Warning: Permanently added '[localhost]:21346' (ECDSA) to the list of known hosts. 2025/01/24 23:35:35 fuzzer started 2025/01/24 23:35:36 dialing manager at localhost:40883 syzkaller login: [ 67.774020] cgroup: Unknown subsys name 'net' [ 67.817079] cgroup: Unknown subsys name 'cpuset' [ 67.832955] cgroup: Unknown subsys name 'rlimit' [ 73.017821] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 23:35:52 syscalls: 209 2025/01/24 23:35:52 code coverage: enabled 2025/01/24 23:35:52 comparison tracing: enabled 2025/01/24 23:35:52 extra coverage: enabled 2025/01/24 23:35:52 setuid sandbox: enabled 2025/01/24 23:35:52 namespace sandbox: enabled 2025/01/24 23:35:52 Android sandbox: enabled 2025/01/24 23:35:52 fault injection: enabled 2025/01/24 23:35:52 leak checking: enabled 2025/01/24 23:35:52 net packet injection: enabled 2025/01/24 23:35:52 net device setup: enabled 2025/01/24 23:35:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 23:35:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 23:35:52 USB emulation: enabled 2025/01/24 23:35:52 hci packet injection: enabled 2025/01/24 23:35:52 wifi device emulation: enabled 2025/01/24 23:35:52 802.15.4 emulation: enabled 2025/01/24 23:35:52 fetching corpus: 0, signal 0/0 (executing program) 2025/01/24 23:35:54 starting 8 fuzzer processes 23:35:54 executing program 0: r0 = socket(0x23, 0x4, 0x7) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4a}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x40000) r2 = socket(0x6, 0x800, 0x4) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x9c, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000840) r7 = syz_open_dev$vcsu(&(0x7f0000000540), 0x10000, 0x151200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000580)=[@sack_perm, @sack_perm, @mss={0x2, 0xfffff064}], 0x3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, r8, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x60, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffffb}, @NL80211_NAN_FUNC_SERVICE_INFO={0x2a, 0xb, "4633765b91359b2a2480b5d3d3b1c8182220ee881e554e43ada961d003a31bc6a8d8238b212f"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xf6}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x30}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000780)=0x65, 0x4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={0x2e0, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE={0x276, 0x2a, [@random={0x6, 0x6b, "fb4293ebfb11a6765cf3f1c18884f4d7671ef4067329379388bd40e9510fcf999c7fdcb2b4f7cbd5bc14767a780aa8eb631180f89adac930f1afe1e1be0d558c55c5ae06f9b3c258cb675190ef961e2556b684366a9d6494f15b83e2742d37324ce8e5bca64553d95de471"}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0xb5, 0x80}}, @perr={0x84, 0x95, {0x80, 0x9, [@not_ext={{}, @device_a, 0x2, "", 0x37}, @not_ext={{}, @device_b, 0x100, "", 0x6}, @not_ext={{}, @device_b, 0x4, "", 0x1f}, @ext={{}, @device_a, 0x8001, @broadcast, 0x14}, @ext={{}, @broadcast, 0xfff, @broadcast, 0x37}, @not_ext={{}, @device_b, 0x0, "", 0x2a}, @ext={{}, @device_a, 0x5, @device_a, 0x3}, @ext={{}, @device_b, 0x7fff, @device_b, 0x3}, @ext={{}, @broadcast, 0x80000001, @broadcast, 0xd}]}}, @mic={0x8c, 0x10, {0xb8f, "e2dc148d508b", @short="cb3a282621c601a7"}}, @measure_req={0x26, 0xf5, {0xf1, 0x0, 0x1, "91560a847429988e8d45a9c2ba27763c3f48c91918afa6fa0fd080b2b095974e5d79805e414ddce17efddd9a44da4059ec727e042d73f65e9f64da215ba02538be989ab22ab90fc59cbcfe7218ef57f0399ace1944eca9f7625fb5c0370c5805755299b2ab3c73690b9cb58ddcccdcb9ce4d9ae8d6ede5f719b164ea081df090ed79ab740bdcaec7329eab7727e82d21a503e69b06bb7503d36a5a10407d1d45771ca499430daeeeea2ab42f1c7bfe3e85cdfa41fd4f7bf2083fd0fc578b41be8a3d725d2d67be1cf0b9b114d0aed13a24efb92e3766ef234c5ce42b82a2bea7f6b013e833979e730cd38a9466c41580fb2e"}}, @chsw_timing={0x68, 0x4, {0xfffd, 0xa0}}, @ibss={0x6, 0x2, 0x1}, @preq={0x82, 0x4c, @ext={{0x0, 0x1}, 0x4, 0x9, 0x8, @broadcast, 0x1, @device_a, 0xbb, 0x7, 0x4, [{{0x1, 0x0, 0x1}, @broadcast, 0x4}, {{0x1, 0x0, 0x1}, @device_a, 0x1}, {{}, @device_b, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x200}]}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x101}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000022) pipe(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TESTMODE(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x40040) 23:35:54 executing program 2: setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x11, 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x400) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x188, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffff89}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x35}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x351}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x531}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x9, 0x7, 0xf716, 0x7fffffff, 0x3ff, 0x0, 0x3, 0xffffffff, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xc4, 0xf3, 0x1]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5de}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3e0}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x22e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb2}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x20}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x5, 0x4, 0x1, 0xa6, 0x8, 0xcd]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}]}]}, 0x188}}, 0x4800) syz_genetlink_get_family_id$smc(&(0x7f0000000300), r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xdc, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x80, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x90}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x25}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xba4f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4cc1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffff61d}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24004801}, 0x40001) openat$cgroup_type(r0, &(0x7f00000005c0), 0x2, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@key_params=[@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f6b4ad81e1"}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x40000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x0, 0x5}], "47e6b586b61ab890"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x46, 0x3}, {0x3f, 0x5}, {0x6}], "3400a00d86067ee4"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x2, 0x5}, {0xc6}, {0x80, 0x1}, {0x93, 0x4}, {0x3, 0x6}, {0x8f, 0x6}], "a14d16475f3e88d9"}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000085) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1f}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r5, 0x100, 0x70bd2b, 0x8, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x40844) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xe4, r6, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4040}, 0x10043) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x43}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000821}, 0x1) 23:35:54 executing program 1: setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="f03fdb1e708c3cedc0c5083cfc1a576e", 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x4, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10022b0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r1, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x64}}}}, [@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "7dc3d7c2cddab650e14807d088ee45"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8c8eb6d3e4c07856b48f112c8b"}]}, 0x6c}}, 0x20000014) r2 = socket(0x25, 0x80000, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @sack_perm, @window={0x3, 0x0, 0x8}, @window={0x3, 0x0, 0x800}, @timestamp, @mss={0x2, 0x7}, @sack_perm, @window={0x3, 0x8, 0x5}, @timestamp, @window={0x3, 0x24, 0xff7d}], 0xa) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0x4}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20008080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20208050}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x27}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1000, 0x6d}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4d6b8e2efc253157}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400c084}, 0x44040) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x194, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x159, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @random_vendor={0xdd, 0x89, "f1d671d65f8a40cb70fc4162fe7b0433ca1e213503e97565eaed574146d67321047239670a56c5c4a2bdccdf4b3a3242af8053ba09c2eb50149801d3b8477cb10bd1d4267fe6b88fdbab49bd52852eee1cec975a3982addb5b74fa64997ec79dc4394fbbd700829ba605a05a2763013da645a176efcd743fd9a72570fc590046a14e6b74cdad7cd91f"}, @gcr_ga={0xbd, 0x6}, @tim={0x5, 0x84, {0x1, 0x58, 0x6, "0204ac3a4071adf638dd650ecb86443ba80d32f8b8aa118568ab8c5631e46cce4f745166897dde3e8eaf99ab072c0fb848ed8a34ab1501702a61af3ddede582661c903ca31c40abe2f60394f4f16f9b0a4461812471320322504531dd50632ec652a9bc507627d6d5928c81f6ec79e77bf8cab96373e48f3085f641addddf54313"}}, @mesh_chsw={0x76, 0x6, {0x1, 0x76, 0x2e, 0x5}}, @ibss={0x6, 0x2, 0x1}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @supported_rates={0x1, 0x6, [{0x6c, 0x1}, {0x1, 0x1}, {0x1}, {0xc, 0x1}, {0x36}, {0x16, 0x1}]}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x46}]}, 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x24044000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x104, r3, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x18}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x8, 0x4}, {0x7f, 0x2}, {0x5, 0x7}, {0x6}, {0x5, 0x6}, {0x6, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0xfe}, {0x1, 0x1}, {0x6, 0x7}], "17ccc75f1407c4b6"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x7, 0x6}, {0x95, 0x7}, {0x40, 0x3}, {0x4, 0x3}, {0x88, 0x7}, {0x7, 0x1}, {0x8e, 0x2}, {0x20, 0x3}, {0x4, 0x5}, {0x5, 0x5}, {0x8}, {0xff, 0x7}, {0x9, 0x5}, {0x10, 0x3}], "1274bb8810cbf9f5"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3, 0x4}, {0x3, 0x2}, {0x9, 0x4}, {0x9}, {0x80, 0x1}], "a194183e9ed6cc10"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x4, 0x7}, {0xdc, 0x3}, {0x5, 0x1}, {0x5, 0x2}, {0x1c, 0x3}, {0x5, 0x3}, {0x80, 0x4}, {0x81, 0x3}, {0x2}, {}, {0x4, 0x2}, {0x16, 0x3}, {0x71, 0x7}, {0x3f}, {0xc0, 0x5}], "f89d9d1861e09d34"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x3}, {0x5, 0x2}, {0x8, 0x3}, {0x1, 0x1}, {0x1c, 0x1}, {0x80}, {0x3f, 0x6}, {0x8, 0x2}], "a3f1390f65ad5cd1"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0xa9, 0x4}, {0x2, 0x4}, {0x5, 0x1}, {0xb4, 0x2}, {0x7f, 0x5}, {0x3, 0x3}, {0x20, 0x2}, {0xff, 0x7}, {0x9, 0x4}, {0x20, 0x7}, {0x9, 0x6}], "7c0fa889b3ebccd3"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x5, 0x3}, {0x85, 0x3}, {0x3f, 0x2}, {0x7, 0x6}], "2a119bfde793ff69"}}]}, 0x104}}, 0x4000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000e00)={0x44c, r7, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb637}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xecde}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7402}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x643}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x342f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde5}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff5b84}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe8d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a6e5238}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x879}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xad, 0x3, "26fb82ed68c8676e16408824e56802c9b5b565a505e364be1b6d1ff2a353f5061e4f35c29b0745d35cfe457d3a50a8ade16cd72dba9b521c15e24554e1a31d92b78885794647cbef2b4fadda0687ad124086c0a897c60be83dec3e2144e4000827df4d3b78ff70fa2063836d88e3e9fe2c6dc15482e13a30462b08d2f8d6605875a12536d211a9dbf23c1aa1eb636f8202ec78fdb22e92bef4b759729c9963d558019469cb9dc55036"}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x40}, 0x4048001) 23:35:54 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x4, 0xfffffffffffffffb, 0x6, 0x8, 0x1ff, 0x9, 0x26, 0x1}, &(0x7f0000000040)={0xfff, 0x3ff, 0x820, 0xcd, 0x1f, 0x9, 0x7fff, 0xc6ed}, &(0x7f0000000080)={0x6, 0x2, 0x1f, 0x3ff, 0x9, 0xfc97, 0x80000001, 0x101}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x8]}, 0x8}) pselect6(0x40, &(0x7f00000001c0)={0x5, 0xffff, 0x100000001, 0x1, 0x7dc, 0x4, 0x1, 0x2}, &(0x7f0000000200)={0x35, 0x80, 0x20, 0x0, 0x100000, 0x0, 0x6, 0x4}, &(0x7f0000000240)={0x10001, 0x11a, 0x0, 0xea7f, 0x6, 0x0, 0x1000000000000000, 0xfffffffffffffff7}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x3]}, 0x8}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000340)={0x3, 0x800, 0x8, 0x1ff, 0x8001, 0x3f, 0x8, 0xffffffff}, &(0x7f0000000380)={0x0, 0x200, 0x7fffffff, 0x7, 0x4, 0x1, 0x7, 0x6}, &(0x7f00000003c0)={0x2, 0xffffffff, 0x3, 0x5d76ee05, 0x5671, 0x5, 0xec4, 0x100000001}, &(0x7f0000000440)={r2, r3+60000000}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x5]}, 0x8}) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000500)={0x4, 0xb90, 0x1, 0x10000, 0x5, 0x6, 0x10000}, &(0x7f0000000540)={0x0, 0x2, 0x1f, 0x38, 0x1f, 0x5, 0x2, 0x6}, &(0x7f0000000580)={0x5, 0x9576, 0x10000, 0x9, 0xfc53, 0xc77, 0x100000000, 0x1}, &(0x7f0000000600)={r4, r5+60000000}, &(0x7f0000000680)={&(0x7f0000000640)={[0x7]}, 0x8}) r6 = getpid() sched_rr_get_interval(r6, &(0x7f00000006c0)) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x17}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10040000}, 0x80) write$eventfd(0xffffffffffffffff, &(0x7f0000000900)=0x6, 0x8) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000940)={0x100, 0x7, 0xdbb, 0xbc7, 0x6, 0x8, 0x0, 0xaf6}, &(0x7f0000000980)={0x81, 0x7fff, 0x1, 0x80, 0x3, 0x4, 0x5, 0x3}, &(0x7f00000009c0)={0x2, 0x3ff, 0x5, 0xfffffffffffffff9, 0x8, 0x0, 0xccb5, 0x40}, &(0x7f0000000a40)={r7, r8+10000000}, &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x80000001]}, 0x8}) pselect6(0x40, &(0x7f0000000b00)={0x100000001, 0xa305, 0x4, 0x80000001, 0x6, 0x2, 0x13a5c00000000, 0x6}, &(0x7f0000000b40)={0x7ff, 0x6, 0x1c3f, 0x3, 0xae35, 0x5, 0x4, 0x5}, &(0x7f0000000b80)={0xfe27, 0x101, 0x4, 0xffffffff, 0x9, 0x88b, 0x9, 0x100}, &(0x7f0000000bc0)={0x77359400}, &(0x7f0000000c40)={&(0x7f0000000c00)={[0x8]}, 0x8}) pipe(&(0x7f0000000c80)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000e80)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/245, 0xf5, 0x0, &(0x7f0000000dc0)=""/158, 0x9e}, &(0x7f0000000ec0)=0x40) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xa4, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffa}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2be5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2400c845}, 0x20000010) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000001080)) pselect6(0x40, &(0x7f00000010c0)={0x7, 0x7fff, 0x80000000000000, 0x26a, 0xffffffffffff8001, 0x5, 0x800, 0x200}, &(0x7f0000001100)={0x99f, 0x1, 0xbdf, 0xd9a5, 0x5, 0x80, 0x7, 0x8}, &(0x7f0000001140)={0x7, 0x0, 0x7, 0x80000000, 0x4, 0x5, 0x0, 0x6}, &(0x7f0000001180)={0x77359400}, &(0x7f0000001200)={&(0x7f00000011c0)={[0x81]}, 0x8}) 23:35:54 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4040090) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x14}}}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4020) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x400203, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xdf8a, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$CDROMPLAYBLK(r3, 0x5317, &(0x7f0000000480)={0x0, 0x8}) ioctl$CDROMPLAYBLK(r2, 0x5317, &(0x7f00000004c0)={0xc00a, 0x1}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000001b) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r5, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4c68}]}, 0x1c}}, 0x8000) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x200480e0}, 0x8801) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0xf021d55951b0e35b}, 0xc, &(0x7f0000000e80)={&(0x7f0000000a80)={0x3dc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ef}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "b795ef486e6594282e5a5f1f606c0f5cc9707ece"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "b9c2a4b26d762c8446388e3df169d65bd75b337855"}}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdab}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x677}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x265d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8cb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xea21}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffbb}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc07}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5295}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x20048001}, 0x840) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r1, 0x164c577a3bf85040, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x18, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x20040044) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, 0x0, 0x400, 0x9, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x800) [ 86.116975] audit: type=1400 audit(1737761754.504:7): avc: denied { execmem } for pid=279 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:35:54 executing program 5: r0 = syz_usb_connect(0x5, 0x146, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xba, 0x9f, 0xc1, 0x20, 0x2040, 0x7281, 0xc804, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x134, 0x1, 0x5, 0x2, 0x10, 0xf7, [{{0x9, 0x4, 0x3b, 0x5, 0x2, 0x1, 0x1, 0x61, 0x6, [@generic={0x102, 0xd, "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"}], [{{0x9, 0x5, 0x80, 0x1, 0x200, 0x3, 0x6, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0xfff8}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x7, 0x3f, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x1}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x1, 0x95, 0x1, 0xff, 0x80}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x1, [{0x77, &(0x7f0000000200)=@string={0x77, 0x3, "75fd2430ba0bfbe276baa3eed8d559262f64be5d77732926ea260f965e84256aa7352245d0433b7d522fadb4932154f108c68ff344a7034c848bc760f64972f3f01b9a280b22f9d5f5b8aca2414ddd332421ec3eeb20c598f6e5df543e0e3a5f9e1d731e75fe0509830775c5e88c204a6ffc0cb671"}}]}) syz_usb_disconnect(r0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000300)={0x18, 0x3a, 0x10, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0xfffffeff}]}, 0x18}], 0x1, &(0x7f0000000380), 0x0, 0x4000}, 0x80) r1 = syz_usb_connect(0x1, 0x11a, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x5d, 0x34, 0xa5, 0x20, 0x19d2, 0x1280, 0xd18b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x1, 0x3, 0xdd, 0x40, 0x2, [{{0x9, 0x4, 0x28, 0x4, 0x1, 0xff, 0xff, 0xff, 0x2, [@generic={0xa3, 0x23, "20fe9efcd163adb2aff3bd2a1a260777e8b4f2cd296c066509e61169aaeb5739f2d31f82016da462b58abe68ee8b2ad1596f4a6d62195be532d8f053534ade72898bb070332308ffb8f1e5c39a46ca973908a34dbf16dd5c8b69c1a540851bfd7f13a263ab8d3d81cf8b2772c1e7eabe1b58bc758fde2c22048940d2ec7063c146b3277aab82b85f3972e2069fc76b9ff27c4b55c3e5d2bf3a7b10a4029f4d625d"}, @generic={0x43, 0x23, "66d023054d96682d374cbf6aaa70d94398ef69636a10584014d09ac2447c492157284e8274ace9c40e15384bc2ebfce65344324736c5d0b0dedce952b3611561ca"}], [{{0x9, 0x5, 0xf, 0x0, 0x400, 0x0, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xbd, 0x200}]}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x250, 0x7, 0x1f, 0x6, 0x10, 0x5}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x80a}}, {0xcb, &(0x7f0000000600)=@string={0xcb, 0x3, "12e0d51218152858a3410b632f8e74cfac3be0b1d369db63cbec41ba91f4935941d0a2247d303950db2f661ea44100573e226c767d30ed86986ee440881c325824f9ac16a507278b0656c0b715423ba23a11cd75dbafc275bec2606247ee7f2df33586d0b0401f1103085d457fc894340e5d2033e4f778b740b6ce900e941253d760de27e68754666e3323b6196edb621d520575cd3c1ea3fca2fa4d0b98c3fa04ee071d71f84db4c3b4a3527b015966888c589e16f18ebf9a53c0a9cce01135caf8241a64cd7649f7"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x440a}}, {0xbb, &(0x7f0000000740)=@string={0xbb, 0x3, "7f78f4dd18f0651ec60e67168540582e8299803c8d1f98681e85c920ea0b7cdcac588dc4cbaa78f817931cda44ccdf17ff1bf5c6b19b981c813f8ad889c2d3923c333b2fcf8bf5fe3058fb7a35b622f21b7e55329dbebf613c926137bbf75b608c6bbc6421359eb18c075b5b3d71fb5cc9d07bccf922fa95b0bb403a58dceb92da3f4df123405f6305d55918ffc67a8e1b1b35de733dd602c6f37bbdafc3c1ad4371280ad01f611aba0fa6c15612e76005d067db798769f50a"}}]}) syz_usb_ep_read(r1, 0x6, 0x2e, &(0x7f0000000880)=""/46) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x13c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) syz_usb_ep_write(r0, 0x1, 0x7f, &(0x7f0000000b40)="4cb05656717572380a392313b083412f6aaa5da917d9d9cb13c6b734047c3d07b599a1b9acb18711f66e32ce34fbcd191a9c3866a661b8a2d7958eca1c4ca28e8eed6344de6dcc91cb3b18281522f9e306c88ca171024e46a899013097dee4fda77a393d05b2f513690e2982b5936e1a50530c3629765f8d21839c204cfbad") syz_usb_control_io(r0, &(0x7f0000000f40)={0x2c, &(0x7f0000000bc0)={0x20, 0xc, 0xf7, {0xf7, 0xb, "edf4dabc77d393cd4d291cbf8a1535fa589008b4e9b273a99be0e338d7e8ca0db617a356df1f53350dc0502344f277ad52776a17b1f202b715463595752a1e9c0b5f80553a7de7c5fabab9d70568821bcf02a07d0827c876416a59694e94f07a5f6771cc0ec005daa75caa23bddb76303c22950dc21e41bb237d521207c57d53c6e62c91f129ca541d9b6f043e0edc9d9fdc067b0c0c45f383ecd2898daabe9732db353a57163d7529b732779ff7eaefdc305681de178532e4b1c0a9bf483b15e862da75ce2e26e9a89eb4925be2781c100fd5800c7551dfb9eabdd36fc3bd41dab9dfa40e5e40ef6f00f650a10eba192a23c78485"}}, &(0x7f0000000cc0)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "37b3a37140e28ffd1b53b96fae52e6806ebbb8690c66faaecc4418c150feba67cdb952f95f7d1e7697e09bff3fff32fd9e1498a459114c8658d85271e16e7d0427c7caacaf5340a5929805b59a055005796438041c984111b361cd8876de44fb846ecf6c5fdc678c90f2644706453844a490a754eface0454b34567351f831a8a608eaafedb34277e7f5353ae697cd7894192bcd78c4d354a61b5e9aeea79ab7c9d4c16662218e592480001225a57cccd94cbff86364b1ec02953a6055bea7c50b18e2151d40d1d920"}}, &(0x7f0000000dc0)={0x0, 0xf, 0xc6, {0x5, 0xf, 0xc6, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfa, 0x4, 0x3, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x1, 0x2}, @generic={0x9d, 0x10, 0x3, "d197f2ce91317b92103ed1adca154468db689258af0d0f2cbbb8520f93b0fcdcf6a64ea634a00bbf05ef72e62d9f1a952f6e5a4f850ad43e0f04e632d02378244d1e994f7797265bf253f7065ebb805730ed7e38b881a2910ceb0a8c1cce2b346156c30761ba0f830567b76d6f417aa4d8f1a1261c7d7c787161a6c3849c2a54a9a95eb981cbebfb625d402aad8e99e838f2fcdd020e0a44496a"}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x7ffa685, 0xf, 0x5}]}}, &(0x7f0000000ec0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x8, 0x9, 0x8e, "e7e2d2d7", "d2a70fdc"}}, &(0x7f0000000f00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x60, 0x81, 0x0, 0x81, 0x9, 0x4}}}, &(0x7f0000001440)={0x84, &(0x7f0000000f80)={0x20, 0x30, 0xef, "f2a38c474291aa27037ca38f3af0c3ce2627338840e4728fc410310d4168f2a5d7c862e413bc722dd6603864080fce7d46c92cc5d1ad78d51fdd5a46d6abe3f8282f0af955a86d888dc167862b3a989bd4e2f522b174f00682d4fea674390b9e73e5b95860e6ec8460102ad51a0d08e282852e0450dc79e4d8239fc4301620d282ae2c1c5dee9b35182762e0489597abb59ee5bd45944e833d42025766470e60e1ac96d7b578690f24a5e4e6c15e3b9c20eabfb3213b74af0ec0acb566dc7bd05d530916571085a8386ba4c15ad478e10b88d14b5c1c1cb96e9e8855ebd3dd555d5cd50167121005974043ba9719a0"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001100)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000001140)={0x20, 0x0, 0x8, {0x140, 0x20, [0xffff]}}, &(0x7f0000001180)={0x40, 0x7, 0x2, 0x1000}, &(0x7f00000011c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000001200)={0x40, 0xb, 0x2, "6aea"}, &(0x7f0000001240)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000001280)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000012c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, &(0x7f0000001300)={0x40, 0x19, 0x2, "b7a4"}, &(0x7f0000001340)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000001380)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000013c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001400)={0x40, 0x21, 0x1, 0x6a}}) syz_usb_ep_read(r1, 0x5, 0x82, &(0x7f0000001500)=""/130) syz_usb_ep_write(r1, 0x74, 0x89, &(0x7f00000015c0)="0ce73f28a9a9996f2525b8b57e5094813bb9cf679ef906a488eba2bbfca13e9dc43b0176fb84f9f853f96a6ec86402e9dabfd32c069ef54563a2548d59002dc513655035dd2a31df4edc7620d8a541abba2e06f2ed6fac5637d521363660e444540eb54ba1965f2f1c47d980b07fe1015871eff994d288d55d2201ca908b725f1b6ea380ce3845944d") r4 = getuid() r5 = getgid() r6 = eventfd2(0x4, 0x80800) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001700), 0x720141, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r9 = memfd_secret(0x80000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001680)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc, &(0x7f00000016c0), 0x0, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r5}}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, r9]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0xf8, 0x20000840}, 0x8040) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000001ac0)={&(0x7f00000018c0), 0xc, &(0x7f0000001a80)={&(0x7f0000001980)={0xec, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x48088}, 0x4040014) 23:35:54 executing program 6: ioctl$CDROM_DEBUG(0xffffffffffffffff, 0x5330, 0x0) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x15c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x98, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5d0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xbf3d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff9}]}, {0x4}]}, @NL80211_ATTR_REG_RULES={0xac, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xf43}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x77}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1200000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffe}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff9}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x353}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x11}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}]}]}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x40800) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000000280)={0x768}) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x52}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xda8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x24004020}, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$CDROM_NEXT_WRITABLE(r3, 0x5394, &(0x7f0000000640)) ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000680)={0x0, 0x5, 0x81, 0x7, 0x8, 0x1}) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CDROMPAUSE(r4, 0x5301) ioctl$CDROMSUBCHNL(r5, 0x530b, &(0x7f0000000700)={0x2, 0x7, 0x6, 0xf, 0x80, 0x4, @msf={0xa9, 0x10, 0x6}, @msf={0x76, 0x1, 0x59}}) ioctl$CDROM_DEBUG(r4, 0x5330, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "04096484deae03d5636e14627b"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041041}, 0x15) ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f00000008c0)) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000450) 23:35:54 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x88240, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x20}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x8, 0x2}], "b8f4920e04ef8ced"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffff001, 0x6e}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x22048800) r4 = memfd_secret(0x80000) ioctl$CDROMPLAYMSF(r4, 0x5303, &(0x7f0000000440)={0x9, 0x1, 0x9, 0x0, 0x6, 0x4}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x185684, 0x0) ioctl$CDROMPLAYMSF(r5, 0x5303, &(0x7f00000004c0)={0xaa, 0x0, 0x6, 0x80, 0x11, 0x7}) ioctl$CDROMSUBCHNL(r4, 0x530b, &(0x7f0000000500)={0x0, 0x2, 0x3, 0x4, 0x7f, 0x81, @lba=0x8, @msf={0x61, 0x8a}}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r2, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x36}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6}]}, 0x40}}, 0x4040010) r6 = syz_open_dev$vcsu(&(0x7f0000000680), 0x1, 0x101200) syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r6) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "03a5b0e176287d542a8a3aac56"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_SSID={0x8, 0x34, @random="3e5b4dcd"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8872af922e3d"}, @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cfe0f5a0c8"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "836bbe49bb810a85521da1a5ab"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x80) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x1bc, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "45c0ed25e66eea7ad4717cd5bd2c677a6879b99d5b1e35a8a51352da21a0788b2dace2d7f0725aedf09026069fb260d9d87eda1a9ec1858ca9a98299f7c3808f4a69447e8847d25359c2f920ac8079b304a5282539e08758338761c0978d789ac9db852258a733502f3ef636f240324f21387e87e78720f1b3b0ae9793dc50c35d66cb51de2177fe0bb907d0be0891bc947ce04eda4d49298a722e12ee7e2714c7991060195b38a103e1fca288103120f75e622509eb4d11e5ad05432a12abdc85f1c7335cbe267fc499d5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x72d}, @TIPC_NLA_NODE_ID={0x6d, 0x3, "a5760a046e624e71c6c92436f2a028f9d3f06ae5608f221e8f4fadf715609570a019f57e85acd43e607b08c85f0d504f0af88f1ab986242183ce500467f4602eaff8aeddc7a55a37723a3035d83c36eb97b3ce5f8b667e97525fe2a50a2ab2a166366e1fd200ed214e"}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8000}, 0x8044) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r5) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, r2, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x64}, 0x1, 0x0, 0x0, 0x40044}, 0x20008014) [ 87.802702] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.806349] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.809550] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.812939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.819425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.821886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.824439] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.832626] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.836677] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.838552] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.842922] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.845702] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.879833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.882254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.887561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.891701] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.901578] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.903358] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.909801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.910574] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.914342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.916082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.916617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.921597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.929507] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.931308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.933354] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.933970] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.935431] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.939052] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.023337] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.027525] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.030091] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.033715] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.035554] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.039694] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.043819] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.050121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.054946] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.057967] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.059969] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.064358] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.066505] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.071711] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.073457] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.081000] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.081019] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.087799] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.877559] Bluetooth: hci1: command tx timeout [ 89.877570] Bluetooth: hci0: command tx timeout [ 90.004533] Bluetooth: hci3: command tx timeout [ 90.004592] Bluetooth: hci2: command tx timeout [ 90.005568] Bluetooth: hci4: command tx timeout [ 90.132345] Bluetooth: hci7: command tx timeout [ 90.132365] Bluetooth: hci5: command tx timeout [ 90.196403] Bluetooth: hci6: command tx timeout [ 91.924831] Bluetooth: hci1: command tx timeout [ 91.925214] Bluetooth: hci0: command tx timeout [ 92.052345] Bluetooth: hci2: command tx timeout [ 92.052533] Bluetooth: hci3: command tx timeout [ 92.053519] Bluetooth: hci4: command tx timeout [ 92.180494] Bluetooth: hci7: command tx timeout [ 92.181406] Bluetooth: hci5: command tx timeout [ 92.246203] Bluetooth: hci6: command tx timeout [ 93.973031] Bluetooth: hci1: command tx timeout [ 93.973194] Bluetooth: hci0: command tx timeout [ 94.100366] Bluetooth: hci3: command tx timeout [ 94.101261] Bluetooth: hci4: command tx timeout [ 94.101330] Bluetooth: hci2: command tx timeout [ 94.228285] Bluetooth: hci7: command tx timeout [ 94.229795] Bluetooth: hci5: command tx timeout [ 94.292636] Bluetooth: hci6: command tx timeout [ 96.020283] Bluetooth: hci1: command tx timeout [ 96.022178] Bluetooth: hci0: command tx timeout [ 96.148284] Bluetooth: hci4: command tx timeout [ 96.148746] Bluetooth: hci2: command tx timeout [ 96.149703] Bluetooth: hci3: command tx timeout [ 96.276246] Bluetooth: hci5: command tx timeout [ 96.276316] Bluetooth: hci7: command tx timeout [ 96.340400] Bluetooth: hci6: command tx timeout [ 149.745683] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.748518] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.751661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.757016] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.761921] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.765593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.798765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.807967] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.814343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.815039] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.815879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.817799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.820252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.820926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.824717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.825698] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.827410] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.828284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.829565] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.831210] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.835865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.840632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.841743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.843974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.845378] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.847229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.847996] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.850485] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.851270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.856230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.914929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.921681] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.933199] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.944279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.945260] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.964372] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.964560] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.968347] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.972075] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.978588] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.987576] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.991891] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.995746] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.999520] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.016531] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.040736] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.054808] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.064389] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.829231] Bluetooth: hci0: command tx timeout [ 151.893473] Bluetooth: hci2: command tx timeout [ 151.956538] Bluetooth: hci3: command tx timeout [ 151.956571] Bluetooth: hci4: command tx timeout [ 152.021315] Bluetooth: hci1: command tx timeout [ 152.085208] Bluetooth: hci6: command tx timeout [ 152.085259] Bluetooth: hci5: command tx timeout [ 152.148295] Bluetooth: hci7: command tx timeout [ 153.876183] Bluetooth: hci0: command tx timeout [ 153.940415] Bluetooth: hci2: command tx timeout [ 154.005057] Bluetooth: hci4: command tx timeout [ 154.005078] Bluetooth: hci3: command tx timeout [ 154.069464] Bluetooth: hci1: command tx timeout [ 154.132198] Bluetooth: hci5: command tx timeout [ 154.132256] Bluetooth: hci6: command tx timeout [ 154.196226] Bluetooth: hci7: command tx timeout [ 155.924373] Bluetooth: hci0: command tx timeout [ 155.988206] Bluetooth: hci2: command tx timeout [ 156.052306] Bluetooth: hci4: command tx timeout [ 156.052987] Bluetooth: hci3: command tx timeout [ 156.116179] Bluetooth: hci1: command tx timeout [ 156.180358] Bluetooth: hci5: command tx timeout [ 156.181330] Bluetooth: hci6: command tx timeout [ 156.244222] Bluetooth: hci7: command tx timeout [ 157.972308] Bluetooth: hci0: command tx timeout [ 158.037213] Bluetooth: hci2: command tx timeout [ 158.100283] Bluetooth: hci3: command tx timeout [ 158.100867] Bluetooth: hci4: command tx timeout [ 158.164328] Bluetooth: hci1: command tx timeout [ 158.228224] Bluetooth: hci6: command tx timeout [ 158.228246] Bluetooth: hci5: command tx timeout [ 158.292595] Bluetooth: hci7: command tx timeout [ 212.135193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.140916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.145784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.150815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.156589] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.158781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.259600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.261364] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.263421] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.269820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.271594] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.273413] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.391363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.396555] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.399414] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.402862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.404909] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.406828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.492084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.523311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.525466] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.527246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.528793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.529762] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.531120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.537388] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.538043] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.540447] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.541634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.543900] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.546809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.566199] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.578677] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.579774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.595330] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.634651] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.636501] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.637628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.640831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.642510] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.643583] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.659363] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.692531] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.710446] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.743366] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.757514] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.792778] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.816801] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.229428] Bluetooth: hci0: command tx timeout [ 214.293164] Bluetooth: hci1: command tx timeout [ 214.485368] Bluetooth: hci2: command tx timeout [ 214.613113] Bluetooth: hci5: command tx timeout [ 214.677175] Bluetooth: hci6: command tx timeout [ 214.740288] Bluetooth: hci4: command tx timeout [ 214.740918] Bluetooth: hci3: command tx timeout [ 214.932230] Bluetooth: hci7: command tx timeout [ 216.279387] Bluetooth: hci0: command tx timeout [ 216.341366] Bluetooth: hci1: command tx timeout [ 216.533412] Bluetooth: hci2: command tx timeout [ 216.662207] Bluetooth: hci5: command tx timeout [ 216.725209] Bluetooth: hci6: command tx timeout [ 216.791134] Bluetooth: hci4: command tx timeout [ 216.791585] Bluetooth: hci3: command tx timeout [ 216.982159] Bluetooth: hci7: command tx timeout [ 218.326153] Bluetooth: hci0: command tx timeout [ 218.388299] Bluetooth: hci1: command tx timeout [ 218.580272] Bluetooth: hci2: command tx timeout [ 218.711132] Bluetooth: hci5: command tx timeout [ 218.772234] Bluetooth: hci6: command tx timeout [ 218.837179] Bluetooth: hci3: command tx timeout [ 218.837653] Bluetooth: hci4: command tx timeout [ 219.028837] Bluetooth: hci7: command tx timeout [ 220.372160] Bluetooth: hci0: command tx timeout [ 220.436196] Bluetooth: hci1: command tx timeout [ 220.628179] Bluetooth: hci2: command tx timeout [ 220.756395] Bluetooth: hci5: command tx timeout [ 220.821162] Bluetooth: hci6: command tx timeout [ 220.885177] Bluetooth: hci4: command tx timeout [ 220.885655] Bluetooth: hci3: command tx timeout [ 221.077181] Bluetooth: hci7: command tx timeout [ 271.555492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.556405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.643784] [ 272.643997] ====================================================== [ 272.644498] WARNING: possible circular locking dependency detected [ 272.645041] 6.13.0-next-20250124 #1 Not tainted [ 272.645422] ------------------------------------------------------ [ 272.645923] kworker/u8:0/11 is trying to acquire lock: [ 272.647266] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 272.649103] [ 272.649103] but task is already holding lock: [ 272.650100] ffff888035ac8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 272.652483] [ 272.652483] which lock already depends on the new lock. [ 272.652483] [ 272.654019] [ 272.654019] the existing dependency chain (in reverse order) is: [ 272.655381] [ 272.655381] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 272.656754] __mutex_lock+0x13d/0xb50 [ 272.657155] wiphy_register+0x1b2e/0x25d0 [ 272.657577] ieee80211_register_hw+0x23a4/0x3d60 [ 272.658031] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 272.658515] init_mac80211_hwsim+0x389/0x870 [ 272.658956] do_one_initcall+0xf9/0x640 [ 272.659372] kernel_init_freeable+0x53d/0x7a0 [ 272.659825] kernel_init+0x1e/0x2d0 [ 272.660191] ret_from_fork+0x48/0x80 [ 272.660558] ret_from_fork_asm+0x1a/0x30 [ 272.660988] [ 272.660988] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 272.661514] __lock_acquire+0x29fd/0x4580 [ 272.661905] lock_acquire+0x19b/0x520 [ 272.662309] __mutex_lock+0x13d/0xb50 [ 272.662728] unregister_netdevice_many_notify+0x1612/0x1c80 [ 272.663320] unregister_netdevice_queue+0x224/0x2e0 [ 272.663854] _cfg80211_unregister_wdev+0x57b/0x700 [ 272.664445] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 272.664953] ieee80211_unregister_hw+0x55/0x3a0 [ 272.665422] hwsim_exit_net+0x3a0/0x730 [ 272.665837] ops_exit_list+0xb3/0x180 [ 272.666232] cleanup_net+0x546/0xad0 [ 272.666639] process_one_work+0x8ee/0x1a10 [ 272.667142] worker_thread+0x674/0xe70 [ 272.667570] kthread+0x3ab/0x720 [ 272.667985] ret_from_fork+0x48/0x80 [ 272.668323] ret_from_fork_asm+0x1a/0x30 [ 272.668710] [ 272.668710] other info that might help us debug this: [ 272.668710] [ 272.669331] Possible unsafe locking scenario: [ 272.669331] [ 272.669818] CPU0 CPU1 [ 272.670186] ---- ---- [ 272.670547] lock(&rdev->wiphy.mtx); [ 272.670881] lock(rtnl_mutex); [ 272.671366] lock(&rdev->wiphy.mtx); [ 272.671881] lock(rtnl_mutex); [ 272.672171] [ 272.672171] *** DEADLOCK *** [ 272.672171] [ 272.672640] 4 locks held by kworker/u8:0/11: [ 272.673016] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 272.673868] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 272.674658] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 272.675363] #3: ffff888035ac8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 272.676210] [ 272.676210] stack backtrace: [ 272.676571] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1 [ 272.676608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 272.676630] Workqueue: netns cleanup_net [ 272.676671] Call Trace: [ 272.676682] [ 272.676696] dump_stack_lvl+0xca/0x120 [ 272.676754] print_circular_bug+0x47b/0x750 [ 272.676810] check_noncircular+0x2e9/0x3c0 [ 272.676852] ? srso_return_thunk+0x5/0x5f [ 272.676909] ? __pfx_check_noncircular+0x10/0x10 [ 272.676950] ? hlock_class+0x4e/0x130 [ 272.676981] ? mark_lock+0xac/0xed0 [ 272.677021] ? srso_return_thunk+0x5/0x5f [ 272.677076] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 272.677121] ? lockdep_lock+0xba/0x1b0 [ 272.677179] ? __pfx_lockdep_lock+0x10/0x10 [ 272.677241] __lock_acquire+0x29fd/0x4580 [ 272.677295] ? __pfx___lock_acquire+0x10/0x10 [ 272.677338] ? lock_release+0x20f/0x6f0 [ 272.677382] ? __pfx_lock_release+0x10/0x10 [ 272.677430] lock_acquire+0x19b/0x520 [ 272.677474] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 272.677523] ? __pfx_lock_acquire+0x10/0x10 [ 272.677567] ? srso_return_thunk+0x5/0x5f [ 272.677623] ? lock_release+0x20f/0x6f0 [ 272.677666] ? srso_return_thunk+0x5/0x5f [ 272.677721] ? lock_is_held_type+0x9e/0x120 [ 272.677777] ? srso_return_thunk+0x5/0x5f [ 272.677835] __mutex_lock+0x13d/0xb50 [ 272.677888] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 272.677933] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 272.677979] ? srso_return_thunk+0x5/0x5f [ 272.678034] ? synchronize_rcu_expedited+0x38a/0x420 [ 272.678078] ? __pfx___mutex_lock+0x10/0x10 [ 272.678135] ? __pfx_autoremove_wake_function+0x10/0x10 [ 272.678191] ? srso_return_thunk+0x5/0x5f [ 272.678246] ? kasan_quarantine_put+0x84/0x1e0 [ 272.678307] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 272.678342] ? srso_return_thunk+0x5/0x5f [ 272.678402] unregister_netdevice_many_notify+0x1612/0x1c80 [ 272.678448] ? __virt_addr_valid+0x2e8/0x5d0 [ 272.678500] ? __pfx_lock_release+0x10/0x10 [ 272.678545] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 272.678591] ? find_held_lock+0x2c/0x110 [ 272.678649] ? srso_return_thunk+0x5/0x5f [ 272.678706] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 272.678767] ? srso_return_thunk+0x5/0x5f [ 272.678822] ? lock_release+0x20f/0x6f0 [ 272.678866] ? __pfx_lock_release+0x10/0x10 [ 272.678909] ? srso_return_thunk+0x5/0x5f [ 272.678964] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 272.679012] ? srso_return_thunk+0x5/0x5f [ 272.679072] unregister_netdevice_queue+0x224/0x2e0 [ 272.679116] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 272.679160] ? up_write+0x195/0x520 [ 272.679215] _cfg80211_unregister_wdev+0x57b/0x700 [ 272.679267] ? srso_return_thunk+0x5/0x5f [ 272.679326] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 272.679365] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 272.679404] ? srso_return_thunk+0x5/0x5f [ 272.679459] ? srso_return_thunk+0x5/0x5f [ 272.679514] ? synchronize_rcu+0x1ff/0x260 [ 272.679556] ieee80211_unregister_hw+0x55/0x3a0 [ 272.679601] hwsim_exit_net+0x3a0/0x730 [ 272.679644] ? __pfx_hwsim_exit_net+0x10/0x10 [ 272.679684] ? srso_return_thunk+0x5/0x5f [ 272.679739] ? netdev_run_todo+0x788/0x1040 [ 272.679789] ? __pfx_hwsim_exit_net+0x10/0x10 [ 272.679832] ops_exit_list+0xb3/0x180 [ 272.679874] cleanup_net+0x546/0xad0 [ 272.679919] ? __pfx_cleanup_net+0x10/0x10 [ 272.679972] process_one_work+0x8ee/0x1a10 [ 272.680038] ? __pfx_lock_acquire+0x10/0x10 [ 272.680083] ? __pfx_process_one_work+0x10/0x10 [ 272.680141] ? srso_return_thunk+0x5/0x5f [ 272.680196] ? move_linked_works+0x172/0x270 [ 272.680241] ? srso_return_thunk+0x5/0x5f [ 272.680296] ? assign_work+0x196/0x240 [ 272.680353] worker_thread+0x674/0xe70 [ 272.680412] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 272.680464] ? __pfx_worker_thread+0x10/0x10 [ 272.680524] kthread+0x3ab/0x720 [ 272.680576] ? __pfx_kthread+0x10/0x10 [ 272.680627] ? srso_return_thunk+0x5/0x5f [ 272.680682] ? finish_task_switch.isra.0+0x206/0x840 [ 272.680734] ? __pfx_kthread+0x10/0x10 [ 272.680795] ret_from_fork+0x48/0x80 [ 272.680826] ? __pfx_kthread+0x10/0x10 [ 272.680879] ret_from_fork_asm+0x1a/0x30 [ 272.680945] [ 274.586989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.588493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.591299] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.594617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.596894] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.600330] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.653549] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.654963] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.656356] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.659507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.661936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.664606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.723091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.724420] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.725611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.729783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.731486] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.733009] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.795630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.800719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.807389] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.818553] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.820996] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.825959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.827623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.830547] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.831320] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.835531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.836385] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.845793] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.850332] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.853372] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.855435] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.857050] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.858505] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.859505] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.861360] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.865002] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.866782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.866811] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.871305] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.874019] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.876189] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.880814] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.883290] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.906637] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.908235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.909025] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.628393] Bluetooth: hci0: command tx timeout [ 276.692175] Bluetooth: hci1: command tx timeout [ 276.757193] Bluetooth: hci2: command tx timeout [ 276.949211] Bluetooth: hci7: command tx timeout [ 276.949691] Bluetooth: hci4: command tx timeout [ 276.950614] Bluetooth: hci6: command tx timeout [ 276.951027] Bluetooth: hci3: command tx timeout [ 276.951498] Bluetooth: hci5: command tx timeout [ 278.676186] Bluetooth: hci0: command tx timeout [ 278.740363] Bluetooth: hci1: command tx timeout [ 278.804200] Bluetooth: hci2: command tx timeout [ 278.998156] Bluetooth: hci3: command tx timeout [ 278.998986] Bluetooth: hci5: command tx timeout [ 278.999952] Bluetooth: hci6: command tx timeout [ 279.001731] Bluetooth: hci4: command tx timeout [ 279.002546] Bluetooth: hci7: command tx timeout [ 280.726097] Bluetooth: hci0: command tx timeout [ 280.788169] Bluetooth: hci1: command tx timeout [ 280.852221] Bluetooth: hci2: command tx timeout [ 281.045143] Bluetooth: hci6: command tx timeout [ 281.046181] Bluetooth: hci3: command tx timeout [ 281.047639] Bluetooth: hci4: command tx timeout [ 281.048590] Bluetooth: hci5: command tx timeout [ 281.049591] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:39:01 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095dec90 R8 =0000000000000000 R9 =ffffed1001d51046 R10=000000000000002d R11=3038383866666666 R12=000000000000002d R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560025660de8 CR3=0000000028e7e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffff00ffff000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005600526c954000005600526c5a60 XMM06=0000000000000000ffffffff00000003 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000002000000000000000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff8880072241e0 RBX=ffff888007228cb8 RCX=ffffffff81429a4a RDX=ffff8880072241d0 RSI=0000000000000001 RDI=ffff8880072241e0 RBP=ffff8880072241e0 RSP=ffff88800f177da0 R8 =0000000000000000 R9 =ffffed1001ddb880 R10=ffff88800eedc407 R11=0000000000000532 R12=ffff888007228bf8 R13=ffff888007228cb8 R14=ffff88800eefb780 R15=0000000000000086 RIP=ffffffff81aeebf0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4d93ec5308 CR3=0000000028e7e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffff00ffff000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005600526a124000005600526e03a0 XMM06=0000560052712e100000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000002000000000000000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000