2, 0x0, 0xffffffff054) fchdir(r1) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8, 0xfff, 0x9, 0x5275014f, 0x2, 0xca25}, {0x8, 0x6, 0x8000, 0x7, 0x4, 0x3}], ['\x00', '\x00']}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7fffffff, 0x6, 0x41, 0x60e, 0xd, "5b2af4aa69aa77c8bad083bb892fbed9b299b2"}) ioctl$TCFLSH(r1, 0x540b, 0x2) [ 702.984451][ T3655] Bluetooth: hci6: command 0x1003 tx timeout [ 702.984456][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 703.016922][T20233] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 23:16:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1800}}], {0x14}}, 0x5c}}, 0x0) 23:16:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:05 executing program 4: timer_create(0x0, 0x0, &(0x7f00000015c0)) timer_getoverrun(0x0) 23:16:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:05 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x100b, &(0x7f0000000000)={0x0, 0x2}, 0x10) [ 703.044498][T20233] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 703.070562][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 703.076985][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 703.084146][T20241] Bluetooth: hci6: Frame reassembly failed (-84) [ 703.166294][ T27] audit: type=1800 audit(1666480565.631:752): pid=20258 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1164 res=0 errno=0 [ 703.223882][ T27] audit: type=1804 audit(1666480565.661:753): pid=20241 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/742/file0" dev="sda1" ino=1164 res=1 errno=0 [ 703.290543][ T27] audit: type=1804 audit(1666480565.661:754): pid=20241 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/742/file0" dev="sda1" ino=1164 res=1 errno=0 23:16:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000001c0)=""/160, 0xa0}, {&(0x7f0000000280)=""/207, 0xcf}], 0x4, &(0x7f00000003c0)=""/167, 0xa7}, 0x8000}, {{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/84, 0x54}], 0x3}, 0x1ff}], 0x2, 0x40002040, &(0x7f0000000500)={0x77359400}) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000001c0)=""/160, 0xa0}, {&(0x7f0000000280)=""/207, 0xcf}], 0x4, &(0x7f00000003c0)=""/167, 0xa7}, 0x8000}, {{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/84, 0x54}], 0x3}, 0x1ff}], 0x2, 0x40002040, &(0x7f0000000500)={0x77359400}) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) 23:16:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1900}}], {0x14}}, 0x5c}}, 0x0) 23:16:06 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000540)={0x2}, 0x8) 23:16:06 executing program 2: socketpair(0x1, 0x70000001, 0x0, 0x0) 23:16:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x437, 0x3, 0xd6f, 0x20, 0xa, "798d2e208a62797cedf51667d499df6a13819d"}) sendfile(r1, r2, 0x0, 0xffffffff054) fchdir(r1) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8, 0xfff, 0x9, 0x5275014f, 0x2, 0xca25}, {0x8, 0x6, 0x8000, 0x7, 0x4, 0x3}], ['\x00', '\x00']}) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7fffffff, 0x6, 0x41, 0x60e, 0xd, "5b2af4aa69aa77c8bad083bb892fbed9b299b2"}) ioctl$TCFLSH(r1, 0x540b, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) fallocate(r3, 0x0, 0x0, 0x4103fe) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x437, 0x3, 0xd6f, 0x20, 0xa, "798d2e208a62797cedf51667d499df6a13819d"}) (async) sendfile(r1, r2, 0x0, 0xffffffff054) (async) fchdir(r1) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8, 0xfff, 0x9, 0x5275014f, 0x2, 0xca25}, {0x8, 0x6, 0x8000, 0x7, 0x4, 0x3}], ['\x00', '\x00']}) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7fffffff, 0x6, 0x41, 0x60e, 0xd, "5b2af4aa69aa77c8bad083bb892fbed9b299b2"}) (async) ioctl$TCFLSH(r1, 0x540b, 0x2) (async) 23:16:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:06 executing program 4: socketpair(0x1, 0x70000001, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) getpeername(r0, &(0x7f0000001600), &(0x7f0000001640)=0xe) 23:16:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2800}}], {0x14}}, 0x5c}}, 0x0) 23:16:06 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept4(0xffffffffffffffff, &(0x7f0000000080)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000140)=0x80, 0x80000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:06 executing program 4: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x53, 0x2, 0x0) 23:16:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3f00}}], {0x14}}, 0x5c}}, 0x0) [ 704.036654][ T27] audit: type=1800 audit(1666480566.501:755): pid=20280 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1184 res=0 errno=0 [ 704.074100][T20275] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:06 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff054) (async, rerun: 64) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async, rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept4(0xffffffffffffffff, &(0x7f0000000080)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000140)=0x80, 0x80000) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000040)) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) [ 704.085549][ T9338] Bluetooth: hci6: Frame reassembly failed (-84) [ 704.096922][ T27] audit: type=1804 audit(1666480566.541:756): pid=20280 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/730/file0" dev="sda1" ino=1184 res=1 errno=0 23:16:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4000}}], {0x14}}, 0x5c}}, 0x0) 23:16:06 executing program 2: r0 = socket$inet(0x2, 0xc003, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) [ 704.141426][ T27] audit: type=1800 audit(1666480566.551:757): pid=20275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1169 res=0 errno=0 [ 704.190043][ T27] audit: type=1804 audit(1666480566.551:758): pid=20275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/743/file0" dev="sda1" ino=1169 res=1 errno=0 [ 704.218012][ T27] audit: type=1804 audit(1666480566.551:759): pid=20275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/743/file0" dev="sda1" ino=1169 res=1 errno=0 [ 704.242255][ T27] audit: type=1800 audit(1666480566.591:760): pid=20289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1184 res=0 errno=0 [ 704.265279][ T27] audit: type=1804 audit(1666480566.591:761): pid=20288 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/731/file0" dev="sda1" ino=1184 res=1 errno=0 23:16:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x437, 0x3, 0xd6f, 0x20, 0xa, "798d2e208a62797cedf51667d499df6a13819d"}) sendfile(r1, r2, 0x0, 0xffffffff054) (async) fchdir(r1) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x8, 0xfff, 0x9, 0x5275014f, 0x2, 0xca25}, {0x8, 0x6, 0x8000, 0x7, 0x4, 0x3}], ['\x00', '\x00']}) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7fffffff, 0x6, 0x41, 0x60e, 0xd, "5b2af4aa69aa77c8bad083bb892fbed9b299b2"}) (async) ioctl$TCFLSH(r1, 0x540b, 0x2) 23:16:08 executing program 1: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept4(0xffffffffffffffff, &(0x7f0000000080)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000140)=0x80, 0x80000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) accept4(0xffffffffffffffff, &(0x7f0000000080)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000140)=0x80, 0x80000) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000040)) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) 23:16:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:08 executing program 2: socket(0x0, 0x0, 0x1) socketpair(0x1f, 0x3, 0x0, 0x0) 23:16:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4800}}], {0x14}}, 0x5c}}, 0x0) 23:16:08 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002640)=[{0x0}], 0x1, &(0x7f00000026c0)=""/231, 0xe7}, 0x0) 23:16:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140), 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) [ 706.104463][ T3641] Bluetooth: hci6: command 0x1003 tx timeout [ 706.104520][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:16:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4c00}}], {0x14}}, 0x5c}}, 0x0) 23:16:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004c40), 0x200002, 0x0) getsockname$packet(r3, &(0x7f0000004c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004cc0)=0x14) fallocate(r2, 0x0, 0x0, 0x4103fe) clock_gettime(0x0, &(0x7f0000004bc0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000004a40)=[{{&(0x7f0000000040)=@pppol2tpin6, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)=""/93, 0x5d}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f00000002c0)=""/201, 0xc9}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000540)=""/173, 0xad}], 0x7, &(0x7f0000000680)=""/63, 0x3f}}, {{&(0x7f00000006c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000840)=""/13, 0xd}, {&(0x7f0000000880)=""/34, 0x22}], 0x3, &(0x7f00000009c0)=""/178, 0xb2}, 0x1}, {{&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b00)=""/217, 0xd9}, {&(0x7f0000000c00)=""/249, 0xf9}, {&(0x7f0000000900)=""/31, 0x1f}], 0x3, &(0x7f0000000d40)=""/17, 0x11}, 0x7fff}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/36, 0x24}, {&(0x7f0000001dc0)=""/148, 0x94}, {&(0x7f0000001e80)=""/67, 0x43}, {&(0x7f0000001f00)=""/161, 0xa1}, {&(0x7f0000001fc0)=""/201, 0xc9}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/141, 0x8d}, {&(0x7f0000003180)=""/179, 0xb3}], 0x9, &(0x7f0000003300)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000004300)=""/233, 0xe9}, {&(0x7f0000004400)=""/198, 0xc6}, {&(0x7f0000004500)=""/87, 0x57}, {&(0x7f0000004580)=""/89, 0x59}, {&(0x7f0000004600)=""/22, 0x16}], 0x5, &(0x7f00000046c0)=""/2, 0x2}, 0x7}, {{&(0x7f0000004700)=@x25, 0x80, &(0x7f0000004900)=[{&(0x7f0000004780)=""/154, 0x9a}, {&(0x7f0000004840)=""/186, 0xba}], 0x2, &(0x7f0000004940)=""/211, 0xd3}, 0x4}], 0x6, 0x100, &(0x7f0000004c00)={r4, r5+60000000}) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140), 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6000}}], {0x14}}, 0x5c}}, 0x0) 23:16:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6800}}], {0x14}}, 0x5c}}, 0x0) [ 706.200532][ T9348] Bluetooth: hci6: Frame reassembly failed (-84) [ 706.214270][T20331] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:16:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140), 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6c00}}], {0x14}}, 0x5c}}, 0x0) 23:16:10 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000026c0)=""/231, 0xe7}, 0x0) 23:16:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004c40), 0x200002, 0x0) getsockname$packet(r3, &(0x7f0000004c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004cc0)=0x14) (async) fallocate(r2, 0x0, 0x0, 0x4103fe) (async) clock_gettime(0x0, &(0x7f0000004bc0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000004a40)=[{{&(0x7f0000000040)=@pppol2tpin6, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)=""/93, 0x5d}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f00000002c0)=""/201, 0xc9}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000540)=""/173, 0xad}], 0x7, &(0x7f0000000680)=""/63, 0x3f}}, {{&(0x7f00000006c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000840)=""/13, 0xd}, {&(0x7f0000000880)=""/34, 0x22}], 0x3, &(0x7f00000009c0)=""/178, 0xb2}, 0x1}, {{&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b00)=""/217, 0xd9}, {&(0x7f0000000c00)=""/249, 0xf9}, {&(0x7f0000000900)=""/31, 0x1f}], 0x3, &(0x7f0000000d40)=""/17, 0x11}, 0x7fff}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/36, 0x24}, {&(0x7f0000001dc0)=""/148, 0x94}, {&(0x7f0000001e80)=""/67, 0x43}, {&(0x7f0000001f00)=""/161, 0xa1}, {&(0x7f0000001fc0)=""/201, 0xc9}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/141, 0x8d}, {&(0x7f0000003180)=""/179, 0xb3}], 0x9, &(0x7f0000003300)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000004300)=""/233, 0xe9}, {&(0x7f0000004400)=""/198, 0xc6}, {&(0x7f0000004500)=""/87, 0x57}, {&(0x7f0000004580)=""/89, 0x59}, {&(0x7f0000004600)=""/22, 0x16}], 0x5, &(0x7f00000046c0)=""/2, 0x2}, 0x7}, {{&(0x7f0000004700)=@x25, 0x80, &(0x7f0000004900)=[{&(0x7f0000004780)=""/154, 0x9a}, {&(0x7f0000004840)=""/186, 0xba}], 0x2, &(0x7f0000004940)=""/211, 0xd3}, 0x4}], 0x6, 0x100, &(0x7f0000004c00)={r4, r5+60000000}) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:10 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x100b, 0x0, 0x0) [ 708.264485][ T3641] Bluetooth: hci6: command 0x1003 tx timeout [ 708.264552][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:16:10 executing program 4: socketpair(0x0, 0x3, 0x0, 0x0) 23:16:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7400}}], {0x14}}, 0x5c}}, 0x0) 23:16:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004c40), 0x200002, 0x0) getsockname$packet(r3, &(0x7f0000004c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004cc0)=0x14) fallocate(r2, 0x0, 0x0, 0x4103fe) clock_gettime(0x0, &(0x7f0000004bc0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000004a40)=[{{&(0x7f0000000040)=@pppol2tpin6, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)=""/93, 0x5d}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f00000002c0)=""/201, 0xc9}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000540)=""/173, 0xad}], 0x7, &(0x7f0000000680)=""/63, 0x3f}}, {{&(0x7f00000006c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000840)=""/13, 0xd}, {&(0x7f0000000880)=""/34, 0x22}], 0x3, &(0x7f00000009c0)=""/178, 0xb2}, 0x1}, {{&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b00)=""/217, 0xd9}, {&(0x7f0000000c00)=""/249, 0xf9}, {&(0x7f0000000900)=""/31, 0x1f}], 0x3, &(0x7f0000000d40)=""/17, 0x11}, 0x7fff}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/36, 0x24}, {&(0x7f0000001dc0)=""/148, 0x94}, {&(0x7f0000001e80)=""/67, 0x43}, {&(0x7f0000001f00)=""/161, 0xa1}, {&(0x7f0000001fc0)=""/201, 0xc9}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/141, 0x8d}, {&(0x7f0000003180)=""/179, 0xb3}], 0x9, &(0x7f0000003300)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000004300)=""/233, 0xe9}, {&(0x7f0000004400)=""/198, 0xc6}, {&(0x7f0000004500)=""/87, 0x57}, {&(0x7f0000004580)=""/89, 0x59}, {&(0x7f0000004600)=""/22, 0x16}], 0x5, &(0x7f00000046c0)=""/2, 0x2}, 0x7}, {{&(0x7f0000004700)=@x25, 0x80, &(0x7f0000004900)=[{&(0x7f0000004780)=""/154, 0x9a}, {&(0x7f0000004840)=""/186, 0xba}], 0x2, &(0x7f0000004940)=""/211, 0xd3}, 0x4}], 0x6, 0x100, &(0x7f0000004c00)={r4, r5+60000000}) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004c40), 0x200002, 0x0) (async) getsockname$packet(r3, &(0x7f0000004c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004cc0)=0x14) (async) fallocate(r2, 0x0, 0x0, 0x4103fe) (async) clock_gettime(0x0, &(0x7f0000004bc0)) (async) recvmmsg(r2, &(0x7f0000004a40)=[{{&(0x7f0000000040)=@pppol2tpin6, 0x80, &(0x7f0000000600)=[{&(0x7f0000000140)=""/93, 0x5d}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f00000002c0)=""/201, 0xc9}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000540)=""/173, 0xad}], 0x7, &(0x7f0000000680)=""/63, 0x3f}}, {{&(0x7f00000006c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000840)=""/13, 0xd}, {&(0x7f0000000880)=""/34, 0x22}], 0x3, &(0x7f00000009c0)=""/178, 0xb2}, 0x1}, {{&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b00)=""/217, 0xd9}, {&(0x7f0000000c00)=""/249, 0xf9}, {&(0x7f0000000900)=""/31, 0x1f}], 0x3, &(0x7f0000000d40)=""/17, 0x11}, 0x7fff}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/36, 0x24}, {&(0x7f0000001dc0)=""/148, 0x94}, {&(0x7f0000001e80)=""/67, 0x43}, {&(0x7f0000001f00)=""/161, 0xa1}, {&(0x7f0000001fc0)=""/201, 0xc9}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/141, 0x8d}, {&(0x7f0000003180)=""/179, 0xb3}], 0x9, &(0x7f0000003300)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000004300)=""/233, 0xe9}, {&(0x7f0000004400)=""/198, 0xc6}, {&(0x7f0000004500)=""/87, 0x57}, {&(0x7f0000004580)=""/89, 0x59}, {&(0x7f0000004600)=""/22, 0x16}], 0x5, &(0x7f00000046c0)=""/2, 0x2}, 0x7}, {{&(0x7f0000004700)=@x25, 0x80, &(0x7f0000004900)=[{&(0x7f0000004780)=""/154, 0x9a}, {&(0x7f0000004840)=""/186, 0xba}], 0x2, &(0x7f0000004940)=""/211, 0xd3}, 0x4}], 0x6, 0x100, &(0x7f0000004c00)={r4, r5+60000000}) (async) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) 23:16:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7a00}}], {0x14}}, 0x5c}}, 0x0) [ 708.314834][ T9348] Bluetooth: hci6: Frame reassembly failed (-84) [ 708.322335][T20351] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:10 executing program 4: socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000540), 0x8) [ 708.359027][ T9348] Bluetooth: hci6: Frame reassembly failed (-84) [ 708.371248][T20351] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:16:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x10}}, 0x5c}}, 0x0) 23:16:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:12 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x2, 0x8004) 23:16:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x30f242, 0x0) accept$alg(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:12 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000001680), 0xffffffffffffffff) 23:16:12 executing program 4: bpf$PROG_LOAD(0x2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 710.344460][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 710.344549][ T3641] Bluetooth: hci6: command 0x1003 tx timeout 23:16:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x28}}, 0x5c}}, 0x0) 23:16:12 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000002900), 0xffffffffffffffff) 23:16:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x5c}}, 0x5c}}, 0x0) 23:16:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x30f242, 0x0) accept$alg(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) [ 710.457654][ T3648] Bluetooth: hci6: sending frame failed (-49) [ 710.463852][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -49 23:16:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:16:13 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) 23:16:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x30f242, 0x0) accept$alg(r1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x30f242, 0x0) (async) accept$alg(r1, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) 23:16:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0xc5aac010b5dbbf77, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 23:16:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x10}}, 0x5c}}, 0x0) 23:16:13 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x6000000}]}}, &(0x7f0000001100)=""/195, 0x2a, 0xc3, 0x1}, 0x20) 23:16:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x2}}, 0x5c}}, 0x0) 23:16:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100}, 0x14}}, 0xc000) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, 0x0, 0x20000001) 23:16:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="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", 0x1000) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x3}}, 0x5c}}, 0x0) [ 710.584878][ T9348] Bluetooth: hci6: Frame reassembly failed (-84) [ 710.598071][T20415] Bluetooth: hci6: Frame reassembly failed (-84) [ 710.618567][T20415] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x3) 23:16:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001080)={{0x10, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001100)=""/195, 0x1a, 0xc3, 0x1}, 0x20) 23:16:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000080)=""/153, 0x28, 0x99, 0x1}, 0x20) 23:16:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x7}}, 0x5c}}, 0x0) 23:16:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async, rerun: 64) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="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", 0x1000) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x11}]}}, &(0x7f0000001100)=""/195, 0x2a, 0xc3, 0x1}, 0x20) [ 712.664473][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:16:15 executing program 4: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001680), 0xffffffffffffffff) 23:16:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x8}}, 0x5c}}, 0x0) 23:16:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="0cee", 0x2}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000240), 0x80, &(0x7f0000001600)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f00000002c0)=""/19, 0x13}], 0x2, &(0x7f0000001680)=""/198, 0xc6}, 0x12040) [ 712.712983][ T5935] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, &(0x7f0000000540)="115970e81dc3e87252a3af439503480113594635c5716e99a19aa8227433f374908e89af691676e0a8f5b143724ec32c3dc031c040a2c1b358931d691be790256301e7e80f4ef4db2af93ab7099dacf5a6ac40b4f50655cf78c11e7d9ada702ef1e433d8de749fd5cbe7e7321128fe26af75d4c7f9b68256119fab366b8f1d30238decc427a7680be68e71d1e0", 0x8d, 0x0, 0x0, 0x3) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/140, 0x8c}], 0x1}, 0x2) 23:16:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x3) (rerun: 32) 23:16:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0xa}}, 0x5c}}, 0x0) 23:16:17 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1c) sendto$inet6(r0, &(0x7f0000001580)="0e", 0x1, 0x10c, 0x0, 0x0) 23:16:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:17 executing program 4: mknod(&(0x7f0000000000)='./file0\x00', 0x1300, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x184) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) ioctl$KDDISABIO(r0, 0x20004b3d) 23:16:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async, rerun: 64) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="0d575b86d2b6337e7b8be35a97952a19bd4a534f8d2bb96b05f1cb836a2896c9ad08bb6e5e2acb5288fb41ada21dfc44e15a6f232273e4a67fa0a573b722f662b5e5915ffdff56af34646936f2ecfc0d4d314261e3ebdc00eea2236324e4ce0455c2cadf7427358432754b6bc8a5c6b647e4f8faa4212d59f5e7eb9de6b5b14c661cb11b97b14dff3bbd8107aaf8f14b2a5e0a814455a9fd0258cb788b9e498de4e6e1c73d4c6856f1cfec2369bc90a2296eec79bd3d1d731d053aeaa357b4841e3a87e436c91bd75fdc7693d3212313e2eab02b822533a250c37d95ea1b1f1a3427a992f39d85f1e732d7abff75407bc93a0bccb123ae9ec1ba7fe70a88b777f4898393b507ffc984fe0e921b60b6789ae9215e50cedf45596457a667fb955fc607a4ab8eb9490113c40ce622a649dcb7b211968833387722abab9963553123a7aa748b8c8bbd096d43d4ee4c1f4def2039045b96941102c8573fbc9977a9965858ea183108177b9424556714b085066b1e3465e41208c333d228accebef0ccc47aead0647fecc743f53db2436c0d0d58bf2e8d3214b531020882c0809af2d39031a7ef7a95f09fe9bc0725d85e778cf0a0ada7ba2a432c3bd49c18c73104311201fe379292f3969f85af79a56ee0d380592f6ddc82aafcbaa4f0846ec62746d3097cffcc5f40d161aa39d668ca7cacaceecbf7445ed53a1206882eaa5f2f6a9a70470690c136e90a6e351d17434a6ac36f20fb890bfc89b099b7fd27de96f77ed1e29fa59febc62b5620964e6e62f838e10cd83cf0cfaa2c79f8d54fe3c0b9b4e1bf0ea55c97a8ebb7c3fc8ced03a71ff59106f9d2a93efd97e9554702725b477cbfd612ca138c8eabb1d751c49066e1aba77843eb741d6d60a7bf90ab7a320e278d9290af6491be757fcac9ca03d127339d0c4349256b67e968f5d539cfc3f2ea1e2c8d88c4ea956c3f74ac7ca83f05d3928bda5695de410d202c09a662cc4fbb7f22cef0ae75a1874064be8de84b160afca259c0ece97d8a23962f57ba47ef3175c61f2982e5b93cab9a7c601152a5de8bc055755c42292d22c574b15860938db50943adb5c60afe29f1eb3b0158d887ea0444ae3554ee4559d975ccc868a54b5356c5a5e35c66272c8a1f4bf279e22ffd64c5d9413c89a9ec0ab16d88961fe2730076c1e1b7dd0325f74a8f5e89f4bfad713254fb59636b9fcd844364f731a288460ef99c2e3d0c2905b6fe7b0c4469da0fa5f20f6cf0e55119d2e724576e855635328cec87e17947c966d98831e520bd15c6c827873c6a0ee31ffaedaa7b9cbf2998005292af3cd7b5142229f0fcf645b5c09e8b8c41d528d9eb56130097f0ebc493f2d22a03967434dc8eacceeb83216434d7b4e148c9340f23ae5aadc500db602145882fdfbb3d66023c6513061ebfa7dbd55b84ed3bfc2b356f34a2834ccd0556451546ff3052fa24eb3e48004135703387daf09ba617f123ef6c1359d6be7d973744d4d99dbefe47559f48c1d4b830d96fa19e0056ab9b504691c5835e2fc9c405aaa3e6c38054d52d1a3484ead9b85f4bfcf3bd6532d0577af9f9fa3cc63d32693e06c89889b610ceae2866519e12520b824cc7f50a51e34df6f9de27087faf91b83bc2117ca08734df5d387b5e932501371801da4e96ac26933c12a42f63725e70123f00669bd022a20d9f0ca2b8fc413f502a99921fb8867e706cbccd587fd42b1937f3ac799d7bbcf4ab3f682eaf08103f8aaa5604e056c1bbf57816b11498687357c794fdd9267f81e1630c1fa947b1ef1848b012a0d20057fd254b4c309fbff1f12dafa9a8ddae397516d7a85cec2456531f5c5ba087b88e0480630361e1fd7b78db0bd67f0b3b831e5679173d8421c15ffc33ed56029d8f79379bd8595b555bdaacf028fb629837a30f1f843f2048d4d00889f5062d8eaec23af31d66151206f2e6561e0b58d2d280e5400aec68bd2c4b2172fe83d9375373baa764b73567e874f37f299cd6c6d828db8ccd58f1cd42e5af1b2e0e0fcbff3fac7cd55406b9141c26d299250bb088fcbf1661b86db7d47edecdebde3519d3af2753b1b1986f7d5d549e481d3393c3d946cc724b8f401cff890c7e61c2d32a7a02749bbb9b90f2b9d173bcde6887a7dbb38ddd7a3b20a5de65aab3f8c7d1fb1da08da420fcda612cf0fdc435c9c3fc4e43db0cebbb2c00c619069b00bbde462960db6b9a2f1627edc85439ea4d56a31226e498db15c34545acea2f84d9b90183f9b69b5dc5b4007d9d63362abb15a4ad39de77adb5e04397d7d8269730051c83711475ca546647052303ade145768ff0f7aa27a54006adad0ad87a0e776c2ca93f62d842303d96ca0a20ba542221f9282cea80d459d3683e1f8fd0702e9b4a3658a450d30394b3066504f15c28444fea1964db2051fa767a4ff629131f04abc4c2fd49cbf673806d0795deba8d5e80244e3aa5bc34e5367268a58295142d71eae1c67b0404ca032d7b2994b3401f0ca6d9959a9df2b492cc076720e371a59a4b0b17003beb4e5fa544007bd69ad47007c05989e65f4c04fabe10b54bb4392fb91c9b5be016d563f47393a416bdb08a85928e8a74aa6ea0d243cc3490ac084b1b29d7f93143881a0cd9aac456045b9a64901860e20fb5cd482daf03092b1212c9f8850f176ca6d1704681800446697a335a197161efaaba67627ea43599d37a0f53fb0b08a2bb7e89b9e0578649fb8a822356a05c63f29c93fef776bcf1b19b30c30444dc29b5ae142f488b3308653f5956dce4711bd865bc8f5a0a1eead7068add37caf03257ec5dd16e0281e6f2859004cdeab18823bea1df0518b7f1e1d13accb2f2db241c5a2af29142585cec564c76af1f6dd146afb249a937a47e405fb822aeeaa15607d1b89ea18d2c94f9a25a626ccf6df3bfcc3e7230dfb1f06e84975b710a2255dca95999062ee9de771376858fe7ea2032d4ed00f2f466eae82a8dfa2d4a26049c28724600ab9d1753e4ffa906523451e86680b78da28c2700783bf135395dbc70e2bd45f1e5cdcc286156a50471cb436d6cea77e1813ce28d92db0ec6b4a078169782bb9b69f18b3ce6a1f4ecd620cbe7012a73e964303f4a7e8439beb46610636f39f7352231d2955fd40f3bb1f9bc6c4c85ec56e0bb3925e8b06dcca738d863dd88c03d3b509479c7fd3404dc0bf7e005f6354b7c7aed139cc4f3dc101aee1fedc8c19a593bd8ea09fd244d864cae8c5b79b9c20270f4a623aef1c7832301854d15b63a0560e8ce2a791dfdcf3b9bcc8120afc8b5ad313fbe6557ab38c5e1732cd3d450ea6d0f7092d2d2002e3f078b4e11ff1b9c42164f62f53c0193ebb523604f1695a53586f68e032294ca3cda966930da66e31d42b19fef16a9423d82b08eab8133633d61980839947b1b98a9c16aa0cdfb3d9906fce17df200e488a0a761df7d1bf83eec6d13246a993a5e0f19e9db4ff02b15fad7580f78ed1d19a9e5f4dad53840698bdaaf0e9d9aa1c31bddac9ce9fa3e4d44e55f585a1e521d9f8ddd93066d5a2724b35843cadf2d96e392ca3f076473d4240f881bf8400d7fc77569bed68cd1c5757895bf1b9339730d8bb3ecc038564bed741bcd026929b0015ca08bc245f60bd634ff798bd5389efb6741dc6fc158f037ee5908b0e8ee01938729528eb1499ba0b6d0c232425cc0e8a0150cd9ed08dc4ee1aa5f85c4db525c62b640a34174f82e6c9bd9a55c6e643265d5a9f94d392475e5afb0b10c352043ac4f08d168937817e40b015ce51736fc4fee01db61e553ace52f63ab9f9d7075531b03a7fce41b111a72660dd9ea05bb749462d17182e32616fa0d52b4bf3ffb378b2fdbfa8d4369dfd60215ca216e021065ac6778c467690415a043d6f75d33fd9bf28ecfc70b75a53b045dcce9958b0c78547588a93db4b78f660a7e80a6ad7b1486da7056fe110ab07d07ce61d867c8a0dda73bbd1010f3fdcf7ecff949d77dc5aa22e36928e14c492a08b363e61c4de28de2a2003030bfe56d45320e1002d8ef021aab12ed69ffec8d0d8df3e6e2987d5f9d0a2b37ae3c7bc49f425d4be0d669d7a63328e1c758decfac0c108adfb8db6f03a5b2699e521a8da0287f6fe97f7a8ce3ffae21f39f5eccae8048d0edc5ccffd08616c4b8d54a63ac95aaf8a92823c351c6cef4c43eb80264d9dea5fcc4641a1f433efb6a730faf67a0c5a0281bc4aaf777a708d9b41a1da11cf09ad565686695bf17cff508cfedac5808a41e90bbe7dfcbb526ff713eaa1b5f6fa11f9e9e69edcb68ce0757232d0441548a3cececf6706ec696aac8dbf9ff44dd8fbf96566376068650d56919296a24e80abe5ba27515e8a449eabf029a6a1f931527831aaea56131ae0d40a5a3495ad10374fae1e8fb3cc925e38802af4c73c9f1a2cd17f6668d8036fcf21ae5cd1a0cba5b4b5754eb6fd0a0b044fc9657d8b66ad694c2290ffc7f1655e225e038d6bc11e77f439eb5fab1889d9ecca662d8c77ad62b5cea4e3befe5104ca70fb49d82db5816175bb01922b67b88977ca509569398bf34fdb05aa21dd56e9d3ec6402b3a07b205085b943c6d67064cb40bd505f705fec4bef8309c1cee8864cc29d73d3446256d39ce28372eb401092cd2c38e04f40d919748c51f610c2fd5e949b9d0e4f43aa24565d2e779e879bd3007ef470ffed04fbe68f351edaca4d52eadbf83d9c74bc5325e034af030ac6c2ff48c93ea1b24080aedda4f0e4e00604671617dc713c375a87d6c6ca6534944027033ef5c0fec4e5671a4797edc73ef0c2ecc1a766cb754f267bc8b9140ac6f22b32ff37482fc28fe8fa87fe094ad137a6651228de79b3ee50d792560629f0c2d949bbcd95fc90d2541b62ae147820b12d871e8c952c62d7695602859e4fddab49da8836473d576b566dc51d0f3f64c37bf025436690196da30d83b6975b43d4a4ad7ca0af3e32209ae0efddbbf8293ecdc8a45ef777f8ba7bea6528fbb4d55124c72a72af913243dc0e5edef03fe65b6c17dbc382d17d1e35d16b9e3a0c43239c2285ecca95954c189a3cd51ecf72925d1cc8f6f2bc37b46350ffc2ba2c7c1774b9e59593e30b15bf175d33ff8ff9a1888fc31b27bd70be8d5a3004f808caa7ca5e0029c65b12c6374e63b73fe77764944c4bd2c49fce2bfc5383a2446b86cef510b5cd90dc31bcaf9ee0d61fb5ad6da479c3ab1cf25713ee634f26a9f96477e99fa674a11024ae3463e2733a008435688659e30d341b208620adb0e694a325886a2628b976abc94031597254bffe2a8cfaa62deb0ca2a6124367d0115ef8da410756d2aca2c2ba5d7afee914b9a95762006e8b28a3681d8045f969a798c29f6c5a3041c1ad36ad9e3ae8c63dc625d0ab0cf4dff41116ed556e29b68789b7b0abf171155f76114813eff348f513e02f879ee63657fae61b055c510355839ac34fad6c4956df0817377d12beab40793eb4e88d2a07eab69808429a38840022b6ddb160025c00d6e53adf4050d7f5575f43575c5f7d707f792355b6023edbba87d388bd4bcfd98ba4ab21625e7c91ce71aaed5e42425d3f579ce43de3d0e678aca66da8755d6d82f5f183643406b00ddb8df16c17a0d87aac850b3e57b7ce50ab38977c2ae1d229823addc89b88159576025a018cf42eb5d24518fa7d8d2bb2196d7c21ee5dbd8c9ba0aa41712ae2869f4f6320355c60911391ffd0f513058c82912dddf487b985cc28e2e40de1c859e0167ad6d57e2484aff3a0c077060b617fab23334c1d5b7c6d4b2a8b38e5ec5d2", 0x1000) (async, rerun: 64) r2 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) [ 714.744533][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:16:17 executing program 4: mprotect(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) 23:16:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x18}}, 0x5c}}, 0x0) 23:16:17 executing program 2: open$dir(&(0x7f0000000100)='./file0\x00', 0x40, 0x0) 23:16:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x64}}, 0x5c}}, 0x0) 23:16:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x181) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000240)='./file0\x00', 0x0) [ 714.833054][ T3648] Bluetooth: hci6: sending frame failed (-49) [ 714.840199][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -49 23:16:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x3) 23:16:17 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000580)) 23:16:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x112}}, 0x5c}}, 0x0) 23:16:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:17 executing program 4: socket$inet6(0xa, 0x1, 0xc8) 23:16:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) accept$alg(r2, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file1\x00', 0x42e182, 0x0) sendfile(r4, r5, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x1900, 0x0) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x2) write$bt_hci(r4, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@none}}}, 0xa) accept$alg(r2, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x300}}, 0x5c}}, 0x0) 23:16:17 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x2c0, 0x0) 23:16:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 23:16:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}}, 0x0) 23:16:17 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x1000) 23:16:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) [ 715.397955][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 715.397971][ T27] audit: type=1800 audit(1666480577.861:768): pid=20506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1159 res=0 errno=0 [ 715.470204][ T27] audit: type=1804 audit(1666480577.901:769): pid=20506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/742/file0" dev="sda1" ino=1159 res=1 errno=0 23:16:19 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1f, 0x314e, 0xff74, 0xab, 0x0, "c4946d656ae230d7"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) 23:16:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x2}}, 0x5c}}, 0x0) 23:16:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x142) 23:16:19 executing program 2: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) 23:16:19 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) (async, rerun: 64) accept$alg(r2, 0x0, 0x0) (rerun: 64) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r5 = open$dir(&(0x7f0000000080)='./file1\x00', 0x42e182, 0x0) sendfile(r4, r5, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) (async, rerun: 64) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x1900, 0x0) (rerun: 64) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x2) write$bt_hci(r4, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@none}}}, 0xa) (async, rerun: 32) accept$alg(r2, 0x0, 0x0) (async, rerun: 32) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:19 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x3b}}}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xfb, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0xd3}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x40}}}}}}}]}}, 0x0) 23:16:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) accept$alg(r2, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file1\x00', 0x42e182, 0x0) sendfile(r4, r5, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x1900, 0x0) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x2) write$bt_hci(r4, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@none}}}, 0xa) accept$alg(r2, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) sendfile(r2, r3, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) (async) accept$alg(r2, 0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file1\x00', 0x42e182, 0x0) (async) sendfile(r4, r5, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x1900, 0x0) (async) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x2) (async) write$bt_hci(r4, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@none}}}, 0xa) (async) accept$alg(r2, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) [ 716.984493][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 716.986758][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:16:19 executing program 4: chdir(&(0x7f0000000040)='./file0/file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 23:16:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x3}}, 0x5c}}, 0x0) [ 717.054391][ T27] audit: type=1800 audit(1666480579.511:770): pid=20529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1179 res=0 errno=0 23:16:19 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 23:16:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) recvmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f0000000040)=@pptp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000400)=""/53, 0x35}], 0x6, &(0x7f00000004c0)=""/93, 0x5d}, 0x3}, {{&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f0000000680)=""/88, 0x58}, {&(0x7f0000000700)=""/185, 0xb9}, {&(0x7f00000007c0)=""/181, 0xb5}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/9, 0x9}, {&(0x7f00000019c0)=""/157, 0x9d}], 0x7, &(0x7f0000001a80)=""/218, 0xda}, 0x80000000}], 0x2, 0x10000, 0x0) [ 717.111613][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) [ 717.125874][T20533] Bluetooth: hci6: Frame reassembly failed (-84) [ 717.139851][T20533] Bluetooth: hci6: Frame reassembly failed (-84) [ 717.151466][ T27] audit: type=1804 audit(1666480579.511:771): pid=20529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/744/file0" dev="sda1" ino=1179 res=1 errno=0 [ 717.344415][ T3685] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 717.584468][ T3685] usb 3-1: Using ep0 maxpacket: 32 [ 717.704713][ T3685] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.715813][ T3685] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.725630][ T3685] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 717.735414][ T3685] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 717.745185][ T3685] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 717.754959][ T3685] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 717.924576][ T3685] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.933628][ T3685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.943316][ T3685] usb 3-1: Product: syz [ 717.947527][ T3685] usb 3-1: Manufacturer: syz [ 717.952112][ T3685] usb 3-1: SerialNumber: syz [ 718.196519][T20531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.205130][T20531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.234742][ T3685] cdc_ncm 3-1:1.0: bind() failure [ 718.241256][ T3685] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 718.248135][ T3685] cdc_ncm 3-1:1.1: bind() failure [ 718.255039][ T3685] usb 3-1: USB disconnect, device number 55 23:16:21 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1f, 0x314e, 0xff74, 0xab, 0x0, "c4946d656ae230d7"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) 23:16:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x4}}, 0x5c}}, 0x0) 23:16:21 executing program 4: syz_open_dev$evdev(&(0x7f0000001640), 0x0, 0x41) 23:16:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) recvmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f0000000040)=@pptp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000400)=""/53, 0x35}], 0x6, &(0x7f00000004c0)=""/93, 0x5d}, 0x3}, {{&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f0000000680)=""/88, 0x58}, {&(0x7f0000000700)=""/185, 0xb9}, {&(0x7f00000007c0)=""/181, 0xb5}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/9, 0x9}, {&(0x7f00000019c0)=""/157, 0x9d}], 0x7, &(0x7f0000001a80)=""/218, 0xda}, 0x80000000}], 0x2, 0x10000, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) recvmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f0000000040)=@pptp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000400)=""/53, 0x35}], 0x6, &(0x7f00000004c0)=""/93, 0x5d}, 0x3}, {{&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f0000000680)=""/88, 0x58}, {&(0x7f0000000700)=""/185, 0xb9}, {&(0x7f00000007c0)=""/181, 0xb5}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/9, 0x9}, {&(0x7f00000019c0)=""/157, 0x9d}], 0x7, &(0x7f0000001a80)=""/218, 0xda}, 0x80000000}], 0x2, 0x10000, 0x0) (async) 23:16:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:21 executing program 2: syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5, 0x24, 0x4, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x1c, &(0x7f0000000180)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}) [ 719.144445][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 719.144524][ T3648] Bluetooth: hci6: command 0x1003 tx timeout 23:16:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x5}}, 0x5c}}, 0x0) 23:16:21 executing program 4: syz_usb_connect$uac1(0x6, 0xf5, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x8, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x2}, [@mixer_unit={0x9, 0x24, 0x4, 0x5, 0x9, "678f8e06"}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x3, 0x5, "3a051e08dc9e"}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x8, "73e2"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x5, 0x6, [0x5, 0x9, 0xa, 0x5c86887dff6da56c, 0x4, 0x9], 0x2}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x4, 0x4, 0x5, 0x2, 0xa, 0x9], 0xf3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xef, 0x1, 0x19, 0x80, "82"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x20, 0x3, 0x0, 0x6, "75ebf2", "e5"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x3, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x0, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1f, 0x7, 0x81, {0xfffffffffffffca8, 0x25, 0x1, 0x83, 0xb0, 0x73ee}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8000, 0x800, 0x4, "2df3d6"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8000, 0x9, 'Io'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x2, 0x8, 0x20}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x87, 0x1, {0x7, 0x25, 0x1, 0x0, 0x4}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x20, 0x1f, 0x1, 0x10, 0x2}, 0x40, &(0x7f0000000180)={0x5, 0xf, 0x40, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x7, 0xff00, 0x1f, [0xc000, 0x0, 0x0, 0x5f, 0xc0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "ef190a381031c6c24908c96f18076191"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x446}}, {0x72, &(0x7f0000000240)=@string={0x72, 0x3, "1b382f94f8c7ed6ce032ca8afa8b5c71d84d816eac46414883654b0b8d20fa7ff2a3b1b31771d1c43dd92b378a5645631b0b18bfe492019db9ec5375fbed93f4254f4b2cb65340312a8243368d39bb1b67a917f50a1fa57124b6d9558c173ba0a1e2d529ee80b460d387efff4b930b1b"}}]}) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x1, 0x301003) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000008c0)=""/36) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xb0, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x6ef}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x0, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x61, 0x7, 0x3f}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x3, 0x1, 0x4, 0x8, 0x1}, 0x39, &(0x7f00000000c0)={0x5, 0xf, 0x39, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x85, 0x0, 0x100}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x9, 0xd3, 0x58}, @ss_container_id={0x14, 0x10, 0x4, 0xe0, "474e3992f83741bcbe6bc09983f83892"}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x9, 0xf0f, 0x2}]}}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8804, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x8b6}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x37, 0x1f}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x8, 0x2, 0x3, 0xff, 0x79}, 0x41, &(0x7f0000000480)={0x5, 0xf, 0x41, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x3f, 0x2, 0x80, 0xf, 0x419d, [0xff3f3f, 0xffc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f8539182628e1495e205a03f413fe02e"}, @ssp_cap={0x14, 0x10, 0xa, 0x54, 0x2, 0x2, 0x0, 0x2, [0xff00c0, 0xff3f30]}]}, 0x7, [{0xaa, &(0x7f0000000500)=@string={0xaa, 0x3, "2d27d3f29134cc4d9d9b668ea2274b691a0fc0f2dd5afdcf2f3120187e3c7276fb5f36b6a55d9de3993bc62eaaeaf8f5a6a5c0bedb6a7d858e1ff33022bc7a77e9c36802e8cee53d79cee9b439b3844850ad9ec452ff6a7aacd961522b7069ebd4c50bedc0217023f5bf2de284712a54e396251f4049c31d04d68b61708b98519b531d31e6604513c384afab67242c1313b71d6b16e534429604d3841e3967c4475fb657ab0539ff"}}, {0xe0, &(0x7f00000005c0)=@string={0xe0, 0x3, "3fdfad679d7ca69e26e3191a977827e8c44eb224b7bb9089cc8644f48f864029c79da4f54c50462c729e8ad419446da90e2ea12b34c047af1441687029ea466b650f750aafb739f44868b8761cccecf4a1968513b74b6a68f4afe5d2535af1cb46e37c74b7710912ccf1a2ccc4e403d6f060dd6151507cb1481b97522869b2a690eb844054637b71370581774e8f01b82b953b37d65f2f2c4ba5b1a05fcb2a26a55287d0c783d066305a538dba569a6f2829ba2c9ffe4343c62a4465903a53af1a5ed876162250525799da33770a80658e250472978ba5c8015b5f73eecf"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x1b, &(0x7f0000000700)=@string={0x1b, 0x3, "e971ec1152905f811dd27bbbd66594e831a65026a20bdcf289"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4}}]}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)) [ 719.199142][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 719.206004][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 23:16:21 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) (async, rerun: 32) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x1f, 0x314e, 0xff74, 0xab, 0x0, "c4946d656ae230d7"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) 23:16:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) recvmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f0000000040)=@pptp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000400)=""/53, 0x35}], 0x6, &(0x7f00000004c0)=""/93, 0x5d}, 0x3}, {{&(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f0000000680)=""/88, 0x58}, {&(0x7f0000000700)=""/185, 0xb9}, {&(0x7f00000007c0)=""/181, 0xb5}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/9, 0x9}, {&(0x7f00000019c0)=""/157, 0x9d}], 0x7, &(0x7f0000001a80)=""/218, 0xda}, 0x80000000}], 0x2, 0x10000, 0x0) 23:16:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x6}}, 0x5c}}, 0x0) 23:16:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x7}}, 0x5c}}, 0x0) 23:16:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x8}}, 0x5c}}, 0x0) 23:16:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x302200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:16:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x9}}, 0x5c}}, 0x0) [ 719.340483][T20582] ptm ptm19: ldisc open failed (-12), clearing slot 19 23:16:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x302200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) [ 719.485084][T19869] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 719.544588][ T3685] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 719.794454][ T3685] usb 5-1: Using ep0 maxpacket: 8 [ 719.964497][T19869] usb 3-1: config 1 has an invalid interface number: 5 but max is 2 [ 719.972664][T19869] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.983139][T19869] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 719.992376][T19869] usb 3-1: config 1 has no interface number 1 [ 719.994620][ T3685] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 23:16:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) [ 719.998901][T19869] usb 3-1: config 1 interface 5 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 720.024242][ T3685] usb 5-1: config 1 interface 0 has no altsetting 0 [ 720.185955][ T3685] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.40 [ 720.196738][ T3685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.204542][T19869] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 720.205064][ T3685] usb 5-1: Product: syz [ 720.213712][T19869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.213732][T19869] usb 3-1: Product: syz [ 720.213743][T19869] usb 3-1: Manufacturer: syz [ 720.213754][T19869] usb 3-1: SerialNumber: syz [ 720.239461][ T3685] usb 5-1: Manufacturer: syz [ 720.244037][ T3685] usb 5-1: SerialNumber: syz [ 720.485492][T20576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.494049][T20576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.564591][T19869] usb 3-1: 0:2 : does not exist [ 720.587791][T19869] usb 3-1: USB disconnect, device number 56 [ 720.664527][ T3685] usbhid 5-1:1.0: can't add hid device: -71 [ 720.670501][ T3685] usbhid: probe of 5-1:1.0 failed with error -71 [ 720.682521][ T3685] usb 5-1: USB disconnect, device number 6 23:16:23 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:16:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xa}}, 0x5c}}, 0x0) 23:16:23 executing program 4: syz_usb_connect$uac1(0x6, 0xf5, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x8, 0x0, 0x16, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x2}, [@mixer_unit={0x9, 0x24, 0x4, 0x5, 0x9, "678f8e06"}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x3, 0x5, "3a051e08dc9e"}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x8, "73e2"}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x5, 0x6, [0x5, 0x9, 0xa, 0x5c86887dff6da56c, 0x4, 0x9], 0x2}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x4, 0x4, 0x5, 0x2, 0xa, 0x9], 0xf3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xef, 0x1, 0x19, 0x80, "82"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x20, 0x3, 0x0, 0x6, "75ebf2", "e5"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x3, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x1f, 0x0, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1f, 0x7, 0x81, {0xfffffffffffffca8, 0x25, 0x1, 0x83, 0xb0, 0x73ee}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8000, 0x800, 0x4, "2df3d6"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x8000, 0x9, 'Io'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x2, 0x8, 0x20}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x87, 0x1, {0x7, 0x25, 0x1, 0x0, 0x4}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x20, 0x1f, 0x1, 0x10, 0x2}, 0x40, &(0x7f0000000180)={0x5, 0xf, 0x40, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x7, 0xff00, 0x1f, [0xc000, 0x0, 0x0, 0x5f, 0xc0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "ef190a381031c6c24908c96f18076191"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x446}}, {0x72, &(0x7f0000000240)=@string={0x72, 0x3, "1b382f94f8c7ed6ce032ca8afa8b5c71d84d816eac46414883654b0b8d20fa7ff2a3b1b31771d1c43dd92b378a5645631b0b18bfe492019db9ec5375fbed93f4254f4b2cb65340312a8243368d39bb1b67a917f50a1fa57124b6d9558c173ba0a1e2d529ee80b460d387efff4b930b1b"}}]}) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x1, 0x301003) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000008c0)=""/36) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xb0, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x6ef}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x0, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x61, 0x7, 0x3f}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x3, 0x1, 0x4, 0x8, 0x1}, 0x39, &(0x7f00000000c0)={0x5, 0xf, 0x39, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x85, 0x0, 0x100}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x9, 0xd3, 0x58}, @ss_container_id={0x14, 0x10, 0x4, 0xe0, "474e3992f83741bcbe6bc09983f83892"}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x9, 0xf0f, 0x2}]}}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8804, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x8b6}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x37, 0x1f}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x8, 0x2, 0x3, 0xff, 0x79}, 0x41, &(0x7f0000000480)={0x5, 0xf, 0x41, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x3f, 0x2, 0x80, 0xf, 0x419d, [0xff3f3f, 0xffc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f8539182628e1495e205a03f413fe02e"}, @ssp_cap={0x14, 0x10, 0xa, 0x54, 0x2, 0x2, 0x0, 0x2, [0xff00c0, 0xff3f30]}]}, 0x7, [{0xaa, &(0x7f0000000500)=@string={0xaa, 0x3, "2d27d3f29134cc4d9d9b668ea2274b691a0fc0f2dd5afdcf2f3120187e3c7276fb5f36b6a55d9de3993bc62eaaeaf8f5a6a5c0bedb6a7d858e1ff33022bc7a77e9c36802e8cee53d79cee9b439b3844850ad9ec452ff6a7aacd961522b7069ebd4c50bedc0217023f5bf2de284712a54e396251f4049c31d04d68b61708b98519b531d31e6604513c384afab67242c1313b71d6b16e534429604d3841e3967c4475fb657ab0539ff"}}, {0xe0, &(0x7f00000005c0)=@string={0xe0, 0x3, "3fdfad679d7ca69e26e3191a977827e8c44eb224b7bb9089cc8644f48f864029c79da4f54c50462c729e8ad419446da90e2ea12b34c047af1441687029ea466b650f750aafb739f44868b8761cccecf4a1968513b74b6a68f4afe5d2535af1cb46e37c74b7710912ccf1a2ccc4e403d6f060dd6151507cb1481b97522869b2a690eb844054637b71370581774e8f01b82b953b37d65f2f2c4ba5b1a05fcb2a26a55287d0c783d066305a538dba569a6f2829ba2c9ffe4343c62a4465903a53af1a5ed876162250525799da33770a80658e250472978ba5c8015b5f73eecf"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x1b, &(0x7f0000000700)=@string={0x1b, 0x3, "e971ec1152905f811dd27bbbd66594e831a65026a20bdcf289"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4}}]}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)) 23:16:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x302200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:16:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) 23:16:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x1f, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) 23:16:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xb}}, 0x5c}}, 0x0) 23:16:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (rerun: 32) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x1f, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) 23:16:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42201, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x6, 0x6, 0x0, 0x4, 0x17, "064e58f6c4a84859"}) 23:16:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xc}}, 0x5c}}, 0x0) 23:16:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x1f, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (async) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x1f, 0x0, 0x0, 0x0) (async) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) (async) [ 721.087167][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 721.093384][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 721.100553][T20625] Bluetooth: hci6: Frame reassembly failed (-84) [ 721.107910][ T27] audit: type=1800 audit(1666480583.571:772): pid=20625 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1184 res=0 errno=0 23:16:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1c8c1, 0x0) accept$alg(r2, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4103fe) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x22100, 0x0) pidfd_getfd(r3, r5, 0x0) recvmsg(r4, &(0x7f0000000740)={&(0x7f0000000140)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/154, 0x9a}, {&(0x7f0000000500)=""/64, 0x40}, {&(0x7f0000000540)=""/133, 0x85}, {&(0x7f0000000600)=""/53, 0x35}], 0xa, &(0x7f0000000700)}, 0x40000000) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x71c0, 0xc779, 0x20, 0x10000000, 0x3, 0x7, 0x8, 0x80000000, 0xfff], 0x9}) [ 721.131080][ T27] audit: type=1804 audit(1666480583.571:773): pid=20625 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/757/file0" dev="sda1" ino=1184 res=1 errno=0 [ 721.212530][ T27] audit: type=1800 audit(1666480583.671:774): pid=20638 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1159 res=0 errno=0 [ 721.243752][ T27] audit: type=1804 audit(1666480583.671:775): pid=20638 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/751/file0" dev="sda1" ino=1159 res=1 errno=0 [ 721.276441][T19869] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 721.305604][ T3685] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 721.545533][ T3685] usb 5-1: Using ep0 maxpacket: 8 [ 721.674508][T19869] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 721.683257][T19869] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 721.693760][T19869] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.744990][ T3685] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 721.758069][ T3685] usb 5-1: config 1 interface 0 has no altsetting 0 [ 721.904876][T19869] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.914053][T19869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.922384][T19869] usb 3-1: Product: syz [ 721.924618][ T3685] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.40 [ 721.926963][T19869] usb 3-1: Manufacturer: syz [ 721.938384][ T3685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.940493][T19869] usb 3-1: SerialNumber: syz [ 721.948383][ T3685] usb 5-1: Product: syz [ 721.959862][ T3685] usb 5-1: Manufacturer: syz [ 721.964563][ T3685] usb 5-1: SerialNumber: syz [ 722.206139][T20617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.214756][T20617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.284671][T19869] usb 3-1: 0:2 : does not exist [ 722.309349][T19869] usb 3-1: USB disconnect, device number 57 [ 722.384517][ T3685] usbhid 5-1:1.0: can't add hid device: -71 [ 722.390596][ T3685] usbhid: probe of 5-1:1.0 failed with error -71 [ 722.398904][ T3685] usb 5-1: USB disconnect, device number 7 23:16:25 executing program 2: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}, @as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:16:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xd}}, 0x5c}}, 0x0) 23:16:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0xd, 0x66, 0xffffffff, 0x8, 0x8000, 0x1ac, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 23:16:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42201, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async, rerun: 32) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async, rerun: 32) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x6, 0x6, 0x0, 0x4, 0x17, "064e58f6c4a84859"}) 23:16:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1c8c1, 0x0) accept$alg(r2, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4103fe) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x22100, 0x0) pidfd_getfd(r3, r5, 0x0) recvmsg(r4, &(0x7f0000000740)={&(0x7f0000000140)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/154, 0x9a}, {&(0x7f0000000500)=""/64, 0x40}, {&(0x7f0000000540)=""/133, 0x85}, {&(0x7f0000000600)=""/53, 0x35}], 0xa, &(0x7f0000000700)}, 0x40000000) (async) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x71c0, 0xc779, 0x20, 0x10000000, 0x3, 0x7, 0x8, 0x80000000, 0xfff], 0x9}) 23:16:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) 23:16:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xe}}, 0x5c}}, 0x0) 23:16:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1c8c1, 0x0) accept$alg(r2, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4103fe) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x22100, 0x0) pidfd_getfd(r3, r5, 0x0) (async) recvmsg(r4, &(0x7f0000000740)={&(0x7f0000000140)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/154, 0x9a}, {&(0x7f0000000500)=""/64, 0x40}, {&(0x7f0000000540)=""/133, 0x85}, {&(0x7f0000000600)=""/53, 0x35}], 0xa, &(0x7f0000000700)}, 0x40000000) (async) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x71c0, 0xc779, 0x20, 0x10000000, 0x3, 0x7, 0x8, 0x80000000, 0xfff], 0x9}) 23:16:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xf}}, 0x5c}}, 0x0) 23:16:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x10}}, 0x5c}}, 0x0) [ 722.762352][ T27] audit: type=1800 audit(1666480585.221:776): pid=20649 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1180 res=0 errno=0 [ 722.768412][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 722.789076][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 23:16:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42201, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x6, 0x6, 0x0, 0x4, 0x17, "064e58f6c4a84859"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42201, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x6, 0x6, 0x0, 0x4, 0x17, "064e58f6c4a84859"}) (async) [ 722.834327][ T27] audit: type=1800 audit(1666480585.291:777): pid=20664 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1181 res=0 errno=0 23:16:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x11}}, 0x5c}}, 0x0) [ 723.295588][ T27] audit: type=1804 audit(1666480585.301:778): pid=20667 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir564709200/syzkaller.x3tJSe/753/file0" dev="sda1" ino=1181 res=1 errno=0 [ 723.318202][T20675] Bluetooth: hci6: Frame reassembly failed (-84) [ 723.336979][ T9348] Bluetooth: hci6: Frame reassembly failed (-84) [ 723.348754][ T27] audit: type=1800 audit(1666480585.811:779): pid=20675 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1167 res=0 errno=0 [ 723.371644][ T27] audit: type=1804 audit(1666480585.811:780): pid=20675 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/759/file0" dev="sda1" ino=1167 res=1 errno=0 [ 723.400983][ T27] audit: type=1804 audit(1666480585.811:781): pid=20675 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/759/file0" dev="sda1" ino=1167 res=1 errno=0 [ 723.464483][ T2487] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 723.824485][ T2487] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 723.833634][ T2487] usb 3-1: config 1 has no interface number 1 [ 723.840039][ T2487] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 723.849213][ T2487] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 723.860190][ T2487] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 724.024506][ T2487] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 724.033607][ T2487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.043422][ T2487] usb 3-1: Product: syz [ 724.047647][ T2487] usb 3-1: Manufacturer: syz [ 724.052244][ T2487] usb 3-1: SerialNumber: syz [ 724.401288][ T2487] usb 3-1: USB disconnect, device number 58 23:16:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xe) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x34, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000050) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000500010007000000050005000a0000004d000300686173683a6e6574000000000900020073797a32000000000c00078008001340000000000504204cbb180400e9737698ce"], 0x54}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="88000000030801040000000000000000070000060c0004800800014000000009050003000000003c00048008000140000000b9080002400000000308000140000080000800014000000006080002e3db27eebddef8f76901b9b675400000000008000140000003f50800024000006486040004800900010073797a31000000000900010075797a3100"/149], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r3, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2404c7fc, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000000900)=""/4105, 0xdc2c}], 0x1, &(0x7f0000000200)=""/20, 0x3}, 0x100) bind$inet(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r2, 0x0, 0xffffffffffff8000}) sendmsg$NFT_MSG_GETFLOWTABLE(r5, 0x0, 0x40) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC=r4, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC], 0x100000530) 23:16:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x12}}, 0x5c}}, 0x0) 23:16:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0xd, 0x66, 0xffffffff, 0x8, 0x8000, 0x1ac, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 23:16:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x14}}, 0x5c}}, 0x0) 23:16:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x16}}, 0x5c}}, 0x0) [ 724.927915][T20706] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 23:16:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x18}}, 0x5c}}, 0x0) [ 725.265132][T20714] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. 23:16:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x19}}, 0x5c}}, 0x0) 23:16:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x9) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0xbc, 0x6, 0xb8c6, 0x3, "08d601d36373d17c0f06b50f7bca574bbb1a46"}) syz_open_pts(r0, 0x151080) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x7, 0x400, 0x80000001, 0xfffffeff, 0x38, "aa7862ed273b2893d9cc6a492d2d1730386201", 0x0, 0x100}) 23:16:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f2131650f792c2b66f0205eac3ef78c920800000000000000c744240067000000c744240202000000c7442406000000000f01142466b81d018ec80f01c2c4e26d2c6a00670f01360000b9800000c00f3235004000000f30", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:16:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x28}}, 0x5c}}, 0x0) 23:16:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x48}}, 0x5c}}, 0x0) [ 725.384435][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 725.384910][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:16:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x4c}}, 0x5c}}, 0x0) [ 725.487705][T20727] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0xd, 0x66, 0xffffffff, 0x8, 0x8000, 0x1ac, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 23:16:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x60}}, 0x5c}}, 0x0) 23:16:28 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) 23:16:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x68}}, 0x5c}}, 0x0) 23:16:28 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x44}}, 0x0) 23:16:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x9) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0xbc, 0x6, 0xb8c6, 0x3, "08d601d36373d17c0f06b50f7bca574bbb1a46"}) syz_open_pts(r0, 0x151080) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x7, 0x400, 0x80000001, 0xfffffeff, 0x38, "aa7862ed273b2893d9cc6a492d2d1730386201", 0x0, 0x100}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KDADDIO(r0, 0x4b34, 0x9) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0xbc, 0x6, 0xb8c6, 0x3, "08d601d36373d17c0f06b50f7bca574bbb1a46"}) (async) syz_open_pts(r0, 0x151080) (async) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) pipe2$watch_queue(&(0x7f0000000100), 0x80) (async) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x7, 0x400, 0x80000001, 0xfffffeff, 0x38, "aa7862ed273b2893d9cc6a492d2d1730386201", 0x0, 0x100}) (async) 23:16:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="cb56b6cc17184871149d937ac6d4dba929b43c04079717fbcf2b21dd1b36f1", 0x1f) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="44afc52070e28ffcc5bb00eea6338737cff987c591d518236b3d5dcb85b3926a231441c69b61a1b3d8f88d203202ed96ba56d59488297452a1c9171863b004", 0x3f) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:30 executing program 2: syz_open_dev$evdev(&(0x7f0000001300), 0x0, 0x0) 23:16:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x6c}}, 0x5c}}, 0x0) 23:16:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0xd, 0x66, 0xffffffff, 0x8, 0x8000, 0x1ac, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) [ 727.544490][ T3655] Bluetooth: hci6: command 0x1003 tx timeout [ 727.544549][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:16:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="cb56b6cc17184871149d937ac6d4dba929b43c04079717fbcf2b21dd1b36f1", 0x1f) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="44afc52070e28ffcc5bb00eea6338737cff987c591d518236b3d5dcb85b3926a231441c69b61a1b3d8f88d203202ed96ba56d59488297452a1c9171863b004", 0x3f) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:30 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, 0x0) 23:16:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x74}}, 0x5c}}, 0x0) 23:16:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="cb56b6cc17184871149d937ac6d4dba929b43c04079717fbcf2b21dd1b36f1", 0x1f) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="44afc52070e28ffcc5bb00eea6338737cff987c591d518236b3d5dcb85b3926a231441c69b61a1b3d8f88d203202ed96ba56d59488297452a1c9171863b004", 0x3f) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) [ 727.596402][T20769] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x7a}}, 0x5c}}, 0x0) 23:16:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x7) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) [ 728.097912][ T7] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 728.354514][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 728.505241][ T7] usb 3-1: config 0 has no interfaces? [ 728.510822][ T7] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 728.520375][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.529929][ T7] usb 3-1: config 0 descriptor?? 23:16:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x9) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0xbc, 0x6, 0xb8c6, 0x3, "08d601d36373d17c0f06b50f7bca574bbb1a46"}) (async, rerun: 64) syz_open_pts(r0, 0x151080) (rerun: 64) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x7, 0x400, 0x80000001, 0xfffffeff, 0x38, "aa7862ed273b2893d9cc6a492d2d1730386201", 0x0, 0x100}) 23:16:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x300}}, 0x5c}}, 0x0) 23:16:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x7) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x7) (async) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) 23:16:32 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:32 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "041000", "15000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x4, "52d7dc7e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x4, "cb38c063"}, 0x0, 0x0, 0x0, 0x0}) 23:16:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x500}}, 0x5c}}, 0x0) [ 729.624466][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 729.624564][ T3648] Bluetooth: hci6: command 0x1003 tx timeout 23:16:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x7) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) [ 729.914458][ T3684] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 730.154471][ T3684] usb 5-1: Using ep0 maxpacket: 16 [ 730.276139][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.287087][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.296861][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 730.386508][ T3684] usb 5-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 730.395619][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 730.403769][ T3684] usb 5-1: SerialNumber: syz [ 730.409572][ T3684] usb 5-1: config 0 descriptor?? [ 730.454980][ T3684] hub 5-1:0.0: USB hub found 23:16:33 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, 0x0) 23:16:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x600}}, 0x5c}}, 0x0) 23:16:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1) 23:16:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x700}}, 0x5c}}, 0x0) [ 730.646693][ T3685] usb 3-1: USB disconnect, device number 59 [ 730.674557][ T3684] hub 5-1:0.0: 1 port detected 23:16:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x900}}, 0x5c}}, 0x0) 23:16:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000100)=0x1) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1) [ 730.694956][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 730.701131][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 23:16:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xa00}}, 0x5c}}, 0x0) [ 730.781076][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) [ 731.094510][ T3685] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 731.324466][ T3684] hub 5-1:0.0: activate --> -90 [ 731.344504][ T3685] usb 3-1: Using ep0 maxpacket: 8 [ 731.464643][ T3685] usb 3-1: config 0 has no interfaces? [ 731.470489][ T3685] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 731.480034][ T3685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.490548][ T3685] usb 3-1: config 0 descriptor?? [ 732.204477][ T3684] usb 5-1-port1: over-current condition [ 732.407439][ T3685] usb 5-1: USB disconnect, device number 8 [ 732.414798][ T3684] usb 5-1-port1: config error [ 732.824556][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 732.825138][ T3641] Bluetooth: hci6: command 0x1003 tx timeout 23:16:35 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "041000", "15000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x4, "52d7dc7e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x4, "cb38c063"}, 0x0, 0x0, 0x0, 0x0}) 23:16:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) (async) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1) 23:16:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xb00}}, 0x5c}}, 0x0) [ 733.214667][ T3685] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 733.464485][ T3685] usb 5-1: Using ep0 maxpacket: 16 [ 733.594680][ T3685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.605658][ T3685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.616231][ T3685] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 23:16:36 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, 0x0) 23:16:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xc00}}, 0x5c}}, 0x0) 23:16:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) fsmount(0xffffffffffffffff, 0x0, 0x8a) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x6d, 0x8, 0x7, 0x8, 0x91a, 0x8}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$KDDISABIO(r1, 0x4b37) syz_open_pts(r1, 0x280000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) [ 733.699740][ T3684] usb 3-1: USB disconnect, device number 60 [ 733.705996][ T3685] usb 5-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 733.739270][ T3648] Bluetooth: hci6: sending frame failed (-49) 23:16:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xd00}}, 0x5c}}, 0x0) 23:16:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xe00}}, 0x5c}}, 0x0) [ 733.740099][T20862] Bluetooth: hci6: Frame reassembly failed (-84) [ 733.752078][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 733.759079][ T3685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 733.768042][ T3685] usb 5-1: SerialNumber: syz [ 733.784078][ T3685] usb 5-1: config 0 descriptor?? 23:16:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) fsmount(0xffffffffffffffff, 0x0, 0x8a) (async, rerun: 64) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x6d, 0x8, 0x7, 0x8, 0x91a, 0x8}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$KDDISABIO(r1, 0x4b37) syz_open_pts(r1, 0x280000) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:16:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xf00}}, 0x5c}}, 0x0) [ 733.825195][ T3685] hub 5-1:0.0: USB hub found [ 733.884628][ T4090] Bluetooth: hci6: Frame reassembly failed (-84) [ 734.044476][ T3685] hub 5-1:0.0: 1 port detected [ 734.124428][ T3684] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 734.394443][ T3684] usb 3-1: Using ep0 maxpacket: 8 [ 734.534637][ T3684] usb 3-1: config 0 has no interfaces? [ 734.540262][ T3684] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 734.549417][ T3684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.563534][ T3684] usb 3-1: config 0 descriptor?? [ 734.704510][ T3685] hub 5-1:0.0: activate --> -90 [ 735.594500][ T3685] usb 5-1-port1: over-current condition [ 735.800882][ T14] usb 5-1: USB disconnect, device number 9 [ 735.814613][ T3685] usb 5-1-port1: config error [ 735.944389][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 735.950043][ T3648] Bluetooth: hci6: command 0x1003 tx timeout 23:16:38 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "041000", "15000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x4, "52d7dc7e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x4, "cb38c063"}, 0x0, 0x0, 0x0, 0x0}) 23:16:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x1100}}, 0x5c}}, 0x0) 23:16:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) accept4$alg(r0, 0x0, 0x0, 0x80800) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) [ 736.584473][ T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd 23:16:39 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, 0x0) 23:16:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) fsmount(0xffffffffffffffff, 0x0, 0x8a) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x6d, 0x8, 0x7, 0x8, 0x91a, 0x8}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$KDDISABIO(r1, 0x4b37) syz_open_pts(r1, 0x280000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:16:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x1200}}, 0x5c}}, 0x0) 23:16:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x44080, 0x0, 0x30000000000004d) 23:16:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x1400}}, 0x5c}}, 0x0) [ 736.739441][ T3685] usb 3-1: USB disconnect, device number 61 [ 736.772566][T20898] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x1600}}, 0x5c}}, 0x0) 23:16:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x1800}}, 0x5c}}, 0x0) 23:16:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x1900}}, 0x5c}}, 0x0) [ 736.792706][ T4090] Bluetooth: hci6: Frame reassembly failed (-84) [ 736.827559][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 736.954509][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.965578][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.975470][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 737.064924][ T14] usb 5-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 737.074135][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 737.082531][ T14] usb 5-1: SerialNumber: syz [ 737.088284][ T14] usb 5-1: config 0 descriptor?? [ 737.125234][ T14] hub 5-1:0.0: USB hub found [ 737.174486][ T3685] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 737.354590][ T14] hub 5-1:0.0: 1 port detected [ 737.414442][ T3685] usb 3-1: Using ep0 maxpacket: 8 [ 737.534627][ T3685] usb 3-1: config 0 has no interfaces? [ 737.540256][ T3685] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 737.549871][ T3685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.562447][ T3685] usb 3-1: config 0 descriptor?? [ 738.004603][ T14] hub 5-1:0.0: activate --> -90 [ 738.824414][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 738.884485][ T14] usb 5-1-port1: over-current condition [ 739.087230][T19864] usb 5-1: USB disconnect, device number 10 [ 739.094523][ T14] usb 5-1-port1: config error 23:16:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090018105e22060000000000e10109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000002440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "041000", "15000004"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001080)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x4, "52d7dc7e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x4, "cb38c063"}, 0x0, 0x0, 0x0, 0x0}) 23:16:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x44080, 0x0, 0x30000000000004d) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neon\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x44080, 0x0, 0x30000000000004d) (async) 23:16:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x2800}}, 0x5c}}, 0x0) 23:16:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neon\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x44080, 0x0, 0x30000000000004d) 23:16:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8001) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:16:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x3f00}}, 0x5c}}, 0x0) 23:16:42 executing program 2: syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff}}]}}}]}}]}}, 0x0) 23:16:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x8001) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:16:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x4000}}, 0x5c}}, 0x0) [ 739.769422][ T2487] usb 3-1: USB disconnect, device number 62 23:16:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x8001) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:16:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x4800}}, 0x5c}}, 0x0) [ 739.884467][ T3684] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 740.134421][ T3684] usb 5-1: Using ep0 maxpacket: 16 [ 740.194444][ T2487] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 740.254546][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.265565][ T3684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.275626][ T3684] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 740.364544][ T3684] usb 5-1: New USB device found, idVendor=225e, idProduct=0006, bcdDevice= 0.00 [ 740.373643][ T3684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=225 [ 740.383548][ T3684] usb 5-1: SerialNumber: syz [ 740.390358][ T3684] usb 5-1: config 0 descriptor?? [ 740.434601][ T2487] usb 3-1: Using ep0 maxpacket: 16 [ 740.440218][ T3684] hub 5-1:0.0: USB hub found [ 740.554601][ T2487] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 740.644563][ T3684] hub 5-1:0.0: 1 port detected [ 740.724591][ T2487] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.40 [ 740.733651][ T2487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.741691][ T2487] usb 3-1: Product: syz [ 740.745911][ T2487] usb 3-1: Manufacturer: syz [ 740.750512][ T2487] usb 3-1: SerialNumber: syz [ 740.796292][ T2487] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 741.000453][ T2487] usb 3-1: USB disconnect, device number 63 [ 741.294475][T20267] hub 5-1:0.0: activate --> -90 [ 742.174566][T20267] usb 5-1-port1: over-current condition [ 742.378948][ T14] usb 5-1: USB disconnect, device number 11 [ 742.394505][T20267] usb 5-1-port1: config error 23:16:45 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:16:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x4c00}}, 0x5c}}, 0x0) 23:16:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0xa8200, 0x5) syz_open_pts(r3, 0x60000) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x9) 23:16:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 23:16:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x8c00, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x205}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 23:16:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x6000}}, 0x5c}}, 0x0) [ 742.911184][ T27] audit: type=1800 audit(1666480605.371:782): pid=20962 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1180 res=0 errno=0 [ 742.946161][T20962] Bluetooth: hci6: Frame reassembly failed (-84) [ 742.962075][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) [ 742.966452][ T27] audit: type=1804 audit(1666480605.401:783): pid=20962 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/772/file0" dev="sda1" ino=1180 res=1 errno=0 23:16:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x6800}}, 0x5c}}, 0x0) [ 742.997840][ T27] audit: type=1804 audit(1666480605.421:784): pid=20962 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/772/file0" dev="sda1" ino=1180 res=1 errno=0 23:16:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x6c00}}, 0x5c}}, 0x0) 23:16:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x7400}}, 0x5c}}, 0x0) 23:16:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x7a00}}, 0x5c}}, 0x0) 23:16:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x1000000}}, 0x5c}}, 0x0) [ 743.174492][ T14] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 743.385288][T20969] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.392591][T20969] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.424578][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 743.547758][ T14] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 743.561175][ T14] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 743.573684][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 743.742036][T20969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.763777][T20969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.784504][ T14] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 743.797608][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.805955][ T14] usb 3-1: Product: syz [ 743.810134][ T14] usb 3-1: Manufacturer: syz [ 743.815346][ T14] usb 3-1: SerialNumber: syz [ 744.002947][T20969] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.011995][T20969] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.021665][T20969] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.032717][T20969] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.086764][T20969] device bond1 left promiscuous mode [ 744.092114][T20969] device batadv3 left promiscuous mode [ 744.111912][T20974] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 744.120230][T20974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.128041][T20974] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.136859][T20974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 744.153396][ T14] usb 3-1: 0:2 : does not exist [ 744.182834][ T14] usb 3-1: USB disconnect, device number 64 23:16:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 23:16:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x2000000}}, 0x5c}}, 0x0) 23:16:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0xa8200, 0x5) syz_open_pts(r3, 0x60000) (async) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x9) 23:16:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_getscheduler(r0) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x98, 0xb5, {{0x1a, 0x4, 0x0, 0x8, 0x68, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3b}, {[@timestamp_addr={0x44, 0x34, 0x51, 0x1, 0x6, [{@private=0xa010100, 0xfff00}, {@private=0xa010102}, {@multicast2, 0x9}, {@private=0xa010101, 0x7}, {@loopback, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @end, @noop, @rr={0x7, 0x17, 0x68, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote]}, @lsrr={0x83, 0x7, 0x1c, [@multicast1]}]}}}}}) r3 = epoll_create1(0x0) r4 = socket$packet(0x11, 0x4000000000002, 0x300) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0xa0002004}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000100)) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x0) 23:16:47 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020660b, 0x0) 23:16:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x3000000}}, 0x5c}}, 0x0) 23:16:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 23:16:47 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)={0xfffffff8}) r1 = msgget(0x1, 0x11) msgctl$IPC_RMID(r1, 0x0) [ 744.984781][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:16:47 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, 0x0) [ 745.040513][ T27] audit: type=1800 audit(1666480607.501:785): pid=21007 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1184 res=0 errno=0 23:16:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x4000000}}, 0x5c}}, 0x0) 23:16:47 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x604000, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) chdir(&(0x7f0000000180)='./file0\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) creat(&(0x7f0000005b40)='./file0\x00', 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/159, 0x9f}], 0x1) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000005ac0)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000005840), 0x0, 0x22, &(0x7f0000005b00)={r4, r5+10000000}) sendto(r3, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0xa8200, 0x5) syz_open_pts(r3, 0x60000) (async, rerun: 64) sendfile(r1, r2, 0x0, 0xffffffff054) (async, rerun: 64) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async, rerun: 32) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async, rerun: 32) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xffffffff054) (async, rerun: 64) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) (rerun: 64) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x9) 23:16:48 executing program 2: openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x105242, 0x0, 0x2}, 0x18) 23:16:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x5000000}}, 0x5c}}, 0x0) [ 745.502754][ T27] audit: type=1804 audit(1666480607.541:786): pid=21007 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/773/file0" dev="sda1" ino=1184 res=1 errno=0 [ 745.577786][ T27] audit: type=1800 audit(1666480608.011:787): pid=21021 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1181 res=0 errno=0 [ 745.610287][ T27] audit: type=1804 audit(1666480608.011:788): pid=21021 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/774/file0" dev="sda1" ino=1181 res=1 errno=0 [ 745.640022][ T27] audit: type=1804 audit(1666480608.011:789): pid=21020 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/774/file0" dev="sda1" ino=1181 res=1 errno=0 [ 745.664848][ T27] audit: type=1804 audit(1666480608.031:790): pid=21021 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/774/file0" dev="sda1" ino=1181 res=1 errno=0 [ 745.689609][ T27] audit: type=1800 audit(1666480608.041:791): pid=21030 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1180 res=0 errno=0 23:16:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:48 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000100)={'wg1\x00', @ifru_names='veth0_to_team\x00'}) 23:16:48 executing program 2: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40}, 0x18) execveat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 23:16:48 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x604000, 0x0) (async) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async, rerun: 64) chdir(&(0x7f0000000180)='./file0\x00') (rerun: 64) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async, rerun: 64) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async, rerun: 64) creat(&(0x7f0000005b40)='./file0\x00', 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) (async) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/159, 0x9f}], 0x1) (async, rerun: 64) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000005ac0)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000005840), 0x0, 0x22, &(0x7f0000005b00)={r4, r5+10000000}) sendto(r3, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) 23:16:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x844c3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:16:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x6000000}}, 0x5c}}, 0x0) 23:16:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x844c3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) (async) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:16:48 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x2, &(0x7f0000000140)) 23:16:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x7000000}}, 0x5c}}, 0x0) 23:16:48 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x604000, 0x0) r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) chdir(&(0x7f0000000180)='./file0\x00') (async) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) (async, rerun: 32) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (rerun: 32) creat(&(0x7f0000005b40)='./file0\x00', 0x8) (async, rerun: 32) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) (async, rerun: 32) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/159, 0x9f}], 0x1) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000005ac0)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000005840), 0x0, 0x22, &(0x7f0000005b00)={r4, r5+10000000}) (async, rerun: 64) sendto(r3, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (rerun: 64) 23:16:48 executing program 4: clock_getres(0x2, &(0x7f0000000140)) 23:16:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x8000000}}, 0x5c}}, 0x0) 23:16:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:49 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, 0x0, 0xeffd) 23:16:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x333e, 0x4) 23:16:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x844c3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x844c3, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) fallocate(r1, 0x0, 0x0, 0x4103fe) (async) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) 23:16:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="cb56b6cc0407c0f5facf2b02001b36f19485d1a766ef9dad77a4316625e8b50026186095ddd0c1fad96bd0a961d2f3ff858e151c6870906054999c6f5703966b6899daaf3641f04df546020000003b37e88051191e2baa5751cb45918a5d2fb98ac7f9b21c6fed13f1bd34d9ed6bde57fb78cf6199b92961add6dc3b6f30db153a7848ba049a02370e7e4b69d2bbcab001666ba0a478d9064f1daf5aa1312424a8fef16ad6a3162c09b20bdf3931bf6396baad1bcb074409f2900468444c89574d8522e177974d18b49e3e65b92d3780233829603f7ab57f612fb86c230b28d9f000000000000000075e4698fc420688d14806912a984c141aa60ba70fd18b74b57985539883e69bf851374d973f5a1882a4c47f8cfbb26f04428fb20963d699583fee1ef0bdf491b9889909245aeb1666af8390a86150fb9bc876ae629f240a7c0779dd4dd4b452ead175fdeea86980a58fa92d657a821a371370a8c289c74bed2c0fa03a575425adae82aba78a26dca56cc221b661fa81ff26117ced0ac1e13f34f95805a67a7364e50e80900ccb538d3a327172a586cf3a92f82e020735", 0x19f) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x5, 0x8, 0x4, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r4, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x1, @remote, 0xaa95}]}, &(0x7f0000000200)=0x10) 23:16:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x9000000}}, 0x5c}}, 0x0) 23:16:49 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) fcntl$setownex(r0, 0xf, 0x0) 23:16:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xa000000}}, 0x5c}}, 0x0) 23:16:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="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", 0x19f) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x5, 0x8, 0x4, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r4, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x1, @remote, 0xaa95}]}, &(0x7f0000000200)=0x10) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) fallocate(r1, 0x0, 0x0, 0x4103fe) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="cb56b6cc0407c0f5facf2b02001b36f19485d1a766ef9dad77a4316625e8b50026186095ddd0c1fad96bd0a961d2f3ff858e151c6870906054999c6f5703966b6899daaf3641f04df546020000003b37e88051191e2baa5751cb45918a5d2fb98ac7f9b21c6fed13f1bd34d9ed6bde57fb78cf6199b92961add6dc3b6f30db153a7848ba049a02370e7e4b69d2bbcab001666ba0a478d9064f1daf5aa1312424a8fef16ad6a3162c09b20bdf3931bf6396baad1bcb074409f2900468444c89574d8522e177974d18b49e3e65b92d3780233829603f7ab57f612fb86c230b28d9f000000000000000075e4698fc420688d14806912a984c141aa60ba70fd18b74b57985539883e69bf851374d973f5a1882a4c47f8cfbb26f04428fb20963d699583fee1ef0bdf491b9889909245aeb1666af8390a86150fb9bc876ae629f240a7c0779dd4dd4b452ead175fdeea86980a58fa92d657a821a371370a8c289c74bed2c0fa03a575425adae82aba78a26dca56cc221b661fa81ff26117ced0ac1e13f34f95805a67a7364e50e80900ccb538d3a327172a586cf3a92f82e020735", 0x19f) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) fallocate(r3, 0x0, 0x0, 0x4103fe) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x5, 0x8, 0x4}, &(0x7f00000000c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r4, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x1, @remote, 0xaa95}]}, &(0x7f0000000200)=0x10) (async) 23:16:49 executing program 4: add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:16:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x3cd781, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x59, 0xefb, 0x5, 0x8, 0xe, "05dccc3fe8ed2790"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="8b4efce09e62fd7917fffff9", @ANYRES32=r1, @ANYBLOB="f8ffffff000000002e2f66696c653000"]) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000100)={0x0, 0xff, 0x50000, 0x1000, 0x3}) 23:16:49 executing program 2: fsopen(&(0x7f0000009700)='msdos\x00', 0x0) [ 746.905666][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 23:16:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc1", 0x8}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="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", 0x19f) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x5, 0x8, 0x4, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r4, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x1, @remote, 0xaa95}]}, &(0x7f0000000200)=0x10) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) fallocate(r1, 0x0, 0x0, 0x4103fe) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="cb56b6cc0407c0f5facf2b02001b36f19485d1a766ef9dad77a4316625e8b50026186095ddd0c1fad96bd0a961d2f3ff858e151c6870906054999c6f5703966b6899daaf3641f04df546020000003b37e88051191e2baa5751cb45918a5d2fb98ac7f9b21c6fed13f1bd34d9ed6bde57fb78cf6199b92961add6dc3b6f30db153a7848ba049a02370e7e4b69d2bbcab001666ba0a478d9064f1daf5aa1312424a8fef16ad6a3162c09b20bdf3931bf6396baad1bcb074409f2900468444c89574d8522e177974d18b49e3e65b92d3780233829603f7ab57f612fb86c230b28d9f000000000000000075e4698fc420688d14806912a984c141aa60ba70fd18b74b57985539883e69bf851374d973f5a1882a4c47f8cfbb26f04428fb20963d699583fee1ef0bdf491b9889909245aeb1666af8390a86150fb9bc876ae629f240a7c0779dd4dd4b452ead175fdeea86980a58fa92d657a821a371370a8c289c74bed2c0fa03a575425adae82aba78a26dca56cc221b661fa81ff26117ced0ac1e13f34f95805a67a7364e50e80900ccb538d3a327172a586cf3a92f82e020735", 0x19f) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendto(r2, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a4fd5e343aee55f384bdc57e053b5f5", 0x2000011f, 0x0, 0x0, 0x300000000000000) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) fallocate(r3, 0x0, 0x0, 0x4103fe) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x5, 0x8, 0x4}, &(0x7f00000000c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r4, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x1, @remote, 0xaa95}]}, &(0x7f0000000200)=0x10) (async) 23:16:50 executing program 4: r0 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) write$smackfs_cipso(r0, &(0x7f00000001c0)={'user\x00'}, 0x31) 23:16:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x3cd781, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x59, 0xefb, 0x5, 0x8, 0xe, "05dccc3fe8ed2790"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="8b4efce09e62fd7917fffff9", @ANYRES32=r1, @ANYBLOB="f8ffffff000000002e2f66696c653000"]) (async) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000100)={0x0, 0xff, 0x50000, 0x1000, 0x3}) 23:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xb000000}}, 0x5c}}, 0x0) 23:16:50 executing program 2: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @private}, {0x2, 0x0, @dev}, 0x235, 0x0, 0x0, 0x0, 0x2a6, &(0x7f00000000c0), 0x3}) socket(0xb, 0x800, 0x40) 23:16:50 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)={0x0, 0x1, [{}]}) 23:16:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x3cd781, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x59, 0xefb, 0x5, 0x8, 0xe, "05dccc3fe8ed2790"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="8b4efce09e62fd7917fffff9", @ANYRES32=r1, @ANYBLOB="f8ffffff000000002e2f66696c653000"]) (async) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000100)={0x0, 0xff, 0x50000, 0x1000, 0x3}) 23:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xc000000}}, 0x5c}}, 0x0) 23:16:50 executing program 4: setitimer(0x1, &(0x7f0000000000)={{0x0, 0xea60}, {0x77359400}}, &(0x7f0000000040)) 23:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xd000000}}, 0x5c}}, 0x0) 23:16:50 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 23:16:50 executing program 1: syz_io_uring_setup(0x6d2f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x72da, &(0x7f0000000100), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 23:16:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xe000000}}, 0x5c}}, 0x0) 23:16:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc1", 0x8}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:50 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000780), 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) 23:16:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x13, 0x0, 0x0) 23:16:50 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) 23:16:50 executing program 3: syz_io_uring_setup(0x2de6, &(0x7f0000001600)={0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r2 = syz_io_uring_complete(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) ioctl$KDADDIO(r3, 0x400455c8, 0x4) syz_io_uring_complete(0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) 23:16:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x12, &(0x7f0000000000)={@broadcast, @dev}, 0xc) 23:16:50 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 23:16:51 executing program 4: syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0xf8ec0) 23:16:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xf000000}}, 0x5c}}, 0x0) 23:16:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 23:16:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0xf, &(0x7f0000000000)={@broadcast, @dev}, 0xc) 23:16:51 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0xffffffffffffff88) 23:16:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc1", 0x8}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x10000000}}, 0x5c}}, 0x0) 23:16:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8993, &(0x7f00000001c0)={'vcan0\x00'}) 23:16:51 executing program 1: syz_io_uring_setup(0x4d35, &(0x7f0000000180), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 23:16:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8911, &(0x7f00000001c0)={'vcan0\x00'}) 23:16:51 executing program 3: syz_io_uring_setup(0x2de6, &(0x7f0000001600)={0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) r2 = syz_io_uring_complete(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) ioctl$KDADDIO(r3, 0x400455c8, 0x4) (async) syz_io_uring_complete(0x0) (async, rerun: 64) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)) (async, rerun: 64) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) 23:16:51 executing program 2: add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0xfffff, 0x0) 23:16:51 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}]}, 0x18}}, 0x0) 23:16:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x11000000}}, 0x5c}}, 0x0) 23:16:51 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='\x00', 0x0, 0x0) 23:16:51 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 23:16:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0xc0189436, &(0x7f0000000280)) 23:16:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62c", 0xc}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x12000000}}, 0x5c}}, 0x0) 23:16:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x7, 0x0) 23:16:52 executing program 3: syz_io_uring_setup(0x2de6, &(0x7f0000001600)={0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) (async) r2 = syz_io_uring_complete(r0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) ioctl$KDADDIO(r3, 0x400455c8, 0x4) (async) syz_io_uring_complete(0x0) (async, rerun: 64) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)) (async, rerun: 64) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) 23:16:52 executing program 2: ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) 23:16:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect(r0, 0x0, 0x0) 23:16:52 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000007, 0xffffffffffffffff) 23:16:52 executing program 1: mq_unlink(&(0x7f0000005e00)='&+,\x00') 23:16:52 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x5207, 0x0) 23:16:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x14000000}}, 0x5c}}, 0x0) 23:16:52 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x8000004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)) 23:16:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) 23:16:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62c", 0xc}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:52 executing program 1: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) lchown(&(0x7f0000000480)='./bus/file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x20, 0x0) lchown(&(0x7f0000000100)='./bus/file0\x00', 0x0, 0xee01) 23:16:52 executing program 2: mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x8, 0x192, 0x0) 23:16:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x16000000}}, 0x5c}}, 0x0) [ 750.366948][ T27] audit: type=1800 audit(1666480612.831:792): pid=21233 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1158 res=0 errno=0 [ 750.377431][T21233] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:52 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/124) 23:16:52 executing program 2: fsopen(&(0x7f0000009b80)='binfmt_misc\x00', 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) 23:16:52 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000002100)={0x14}, 0x14}}, 0x0) 23:16:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x18000000}}, 0x5c}}, 0x0) 23:16:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62c", 0xc}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:52 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/mnt\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) [ 750.404152][ T27] audit: type=1804 audit(1666480612.831:793): pid=21233 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/784/file0" dev="sda1" ino=1158 res=1 errno=0 [ 750.440054][ T5935] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x19000000}}, 0x5c}}, 0x0) 23:16:54 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x13, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x28}}, 0x0) 23:16:54 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000c40)) 23:16:54 executing program 4: setrlimit(0x0, &(0x7f0000000000)={0x10001}) 23:16:54 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x8000004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) sendfile(r0, r1, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x8000004) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)) (async) 23:16:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3", 0xe}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:54 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) [ 752.424442][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 752.424648][ T3648] Bluetooth: hci6: command 0x1003 tx timeout 23:16:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x9) bind(r0, &(0x7f0000002400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80) 23:16:54 executing program 4: r0 = io_uring_setup(0x2078, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)="8f", 0x1, r0}, 0x68) 23:16:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x28000000}}, 0x5c}}, 0x0) [ 752.483182][ T27] audit: type=1800 audit(1666480614.941:794): pid=21267 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1169 res=0 errno=0 23:16:55 executing program 2: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) 23:16:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3", 0xe}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:55 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 23:16:55 executing program 4: select(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0xffff}, &(0x7f0000000180)={0x77359400}) 23:16:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x3f000000}}, 0x5c}}, 0x0) [ 752.513629][ T27] audit: type=1804 audit(1666480614.961:795): pid=21267 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/785/file0" dev="sda1" ino=1169 res=1 errno=0 [ 752.547861][T21267] Bluetooth: hci6: Frame reassembly failed (-84) [ 752.557216][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:55 executing program 1: r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) write$smackfs_access(r0, &(0x7f0000000040)={',+', 0x20, '@&+-{.&,R', 0x20, 'wa'}, 0x10) 23:16:57 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x8000004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)) 23:16:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3", 0xe}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:57 executing program 2: munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 23:16:57 executing program 4: renameat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, 0x0) 23:16:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8913, &(0x7f00000001c0)={'vcan0\x00'}) 23:16:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x40000000}}, 0x5c}}, 0x0) 23:16:57 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) bind(r0, 0x0, 0x7) 23:16:57 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fsmount(r0, 0x0, 0x24) 23:16:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x31, &(0x7f0000000000)={@broadcast, @dev}, 0xc) [ 754.584448][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 754.584484][ T3648] Bluetooth: hci6: command 0x1003 tx timeout 23:16:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x48000000}}, 0x5c}}, 0x0) 23:16:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x5, 0x4) 23:16:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f394", 0xf}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:57 executing program 2: pselect6(0x40, &(0x7f0000001480), 0x0, &(0x7f0000001500), &(0x7f0000001540)={0x0, 0x989680}, 0x0) 23:16:57 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000780), 0x1f, 0x0) read$FUSE(r0, 0x0, 0xfdbc) 23:16:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x19) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpu.stat\x00', 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'dvmrp0\x00', &(0x7f0000000240)=@ethtool_dump={0x3f, 0x6, 0x8, 0xc5, "73ec89faf4a0b2750ebc51a700cae3d920c965f8b4e1898fd50a92939986e74510a79aa32fbfbbcacf99d8d97082e10af01456bc905b692dbcd3ec9132bf3d7762b0d94fe4102a725309c51617bc6e734b3ba50ce04bfdb5a2c3515a39571f2a98e1abd1ba03d1b1abe6459eabc0a79c9b5d63be235c08e1d7f2a2191c13299ceaccde1e2b57c86b1f8179da0064494ee848cd2090226517ce1805728807cd6185e4c08448b35ef4104af82faaa2ff7a63e58a46e15de48d165251f6d61999892a8b1c4cbf"}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x8) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x2406) sendfile(r3, r4, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x53, 0x9, 0x80000001, 0x8, 0x5, "61ad469ad42296eaa10022b2bd818ca39f260f"}) 23:16:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x4c000000}}, 0x5c}}, 0x0) [ 754.686025][ T27] audit: type=1800 audit(1666480617.151:796): pid=21315 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1161 res=0 errno=0 23:16:57 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 23:16:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x60000000}}, 0x5c}}, 0x0) 23:16:57 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x13) 23:16:57 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) 23:16:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5421, &(0x7f0000000280)) 23:16:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f394", 0xf}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x68000000}}, 0x5c}}, 0x0) [ 754.780526][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) 23:16:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) 23:16:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x19, 0x0, 0x0) 23:16:57 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0xffffffffffffffff) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x800) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) r1 = io_uring_setup(0x359a, &(0x7f0000000000)={0x0, 0xf4bb, 0x8, 0x0, 0x338}) syz_io_uring_setup(0x6b06, &(0x7f0000000080)={0x0, 0x4906, 0x80, 0x0, 0x3d3, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 754.896084][ T27] audit: type=1804 audit(1666480617.361:797): pid=21354 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/787/file0" dev="sda1" ino=1159 res=1 errno=0 23:16:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x19) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpu.stat\x00', 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'dvmrp0\x00', &(0x7f0000000240)=@ethtool_dump={0x3f, 0x6, 0x8, 0xc5, "73ec89faf4a0b2750ebc51a700cae3d920c965f8b4e1898fd50a92939986e74510a79aa32fbfbbcacf99d8d97082e10af01456bc905b692dbcd3ec9132bf3d7762b0d94fe4102a725309c51617bc6e734b3ba50ce04bfdb5a2c3515a39571f2a98e1abd1ba03d1b1abe6459eabc0a79c9b5d63be235c08e1d7f2a2191c13299ceaccde1e2b57c86b1f8179da0064494ee848cd2090226517ce1805728807cd6185e4c08448b35ef4104af82faaa2ff7a63e58a46e15de48d165251f6d61999892a8b1c4cbf"}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x8) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x2406) sendfile(r3, r4, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x53, 0x9, 0x80000001, 0x8, 0x5, "61ad469ad42296eaa10022b2bd818ca39f260f"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) fallocate(r1, 0x0, 0x0, 0x4103fe) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x19) (async) openat$cgroup_ro(r1, &(0x7f0000000200)='cpu.stat\x00', 0x0, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'dvmrp0\x00', &(0x7f0000000240)=@ethtool_dump={0x3f, 0x6, 0x8, 0xc5, "73ec89faf4a0b2750ebc51a700cae3d920c965f8b4e1898fd50a92939986e74510a79aa32fbfbbcacf99d8d97082e10af01456bc905b692dbcd3ec9132bf3d7762b0d94fe4102a725309c51617bc6e734b3ba50ce04bfdb5a2c3515a39571f2a98e1abd1ba03d1b1abe6459eabc0a79c9b5d63be235c08e1d7f2a2191c13299ceaccde1e2b57c86b1f8179da0064494ee848cd2090226517ce1805728807cd6185e4c08448b35ef4104af82faaa2ff7a63e58a46e15de48d165251f6d61999892a8b1c4cbf"}}) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x8) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) ioctl$TIOCSCTTY(r0, 0x540e, 0x2406) (async) sendfile(r3, r4, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x53, 0x9, 0x80000001, 0x8, 0x5, "61ad469ad42296eaa10022b2bd818ca39f260f"}) (async) 23:16:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x6c000000}}, 0x5c}}, 0x0) 23:16:59 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0) 23:16:59 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 23:16:59 executing program 2: openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, 0x0) io_setup(0x10000, &(0x7f0000000040)) 23:16:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f394", 0xf}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 23:16:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x74000000}}, 0x5c}}, 0x0) 23:16:59 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x4020940d, &(0x7f0000000140)) [ 756.824579][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:16:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x7a000000}}, 0x5c}}, 0x0) 23:16:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1}, 0x0) 23:16:59 executing program 1: request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0) 23:16:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xf5ffffff}}, 0x5c}}, 0x0) [ 757.016733][ T27] audit: type=1804 audit(1666480619.481:798): pid=21385 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/788/file0" dev="sda1" ino=1156 res=1 errno=0 [ 757.068159][ T27] audit: type=1800 audit(1666480619.531:799): pid=21385 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=1156 res=0 errno=0 23:17:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x19) (async) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpu.stat\x00', 0x0, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) (rerun: 64) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'dvmrp0\x00', &(0x7f0000000240)=@ethtool_dump={0x3f, 0x6, 0x8, 0xc5, "73ec89faf4a0b2750ebc51a700cae3d920c965f8b4e1898fd50a92939986e74510a79aa32fbfbbcacf99d8d97082e10af01456bc905b692dbcd3ec9132bf3d7762b0d94fe4102a725309c51617bc6e734b3ba50ce04bfdb5a2c3515a39571f2a98e1abd1ba03d1b1abe6459eabc0a79c9b5d63be235c08e1d7f2a2191c13299ceaccde1e2b57c86b1f8179da0064494ee848cd2090226517ce1805728807cd6185e4c08448b35ef4104af82faaa2ff7a63e58a46e15de48d165251f6d61999892a8b1c4cbf"}}) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x8) (async) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x2406) (async) sendfile(r3, r4, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) (async) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x53, 0x9, 0x80000001, 0x8, 0x5, "61ad469ad42296eaa10022b2bd818ca39f260f"}) 23:17:01 executing program 4: openat$sysctl(0xffffffffffffff9c, &(0x7f0000001200)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) 23:17:01 executing program 1: r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/access\x00', 0x2, 0x0) write$smackfs_access(r0, 0x0, 0x0) 23:17:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xffffff7f}}, 0x5c}}, 0x0) 23:17:01 executing program 2: clock_gettime(0x0, &(0x7f0000001340)) 23:17:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1}, 0x0) 23:17:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x8, 0x0, 0x0) 23:17:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x1) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 23:17:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001180)={0x0, 0x0}) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x4000) [ 758.984441][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 758.989571][ T3641] Bluetooth: hci6: command 0x1003 tx timeout 23:17:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0xfffffff5}}, 0x5c}}, 0x0) 23:17:01 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff1000/0xe000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0x0}, 0x68) 23:17:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}}, 0x0) [ 759.099730][ T5935] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:03 executing program 4: getresgid(&(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)) 23:17:03 executing program 2: syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) 23:17:03 executing program 1: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/154) 23:17:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x2}}, 0x5c}}, 0x0) 23:17:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x6) 23:17:03 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1}, 0x0) 23:17:03 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x6000) 23:17:03 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) [ 761.144423][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 761.144419][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:03 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{}, {}]}) 23:17:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x3}}, 0x5c}}, 0x0) 23:17:03 executing program 4: fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) openat$vfio(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) 23:17:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x891a, &(0x7f0000000280)) [ 761.211521][ T9338] Bluetooth: hci6: Frame reassembly failed (-84) [ 761.240129][T21427] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:03 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000180)=ANY=[], 0xa0) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) write$FUSE_STATFS(r0, &(0x7f0000000140)={0x60}, 0x60) 23:17:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x4}}, 0x5c}}, 0x0) 23:17:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0xc000) 23:17:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 23:17:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x10) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x6) 23:17:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x5}}, 0x5c}}, 0x0) 23:17:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x20, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 23:17:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x0, 0x0, 0x0, 0x0, 0x314, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 23:17:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) 23:17:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)}, 0x0) 23:17:05 executing program 2: syz_io_uring_setup(0xe16, &(0x7f0000000040)={0x0, 0x3c1f, 0x4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) syz_io_uring_setup(0x3182, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) [ 763.224461][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 763.224474][ T3641] Bluetooth: hci6: command 0x1003 tx timeout 23:17:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x6}}, 0x5c}}, 0x0) 23:17:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 23:17:05 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) 23:17:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 23:17:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x7}}, 0x5c}}, 0x0) [ 763.330729][ T4090] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x6) 23:17:07 executing program 2: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 23:17:07 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv4={0x800, @tipc={{0x15, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @rand_addr, {[@generic={0x0, 0xd, "136d53cfadeadee15fd472"}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@empty}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 23:17:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x8}}, 0x5c}}, 0x0) 23:17:07 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000) 23:17:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)}, 0x0) 23:17:07 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 23:17:07 executing program 4: syz_io_uring_setup(0x3182, &(0x7f0000000140)={0x0, 0x0, 0x10, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) [ 765.384492][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 765.384536][ T3655] Bluetooth: hci6: command 0x1003 tx timeout 23:17:07 executing program 2: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), 0xfffffffffffffe7c) 23:17:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x9}}, 0x5c}}, 0x0) 23:17:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000002c0), 0x8) [ 765.453697][ T9348] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:07 executing program 2: syz_emit_ethernet(0x135b, 0x0, 0x0) [ 765.502702][T21494] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x458283, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) 23:17:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xa}}, 0x5c}}, 0x0) 23:17:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) 23:17:09 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40003, 0x0) 23:17:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)}, 0x0) 23:17:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xb}}, 0x5c}}, 0x0) 23:17:09 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/meminfo\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 23:17:09 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0}, 0x10) r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) flock(r0, 0x8) [ 767.464596][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 767.474514][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xc}}, 0x5c}}, 0x0) 23:17:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x458283, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:10 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) 23:17:10 executing program 2: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, 0x0, 0x0) 23:17:10 executing program 4: r0 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0xffeb}}, 0x0) r1 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0xffeb}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000280)=""/175, 0xaf}], 0x1, 0x17d, 0x0) 23:17:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x458283, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xd}}, 0x5c}}, 0x0) 23:17:10 executing program 1: syz_emit_ethernet(0x96, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa21bbbbbbbbbbbb08"], 0x0) 23:17:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18}], 0x18}, 0x0) 23:17:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001b00)={&(0x7f0000001280)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000019c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 23:17:10 executing program 2: add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000140)="b4", 0x1, 0xfffffffffffffff8) 23:17:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2e2f66696c65300045d1d82015715a15971e71ba8dbc443b75b11435b4f5b2de777551cf0431f8"]) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) syz_open_pts(r0, 0x400) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x8, 0x0, 0x4000000, 0x1, 0x3, "6d6b87be279a53f32e54226249f42340b6ae21"}) 23:17:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xe}}, 0x5c}}, 0x0) 23:17:10 executing program 4: r0 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0xffeb}}, 0x0) r1 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0xffeb}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000280)=""/175, 0xaf}], 0x1, 0x17d, 0x0) 23:17:10 executing program 2: syz_emit_ethernet(0x135b, &(0x7f0000001440)=ANY=[@ANYBLOB="804f01b7b901bbbbbbbbbbbb86dd6356584c13253a"], 0x0) 23:17:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xf}}, 0x5c}}, 0x0) 23:17:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2e2f66696c65300045d1d82015715a15971e71ba8dbc443b75b11435b4f5b2de777551cf0431f8"]) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) syz_open_pts(r0, 0x400) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x8, 0x0, 0x4000000, 0x1, 0x3, "6d6b87be279a53f32e54226249f42340b6ae21"}) 23:17:10 executing program 4: r0 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0xffeb}}, 0x0) r1 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0xffeb}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000280)=""/175, 0xaf}], 0x1, 0x17d, 0x0) 23:17:10 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0x5e, 0x0) 23:17:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x10}}, 0x5c}}, 0x0) 23:17:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2e2f66696c65300045d1d82015715a15971e71ba8dbc443b75b11435b4f5b2de777551cf0431f8"]) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) syz_open_pts(r0, 0x400) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x8, 0x0, 0x4000000, 0x1, 0x3, "6d6b87be279a53f32e54226249f42340b6ae21"}) 23:17:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18}], 0x18}, 0x0) 23:17:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@remote}, 0x14) 23:17:11 executing program 4: r0 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0xffeb}}, 0x0) r1 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0xffeb}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000280)=""/175, 0xaf}], 0x1, 0x17d, 0x0) 23:17:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x11}}, 0x5c}}, 0x0) 23:17:11 executing program 1: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000340)) 23:17:11 executing program 2: sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) 23:17:11 executing program 4: socket(0x2c, 0x3, 0x7f) 23:17:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x9, 0x8a79, 0x80000000, 0x3, 0x6, "1fc0d46c25bad6ddad410750282bba219ec6a9"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_open_pts(r1, 0x20280) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 23:17:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 23:17:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x12}}, 0x5c}}, 0x0) 23:17:11 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) 23:17:11 executing program 4: syz_emit_ethernet(0x61, &(0x7f0000000000)=ANY=[], 0x0) [ 769.396375][ T27] audit: type=1800 audit(1666480631.861:800): pid=21604 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1159 res=0 errno=0 [ 769.426096][ T27] audit: type=1804 audit(1666480631.861:801): pid=21604 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/799/file0" dev="sda1" ino=1159 res=1 errno=0 23:17:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3a", 0x5) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18}], 0x18}, 0x0) 23:17:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x14}}, 0x5c}}, 0x0) 23:17:12 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) 23:17:12 executing program 2: syz_emit_ethernet(0x12, &(0x7f0000000080)={@remote, @multicast, @val={@void}, {@mpls_uc}}, 0x0) 23:17:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 23:17:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x9, 0x8a79, 0x80000000, 0x3, 0x6, "1fc0d46c25bad6ddad410750282bba219ec6a9"}) (async, rerun: 32) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async, rerun: 32) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) syz_open_pts(r1, 0x20280) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 23:17:12 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4004011, r0, 0x10000000) 23:17:12 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 23:17:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x9, 0x8a79, 0x80000000, 0x3, 0x6, "1fc0d46c25bad6ddad410750282bba219ec6a9"}) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) syz_open_pts(r1, 0x20280) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 23:17:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) [ 770.183748][ T27] audit: type=1800 audit(1666480632.641:802): pid=21620 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1180 res=0 errno=0 23:17:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x16}}, 0x5c}}, 0x0) 23:17:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) [ 770.271994][ T27] audit: type=1800 audit(1666480632.731:803): pid=21633 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1161 res=0 errno=0 [ 770.320075][ T27] audit: type=1804 audit(1666480632.731:804): pid=21627 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/801/file0" dev="sda1" ino=1161 res=1 errno=0 23:17:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000089c0)=0xe) r1 = creat(&(0x7f0000008940)='./file0\x00', 0x1) fallocate(r1, 0x0, 0x0, 0x4103fe) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x100) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f00000086c0)=[{0x7, 0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)=""/215, 0xd7}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000001400)=""/203, 0xcb}], &(0x7f0000001580)=[0x8f, 0x0, 0x3ff, 0x2, 0x8]}, {0x1, 0x1, 0x0, &(0x7f00000025c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}], &(0x7f0000002600)=[0x5, 0x7, 0x5]}, {0x9, 0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000002640)=""/7, 0x7}, {&(0x7f0000002680)=""/17, 0x11}, {&(0x7f00000026c0)}, {&(0x7f0000002700)=""/113, 0x71}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/50, 0x32}, {&(0x7f00000037c0)=""/36, 0x24}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/46, 0x2e}], &(0x7f0000004900)=[0x8000, 0x5f4f, 0x60000000000, 0x1000, 0x6, 0x6, 0x8000, 0x4]}, {0x7, 0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000004940)=""/247, 0xf7}, {&(0x7f0000004a40)=""/163, 0xa3}, {&(0x7f0000004b00)=""/32, 0x20}, {&(0x7f0000004b40)=""/74, 0x4a}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/4, 0x4}, {&(0x7f0000005c00)=""/187, 0xbb}], &(0x7f0000005d40)=[0x7, 0x7ff, 0xad6]}, {0x2, 0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000005e80)=""/138, 0x8a}], &(0x7f0000005f80)=[0xffe5, 0x401, 0xffffffffffffffff, 0x1, 0x1]}, {0x5, 0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005fc0)=""/216, 0xd8}, {&(0x7f00000060c0)=""/115, 0x73}, {&(0x7f0000006140)=""/23, 0x17}, {&(0x7f0000006180)=""/139, 0x8b}, {&(0x7f0000006240)=""/149, 0x95}], &(0x7f0000006380)=[0x4, 0xfffffffffffffbff, 0xbf8]}, {0x7, 0x0, 0x0, &(0x7f0000008600)=[{&(0x7f00000063c0)=""/7, 0x7}, {0xfffffffffffffffc}, {&(0x7f0000006400)=""/179, 0xb3}, {&(0x7f00000064c0)=""/1, 0x1}, {&(0x7f0000006500)=""/238, 0xee}, {&(0x7f0000006600)=""/4096, 0x1000}, {&(0x7f0000007600)=""/4096, 0x1000}], &(0x7f0000008680)=[0x8, 0x3, 0x3, 0x80]}], 0x7) fallocate(r2, 0x0, 0x0, 0x4103fe) ioctl$KDADDIO(r2, 0x400455c8, 0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000026c0)={0x0, 0x1a, 0xfff}) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) syz_open_pts(r3, 0x40000) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f00000088c0)={&(0x7f00000087c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000008880)={&(0x7f0000008800)=@gettfilter={0x54, 0x2e, 0xc00, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {0xe, 0xf}, {0xffe0, 0x1}}, [{0x8, 0xb, 0x5fdd}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x99ff}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x6}]}, 0x54}}, 0x0) 23:17:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0xfffffc2a, &(0x7f0000000480)={&(0x7f00000001c0)={0x2a4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x51, 0x5b, "b20956a06de2e4d96d357cd75fd258052cdfe4402bddc25b3d2a063c29ead56a3e9f175c7a1c3b29282562efa5f2f7ac559cc1b728a1bfd7ad9d9adcb4670f64e1c26bf6b5e0fe5a070a49d8db"}, @NL80211_ATTR_FRAME_MATCH={0xa6, 0x5b, "994dc278225b691f37be86933512f80eefca14aa363d3e2cbf78ede3ebe301824199b1a9735669a96174aa6b52f5932d363e4d742e5029c344d753c0920cb9cf9d81b65a12f69e954433e93217d6bbba18fd34f49edd3a12324e06b063cab031b0656d605840138818dab286ab2d858ebd574b9600b6aeb0abed4de0f2c6074058f5d83f28b549feac0c509e82b742a212975c32580f9e9c3faa0f7b8b54a890b9eb"}, @NL80211_ATTR_FRAME_MATCH={0xd7, 0x5b, "8e4651197100f6629c81ed9c59922b78deaecb20a4661ca911438f49e85ad4f3a96b320d8988d69d0db6ecffd1ea2974edcc9da86a814750fc04aea73dcfd31b129dafd830f33d39a20c09a4bc1cff80f91295c5abef1728c0bb3e7b7e64ea7bd1c699fcf20e0f1c5995b77d56956d4011389a407f14fbea8a5dded998335b4d2908805a0d251987ee645cdac4b8538a08f46aff7c505039c82b7b209dd21238b0eb9b4df305a0d216da730d6c0fa49c4b29e23276237ec4fd52f0c043163ce40532f155635691e471fcfdb61bafc3ded7e92c"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x77, 0x5b, "cf7a84afe53b216bd891e79f2d2edc4b89ebca0019505c1c5663186a7698d90caf3bfe94110a01b6e2099a77214081ba5834269249a2c69d8811202a16cf943dba1d457abeb3c2e7d48d89bd7e050ba02001be7782d3bac323860e1815af12c530c59d5f231e382bce82c4cfee35601d65f3c7"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x1b, 0x5b, "e278b446b896a39f18e9b4e0c1daa31f9e28d1f2504736"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x8880}, 0x4000000) 23:17:13 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) 23:17:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x18}}, 0x5c}}, 0x0) 23:17:13 executing program 2: syz_emit_ethernet(0x61, 0x0, 0x0) 23:17:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x2641, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0xc0185879, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x0, '\x00', @b}) 23:17:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x19}}, 0x5c}}, 0x0) 23:17:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 23:17:13 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 23:17:13 executing program 1: syz_emit_ethernet(0x61, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@link_local, @dev, @val, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0x0, 0x6, "aa3efe", 0x20, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}}, 0x0) 23:17:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000089c0)=0xe) r1 = creat(&(0x7f0000008940)='./file0\x00', 0x1) fallocate(r1, 0x0, 0x0, 0x4103fe) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x100) (async) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f00000086c0)=[{0x7, 0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)=""/215, 0xd7}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000001400)=""/203, 0xcb}], &(0x7f0000001580)=[0x8f, 0x0, 0x3ff, 0x2, 0x8]}, {0x1, 0x1, 0x0, &(0x7f00000025c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}], &(0x7f0000002600)=[0x5, 0x7, 0x5]}, {0x9, 0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000002640)=""/7, 0x7}, {&(0x7f0000002680)=""/17, 0x11}, {&(0x7f00000026c0)}, {&(0x7f0000002700)=""/113, 0x71}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/50, 0x32}, {&(0x7f00000037c0)=""/36, 0x24}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/46, 0x2e}], &(0x7f0000004900)=[0x8000, 0x5f4f, 0x60000000000, 0x1000, 0x6, 0x6, 0x8000, 0x4]}, {0x7, 0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000004940)=""/247, 0xf7}, {&(0x7f0000004a40)=""/163, 0xa3}, {&(0x7f0000004b00)=""/32, 0x20}, {&(0x7f0000004b40)=""/74, 0x4a}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/4, 0x4}, {&(0x7f0000005c00)=""/187, 0xbb}], &(0x7f0000005d40)=[0x7, 0x7ff, 0xad6]}, {0x2, 0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000005e80)=""/138, 0x8a}], &(0x7f0000005f80)=[0xffe5, 0x401, 0xffffffffffffffff, 0x1, 0x1]}, {0x5, 0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005fc0)=""/216, 0xd8}, {&(0x7f00000060c0)=""/115, 0x73}, {&(0x7f0000006140)=""/23, 0x17}, {&(0x7f0000006180)=""/139, 0x8b}, {&(0x7f0000006240)=""/149, 0x95}], &(0x7f0000006380)=[0x4, 0xfffffffffffffbff, 0xbf8]}, {0x7, 0x0, 0x0, &(0x7f0000008600)=[{&(0x7f00000063c0)=""/7, 0x7}, {0xfffffffffffffffc}, {&(0x7f0000006400)=""/179, 0xb3}, {&(0x7f00000064c0)=""/1, 0x1}, {&(0x7f0000006500)=""/238, 0xee}, {&(0x7f0000006600)=""/4096, 0x1000}, {&(0x7f0000007600)=""/4096, 0x1000}], &(0x7f0000008680)=[0x8, 0x3, 0x3, 0x80]}], 0x7) (async) fallocate(r2, 0x0, 0x0, 0x4103fe) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x9) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000026c0)={0x0, 0x1a, 0xfff}) (async) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) (async) syz_open_pts(r3, 0x40000) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$nl_route_sched(r3, &(0x7f00000088c0)={&(0x7f00000087c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000008880)={&(0x7f0000008800)=@gettfilter={0x54, 0x2e, 0xc00, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {0xe, 0xf}, {0xffe0, 0x1}}, [{0x8, 0xb, 0x5fdd}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x99ff}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x6}]}, 0x54}}, 0x0) 23:17:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000010000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) chroot(&(0x7f0000000040)='./file0\x00') 23:17:13 executing program 2: syz_emit_ethernet(0x135b, &(0x7f0000001440)=ANY=[], 0x0) 23:17:13 executing program 4: syz_open_dev$sndctrl(&(0x7f00000003c0), 0x8, 0x2c2000) 23:17:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tun(r0, 0x0, 0x0) 23:17:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x28}}, 0x5c}}, 0x0) 23:17:13 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 23:17:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/2, 0x2}], 0x1}, 0x0) write$cgroup_type(r0, 0x0, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18}, 0x18) 23:17:13 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) 23:17:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004cc0)={0xe84, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0xda4, 0x5, 0x0, 0x1, [{0xf8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}]}, {0x218, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1ac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x210, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xcc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x194, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x31c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xbc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x184, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x44c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x390, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x168, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xc0, 0x5, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x40}, 0x610c0) 23:17:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 23:17:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000089c0)=0xe) r1 = creat(&(0x7f0000008940)='./file0\x00', 0x1) fallocate(r1, 0x0, 0x0, 0x4103fe) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x100) (async, rerun: 32) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) (rerun: 32) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f00000086c0)=[{0x7, 0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)=""/215, 0xd7}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000001400)=""/203, 0xcb}], &(0x7f0000001580)=[0x8f, 0x0, 0x3ff, 0x2, 0x8]}, {0x1, 0x1, 0x0, &(0x7f00000025c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}], &(0x7f0000002600)=[0x5, 0x7, 0x5]}, {0x9, 0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000002640)=""/7, 0x7}, {&(0x7f0000002680)=""/17, 0x11}, {&(0x7f00000026c0)}, {&(0x7f0000002700)=""/113, 0x71}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/50, 0x32}, {&(0x7f00000037c0)=""/36, 0x24}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/46, 0x2e}], &(0x7f0000004900)=[0x8000, 0x5f4f, 0x60000000000, 0x1000, 0x6, 0x6, 0x8000, 0x4]}, {0x7, 0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000004940)=""/247, 0xf7}, {&(0x7f0000004a40)=""/163, 0xa3}, {&(0x7f0000004b00)=""/32, 0x20}, {&(0x7f0000004b40)=""/74, 0x4a}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/4, 0x4}, {&(0x7f0000005c00)=""/187, 0xbb}], &(0x7f0000005d40)=[0x7, 0x7ff, 0xad6]}, {0x2, 0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000005e80)=""/138, 0x8a}], &(0x7f0000005f80)=[0xffe5, 0x401, 0xffffffffffffffff, 0x1, 0x1]}, {0x5, 0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005fc0)=""/216, 0xd8}, {&(0x7f00000060c0)=""/115, 0x73}, {&(0x7f0000006140)=""/23, 0x17}, {&(0x7f0000006180)=""/139, 0x8b}, {&(0x7f0000006240)=""/149, 0x95}], &(0x7f0000006380)=[0x4, 0xfffffffffffffbff, 0xbf8]}, {0x7, 0x0, 0x0, &(0x7f0000008600)=[{&(0x7f00000063c0)=""/7, 0x7}, {0xfffffffffffffffc}, {&(0x7f0000006400)=""/179, 0xb3}, {&(0x7f00000064c0)=""/1, 0x1}, {&(0x7f0000006500)=""/238, 0xee}, {&(0x7f0000006600)=""/4096, 0x1000}, {&(0x7f0000007600)=""/4096, 0x1000}], &(0x7f0000008680)=[0x8, 0x3, 0x3, 0x80]}], 0x7) (async) fallocate(r2, 0x0, 0x0, 0x4103fe) (async, rerun: 64) ioctl$KDADDIO(r2, 0x400455c8, 0x9) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000026c0)={0x0, 0x1a, 0xfff}) (async) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) (async, rerun: 32) syz_open_pts(r3, 0x40000) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x3, &(0x7f00000009c0)=@framed, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$nl_route_sched(r3, &(0x7f00000088c0)={&(0x7f00000087c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000008880)={&(0x7f0000008800)=@gettfilter={0x54, 0x2e, 0xc00, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {0xe, 0xf}, {0xffe0, 0x1}}, [{0x8, 0xb, 0x5fdd}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x99ff}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x6}]}, 0x54}}, 0x0) 23:17:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x48}}, 0x5c}}, 0x0) 23:17:13 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101901, 0x0) 23:17:13 executing program 4: r0 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0, 0xffeb}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/icmp\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, 0x3f, 0x0) 23:17:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x4c}}, 0x5c}}, 0x0) 23:17:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) 23:17:13 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xbb03935778909ffe, 0xffffffffffffffff, 0x0) 23:17:13 executing program 0: syz_io_uring_setup(0xe16, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x3182, &(0x7f0000000140), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 23:17:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x60}}, 0x5c}}, 0x0) 23:17:13 executing program 4: getresuid(&(0x7f0000000000), 0x0, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 23:17:13 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x3182, &(0x7f0000000140)={0x0, 0xead, 0x0, 0x3, 0x2f9}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 23:17:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 23:17:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xa0) 23:17:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x48) 23:17:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 23:17:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x68}}, 0x5c}}, 0x0) 23:17:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:17:13 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 23:17:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 23:17:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) [ 771.441313][ T9348] Bluetooth: hci6: Frame reassembly failed (-84) [ 771.453881][T21720] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x6c}}, 0x5c}}, 0x0) 23:17:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004cc0)={0xedc, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0xd9c, 0x5, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x881}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}]}, {0x218, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1ac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd5d0}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x82}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x194d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x214, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xcc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x198, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x31c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xbc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa648}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x2e3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x184, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x444, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x194}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x70}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x388, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x160, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf89c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xf6b1d6a5aae403c6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18b}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x120, 0x5, 0x0, 0x1, [{0x11c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffa4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x57}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}]}]}]}]}, 0xedc}, 0x1, 0x0, 0x0, 0x40}, 0x610c0) 23:17:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5}]}, 0x48}}, 0x0) 23:17:14 executing program 2: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8c84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:17:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x74}}, 0x5c}}, 0x0) 23:17:15 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x620c3, 0x0) 23:17:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xa0) 23:17:15 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 23:17:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006c8017"], 0x20}}, 0x0) 23:17:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000014c0)={&(0x7f0000001400), 0xea, &(0x7f0000001480)={&(0x7f0000001440)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 23:17:15 executing program 0: syz_io_uring_setup(0xdb6, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 23:17:15 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) [ 773.464513][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 773.464588][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:16 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, &(0x7f0000000000)) 23:17:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x7a}}, 0x5c}}, 0x0) 23:17:16 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000600), 0xffffffffffffffff) 23:17:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 23:17:16 executing program 1: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 23:17:16 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 773.566172][ T3648] Bluetooth: hci6: sending frame failed (-49) [ 773.572431][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 773.579575][T21751] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xa0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xa0) (async) 23:17:16 executing program 4: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@ipv6_getanyicast={0x14, 0x3e, 0x1}, 0x14}}, 0x0) 23:17:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 23:17:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x300}}, 0x5c}}, 0x0) 23:17:16 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000002080)='ns/pid\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:17:16 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000600), 0xffffffffffffffff) 23:17:16 executing program 1: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 23:17:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x500}}, 0x5c}}, 0x0) 23:17:16 executing program 1: mlockall(0x3) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:17:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 23:17:16 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x1}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x860}}]}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000740), 0x80, 0x0) [ 773.725702][ T5935] Bluetooth: hci6: Frame reassembly failed (-84) [ 773.739347][T21777] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x600}}, 0x5c}}, 0x0) [ 774.124415][T19864] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 774.404545][T19864] usb 1-1: Using ep0 maxpacket: 16 [ 774.534550][T19864] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 774.544266][T19864] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 774.553981][T19864] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 774.734597][T19864] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 774.743762][T19864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.751885][T19864] usb 1-1: Product: syz [ 774.756149][T19864] usb 1-1: Manufacturer: syz [ 774.760772][T19864] usb 1-1: SerialNumber: syz [ 775.050112][T19864] usb 1-1: USB disconnect, device number 29 23:17:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x16) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:18 executing program 2: syz_open_dev$vcsu(&(0x7f0000000140), 0x1ff, 0xa0d81) socket$nl_generic(0x10, 0x3, 0x10) 23:17:18 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/96, 0x60) getdents64(r0, 0x0, 0x0) 23:17:18 executing program 1: syz_open_dev$vcsu(&(0x7f0000000140), 0x1ff, 0x0) 23:17:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x700}}, 0x5c}}, 0x0) 23:17:18 executing program 2: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket(0x6, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socket$nl_route(0x10, 0x3, 0x0) 23:17:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000340), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x0, 0x0, {}, ["", ""]}, 0x14}}, 0x4008) syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) 23:17:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x900}}, 0x5c}}, 0x0) [ 775.784449][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 775.785422][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000340), r1) syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) 23:17:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x16) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (rerun: 32) 23:17:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r0) 23:17:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{}, {}], 0xa, "fb"}, 0xe) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x890b, &(0x7f0000000040)) 23:17:18 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 23:17:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xa00}}, 0x5c}}, 0x0) 23:17:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000600), 0xffffffffffffffff) 23:17:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x16) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xb00}}, 0x5c}}, 0x0) 23:17:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 23:17:18 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000600), 0xffffffffffffffff) 23:17:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4008) syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x40, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x9a, 0x0, 0x847, 0x81]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000054) syz_genetlink_get_family_id$nl802154(0x0, r3) 23:17:18 executing program 0: mlockall(0x3) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000002080)='ns/pid\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000004640)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004600)={&(0x7f0000004580)={0x14}, 0x14}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:17:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0x5, 0x5, 0xfffffff9, 0xa, "0ec4b2020e045f342cb7443a6e72a851279f96"}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x6, 0x82, 0x40, 0x0, 0x6, 0x8}, {0x3, 0x4, 0x1, 0xf9ca, 0x2, 0x200000000}], ['\x00', '\x00', '\x00']}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xc00}}, 0x5c}}, 0x0) 23:17:18 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:17:18 executing program 4: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x20, &(0x7f0000000400), 0x8) 23:17:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xd00}}, 0x5c}}, 0x0) 23:17:18 executing program 4: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) socket(0x6, 0x4, 0x5) 23:17:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xe00}}, 0x5c}}, 0x0) 23:17:18 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/73, 0x49) 23:17:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xf00}}, 0x5c}}, 0x0) 23:17:18 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x3) 23:17:18 executing program 4: syz_open_dev$mouse(0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 23:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x1100}}, 0x5c}}, 0x0) 23:17:19 executing program 0: syz_open_dev$vcsu(&(0x7f0000000140), 0x1ff, 0xa0d81) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000200)=0xc1e5) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, 0x0, 0x0, 0x70bd2b, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="4a70582f13b9"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e9e1079a465a"}]}, 0x40}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.net/syz1\x00', 0x200002, 0x0) 23:17:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.net/syz1\x00', 0x200002, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 23:17:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup3(r0, r1, 0x0) 23:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x1200}}, 0x5c}}, 0x0) 23:17:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0x5, 0x5, 0xfffffff9, 0xa, "0ec4b2020e045f342cb7443a6e72a851279f96"}) (async) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x6, 0x82, 0x40, 0x0, 0x6, 0x8}, {0x3, 0x4, 0x1, 0xf9ca, 0x2, 0x200000000}], ['\x00', '\x00', '\x00']}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:19 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0x1, 0x1000}], 0x1, 0x0) 23:17:19 executing program 1: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0\x00', 0x8100000, 0x2, &(0x7f0000000100)=[{&(0x7f0000002100)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000200)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1df1d1001cc2de850f1fffb2aed768634ef7e75effac2ac4c15e29fb3c18fafff8d198e312475ff201000000000000ad25822a17b57f463e104179c19c2ad2fbddc0777df2ec4f62826086704d", 0x69, 0x5e5}], 0x800008, &(0x7f0000000640)={[{@uni_xlateno}, {@uni_xlateno}, {@fat=@discard}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'utf8'}}]}, 0x0) 23:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x1400}}, 0x5c}}, 0x0) 23:17:19 executing program 0: getsockopt$sock_linger(0xffffffffffffffff, 0xffff, 0x80, 0x0, 0x0) pipe2(0x0, 0x0) 23:17:19 executing program 4: r0 = epoll_create(0x10001) r1 = epoll_create1(0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 23:17:19 executing program 2: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8fc080, 0x2a, &(0x7f0000000200)=[{&(0x7f00000119e0)="002a4c696e757820554446465300000000000000000000000405000000000000", 0x20, 0xfe}, {&(0x7f00000119c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/32, 0x20, 0x44e4}, {&(0x7f0000010000)="0042454130310100"/32, 0x20, 0x8000}, {&(0x7f0000010020)="004e535230320100"/32, 0x20, 0x8800}, {&(0x7f0000010040)="0054454130310100"/32, 0x20, 0x9000}, {&(0x7f0000010060)="010002001d0001001aaef001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010002000300010000000100000008313233343536373831323334353637384c696e757855444600"/128, 0x80, 0xc000}, {&(0x7f00000100e0)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667320322e33000000000000000000000000000010e607090c0c00354c1256002a4c696e7578205544464653000000000000000000000004050000", 0xe0, 0xc0c0}, {&(0x7f00000101c0)="000000000000000001000000000000000000000000000000000000000000000006000200660001006ba8e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000", 0x80, 0xc1e0}, {&(0x7f0000010240)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000005001000000000000000200001000000000000000000000004000000001000000002a4c696e75782055444646530000000000000000000000040500"/128, 0x80, 0xc2c0}, {&(0x7f00000102c0)="00000000000000000000000000000000002000008000000002400000002a554446205370617261626c6520506172746974696f6e500104050000000001000000200002003801000070000000f007000000000000000000000000000000000000050002007e000100879cf001620000000300000001000000002b4e53523032000000000000000000000000000000000000000000000000000000000000000000000200"/192, 0xc0, 0xc3a0}, {&(0x7f0000010380)="0000000000000000000000000000000000000000000000000400000010050000d0020000002a4c696e7578205544464653000000000000000000000004050000", 0x40, 0xc4a0}, {&(0x7f00000103c0)="07000200ae000100927f3000630000000400000005000000002600004d000000001600007500000000e0000090000000001e00000101000000140000f5070000", 0x40, 0xc600}, {&(0x7f0000010400)="040002008b000100f43bf0016400000005000000002a554446204c5620496e666f00000000000000000000005001040500000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000", 0x80, 0xc800}, {&(0x7f0000010480)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/32, 0x20, 0xc8e0}, {&(0x7f00000104a0)="002a4c696e757820554446465300000000000000000000000405000000000000", 0x20, 0xc960}, {&(0x7f00000104c0)="08000200610001000000f0016500"/32, 0x20, 0xca00}, {&(0x7f0000010620)="09000200d70001000acb7600800000000010e607090c0c00355f4d010100000000000000000000001800000000000000000000000000000000000000000000000000000000000000010000002e000000b0020000d0020000002a4c696e757820554446465300000000000000000000000405000000000000060000000200000050015001010200"/160, 0xa0, 0x10000}, {&(0x7f00000106c0)="080002007d0001000000f0018100"/32, 0x20, 0x10200}, {&(0x7f00000106e0)="020002002200010076b5f00100010000002000006000000000200000e0070000", 0x20, 0x20000}, {&(0x7f0000010700)="08010200f5000100964b080000000000d00200005a000000fefffeff000000e0feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/128, 0x80, 0xa2000}, {&(0x7f0000010780)="0001020037000100bb77f001100000000010e607090c0c00354c12560300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e757855444600000000000000", 0x80, 0xa4000}, {&(0x7f0000010800)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000200000000000000000000000002a4f5354412055444620436f6d706c69616e74000000005001000000000000", 0xe0, 0xa40e0}, {&(0x7f00000108e0)="050102007c000100e5c6a8002000000000000000040000000100000400000000000000000000000000000000a53c00000200000000000000440100000000000001000000000000000010e607090c0c00354c12560010e607090c0c00355e59530010e607090c0c00355e59530100000000000000000000000000000000000000002a4c696e75782055444646530000000000000000000000040500000000000000000000000000000000000008000000440100003000"/192, 0xc0, 0xa6000}, {&(0x7f0000010ae0)="050102003a00010060ffb0002200000000000000040000000100000500000000000001000000000000000000a57c000001000000000000001a0400000000000003000000000000000010e607090c0c00355e59530010e607090c0c00355e59530010e607090c0c00355e59530100000000000000000000000000000000000000002a4c696e757820554446465300000000000000000000000405000000000000120000000000000000000000100000001a0400002300"/192, 0xc0, 0xa6400}, {&(0x7f0000010ba0)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa6600}, {&(0x7f0000010fc0)="05010200bd0001008d26db002600000000000000040000000100000c00000000000003000000000000000000f77e000001000000000000003b0000000000000000000000000000000010e607090c0c00355e59530010e607090c0c00355e59530010e607090c0c00355e59530100000000000000000000000000000000000000002a4c696e7578205544464653000000000000000000000004050000000000001300000000000000000000003b000000010000000504000008746d70051700000873797a2d696d61676567656e33343530373730373133050600000866696c6530050600000866696c653000"/256, 0x100, 0xa6c00}, {&(0x7f00000110c0)="05010200c3000100b831aa002700000000000000040000000100000500000000000003000000000000000000a57c000001000000000000000a0000000000000000000000000000000010e607090c0c00355e59530010e607090c0c00355e59530010e607090c0c00355e59530100000000000000000000000000000000000000002a4c696e7578205544464653000000000000000000000004050000000000001400000000000000000000000a00000073797a6b616c6c657273000000000000", 0xc0, 0xa6e00}, {&(0x7f0000011180)="05010200000001009d72c0002800000000000000040000000100000500000000000001000000000000000000a57c00000200000000000000282300000000000012000000000000000010e607090c0c00355e59530010e607090c0c00355e59530010e607090c0c00355e59530100000000000000000000000000000000000000002a4c696e75782055444646530000000000000000000000040500000000000015000000000000000000000020000000000e0000290000000000000000000000281500003100"/224, 0xe0, 0xa7000}, {&(0x7f0000000640)="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"/352, 0x160, 0xa8000}, {&(0x7f00000113c0)="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"/288, 0x120, 0xa9800}, {&(0x7f00000114e0)="0501020052000100beaba0004000000000000000040000000100000500000000000000040000000000000000a57c00000100000000000000000000000000000000000000000000000010e607090c0c00354c12560010e607090c0c00354c12560010e607090c0c00354c12560100000000000000000000000000000000000000002a4c696e7578205544464653000000000000000000000004050000000000001000"/192, 0xc0, 0xaa000}, {&(0x7f0000011620)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667320322e33000000000000000000000000000010e607090c0c00354c1256002a4c696e7578205544464653000000000000000000000004050000", 0xe0, 0xfc0c0}, {&(0x7f0000011700)="000000000000000001000000000000000000000000000000000000000000000006000200ed0001006ba8e801e107000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000", 0x80, 0xfc1e0}, {&(0x7f0000011780)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000005001000000000000000200001000000000000000000000004000000001000000002a4c696e75782055444646530000000000000000000000040500"/128, 0x80, 0xfc2c0}, {&(0x7f0000011800)="00000000000000000000000000000000002000008000000002400000002a554446205370617261626c6520506172746974696f6e500104050000000001000000200002003801000070000000f0070000000000000000000000000000000000000500020005000100879cf001e20700000300000001000000002b4e53523032000000000000000000000000000000000000000000000000000000000000000000000200"/192, 0xc0, 0xfc3a0}, {&(0x7f00000118c0)="00273fa90e000000000000000000000000000000000000000400000010050000d0020000002a48b1f1d59b696e75780100000000000080000000000000000000", 0x40, 0xfc4a0}, {&(0x7f0000011900)="0700020035000100927f3000e30700000400000005000000002600004d000000001600007500000000e0000090000000001e00000101000000140000f5070000", 0x40, 0xfc600}, {&(0x7f0000011940)="0400020012000100f43bf001e407000005000000002a554446204c5620496e666f00000000000000000000005001040500000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000", 0x80, 0xfc800}, {&(0x7f0000011a00)="08000200e80001000000f001e50700"/32, 0x20, 0xfca00}, {&(0x7f0000011a20)="000002001800010021d42801f0070000002a5544462053706172696e67205461626c65000000000050010405000000002000000000000000ffffffff10010000ffffffff30010000ffffffff50010000ffffffff70010000ffffffff90010000ffffffffb0010000ffffffffd0010000fffffffff0010000ffffffff10020000ffffffff30020000ffffffff50020000ffffffff70020000ffffffff90020000ffffffffb0020000ffffffffd0020000fffffffff0020000ffffffff100300080000000000000000ffffffff50030000ffffffff70030000ffffffff90030000ffffffffb0030000ffffffffd0030000fffffffff0030000ffffffff10040000ffffffff30040000ffffffff50040000ffffffff70040000ffffffff90040000ffffffffb0040000ffffffffd0040000fffffffff00400"/320, 0x140, 0xfe000}, {&(0x7f0000011b60)="020002002700010076b5f001ff070000002000006000000000200000e0070000", 0x20, 0xffdfe}, {&(0x7f00000115a0)="01000200a40001001aaef001e00700000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010002000300010000000100000008313233343536373831323334353637384c696e757855444600"/128, 0x80, 0x8fc000}], 0x0, &(0x7f0000000040)={[{@umask={'umask', 0x3d, 0xcd}}, {@anchor={'anchor', 0x3d, 0x7ff}}, {@shortad}, {@unhide}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@gid}]}, 0x1) 23:17:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) (rerun: 64) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0x5, 0x5, 0xfffffff9, 0xa, "0ec4b2020e045f342cb7443a6e72a851279f96"}) (async, rerun: 32) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x6, 0x82, 0x40, 0x0, 0x6, 0x8}, {0x3, 0x4, 0x1, 0xf9ca, 0x2, 0x200000000}], ['\x00', '\x00', '\x00']}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x1}, 0x48) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1700050007"], 0xd) 23:17:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = inotify_init() dup3(r0, r1, 0x0) 23:17:19 executing program 4: setgroups(0x1, &(0x7f0000000080)=[0x0]) 23:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x1600}}, 0x5c}}, 0x0) 23:17:19 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000340), &(0x7f0000000000)=0x98) 23:17:19 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 23:17:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000340), &(0x7f0000000380)=0xc) 23:17:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000140), 0x90) [ 777.032100][T21904] loop2: detected capacity change from 0 to 18400 [ 777.066844][T21904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/09/12 12:00 (1000) 23:17:19 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x0) 23:17:19 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) bind$unix(r1, &(0x7f0000000100)=@abs={0x8}, 0x8) 23:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x1800}}, 0x5c}}, 0x0) 23:17:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x80000000, 0x2d4, 0x9, 0xffff8000, 0x14, "915395515b1274b872051b4e68823d6a902a43"}) 23:17:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) dup2(r0, r1) 23:17:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000000), &(0x7f0000000080)=0x18) 23:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x1900}}, 0x5c}}, 0x0) 23:17:19 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c}, 0x1c) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x0, &(0x7f0000000180)={0x1c, 0x1c}, 0x1c) [ 777.211326][T21912] ptm ptm13: ldisc open failed (-12), clearing slot 13 23:17:19 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="6aa54558091b747b7b9bb72a1b3e2fbacce57a8b838f111f4f3c7e0ed905cd7bfbbb17207effb5496d1184fd1a66ff0ac733dd0daaa9e6b5a94596d2711236c47f6bac83f56f814600d54647371e39e5c4a73bfc1875cae88ae3709f3da5b2cd455192614057fbb1c1735602972b0d24f07685fdd6da04aca560e09a615365aac7ec7b21fd74c03e6eaafda03856836592eef386fefd78f28adaf32d447a3acce98632e8f03139e8168719", 0xab, 0x20088, &(0x7f00000002c0)={0x1c, 0x1c, 0x2}, 0x1c) 23:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x2800}}, 0x5c}}, 0x0) 23:17:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x14) 23:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x3f00}}, 0x5c}}, 0x0) 23:17:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 23:17:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="15", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[], 0x6c}, 0x0) 23:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x4000}}, 0x5c}}, 0x0) [ 777.339339][ T3648] Bluetooth: hci6: sending frame failed (-49) [ 777.339581][T21954] Bluetooth: hci6: Frame reassembly failed (-84) [ 777.352095][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -49 23:17:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x80000000, 0x2d4, 0x9, 0xffff8000, 0x14, "915395515b1274b872051b4e68823d6a902a43"}) 23:17:19 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) 23:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x4800}}, 0x5c}}, 0x0) 23:17:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="29c095209d092db8510e6181fc705d2804c64435533a8ec29422f165f8e52a01dfd7d8d5da6dc2f9d7d6ef7547851b70d14e5120662cbe177cbdb63d4b941945f51997d00e98e436032a52554db4cdbd5380d0a440839cf671f96cc33c29dfde98073b66a62aab50d4692bf405ad9f657226c78125c8b0cebe584088e74c7c2e1de7ffb37823d998ecff08c0614ce17b", 0x90}, {0x0}, {&(0x7f0000001ec0)="eb", 0x1}], 0x3}, 0x0) 23:17:19 executing program 2: open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) 23:17:19 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @broadcast, @random="0c60be26a9d1"}}}}, 0x0) 23:17:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x4c00}}, 0x5c}}, 0x0) 23:17:19 executing program 4: syz_emit_ethernet(0x1002, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) setgroups(0x40000000000003c8, &(0x7f0000000d80)=[0x0, 0x0, 0x0]) 23:17:20 executing program 0: syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 23:17:20 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000140), &(0x7f00000000c0)=0x90) 23:17:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f0000000140)=@in={0x0, 0x2}, 0x7, 0x0}, 0x0) 23:17:20 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="57f8c752d696aaaaaaaaaabb86dd600e389a0014000000000000000000000001ffffffffffff3b"], 0x0) [ 777.517183][ T3648] Bluetooth: hci6: sending frame failed (-49) [ 777.523461][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 777.529570][T21977] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x80000000, 0x2d4, 0x9, 0xffff8000, 0x14, "915395515b1274b872051b4e68823d6a902a43"}) 23:17:20 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x23, 0x0, 0x0) 23:17:20 executing program 0: syz_emit_ethernet(0xa3, &(0x7f0000000300)={@random="57f8c752d696", @remote, @val, {@ipv4}}, 0x0) 23:17:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x2000, 0x0, 0x0) 23:17:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x6000}}, 0x5c}}, 0x0) 23:17:20 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="57f8c752d696aaaaaaaaaabb86dd60ba7fc20014000000000000e9002e57d4ee0abe6cc10001ffb8"], 0x0) 23:17:20 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 23:17:20 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c) 23:17:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x98) 23:17:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x6800}}, 0x5c}}, 0x0) [ 777.664433][ T9338] Bluetooth: hci6: Frame reassembly failed (-84) [ 777.678713][T22008] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:20 executing program 4: open(0x0, 0x1, 0x0) 23:17:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="29c095209d092db8510e6181fc705d2804c64435533a8ec29422f165f8e52a01dfd7d8d5da6dc2f9d7d6ef7547851b70d14e5120662cbe177cbdb63d4b941945f51997d00e98e436032a52554db4cdbd5380d0a440839cf671f96cc33c29dfde98073b66a62aab50d4692bf405ad9f657226c78125c8b0cebe584088e74c7c2e1de7ffb37823d998ecff08c0614ce17b", 0x90}, {&(0x7f00000000c0)="0486f6dc298286f551c611777716aca9691192c2", 0x14}, {&(0x7f0000000180)="6aabbad0f2e1994163738134a1b2a8c7247500"/29, 0x1d}, {&(0x7f0000000500)="0e082ff6b7286730f45bf58bbd04d9d7a8ebcd0fbfd4c64275dd5f9f1cacb6eb7c5d2de2ff388695debcedd5bc42903b4a941313a46e3c11d15d5a43947e5c5ea3c416bac48bbdcb5bd5c145e4da8702efc30d460767e8cf4667a6c808624de5c280458679246fca2d6bb04dac37207b341116673155f7f8c2e1522bec4f11c47a53c4372b3caddffb1b8324f3b77697c349480fdded968e9572a8a3beba8c684cc366e5716311", 0xa7}, {&(0x7f00000005c0)="5610f7ba3b4766e0495b19e3cb20c6bbfe3621102886d782133c47fc4780ff356b9b4d252150551168d1e4f3e2786a129cad0fdc87f315b3992cb11380227efdd9f2ef9a7d40f927da51366115cf4b1b0f7b7929b1c8df3539118972d14c0638aa514ef37518a9edbd8015b3198c0c697c4f861afdc77150336fbde8f760e0415c909ff37f247ceecf600c659633463c5ad21753ef9dbf49bad0c4ac93527c8898942a84a368d4ffc6b39758b20ebf40d907a816082c1ce42da6d0ce1428a553c1d7a3796c3a18", 0xc7}, {&(0x7f00000006c0)="ef8e1e060ece03382b688cf2f0bca6af91627b212937e1f560b1a95a79090ffdc855fc43ff9824b1dd44c5d719bfbaa637e1b3dbc4e9ad366652dd7ece45a991e6513be91ab8351909cf902abdad6665ccea321c402de8bc4e9ecddec422172c813c16de500ecd4fd1514f74a6a3c5368f3874b21daa9639a480d6f4b751dd790b4a1abc8824288543c303a934ffd479b6a987dc5070e4c04a3782f151c681b540a759d0ff7e5b83e93af37ed90a3a9efb29a92d90925f597808a0f2183862abe7d494a1caf2d31efcfe11e9d037bf48eba6a6faa7c8c910", 0xd8}, {&(0x7f0000001ec0)="ebbd9ca1a3b3f94e46fa44ac0d4ef12cb27104f57edbfe89a669b5cb970b82edb117e9f3ed7b9711890504f3de845a64e99745697b117623fdc3fba4c07bbca3d68604cf4b1dce734c7e837a7674bd0f4d1e90c3d48885205818c1de098c6446b59a2606c20d20b1fa426ab1b599b3389ffe14cb23b6561b6855ca06e250294bc53cd31498bac4e3f4fe9259d40b5f634832885a43692f1b11f9d433c10748e813beeeb2a22325c70924c54e54f331e922b71d364edd1d8ff884df3420407f0b698a7d5aee5d81c94e984ea705d073be59746403c8b2872858066b1aa8a90b8b498f41dc1f92dda2133f2d406f3600fcb5a6b26514be67f6129ea3e5c2b9793e0a11aa88f6aa0075f116b744423adc0e4c21f7ad2b158446547ea595fa01c309d6a02e840b31f48a950fe60452b1094a5e024b59b1d573f7f2ca629592d1037fe1d767a676e0a8aa6a391dcdbb136a59632040d594f7b120efd51718a5fb1825e44ce5435b2d3b94e099f1c8871f95906399c8cdd7912249564d0442552f05ed50257aecbab1d45c29375803314adc1b3b81e383a6fa36e50d2ce088b986b5b9dd524286229866721baa1e861005cc1f01d27994ea84d7008bf2d2fcb4a7d1afb76761af1d9f1806a9b1b9f83ef0d0a9c816f0e227d98f9e0a7c800af5a49e51827c8c918505c8657967d3baecfaf98031ec54776b58068fbfbed666e5ef0cf4b307832b705ed9247f37c7292886bc227209e5243e9f32dcc662fa778f79bcce6013a3acedd26f5445d3da287f35f542e3e1dbcc7f35db221b286f407d5a51fb639765f740856914c1e49d819290e2ed4f1897b0911c87a25133032ef801815617ffc1e4888e46f71b348225669628ca97e941631e5ab6e1fe956589d40a0c46a84d8db5496ea3ac4f5b40e2c6af93ef85968ef5fd30d5d12025db187eedeeb3a240512ea174", 0x2a6}], 0x7}, 0x0) sendto$inet(r0, &(0x7f00000008c0)='O', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000001200)="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", 0xb54, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000000)={0x0, 0x2, 0x2, [0x4, 0x6]}, 0xc) 23:17:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x80000000) r1 = syz_open_pts(r0, 0x4002) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xfb) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7dd) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x8000, 0x9, 0x101, 0x7fff, 0xd, "e38690c30617c5aae9eb25e403f2840138f8c8"}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x9, 0x4, 0x40}) 23:17:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x6c00}}, 0x5c}}, 0x0) 23:17:22 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@abs={0x8}, 0x12f, &(0x7f00000001c0)=[{0x0, 0x2f00}, {&(0x7f00000000c0)='G', 0x1}, {0x0}], 0x3}, 0x0) 23:17:22 executing program 4: getrlimit(0x0, &(0x7f00000003c0)) 23:17:22 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) connect$unix(r0, &(0x7f00000002c0)=@file={0xa}, 0xa) 23:17:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000100)={0x0, 0x6}, 0x8) 23:17:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) 23:17:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x7400}}, 0x5c}}, 0x0) [ 779.704430][ T3655] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 779.704529][ T3648] Bluetooth: hci6: command 0x1003 tx timeout 23:17:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 23:17:22 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000180)="fec3016600df24f206d0151c5b84e255763881bfa87fc7fea5be3458162ca54423b4a6ca98d4e3917bc2ca869ec922e049c97b9ed6b5e15d38252d88", 0x3c, 0x0, &(0x7f0000000200)={0x1c, 0x1c, 0x2}, 0x1c) 23:17:22 executing program 0: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000080)='htcp\x00', 0x5) 23:17:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x80000000) (async) r1 = syz_open_pts(r0, 0x4002) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xfb) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7dd) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x8000, 0x9, 0x101, 0x7fff, 0xd, "e38690c30617c5aae9eb25e403f2840138f8c8"}) (async) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x9, 0x4, 0x40}) 23:17:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000240), 0x4) 23:17:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x7a00}}, 0x5c}}, 0x0) 23:17:22 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000200)='\f', 0x1, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) 23:17:22 executing program 4: select(0xd, 0x0, 0x0, 0x0, &(0x7f0000000140)) 23:17:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x10}, 0x10) close(r0) 23:17:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x80000000) (async, rerun: 64) r1 = syz_open_pts(r0, 0x4002) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xfb) (async) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7dd) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x8000, 0x9, 0x101, 0x7fff, 0xd, "e38690c30617c5aae9eb25e403f2840138f8c8"}) (async) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x9, 0x4, 0x40}) 23:17:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x1000000}}, 0x5c}}, 0x0) 23:17:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 23:17:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="14"], 0x14}, 0x0) 23:17:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180), 0x98) 23:17:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x0, 0x6}, 0x98) 23:17:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x2000000}}, 0x5c}}, 0x0) 23:17:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) 23:17:22 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, &(0x7f0000000000)="03", 0x1, 0x0, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) 23:17:22 executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000100), &(0x7f00000001c0)=0x90) 23:17:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x3000000}}, 0x5c}}, 0x0) 23:17:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x14) 23:17:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000240), &(0x7f0000000300)=0xb0) 23:17:22 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) 23:17:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x4000000}}, 0x5c}}, 0x0) 23:17:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) [ 780.062345][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) [ 780.072185][T22089] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140), 0x8) 23:17:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) poll(&(0x7f0000000000)=[{r1, 0x40}, {r0, 0x2}, {r0}, {r0, 0x2}], 0x4, 0xae) 23:17:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000a40)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000840000000b000000e0000002140000008400000007"], 0x64}, 0x181) 23:17:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x5000000}}, 0x5c}}, 0x0) 23:17:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000080)={r2}, 0x8) 23:17:24 executing program 4: sendmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d40)}, 0x0) 23:17:24 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="b9b2f5d9513c", @remote, @val, {@ipv4}}, 0x0) 23:17:24 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000400)={@random="57f8c752d696", @remote, @val, {@ipv6}}, 0x0) 23:17:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@authinfo={0x10}], 0x10}, 0x0) 23:17:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0xb) [ 782.104503][ T3655] Bluetooth: hci6: command 0x1003 tx timeout [ 782.114644][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001480)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000040)='7', 0x1}], 0x1}, 0x20101) 23:17:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x82) 23:17:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x6000000}}, 0x5c}}, 0x0) [ 782.218987][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 782.225549][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 782.234751][T22127] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="15", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="28000000840000000400000006000002080000", @ANYRESDEC], 0x6c}, 0x0) 23:17:24 executing program 0: clock_getres(0xf, &(0x7f0000000080)) 23:17:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000100), 0x4) 23:17:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000014c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) 23:17:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x7000000}}, 0x5c}}, 0x0) 23:17:24 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 23:17:24 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x2b, &(0x7f0000000000), 0x4) 23:17:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0xc) 23:17:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 23:17:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x8000000}}, 0x5c}}, 0x0) 23:17:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)=0x8) [ 782.353286][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 782.359540][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 782.374295][T22147] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:24 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x90a01, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={0x0, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x7, 0x4, 0x7ff, 0x3, 0x19, "08a758385be5e4b465216ea7ac7d2a97cc0372"}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)) 23:17:24 executing program 0: msgsnd(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0xd7, 0x0) 23:17:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)}], 0x1}, 0x0) sendto$inet(r0, &(0x7f00000008c0)='O', 0x1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="e4", 0x1}], 0x1}, 0x0) 23:17:24 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 23:17:24 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='5', 0x1, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 23:17:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x9000000}}, 0x5c}}, 0x0) 23:17:24 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="b9b2f5d9513c", @remote, @val, {@ipv4}}, 0x0) 23:17:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x1c, 0x1c, 0x2}, 0x1c) dup2(r0, r1) [ 782.505012][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 782.511369][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 782.518294][T22170] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:25 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x90a01, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={0x0, 0x2}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x7, 0x4, 0x7ff, 0x3, 0x19, "08a758385be5e4b465216ea7ac7d2a97cc0372"}) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) ioctl$KDADDIO(r2, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)) 23:17:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xa000000}}, 0x5c}}, 0x0) 23:17:25 executing program 0: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000000c0)="0654aea5295788073b18644d9be3850f33cf22fabb8f1038508aca31a8b81c6ce7ba86c54eecb255c70fba2a7f1b1a1f5bfb5e634db6c9770b52e096f575ba04088acb650c784c40515f24ad6ceb86b9fa7a06ce60", 0x55, 0x4, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) 23:17:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) 23:17:25 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvfrom$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) 23:17:25 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1}, 0xb) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0xb) [ 782.657502][T22190] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x10, 0x2}, 0x10) 23:17:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000), 0xb) 23:17:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xb000000}}, 0x5c}}, 0x0) 23:17:25 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x69, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 23:17:25 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000001700)={@broadcast, @remote, @val, {@ipv4}}, 0x0) 23:17:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000100), 0x88) 23:17:27 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x90a01, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={0x0, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x7, 0x4, 0x7ff, 0x3, 0x19, "08a758385be5e4b465216ea7ac7d2a97cc0372"}) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) ioctl$KDADDIO(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)) 23:17:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xc000000}}, 0x5c}}, 0x0) 23:17:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@sndrcv={0x2c}], 0x2c}, 0x0) 23:17:27 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x9, &(0x7f0000000440), &(0x7f0000000480)=0x4) 23:17:27 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x1c, 0x1c, 0x2}, 0x1c) 23:17:27 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="e2cab1a8d914", @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @rand_addr, @random="e2ad69f8a8c2", @multicast1}}}}, 0x0) 23:17:27 executing program 2: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) [ 784.664480][ T3641] Bluetooth: hci6: command 0x1003 tx timeout [ 784.664550][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x98) 23:17:27 executing program 4: syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) 23:17:27 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @broadcast, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @multicast2, @local, @loopback}}}}, 0x0) 23:17:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xd000000}}, 0x5c}}, 0x0) 23:17:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$smack_xattr_label(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="2f6465762f70746d5812b1"], 0xb, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000100)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000001740)=[@sndrcv={0x2c}], 0x2c}, 0x0) 23:17:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="28000000840000000400000006000002080000", @ANYRESDEC], 0x6c}, 0x0) 23:17:27 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 23:17:27 executing program 0: setgroups(0x40000000000003c8, &(0x7f0000000d80)=[0x0, 0x0, 0x0]) setregid(0x0, 0x0) 23:17:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xe000000}}, 0x5c}}, 0x0) [ 784.801769][ T4090] Bluetooth: hci6: Frame reassembly failed (-84) [ 784.811100][T22241] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)=0x20) 23:17:27 executing program 2: syz_emit_ethernet(0x4e6, &(0x7f0000001740)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 23:17:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0x213}, 0x98) 23:17:27 executing program 1: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @broadcast, @val, {@ipv6}}, 0x0) 23:17:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xf000000}}, 0x5c}}, 0x0) 23:17:27 executing program 0: setitimer(0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x3ff}}, 0x0) 23:17:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$smack_xattr_label(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="2f6465762f70746d5812b1"], 0xb, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:29 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c}, 0x1c) listen(r0, 0x0) 23:17:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000040)="eca37de12d0303b72769c7a9e81e0f6e1f7c5486b31e2264ea0b96933807250e0bea463f2941eebb335a6ee7f1fc9869230c96630fee", 0x36}, {&(0x7f0000000080)="6160c72e350caab54e183d4ef0955c8d9468de961a9857287993d3e2feb0e8388f74b69be0b54cd1875e73b60b0b3e14e9412edb53f33095f28b998e1bb2b9bd56a8c95e5a453c8cc7a724864c6be25daee966d460837e1c603bdb91544dcee5eb520874e970be09302e9a0aa278cfe33fe368f182b2c922170d6c0eae742d52fb74cf0d5726bc49fe16b89d42f3db59db4aa1bc40b3b748a98788ac2c530993692461eb6d98af79af7829d86b1eb73d911d43c8135c81d8d73aee2c6ee56bcd323785e612ceac0fafb7446c3e963338bf91", 0xd2}, {&(0x7f0000000180)="5a6ebcfdcc3e68a5254de5247239b9d99ca5af5f4e9b59497332a9d9df71a3297fffed480f873bfe75cdf5bfa981d53f1fa30d8069add335e2cf8c0800d9960ab999bcc6b1fcdd2a59613b292c1d208e351cf3ffcf83d76c6d1efed3e457cd7e2a36e49052f1851c2897850d6627789caf3b0d2b8980126058fbe28a7fe5f48f998192b4ceaae24c538f10a24c3214e36125e0a5cb19ab9fc0041c416b799285794ea340fa7e9be1dce6db0ef1e8f7583d7aabcc6c2e2419a1ebd3088d808a4434", 0xc1}, {&(0x7f0000000280)="162db05bf7d6484ed0aa36cf6a0f6d6067dbdf0679e1ae71", 0x18}, {&(0x7f00000002c0)="a2d418a8ffb8bc27e317be22947a44d310e77bcbf4767a49963907b8178ca8152d9765a0b9f05faac479bc7e", 0x2c}, {&(0x7f0000000300)="1b21dd4d95468ea559476ea0d5e78e0aee020f5320ef51d77ebf94002c9f75663210cf34f65b62105ce5835503096dfb0db35165d9f923e78e0138e686b371c8837f28c807db42068391487bc62534c3b058955b2affea16c300ae5cda312e523ebf7bc39f089ce955940b086b656fc7eea7d1bce5c279a2be6050ed57701ee7c38aa932d8bb2e617ec54b04774931c1e8afc31772b22c298d61abcb43302aaca76dd96c7f3833851729fc8fa099659ab155b282b738941352aa650ccd30b776e65ea4", 0xc3}, {&(0x7f0000000400)="79510941b044a52e3923b2aab9dbcd76919676eaa8f1b192b12fbd1e2587e1ca16c62836928cec748fef14e0670d3814f28d33e6d82de312f3d749d16e4b1de96277e856f1ccc61169a025068e76fd0ef506ce31b28d581378ab4eb7156cd5f9c68bc6ab2d796bfad1adec19", 0x6c}, {&(0x7f0000000480)="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", 0xdb4}], 0x8) 23:17:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000002c0), 0x98) 23:17:29 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 23:17:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x10000000}}, 0x5c}}, 0x0) [ 786.824424][ T3641] Bluetooth: hci6: command 0x1003 tx timeout [ 786.834531][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:29 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000100)={0x0, 0x3110}, 0x10) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:17:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x902, &(0x7f00000000c0), 0x4) dup2(r0, r1) 23:17:29 executing program 4: syz_emit_ethernet(0x26, &(0x7f0000000080)={@random="57f8c752d696", @remote, @val, {@ipv4}}, 0x0) 23:17:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@sndinfo={0x1c}], 0x1c}, 0x0) 23:17:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x11000000}}, 0x5c}}, 0x0) 23:17:29 executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000200)) [ 786.868586][T22282] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$smack_xattr_label(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="2f6465762f70746d5812b1"], 0xb, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) fsetxattr$smack_xattr_label(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="2f6465762f70746d5812b1"], 0xb, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) 23:17:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000140), 0x88) 23:17:31 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c}, 0x1c) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000000), 0x88) 23:17:31 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000100), &(0x7f0000000140)=0x8) 23:17:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x12000000}}, 0x5c}}, 0x0) 23:17:31 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 23:17:31 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x100000000}) [ 788.904477][ T3641] Bluetooth: hci6: command 0x1003 tx timeout [ 788.914508][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:31 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @remote={0xac, 0x14, 0x0}, @random="0c5dce26a9d1"}}}}, 0x0) 23:17:31 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x80}, 0x10) 23:17:31 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x23, 0x0, &(0x7f00000000c0)) 23:17:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x14000000}}, 0x5c}}, 0x0) 23:17:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x16000000}}, 0x5c}}, 0x0) [ 788.979761][T22309] Bluetooth: hci6: Frame reassembly failed (-84) [ 788.998947][ T9348] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x240000, 0x10, 0x16}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) 23:17:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000280), 0x90) 23:17:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000000c0), 0x88) 23:17:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x18000000}}, 0x5c}}, 0x0) 23:17:33 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x6}, 0x0, &(0x7f0000000100)={r0}, 0x0) 23:17:33 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x100000000}) 23:17:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000040)="a2d192a65138fe9eb46218f72bcbe482c9d6744a5525c567e676039742dac164f7d1a8e3e27395bea7bdac23655acd5a06603786990dca88e6ff63f098c78ea38290b2b6f42afc46adf2594e8eee64fffb86351abb73bed57b1f68a5024e4bd5d49e74b4", 0x64}, {&(0x7f0000000200)="38c042da68b6c44ab1c81135fa12bb1c1ef31f891dbeadfd448700013c48f45be2c2cec86e5af6bd63d5934982", 0x2d}, {&(0x7f0000000280)="36b532214cdae8db470ab7a483c816c0488eed4c2b20d1c731173f35ef18b833c03c", 0x22}, {&(0x7f0000000340)="4f7fb64ddda46817dc3f2f44c01d82293433b7c8fb28", 0x16}], 0x4}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000004c0)="a4d3ff7e4c6b77f9d5545bb4358ded1302fdc9d0a673227ca9bcddbc7ca8a7bef54073aae71d44d3a8059226a5901286c34c08846de020e8b126dbf03a709dbb1d936d0f509f9e3808a59853956af74def50ad47679f1fc46d9b55f4f2ec30a418f046b9ef0ede8a343934e6f3fac7eadbfd10b93d364c495c490462470403097b4a4aecab788bdd145638d9739fcad9919ce96dd2b377228db036e26016e2d325015094eaf58909ba939db49082f323818cddbcba9310a431becdd10159ca0b601d70f91a6d2a697e859ec995fce5819a", 0xd1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000003580)="6f1f4e3eb806f83b07f51b490cbdc5192c6dbeae7cd2e1973f86afc7183524d431c2490af824b1a6ba53bd12cf34d6be4a3e4e31e996cedac129f44de68834a8370aefb59dc0e50feff8f9b5c97854152e9b4722", 0x54}], 0x1}}], 0x3, 0xb4) 23:17:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x47, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4090, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="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", 0x100}], 0x1}}], 0x1, 0x0) [ 790.984423][ T3641] Bluetooth: hci6: command 0x1003 tx timeout [ 790.984541][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:33 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, 0x0) 23:17:33 executing program 4: syz_clone(0x40b00080, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) 23:17:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x19000000}}, 0x5c}}, 0x0) 23:17:33 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, &(0x7f0000000780)) [ 791.134084][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:35 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:17:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x28000000}}, 0x5c}}, 0x0) 23:17:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000400)=[{0x0, 0xf00}, {&(0x7f0000000100)='J', 0x1}], 0x2}, 0x0) 23:17:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x240000, 0x10, 0x16}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x240000, 0x10, 0x16}, 0x18) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) (async) 23:17:35 executing program 1: syz_clone(0xa00c2080, 0x0, 0x0, 0x0, 0x0, 0x0) 23:17:35 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x100000000}) 23:17:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) [ 793.144508][ T3641] Bluetooth: hci6: command 0x1003 tx timeout [ 793.149622][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:35 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25, 0xf002100}, 0xc) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r2}, 0x10) 23:17:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x3f000000}}, 0x5c}}, 0x0) 23:17:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) [ 793.235839][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 793.242019][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 23:17:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in={0x2, 0x0, @private}, 0xc0, &(0x7f0000000400)=[{&(0x7f0000000040)='f', 0x1}, {&(0x7f0000000100)='J', 0x1}], 0x2}, 0x0) 23:17:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x40000000}}, 0x5c}}, 0x0) 23:17:35 executing program 4: syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xb6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x5b, {{0x5}, {0x5, 0x24, 0x0, 0xff00}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x8, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}]}}]}}, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, 0x0, 0x0) 23:17:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x240000, 0x10, 0x16}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) 23:17:35 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x20, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 23:17:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x48000000}}, 0x5c}}, 0x0) [ 793.363315][ T4090] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:35 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffd0}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4bab}}, './file0\x00'}) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x10, 0xfffffffffffffe8d, &(0x7f0000000500)="b9ff0300600d698cb89e10f043051fffffff00074000632f77fb05140e0ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39050108038da1924425181aa5", 0x0, 0x1e00, 0x60000000, 0xb20c, 0xfffffffffffffe09, &(0x7f0000000040)="3f58266c799726865bf7830e3773dce9aa7e76becc18910b7b50b80dbed5f757c2a04467671d72f716595ff422e71a25d906dcc8c7007c0605a0ffffffff"}, 0x28) [ 793.684510][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd 23:17:36 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x100000000}) 23:17:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x4c000000}}, 0x5c}}, 0x0) 23:17:36 executing program 2: futex(&(0x7f0000000300), 0x6, 0x0, &(0x7f0000000340), 0x0, 0x0) 23:17:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="10de3759b0a8acc11db7a62ca9f3945c", 0x10}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmmsg$alg(r1, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)="d8a0fa924239a992c0355f6d8aec87a295", 0x11}], 0x1, &(0x7f00000002c0)=[@assoc={0x18}], 0x18}], 0x1, 0x0) 23:17:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in={0x2, 0x0, @private}, 0x10, &(0x7f0000000400)=[{0x0, 0x7ffff000}, {&(0x7f0000000100)='J', 0x1}], 0x2}, 0x0) 23:17:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x60000000}}, 0x5c}}, 0x0) 23:17:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x68000000}}, 0x5c}}, 0x0) [ 794.094887][ T7] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 794.294477][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 794.303626][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.311742][ T7] usb 5-1: Product: syz [ 794.316107][ T7] usb 5-1: Manufacturer: syz [ 794.320733][ T7] usb 5-1: SerialNumber: syz [ 794.344745][T22398] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 794.351997][T22398] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 794.645162][ T7] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 794.655277][ T7] usb 5-1: USB disconnect, device number 12 23:17:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x6c000000}}, 0x5c}}, 0x0) 23:17:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in={0x2, 0x0, @private}, 0x10, &(0x7f0000000400)=[{0x0, 0xf0ff7f00000000}, {&(0x7f0000000100)='J', 0x1}], 0x2}, 0x0) 23:17:37 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) 23:17:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, "ae4c810100000000000956e8ffff01230000ff"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x81) 23:17:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf250100000008"], 0x98}}, 0x0) 23:17:37 executing program 2: syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'Us\r', 0x24, 0x6, 0x0, @dev, @ipv4, {[@fragment, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 795.384599][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 795.384665][ T3641] Bluetooth: hci6: command 0x1003 tx timeout 23:17:37 executing program 1: semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x77359400}) 23:17:37 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) 23:17:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:37 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x7fffffff}, 0x8) 23:17:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x74000000}}, 0x5c}}, 0x0) 23:17:37 executing program 3: io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000780)='!', 0x49}]) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x900) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x501000, 0x0) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000000180)="d51028255881e6d29defbdbc8ae4826aeab6a1b1b6324fad20add422d7488ebd7920a73a43b0669e6edc60f03c7d3a849e507001bd0fd6e746d64c65b02782911d4c42e46654fc0ebf131ad500f2294f31621789e566aad1c3e205e8168439da17872a6b8e7016fbc6e40a49524f064e7f784b546d704c04ea9c5c2e429fa8a2577840234b1d3d9e1f9ff910e2e2f455208bb1dc3d8ae3268679", 0x9a, 0xfffffffffffffffb, 0x0, 0x2, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x8, r4, &(0x7f0000000240)="b80d2796b7efd62c035218cdda8584ed3522f97f48c097442f123542979190d834e70f0c1f707e9125012d299971fa259346dd47b54d6b296d7de2b5965c89675e79fd8e5ad72a7921b995b149007748fa5c1887d189fc80eb5031ba50489b96034d8c53d6d425f7f23d89c17d8e4f159128a285de7d30b3187cd6", 0x7b, 0x9}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x47, r5, &(0x7f00000002c0)="bd1ac47e0cfc867f5b98c68bb0bcc4abbee4dea977f1f68f4bb952a87aca4d0ba2db0d823d2e9373386e0dc33be077dd7b6cc0c5f58930a61f76ccfb95526f3aca653e7cd4a22bdbd99500f9", 0x4c, 0x2, 0x0, 0x1, r7}]) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r8, 0x400455c8, 0x4) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000140)) 23:17:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2}, 0x48) 23:17:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:38 executing program 1: syz_open_dev$loop(&(0x7f00000005c0), 0xffffffffffffffff, 0x270080) 23:17:38 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) 23:17:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x7a000000}}, 0x5c}}, 0x0) [ 795.515660][ T27] audit: type=1800 audit(1666480657.981:805): pid=22453 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1182 res=0 errno=0 23:17:38 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x280000, 0x0) 23:17:38 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000001a40), 0x129040, 0x0) 23:17:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:38 executing program 0: semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x5}, {}], 0x2, &(0x7f0000000180)) [ 795.590155][ T27] audit: type=1804 audit(1666480658.001:806): pid=22453 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/832/file0" dev="sda1" ino=1182 res=1 errno=0 [ 795.624250][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:38 executing program 2: semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x5}, {}], 0x2, &(0x7f0000000040)={0x77359400}) 23:17:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xf5ffffff}}, 0x5c}}, 0x0) [ 795.636413][ T27] audit: type=1804 audit(1666480658.081:807): pid=22465 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/832/file0" dev="sda1" ino=1182 res=1 errno=0 [ 795.666706][T22465] Bluetooth: hci6: Frame reassembly failed (-84) [ 797.624446][ T3641] Bluetooth: hci6: command 0x1003 tx timeout [ 797.624497][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:40 executing program 3: io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000780)='!', 0x49}]) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x900) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x501000, 0x0) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000000180)="d51028255881e6d29defbdbc8ae4826aeab6a1b1b6324fad20add422d7488ebd7920a73a43b0669e6edc60f03c7d3a849e507001bd0fd6e746d64c65b02782911d4c42e46654fc0ebf131ad500f2294f31621789e566aad1c3e205e8168439da17872a6b8e7016fbc6e40a49524f064e7f784b546d704c04ea9c5c2e429fa8a2577840234b1d3d9e1f9ff910e2e2f455208bb1dc3d8ae3268679", 0x9a, 0xfffffffffffffffb, 0x0, 0x2, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x8, r4, &(0x7f0000000240)="b80d2796b7efd62c035218cdda8584ed3522f97f48c097442f123542979190d834e70f0c1f707e9125012d299971fa259346dd47b54d6b296d7de2b5965c89675e79fd8e5ad72a7921b995b149007748fa5c1887d189fc80eb5031ba50489b96034d8c53d6d425f7f23d89c17d8e4f159128a285de7d30b3187cd6", 0x7b, 0x9}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x47, r5, &(0x7f00000002c0)="bd1ac47e0cfc867f5b98c68bb0bcc4abbee4dea977f1f68f4bb952a87aca4d0ba2db0d823d2e9373386e0dc33be077dd7b6cc0c5f58930a61f76ccfb95526f3aca653e7cd4a22bdbd99500f9", 0x4c, 0x2, 0x0, 0x1, r7}]) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r8, 0x400455c8, 0x4) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000140)) io_setup(0x202, &(0x7f0000000200)) (async) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000780)='!', 0x49}]) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x900) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) sendfile(r2, r3, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) sendfile(r5, r6, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x501000, 0x0) (async) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000000180)="d51028255881e6d29defbdbc8ae4826aeab6a1b1b6324fad20add422d7488ebd7920a73a43b0669e6edc60f03c7d3a849e507001bd0fd6e746d64c65b02782911d4c42e46654fc0ebf131ad500f2294f31621789e566aad1c3e205e8168439da17872a6b8e7016fbc6e40a49524f064e7f784b546d704c04ea9c5c2e429fa8a2577840234b1d3d9e1f9ff910e2e2f455208bb1dc3d8ae3268679", 0x9a, 0xfffffffffffffffb, 0x0, 0x2, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x8, r4, &(0x7f0000000240)="b80d2796b7efd62c035218cdda8584ed3522f97f48c097442f123542979190d834e70f0c1f707e9125012d299971fa259346dd47b54d6b296d7de2b5965c89675e79fd8e5ad72a7921b995b149007748fa5c1887d189fc80eb5031ba50489b96034d8c53d6d425f7f23d89c17d8e4f159128a285de7d30b3187cd6", 0x7b, 0x9}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x47, r5, &(0x7f00000002c0)="bd1ac47e0cfc867f5b98c68bb0bcc4abbee4dea977f1f68f4bb952a87aca4d0ba2db0d823d2e9373386e0dc33be077dd7b6cc0c5f58930a61f76ccfb95526f3aca653e7cd4a22bdbd99500f9", 0x4c, 0x2, 0x0, 0x1, r7}]) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r8, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000140)) (async) 23:17:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xffffff7f}}, 0x5c}}, 0x0) 23:17:40 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x81}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 23:17:40 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000000c0)="0654aea5295788073b18644d9be3850f33cf22fabb8f1038508aca31a8b81c6ce7ba86c54eecb255c70fba2a7f1b1a1f5bfb5e634db6c9770b52e096f575ba04088acb650c784c40515f24ad6ceb86b9fa7a06ce60", 0x55, 0x4, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) 23:17:40 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x700) 23:17:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:40 executing program 2: syz_emit_ethernet(0x12, &(0x7f0000000500)={@empty, @empty, @val={@void}, {@generic={0x8035}}}, 0x0) 23:17:40 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) 23:17:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0xfffffff5}}, 0x5c}}, 0x0) 23:17:40 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 23:17:40 executing program 1: syz_emit_ethernet(0x18a, 0x0, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000240)={@dev, @local, @val={@void}, {@llc_tr={0x11, {@llc={0x0, 0x0, "fb"}}}}}, 0x0) [ 797.777908][ T27] audit: type=1800 audit(1666480660.241:808): pid=22496 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1165 res=0 errno=0 23:17:40 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@broadcast, @local, @val, {@ipv6}}, 0x0) [ 797.811933][ T27] audit: type=1804 audit(1666480660.271:809): pid=22496 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/833/file0" dev="sda1" ino=1165 res=1 errno=0 [ 797.860922][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) [ 797.867900][ T27] audit: type=1804 audit(1666480660.321:810): pid=22506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/833/file0" dev="sda1" ino=1165 res=1 errno=0 [ 797.893689][T22506] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:42 executing program 3: io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000780)='!', 0x49}]) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x900) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x501000, 0x0) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000000180)="d51028255881e6d29defbdbc8ae4826aeab6a1b1b6324fad20add422d7488ebd7920a73a43b0669e6edc60f03c7d3a849e507001bd0fd6e746d64c65b02782911d4c42e46654fc0ebf131ad500f2294f31621789e566aad1c3e205e8168439da17872a6b8e7016fbc6e40a49524f064e7f784b546d704c04ea9c5c2e429fa8a2577840234b1d3d9e1f9ff910e2e2f455208bb1dc3d8ae3268679", 0x9a, 0xfffffffffffffffb, 0x0, 0x2, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x8, r4, &(0x7f0000000240)="b80d2796b7efd62c035218cdda8584ed3522f97f48c097442f123542979190d834e70f0c1f707e9125012d299971fa259346dd47b54d6b296d7de2b5965c89675e79fd8e5ad72a7921b995b149007748fa5c1887d189fc80eb5031ba50489b96034d8c53d6d425f7f23d89c17d8e4f159128a285de7d30b3187cd6", 0x7b, 0x9}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x47, r5, &(0x7f00000002c0)="bd1ac47e0cfc867f5b98c68bb0bcc4abbee4dea977f1f68f4bb952a87aca4d0ba2db0d823d2e9373386e0dc33be077dd7b6cc0c5f58930a61f76ccfb95526f3aca653e7cd4a22bdbd99500f9", 0x4c, 0x2, 0x0, 0x1, r7}]) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r8, 0x400455c8, 0x4) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000140)) io_setup(0x202, &(0x7f0000000200)) (async) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000780)='!', 0x49}]) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x900) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) sendfile(r2, r3, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) sendfile(r5, r6, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x501000, 0x0) (async) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000000180)="d51028255881e6d29defbdbc8ae4826aeab6a1b1b6324fad20add422d7488ebd7920a73a43b0669e6edc60f03c7d3a849e507001bd0fd6e746d64c65b02782911d4c42e46654fc0ebf131ad500f2294f31621789e566aad1c3e205e8168439da17872a6b8e7016fbc6e40a49524f064e7f784b546d704c04ea9c5c2e429fa8a2577840234b1d3d9e1f9ff910e2e2f455208bb1dc3d8ae3268679", 0x9a, 0xfffffffffffffffb, 0x0, 0x2, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x8, r4, &(0x7f0000000240)="b80d2796b7efd62c035218cdda8584ed3522f97f48c097442f123542979190d834e70f0c1f707e9125012d299971fa259346dd47b54d6b296d7de2b5965c89675e79fd8e5ad72a7921b995b149007748fa5c1887d189fc80eb5031ba50489b96034d8c53d6d425f7f23d89c17d8e4f159128a285de7d30b3187cd6", 0x7b, 0x9}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x47, r5, &(0x7f00000002c0)="bd1ac47e0cfc867f5b98c68bb0bcc4abbee4dea977f1f68f4bb952a87aca4d0ba2db0d823d2e9373386e0dc33be077dd7b6cc0c5f58930a61f76ccfb95526f3aca653e7cd4a22bdbd99500f9", 0x4c, 0x2, 0x0, 0x1, r7}]) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r8, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000140)) (async) 23:17:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 23:17:42 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x97, &(0x7f00000000c0)=""/151, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:17:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}}, 0x0) 23:17:42 executing program 0: syz_open_dev$vcsa(&(0x7f0000000c00), 0x0, 0x200000) 23:17:42 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:42 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 799.864706][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 799.865062][ T3641] Bluetooth: hci6: command 0x1003 tx timeout 23:17:42 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/key-users\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018"]) 23:17:42 executing program 1: syz_emit_ethernet(0x5e, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv4={0x800, @dccp={{0x10, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x21, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@remote}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x0, 0x3, 'e'}]}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b03fbc", 0x0, "dd7fda"}}}}}}, 0x0) 23:17:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}}, 0x0) [ 799.930977][ T27] audit: type=1800 audit(1666480662.391:811): pid=22524 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1184 res=0 errno=0 [ 799.955157][ T27] audit: type=1804 audit(1666480662.391:812): pid=22524 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/834/file0" dev="sda1" ino=1184 res=1 errno=0 23:17:42 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/key-users\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 23:17:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}}, 0x0) [ 799.999940][T22530] Bluetooth: hci6: Frame reassembly failed (-84) [ 800.002251][ T27] audit: type=1804 audit(1666480662.451:813): pid=22530 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/834/file0" dev="sda1" ino=1184 res=1 errno=0 [ 800.040132][ T9348] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x21fc0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x430000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:44 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0xc) 23:17:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x5c}}, 0x0) 23:17:44 executing program 0: epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xff}, 0x0, 0x0, 0x0, 0x0) 23:17:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 23:17:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:44 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0xfffffffffffffffd) [ 802.024370][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 802.024481][ T3641] Bluetooth: hci6: command 0x1003 tx timeout 23:17:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x21fc0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x430000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x21fc0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x430000, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) 23:17:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:44 executing program 1: bpf$MAP_CREATE(0x13, &(0x7f0000000040)=@bloom_filter, 0x48) 23:17:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) 23:17:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_FSYNC={0x3, 0x1d, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 23:17:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/ip_vs\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0xfd36) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) 23:17:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x5c}}, 0x0) 23:17:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x21fc0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x430000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x12) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 23:17:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)=""/59, 0x3b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000640)="7aa8b5c3cd84183bba2b40186f9574205eb1f87ee6271821ae52959d22ec042353f24dae00248fe1c83da73593ce6f0a18c1395a677e7e7a", 0x38, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000040)="a2d192a65138fe9eb46218f72bcbe482c9d6744a5525c567e676039742dac164f7d1a8e3e27395bea7bdac23655acd5a06603786990dca88e6ff63f098c78ea38290b2b6f42afc46adf2594e8eee64fffb86351abb73bed57b1f68a5024e4bd5d49e74b4", 0x64}, {&(0x7f0000000200)="38c042da68b6c44ab1c81135fa12bb1c1ef31f891dbeadfd448700013c48f45be2c2cec86e5af6bd63d5934982", 0x2d}, {&(0x7f0000000280)="36b532214cdae8db470ab7a483c816c0488eed4c2b20d1c731173f35ef18b833c03c", 0x22}, {&(0x7f0000000340)="4f7fb64ddda46817dc3f2f44c01d82293433b7c8fb28", 0x16}], 0x4}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000004c0)="a4d3ff7e4c6b77f9d5545bb4358ded1302fdc9d0a673227ca9bcddbc7ca8a7bef54073aae71d44d3a8059226a5901286c34c08846de020e8b126dbf03a709dbb1d936d0f509f9e3808a59853956af74def50ad47679f1fc46d9b55f4f2ec30a418f046b9ef0ede8a343934e6f3fac7eadbfd10b93d364c495c490462470403097b4a4aecab788bdd145638d9739fcad9919ce96dd2b377228db036e26016e2d325015094eaf58909ba939db49082f323818cddbcba9310a431becdd10159ca0b601d70f91a6d2a697e859ec995fce5819a", 0xd1}], 0xba}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000003580)="6f1f4e3eb806f83b07f51b490cbdc5192c6dbeae7cd2e1973f86afc7183524d431c2490af824b1a6ba53bd12cf34d6be4a3e4e31e996cedac129f44de68834a8370aefb59dc0e50feff8f9b5c97854152e9b4722a40b67ee7fd293c221c1e0b9dec09a544811ac0e96adf64448e5c58fc6d0094b94dc0c4eefd1919695ff2ed61d6277dc6cf39004e2128f60b5a8e4e488fe94c25be47d6cf6efda251171bb943d70b8f72fb3e5ef0899348022e56c3edc2f7c18b970b8190119bead2e24f101518f4b16e2ca78004c70c6a36939c4e5f8b9abdec50e1bd66f21c58ff33dacc98ed29ea4418f1e8c3817f5888e738279755bf841377375949e4c358ecffca77efc0a55b69f78353c8b40043484b41807d5fd3a3225fec42a041cca19b758406147a0ca2147aceffd8228b6fb6fbd6da4f1ff50bcfc73af7741eeb115282e856f228feb300e6d4986fe9d8595e50c8f27ada452a573e02212fa3833dc1cb8ebf79f28c18dddae069ed9fa458e539632b4fecc01c7dcec213241eb544a3edf541990891f2db5e2128cc76b58fd79656ab386afd29501a19a4a9b16a897e1effdb336d6bac5255472e3e8eadbff90fb2d50078948285f8713f0933653837a7c5ba1b3c1023092acdad585b984842cd5a607cb4b601012f23603e64c3bbd4ec38b554009fc46e356864d5c92b5034921d5040a090ac338aafc6dfe8c4d462e6a7573317da8fdd9ae11b89d43fa6e438c8f26e8fdee4f0b91219a29b18c6cdd59e715cedc37c7d68f0dc36fe963f5e109b4b995db7ae885c32415067f6bdd00527e9948f7587f60bd6488281d0d66e8481a4588c4502fb2e12df6d1fe4f5b59d1e2ff47fce20bac6c1c2a0716813f99e2d217645dd63d60be45452588c25ec4776a637647d6faeb8e93db85fefd237e159d9f57dfbb09c384bdd4b6bcb93e86ad0ea2bd75647055e6b1894395cb710f35042c4e7ef95ed18c42f1b67badfcc170b40b11a2dd90390c95a99e8a7b9b693f0c2172bd0d960c9efac9a617501a845aacc3694228cc03a3f7181676adf16533a81353d4cb582a60c37c3c37b7c77504b51274c30039771e9a0406320d702c9ba952a3ae96626d91c712d25bf02992348de0b63414d01a83916d0bf054f6a6a13fe0ce7abbfcd6f1667de4357957328dd2428c3480bc78a3505d2cfc07fa5082cbf3f5413990f3d65102d55eacdc638fc71650de7aefa7e71eb837d633d40f71d9b8fc812e070a70962146d2303998da4419b82f7e1eea50bcc86edb83311c321c5c63c704d26d9b05d4c9371426510484c02f430fca760c0abb713b519e4b16d4bc46101ad85178f8abc17671e82afa2da454100bd60cd72b1becfb0a0093f424b3d8136aba7d5a3ed795f2d4ba7abe589dab91eac3791f2bc235fe15c980ee0d32733bd7296d9eed932ebe0d8ee062e6dfea0e9af1ac9d44ab67173647c3a255bc9cbceb5fc18a0f2d3b5ab687ed873c5d13a5df290e47664dcb56e01cfe393b582c164526c2508678ba46ada3ba31f67fe9cbc09e525c3fc2109a38c2780791dd4c96f8b96774104ee97a423665c6f6fd709e3e123e048eee46d0ccef69f2b6b0143e2e8681c982486ac442102ef786a895334905971734050aaac711424c94daf5321703e20f65c247dab884849acb6554bc47658fd1242ef2d79dfc6f6b490d857f72c2aca403dcbac197aa702e151cb8281cc7446da200c243b60bcafc1291022b4d6b95521d50a4ae5acf78fe589bfaae0d56481035c4d6931553cf185db07c669bae4736f4e17eee3d9b768e91caa7d8ab2d0f1f283128fa301dc4e58f355de36d6b7eef8efb271414f8b877ae675f794d246c5634adb7b7f51fc6f9a9af1a213cebc709110d651c706477abfda49b55e348c9ba699cee673713d663454a54b423ebff16d97cf9c762adc72d1a06a04cd06fd701791781f6ea6ed10e1899ac0700aca30517604a36f95f24f6d36ce4280f480913378d39bebbe9b16dd7552250301ff7fd95183b8401fa9e158f200e76ef90a7326c91be4fd409064f8dc0a68d4c3a3be1d4f98c9eb3018b36829aecff6f1aaaca5d3bb2ed95a71b49e6129de7302638db8ee9d2f27c4fe60f16cac1814a37bb511b8b2c28df7601945abb63ff817bf14de4fffbeab9665753d98cf48c3012bb52f1661dcf8c88b24b4ad7dac2b0fca508cae9a799e25a18f189e44569ba7a43a90b7bf73214a7ecdd2b867ac933ca7fab2ec9a08c7170dd1f96544004e4b50bf2cc460b7ae5f05284dd70e0727f50e7b74d985bfcf61876bd423059efa5d08944c24094300f254f1deab6c28cac91f9e62eb472377dd7f50e6b2c3e8b300ef30a53e2b72a53f8985f4f0083294fd2", 0x694}], 0x1}}], 0x3, 0xb4) 23:17:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}}, 0x0) 23:17:44 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 23:17:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x5c}}, 0x0) 23:17:44 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000001580)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)=""/132, 0x84}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2}, 0x40) 23:17:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_FSYNC={0x3, 0x1d, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0xfc00) 23:17:44 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xa00100}, &(0x7f0000000780)=[{0x0}], 0x1}}], 0x48}, 0x0) 23:17:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) [ 802.319439][ T9348] Bluetooth: hci6: Frame reassembly failed (-84) [ 802.389632][T22611] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 23:17:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x5c}}, 0x0) 23:17:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:46 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)=""/59, 0x3b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) fgetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)=""/59, 0x3b) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) 23:17:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}}, 0x0) 23:17:46 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000001580)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)=""/132, 0x100000}], 0x1, &(0x7f0000001500)=[@mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0}}], 0x58}, 0x0) 23:17:46 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x530, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:17:46 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/192) 23:17:46 executing program 0: r0 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x7443, 0x0, 0x0, 0x0, 0x0) 23:17:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x5c}}, 0x0) [ 804.344415][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 804.344415][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 804.377404][T22628] rdma_op ffff88801dd1c1f0 conn xmit_rdma 0000000000000000 23:17:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:46 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:46 executing program 0: syz_usb_connect$uac1(0x0, 0x7d, &(0x7f0000000000)={{0x12, 0x1, 0x530, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x5, 0x24, 0x4, 0x3, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x83, &(0x7f0000000180)={0x5, 0xf, 0x83, 0x4, [@ext_cap={0x7}, @generic={0x60, 0x10, 0xa, "cf349c28519b0e09ba3869adc1559a0e96e56bd25fac665259f7c8483380d2160f5111e227a3bb44d06220efc08b4f6f337f236821173f5ab4997b93b8fa3fe719ff327c7d672fb3fbde57c6ff22011377b83acba992c08110b93409d8"}, @wireless={0xb}, @ssp_cap={0xc}]}}) [ 804.427001][T22638] syz-executor.0: epoll_ctl support in io_uring is deprecated and will be removed in a future Linux kernel version. [ 804.443849][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:46 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) [ 804.481712][T22643] Bluetooth: hci6: Frame reassembly failed (-84) [ 804.491980][T22642] rdma_op ffff8880804fd9f0 conn xmit_rdma 0000000000000000 [ 804.536462][T22657] rdma_op ffff8881452139f0 conn xmit_rdma 0000000000000000 [ 804.674401][ T3684] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 804.754468][ T14] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 804.946819][ T3684] usb 3-1: Using ep0 maxpacket: 8 [ 804.994396][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 805.064826][ T3684] usb 3-1: unable to get BOS descriptor or descriptor too short [ 805.124495][ T3684] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 805.132125][ T3684] usb 3-1: can't read configurations, error -71 [ 805.194505][ T14] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 805.202625][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.214771][ T14] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 805.223727][ T14] usb 1-1: config 1 has no interface number 1 [ 805.231107][ T14] usb 1-1: config 1 interface 3 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 805.244208][ T14] usb 1-1: config 1 interface 3 has no altsetting 0 [ 805.404800][ T14] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 805.413946][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.423829][ T14] usb 1-1: Product: syz [ 805.428213][ T14] usb 1-1: Manufacturer: syz [ 805.432864][ T14] usb 1-1: SerialNumber: syz [ 805.754640][ T14] usb 1-1: 0:2 : does not exist [ 805.768681][ T14] usb 1-1: USB disconnect, device number 30 23:17:49 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:17:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xc}}}, 0x5c}}, 0x0) 23:17:49 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)=""/59, 0x3b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) fgetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)=""/59, 0x3b) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) 23:17:49 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0xcd, 0x30, 0xeb, 0x10, 0xbb4, 0xa02, 0x6ba4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x86, 0x9a, 0x57}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) [ 806.514517][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 806.514549][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 806.546704][T22663] rdma_op ffff88801d7331f0 conn xmit_rdma 0000000000000000 23:17:49 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0x5c}}, 0x0) 23:17:49 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:49 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) [ 806.570269][ T9338] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:49 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x5c}}, 0x0) 23:17:49 executing program 1: bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) [ 806.610835][T22674] Bluetooth: hci6: Frame reassembly failed (-84) [ 806.844407][ T14] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 807.114410][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 807.524538][ T14] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a02, bcdDevice=6b.a4 [ 807.533702][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.541783][ T14] usb 3-1: Product: syz [ 807.546072][ T14] usb 3-1: Manufacturer: syz [ 807.550692][ T14] usb 3-1: SerialNumber: syz [ 807.558408][ T14] usb 3-1: config 0 descriptor?? [ 807.799359][ T2487] usb 3-1: USB disconnect, device number 67 [ 808.355341][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 23:17:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x5c}}, 0x0) 23:17:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x103000, 0x4, 0xe}, 0x18) syz_open_pts(r1, 0x434881) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x40) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000180)={0x6, 0x1}) 23:17:51 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:51 executing program 1: bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:17:51 executing program 2: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x2, "86dddf1d"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'i'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x10, 0x0, {0x7, 0x25, 0x1, 0x0, 0x81, 0xe39}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x0, 0x20, 0x1f, "92de2d"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5a, 0x3}, @format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x81, 0xbd, 0x4a, {0x7, 0x25, 0x1, 0x82, 0x7f, 0xce}}}}}}}]}}, 0x0) 23:17:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:51 executing program 1: bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) [ 808.584434][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 808.584525][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x10}}}, 0x5c}}, 0x0) 23:17:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x11}}}, 0x5c}}, 0x0) [ 808.669514][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) [ 808.682000][T22703] Bluetooth: hci6: Frame reassembly failed (-84) [ 808.904395][ T2487] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 809.144417][ T2487] usb 3-1: Using ep0 maxpacket: 8 [ 809.276125][ T2487] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 809.284225][ T2487] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 809.293831][ T2487] usb 3-1: too many endpoints for config 1 interface 3 altsetting 2: 134, using maximum allowed: 30 [ 809.304749][ T2487] usb 3-1: config 1 interface 3 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 134 [ 809.318046][ T2487] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 809.327829][ T2487] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 809.339009][ T2487] usb 3-1: config 1 interface 3 has no altsetting 0 [ 809.345667][ T2487] usb 3-1: config 1 interface 1 has no altsetting 0 [ 809.514592][ T2487] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 809.523742][ T2487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.532071][ T2487] usb 3-1: Product: syz [ 809.536811][ T2487] usb 3-1: Manufacturer: syz [ 809.541695][ T2487] usb 3-1: SerialNumber: syz [ 809.864658][ T2487] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 809.935596][ T2487] usb 3-1: USB disconnect, device number 68 23:17:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x103000, 0x4, 0xe}, 0x18) syz_open_pts(r1, 0x434881) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async, rerun: 64) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x40) (rerun: 64) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000180)={0x6, 0x1}) 23:17:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x12}}}, 0x5c}}, 0x0) 23:17:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:17:53 executing program 2: syz_usb_connect$uac1(0x0, 0xa9, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x2, "86dddf1d"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'i'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x10, 0x0, {0x7, 0x25, 0x1, 0x0, 0x81, 0xe39}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x0, 0x20, 0x1f, "92de2d"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5a, 0x3}, @format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x81, 0xbd, 0x4a, {0x7, 0x25, 0x1, 0x82, 0x7f, 0xce}}}}}}}]}}, 0x0) [ 810.744409][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 810.744502][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x14}}}, 0x5c}}, 0x0) 23:17:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) [ 810.841591][ T9348] Bluetooth: hci6: Frame reassembly failed (-84) [ 810.856037][ T9348] Bluetooth: hci6: Frame reassembly failed (-84) [ 811.054475][ T3684] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 811.294411][ T3684] usb 3-1: Using ep0 maxpacket: 8 [ 811.414576][ T3684] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 811.422706][ T3684] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 811.431790][ T3684] usb 3-1: too many endpoints for config 1 interface 3 altsetting 2: 134, using maximum allowed: 30 [ 811.442697][ T3684] usb 3-1: config 1 interface 3 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 134 [ 811.455986][ T3684] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 811.466007][ T3684] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 811.477174][ T3684] usb 3-1: config 1 interface 3 has no altsetting 0 [ 811.483804][ T3684] usb 3-1: config 1 interface 1 has no altsetting 0 [ 811.644543][ T3684] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 811.653686][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.663547][ T3684] usb 3-1: Product: syz [ 811.667779][ T3684] usb 3-1: Manufacturer: syz [ 811.672376][ T3684] usb 3-1: SerialNumber: syz [ 811.994687][ T3684] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 812.066318][ T3684] usb 3-1: USB disconnect, device number 69 23:17:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x103000, 0x4, 0xe}, 0x18) syz_open_pts(r1, 0x434881) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x40) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000180)={0x6, 0x1}) 23:17:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x16}}}, 0x5c}}, 0x0) 23:17:55 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:17:55 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r1, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x25}}], 0x48}, 0x0) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) 23:17:55 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x18}}}, 0x5c}}, 0x0) [ 812.904415][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 812.906911][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:55 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r1, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x25}}], 0x48}, 0x0) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) 23:17:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x19}}}, 0x5c}}, 0x0) 23:17:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf8) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:17:55 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:55 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000780)=[{0x0, 0x100000}], 0x1}}], 0x48}, 0x0) 23:17:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x28}}}, 0x5c}}, 0x0) [ 813.062000][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) [ 813.076968][T22778] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) 23:17:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:55 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x48}}}, 0x5c}}, 0x0) 23:17:55 executing program 2: getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r2, 0x100000011, 0x0, 0x2811fdff) syz_clone3(&(0x7f0000000880)={0x1d3180, &(0x7f0000000340), &(0x7f0000000380), 0x0, {0x33}, 0x0, 0x0, &(0x7f00000007c0)=""/191, &(0x7f0000000400)=[0x0, 0x0], 0x2, {r2}}, 0x58) 23:17:55 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:55 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, 0x0, 0x0) 23:17:57 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, 0x0, 0x0) 23:17:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4c}}}, 0x5c}}, 0x0) 23:17:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf8) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf8) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) 23:17:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) 23:17:57 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20000590) 23:17:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x9, 0x1, &(0x7f0000000340)=@raw=[@exit], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:17:57 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, 0x0, 0x0) [ 815.064428][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 815.064465][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:57 executing program 2: syz_clone(0x40201000, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x0) 23:17:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x60}}}, 0x5c}}, 0x0) 23:17:57 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x68}}}, 0x5c}}, 0x0) [ 815.171978][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) [ 815.184520][T22814] Bluetooth: hci6: Frame reassembly failed (-84) 23:17:57 executing program 2: sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x40201000, 0x0, 0x0, &(0x7f0000000cc0), 0x0, &(0x7f0000000d40)) 23:17:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf8) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf8) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) 23:17:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6c}}}, 0x5c}}, 0x0) 23:17:59 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) 23:17:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x9, 0xb, &(0x7f0000000340)=@raw=[@map_idx, @map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @map_idx_val, @initr0, @exit, @map_val], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x37, &(0x7f0000000400)=""/55, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:17:59 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x31}}], 0x48}, 0x0) 23:17:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x74}}}, 0x5c}}, 0x0) 23:17:59 executing program 2: syz_open_dev$MSR(&(0x7f0000000040), 0x2000000000000005, 0x0) [ 817.224424][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 817.234525][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:17:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:17:59 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) [ 817.290044][T22849] Bluetooth: hci6: Frame reassembly failed (-84) [ 817.325398][ T9338] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xd1e4, 0x0, 0x8, 0x10000, 0xc, "131d82f2c9e2acda3e0a424e5ba0f3ad81faa2"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0xa, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x70}}, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x400000) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:18:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7a}}}, 0x5c}}, 0x0) 23:18:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1", 0xc) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:01 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 23:18:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) [ 819.304387][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 819.304540][ T3648] Bluetooth: hci6: command 0x1003 tx timeout 23:18:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}}, 0x0) 23:18:01 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) [ 819.350014][T22868] fs-verity: sha256 using implementation "sha256-avx2" [ 819.359541][ T5935] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1", 0xc) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:01 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)}, 0x0) [ 819.394595][T22877] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) (rerun: 64) fallocate(r1, 0x0, 0x0, 0x4103fe) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xd1e4, 0x0, 0x8, 0x10000, 0xc, "131d82f2c9e2acda3e0a424e5ba0f3ad81faa2"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1", 0xc) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x2}}}, 0x5c}}, 0x0) 23:18:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:03 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)}, 0x0) 23:18:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 23:18:03 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)}, 0x0) [ 821.384395][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 821.384497][ T3641] Bluetooth: hci6: command 0x1003 tx timeout 23:18:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x3}}}, 0x5c}}, 0x0) 23:18:03 executing program 2: socket$inet6_tcp(0x2d, 0x1, 0x0) 23:18:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:03 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x31}}], 0x48}, 0x0) [ 821.479094][T22908] Bluetooth: hci6: Frame reassembly failed (-84) [ 821.490710][ T5935] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4103fe) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xd1e4, 0x0, 0x8, 0x10000, 0xc, "131d82f2c9e2acda3e0a424e5ba0f3ad81faa2"}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:06 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x31}}], 0x48}, 0x0) 23:18:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x4}}}, 0x5c}}, 0x0) 23:18:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:06 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 23:18:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:06 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:18:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x5}}}, 0x5c}}, 0x0) [ 823.544458][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 823.544521][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:18:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:06 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x31}}], 0x48}, 0x0) 23:18:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x6}}}, 0x5c}}, 0x0) [ 823.678469][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x1, 0x1, 0x8}) ioctl$KDSKBLED(r0, 0x4b65, 0x5) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x3, 0x8, 0x1c00}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x80000001) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a00", 0xf) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000280)=@framed={{}, [@initr0, @call, @ldst, @initr0, @map_idx, @jmp]}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xd8, &(0x7f0000000300)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:18:08 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000580), 0x0, 0x31}}], 0x48}, 0x0) 23:18:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x7}}}, 0x5c}}, 0x0) 23:18:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a00", 0xf) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) [ 825.704519][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:18:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a00", 0xf) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:08 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000580), 0x0, 0x31}}], 0x48}, 0x0) 23:18:08 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x40201000, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x0) 23:18:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x8}}}, 0x5c}}, 0x0) [ 825.768643][ T9348] Bluetooth: hci6: Frame reassembly failed (-84) [ 825.779435][ T27] audit: type=1800 audit(1666480688.241:814): pid=22954 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1154 res=0 errno=0 [ 825.794614][T22954] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) [ 825.848702][ T27] audit: type=1804 audit(1666480688.241:815): pid=22954 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/850/file0" dev="sda1" ino=1154 res=1 errno=0 23:18:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x1, 0x1, 0x8}) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x5) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async, rerun: 64) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x3, 0x8, 0x1c00}) (async, rerun: 64) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x80000001) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:10 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000580), 0x0, 0x31}}], 0x48}, 0x0) 23:18:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x9}}}, 0x5c}}, 0x0) 23:18:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:10 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x515c81, 0x0) 23:18:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 827.784499][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:18:10 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000580)=[{0x0}], 0x1, 0x31}}], 0x48}, 0x0) 23:18:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0xa}}}, 0x5c}}, 0x0) 23:18:10 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000580)=[{0x0}], 0x1, 0x31}}], 0x48}, 0x0) [ 827.850238][ T27] audit: type=1800 audit(1666480690.311:816): pid=22981 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1174 res=0 errno=0 23:18:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x1, 0x1, 0x8}) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x5) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x3, 0x8, 0x1c00}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x80000001) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:12 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f00000000c0)) 23:18:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0xb}}}, 0x5c}}, 0x0) 23:18:12 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000580)=[{0x0}], 0x1, 0x31}}], 0x48}, 0x0) 23:18:12 executing program 0: shutdown(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:18:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:12 executing program 0: shutdown(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 829.944402][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 829.948886][ T3648] Bluetooth: hci6: command 0x1003 tx timeout 23:18:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') getdents(r0, &(0x7f0000000000)=""/26, 0x1a) getdents64(r0, &(0x7f0000000180)=""/4096, 0x1000) 23:18:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0xc}}}, 0x5c}}, 0x0) 23:18:12 executing program 0: shutdown(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 23:18:12 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) 23:18:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0x11c, 0x7, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_USERDATA={0x105, 0x7, 0x1, 0x0, "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"}]}, 0x11c}}, 0x0) 23:18:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x9) r1 = signalfd4(r0, &(0x7f0000000000)={[0x3ff]}, 0x8, 0x100800) dup3(r0, r1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24, 0x20000000}, 0x1c) dup2(0xffffffffffffffff, r0) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}], 0x4000000000002b1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 23:18:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0xd}}}, 0x5c}}, 0x0) 23:18:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:12 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) [ 830.080627][T23025] rdma_op ffff88807b5ff9f0 conn xmit_rdma 0000000000000000 [ 830.119421][ T9338] Bluetooth: hci6: Frame reassembly failed (-84) [ 830.176355][T23041] rdma_op ffff88807ea331f0 conn xmit_rdma 0000000000000000 [ 830.221304][T23028] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:13 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000800)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1f00}, &(0x7f0000000580)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) 23:18:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0xe}}}, 0x5c}}, 0x0) 23:18:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:13 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @remote, @val, {@ipv4}}, 0x0) 23:18:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0xf}}}, 0x5c}}, 0x0) 23:18:13 executing program 2: r0 = epoll_create1(0x0) r1 = io_uring_setup(0x38a, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) dup2(r0, r1) [ 830.816888][T23046] rdma_op ffff8880795961f0 conn xmit_rdma 0000000000000000 23:18:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x10}}}, 0x5c}}, 0x0) 23:18:14 executing program 1: syz_open_dev$vcsa(&(0x7f00000002c0), 0x0, 0x551102) 23:18:14 executing program 2: bpf$BPF_GET_PROG_INFO(0x18, 0x0, 0x0) 23:18:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async, rerun: 64) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x9) (async) r1 = signalfd4(r0, &(0x7f0000000000)={[0x3ff]}, 0x8, 0x100800) dup3(r0, r1, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x16) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}}, 0x0) 23:18:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x11}}}, 0x5c}}, 0x0) [ 832.184389][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 832.184389][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:18:14 executing program 1: syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17}, &(0x7f0000000080)) timer_create(0x2, 0x0, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000240)={{}, {0x0, r1+10000000}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 23:18:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x12}}}, 0x5c}}, 0x0) 23:18:14 executing program 2: sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20040045) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) syz_clone(0x40201000, &(0x7f0000000c00)="a61b9c30fa28eb03d0d5d08dc84f47c67253372ffa8bca2682ab6ac46704c84f2c9e93ea08daa587b71dd223bedef0848f1c3e4a83190ac0313e57f1251ee5268284356c2dbebca52e70e0d21c8af9525d8a129983fefe8974bd5538621789cce3c90228a24ed380476955bb626302b9e305d5ac27f5c4bfe0154b9dc52a76f67df2d218424d6bc092d2418f636a90f5281fcdd3485518103efa674bdf279e038fe4676b217d434a61ede2baf59d323785b9ff6316", 0xb5, &(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)="cca7c9193b24a61ba2f5fab43eeb394a97beac") 23:18:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x14}}}, 0x5c}}, 0x0) [ 832.277942][ T5935] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x16}}}, 0x5c}}, 0x0) 23:18:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x18}}}, 0x5c}}, 0x0) 23:18:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x19}}}, 0x5c}}, 0x0) 23:18:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x9) (async) r1 = signalfd4(r0, &(0x7f0000000000)={[0x3ff]}, 0x8, 0x100800) dup3(r0, r1, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r2, 0x0, 0xffffdffa) lseek(r1, 0x0, 0x4) 23:18:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x28}}}, 0x5c}}, 0x0) 23:18:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:16 executing program 1: syz_clone(0x40201000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)) 23:18:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) [ 834.344497][ T3641] Bluetooth: hci6: command 0x1003 tx timeout [ 834.350594][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:18:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x48}}}, 0x5c}}, 0x0) [ 834.399935][ T27] audit: type=1804 audit(1666480696.861:817): pid=23114 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1952277129/syzkaller.evJkYu/1019/bus" dev="sda1" ino=1184 res=1 errno=0 23:18:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x4c}}}, 0x5c}}, 0x0) 23:18:16 executing program 1: add_key$user(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 23:18:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x80000d) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x402600, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4103fe) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x250a03, 0x0) sendfile(r5, r4, 0x0, 0x2000e) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xb1) [ 834.464339][ T27] audit: type=1804 audit(1666480696.911:818): pid=23120 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1952277129/syzkaller.evJkYu/1019/bus" dev="sda1" ino=1184 res=1 errno=0 23:18:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x80000d) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x402600, 0x0) (async) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4103fe) (async) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x250a03, 0x0) sendfile(r5, r4, 0x0, 0x2000e) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xb1) 23:18:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 23:18:17 executing program 1: syz_open_procfs$userns(0x0, &(0x7f00000007c0)) 23:18:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x60}}}, 0x5c}}, 0x0) [ 834.524623][ T27] audit: type=1800 audit(1666480696.981:819): pid=23126 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1170 res=0 errno=0 23:18:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 834.610180][ T27] audit: type=1800 audit(1666480697.071:820): pid=23138 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1180 res=0 errno=0 23:18:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x68}}}, 0x5c}}, 0x0) 23:18:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:17 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0xc}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040045) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x44}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000400)=0x1c, 0x800) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xcc, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4633511b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63cd029c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58d43a10}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fda292e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9994}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c2bda0b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bb47565}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x407971a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74e7fa9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ba743da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x267c7935}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf23f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24963492}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x252cbbe9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x50}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x480}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) syz_open_procfs$userns(0x0, &(0x7f0000000bc0)) syz_clone(0x40201000, &(0x7f0000000c00)="a61b9c30fa28eb03d0d5d08dc84f47c67253372ffa8bca2682ab6ac46704c84f2c9e93ea08daa587b71dd223bedef0848f1c3e4a83190ac0313e57f1251ee5268284356c2dbebca52e70e0d21c8af9525d8a129983fefe8974bd5538621789cce3c90228a24ed380476955bb626302b9e305d5ac27f5c4bfe0154b9dc52a76f67df2d218424d6bc092d2418f636a90f5281fcdd3485518103efa674bdf279e038fe4676b217d434a61ede2baf59d323785b9ff6316", 0xb5, &(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)="cca7c9193b24a61ba2f5fab43eeb394a97beac") 23:18:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x6c}}}, 0x5c}}, 0x0) 23:18:17 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x800) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_procfs$userns(0x0, 0x0) syz_clone(0x40201000, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0), &(0x7f0000000d00), 0x0) 23:18:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x80000d) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x402600, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4103fe) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x250a03, 0x0) sendfile(r5, r4, 0x0, 0x2000e) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xb1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x80000d) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KDADDIO(r1, 0x4b34, 0x0) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x402600, 0x0) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) fallocate(r3, 0x0, 0x0, 0x4103fe) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) fallocate(r4, 0x0, 0x0, 0x4103fe) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x250a03, 0x0) (async) sendfile(r5, r4, 0x0, 0x2000e) (async) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xb1) (async) 23:18:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x74}}}, 0x5c}}, 0x0) [ 835.268702][ T27] audit: type=1800 audit(1666480697.731:821): pid=23152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1180 res=0 errno=0 23:18:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x7a}}}, 0x5c}}, 0x0) 23:18:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0) mknodat$loop(r5, &(0x7f00000001c0)='./file0\x00', 0x20, 0x0) sendfile(r3, r1, &(0x7f0000000100)=0x101, 0x1) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000000)=""/5) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) [ 835.312819][ T27] audit: type=1804 audit(1666480697.761:822): pid=23152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/858/file0" dev="sda1" ino=1180 res=1 errno=0 23:18:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x2}}}, 0x5c}}, 0x0) [ 835.367544][ T27] audit: type=1800 audit(1666480697.771:823): pid=23152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=1180 res=0 errno=0 23:18:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000800aaec2d0d0000030000001f"], &(0x7f0000000100)='GPL\x00', 0x7, 0x1000, &(0x7f0000000580)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 835.405023][ T27] audit: type=1800 audit(1666480697.861:824): pid=23169 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1180 res=0 errno=0 [ 835.426567][ T27] audit: type=1804 audit(1666480697.871:825): pid=23169 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/859/file0" dev="sda1" ino=1180 res=1 errno=0 [ 835.433908][ T3641] Bluetooth: hci6: sending frame failed (-49) [ 835.457417][T23169] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3}}}, 0x5c}}, 0x0) [ 835.464834][ T3648] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 835.483272][ T27] audit: type=1804 audit(1666480697.871:826): pid=23169 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/859/file0" dev="sda1" ino=1180 res=1 errno=0 23:18:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:18 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000280)=@framed={{}, [@initr0, @kfunc, @call, @ldst, @initr0, @generic, @map_idx, @map_val, @jmp]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0xd8, &(0x7f0000000300)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:18:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x5}}}, 0x5c}}, 0x0) 23:18:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 23:18:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0) mknodat$loop(r5, &(0x7f00000001c0)='./file0\x00', 0x20, 0x0) sendfile(r3, r1, &(0x7f0000000100)=0x101, 0x1) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000000)=""/5) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), 0xffffffffffffffff) 23:18:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:18:18 executing program 1: mmap$xdp(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:18:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7}}}, 0x5c}}, 0x0) 23:18:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:18 executing program 1: syz_open_dev$vcsa(&(0x7f00000010c0), 0x1, 0x82) 23:18:18 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0xc}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040045) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x44}}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000400)=0x1c, 0x800) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xcc, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4633511b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63cd029c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58d43a10}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fda292e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9994}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c2bda0b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bb47565}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x407971a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34b3}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74e7fa9d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ba743da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x267c7935}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf23f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24963492}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x252cbbe9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e22}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x50}, 0x1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x480}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xc8, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfd}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c6}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6a}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x366}]]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008800}, 0x8040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) syz_open_procfs$userns(0x0, &(0x7f0000000bc0)) syz_clone(0x40201000, &(0x7f0000000c00)="a61b9c30fa28eb03d0d5d08dc84f47c67253372ffa8bca2682ab6ac46704c84f2c9e93ea08daa587b71dd223bedef0848f1c3e4a83190ac0313e57f1251ee5268284356c2dbebca52e70e0d21c8af9525d8a129983fefe8974bd5538621789cce3c90228a24ed380476955bb626302b9e305d5ac27f5c4bfe0154b9dc52a76f67df2d218424d6bc092d2418f636a90f5281fcdd3485518103efa674bdf279e038fe4676b217d434a61ede2baf59d323785b9ff6316", 0xb5, &(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)="cca7c9193b24a61ba2f5fab43eeb394a97beac") sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ec0)={0x2dc, r0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1dc, 0x3, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xbe, 0x1, "a3ad388687255787ab1bb2ab8ec26ed4d424ea5df0f1658357fd592a15cd15438038f4979be4d3c93de48483cce8b02dbe4c8f6ac0ef650277744c8537d33254c5c2e1288bdceff5c517b7f0f3d8640974ca1bf458db69c31d705f97134da2da02595d9dc476e6a69401abd6bbb26a84d40762084df5cd36d793dc3ac83ed4b3aec1ce9c491afc26987d3bcd601fd25e5bf17cf7cb44c64cdb214537c43b5cca99bcc777c34ac7ed65e72866d03f0131562c2b7728ef0908db40"}}, {0x6c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x66, 0x2, "7056ccedbdcb5ec6754d124f44da6f55dd788f78e975781e181f85a3de46c7de51bba2ae6d9b51c27e1a98ba5b8878a11d943ea6dac4771c7bc55ca32a68946c526c50aafc14e2c68fd7b9760fc066409ff479cb0c2ec6b8e2a6b7ae71a4a9f47726"}}, {0xa8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa4, 0x1, "983cc52ba3b8ffa0ad22f6db786e8ca78e38e5db1eb2299fdfea9294b2970850def3860419d34eaac215774a4c241eb2950937e4aaee11e3d4bb20a783f81b124b2b4fc0ae96ffdc00b28a5d04d3790985ebcb3e5d1d6bb1f7861add698962be039493c30d6b627391f2a48a4f5310ad8a92f02e330c5a35d4bc75faee198019546d0994231256eae9ca7d4a4f94884d834b92440fe66dc621408d9440f78eae"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xcc, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc3, 0x2, "371c4c0121e57cac0941d6636886b593dee781c85383b854277c612dc6d659bf5963400f391d18f8df9bbb2848aba305e472490a38d4b6d8fb8a481b1acb6b0c51b6ab224b958262fafcfdfd4d4816f58ab6d4fc9bf0eedd0ae364fb105c9a02aeb509525cf31b6d6b385c08b74658e7f11f66b9340b81a0be8ba1f8a5326d302af5dbe68c866a2d21429ae076662cb979d198c63155cb6344584a7bd2a63d970fe1d0bc2a3744375aa81d0cd0b46ffb6762a05c9413c95774ec9948516957"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x80000000}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40015}, 0x10) [ 836.187844][ T9338] Bluetooth: hci6: Frame reassembly failed (-84) [ 836.194479][ T4090] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0xc}}}, 0x5c}}, 0x0) 23:18:18 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_clone(0x40201000, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x0) 23:18:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0) mknodat$loop(r5, &(0x7f00000001c0)='./file0\x00', 0x20, 0x0) (async) sendfile(r3, r1, &(0x7f0000000100)=0x101, 0x1) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000000)=""/5) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x67}}}, 0x5c}}, 0x0) 23:18:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:20 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_clone(0x40201000, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x0) 23:18:20 executing program 2: connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 23:18:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, &(0x7f0000000280)=@framed={{}, [@initr0, @call]}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xd8, &(0x7f0000000300)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 838.184391][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 838.184617][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:18:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) 23:18:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}}, 0x5c}}, 0x0) 23:18:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x9, 0x4, &(0x7f0000000340)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1}, @initr0], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 23:18:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) [ 838.305784][ T4090] Bluetooth: hci6: Frame reassembly failed (-84) [ 838.312293][T23231] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x6, 0x4, 0x3, 0x6, 0x81, "42e99324d9507be01c98176c807abab97f15f6", 0x3ff, 0x6}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4754, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}, 0x38) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 23:18:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf00}}}, 0x5c}}, 0x0) 23:18:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:22 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_clone(0x40201000, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x0) 23:18:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {0x0}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) [ 840.344410][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 840.354779][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:18:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:22 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0x5452, &(0x7f0000000280)={{0x1, 0x1, 0xffffffffffffff80}, './file0\x00'}) 23:18:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1100}}}, 0x5c}}, 0x0) 23:18:22 executing program 2: process_vm_writev(0x0, &(0x7f0000001300), 0x1, &(0x7f00000037c0), 0x55, 0x0) 23:18:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {0x0}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) [ 840.452925][T23255] can0: slcan on ptm0. 23:18:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {0x0}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x10}}, 0x0) 23:18:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x6, 0x4, 0x3, 0x6, 0x81, "42e99324d9507be01c98176c807abab97f15f6", 0x3ff, 0x6}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') write$damon_schemes(r0, 0x0, 0x0) [ 840.554521][T23254] can0 (unregistered): slcan off ptm0. 23:18:23 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_clone(0x40201000, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x0) 23:18:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:23 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x2}) 23:18:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x14}}, 0x0) 23:18:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x16ac, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}, 0x38) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) [ 840.646571][T23278] can0: slcan on ptm0. 23:18:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0xc0}}, 0x0) 23:18:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x6, 0x4, 0x3, 0x6, 0x81, "42e99324d9507be01c98176c807abab97f15f6", 0x3ff, 0x6}) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:23 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 23:18:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) [ 840.757525][T23276] can0 (unregistered): slcan off ptm0. 23:18:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0xec0}}, 0x0) 23:18:23 executing program 2: sysfs$1(0x1, &(0x7f0000000040)='\'(^:[}/%\x00') 23:18:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:23 executing program 2: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000140)=""/37) 23:18:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc4", 0xc}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x33fe0}}, 0x0) 23:18:23 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000006540)='/proc/crypto\x00', 0x0, 0x0) close$fd_v4l2_buffer(r0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x0) 23:18:23 executing program 2: r0 = openat$rfkill(0xffffff9c, &(0x7f0000000000), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x6, 0x3}, 0x8) 23:18:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x7fff, 0x3, 0x101, 0x3, 0xf, "d5d30a376ee01a67"}) 23:18:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:23 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000140)=@string={0x4, 0x3, "6c8d"}}, {0x30, &(0x7f00000001c0)=@string={0x30, 0x3, "14e2db4fe9b67333c48e5cac731a732a6f4f73016c73444a58c0c0d975927496eabf7c7de4d1b7f8e65729df50b5"}}]}) 23:18:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc4", 0xc}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x7ffff000}}, 0x0) 23:18:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc4", 0xc}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:23 executing program 2: r0 = syz_open_dev$media(&(0x7f00000000c0), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000040)={0x0, 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:18:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0xfffffdef}}, 0x0) 23:18:23 executing program 2: r0 = openat$fb0(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x12, r0, 0x0) 23:18:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2", 0x12}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) [ 841.140101][ T9344] Bluetooth: hci6: Frame reassembly failed (-84) [ 841.157552][T23336] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x7fff, 0x3, 0x101, 0x3, 0xf, "d5d30a376ee01a67"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x7fff, 0x3, 0x101, 0x3, 0xf, "d5d30a376ee01a67"}) (async) 23:18:25 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) 23:18:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2", 0x12}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x7ffffffff000}}, 0x0) 23:18:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:25 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000080)={0x8}) 23:18:25 executing program 1: syz_clone(0xc180000, 0x0, 0x29, 0x0, 0x0, 0x0) 23:18:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2", 0x12}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) [ 843.144429][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 843.144462][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:18:25 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000c80)={0x0, 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:18:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x2}, 0x0) 23:18:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x504}, 0x48) [ 843.240549][ T5935] Bluetooth: hci6: Frame reassembly failed (-84) [ 843.250357][T23362] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x7fff, 0x3, 0x101, 0x3, 0xf, "d5d30a376ee01a67"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x7fff, 0x3, 0x101, 0x3, 0xf, "d5d30a376ee01a67"}) (async) 23:18:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73", 0x15}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0x3) 23:18:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:27 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000), 0x0, 0x1) write$midi(r0, 0x0, 0x0) 23:18:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x3}, 0x0) 23:18:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73", 0x15}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) [ 845.304494][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 845.304544][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:18:27 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000006540)='/proc/crypto\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) 23:18:27 executing program 2: r0 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x5451, 0x0) 23:18:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x7}, 0x0) 23:18:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73", 0x15}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) [ 845.378062][T23390] Bluetooth: hci6: Frame reassembly failed (-84) [ 845.385241][ T5935] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x8}, 0x0) 23:18:29 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 23:18:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c6", 0x17}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40046602, &(0x7f0000000080)={0x2000000}) 23:18:29 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000200)={0x2, 0x6, 0xc18, 0x9, 0x8, "00952be1fe6f26aa"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) [ 847.384599][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:18:29 executing program 2: syz_clone(0x41000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x50040100, 0x0, 0x0, 0x0, 0x0, 0x0) 23:18:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0xa}, 0x0) 23:18:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c6", 0x17}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:29 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc04078017fbcf2b21dd1b36f1", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000100)="6913cdd78e9b528b39d552c9b399ee8a", 0x10, 0x0, 0x0, 0x0) 23:18:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x18}, 0x0) [ 847.443853][T23418] sp0: Synchronizing with TNC [ 847.497475][ T3648] Bluetooth: hci6: sending frame failed (-49) [ 847.499552][T23418] Bluetooth: hci6: Frame reassembly failed (-84) [ 847.503633][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 847.503644][ T27] audit: type=1800 audit(1666480709.961:833): pid=23418 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1182 res=0 errno=0 [ 847.510064][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -49 23:18:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d2c9deb3f9e62782c822fec25b9bbfb16d85a657fb06692a09a072a2eeae6f1fdf8d5ef935626fd5fb08d3d1e8d0540a125b5271f9049354cdc813b1938f3bf752d92dc3ae85baaac3d7b0308699a6f16878b38a9108cdc", 0xaf}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c6", 0x17}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x64}, 0x0) [ 847.540367][ T27] audit: type=1804 audit(1666480709.961:834): pid=23418 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/868/file0" dev="sda1" ino=1182 res=1 errno=0 23:18:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000200)={0x2, 0x6, 0xc18, 0x9, 0x8, "00952be1fe6f26aa"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000200)={0x2, 0x6, 0xc18, 0x9, 0x8, "00952be1fe6f26aa"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) (async) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) fallocate(r3, 0x0, 0x0, 0x4103fe) (async) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) (async) 23:18:30 executing program 1: openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20040, 0x0, 0x11}, 0x18) 23:18:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x112}, 0x0) [ 847.622734][ T27] audit: type=1804 audit(1666480710.021:835): pid=23418 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/868/file0" dev="sda1" ino=1182 res=1 errno=0 [ 847.663369][T23438] sp0: Synchronizing with TNC [ 847.716700][ T3648] Bluetooth: hci6: sending frame failed (-49) [ 847.717825][ T27] audit: type=1800 audit(1666480710.181:836): pid=23438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1159 res=0 errno=0 [ 847.743132][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 847.750025][T23438] Bluetooth: hci6: Frame reassembly failed (-84) [ 847.761037][ T27] audit: type=1804 audit(1666480710.181:837): pid=23438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/869/file0" dev="sda1" ino=1159 res=1 errno=0 [ 847.785762][ T27] audit: type=1804 audit(1666480710.221:838): pid=23438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/869/file0" dev="sda1" ino=1159 res=1 errno=0 23:18:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)) 23:18:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x300}, 0x0) 23:18:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:30 executing program 1: r0 = openat$fb0(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f00000001c0)={0x23}) [ 847.809961][ T27] audit: type=1804 audit(1666480710.221:839): pid=23438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/869/file0" dev="sda1" ino=1159 res=1 errno=0 23:18:30 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40046602, &(0x7f0000000080)={0xfdfdffff}) 23:18:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) [ 847.876469][T23446] sp0: Synchronizing with TNC 23:18:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0xffffff1f}, 0x0) 23:18:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000200)={0x2, 0x6, 0xc18, 0x9, 0x8, "00952be1fe6f26aa"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) sendfile(r1, r2, 0x0, 0xffffffff054) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000200)={0x2, 0x6, 0xc18, 0x9, 0x8, "00952be1fe6f26aa"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x4) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) (async) sendfile(r1, r2, 0x0, 0xffffffff054) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) fallocate(r3, 0x0, 0x0, 0x4103fe) (async) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) (async) 23:18:30 executing program 2: r0 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x36, 0x6, 0x0, {0x0, 0x0, 0x26, 0x0, '/dev/udmabuf\x00'}}, 0x36) 23:18:30 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000006540)='/proc/crypto\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 23:18:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x1, 0x2}, 0x0) 23:18:30 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x80046601, &(0x7f0000000080)) 23:18:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:30 executing program 2: syz_clone(0x1d021c00, 0x0, 0x0, 0x0, 0x0, 0x0) [ 848.005029][T23478] sp0: Synchronizing with TNC 23:18:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x1, 0x3}, 0x0) 23:18:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:30 executing program 1: syz_clone(0x42000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 848.089299][ T9338] Bluetooth: hci6: Frame reassembly failed (-84) [ 848.095933][ T27] audit: type=1800 audit(1666480710.551:840): pid=23478 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1168 res=0 errno=0 [ 848.118459][T23478] Bluetooth: hci6: Frame reassembly failed (-84) [ 848.129549][ T27] audit: type=1804 audit(1666480710.551:841): pid=23478 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/870/file0" dev="sda1" ino=1168 res=1 errno=0 [ 848.158949][ T27] audit: type=1804 audit(1666480710.591:842): pid=23489 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1144455209/syzkaller.MKcV2r/870/file0" dev="sda1" ino=1168 res=1 errno=0 23:18:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x230301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xfffffffc}) 23:18:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x1, 0x4}, 0x0) 23:18:32 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 23:18:32 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0/../file0\x00', 0x103100, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$damon_init_regions(0xffffffffffffffff, &(0x7f00000002c0)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000300)=0xffffffffffffffff) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000280)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340)=r4, 0x12) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) mknodat(r0, &(0x7f0000000200)='./file0/../file0\x00', 0x8000, 0x1) unshare(0x6c060000) 23:18:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="bb", 0x29fbc, 0x0, 0x0, 0x0) close(r0) 23:18:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x230301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xfffffffc}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x230301, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x8) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x5) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xfffffffc}) (async) [ 850.104396][ T3648] Bluetooth: hci6: command 0x1003 tx timeout [ 850.104391][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 23:18:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x1, 0x5}, 0x0) 23:18:32 executing program 2: r0 = openat$fb0(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4605, &(0x7f00000001c0)={0x0, 0x2000}) 23:18:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) [ 850.180689][T23519] fat__get_entry: 10 callbacks suppressed [ 850.180702][T23519] FAT-fs (loop1): Directory bread(block 3) failed [ 850.198046][T23519] FAT-fs (loop1): Directory bread(block 4) failed [ 850.220184][T23519] FAT-fs (loop1): Directory bread(block 5) failed 23:18:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x1, 0x6}, 0x0) 23:18:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x230301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x8) (async) ioctl$KDADDIO(r0, 0x400455c8, 0x5) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) (async) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0xfffffffc}) 23:18:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:32 executing program 2: r0 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x800) read$proc_mixer(r0, 0x0, 0x0) [ 850.229578][T23519] FAT-fs (loop1): Directory bread(block 6) failed 23:18:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x1, 0x7}, 0x0) 23:18:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000000c0)={0x0, @aes256, 0x0, @desc1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 23:18:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:32 executing program 2: r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 23:18:32 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x42) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0/../file0\x00', 0x103100, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$damon_init_regions(0xffffffffffffffff, &(0x7f00000002c0)={{}, {' ', 0xfff}, {' ', 0x6}}, 0x3f) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000300)=0xffffffffffffffff) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000280)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340)=r4, 0x12) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) mknodat(r0, &(0x7f0000000200)='./file0/../file0\x00', 0x8000, 0x1) unshare(0x6c060000) 23:18:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 23:18:32 executing program 2: r0 = openat$fb0(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x541b, 0x0) 23:18:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x1, 0x8}, 0x0) 23:18:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) close(r0) [ 850.448737][ T9338] Bluetooth: hci6: Frame reassembly failed (-84) [ 850.461166][ T9338] Bluetooth: hci6: Frame reassembly failed (-84) 23:18:32 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="3b46b53f3ae12e52e01973cd31b5a013a554eac4e128bdc8b4410628aa573e95f96d01b02d2c6819e307a3cf9867e7677250f7eb9e310f4a70335267491a9e4b09ae3ca3e34e10b83f1724fba41056bba9e3032a39fdb65d", 0x58}, {&(0x7f0000000280)="6eb1a8baacb1c0ab101e8dc48857617d70d2f53c73b9c657", 0x18}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000029c0)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) 23:18:33 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f0000006540)='/proc/crypto\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) 23:18:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x1, 0x9}, 0x0) [ 850.523001][T23556] Bluetooth: hci6: Frame reassembly failed (-84) [ 852.504448][ T3641] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 852.510648][ T3648] ================================================================== [ 852.518746][ T3648] BUG: KASAN: use-after-free in hci_cmd_timeout+0x6a/0x1f0 [ 852.526001][ T3648] Read of size 8 at addr ffff88807e801358 by task kworker/u5:4/3648 [ 852.533982][ T3648] [ 852.536291][ T3648] CPU: 0 PID: 3648 Comm: kworker/u5:4 Not tainted 6.1.0-rc1-syzkaller-00249-g4da34b7d175d #0 [ 852.546421][ T3648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 852.556464][ T3648] Workqueue: hci6 hci_cmd_timeout [ 852.561494][ T3648] Call Trace: [ 852.564778][ T3648] [ 852.567715][ T3648] dump_stack_lvl+0x1e3/0x2cb [ 852.572390][ T3648] ? nf_tcp_handle_invalid+0x62e/0x62e [ 852.577843][ T3648] ? __wake_up_klogd+0xcd/0x100 [ 852.582705][ T3648] ? panic+0x766/0x766 [ 852.586761][ T3648] ? _printk+0xcf/0x10f [ 852.590914][ T3648] print_address_description+0x74/0x340 [ 852.596454][ T3648] print_report+0x107/0x220 [ 852.600946][ T3648] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 852.606915][ T3648] ? __virt_addr_valid+0x21b/0x2d0 [ 852.612009][ T3648] ? __phys_addr+0xb5/0x160 [ 852.616498][ T3648] ? hci_cmd_timeout+0x6a/0x1f0 [ 852.621360][ T3648] kasan_report+0x139/0x170 [ 852.625873][ T3648] ? hci_cmd_timeout+0x6a/0x1f0 [ 852.630712][ T3648] hci_cmd_timeout+0x6a/0x1f0 [ 852.635377][ T3648] process_one_work+0x81c/0xd10 [ 852.640277][ T3648] ? __switch_to_asm+0x34/0x60 [ 852.645042][ T3648] ? worker_detach_from_pool+0x260/0x260 [ 852.650668][ T3648] ? _raw_spin_lock_irqsave+0x120/0x120 [ 852.656223][ T3648] ? kthread_data+0x4d/0xc0 [ 852.660765][ T3648] ? wq_worker_running+0x95/0x190 [ 852.665784][ T3648] worker_thread+0xb14/0x1330 [ 852.670461][ T3648] kthread+0x266/0x300 [ 852.674529][ T3648] ? rcu_lock_release+0x20/0x20 [ 852.679366][ T3648] ? kthread_blkcg+0xd0/0xd0 [ 852.683939][ T3648] ret_from_fork+0x1f/0x30 [ 852.688349][ T3648] [ 852.691350][ T3648] [ 852.693656][ T3648] Allocated by task 3648: [ 852.697988][ T3648] kasan_set_track+0x4c/0x70 [ 852.702564][ T3648] __kasan_slab_alloc+0x65/0x70 [ 852.707409][ T3648] kmem_cache_alloc+0x1cc/0x300 [ 852.712301][ T3648] skb_clone+0x1e0/0x360 [ 852.716536][ T3648] hci_cmd_work+0xba/0x490 [ 852.720953][ T3648] process_one_work+0x81c/0xd10 [ 852.725791][ T3648] worker_thread+0xb14/0x1330 [ 852.730453][ T3648] kthread+0x266/0x300 [ 852.734506][ T3648] ret_from_fork+0x1f/0x30 [ 852.738907][ T3648] [ 852.741212][ T3648] Freed by task 3641: [ 852.745171][ T3648] kasan_set_track+0x4c/0x70 [ 852.749745][ T3648] kasan_save_free_info+0x27/0x40 [ 852.754761][ T3648] ____kasan_slab_free+0xd6/0x120 [ 852.759768][ T3648] slab_free_freelist_hook+0x12e/0x1a0 [ 852.765216][ T3648] kmem_cache_free+0x94/0x1d0 [ 852.769881][ T3648] hci_dev_open_sync+0x622/0x8e0 [ 852.774919][ T3648] hci_power_on+0x16a/0x610 [ 852.779507][ T3648] process_one_work+0x81c/0xd10 [ 852.784347][ T3648] worker_thread+0xb14/0x1330 [ 852.789014][ T3648] kthread+0x266/0x300 [ 852.793078][ T3648] ret_from_fork+0x1f/0x30 [ 852.797504][ T3648] [ 852.799827][ T3648] The buggy address belongs to the object at ffff88807e801280 [ 852.799827][ T3648] which belongs to the cache skbuff_head_cache of size 240 [ 852.814483][ T3648] The buggy address is located 216 bytes inside of [ 852.814483][ T3648] 240-byte region [ffff88807e801280, ffff88807e801370) [ 852.827748][ T3648] [ 852.830058][ T3648] The buggy address belongs to the physical page: [ 852.836448][ T3648] page:ffffea0001fa0040 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e801 [ 852.846584][ T3648] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 852.854157][ T3648] raw: 00fff00000000200 ffffea0001ebbb40 dead000000000004 ffff888140b63500 [ 852.862813][ T3648] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 852.871394][ T3648] page dumped because: kasan: bad access detected [ 852.877805][ T3648] page_owner tracks the page as allocated [ 852.883504][ T3648] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 2487, tgid 2487 (kworker/1:2), ts 829605969950, free_ts 828654868736 [ 852.903307][ T3648] get_page_from_freelist+0x72b/0x7a0 [ 852.908698][ T3648] __alloc_pages+0x259/0x560 [ 852.913281][ T3648] alloc_slab_page+0x70/0xf0 [ 852.917868][ T3648] allocate_slab+0x5e/0x4b0 [ 852.922371][ T3648] ___slab_alloc+0x7f4/0xeb0 [ 852.926965][ T3648] kmem_cache_alloc_node+0x283/0x340 [ 852.932242][ T3648] __alloc_skb+0xd5/0x620 [ 852.936570][ T3648] nsim_dev_trap_report_work+0x268/0xaa0 [ 852.942302][ T3648] process_one_work+0x81c/0xd10 [ 852.947147][ T3648] worker_thread+0xb14/0x1330 [ 852.951817][ T3648] kthread+0x266/0x300 [ 852.955876][ T3648] ret_from_fork+0x1f/0x30 [ 852.960282][ T3648] page last free stack trace: [ 852.964945][ T3648] free_pcp_prepare+0x80c/0x8f0 [ 852.969877][ T3648] free_unref_page_list+0xb4/0x7b0 [ 852.975004][ T3648] release_pages+0x233a/0x25d0 [ 852.979777][ T3648] tlb_flush_mmu+0x850/0xa70 [ 852.984355][ T3648] tlb_finish_mmu+0xcb/0x200 [ 852.988930][ T3648] exit_mmap+0x2b1/0x670 [ 852.993159][ T3648] __mmput+0x114/0x3b0 [ 852.997270][ T3648] exit_mm+0x217/0x2f0 [ 853.001380][ T3648] do_exit+0x5e7/0x2070 [ 853.005546][ T3648] do_group_exit+0x1fd/0x2b0 [ 853.010119][ T3648] get_signal+0x1743/0x1810 [ 853.014657][ T3648] arch_do_signal_or_restart+0x8d/0x750 [ 853.020215][ T3648] exit_to_user_mode_loop+0x74/0x160 [ 853.025541][ T3648] exit_to_user_mode_prepare+0xad/0x110 [ 853.031075][ T3648] syscall_exit_to_user_mode+0x2e/0x60 [ 853.036544][ T3648] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 853.042424][ T3648] [ 853.044731][ T3648] Memory state around the buggy address: [ 853.050340][ T3648] ffff88807e801200: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 853.058399][ T3648] ffff88807e801280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 853.066461][ T3648] >ffff88807e801300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 853.074507][ T3648] ^ [ 853.081423][ T3648] ffff88807e801380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 853.089469][ T3648] ffff88807e801400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 853.097511][ T3648] ================================================================== [ 853.106223][ T3648] Kernel panic - not syncing: panic_on_warn set ... [ 853.112823][ T3648] CPU: 0 PID: 3648 Comm: kworker/u5:4 Not tainted 6.1.0-rc1-syzkaller-00249-g4da34b7d175d #0 [ 853.122963][ T3648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 853.133014][ T3648] Workqueue: hci6 hci_cmd_timeout [ 853.138045][ T3648] Call Trace: [ 853.141311][ T3648] [ 853.144242][ T3648] dump_stack_lvl+0x1e3/0x2cb [ 853.148919][ T3648] ? nf_tcp_handle_invalid+0x62e/0x62e [ 853.154368][ T3648] ? panic+0x766/0x766 [ 853.158427][ T3648] ? preempt_schedule_common+0xb7/0xe0 [ 853.163879][ T3648] ? preempt_schedule+0xd9/0xe0 [ 853.168721][ T3648] ? vscnprintf+0x59/0x80 [ 853.173038][ T3648] panic+0x316/0x766 [ 853.176929][ T3648] ? memcpy_page_flushcache+0xfc/0xfc [ 853.182304][ T3648] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 853.188275][ T3648] ? hci_cmd_timeout+0x6a/0x1f0 [ 853.193117][ T3648] end_report+0x91/0xa0 [ 853.197262][ T3648] kasan_report+0x146/0x170 [ 853.201767][ T3648] ? hci_cmd_timeout+0x6a/0x1f0 [ 853.206635][ T3648] hci_cmd_timeout+0x6a/0x1f0 [ 853.211304][ T3648] process_one_work+0x81c/0xd10 [ 853.216144][ T3648] ? __switch_to_asm+0x34/0x60 [ 853.220902][ T3648] ? worker_detach_from_pool+0x260/0x260 [ 853.226524][ T3648] ? _raw_spin_lock_irqsave+0x120/0x120 [ 853.232057][ T3648] ? kthread_data+0x4d/0xc0 [ 853.236548][ T3648] ? wq_worker_running+0x95/0x190 [ 853.241562][ T3648] worker_thread+0xb14/0x1330 [ 853.246245][ T3648] kthread+0x266/0x300 [ 853.250304][ T3648] ? rcu_lock_release+0x20/0x20 [ 853.255146][ T3648] ? kthread_blkcg+0xd0/0xd0 [ 853.259724][ T3648] ret_from_fork+0x1f/0x30 [ 853.264135][ T3648] [ 853.267368][ T3648] Kernel Offset: disabled [ 853.271682][ T3648] Rebooting in 86400 seconds..