syzkaller login: [ 59.244860] sshd (230) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:18038' (ECDSA) to the list of known hosts. 2025/01/27 20:13:57 fuzzer started 2025/01/27 20:13:58 dialing manager at localhost:40883 [ 62.036932] cgroup: Unknown subsys name 'net' [ 62.128465] cgroup: Unknown subsys name 'cpuset' [ 62.169552] cgroup: Unknown subsys name 'rlimit' [ 69.062393] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/27 20:14:18 syscalls: 2217 2025/01/27 20:14:18 code coverage: enabled 2025/01/27 20:14:18 comparison tracing: enabled 2025/01/27 20:14:18 extra coverage: enabled 2025/01/27 20:14:18 setuid sandbox: enabled 2025/01/27 20:14:18 namespace sandbox: enabled 2025/01/27 20:14:18 Android sandbox: enabled 2025/01/27 20:14:18 fault injection: enabled 2025/01/27 20:14:18 leak checking: enabled 2025/01/27 20:14:18 net packet injection: enabled 2025/01/27 20:14:18 net device setup: enabled 2025/01/27 20:14:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/27 20:14:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/27 20:14:18 USB emulation: enabled 2025/01/27 20:14:18 hci packet injection: enabled 2025/01/27 20:14:18 wifi device emulation: enabled 2025/01/27 20:14:18 802.15.4 emulation: enabled 2025/01/27 20:14:18 fetching corpus: 50, signal 8485/9926 (executing program) 2025/01/27 20:14:18 fetching corpus: 100, signal 10788/13348 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/14686 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/15969 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/17276 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/18555 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/19835 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/21149 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/22430 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/23723 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/24998 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/26255 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/27541 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/28780 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/30073 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/30219 (executing program) 2025/01/27 20:14:18 fetching corpus: 112, signal 10897/30219 (executing program) 2025/01/27 20:14:21 starting 8 fuzzer processes 20:14:21 executing program 0: ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000040)={0x9, 0x38, [0x9, 0x600, 0x77d, 0x5], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x0, 0x3) r0 = memfd_secret(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5e3c9039}}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x8) mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x8, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0xfffffffd}}, './file0\x00'}) linkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', r3, &(0x7f00000003c0)='./file0\x00', 0x0) accept4$unix(r2, 0x0, &(0x7f0000000400), 0xc0000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x8, 0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000500)) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@known='trusted.overlay.redirect\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000680)) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000880)) symlink(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='./file0\x00') 20:14:21 executing program 2: capget(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x4550, 0x7ff, 0x8, 0xffff, 0x7e, 0x6bed4052}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x9, 0x2, 0x3, 0x8001, 0xb7a, 0x4}) capget(&(0x7f0000000100)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000140)={0x800, 0x4, 0x101, 0x5, 0x4, 0x6}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/135, 0x87}], 0x1, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40) capget(&(0x7f0000000440)={0x19980330, r1}, &(0x7f0000000480)={0x1, 0x0, 0x1, 0x7, 0xffff, 0x101}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000004c0)=0x0) capset(&(0x7f0000000500)={0x20071026, r6}, &(0x7f0000000540)={0xfffffff7, 0x7, 0x8, 0x9, 0x2, 0x8}) capget(&(0x7f0000000580)={0x19980330, r2}, &(0x7f00000005c0)={0x6a03, 0x1f, 0x2, 0x10001, 0xbef4, 0x9}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000600)=0x0) capget(&(0x7f0000000640)={0x20080522, r7}, &(0x7f0000000680)={0xdc, 0xfffffeff, 0x3, 0x1, 0x7, 0x4}) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000006c0)=0x7, &(0x7f0000000700)=0x4) capset(&(0x7f0000000740)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000780)={0x81, 0x7, 0x6, 0x8001, 0x2, 0x2}) r8 = syz_open_procfs$namespace(r2, &(0x7f00000007c0)='ns/mnt\x00') ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r8, 0x942e, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000800), 0x7fffffff, 0x400000) ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82307201, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) capset(&(0x7f0000000a80)={0x20071026, r3}, &(0x7f0000000ac0)={0x9, 0x5c, 0x400, 0x1, 0x4, 0x40}) capset(&(0x7f0000000b00)={0x20080522, r7}, &(0x7f0000000b40)={0x3, 0x6, 0xffff, 0x7, 0x1f, 0x25}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000b80)={0x0, 'vlan0\x00', 0x3}, 0x18) capget(&(0x7f0000000bc0)={0x20080522, r7}, &(0x7f0000000c00)={0x3, 0x10001, 0x80, 0x6, 0xee, 0x3}) 20:14:21 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x8, 0x20, 0x3, 0x7, {{0x14, 0x4, 0x1, 0x4, 0x50, 0x68, 0x0, 0x7, 0x4, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x3c, 0xe5, 0x1, 0x7, [{@empty, 0x6}, {@local}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x4}, {@broadcast, 0x81}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xc2a}, {@local, 0x9}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x2a0, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x4}}, {{0x8}, {0x4}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x7fff, 0xe1, 0x40, 0xfffffff8}, {0x9, 0x8, 0x80, 0x4}, {0x7f0, 0x8, 0xff, 0x2}, {0x896c, 0x80, 0x7, 0x6}, {0x1, 0x81, 0x3, 0x100}, {0x101, 0x0, 0x0, 0x1}, {0x1, 0x20, 0x1f, 0x80}, {0x5a15, 0x1, 0x0, 0xf800}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x2a0}}, 0x40854) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x89, 0x5, "213c499f9bbc126a26aa85468eae50455951c1a2ca65f3c8e68b66584aba244fc8bfcbc3726ea56770bb2cf56a8711dfd84110f7a87d14b882d6bbfe68c89082e9a64f642428ad33a8cfe51d56a14103afecddeadd924858a5a230e15e75ac02bac3457ea03f73c8ac79c2cff9efb6b43ab417d8fad39c4d580d3b779921bcb35de216ba06"}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '({\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0xd0}}, 0x5) recvmsg$unix(r1, &(0x7f0000001a80)={&(0x7f0000000780)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f0000000900)=""/6, 0x6}, {&(0x7f0000000940)=""/89, 0x59}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x40002042) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000001dc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d80)={&(0x7f0000001b00)={0x25c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x22}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x54e0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xff, @private1, 0xa6d4}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x72}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc0f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc561}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb92}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5ce}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}]}, 0x25c}}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0xc000885) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000002040)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000002140)=0xe8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000002200)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x40, 0x0, 0x112, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r13 = pidfd_getfd(r11, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_GETPDP(r13, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}}, 0x4) r14 = pidfd_open(r3, 0x0) clock_gettime(0x0, &(0x7f0000002380)={0x0, 0x0}) ppoll(&(0x7f0000002340)=[{r7, 0x4}, {r13, 0x200}, {r14, 0x1490}, {r10, 0x100}, {r7, 0x8000}], 0x5, &(0x7f00000023c0)={r15, r16+10000000}, &(0x7f0000002400)={[0x80]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000002440)={{0x1, 0x1, 0x18, r8}, './file0/file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000002480)={{{@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in=@multicast2, 0x4e20, 0x0, 0x4e20, 0xffff, 0xa, 0x20, 0x80, 0x6, 0x0, r4}, {0x3, 0xe784634, 0x7, 0x80000000, 0xb8e, 0xe00, 0x9, 0xb3}, {0x80, 0x1, 0x8, 0x1ff}, 0x6, 0x6e6bbd, 0x1, 0x0, 0x2, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x3c}, 0x8, @in=@local, 0x3500, 0x1, 0x1, 0x0, 0x7ff, 0x1, 0x6}}, 0xe8) r18 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_IPSEC_POLICY(r18, 0x29, 0x22, &(0x7f0000002640)={{{@in6=@mcast2, @in=@empty, 0x4e23, 0x4, 0x4e20, 0x0, 0xa, 0xc0, 0x80, 0x2f}, {0x10000, 0x8, 0x6, 0x9, 0xffffffffffffff64, 0x38448806, 0x9, 0x3f}, {0x6, 0x3, 0x7fff, 0xd7f}, 0x80, 0x6e6bb0, 0x1, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d6, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x3506, 0x2, 0x3, 0x80, 0x4f0adc78, 0x3, 0x6}}, 0xe8) 20:14:21 executing program 3: r0 = socket(0x2c, 0x4, 0x6) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x0) socket$inet(0x2, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x2c, @remote, 0x4e21, 0x4, 'rr\x00', 0x2a, 0x5, 0x62}, 0x2c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) flock(r4, 0xc) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c}, 0x40) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private1, @in=@remote, 0x4e23, 0x0, 0x4e20, 0x9, 0x2, 0x80, 0x20, 0x3c, r2, 0xee00}, {0x100000001, 0x0, 0x2, 0xe26, 0x1e72bf39, 0x9, 0x7fffffff, 0x2}, {0x42, 0x1f280000000, 0x0, 0x8}, 0x6b6, 0x6e6bbf, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x4d2, 0x16}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x3, 0x9, 0x9, 0x8}}, 0xe8) write$binfmt_misc(r4, &(0x7f00000003c0)={'syz1', "059c03243d987b5ea7999b9c8fc0cdc19ffcf9c46a5ba6dca1e9338649d8595628be3ad27f2fe87f8672e9a35540d5c42283e60eb43ec814a8ea5002fe1b3c70288b87b0d028efa8b5914ef283f26b38bbf1b818cef763e6f635a1b0a9e5b148c9d7f73d3d1b65e7ffa0f308635d46dba5f90887f88555b091f8269d39794fe3453c1ec89d1139da26dcc59659a30d6ba57200138cef9b4ba64a3564681a09091da885f8914b71e44659d66a03e8307d9d834401dc872ac081a02fbda1a47c989d79c56223a17bb700379345ddfff7eca12e332ad755cac9da26c83048fb5439a86eb9"}, 0xe7) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@empty}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) recvmmsg(r0, &(0x7f0000005d00)=[{{&(0x7f00000006c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000740)=""/10, 0xa}, {&(0x7f0000000780)=""/18, 0x12}, {&(0x7f00000007c0)=""/19, 0x13}, {&(0x7f0000000800)=""/52, 0x34}, {&(0x7f0000000840)=""/137, 0x89}, {&(0x7f0000000900)=""/86, 0x56}, {&(0x7f0000000980)=""/54, 0x36}, {&(0x7f00000009c0)=""/32, 0x20}, {&(0x7f0000000a00)=""/159, 0x9f}], 0x9, &(0x7f0000000b80)=""/234, 0xea}, 0x2}, {{&(0x7f0000000c80)=@nl=@unspec, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000d00)=""/73, 0x49}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2, &(0x7f0000001dc0)=""/76, 0x4c}, 0x1}, {{&(0x7f0000001e40)=@nfc, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001ec0)=""/83, 0x53}], 0x1, &(0x7f0000001f80)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000002f80)=@can={0x1d, 0x0}, 0x80, &(0x7f0000003000)}, 0x3f}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000003040)=""/85, 0x55}, {&(0x7f00000030c0)=""/28, 0x1c}], 0x2, &(0x7f0000003140)=""/3, 0x3}, 0xd6}, {{&(0x7f0000003180)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003200)=""/200, 0xc8}, {&(0x7f0000003300)=""/8, 0x8}, {&(0x7f0000003340)=""/96, 0x60}], 0x3, &(0x7f0000003400)=""/91, 0x5b}, 0x3}, {{&(0x7f0000003480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000003500)=""/186, 0xba}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x2, &(0x7f0000004600)=""/163, 0xa3}, 0x6f7}, {{&(0x7f00000046c0)=@qipcrtr, 0x80, &(0x7f0000005c40)=[{&(0x7f0000004740)=""/195, 0xc3}, {&(0x7f0000004840)=""/225, 0xe1}, {&(0x7f0000004940)=""/122, 0x7a}, {&(0x7f00000049c0)=""/117, 0x75}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/100, 0x64}, {&(0x7f0000005ac0)=""/68, 0x44}, {&(0x7f0000005b40)=""/198, 0xc6}], 0x8, &(0x7f0000005cc0)}, 0x43e}], 0x8, 0x21, &(0x7f0000005f00)={0x77359400}) setsockopt$inet_mreqn(r7, 0x0, 0x34, &(0x7f0000005f40)={@private=0xa010101, @broadcast, r8}, 0xc) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000006080)={'nat\x00', 0x0, 0x4, 0xa8, [0x38000000000000, 0xff, 0x1, 0x0, 0x6, 0x80], 0x3, &(0x7f0000005f80)=[{}, {}, {}], &(0x7f0000005fc0)=""/168}, &(0x7f0000006100)=0x78) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000006140)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f00000061c0)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @rand_addr=0x64010100}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000006180)='macvlan0\x00', 0x7, 0xfffffffffffffff9, 0x1}) getsockname$unix(r5, &(0x7f0000006240)=@abs, &(0x7f00000062c0)=0x6e) [ 84.864387] audit: type=1400 audit(1738008861.315:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:14:21 executing program 4: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x59}}}, 0x14) clock_gettime(0x0, &(0x7f0000002d00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x3, &(0x7f0000000280)=""/193, 0xc1}, 0x8}, {{&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000640)=""/50, 0x32}], 0x5, &(0x7f0000000700)=""/252, 0xfc}, 0xffff}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/217, 0xd9}, {&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/163, 0xa3}], 0x4}, 0x81}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b40)=""/8, 0x8}, {&(0x7f0000001b80)=""/7, 0x7}], 0x2, &(0x7f0000001c00)=""/4096, 0x1000}, 0x3}], 0x4, 0x2, &(0x7f0000002d40)={r0, r1+10000000}) r4 = accept4$packet(r3, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002dc0)=0x14, 0x80000) r6 = dup2(r4, r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfb03}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000041}, 0x2004001) r7 = syz_open_dev$mouse(&(0x7f0000003040), 0x7, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r6) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000003300)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003100)={0x18c, r8, 0xd80, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x14f5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe1f8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x549f30d4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb4f5002}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x4}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8c}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x802) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f00000035c0)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003580)={&(0x7f00000033c0)={0x198, r9, 0xc31, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x198}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000003600)={0x0, 0x9, 0x101}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003680), r6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000003740)={'ip6_vti0\x00', &(0x7f00000036c0)={'syztnl1\x00', r5, 0x2f, 0x6, 0x1f, 0x6, 0x2, @local, @loopback, 0x7, 0x10, 0x6, 0x404}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003780)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000003880)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000003940)={'syztnl2\x00', &(0x7f00000038c0)={'sit0\x00', r2, 0x4, 0x1, 0x1, 0x9, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x7, 0x0, 0x3, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000003a00)={'gretap0\x00', &(0x7f0000003980)={'gretap0\x00', r5, 0x1, 0x8000, 0x8000, 0x81, {{0xd, 0x4, 0x0, 0x39, 0x34, 0x64, 0x0, 0x5, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x1f, 0x2d, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @rand_addr=0x64010102, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f00000077c0)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007780)={&(0x7f0000007500)={0x248, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20048850}, 0x0) 20:14:21 executing program 7: ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0xdf) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x402040, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x81, 0x0, 0xff01, 0x6, 0x9}) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000080)={0x9, 0x0, 0x9}) ioctl$TCSBRKP(r0, 0x5425, 0xffffffff) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)=0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1, 0x1}}, './file0\x00'}) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x5, 0xffff}]}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000001c0)={0x0, 0x100000001, [0x70b, 0x7, 0x6, 0x100000000, 0x4, 0xffff]}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000200)) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000240)) r2 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x2201, 0x24) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000002c0)) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x1}, {0x6}, 0x8b, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)="911c6f6e01cb04ebbdc41507001bf71f35b89f7c83613a935fdea2f00236c08f89f77002dbedb17de1a86c4414a0d9dada4bee88dead242745e180bf65ced202c11886145c5d85a1bd1999ffd20024027421da8b9d5c921c3240c3", 0x5b, 0x0, &(0x7f0000000400)={0x2, 0x195, {0x1, 0xc, 0xbf, "29f05d0d47e978e18717752433886cd1b9ac1400f4c1089571bc5c4cbb138535ae4e4cad6e1c00ed0de11afce224f8ffd56757a7ee06c6f8d76f06389971d41586ee3dcdbd8761f14c1f7e9f98a3cc5155b608453a2b174f9e36964d65b71650f412aef2ce88921205541ca104d69b8a5d70670f4681ed525214859c359fc0e2c46c0b70a0761312e5ccfff8757bb3f981faab9a4c5fb8db81cdd466ab320480304a5e0c2798229766aa02fc429e5bd2c83cf2679e7792a724634ca3802f21", 0xc9, "7979a8c7ff7b5245933ae4e1f0bbc344906876741f426c2e37c19f66e9a39d7796eeb344af25bca21e2dab4a93cd65bd20543f1766d3bb81931955797ff3cafc8d5521a90ba046b32d3c8f86a4d34573578745060da9693b33eff82fe04147fc0ef4a6aded069c798c5022b7c989bde83aa3bed005383912914a3be0575cc96d159958770abe475095def5b0dd09afc729cff6ebe84515e1e4b4d61b5c33bded727ea966b38b9473d9bd5f8d0a798f90f931c6dff8baee2523ce938e9b32118260c523c076f6b95df5"}, 0x7a, "728ade427176a9a19c1451c4691cd7a7f984cfd2fc2bcd775a5f289c77909cffa69abe276ff3002ffcc208dac7fdd1ff1e15f0476b7b88e0b1450cb5e37484caf0ad9542c6f60a1533dc4ad63a4c6d39f430b2942aedc2b6b182c3ebcf108bf20f0f9e0017eb3f10e1e8a9906b95e66bc5dcb03dd4bfec582bd5"}, 0x21b}) openat2(r0, &(0x7f00000006c0)='\x00', &(0x7f0000000700)={0x200000, 0x41}, 0x18) r3 = creat(&(0x7f0000000740)='./file0\x00', 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/4096}) 20:14:21 executing program 5: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0xdf) 20:14:21 executing program 6: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xd8}}, 0x4000) r2 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r2, &(0x7f0000000240), 0x0, 0x81) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000280)=0xffffffffffffffff) r3 = accept(r0, 0x0, &(0x7f00000002c0)) r4 = fsmount(r0, 0x1, 0x71) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000340)={0x3ac, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb9c}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd27e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x56fa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x59c}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "ddc5509fdab36ca24a0abd5de094d7cd9e291765acee5e526720926fb5"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "4f429715a0083605965979f274c0c396b4953b7f4620408be200d3fd4241df8396e97ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x42, 0x3, "9e8400d770e3ee519dbea6432fb9bae03326482da6be53f7e3d3034da04b0cb420289fd152e7f6974d59e5c0abb41803f122c75d2f080c124f9d0e41ca4d"}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fffffff, @local, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8557}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8620}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x466}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x148, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7f, @empty, 0x200}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffffb, @local, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x59b, @local, 0x20}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x20008000}, 0x890) r5 = pidfd_getfd(r4, r2, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r3) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r6, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004804}, 0x20040000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000d80)="1c1c71bb862ee6a7301e8ec1860798081bd92efa0d1bbb28f3cd4c8f61bf1d2c14f38c8b56646bfa759f5f9749e65f2d3581e4ae009b7dc97ea08663c2ae46db28e6f8ea7c895627c6626b9b8aff266254c95e87e7653174690b32bcedf2075a1c7a0231f09b3de37a", 0x69}, {&(0x7f0000000e00)="b14250ba3d8e19ed42478e7ad461d7d94b0a55d29f2662c890d62367b6fb8b353bcec24e692bc386471a8901c50f5ed5ca5a6d341ac2183dee21388c585be2933eb5d6d67f14409a7876413d8e9e", 0x4e}, {&(0x7f0000000e80)="09ee2c1b20ba962bb8b952959cf24540dcb4aa", 0x13}, {&(0x7f0000000ec0)="4999f70ec88209dbf8409786a9ad93504992e1abba015d9451fe946e8831659d2fbed13568a11221548b443375f580c8c6f719e04f85742e5eb6225814ebe6665ff44267c4aab6fdb492e8b9df6c35114d3e56d7a71f28839a153286353b031c37fa2d51325f4e274efca6d9c97402607bba36d5a9c9b986c422ad27b12fbab66d3163ece325a9d1175f50013c623d86b2876508475273ce264d45cb2b97918e7c8d3187219a21f7bd50761def1b2e3e77edfb8a3c182ee43ddb9675d5529c9d690b987e68c66972f5e9e9448eb7d02a5d6f7aa4eaa79e", 0xd7}], 0x4, 0x0, 0x0, 0x24000040}, 0x40040) pipe(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_io_uring_complete(0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r3) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8094}, 0x24000844) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), r7) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r10, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}}, 0x4000000) quotactl(0x83, &(0x7f0000001300)='./file0\x00', 0x0, &(0x7f0000001340)="a45370ffdd3e136ac509dd9e91a7eb22729ebc4b8619f361c044cb3105fcf40f4b9858155711c3a1ee0ef6d95a81c812aa3ee030d7239520543701b40b47cf2c68e04ce06076e481c3394149d59fda8ab792e42af61bbf6b9ab57adfd1fe037f6f98ce9eed028073150c376dc64f087a3441716866da49adf3d36b039925f44be0e8a652cadb93f6d6830a062775ff83710ada0e58c889c0f425b59e4c2f98cafcbdb463e6ab1ab2dce84174d4d9cc8a") [ 86.275075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.277326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.279519] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.280727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.281979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.285847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.289742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.291495] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.292676] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.296483] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.297704] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.299005] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.333560] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.337698] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.343004] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.348699] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.354551] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.356650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.396839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.399889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.402619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.408454] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.412667] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.414944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.450831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.459501] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.461455] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.465801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.472758] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.476530] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.516056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.552547] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.556538] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.568368] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.593735] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.603223] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.615855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.616754] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.623420] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.626551] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.640271] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.641983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.648658] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.650204] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.677574] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 86.701401] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 86.704996] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.705864] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.349793] Bluetooth: hci0: command tx timeout [ 88.350683] Bluetooth: hci1: command tx timeout [ 88.413326] Bluetooth: hci2: command tx timeout [ 88.476368] Bluetooth: hci3: command tx timeout [ 88.540518] Bluetooth: hci4: command tx timeout [ 88.670275] Bluetooth: hci5: command tx timeout [ 88.796365] Bluetooth: hci6: command tx timeout [ 88.797563] Bluetooth: hci7: command tx timeout [ 90.396810] Bluetooth: hci0: command tx timeout [ 90.397481] Bluetooth: hci1: command tx timeout [ 90.461229] Bluetooth: hci2: command tx timeout [ 90.524380] Bluetooth: hci3: command tx timeout [ 90.588347] Bluetooth: hci4: command tx timeout [ 90.716288] Bluetooth: hci5: command tx timeout [ 90.844405] Bluetooth: hci6: command tx timeout [ 90.845429] Bluetooth: hci7: command tx timeout [ 92.444364] Bluetooth: hci0: command tx timeout [ 92.444897] Bluetooth: hci1: command tx timeout [ 92.508241] Bluetooth: hci2: command tx timeout [ 92.573182] Bluetooth: hci3: command tx timeout [ 92.636249] Bluetooth: hci4: command tx timeout [ 92.764345] Bluetooth: hci5: command tx timeout [ 92.892238] Bluetooth: hci6: command tx timeout [ 92.892788] Bluetooth: hci7: command tx timeout [ 94.493257] Bluetooth: hci1: command tx timeout [ 94.494276] Bluetooth: hci0: command tx timeout [ 94.556313] Bluetooth: hci2: command tx timeout [ 94.620466] Bluetooth: hci3: command tx timeout [ 94.687430] Bluetooth: hci4: command tx timeout [ 94.812514] Bluetooth: hci5: command tx timeout [ 94.940364] Bluetooth: hci7: command tx timeout [ 94.941099] Bluetooth: hci6: command tx timeout [ 146.714345] syz-executor.3 (283) used greatest stack depth: 24016 bytes left [ 149.367110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.370036] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.372779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.378355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.382030] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.384535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.433275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.440045] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.442379] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.448257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.452773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.454721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.678045] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.682708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.689536] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.699744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.709510] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.713720] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.804766] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.829881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.851909] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.874629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.895989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.903822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.914735] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.943812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.946604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.961770] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.986703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.991687] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.997837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.002734] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.010522] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.017023] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.019928] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.022107] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.046751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.050189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.052916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.058658] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.065063] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.068731] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.070785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.080058] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.105341] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.142586] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.167693] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.184743] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.452437] Bluetooth: hci0: command tx timeout [ 151.516326] Bluetooth: hci1: command tx timeout [ 151.772284] Bluetooth: hci2: command tx timeout [ 152.092285] Bluetooth: hci3: command tx timeout [ 152.157272] Bluetooth: hci5: command tx timeout [ 152.158071] Bluetooth: hci4: command tx timeout [ 152.158976] Bluetooth: hci7: command tx timeout [ 152.220467] Bluetooth: hci6: command tx timeout [ 153.501278] Bluetooth: hci0: command tx timeout [ 153.566153] Bluetooth: hci1: command tx timeout [ 153.820292] Bluetooth: hci2: command tx timeout [ 154.140385] Bluetooth: hci3: command tx timeout [ 154.205231] Bluetooth: hci4: command tx timeout [ 154.205746] Bluetooth: hci7: command tx timeout [ 154.206397] Bluetooth: hci5: command tx timeout [ 154.269260] Bluetooth: hci6: command tx timeout [ 155.548225] Bluetooth: hci0: command tx timeout [ 155.613393] Bluetooth: hci1: command tx timeout [ 155.868237] Bluetooth: hci2: command tx timeout [ 156.188210] Bluetooth: hci3: command tx timeout [ 156.252479] Bluetooth: hci7: command tx timeout [ 156.252897] Bluetooth: hci4: command tx timeout [ 156.253522] Bluetooth: hci5: command tx timeout [ 156.317747] Bluetooth: hci6: command tx timeout [ 157.597283] Bluetooth: hci0: command tx timeout [ 157.660301] Bluetooth: hci1: command tx timeout [ 157.916311] Bluetooth: hci2: command tx timeout [ 158.237433] Bluetooth: hci3: command tx timeout [ 158.302232] Bluetooth: hci5: command tx timeout [ 158.302286] Bluetooth: hci7: command tx timeout [ 158.302894] Bluetooth: hci4: command tx timeout [ 158.364235] Bluetooth: hci6: command tx timeout [ 211.508246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.511259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.517550] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.523839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.527762] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.530669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.622920] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.629534] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.632854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.638022] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.642446] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.644547] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.692996] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.696022] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.700465] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.708184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.723496] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.725474] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.773488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.788952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.805873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.847744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.863625] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.874300] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.897817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.901672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.903437] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.920400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.923970] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.925741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.948958] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.956813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.961085] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 211.969591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.978676] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 211.984991] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.986538] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 211.990746] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 211.994833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.998554] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.005963] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.012738] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.178683] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.186834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.214543] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.252290] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.258499] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.277534] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.596201] Bluetooth: hci0: command tx timeout [ 213.724194] Bluetooth: hci1: command tx timeout [ 213.852235] Bluetooth: hci2: command tx timeout [ 213.980253] Bluetooth: hci3: command tx timeout [ 214.044265] Bluetooth: hci4: command tx timeout [ 214.045278] Bluetooth: hci5: command tx timeout [ 214.108283] Bluetooth: hci6: command tx timeout [ 214.364332] Bluetooth: hci7: command tx timeout [ 215.645217] Bluetooth: hci0: command tx timeout [ 215.772201] Bluetooth: hci1: command tx timeout [ 215.901258] Bluetooth: hci2: command tx timeout [ 216.030147] Bluetooth: hci3: command tx timeout [ 216.092314] Bluetooth: hci5: command tx timeout [ 216.092833] Bluetooth: hci4: command tx timeout [ 216.156241] Bluetooth: hci6: command tx timeout [ 216.412187] Bluetooth: hci7: command tx timeout [ 217.692259] Bluetooth: hci0: command tx timeout [ 217.821149] Bluetooth: hci1: command tx timeout [ 217.948343] Bluetooth: hci2: command tx timeout [ 218.077206] Bluetooth: hci3: command tx timeout [ 218.140333] Bluetooth: hci4: command tx timeout [ 218.140799] Bluetooth: hci5: command tx timeout [ 218.204268] Bluetooth: hci6: command tx timeout [ 218.460202] Bluetooth: hci7: command tx timeout [ 219.740195] Bluetooth: hci0: command tx timeout [ 219.869161] Bluetooth: hci1: command tx timeout [ 219.996216] Bluetooth: hci2: command tx timeout [ 220.124205] Bluetooth: hci3: command tx timeout [ 220.188282] Bluetooth: hci5: command tx timeout [ 220.188817] Bluetooth: hci4: command tx timeout [ 220.252210] Bluetooth: hci6: command tx timeout [ 220.508290] Bluetooth: hci7: command tx timeout [ 273.708622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.722002] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.726624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.733741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 273.736540] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.739861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 273.742600] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.747141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.749265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 273.774605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.787397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 273.789951] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 273.791778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.794894] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.808834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.828840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.835538] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.840492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.865455] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.871543] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.891859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.891956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.906023] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.906066] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.908171] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.908808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.915477] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.919526] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.929466] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.933992] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.994450] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.017023] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.019786] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.022334] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.027997] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.030078] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.037770] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.060318] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.065522] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.072435] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.072498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.076392] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.078158] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.092411] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.115954] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.128582] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.149938] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.157568] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.807168] Bluetooth: hci1: command tx timeout [ 275.868197] Bluetooth: hci0: command tx timeout [ 275.932229] Bluetooth: hci2: command tx timeout [ 275.996273] Bluetooth: hci4: command tx timeout [ 276.061892] Bluetooth: hci3: command tx timeout [ 276.252258] Bluetooth: hci5: command tx timeout [ 276.253012] Bluetooth: hci6: command tx timeout [ 276.253595] Bluetooth: hci7: command tx timeout [ 277.852174] Bluetooth: hci1: command tx timeout [ 277.916223] Bluetooth: hci0: command tx timeout [ 277.980217] Bluetooth: hci2: command tx timeout [ 278.044257] Bluetooth: hci4: command tx timeout [ 278.110250] Bluetooth: hci3: command tx timeout [ 278.300224] Bluetooth: hci7: command tx timeout [ 278.300257] Bluetooth: hci6: command tx timeout [ 278.300706] Bluetooth: hci5: command tx timeout [ 279.900219] Bluetooth: hci1: command tx timeout [ 279.964180] Bluetooth: hci0: command tx timeout [ 280.028163] Bluetooth: hci2: command tx timeout [ 280.093329] Bluetooth: hci4: command tx timeout [ 280.156199] Bluetooth: hci3: command tx timeout [ 280.348262] Bluetooth: hci6: command tx timeout [ 280.348359] Bluetooth: hci7: command tx timeout [ 280.349153] Bluetooth: hci5: command tx timeout [ 281.951139] Bluetooth: hci1: command tx timeout [ 282.012274] Bluetooth: hci0: command tx timeout [ 282.076245] Bluetooth: hci2: command tx timeout [ 282.140211] Bluetooth: hci4: command tx timeout [ 282.206163] Bluetooth: hci3: command tx timeout [ 282.396187] Bluetooth: hci7: command tx timeout [ 282.396294] Bluetooth: hci5: command tx timeout [ 282.396658] Bluetooth: hci6: command tx timeout [ 329.241494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.242893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.843818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.844768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.649379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.650186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.797465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.798220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.924282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.924984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.014645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.015302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.130863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.131656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.174664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.175403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.252652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.253574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.474848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.475817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.657232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.657935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 20:18:29 executing program 4: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x59}}}, 0x14) clock_gettime(0x0, &(0x7f0000002d00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x3, &(0x7f0000000280)=""/193, 0xc1}, 0x8}, {{&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000640)=""/50, 0x32}], 0x5, &(0x7f0000000700)=""/252, 0xfc}, 0xffff}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/217, 0xd9}, {&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/163, 0xa3}], 0x4}, 0x81}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b40)=""/8, 0x8}, {&(0x7f0000001b80)=""/7, 0x7}], 0x2, &(0x7f0000001c00)=""/4096, 0x1000}, 0x3}], 0x4, 0x2, &(0x7f0000002d40)={r0, r1+10000000}) r4 = accept4$packet(r3, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002dc0)=0x14, 0x80000) r6 = dup2(r4, r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfb03}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000041}, 0x2004001) r7 = syz_open_dev$mouse(&(0x7f0000003040), 0x7, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r6) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000003300)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003100)={0x18c, r8, 0xd80, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x14f5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe1f8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x549f30d4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb4f5002}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x4}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8c}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x802) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f00000035c0)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003580)={&(0x7f00000033c0)={0x198, r9, 0xc31, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x198}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000003600)={0x0, 0x9, 0x101}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003680), r6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000003740)={'ip6_vti0\x00', &(0x7f00000036c0)={'syztnl1\x00', r5, 0x2f, 0x6, 0x1f, 0x6, 0x2, @local, @loopback, 0x7, 0x10, 0x6, 0x404}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003780)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000003880)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000003940)={'syztnl2\x00', &(0x7f00000038c0)={'sit0\x00', r2, 0x4, 0x1, 0x1, 0x9, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x7, 0x0, 0x3, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000003a00)={'gretap0\x00', &(0x7f0000003980)={'gretap0\x00', r5, 0x1, 0x8000, 0x8000, 0x81, {{0xd, 0x4, 0x0, 0x39, 0x34, 0x64, 0x0, 0x5, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x1f, 0x2d, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @rand_addr=0x64010102, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f00000077c0)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007780)={&(0x7f0000007500)={0x248, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20048850}, 0x0) [ 332.913209] [ 332.913429] ====================================================== [ 332.913952] WARNING: possible circular locking dependency detected [ 332.914483] 6.13.0-next-20250124 #1 Not tainted [ 332.914878] ------------------------------------------------------ [ 332.915873] kworker/u8:1/66 is trying to acquire lock: [ 332.916742] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.918480] [ 332.918480] but task is already holding lock: [ 332.919429] ffff888031348768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 332.921040] [ 332.921040] which lock already depends on the new lock. [ 332.921040] [ 332.922863] [ 332.922863] the existing dependency chain (in reverse order) is: [ 332.924146] [ 332.924146] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 332.925281] __mutex_lock+0x13d/0xb50 [ 332.926063] wiphy_register+0x1b2e/0x25d0 [ 332.927129] ieee80211_register_hw+0x23a4/0x3d60 [ 332.927593] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 332.928078] init_mac80211_hwsim+0x389/0x870 [ 332.928525] do_one_initcall+0xf9/0x640 [ 332.928957] kernel_init_freeable+0x53d/0x7a0 [ 332.929410] kernel_init+0x1e/0x2d0 [ 332.929776] ret_from_fork+0x48/0x80 [ 332.930147] ret_from_fork_asm+0x1a/0x30 [ 332.930566] [ 332.930566] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 332.931091] __lock_acquire+0x29fd/0x4580 [ 332.931510] lock_acquire+0x19b/0x520 [ 332.931895] __mutex_lock+0x13d/0xb50 [ 332.932289] unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.932817] unregister_netdevice_queue+0x224/0x2e0 [ 332.933298] _cfg80211_unregister_wdev+0x57b/0x700 [ 332.933774] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 332.934247] ieee80211_unregister_hw+0x55/0x3a0 [ 332.934694] hwsim_exit_net+0x3a0/0x730 [ 332.935091] ops_exit_list+0xb3/0x180 [ 332.935471] cleanup_net+0x546/0xad0 [ 332.935849] process_one_work+0x8ee/0x1a10 [ 332.936285] worker_thread+0x674/0xe70 [ 332.936695] kthread+0x3ab/0x720 [ 332.937063] ret_from_fork+0x48/0x80 [ 332.937431] ret_from_fork_asm+0x1a/0x30 [ 332.937852] [ 332.937852] other info that might help us debug this: [ 332.937852] [ 332.938490] Possible unsafe locking scenario: [ 332.938490] [ 332.938975] CPU0 CPU1 [ 332.939355] ---- ---- [ 332.939736] lock(&rdev->wiphy.mtx); [ 332.940076] lock(rtnl_mutex); [ 332.940563] lock(&rdev->wiphy.mtx); [ 332.941098] lock(rtnl_mutex); [ 332.941399] [ 332.941399] *** DEADLOCK *** [ 332.941399] [ 332.941888] 4 locks held by kworker/u8:1/66: [ 332.942266] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 332.943143] #1: ffff88800bcbfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 332.943977] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 332.944761] #3: ffff888031348768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 332.945642] [ 332.945642] stack backtrace: [ 332.946018] CPU: 0 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250124 #1 [ 332.946055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 332.946077] Workqueue: netns cleanup_net [ 332.946118] Call Trace: [ 332.946128] [ 332.946140] dump_stack_lvl+0xca/0x120 [ 332.946197] print_circular_bug+0x47b/0x750 [ 332.946243] check_noncircular+0x2e9/0x3c0 [ 332.946285] ? __pfx_check_noncircular+0x10/0x10 [ 332.946328] ? pick_eevdf+0x3a4/0x560 [ 332.946377] ? srso_return_thunk+0x5/0x5f [ 332.946432] ? find_held_lock+0x2c/0x110 [ 332.946492] ? lockdep_lock+0xba/0x1b0 [ 332.946549] ? __pfx_lockdep_lock+0x10/0x10 [ 332.946607] ? __pfx_lock_release+0x10/0x10 [ 332.946654] __lock_acquire+0x29fd/0x4580 [ 332.946708] ? __pfx___lock_acquire+0x10/0x10 [ 332.946752] ? __pfx_try_to_wake_up+0x10/0x10 [ 332.946800] lock_acquire+0x19b/0x520 [ 332.946843] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.946892] ? __pfx_lock_acquire+0x10/0x10 [ 332.946936] ? srso_return_thunk+0x5/0x5f [ 332.946991] ? lock_release+0x20f/0x6f0 [ 332.947035] ? srso_return_thunk+0x5/0x5f [ 332.947090] ? lock_is_held_type+0x9e/0x120 [ 332.947145] ? srso_return_thunk+0x5/0x5f [ 332.947203] __mutex_lock+0x13d/0xb50 [ 332.947255] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.947300] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.947347] ? srso_return_thunk+0x5/0x5f [ 332.947402] ? synchronize_rcu_expedited+0x38a/0x420 [ 332.947446] ? __pfx___mutex_lock+0x10/0x10 [ 332.947500] ? __pfx_autoremove_wake_function+0x10/0x10 [ 332.947553] ? srso_return_thunk+0x5/0x5f [ 332.947608] ? kasan_quarantine_put+0x84/0x1e0 [ 332.947669] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 332.947704] ? srso_return_thunk+0x5/0x5f [ 332.947763] unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.947810] ? __virt_addr_valid+0x2e8/0x5d0 [ 332.947862] ? __pfx_lock_release+0x10/0x10 [ 332.947907] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 332.947953] ? find_held_lock+0x2c/0x110 [ 332.948011] ? srso_return_thunk+0x5/0x5f [ 332.948068] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 332.948130] ? srso_return_thunk+0x5/0x5f [ 332.948184] ? lock_release+0x20f/0x6f0 [ 332.948229] ? __pfx_lock_release+0x10/0x10 [ 332.948272] ? srso_return_thunk+0x5/0x5f [ 332.948327] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 332.948374] ? srso_return_thunk+0x5/0x5f [ 332.948435] unregister_netdevice_queue+0x224/0x2e0 [ 332.948478] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 332.948521] ? up_write+0x195/0x520 [ 332.948576] _cfg80211_unregister_wdev+0x57b/0x700 [ 332.948628] ? srso_return_thunk+0x5/0x5f [ 332.948687] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 332.948726] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 332.948764] ? srso_return_thunk+0x5/0x5f [ 332.948822] ? srso_return_thunk+0x5/0x5f [ 332.948880] ? synchronize_rcu+0x1ff/0x260 [ 332.948929] ieee80211_unregister_hw+0x55/0x3a0 [ 332.948974] hwsim_exit_net+0x3a0/0x730 [ 332.949016] ? __pfx_hwsim_exit_net+0x10/0x10 [ 332.949057] ? srso_return_thunk+0x5/0x5f [ 332.949112] ? netdev_run_todo+0x788/0x1040 [ 332.949161] ? __pfx_hwsim_exit_net+0x10/0x10 [ 332.949204] ops_exit_list+0xb3/0x180 [ 332.949246] cleanup_net+0x546/0xad0 [ 332.949291] ? __pfx_cleanup_net+0x10/0x10 [ 332.949344] process_one_work+0x8ee/0x1a10 [ 332.949410] ? __pfx_lock_acquire+0x10/0x10 [ 332.949454] ? __pfx_process_one_work+0x10/0x10 [ 332.949513] ? srso_return_thunk+0x5/0x5f [ 332.949568] ? move_linked_works+0x172/0x270 [ 332.949612] ? srso_return_thunk+0x5/0x5f [ 332.949667] ? assign_work+0x196/0x240 [ 332.949724] worker_thread+0x674/0xe70 [ 332.949783] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 332.949834] ? srso_return_thunk+0x5/0x5f [ 332.949889] ? __pfx_worker_thread+0x10/0x10 [ 332.949949] kthread+0x3ab/0x720 [ 332.950001] ? __pfx_kthread+0x10/0x10 [ 332.950052] ? srso_return_thunk+0x5/0x5f [ 332.950107] ? finish_task_switch.isra.0+0x206/0x840 [ 332.950158] ? __pfx_kthread+0x10/0x10 [ 332.950212] ret_from_fork+0x48/0x80 [ 332.950243] ? __pfx_kthread+0x10/0x10 [ 332.950296] ret_from_fork_asm+0x1a/0x30 [ 332.950363] [ 333.158703] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' 20:18:29 executing program 4: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x59}}}, 0x14) clock_gettime(0x0, &(0x7f0000002d00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x3, &(0x7f0000000280)=""/193, 0xc1}, 0x8}, {{&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000640)=""/50, 0x32}], 0x5, &(0x7f0000000700)=""/252, 0xfc}, 0xffff}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/217, 0xd9}, {&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/163, 0xa3}], 0x4}, 0x81}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b40)=""/8, 0x8}, {&(0x7f0000001b80)=""/7, 0x7}], 0x2, &(0x7f0000001c00)=""/4096, 0x1000}, 0x3}], 0x4, 0x2, &(0x7f0000002d40)={r0, r1+10000000}) r4 = accept4$packet(r3, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002dc0)=0x14, 0x80000) r6 = dup2(r4, r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfb03}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000041}, 0x2004001) r7 = syz_open_dev$mouse(&(0x7f0000003040), 0x7, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r6) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000003300)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003100)={0x18c, r8, 0xd80, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x14f5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe1f8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x549f30d4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb4f5002}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x4}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8c}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x802) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f00000035c0)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003580)={&(0x7f00000033c0)={0x198, r9, 0xc31, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x198}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000003600)={0x0, 0x9, 0x101}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003680), r6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000003740)={'ip6_vti0\x00', &(0x7f00000036c0)={'syztnl1\x00', r5, 0x2f, 0x6, 0x1f, 0x6, 0x2, @local, @loopback, 0x7, 0x10, 0x6, 0x404}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003780)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000003880)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000003940)={'syztnl2\x00', &(0x7f00000038c0)={'sit0\x00', r2, 0x4, 0x1, 0x1, 0x9, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x7, 0x0, 0x3, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000003a00)={'gretap0\x00', &(0x7f0000003980)={'gretap0\x00', r5, 0x1, 0x8000, 0x8000, 0x81, {{0xd, 0x4, 0x0, 0x39, 0x34, 0x64, 0x0, 0x5, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x1f, 0x2d, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @rand_addr=0x64010102, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f00000077c0)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007780)={&(0x7f0000007500)={0x248, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20048850}, 0x0) 20:18:29 executing program 4: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x59}}}, 0x14) clock_gettime(0x0, &(0x7f0000002d00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x3, &(0x7f0000000280)=""/193, 0xc1}, 0x8}, {{&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000640)=""/50, 0x32}], 0x5, &(0x7f0000000700)=""/252, 0xfc}, 0xffff}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/217, 0xd9}, {&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/163, 0xa3}], 0x4}, 0x81}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b40)=""/8, 0x8}, {&(0x7f0000001b80)=""/7, 0x7}], 0x2, &(0x7f0000001c00)=""/4096, 0x1000}, 0x3}], 0x4, 0x2, &(0x7f0000002d40)={r0, r1+10000000}) r4 = accept4$packet(r3, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002dc0)=0x14, 0x80000) r6 = dup2(r4, r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfb03}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000041}, 0x2004001) r7 = syz_open_dev$mouse(&(0x7f0000003040), 0x7, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r6) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000003300)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003100)={0x18c, r8, 0xd80, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x14f5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe1f8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x549f30d4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb4f5002}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x4}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8c}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x802) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f00000035c0)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003580)={&(0x7f00000033c0)={0x198, r9, 0xc31, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x198}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000003600)={0x0, 0x9, 0x101}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003680), r6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000003740)={'ip6_vti0\x00', &(0x7f00000036c0)={'syztnl1\x00', r5, 0x2f, 0x6, 0x1f, 0x6, 0x2, @local, @loopback, 0x7, 0x10, 0x6, 0x404}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003780)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000003880)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000003940)={'syztnl2\x00', &(0x7f00000038c0)={'sit0\x00', r2, 0x4, 0x1, 0x1, 0x9, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x7, 0x0, 0x3, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000003a00)={'gretap0\x00', &(0x7f0000003980)={'gretap0\x00', r5, 0x1, 0x8000, 0x8000, 0x81, {{0xd, 0x4, 0x0, 0x39, 0x34, 0x64, 0x0, 0x5, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x1f, 0x2d, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @rand_addr=0x64010102, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f00000077c0)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007780)={&(0x7f0000007500)={0x248, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20048850}, 0x0) 20:18:29 executing program 4: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x59}}}, 0x14) clock_gettime(0x0, &(0x7f0000002d00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x3, &(0x7f0000000280)=""/193, 0xc1}, 0x8}, {{&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000640)=""/50, 0x32}], 0x5, &(0x7f0000000700)=""/252, 0xfc}, 0xffff}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/217, 0xd9}, {&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/163, 0xa3}], 0x4}, 0x81}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b40)=""/8, 0x8}, {&(0x7f0000001b80)=""/7, 0x7}], 0x2, &(0x7f0000001c00)=""/4096, 0x1000}, 0x3}], 0x4, 0x2, &(0x7f0000002d40)={r0, r1+10000000}) r4 = accept4$packet(r3, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002dc0)=0x14, 0x80000) r6 = dup2(r4, r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfb03}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000041}, 0x2004001) r7 = syz_open_dev$mouse(&(0x7f0000003040), 0x7, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r6) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000003300)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003100)={0x18c, r8, 0xd80, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x14f5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe1f8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x549f30d4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb4f5002}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x4}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8c}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x802) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f00000035c0)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003580)={&(0x7f00000033c0)={0x198, r9, 0xc31, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x198}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000003600)={0x0, 0x9, 0x101}) syz_genetlink_get_family_id$ethtool(&(0x7f0000003680), r6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000003740)={'ip6_vti0\x00', &(0x7f00000036c0)={'syztnl1\x00', r5, 0x2f, 0x6, 0x1f, 0x6, 0x2, @local, @loopback, 0x7, 0x10, 0x6, 0x404}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003780)={{{@in=@local, @in6=@private2}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000003880)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000003940)={'syztnl2\x00', &(0x7f00000038c0)={'sit0\x00', r2, 0x4, 0x1, 0x1, 0x9, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x7, 0x0, 0x3, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000003a00)={'gretap0\x00', &(0x7f0000003980)={'gretap0\x00', r5, 0x1, 0x8000, 0x8000, 0x81, {{0xd, 0x4, 0x0, 0x39, 0x34, 0x64, 0x0, 0x5, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x1f, 0x2d, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @rand_addr=0x64010102, @broadcast]}]}}}}}) 20:18:30 executing program 4: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x59}}}, 0x14) clock_gettime(0x0, &(0x7f0000002d00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x3, &(0x7f0000000280)=""/193, 0xc1}, 0x8}, {{&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000640)=""/50, 0x32}], 0x5, &(0x7f0000000700)=""/252, 0xfc}, 0xffff}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/217, 0xd9}, {&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/163, 0xa3}], 0x4}, 0x81}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b40)=""/8, 0x8}, {&(0x7f0000001b80)=""/7, 0x7}], 0x2, &(0x7f0000001c00)=""/4096, 0x1000}, 0x3}], 0x4, 0x2, &(0x7f0000002d40)={r0, r1+10000000}) r4 = accept4$packet(r3, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002dc0)=0x14, 0x80000) r6 = dup2(r4, r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfb03}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000041}, 0x2004001) r7 = syz_open_dev$mouse(&(0x7f0000003040), 0x7, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r6) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000003300)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003100)={0x18c, r8, 0xd80, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x14f5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe1f8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x549f30d4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb4f5002}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x4}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8c}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x802) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f00000035c0)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003580)={&(0x7f00000033c0)={0x198, r9, 0xc31, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x198}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000003600)={0x0, 0x9, 0x101}) syz_genetlink_get_family_id$ethtool(&(0x7f0000003680), r6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000003740)={'ip6_vti0\x00', &(0x7f00000036c0)={'syztnl1\x00', r5, 0x2f, 0x6, 0x1f, 0x6, 0x2, @local, @loopback, 0x7, 0x10, 0x6, 0x404}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000003780)={{{@in=@local, @in6=@private2}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000003880)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000003940)={'syztnl2\x00', &(0x7f00000038c0)={'sit0\x00', r2, 0x4, 0x1, 0x1, 0x9, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x7, 0x0, 0x3, 0x2}}) 20:18:30 executing program 4: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x59}}}, 0x14) clock_gettime(0x0, &(0x7f0000002d00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x3, &(0x7f0000000280)=""/193, 0xc1}, 0x8}, {{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000640)=""/50, 0x32}], 0x5, &(0x7f0000000700)=""/252, 0xfc}, 0xffff}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/217, 0xd9}, {&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/163, 0xa3}], 0x4}, 0x81}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b40)=""/8, 0x8}, {&(0x7f0000001b80)=""/7, 0x7}], 0x2, &(0x7f0000001c00)=""/4096, 0x1000}, 0x3}], 0x4, 0x2, &(0x7f0000002d40)={r0, r1+10000000}) r3 = accept4$packet(r2, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002dc0)=0x14, 0x80000) r5 = dup2(r3, r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfb03}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000041}, 0x2004001) r6 = syz_open_dev$mouse(&(0x7f0000003040), 0x7, 0x800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r5) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000003300)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003100)={0x18c, r7, 0xd80, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x14f5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe1f8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x549f30d4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb4f5002}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x4}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8c}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x802) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), r5) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f00000035c0)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003580)={&(0x7f00000033c0)={0x198, r8, 0xc31, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x198}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000003600)={0x0, 0x9, 0x101}) syz_genetlink_get_family_id$ethtool(&(0x7f0000003680), r5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000003740)={'ip6_vti0\x00', &(0x7f00000036c0)={'syztnl1\x00', r4, 0x2f, 0x6, 0x1f, 0x6, 0x2, @local, @loopback, 0x7, 0x10, 0x6, 0x404}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000003780)={{{@in=@local, @in6=@private2}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000003880)=0xe8) 20:18:30 executing program 4: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x59}}}, 0x14) clock_gettime(0x0, &(0x7f0000002d00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x3, &(0x7f0000000280)=""/193, 0xc1}, 0x8}, {{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000640)=""/50, 0x32}], 0x5, &(0x7f0000000700)=""/252, 0xfc}, 0xffff}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/217, 0xd9}, {&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/163, 0xa3}], 0x4}, 0x81}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b40)=""/8, 0x8}, {&(0x7f0000001b80)=""/7, 0x7}], 0x2, &(0x7f0000001c00)=""/4096, 0x1000}, 0x3}], 0x4, 0x2, &(0x7f0000002d40)={r0, r1+10000000}) r3 = accept4$packet(r2, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002dc0)=0x14, 0x80000) r5 = dup2(r3, r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfb03}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000041}, 0x2004001) r6 = syz_open_dev$mouse(&(0x7f0000003040), 0x7, 0x800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r5) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000003300)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003100)={0x18c, r7, 0xd80, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x14f5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe1f8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x549f30d4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb4f5002}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x4}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8c}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x802) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), r5) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f00000035c0)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003580)={&(0x7f00000033c0)={0x198, r8, 0xc31, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x198}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000003600)={0x0, 0x9, 0x101}) syz_genetlink_get_family_id$ethtool(&(0x7f0000003680), r5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000003740)={'ip6_vti0\x00', &(0x7f00000036c0)={'syztnl1\x00', r4, 0x2f, 0x6, 0x1f, 0x6, 0x2, @local, @loopback, 0x7, 0x10, 0x6, 0x404}}) 20:18:30 executing program 4: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3e}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x59}}}, 0x14) clock_gettime(0x0, &(0x7f0000002d00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/50, 0x32}, {&(0x7f00000001c0)=""/123, 0x7b}], 0x3, &(0x7f0000000280)=""/193, 0xc1}, 0x8}, {{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000640)=""/50, 0x32}], 0x5, &(0x7f0000000700)=""/252, 0xfc}, 0xffff}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/217, 0xd9}, {&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/163, 0xa3}], 0x4}, 0x81}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b40)=""/8, 0x8}, {&(0x7f0000001b80)=""/7, 0x7}], 0x2, &(0x7f0000001c00)=""/4096, 0x1000}, 0x3}], 0x4, 0x2, &(0x7f0000002d40)={r0, r1+10000000}) r3 = accept4$packet(r2, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002dc0)=0x14, 0x80000) r4 = dup2(r3, r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000000) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfb03}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000041}, 0x2004001) r5 = syz_open_dev$mouse(&(0x7f0000003040), 0x7, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r4) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000003300)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003100)={0x18c, r6, 0xd80, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x14f5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe1f8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x549f30d4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xa0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb4f5002}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}, {0x4}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8c}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x802) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000003380), r4) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f00000035c0)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003580)={&(0x7f00000033c0)={0x198, r7, 0xc31, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x198}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000003600)={0x0, 0x9, 0x101}) syz_genetlink_get_family_id$ethtool(&(0x7f0000003680), r4) [ 335.080772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.082623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.086754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.094239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.095992] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.097826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.200368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.202065] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.203175] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.205704] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.206830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.207723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.397527] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.409478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.412538] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.414374] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.415864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.418261] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.422963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.431946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.437361] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.438931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.452288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.455039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.456815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.458933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.459870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.472925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.474590] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.475564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.475784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.480579] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.481487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.485322] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.486518] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.486807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.490509] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.492561] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.494292] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.502787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.504252] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.505342] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.116374] Bluetooth: hci0: command tx timeout [ 337.244143] Bluetooth: hci1: command tx timeout [ 337.501135] Bluetooth: hci3: command tx timeout [ 337.501599] Bluetooth: hci5: command tx timeout [ 337.502006] Bluetooth: hci2: command tx timeout [ 337.564286] Bluetooth: hci6: command tx timeout [ 337.564707] Bluetooth: hci7: command tx timeout [ 339.164179] Bluetooth: hci0: command tx timeout [ 339.292145] Bluetooth: hci1: command tx timeout [ 339.549116] Bluetooth: hci2: command tx timeout [ 339.549593] Bluetooth: hci5: command tx timeout [ 339.549998] Bluetooth: hci3: command tx timeout [ 339.612139] Bluetooth: hci7: command tx timeout [ 339.612623] Bluetooth: hci6: command tx timeout [ 341.213439] Bluetooth: hci0: command tx timeout [ 341.340867] Bluetooth: hci1: command tx timeout [ 341.596220] Bluetooth: hci3: command tx timeout [ 341.597148] Bluetooth: hci5: command tx timeout [ 341.597969] Bluetooth: hci2: command tx timeout [ 341.660561] Bluetooth: hci6: command tx timeout [ 341.661399] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 20:18:29 Registers: info registers vcpu 0 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283f165 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800bcbed20 R8 =0000000000000000 R9 =ffffed1001d64046 R10=0000000000000063 R11=6f6c206863696877 R12=0000000000000063 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283f150 RIP=ffffffff8283f1bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d7952d6006 CR3=0000000035912000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff11005c89ebd RCX=ffffffff8199b4db RDX=ffff88803cfd8000 RSI=ffffffff8135d400 RDI=ffff88802e44f608 RBP=dffffc0000000000 RSP=ffff88802e44f5e8 R8 =0000000000000000 R9 =fffff9400018b740 R10=0000000000000000 R11=ffff88803cfd84b8 R12=80000000316e8007 R13=00007f8a94fb8000 R14=ffff88802e44fad8 R15=ffff88802e44f7c0 RIP=ffffffff8135d405 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f520637b108 CR3=0000000037f2c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041846f9740000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000