Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:51042' (ECDSA) to the list of known hosts. 2025/06/13 15:08:50 fuzzer started 2025/06/13 15:08:50 dialing manager at localhost:40113 syzkaller login: [ 110.616167] cgroup: Unknown subsys name 'net' [ 110.778343] cgroup: Unknown subsys name 'cpuset' [ 110.820652] cgroup: Unknown subsys name 'rlimit' 2025/06/13 15:09:08 syscalls: 2214 2025/06/13 15:09:08 code coverage: enabled 2025/06/13 15:09:08 comparison tracing: enabled 2025/06/13 15:09:08 extra coverage: enabled 2025/06/13 15:09:08 setuid sandbox: enabled 2025/06/13 15:09:08 namespace sandbox: enabled 2025/06/13 15:09:08 Android sandbox: enabled 2025/06/13 15:09:08 fault injection: enabled 2025/06/13 15:09:08 leak checking: enabled 2025/06/13 15:09:08 net packet injection: enabled 2025/06/13 15:09:08 net device setup: enabled 2025/06/13 15:09:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/13 15:09:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/13 15:09:08 USB emulation: enabled 2025/06/13 15:09:08 hci packet injection: enabled 2025/06/13 15:09:08 wifi device emulation: enabled 2025/06/13 15:09:08 802.15.4 emulation: enabled 2025/06/13 15:09:08 fetching corpus: 0, signal 0/0 (executing program) 2025/06/13 15:09:10 starting 8 fuzzer processes 15:09:10 executing program 0: ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x385040, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) r1 = openat$incfs(r0, &(0x7f00000000c0)='.log\x00', 0x40080, 0xc0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) finit_module(r1, &(0x7f00000001c0)='TPROXY\x00', 0x2) utimensat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2bd079d7, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004815}, 0x20000080) getpeername$packet(r0, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a40)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x3b, 0x1f, 0x1f, 0x10001, 0x36, @loopback, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7800, 0xd1aa918fe38c7b3d, 0xffff947c, 0xffff}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001080)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000001040)={&(0x7f0000000b40)={0x4e8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1bb9935e}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xab0a}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x4000000}, 0xa000) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xa8, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe7, 0x14}}}}, [@NL80211_ATTR_IE={0x57, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1}}, @perr={0x84, 0x42, {0xad, 0x4, [@not_ext={{}, @device_a, 0x80, "", 0x3f}, @not_ext={{}, @device_a, 0x3}, @ext={{}, @broadcast, 0x1000}, @ext={{}, @device_b, 0x5, @device_a, 0x11}]}}, @chsw_timing={0x68, 0x4, {0xf801, 0x41}}]}, @NL80211_ATTR_SSID={0x1b, 0x34, @random="5a54b11b47c41c8166d6467b1de1ecfe4a8956c3b5a226"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4081}, 0x800) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000001240), &(0x7f0000001280)=0x4) r6 = accept4$inet(r1, &(0x7f00000012c0)={0x2, 0x0, @dev}, &(0x7f0000001300)=0x10, 0x400) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001340)={'vxcan1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80640002}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x59a6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x20000080) 15:09:10 executing program 1: r0 = syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x9, 0x8, &(0x7f00000005c0)=[{&(0x7f00000000c0)="fd8726e4f12ccc901da20fa9ed7e48ba71b249ad785200c5a51265c89a99d6345f2dca4a536abbcb3540ebcd307eab1c431e027b5396ebc3a9d461691d0b13ed85f3ea76f33bb192411e2480a4da10357c077c200be5126325364e064b954557092f98c736253260b0ce6b0dc61bd4f39ad3f0d4edba1d34fcbdc04e78df97d95e85abb98b7d1fdcce9eda716ca1a02e9b20f85121f39d456f38ac4bd15f0867359d8ce91c317b9380", 0xa9, 0x4}, {&(0x7f0000000180)="dcae0ab3554d00a7e65c457dee9959015e540243fafbb3", 0x17, 0x6f1}, {&(0x7f00000001c0)="2cb1f4badacc94e0b9900dd603ad4c497f2e7b0909feacdbd45c3d1a306e7b47136f01c1e6089d8e21f616c1fadf257a8f5b2abe4fc9d0063a4db5cc5733bcdb399f3e806e5dbee46c9def", 0x4b}, {&(0x7f0000000240)="3df5a172da7ecca3783fb2f866eda095d512db278efa2b5a1d8cf1aabd5bd4be0e27d141e8b28ed7794d85cd5184e5c58cb0c25401549b4c7c2dae379a8b95df58bd39ba9db87c97657d33b8dca37ae4a072c723c581bbc2cb62fc07823c50e2337db46f8288ae5af12963b10e884f8caba84fbacba2013456ae75ea8b185610c6c172ee64e28fd6c5303694c66e2a4b1740985413b817c74cbb2f56ea039b5f0c514624090f4ab61e94c0952d590d2af3461e71ee91b6b193683bf4081c3b73c749cd81a79290cc2b11a5529868cb5a49df62d1d34b7da9edf18f75c2788b40cbf8c75e09638779d2556540778e4bb5052ca17f0b4a0a38b6328547bc", 0xfd, 0x36699cbd}, {&(0x7f0000000340)="b199a504fd9d4bef2a1f776e539b20b405ca35b82cafdb4cde1eb325eb85bd04ae30a537ce362613aab8775cca3b1c6e4df7342fcbd8abc9b7b87d5371a4634439fa7669a94cd54258aabdff60af1e4532ff546718096ec4380a2d9359056c88f2490e194aa03fcc36ca69771957e91778fd3c50370273c67fe75ae2fbeac781d830beaa679294771cabd4d6139a3095225a758e9ef506f2813c72f805e124248d688f23f1bef46f4cc76e7b21c7cf982efe2c99f4b304c6b67066fb408d6b271d35086a8f28148c94bbe613f1", 0xcd, 0x1}, {&(0x7f0000000440)="f5b5777b5bf65244b3a13c3659a75170823e9519f96e4566a804686baf669ecc918eb000e0960a65a47e48fd1ee892e8f369ce872b6f", 0x36, 0x7ff}, {&(0x7f0000000480)="7dcbc7f8331e234a27f75ecf3638b000401edd0ec42650b40d7cd4c5a810cbb15e9250d1f98248620489d13aa52bf10a0477e94a26163c38de425293d9ec1a2e78491237f91d977e2c539684e5", 0x4d, 0x26652a1d}, {&(0x7f0000000500)="85608a15e4f4cc741e5f4df4070b5129a72f6365fecb8ed51cc8ff77423b5b36963643af87685836fc72ed355565718e903295125512523118daa6654960387ac0a3f0878a6f116042a028ed0036f003d022c1c191af3b22443fb06f052a329e41c1c1d593209482e639da4e06a94af580b6030cd51fe07bb3810cf50fd06eaf690cff5c6b8d44aaedd08f8fdc", 0x8d}], 0x200805, &(0x7f0000000680)={[{}, {}, {'-'}, {',{'}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_user}, {@smackfshat={'smackfshat', 0x3d, '*'}}]}) splice(0xffffffffffffffff, &(0x7f0000000000), r0, &(0x7f00000006c0)=0x20, 0x46b22839, 0x8) ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x1) symlink(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780), 0x4042, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) r2 = syz_mount_image$msdos(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x8, 0x4, &(0x7f0000000ac0)=[{&(0x7f0000000840)="9a2d966680e57fb8f596adff99db703e26f111a50b3fca98f355c521add5659466bd2b5ca0dd13b093ddb93de649963996a4b9b2a00ed6f256785048ede79abffee2e73d950abf97c9e7251c65c39af1943e8726165e558523dd", 0x5a, 0xab2e}, {&(0x7f00000008c0)="a503496808d54fd48e9967ec8f7e029f5c1d56fd575fc94d274ac6c6c2f590c573adf53ccab35b94e8346defee814f195af07799affbb24075a6f73c5690154fcf4f900252573623690d1ba805fd6baac91504cf4468955d40efbad9918754eb8bc3985c0983f237ec853c22a87fd028e9e6ac749556d22c4e50a9322a2b678342", 0x81, 0x4}, {&(0x7f0000000980)="fdb08f99699e64890e134388dbef2abe1f4fb7cb86cd2094eb020488b4c6db17175022858c379bde6a30", 0x2a, 0x6}, {&(0x7f00000009c0)="6e492b40208aef1e77c3b58bd3f17443594a8c2112e3fbe4b428e24e6b3f9e705f7b2e6218d812ed03defea8a1f877504d988a8db70305958202d3251dbc53a9722259ed7584980493abeb956c4d17bc292e71d495d7b0280b4da9a08296f3c41624d7feefc0a3c74a1e8dee5a2feb0fe9dc7501e439d075e2b2206e68f41d56bec88d84706889f3a9f721e3a57c6944817b171dd143965cc45f607102c14222c679a8edb0ea3b3a59f242d1c2f7b224d917bbb751334a7061920b2b31430a6ed2092e49ad4d2ce39c82b64797eed998719ab11184453f98e9bdad42427a690e4c0f3a949229e473e4e966", 0xeb, 0x8}], 0x22021, &(0x7f0000000b40)={[{@fat=@flush}, {@fat=@nfs}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '1255'}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@appraise_type}, {@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@uid_lt={'uid<', 0xee00}}, {@obj_user={'obj_user', 0x3d, 'nfs4\x00'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) move_mount(r2, &(0x7f0000000c00)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x11) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, @in_args={0x4}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000cc0)={'bond0\x00', @multicast}) pread64(r0, &(0x7f0000000d00)=""/138, 0x8a, 0x80000001) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000dc0)=0x1, 0x4) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e00), 0x80002, 0x0) r5 = dup(r4) ioctl$DVD_WRITE_STRUCT(r1, 0x5390, &(0x7f0000000e40)=@disckey={0x2, 0x1, "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"}) openat$sr(0xffffffffffffff9c, &(0x7f0000001680), 0x681, 0x0) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f00000016c0)={0x4, 0x800, 0x7}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000001ac0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001780)={0x2f4, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a83a356c85335e744a0bc4aa8aeaec1b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x772}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="840f07cd53643d89d3eb225d6efd2843"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d7d79c5744e6a5e26c39f3be80477429"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "db713b504b1c1054"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffa}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d8a1f8feed562fe94e5673489e7f61f9"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4a6910310fd3607b16d29a67a40672f8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "091214705b55e996"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x43b}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b52e1aa7567518549f5e0187e5277ce4"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0265e6f40dce9bdd7f336c1f3e1e5369de999c70655c8efc"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3db549318daea787b02cd141c1020b39"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1a87a16b454d94dd60fc71d36b9b613ed7c382f07b958b02"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffff7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7f3a5e65eddbab8d356f382af038cba872469d8a32e6ed95eb2c933650dadf1c"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b3f365ba32fbcf0c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8d82f0f820a34466"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="16ae50db99543576b03fecc6599fd98978ca483d57b87333a9a1f901598d9da3"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c86686b2a6342898271f3eeaaa5b2ac94627e798999ecbc4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffff7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="358795b77d6d9b57be879351cd04b69b06c68cf2b88765c20647d1bd59c7141d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4ac0}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc57c}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="41ba5bccd48e9eb59aa827a11edd7eab"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "48f7c7d828e4959b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4943e4e84fd9f6af1a0d57409eff8063"}]}, @NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1d2e43591c3ebc6d2b97ec1f467b98a2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a809521304d68ee5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0f1c9aa55feacefd7ca384402ca4c3d6d79ec83794f025a5891ef54da5070fee"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1f8900fc3b312088c71fb510433caf24"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="322f3b75335758f66bfa1ae297741f5562ae5278da3383e9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1000}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b79bc5efcb88b28ed5b62012e2999255e42c3d35221310b6"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aab5be93b17936dbd9fa37e90516d8db"}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 15:09:11 executing program 2: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x3) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r0 = fsopen(&(0x7f00000000c0)='fuse\x00', 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x2, r1}) r3 = syz_mount_image$nfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x9, 0x6, &(0x7f0000000680)=[{&(0x7f0000000240)="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", 0xff, 0x9}, {&(0x7f0000000340)="3d440987599cdd0371ec4eac5da86bf120f8f7d88d612da109e3d7e2fd31a66e16ac30522539784d0d0245e37d48d7ac529a01b74236bd530af0e4d9781b0a51991c0b1861b4ec52e752177b516580881577c684e1440ac1b64a48a7941f978e066cd1b198fcea6aa61fc5c7f45a61fbb4b943946062c603658142fc6b83e143ec92ddb031b64bd1091231e67c168f8696fd4a18c8bffec50156ed3d15b98836241072b6349f34dda3b09992af2211075d5f93019dccbb4f9defb854b9274e75fe77fba75b314f1fcc17dcd9ddfc3ee27b4c2b2a666881288e8470fa3a61523c1d5ab73ca2b8328366083f7873fb28745b26b0a4ca61", 0xf6, 0x10000}, {&(0x7f0000000440)="764b2efdee93fa23d3d75a3fa55753607dfa174aa68d091104394cb60e5ca5e71bc9c6208d1b00f39e148807d9d2c4a92032ee1a3acae4c12c130ae3b088263c6417595635078619c5f3c1588a371190bf976702ccb9df986b52f91b4df91ebe5eabcb56a3426e9af3eebd4aa999ff2038d16c978323be14090c7860bd4449805c551de9d03fe5785c8c85774a0982315de02d61b147b739f5", 0x99, 0xe3c}, {&(0x7f0000000500)="5193161560e1c12f20a0", 0xa, 0x4}, {&(0x7f0000000540)="d4e0202a5cd069b2d8b4cf4eb5c4838aa580d26c705d48f0708e4b863f8734fcef9603d6400a98d46fba44d488cc94e0e70cc339469389dd8f66b4bfe55ddc66a09ced75110f66a8deb802a24423393e968f2d71f726b9c8a526e5258298f82ba49b98519ed9ecdb58f75de74c670402c5339a2925734955b201154be0290bbf9edd84e75bfb60b4f9803e499ddd93f50f5e430503aa8f96241356a3a2d2ed89cc3fe5a0648ebec517e76208ce04a0ee5c6897e20a58a1a678f56510de56a3a4e404700fa4d7c6a048da3f6d36e402bfbdbc9b0b210c525cdd051bf6d2f656d42b07fc", 0xe3, 0x5}, {&(0x7f0000000640), 0x0, 0x6}], 0x80000, &(0x7f0000000740)={[{'freezer.state\x00'}, {'fuse\x00'}], [{@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup.procs\x00'}}, {@euid_gt={'euid>', r2}}, {@dont_hash}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = syz_open_dev$loop(&(0x7f0000000800), 0x5, 0x100) r5 = dup3(r3, r4, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000880)={{0x1, 0x1, 0x18, r4, @out_args}, './file0/file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r6) ioctl$HIDIOCGDEVINFO(r6, 0x801c4803, &(0x7f00000008c0)=""/99) pipe2(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c000) getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000000a40)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000a80)=0x2c) ioctl$HIDIOCGREPORTINFO(r7, 0xc00c4809, &(0x7f0000000ac0)={0x1, 0x200, 0x1ff}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000b80)={0xa, &(0x7f0000000b00)=[{0x2, 0x6, 0x7, 0x4}, {0x0, 0x4, 0x3f, 0x7fffffff}, {0x8000, 0x40, 0x0, 0x8}, {0x7, 0x5, 0x3, 0xffff}, {0x5, 0x80, 0x1, 0x3}, {0x3, 0x0, 0x3, 0x7fff}, {0x8, 0x20, 0xa7, 0x2}, {0x6, 0x9, 0x1, 0x1ff}, {0x1, 0x20, 0x2, 0xb03a}, {0x8, 0x80, 0x81, 0xdb}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r6, {r2}}, './file0/file0\x00'}) ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, &(0x7f0000000c00)={'vxcan1\x00', {0x2, 0x0, @empty}}) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000c80)=0x3) [ 130.619197] audit: type=1400 audit(1749827351.040:7): avc: denied { execmem } for pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:09:11 executing program 3: ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x1f, 0xff}) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x1, 0x3, 0x2}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x2c2800, 0x1a4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "62e2fa7ad02d0f43f092a48b10"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0xa, 0x4, "9778c203c97b"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2f95ec8dcb"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008801}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000f00)={&(0x7f0000000580), 0xc, &(0x7f0000000ec0)={&(0x7f0000000600)={0x894, r2, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_NAN_FUNC={0x274, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SRF={0x264, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "1014f60be3cfb134700bc6ded613d08b70ab3acfa3d32f155ef333fd942d64ea737f74015c286a28a85905eb40c0b03ff2889ceb6f72bdc6e41f94f0fa6f2f303ef647cbc6ee80ea4a1ff0c55d50f34f96a1054e26591ca4a4bbd84b822b11185a091dd640895c7b9bb70504e88cf4d49831ac62d1607a26c0d70c481c021ce0b854873804b41fa032e42f50d485c82c8feb218a2ea0f99968161ace0303c085ba57df43f1c8de9cf2c6e960d6e4524e1f19b583dc2db7028839d54539d718084ba5dabcc8fed1bf0cd0630d1ef2e91b006a0694a98c094c2446be28aed4337727df0d6720669fca746ef058c80f7d9c510da9361912a12520d9fd7756e11c"}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_BF={0x103, 0x2, "1bdbdfe71ed02504c4c12a8bf65e8a1790592ac640bfadf98d10826ae8609208d9e44d75ac80acb3344181f8758e8aafd3cb21a0bb2b1e086923b4118b2b1760cded86d193133d538927abc9acf03d82fd2b59e80252fff0a020cea5ace89e92d2deb0114e09659616a405de7a89535b2f08d6891dae4da685f67f4c63af6aa3f8cd9a52932873c3fc865de7b6cef998277293adf46f9e69b3b7f49790ff52a6ff27ae82f108eab9024b206d2d4a1805531630005dec74332352837e53acd582e1c94b34755d3ecfdf7bfdfb50f51d7b06eec6c3f0f4d4eebf7e6408ac94d9171f1f657b945e5ad115ca6a7c6f1e0fd9798a70d167f226ffad0aa1db5af9c5"}]}]}, @NL80211_ATTR_NAN_FUNC={0x4c4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SRF={0x4a4, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7f}, @NL80211_NAN_SRF_BF={0x103, 0x2, "490ae3d4780e546375c2cb1e9ffcb95cf88f59f85de77a211af9dd2e34c9c9f14868ec9c1ee0667e1e98fc7f409720050a2df2ad216e622730ef92e45c78054960e5984a05ac8ade0c4038489c505b9ffacdb9e94bcf44a3600496864d1f607648cd95a18399048b7a5fbc8f3dc88a554f7c8b7101d4d04e242db3056fe49607f9defade3b1d832968d0a1cbee3865a678ec77e577a524b4d5135941c356c3b6c594af01a552cd9d56f1c795441db3c8f184e182a0903d793fafe745efe7e0aad770316794ef06d2b058f74ad3fd18cc5d4bc1e4f457ea8a41ee2af60755e6982b213de570494946f81b5c272d21abc5ca836e6652033d42626325fefecd28"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "77883efab400c0bccb95d9c5bff4b1c06048f0e902b252399cea5e0e085a46efd3a869ec02291161dd99220a224ce722035acbed07a837d0a59515f80adc50694700ac073c7469798d13389fb7fcc083668d50e3b0e85f7daf088cd55e3556f794cfe6d0bd8c0767f4ee9495072d8076e34d6ac1b16638ea66a723864234e13fe6822183c996060390e9cd099e5b91de873ac11b05bcf2314ced10aa0fc560d7951f5bcc85f28bab0b26a16310012a5b11c9ac323e41d5b7b2b9e8c1c3ebe682371fc21cb2456b716f553ad5d95a8f38d02f0d11c002a220830e0fdb55c6281cb29143c13abaa00137e8242bf83478cffdc0ade23e38229b7e718c0443ba22"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x40, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x70}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "036cb3705878"}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x40}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x9c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x7b, 0xb, "1dcafb9e20fb66899b03d658048fae05870daee683e8af375ef346473c0b1ae2f8f3edb21c3d1e35c9fefb3e4bc48c05f52dbf7ea0a554050220cabf3484fc7b98f8dbe453a25d1439efff71a654efab1ef0f462cbee625368a10c3451cf6fef4600a9a19e0590f96038abb21a709aec290391df8799a6"}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x5c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "88443eed0421"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "f0165bed68c0"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7a}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7f}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x40000d1}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_open_dev$vcsn(&(0x7f0000001040), 0x2, 0x200) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, 0x0, 0x311, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x13}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x804) getsockname$netlink(r0, &(0x7f0000001180), &(0x7f00000011c0)=0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xd4, 0x2, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2d56}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x4040004) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001400)=@add_del={0x2, &(0x7f00000013c0)='gretap0\x00'}) socketpair(0x22, 0x4, 0x4, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x6c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3e58}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0xa}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x6c}}, 0x20000000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000015c0), 0x400000, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000001840)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0xe0, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x90}, 0x400c085) 15:09:11 executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000080)=""/32, 0x20}, {&(0x7f00000000c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/41, 0x29}, {&(0x7f00000002c0)=""/175, 0xaf}], 0x5, &(0x7f0000000400)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x10001) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x288}}]}, 0x38}}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000600)=0x6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f00000006c0)={0x458, r7, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb75, 0x32}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x977b}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}]}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x39}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x39}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_TX_RATES={0x3fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x9, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x7, 0x5, 0x7, 0x0, 0x1000, 0x7]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x2, 0x3, 0x0, 0x18, 0x9, 0x30, 0x5, 0x9, 0x9, 0x2]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x7}, {0x3, 0xa}, {0x1, 0x7}, {0x4, 0x9}, {0x6}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x7}, {0x1, 0x1}, {0x6, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x2}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x6, 0x6}, {0x7, 0x7}, {0x3, 0x5}, {0x7, 0x2}, {0x5, 0x4}, {0x3, 0x7}, {0x1, 0xa}, {0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x36, 0xb, 0x2e, 0x24, 0x4, 0x5, 0x1b, 0x3, 0x15, 0x6, 0x6, 0x36, 0x12, 0x18, 0x5, 0x18, 0x2]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x16, 0x12, 0x0, 0x1b, 0x6c, 0x60, 0x3, 0x36, 0x3, 0x5, 0x30, 0x3, 0x1, 0x0]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x7}, {0x4, 0x3}, {0x2, 0x7}, {0x1, 0xa}, {0x1, 0x6}, {0x3, 0x3}, {0x2, 0x7}, {}, {0x2, 0x7}, {0x6, 0x5}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x2, 0x1b, 0x5, 0x3, 0x6c, 0x9, 0xb, 0x2, 0x16, 0xc, 0xc, 0x60, 0x3, 0x16, 0x6, 0x12, 0x1, 0xfe0c7868f0819fb2, 0x48, 0x18, 0x36, 0x16, 0x12, 0x6, 0x6c, 0x1b, 0x1, 0xa2, 0x5, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf001, 0x2, 0x8, 0x9, 0x3, 0xfff8, 0x1e42, 0x2]}}]}, @NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x1, 0x5, 0x0, 0x5, 0x20, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x0, 0x6361, 0x3, 0x2, 0x8, 0x4]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x3}, {0x3, 0x6}, {0x7, 0x2}, {0x3, 0xa}, {0x7, 0x5}, {0x5, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x6, 0x6}, {0x5, 0x2}, {0x6, 0x1}, {0x5}, {0x3, 0xa}, {0x5, 0x9}, {0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x2, 0x8}, {0x6, 0x7}, {0x6, 0x5}, {0x4}, {0x6, 0x3}, {0x2, 0x2}, {0x3, 0x4}, {0x6, 0x1}, {0x1}, {0x3, 0x9}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0x7}, {0x2, 0x7}, {0x6}, {0x5}, {0x0, 0x3}, {0x3, 0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0xa}, {0x1, 0x2}, {0x5, 0x1}, {0x4}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x8}, {0x5, 0x8}, {0x7, 0x9}, {0x3, 0x7}, {0x6, 0x7}, {0x0, 0x9}, {0x5, 0x4}, {0x6, 0x4}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x3}, {0x7, 0x7}, {0x1, 0x3}, {0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x5, 0xa}, {0x1, 0x6}, {0x0, 0x6}, {0x2, 0x3}, {0x1, 0x4}, {0x3, 0x9}, {0x4, 0x7}, {0x5}, {0x4, 0x6}, {0x7, 0x9}, {0x5, 0x6}, {0x7, 0x9}, {0x2}, {0x2, 0xa}, {0x4, 0x5}, {0x4}, {0x7, 0x3}, {0x6, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x0, 0x8}, {0x7, 0x8}, {0x1, 0x3}, {0x6, 0x2}, {0x2, 0x2}, {0x2, 0x8}, {0x3, 0x7}, {0x7, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x1, 0x4, 0x1, 0x3, 0xe77, 0x1f]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x800, 0xc0, 0x5, 0x7, 0x7, 0x5, 0x200]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x2}, {0x3}, {0x5, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x4, 0x6}, {0x2, 0x4}, {0x1}, {0x3, 0x8}, {0x5, 0x1}, {0x3, 0x3}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {}, {0x7, 0x8}, {0x6, 0x7}, {0x2, 0x2}, {}, {0x7, 0xa}, {0x5, 0x7}, {0x6, 0x5}, {0x6, 0x4}, {0x1, 0x8}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x108, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x3}, {0x4, 0x4}, {0x3, 0x2}, {0x5, 0x9}, {0x2, 0x9}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x1}, {0x2, 0x3}, {0x3}, {0x2, 0x3}, {0x5, 0x3}, {0x3, 0x7}, {0x2, 0x1}, {0x1, 0x4}, {0x3, 0x2}, {0x2, 0x2}, {0x0, 0x1}, {0x5, 0x9}, {0x2, 0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x5, 0x3}, {0x3, 0x2}, {0x1, 0x7}, {0x2, 0x9}, {0x0, 0x3}, {0x6, 0x4}, {0x2, 0x8}, {0x5, 0x2}, {0x3}, {0x3, 0x5}, {0x5, 0x7}, {0x4, 0x7}, {0x4, 0x5}, {0x0, 0x1}, {0x2, 0x6}, {0x1}, {0x4, 0x9}, {0x5, 0x6}, {0x0, 0x9}, {0x5, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x6}, {0x5, 0x4}, {0x6, 0x2}, {0x3, 0x8}, {0x1, 0x9}, {0x2, 0x5}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x6}, {0x5}, {0x3}, {0x6, 0x3}, {0x5, 0x4}, {0x4, 0xa}, {0x3, 0x2}, {0x5, 0x5}, {0x2, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x6}, {0x4, 0x7}, {0x7, 0x4}, {0x2, 0x9}, {0x3, 0x7}, {0x3, 0x9}, {}, {0x7, 0x7}, {0x7, 0x2}, {0x3, 0xa}, {0x6, 0x4}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x7}, {0x7, 0x9}, {0x3, 0x7}, {0x3, 0x6}, {0x0, 0x4}, {0x3, 0x4}, {}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x7}, {0x1}, {0x6}, {0x1, 0xa}, {0x2, 0x4}, {0x7, 0x2}, {0x2, 0x4}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0x5}, {0x3, 0xa}, {0x1, 0x9}, {0x2, 0x5}, {0x2, 0x8}, {0x1, 0x3}, {0x6, 0x2}, {0x2, 0x6}, {0x3, 0xa}, {0x6, 0x5}, {0x3, 0x9}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7, 0x2}, {0x2, 0x4}, {0x1, 0x9}, {0x2, 0x1}, {0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x2}, {0x5, 0x7}, {0x6, 0x1}, {0x2, 0x8}, {0x2, 0x6}, {0x4, 0x8}, {0x1, 0x4}, {0x7, 0x6}, {0x2}, {0x2, 0x5}, {0x0, 0x5}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x6}, {0x3, 0xa}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x6}, {0x2, 0xa}, {0x7, 0x6}, {0x5, 0x4}, {0x7, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x9}, {0x5}, {0x5, 0x4}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x8}, {0x5, 0x7}, {0x1, 0x4}, {0x3}, {0x7, 0x3}, {0x4, 0x3}, {0x0, 0x7}, {0x2, 0x2}, {0x7, 0x4}, {0x0, 0x5}, {0x4}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x4}, {0x3, 0x6}, {0x2, 0x8}, {0x1, 0x6}, {0x2, 0xa}, {0x6, 0x4}, {0x1, 0x3}, {0x6, 0x1}, {0x3, 0x5}, {0x6, 0x3}, {0x6, 0x7}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffd9, 0x80, 0x1, 0x8, 0x7, 0x8, 0x40, 0x101]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x24, 0x1, 0x24, 0x1, 0x5, 0x24, 0x24, 0x16, 0x9, 0x1, 0x0, 0x6, 0x9, 0x2, 0x30, 0x18, 0x9, 0x16, 0x6, 0x48]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0xa}, {0x1, 0xa}, {0x2, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x6, 0x3}, {0x5, 0xa}, {0x3, 0x5}, {0x6, 0x7}, {0x2, 0x1}, {0x2, 0x5}, {0x5, 0x8}, {0x4, 0x6}, {0x2, 0x4}, {0x1, 0x7}, {0x6, 0x6}, {0x6, 0x1}, {0x4, 0x2}, {0x4, 0x2}, {0x1, 0x3}, {0x5, 0x1}, {0x1, 0x5}, {0x6, 0x7}, {0x2, 0x2}, {0x7, 0x6}, {0x0, 0x9}, {0x6, 0x2}, {0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x7, 0xa}, {0x5, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x2, 0x6}, {0x6, 0x3}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x4}, {0x0, 0x2}, {0x7}, {0x0, 0x2}, {0x2}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x7, 0x9}, {0x2, 0x9}, {0x6, 0x1}, {0x3, 0xa}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x5}, {0x7, 0xa}, {0x5}, {0x2, 0x4}, {0x3, 0x6}, {0x3, 0xa}, {0x3, 0x2}, {0x0, 0x8}, {0x1, 0x8}, {0x7, 0x2}, {0x4, 0x2}, {0x6, 0xa}, {0x6}]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0xb, 0x60, 0x16, 0x4, 0x48, 0x1b, 0x24, 0x6c, 0x1b, 0x4, 0x16, 0x5, 0x4d]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x1c}, {0x2, 0xa}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x9}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0xa}, {0x4, 0x6}, {0x2, 0x2}, {0x3, 0x7}, {0x4, 0x4}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x9}, {0x6, 0xa}, {0x6, 0x6}, {0x4, 0x6}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x24, 0x48, 0x6, 0x8, 0x16, 0x12, 0x60, 0xc, 0x1b, 0x1, 0x36, 0x36, 0xb, 0x60, 0x16, 0x6c, 0x16, 0x36, 0x1]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xb, 0x9, 0x0, 0x48, 0x9, 0x0, 0x36, 0x30, 0x0, 0x12, 0x18, 0x1b, 0x4, 0x9, 0x4, 0x9, 0x2, 0x1, 0xc, 0x6, 0x2, 0x1, 0x18, 0x18, 0x5, 0x5, 0x1, 0x6, 0x36, 0xa, 0x4e, 0x30]}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x18, 0x1b, 0x9, 0x12, 0x36, 0x60, 0x98, 0x2, 0x18, 0x48, 0x1, 0x6, 0x3, 0x2, 0x16, 0x60, 0x6, 0x0, 0x4, 0x2, 0x0, 0x9, 0x30, 0x6, 0x1b, 0xb, 0x0, 0x6, 0x0]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x1, 0x4, 0x48, 0xc, 0x5, 0x12, 0x36, 0x10, 0x2, 0x5, 0xb, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x40, 0x3, 0xe8, 0x9, 0x7, 0x8, 0x5]}}]}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x44}, 0x0) setxattr$security_ima(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), &(0x7f0000000c40)=@sha1={0x1, "6a9c00a86a299bc5611aa02efade1c5234f85650"}, 0x15, 0x2) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x8080, &(0x7f0000000d40)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@msize}, {@access_user}, {@privport}, {@fscache}, {@aname={'aname', 0x3d, 'pci\x00'}}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}], [{@seclabel}, {@euid_gt={'euid>', 0xee01}}]}}) r9 = syz_open_dev$vcsn(&(0x7f0000000e00), 0x3, 0x400) ioctl$TIOCSPGRP(r9, 0x5410, &(0x7f0000000e40)) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e80)='blkio.bfq.time\x00', 0x0, 0x0) fcntl$getown(r10, 0x9) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ec0), r11) ioctl$PTP_PEROUT_REQUEST(r10, 0x40383d03, &(0x7f0000000f40)={{0xff, 0xffffffff}, {0x2e331d07, 0x6}, 0x5fb9}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f00000010c0)={&(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x2}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r12, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0xc010) 15:09:11 executing program 6: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="7c17423cb86db0958ea78c99bebb39c96e113953aed3c4c476bf972d0f0ed678ed73fb7845f2ab3e326119e2") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x6, {0x30, 0x100000000, 0x9, 0x6, 0xe6d}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x38}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040040}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000240)={{0x0, 0xe18, 0x20, 0x9, 0x437, 0x40, 0xffff, 0x2, 0x8001, 0x7ff, 0x0, 0x7, 0x6, 0x578, 0x7fff}, 0x10, [0x0, 0x0]}) epoll_create1(0x80000) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x6, &(0x7f00000002c0)=""/235, &(0x7f00000003c0)=0xeb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4a7, 0x13}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xc47, 0x3ff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r5 = syz_open_dev$mouse(&(0x7f0000000680), 0x6, 0x10102) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r6, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x63}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x25}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x40002, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf63}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x40001) 15:09:11 executing program 5: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="e43df776e1d4c5af0cb31cbf88311409c8f1f069938ac849bf43a379443acc43625d03f5ce1671e649bc5a08e554d043bd6df5deb2228e2710381e9fd4ae35a9438d66fc9593531b9489eb662ba77031744fb437bcd3236426393ff803985b36df6dcb28c2950b8fc543485ccfc5ee4d76f0e11e6de84fae0a07c29e99b69dc6e1412e6f063996284639aaa1ebb66bb5b2edad", 0x93, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8000, 0x10, 0x5}, 0x18) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c800) bind$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) r2 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r3 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc3}, &(0x7f0000000400)={0x0, "b2cd839b1ef57a394f908357abc81befd6d817ddb8b524e2297e20d4f160905c6f4f7925bfc89b0d5a8c21252b1b4dbc7360ee89f6fe52ee127d08795d64c472", 0x2a}, 0x48, r2) keyctl$describe(0x6, r3, &(0x7f0000000500)=""/202, 0xca) fstat(r1, &(0x7f0000000600)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000680)={0x0, 0x3f, 0x3}) recvmmsg$unix(r1, &(0x7f0000001e40)=[{{&(0x7f0000000a80), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000b00)=""/46, 0x2e}, {&(0x7f0000000b40)=""/59, 0x3b}, {&(0x7f0000000b80)=""/70, 0x46}, {&(0x7f0000000c00)=""/8, 0x8}, {&(0x7f0000000c40)=""/76, 0x4c}, {&(0x7f0000000cc0)=""/124, 0x7c}, {&(0x7f0000000d40)=""/3, 0x3}], 0x7, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000e80)=@abs, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000f00)=""/65, 0x41}, {&(0x7f0000000f80)=""/6, 0x6}, {&(0x7f0000000fc0)=""/255, 0xff}], 0x3, &(0x7f0000001100)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f00000011c0)=""/232, 0xe8}, {&(0x7f00000012c0)=""/225, 0xe1}, {&(0x7f00000013c0)=""/136, 0x88}, {&(0x7f0000001480)=""/224, 0xe0}, {&(0x7f0000001580)=""/82, 0x52}, {&(0x7f0000001600)=""/83, 0x53}], 0x6, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001780)=""/143, 0x8f}], 0x1, &(0x7f0000001880)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001940)=""/248, 0xf8}, {&(0x7f0000001a40)=""/177, 0xb1}, {&(0x7f0000001b00)=""/176, 0xb0}, {&(0x7f0000001bc0)=""/135, 0x87}, {&(0x7f0000001c80)=""/116, 0x74}], 0x5, &(0x7f0000001d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x5, 0x100, 0x0) recvmmsg$unix(r4, &(0x7f0000007b00)=[{{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002400)=[{&(0x7f0000002000)=""/93, 0x5d}, {&(0x7f0000002080)=""/65, 0x41}, {&(0x7f0000002100)=""/30, 0x1e}, {&(0x7f0000002140)=""/66, 0x42}, {&(0x7f00000021c0)=""/205, 0xcd}, {&(0x7f00000022c0)=""/85, 0x55}, {&(0x7f0000002340)=""/148, 0x94}], 0x7, &(0x7f0000002480)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002500), 0x6e, &(0x7f0000002880)=[{&(0x7f0000002580)=""/219, 0xdb}, {&(0x7f0000002680)=""/36, 0x24}, {&(0x7f00000026c0)=""/105, 0x69}, {&(0x7f0000002740)=""/227, 0xe3}, {&(0x7f0000002840)=""/13, 0xd}], 0x5, &(0x7f0000002900)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002940)=@abs, 0x6e, &(0x7f0000002bc0)=[{&(0x7f00000029c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/34, 0x22}, {&(0x7f0000002a40)=""/29, 0x1d}, {&(0x7f0000002a80)=""/136, 0x88}, {&(0x7f0000002b40)=""/26, 0x1a}, {&(0x7f0000002b80)=""/44, 0x2c}], 0x6, &(0x7f0000002c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000002d40), 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002dc0)=""/102, 0x66}, {&(0x7f0000002e40)=""/61, 0x3d}], 0x2, &(0x7f0000002ec0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002f80), 0x6e, &(0x7f00000041c0)=[{&(0x7f0000003000)=""/133, 0x85}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/228, 0xe4}], 0x3}}, {{&(0x7f0000004200), 0x6e, &(0x7f00000055c0)=[{&(0x7f0000004280)=""/226, 0xe2}, {&(0x7f0000004380)=""/117, 0x75}, {&(0x7f0000004400)=""/126, 0x7e}, {&(0x7f0000004480)=""/24, 0x18}, {&(0x7f00000044c0)=""/41, 0x29}, {&(0x7f0000004500)=""/170, 0xaa}, {&(0x7f00000045c0)=""/4096, 0x1000}], 0x7, &(0x7f0000005640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000056c0), 0x6e, &(0x7f0000007840)=[{&(0x7f0000005740)=""/4096, 0x1000}, {&(0x7f0000006740)=""/4096, 0x1000}, {&(0x7f0000007740)=""/57, 0x39}, {&(0x7f0000007780)=""/145, 0x91}], 0x4, &(0x7f0000007880)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000078c0), 0x6e, &(0x7f0000007a40)=[{&(0x7f0000007940)=""/15, 0xf}, {&(0x7f0000007980)=""/192, 0xc0}], 0x2, &(0x7f0000007a80)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x8, 0x40000000, &(0x7f0000007d00)={0x0, 0x989680}) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000007d40)=@gcm_256={{0x304}, "e21213e63f2708d5", "b0d908843de8a02893d436d7096244021e3a18e1b6a5d97f01a31c326676a0e4", "69aad5d4", "0fa806e1fdf309fd"}, 0x38) keyctl$clear(0x7, r3) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007dc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000007ec0)={&(0x7f0000007d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000007e80)={&(0x7f0000007e00)={0x68, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x81) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007f40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000008000)={&(0x7f0000007f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000007fc0)={&(0x7f0000007f80)={0x28, r7, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) r8 = add_key$fscrypt_v1(&(0x7f0000008040), &(0x7f0000008080)={'fscrypt:', @desc2}, &(0x7f00000080c0)={0x0, "d40cd88871684ec791222af3213bb20cb7ad401c603496fd0c0ff5f253d558c184b4d90d2f716b2ca394512ac519b7be479e078cb1029c5ba1b9a47d7ccd8e71", 0x1d}, 0x48, r2) keyctl$link(0x8, r8, r2) 15:09:11 executing program 7: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000000)=""/183) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/176) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x404000, 0x0) r1 = accept$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000300)=0x101) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000340)={0x6, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e22, @empty}}}, 0x108) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000480)=""/39) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={0x0, @multicast2, @multicast2}, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000851) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1800024}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1080) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000780)={'veth0_macvtap\x00'}) r4 = openat$incfs(r0, &(0x7f00000007c0)='.pending_reads\x00', 0x0, 0x1) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)={0xffffff22, {{0x2, 0x4e22, @broadcast}}, 0x0, 0x2, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @private=0xa010101}}]}, 0x190) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f00000009c0)={0x1, 0x7}) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000a00)=""/50) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000a40)={0x0, 0x1, [0x5, 0x5, 0xffffffffffffff1e, 0x8, 0x100000000, 0x6]}) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000a80)={0x9, 0x5, 0x7, 0x2, 0x2, [{0x8, 0x2, 0x6, '\x00', 0x87}, {0x0, 0xfffffffffffffffc, 0x7, '\x00', 0x104}]}) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000b40)) [ 132.102361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.107469] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.109454] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.110903] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.116715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.118549] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.125355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.129077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.132942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.136511] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.183456] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.187079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.188441] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.201134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.206076] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.221225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 132.227045] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.232501] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 132.239132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.242413] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.248928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.252088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 132.254354] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 132.259189] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.261349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.262801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.264599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 132.275154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 132.276694] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.279089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 132.283372] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.293385] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.306917] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 132.312591] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 132.335678] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 132.358319] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 132.359435] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 132.379921] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 132.384192] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 132.386689] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 134.179394] Bluetooth: hci1: command tx timeout [ 134.181342] Bluetooth: hci0: command tx timeout [ 134.308442] Bluetooth: hci2: command tx timeout [ 134.371085] Bluetooth: hci3: command tx timeout [ 134.371731] Bluetooth: hci5: command tx timeout [ 134.372490] Bluetooth: hci4: command tx timeout [ 134.435876] Bluetooth: hci6: command tx timeout [ 134.499057] Bluetooth: hci7: command tx timeout [ 136.227793] Bluetooth: hci1: command tx timeout [ 136.228376] Bluetooth: hci0: command tx timeout [ 136.354850] Bluetooth: hci2: command tx timeout [ 136.420379] Bluetooth: hci5: command tx timeout [ 136.420904] Bluetooth: hci4: command tx timeout [ 136.421363] Bluetooth: hci3: command tx timeout [ 136.483163] Bluetooth: hci6: command tx timeout [ 136.547537] Bluetooth: hci7: command tx timeout [ 138.274904] Bluetooth: hci0: command tx timeout [ 138.275460] Bluetooth: hci1: command tx timeout [ 138.403841] Bluetooth: hci2: command tx timeout [ 138.466922] Bluetooth: hci3: command tx timeout [ 138.468328] Bluetooth: hci4: command tx timeout [ 138.468932] Bluetooth: hci5: command tx timeout [ 138.532188] Bluetooth: hci6: command tx timeout [ 138.596799] Bluetooth: hci7: command tx timeout [ 140.323865] Bluetooth: hci1: command tx timeout [ 140.324459] Bluetooth: hci0: command tx timeout [ 140.451898] Bluetooth: hci2: command tx timeout [ 140.515141] Bluetooth: hci4: command tx timeout [ 140.515684] Bluetooth: hci3: command tx timeout [ 140.516661] Bluetooth: hci5: command tx timeout [ 140.580201] Bluetooth: hci6: command tx timeout [ 140.643440] Bluetooth: hci7: command tx timeout [ 195.132391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.134656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.142668] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.144918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.148300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.153285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.160147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.162212] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.167094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.169571] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.258148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.269328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.272481] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.275153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.284643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.290624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.294411] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.297550] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.302937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.308050] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.314087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.324256] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.329699] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.341064] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.348008] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 195.350134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.353642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.354220] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.360264] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 195.364546] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 195.371994] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.377295] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 195.384087] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 195.388376] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.392801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 195.430937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.459217] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 195.461526] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 195.465453] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 195.467824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 197.218900] Bluetooth: hci0: command tx timeout [ 197.219637] Bluetooth: hci1: command tx timeout [ 197.411308] Bluetooth: hci2: command tx timeout [ 197.475833] Bluetooth: hci4: command tx timeout [ 197.602869] Bluetooth: hci7: command tx timeout [ 197.666983] Bluetooth: hci5: command tx timeout [ 197.667725] Bluetooth: hci6: command tx timeout [ 197.668344] Bluetooth: hci3: command tx timeout [ 199.266867] Bluetooth: hci1: command tx timeout [ 199.268579] Bluetooth: hci0: command tx timeout [ 199.458889] Bluetooth: hci2: command tx timeout [ 199.523333] Bluetooth: hci4: command tx timeout [ 199.651173] Bluetooth: hci7: command tx timeout [ 199.714898] Bluetooth: hci3: command tx timeout [ 199.716381] Bluetooth: hci6: command tx timeout [ 199.717792] Bluetooth: hci5: command tx timeout [ 201.315300] Bluetooth: hci1: command tx timeout [ 201.317052] Bluetooth: hci0: command tx timeout [ 201.507079] Bluetooth: hci2: command tx timeout [ 201.570854] Bluetooth: hci4: command tx timeout [ 201.698882] Bluetooth: hci7: command tx timeout [ 201.764938] Bluetooth: hci3: command tx timeout [ 201.766677] Bluetooth: hci6: command tx timeout [ 201.768422] Bluetooth: hci5: command tx timeout [ 203.362897] Bluetooth: hci1: command tx timeout [ 203.364408] Bluetooth: hci0: command tx timeout [ 203.555845] Bluetooth: hci2: command tx timeout [ 203.618847] Bluetooth: hci4: command tx timeout [ 203.748792] Bluetooth: hci7: command tx timeout [ 203.811566] Bluetooth: hci5: command tx timeout [ 203.813160] Bluetooth: hci6: command tx timeout [ 203.814837] Bluetooth: hci3: command tx timeout [ 257.717409] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.724783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.729942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.739668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.749527] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.935725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.943060] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.947805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.956482] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.960328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.102133] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.105368] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.109610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.113072] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.115178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.180918] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.192969] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.196299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.198304] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.202470] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.209618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.218003] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.238221] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.247326] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 258.265947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.277692] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 258.280580] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.287499] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.307633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 258.316860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 258.319893] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 258.322242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.331270] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 258.339089] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.352916] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 258.363931] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 258.371199] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 258.377130] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 258.419392] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 258.433536] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 259.812216] Bluetooth: hci0: command tx timeout [ 260.003069] Bluetooth: hci1: command tx timeout [ 260.195228] Bluetooth: hci2: command tx timeout [ 260.322886] Bluetooth: hci4: command tx timeout [ 260.387327] Bluetooth: hci3: command tx timeout [ 260.450862] Bluetooth: hci6: command tx timeout [ 260.451638] Bluetooth: hci5: command tx timeout [ 260.515009] Bluetooth: hci7: command tx timeout [ 261.859391] Bluetooth: hci0: command tx timeout [ 262.051985] Bluetooth: hci1: command tx timeout [ 262.244252] Bluetooth: hci2: command tx timeout [ 262.371081] Bluetooth: hci4: command tx timeout [ 262.437075] Bluetooth: hci3: command tx timeout [ 262.500788] Bluetooth: hci6: command tx timeout [ 262.502448] Bluetooth: hci5: command tx timeout [ 262.562872] Bluetooth: hci7: command tx timeout [ 263.906829] Bluetooth: hci0: command tx timeout [ 264.098839] Bluetooth: hci1: command tx timeout [ 264.291822] Bluetooth: hci2: command tx timeout [ 264.418982] Bluetooth: hci4: command tx timeout [ 264.483687] Bluetooth: hci3: command tx timeout [ 264.546865] Bluetooth: hci6: command tx timeout [ 264.547393] Bluetooth: hci5: command tx timeout [ 264.610832] Bluetooth: hci7: command tx timeout [ 265.956206] Bluetooth: hci0: command tx timeout [ 266.147867] Bluetooth: hci1: command tx timeout [ 266.341987] Bluetooth: hci2: command tx timeout [ 266.467975] Bluetooth: hci4: command tx timeout [ 266.531831] Bluetooth: hci3: command tx timeout [ 266.596200] Bluetooth: hci6: command tx timeout [ 266.597866] Bluetooth: hci5: command tx timeout [ 266.659896] Bluetooth: hci7: command tx timeout [ 320.656541] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.661194] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.665469] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.676457] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.680376] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.773130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.777554] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.780911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.784194] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.786442] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.788615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.797175] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.804165] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.821211] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.828607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 320.949647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.961929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.965415] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.970469] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.975069] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.979329] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 321.010189] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.029209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.036604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.038302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.050204] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.075072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.075987] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.105997] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.110022] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 321.120911] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 321.122414] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 321.126645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 321.151306] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.151965] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 321.191453] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 321.199179] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 321.217257] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 321.223552] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 321.258471] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 322.723015] Bluetooth: hci0: command tx timeout [ 322.850886] Bluetooth: hci1: command tx timeout [ 322.914930] Bluetooth: hci2: command tx timeout [ 323.043192] Bluetooth: hci3: command tx timeout [ 323.171829] Bluetooth: hci4: command tx timeout [ 323.235246] Bluetooth: hci5: command tx timeout [ 323.299062] Bluetooth: hci6: command tx timeout [ 323.748205] Bluetooth: hci7: command tx timeout [ 324.771018] Bluetooth: hci0: command tx timeout [ 324.900778] Bluetooth: hci1: command tx timeout [ 324.963830] Bluetooth: hci2: command tx timeout [ 325.090911] Bluetooth: hci3: command tx timeout [ 325.219259] Bluetooth: hci4: command tx timeout [ 325.285033] Bluetooth: hci5: command tx timeout [ 325.346871] Bluetooth: hci6: command tx timeout [ 325.795987] Bluetooth: hci7: command tx timeout [ 326.819152] Bluetooth: hci0: command tx timeout [ 326.946859] Bluetooth: hci1: command tx timeout [ 327.010847] Bluetooth: hci2: command tx timeout [ 327.138820] Bluetooth: hci3: command tx timeout [ 327.266824] Bluetooth: hci4: command tx timeout [ 327.331598] Bluetooth: hci5: command tx timeout [ 327.395009] Bluetooth: hci6: command tx timeout [ 327.842812] Bluetooth: hci7: command tx timeout [ 328.868034] Bluetooth: hci0: command tx timeout [ 328.995105] Bluetooth: hci1: command tx timeout [ 329.059079] Bluetooth: hci2: command tx timeout [ 329.186880] Bluetooth: hci3: command tx timeout [ 329.315100] Bluetooth: hci4: command tx timeout [ 329.378825] Bluetooth: hci5: command tx timeout [ 329.442828] Bluetooth: hci6: command tx timeout [ 329.890867] Bluetooth: hci7: command tx timeout [ 383.098535] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.103321] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.106665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.117201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.122273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.283645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.288366] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.293028] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.303572] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.308001] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.553270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.562903] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.568265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.580480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.598897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.631057] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 383.637417] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 383.652082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 383.672432] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.697008] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.704151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.707023] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.730360] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.754363] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.769034] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.836822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 383.845172] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 383.848294] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 383.853516] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 383.857208] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 384.021074] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 384.037377] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 384.042323] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 384.070330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 384.098562] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 384.114700] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 384.132005] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 384.138266] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 384.166576] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 384.181257] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 385.186937] Bluetooth: hci0: command tx timeout [ 385.379137] Bluetooth: hci1: command tx timeout [ 385.634829] Bluetooth: hci2: command tx timeout [ 385.762884] Bluetooth: hci3: command tx timeout [ 385.890819] Bluetooth: hci6: command tx timeout [ 386.211850] Bluetooth: hci4: command tx timeout [ 386.274834] Bluetooth: hci5: command tx timeout [ 386.340789] Bluetooth: hci7: command tx timeout [ 387.237155] Bluetooth: hci0: command tx timeout [ 387.426813] Bluetooth: hci1: command tx timeout [ 387.685221] Bluetooth: hci2: command tx timeout [ 387.811824] Bluetooth: hci3: command tx timeout [ 387.942088] Bluetooth: hci6: command tx timeout [ 388.258989] Bluetooth: hci4: command tx timeout [ 388.323121] Bluetooth: hci5: command tx timeout [ 388.386786] Bluetooth: hci7: command tx timeout [ 389.283776] Bluetooth: hci0: command tx timeout [ 389.475946] Bluetooth: hci1: command tx timeout [ 389.730867] Bluetooth: hci2: command tx timeout [ 389.860115] Bluetooth: hci3: command tx timeout [ 389.987772] Bluetooth: hci6: command tx timeout [ 390.308098] Bluetooth: hci4: command tx timeout [ 390.372880] Bluetooth: hci5: command tx timeout [ 390.435825] Bluetooth: hci7: command tx timeout [ 391.330929] Bluetooth: hci0: command tx timeout [ 391.524790] Bluetooth: hci1: command tx timeout [ 391.778851] Bluetooth: hci2: command tx timeout [ 391.907027] Bluetooth: hci3: command tx timeout [ 392.036240] Bluetooth: hci6: command tx timeout [ 392.356154] Bluetooth: hci4: command tx timeout [ 392.418947] Bluetooth: hci5: command tx timeout [ 392.482821] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:14:19 Registers: info registers vcpu 0 RAX=ffffffff87a41508 RBX=ffff8880137f0000 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000000000 RDI=ffffffff85c1cc40 RBP=ffff8880137f0a58 RSP=ffff88802d64f810 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff8880137f0a58 R13=0000000000000003 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81518e3d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7f607c9008 CR3=00000000299bb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff81a44824 RCX=ffff888036b071dc RDX=1ffff11006d60e5c RSI=ffffffff85c1cc40 RDI=ffffffff81a44824 RBP=ffffffff81a44824 RSP=ffff888036b07238 R8 =0000000000000001 R9 =ffff888036b072c8 R10=000000000003b4cd R11=00000000000c31cf R12=0000000000000001 R13=0000000000000000 R14=ffff888039878000 R15=0000000000000cc0 RIP=ffffffff8142fa12 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd078272b70 CR3=0000000036983000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000