Warning: Permanently added '[localhost]:51306' (ECDSA) to the list of known hosts. 2024/10/30 10:31:56 fuzzer started 2024/10/30 10:31:57 dialing manager at localhost:45639 syzkaller login: [ 70.489745] cgroup: Unknown subsys name 'net' [ 70.620136] cgroup: Unknown subsys name 'cpuset' [ 70.639341] cgroup: Unknown subsys name 'rlimit' 2024/10/30 10:32:14 syscalls: 212 2024/10/30 10:32:14 code coverage: enabled 2024/10/30 10:32:14 comparison tracing: enabled 2024/10/30 10:32:14 extra coverage: enabled 2024/10/30 10:32:14 setuid sandbox: enabled 2024/10/30 10:32:14 namespace sandbox: enabled 2024/10/30 10:32:14 Android sandbox: enabled 2024/10/30 10:32:14 fault injection: enabled 2024/10/30 10:32:14 leak checking: enabled 2024/10/30 10:32:14 net packet injection: enabled 2024/10/30 10:32:14 net device setup: enabled 2024/10/30 10:32:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/30 10:32:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/30 10:32:14 USB emulation: enabled 2024/10/30 10:32:14 hci packet injection: enabled 2024/10/30 10:32:14 wifi device emulation: enabled 2024/10/30 10:32:14 802.15.4 emulation: enabled 2024/10/30 10:32:14 fetching corpus: 0, signal 0/0 (executing program) 2024/10/30 10:32:16 starting 8 fuzzer processes 10:32:16 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x2c, r0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28008801}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000084}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x70, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "2d640bb43a8486965464658208cc6a43"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "06012f28585ff6864f935617ef4acebc"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xfff}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3a}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8c040}, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4048011) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000002940), &(0x7f0000002980)=0xc) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a00)={0x180, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdb4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff79}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x598}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b5d}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x891) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000004040)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004000)={&(0x7f0000003f80)={0x44, r0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x48011) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000004140)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004100)={&(0x7f00000040c0)={0x34, r0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x34}}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000004180), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000004200), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f00000042c0)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004280)={&(0x7f0000004240)={0x2c, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x1) syz_open_dev$vcsn(&(0x7f0000004300), 0x9, 0x1010c0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000004900)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004800)={0x90, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40b9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x78b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe86}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000040}, 0x200c8080) 10:32:16 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x200) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x204, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44890}, 0x48880) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x1, 0xac, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x717b866682968251) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48804}, 0x4000001) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000380), 0x2, 0x0) io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0xc21, r1, &(0x7f00000003c0)="8f9b4482d0e670c2dd0da7f4f1b4b89f4104aa60c8272ade4da277aca497c7d86c9bb29b65a3035a", 0x28, 0x20, 0x0, 0x2}, &(0x7f0000000440)) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000480), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f00000004c0)={'nr0', 0x32, 0x30}, 0x6) io_getevents(0x0, 0x9, 0x1, &(0x7f0000000500)=[{}], &(0x7f0000000540)={0x77359400}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) io_pgetevents(0x0, 0x9, 0x2, &(0x7f0000000680)=[{}, {}], &(0x7f00000006c0)={0x77359400}, &(0x7f0000000740)={&(0x7f0000000700)={[0x1]}, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x15c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff159a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffe00}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x294e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9cd8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1200000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe7b9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x16}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x436}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x174, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x4}]}, 0x174}}, 0x24004010) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000001180), &(0x7f00000011c0)=0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000001200), r0) recvmsg$unix(r0, &(0x7f0000002500)={&(0x7f0000001240), 0x6e, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/220, 0xdc}], 0x2, &(0x7f0000002400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x40000000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002580), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x34, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x9011}, 0x20000010) 10:32:16 executing program 2: clock_adjtime(0x6, &(0x7f0000000000)={0x0, 0x1000000, 0x100, 0x3, 0x7, 0x3, 0x8, 0x8a, 0x4, 0x0, 0x9, 0x5, 0x20000000000, 0x50a, 0xfffffffffffffff7, 0x2b28, 0xffff, 0x1, 0xffffffffffff3533, 0x2, 0x8, 0x401, 0x40, 0x10001, 0x3, 0x3}) clock_adjtime(0x0, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x7fffffff, 0x0, 0x1, 0x400, 0x800, 0x6, 0x76f, 0x1, 0x800, 0x4a3d, 0x6, 0xac, 0x10001, 0x8, 0x2, 0x8, 0x9, 0x3, 0x75, 0xffffffff, 0x0, 0xee24, 0x2}) r0 = socket$inet6(0xa, 0x0, 0x6) recvmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000a00)=@ax25={{0x3, @netrom}, [@netrom, @bcast, @rose, @null, @default, @rose, @default, @null]}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/122, 0x7a}, {&(0x7f0000001b00)=""/101, 0x65}], 0x3}, 0x4}, {{&(0x7f0000001bc0)=@tipc, 0x80, &(0x7f0000003040)=[{&(0x7f0000001c40)=""/235, 0xeb}, {&(0x7f0000001d40)=""/219, 0xdb}, {&(0x7f0000001e40)=""/88, 0x58}, {&(0x7f0000001ec0)=""/104, 0x68}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/211, 0xd3}], 0x6, &(0x7f00000030c0)=""/70, 0x46}, 0x7f}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003140)=""/228, 0xe4}, {&(0x7f0000003240)=""/115, 0x73}, {&(0x7f00000032c0)=""/133, 0x85}, {&(0x7f0000003380)=""/144, 0x90}, {&(0x7f0000003440)=""/59, 0x3b}, {&(0x7f0000003480)=""/118, 0x76}], 0x6, &(0x7f0000003580)=""/119, 0x77}, 0x4}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003600)=""/119, 0x77}, {&(0x7f0000003680)=""/250, 0xfa}], 0x2, &(0x7f00000037c0)=""/253, 0xfd}, 0x1}], 0x4, 0x2000, &(0x7f00000039c0)={0x0, 0x3938700}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000003a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x34, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9c}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000003b80), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000003c40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x38, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0xd080) r3 = accept4(r0, &(0x7f0000003c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000003d00)=0x80, 0x80800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000003e00)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x34, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}}, 0x81) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x24, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008002) r5 = getuid() setreuid(r5, 0x0) r6 = getuid() r7 = getuid() setreuid(r7, r5) syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = getuid() setreuid(r8, r6) socket$nl_generic(0x10, 0x3, 0x10) 10:32:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200448c1}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000300), 0x6e, &(0x7f0000001700)=[{&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000440)=""/106, 0x6a}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/52, 0x34}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/186, 0xba}, {&(0x7f0000001640)=""/172, 0xac}], 0x7, &(0x7f0000001780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000804}, 0x4004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r4) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000002080)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002040)={&(0x7f00000019c0)={0x65c, r6, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x27, 0x33, @mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0x1}}, @sp_mp_open={0xf, 0x1, {0x200, {0x1, 0x5, [{0xc, 0x1}, {0x24}, {0xc}, {0x9}, {0x48, 0x1}]}, @void, @void}}}}, @NL80211_ATTR_FRAME={0x605, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @device_a, {0x1, 0xa00}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x65c}, 0x1, 0x0, 0x0, 0x44001}, 0x20004801) r7 = accept4(r0, &(0x7f00000020c0)=@can, &(0x7f0000002140)=0x80, 0x800) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4801}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x1a}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r8 = accept4(r3, &(0x7f00000022c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000002340)=0x80, 0x81800) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, 0x0, 0xe01, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x81) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000024c0), r2) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r9, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000025c0)={'wg0\x00'}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002640), r2) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f00000027c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002780)={&(0x7f0000002680)={0xf4, r10, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc56e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x317}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb32}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xef73}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb87a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x801}, 0x8000) 10:32:16 executing program 4: sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x10}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x200000cc) getpgid(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1}, 0x1000) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x464}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0xc010) r0 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@phonet, &(0x7f00000003c0)=0x80, 0x80800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000400)=0x0) sched_rr_get_interval(r1, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) io_getevents(0x0, 0x2, 0x4, &(0x7f0000000480)=[{}, {}, {}, {}], &(0x7f0000000540)={r2, r3+10000000}) r4 = accept4(r0, 0x0, &(0x7f0000000780), 0x80000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000010) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x10, 0x7806, 0xfffffffe, 0x9, {{0x21, 0x4, 0x2, 0x37, 0x84, 0x65, 0x0, 0x5e, 0x2f, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x52, [@rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0xc, 0xca, 0x0, 0x3, [0x3, 0x0]}, @rr={0x7, 0x27, 0xdd, [@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast1, @multicast1, @multicast1, @multicast1, @local]}, @lsrr={0x83, 0x1b, 0x2a, [@loopback, @private=0xa010102, @rand_addr=0x64010100, @empty, @multicast2, @local]}, @generic={0x83, 0xf, "15f2c16d4851dfbf393c022b92"}]}}}}}) io_pgetevents(0x0, 0x7, 0x2, &(0x7f0000000a00)=[{}, {}], 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={[0xfffffffeffffffff]}, 0x8}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ac0)=0x0) ptrace$setsig(0x4203, r6, 0x4, &(0x7f0000000b00)={0x2c, 0x800, 0x8}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000000c00), 0xc1, 0x80100) io_cancel(0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x7, 0xffea, r7, &(0x7f0000000b80)="279104a04d1c92bba47225a403784f866b4bd15e6e217901da15ab98cdd00739901e96192aba0c437d7dc0e8fdeaed9965755c3c694f9928defc283cb395a6446196e801241d4c3b99ccd2646be8d579cde5c99de4a78e5276be4b1721cba85372647e37b724fd9796d6ff8462a610cdf58f389588", 0x75, 0x4, 0x0, 0x2, r8}, &(0x7f0000000c80)) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x55) [ 89.096516] audit: type=1400 audit(1730284336.543:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:32:16 executing program 6: r0 = gettid() ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000000)={0x3e, 0x8000, 0xc94b}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000100)=""/90, 0x5a}], 0x1, &(0x7f00000001c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1d4, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffeffff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @private2, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb1d}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ptrace$setsig(0x4203, r0, 0x369cc, &(0x7f0000000540)={0xc, 0x1cb, 0x66b}) prctl$PR_SET_ENDIAN(0x14, 0x0) r3 = getpid() ptrace$setsig(0x4203, r3, 0x48c, &(0x7f00000005c0)={0x2c, 0x1ff, 0x5}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f0000000a40)={0x2, 0x1, 0x18, 0x18, 0x2e, &(0x7f0000000640)="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"}) recvmsg(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000b00)=""/229, 0xe5}, {&(0x7f0000000c00)=""/20, 0x14}, {&(0x7f0000000c40)=""/250, 0xfa}, {&(0x7f0000000d40)=""/12, 0xc}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/38, 0x26}], 0x6, &(0x7f0000001e40)=""/4096, 0x1000}, 0x2) gettid() sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}}, 0x20000040) r5 = accept4(0xffffffffffffffff, &(0x7f0000002f80)=@pppol2tpin6, &(0x7f0000003000)=0x80, 0x101000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000003300)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000032c0)={&(0x7f00000030c0)={0x1e4, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x40, 0x3, "c4cbd4859f66cba7646227b770b61c516ec59bc75b60d3abac74070aa144f9fdb798ccf8fb5b64c93a5871db4d8d16969c2c32e7c2e7df369d25813b"}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4fcd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0xe0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffc0000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb414}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x91}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x60fd}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x22b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbf1e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4855}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x94db}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x20, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) recvmsg$unix(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000003440)=""/229, 0xe5}, {&(0x7f0000003540)=""/66, 0x42}, {&(0x7f00000035c0)=""/125, 0x7d}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x4, &(0x7f0000004680)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}, 0x2040) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f00000048c0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004880)={&(0x7f0000004840)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) socketpair(0x21, 0xa, 0xa6b, &(0x7f0000004900)) 10:32:16 executing program 5: keyctl$session_to_parent(0x12) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8216, 0x440100) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000040)={{0x3, 0x200, 0x4, 0xfffffff8, 0x80, 0x7ff}, 0x33, [0x2, 0x1, 0x0, 0x5, 0x1000, 0x1, 0xffffffff, 0x3, 0x2, 0xffffffff, 0x1ff, 0x2, 0xa172, 0x0, 0x6, 0x5, 0xc5cd, 0x0, 0x100, 0x57d9, 0x80000001, 0xe0b, 0x2, 0x8001, 0x0, 0x3, 0x39372705, 0x779f, 0xef24, 0x6, 0x874e, 0x45daa042, 0x401, 0x80000001, 0x5, 0x7, 0x81, 0xffffffc0, 0x5, 0x7ff, 0x2, 0x7, 0x0, 0x1, 0x3, 0x7fffffff, 0x2, 0x4, 0x6, 0xa43, 0x3ff, 0xe07, 0x5, 0x2, 0x0, 0x1ff, 0x2, 0x2, 0xffffffff, 0x6, 0x2, 0x8001, 0x2, 0x3, 0x0, 0x5, 0x4, 0x3, 0xebd497d, 0xc8b, 0x5, 0x1, 0x2, 0x400, 0xfffffff8, 0x3716747a, 0x6, 0x7, 0x1, 0x7fff, 0x6, 0x200, 0x3f, 0x7, 0x0, 0x0, 0x7, 0x3, 0x8, 0x8, 0xa096, 0x3f800, 0xcff5, 0x79c, 0x1, 0x401, 0x0, 0x7, 0x7fffffff, 0x8, 0x6, 0x780, 0x8, 0x2, 0x80000000, 0x1000, 0x800, 0x2db, 0x4, 0x80000001, 0x6ab, 0x6, 0x9, 0x6, 0x7ff, 0x6, 0xee, 0x3, 0x2, 0x2, 0x401, 0x6, 0x9, 0x800, 0x80000000, 0x6, 0xd8, 0x0, 0x9, 0x81, 0x526, 0x3f, 0x40, 0x3f, 0x7f6e, 0x3cf, 0xfffffb88, 0x6, 0x52a5, 0x1, 0x1, 0x8, 0x10000, 0x7fffffff, 0x1, 0x0, 0x100, 0x1f, 0xffff, 0x4, 0x101, 0xfff, 0xff, 0x0, 0x0, 0x1424, 0x2e7, 0x20, 0x0, 0x4, 0x1, 0xfffffffa, 0x3, 0x0, 0x9, 0x3, 0x8001, 0x2, 0x1, 0x0, 0x8000, 0x10000, 0x8000, 0xd0, 0x7fffffff, 0x624c17f2, 0x40, 0xa27, 0xfff, 0xbc4d, 0x1ff, 0x1ad0, 0x4, 0x7fffffff, 0x6, 0x80000001, 0x6, 0x0, 0x6, 0x0, 0x2387, 0xc9af, 0x66, 0x6, 0x9bb, 0x5, 0x1, 0x8, 0x100, 0x1f00, 0x0, 0x5, 0x4000800, 0x4, 0x2, 0x51be, 0x7f, 0x1, 0x10, 0x9, 0x200, 0x101, 0x200, 0x80, 0x0, 0x7, 0x1, 0x2, 0xfffffff9, 0x6, 0x82, 0x25, 0x0, 0x7fff, 0x8, 0x0, 0x4, 0xf2e, 0x5, 0x81, 0x450, 0x0, 0x2, 0x1, 0xa5, 0xffffffff, 0x1, 0x2, 0x0, 0x0, 0x7, 0x3, 0x7fffffff, 0xc0000000, 0x31, 0x80000001, 0x40000, 0x6, 0x5, 0x2, 0x2, 0x2, 0xa5, 0x4, 0x8, 0x8, 0x9, 0x200, 0xffffffff, 0x80000000, 0x3, 0xff, 0x80000001, 0x7f, 0x7fffffff, 0x3, 0x4, 0x0, 0x401, 0x6, 0x401, 0x2, 0x9, 0x9, 0x3, 0x554000, 0x3, 0x800, 0x1, 0x6, 0x3f, 0x1, 0xfffffc01, 0x2, 0x7f, 0x1, 0x0, 0x9, 0x8, 0x851b, 0x453, 0x1, 0x100, 0x7fff, 0xfffffff7, 0x81, 0x3, 0x0, 0x573f, 0x101, 0x6, 0x6f3, 0xde3, 0x6, 0x1000, 0x8, 0x4, 0x0, 0x1, 0x7, 0x9, 0xb7b05fa3, 0x5, 0x81, 0xfac2, 0x10001, 0xf664, 0x85a, 0x5, 0x80000000, 0x3, 0x5, 0x2, 0x7ff, 0x101, 0x1, 0x8, 0x8c11, 0x3ff, 0x35322869, 0x80000001, 0x8, 0x6, 0x7, 0x6, 0x6c, 0x3, 0x100, 0x0, 0x6, 0x2, 0x3, 0x800, 0x3a, 0x800, 0x0, 0xfffffff7, 0x6, 0x8, 0x7, 0x9, 0x1d, 0x400, 0x5, 0x80000001, 0x1, 0x6886, 0x9, 0xffffffff, 0x9, 0x5, 0x3, 0x3, 0x5, 0x80, 0xffff, 0xfffff185, 0x258, 0x3ff, 0x1, 0xffffffff, 0x4, 0x1, 0x401, 0x2, 0x3f, 0xffff, 0x0, 0x9, 0x68b, 0x0, 0x3ff, 0x3, 0x1000, 0x1, 0x6, 0x746f258, 0x80, 0x5, 0xffffffff, 0x2, 0x2, 0x7, 0x7, 0x8000, 0x10000, 0x2, 0xe2, 0x4, 0x8, 0x80, 0x86, 0x80, 0x50, 0x81, 0x70, 0x92, 0x1, 0x8, 0x1, 0x5, 0x2, 0x1, 0x7, 0x9, 0xa0, 0xffffffff, 0x317f, 0x2, 0x0, 0x80000001, 0xffffff69, 0x3, 0x200, 0x7fff, 0x80, 0x0, 0x1, 0x4, 0xfffffd3b, 0x0, 0x4, 0x4, 0x48af, 0x5, 0x4, 0xb45c, 0x8001, 0x3ff, 0xede9, 0xffffffff, 0x3412, 0x1, 0x9, 0x0, 0x80, 0x80000001, 0xcda2, 0x9, 0x0, 0x6, 0x7, 0x8, 0x5, 0x3, 0x6bff8516, 0x4, 0x65, 0x100, 0x1000000, 0xb7, 0x3, 0x9, 0x7ff, 0x800, 0x0, 0x1, 0xfffffffe, 0x7daa, 0xfff, 0x6, 0x5, 0x80, 0x8, 0x36cf, 0x0, 0x3, 0x80000001, 0x6, 0xdb, 0x47c6, 0x9, 0x80000000, 0xfff, 0x8, 0x8, 0x0, 0x4, 0x1, 0x3, 0x4, 0x81, 0x0, 0x6, 0x7, 0x3, 0x401, 0x1, 0xdbb, 0x1f, 0x5, 0x6, 0x7, 0x7ff, 0x2, 0x7, 0x40, 0x4, 0x454, 0x400, 0x2, 0x0, 0x2, 0x6, 0x1000, 0x3, 0x1ee5c2f, 0x4ef, 0x40, 0x1f, 0x7, 0x8, 0x3, 0x9, 0x1c, 0x9, 0xffff, 0x9, 0x80000000, 0x7ff, 0x4, 0x400, 0x4, 0x0, 0x4, 0x7, 0xaa36, 0x701c, 0x5, 0xffffffff, 0x9a90, 0xfffffffc, 0x1, 0x56b13f49, 0x3, 0xfffffffb, 0x0, 0x4, 0x4c, 0x8, 0x3f, 0x0, 0x89, 0x1, 0x3, 0x0, 0x0, 0x398, 0x1, 0x7f, 0xd0cf, 0x2, 0x8, 0x8, 0x4, 0x1ff, 0x6, 0xad9b, 0x3f, 0x30, 0x80000000, 0x20, 0x7fff, 0x4, 0x1, 0x80, 0x3, 0x800, 0x2, 0x0, 0x7, 0x9c8, 0x7, 0x1, 0x9, 0x844, 0x0, 0x9, 0x7, 0x1f, 0x51, 0xb7, 0xffffffff, 0x0, 0xffffffff, 0x4, 0x96, 0x20, 0x20, 0x800, 0x3, 0x3, 0x13958ce9, 0x8, 0x3, 0x3, 0x6, 0x0, 0x0, 0x2, 0x8, 0x80000001, 0x8, 0x2, 0x7, 0x3f, 0x7fff, 0x0, 0xffffffff, 0x3701, 0x80000000, 0x7f, 0xff, 0x1, 0x1, 0x0, 0x0, 0x6, 0x7, 0x0, 0x7, 0x3f, 0x9b8a, 0x158, 0x6, 0x3, 0x1, 0x1, 0x1ff, 0x1, 0x6, 0x86f, 0x8, 0x4, 0x0, 0x50, 0x10000, 0x3, 0x1, 0x719854e, 0x7, 0x100, 0x1ff, 0x401, 0x10000, 0x7, 0x1ff, 0x1, 0x3ff, 0x7, 0x9e2, 0x5, 0x1000, 0x10000, 0x8, 0x1, 0x10001, 0x1, 0xda4b, 0x48e, 0x400, 0x6, 0x7ff, 0x5, 0x676e, 0xf04, 0x7ff, 0x6, 0x630990f6, 0x3b9f, 0x80000001, 0x8, 0x6c, 0x5, 0xfffffc00, 0x800, 0x101, 0xfcba, 0xffffffb9, 0xe70, 0x8001, 0x7, 0x1000, 0x1, 0xffffff35, 0x8001, 0xffffffff, 0x6, 0x7, 0x0, 0x1, 0x4, 0xb3b, 0x5, 0x7, 0x77c, 0x3, 0x81, 0x8, 0x5, 0x4, 0x1, 0x8, 0x7ff, 0x3, 0x0, 0x7, 0x437, 0x101, 0x8000, 0x6, 0x0, 0xd4, 0x8000, 0x3f, 0x2, 0x5, 0x0, 0xb3, 0xffffffc0, 0x4, 0x7, 0x5, 0x5, 0x0, 0x6, 0xfffffffa, 0x7f, 0xff, 0x9, 0x7, 0x20, 0x200, 0x200, 0x3, 0x9729, 0x1ff, 0x1000, 0x200, 0x9, 0x1000, 0x2, 0x6, 0x0, 0xffffff20, 0x10000, 0x1, 0x2, 0x8001, 0x3, 0x4b8, 0x80000001, 0x0, 0x4156, 0x0, 0xffffffad, 0x7, 0x7, 0x7, 0xffffffff, 0x4, 0x5, 0x4, 0x20, 0x3ff, 0x7, 0xffffffff, 0x80000, 0x1000, 0x3f, 0x101, 0x1, 0x8, 0x10000000, 0x401, 0xf0bc, 0x40, 0x5, 0xba000000, 0xfffffffa, 0x6, 0x7, 0x1, 0xc9f, 0xfffffffa, 0xffff, 0x8, 0x7ff, 0x4b7, 0x1, 0x0, 0x800, 0x5, 0x0, 0x100, 0x6, 0x3ff, 0x5, 0xc19, 0x2000, 0xb716, 0x1, 0x9, 0x4, 0x100, 0x20, 0x200, 0x80, 0x8, 0x7, 0x1000, 0x942, 0x2, 0xffffff1e, 0x10001, 0x7, 0x3, 0xffffffff, 0x5, 0x80000000, 0x1, 0x2, 0x3, 0x6, 0x1, 0x2, 0x200, 0xfffffffe, 0x0, 0x100, 0x3, 0x77058b1b, 0x3, 0x1f, 0x538, 0x4, 0x8, 0x0, 0x2, 0x6, 0x4, 0xcd9e, 0x1, 0xffffffff, 0x3, 0x643d, 0xff, 0x9, 0x1f, 0x400, 0x6, 0x6, 0x938e, 0x3, 0x1, 0xea0, 0x100, 0x8, 0xff, 0x1, 0x7ff, 0x1ff, 0x9, 0x3f, 0xca, 0x81, 0xd53, 0x10001, 0x2, 0x3, 0x2, 0xaa, 0x7, 0xc4, 0x96400000, 0x70000, 0x55f, 0x3f, 0x6, 0x400, 0x69c7f498, 0x1, 0x35dc000, 0xc0, 0x8, 0x4, 0x1, 0x0, 0x8001, 0x9, 0x400, 0x100, 0x80, 0x5, 0x20, 0x1f, 0x3f, 0x1000, 0xb73, 0x401, 0x9, 0x9, 0x3, 0x5, 0x1, 0x81, 0x8, 0x1000, 0x8, 0x5e0e9a51, 0x1ff, 0x10001, 0xfff, 0x7, 0x1, 0x7c000, 0x9, 0x2, 0xfff, 0x7fff, 0x20000000, 0x44, 0x5, 0x8, 0x20, 0x4, 0x20, 0x0, 0x9, 0x0, 0x80, 0x7, 0x9, 0x3, 0x1ff, 0xfff, 0x8, 0x1ff, 0x20, 0x85e, 0x3, 0x80000000, 0x80000001, 0x7, 0x8, 0x401, 0x2, 0x308a, 0x9, 0x5, 0x6, 0x7, 0x1, 0x80000001, 0x876, 0x2, 0x1000, 0x7, 0x3, 0x1, 0x40, 0xac, 0x1000, 0x2, 0x5, 0x4, 0x1, 0x1, 0x4, 0x6, 0x7ff, 0x10001, 0xbfba, 0x37d66f54, 0x1, 0x0, 0x3, 0x8f2, 0x23a, 0x0, 0x7fffffff, 0x6, 0x5, 0x2, 0x2907, 0x9, 0x1f, 0x8, 0x401, 0x7, 0x2, 0x0, 0x63, 0x7f, 0x6bf, 0x3, 0x80000000, 0x40000000, 0xfffffff7, 0x6, 0x400, 0x5, 0xfffff800, 0x61, 0x1ff, 0x9, 0x5, 0x9c1a, 0x6, 0x0, 0x1, 0x118000, 0x1445, 0x6]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000010c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) delete_module(&(0x7f00000011c0)='))\x00', 0x800) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000001240)={0x180, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xacb}]}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "f63bc473f1670c032d8b451093d65cc34f1406fd94da4442a34eb305976e5a6ffe8d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7e0}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x48040}, 0x24000080) r3 = getpid() ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000002440)={&(0x7f0000001440)=""/4096, 0x1000}) syz_genetlink_get_family_id$wireguard(&(0x7f0000002480), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x77af}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020800}, 0x40002) r4 = socket(0x1e, 0x80003, 0x3) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) recvmsg$unix(r4, &(0x7f0000002c40)={&(0x7f0000002980)=@abs, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002a00)=""/249, 0xf9}], 0x1, &(0x7f0000002b40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}, 0x22) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000002c80)=0xc6) socketpair(0x1, 0x6, 0x554, &(0x7f0000005840)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000005940)={&(0x7f0000005880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005900)={&(0x7f00000058c0)={0x24, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x24024880}, 0x24000804) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000005a80)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005a40)={&(0x7f0000005a00)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008008}, 0x4000080) 10:32:16 executing program 7: exit(0x5) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x440) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000040)={0x6f, "dabdc04bffaa5b778d5299481b474f7f86c608f2ec77efdd025d5d82df5cec942c5ac464514248457f9e137edd6c6c105a60f99940483954bf90415e4e51898c6f6360e1c09b9d99b0e729b7117d799cf2c2fdee71849d853de753690bbc421463af146fdc370e4b7e6421e5b3d811"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x20, 0x8, 0x9, 0x5, {{0x17, 0x4, 0x2, 0x2d, 0x5c, 0x68, 0x0, 0x74, 0x0, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0x3f, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@private=0xa010101, 0x400}, {@private=0xa010101, 0x29e}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xdc, [@remote, @dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @empty]}, @cipso={0x86, 0xe, 0x2, [{0x7, 0x8, "dd4de62ddb31"}]}, @end]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}]}, 0x58}}, 0x4890) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) r2 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x1000, 0x84000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x805) ptrace$peekuser(0x3, 0xffffffffffffffff, 0x8) sched_setparam(0x0, &(0x7f0000000540)=0xc4) syz_open_dev$hiddev(&(0x7f0000000580), 0x0, 0x1) r4 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x81, 0x2) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000680)={'ip_vti0\x00', r1, 0x700, 0x10, 0xf029, 0x8, {{0x15, 0x4, 0x3, 0x9, 0x54, 0x66, 0x0, 0xb, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, {[@noop, @timestamp_prespec={0x44, 0x3c, 0x78, 0x3, 0x9, [{@private=0xa010100, 0xb7c}, {@rand_addr=0x64010101, 0x7}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x2}, {@local, 0x7}, {@multicast1, 0x5}]}]}}}}}) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000800)={0x0, 0x0, 0xffffffffffffffff, 0x9}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, r8, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x40}}, 0x1) [ 90.456399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.466488] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.468520] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.471401] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.487402] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.489309] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.500298] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.501307] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.527216] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.531831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.558845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.563329] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.565504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.570263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.577932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.583315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.584502] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.594251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.598744] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.600156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.601001] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.601991] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.603089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.612728] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.614844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.615814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.617427] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.618447] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.627280] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.628248] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.629013] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.630581] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.631338] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.632159] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.636574] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.637689] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.641636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.652534] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.655148] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.659078] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.660727] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.677860] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.679335] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.679679] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.686478] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.687467] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.688533] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.689406] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.677673] Bluetooth: hci6: command tx timeout [ 92.678622] Bluetooth: hci4: command tx timeout [ 92.679973] Bluetooth: hci3: command tx timeout [ 92.680679] Bluetooth: hci0: command tx timeout [ 92.681324] Bluetooth: hci1: command tx timeout [ 92.743099] Bluetooth: hci7: command tx timeout [ 92.743780] Bluetooth: hci5: command tx timeout [ 92.744445] Bluetooth: hci2: command tx timeout [ 94.725691] Bluetooth: hci6: command tx timeout [ 94.726674] Bluetooth: hci3: command tx timeout [ 94.727365] Bluetooth: hci1: command tx timeout [ 94.727849] Bluetooth: hci0: command tx timeout [ 94.728422] Bluetooth: hci4: command tx timeout [ 94.789207] Bluetooth: hci7: command tx timeout [ 94.789769] Bluetooth: hci2: command tx timeout [ 94.790492] Bluetooth: hci5: command tx timeout [ 96.774332] Bluetooth: hci6: command tx timeout [ 96.774913] Bluetooth: hci0: command tx timeout [ 96.775643] Bluetooth: hci4: command tx timeout [ 96.776190] Bluetooth: hci1: command tx timeout [ 96.776681] Bluetooth: hci3: command tx timeout [ 96.837172] Bluetooth: hci5: command tx timeout [ 96.837738] Bluetooth: hci2: command tx timeout [ 96.838336] Bluetooth: hci7: command tx timeout [ 98.822432] Bluetooth: hci4: command tx timeout [ 98.824221] Bluetooth: hci6: command tx timeout [ 98.825501] Bluetooth: hci3: command tx timeout [ 98.826854] Bluetooth: hci1: command tx timeout [ 98.827962] Bluetooth: hci0: command tx timeout [ 98.885163] Bluetooth: hci7: command tx timeout [ 98.887274] Bluetooth: hci2: command tx timeout [ 98.888943] Bluetooth: hci5: command tx timeout [ 153.177557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.179493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.189181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.194686] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.199953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.209828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.304678] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.308609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.311004] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.316328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.320800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.323073] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.370069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.372758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.377577] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.389888] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.395590] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.397879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.439105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.445482] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.449276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.462283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.483691] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.488347] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.517805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.531245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.540712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.545075] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.550505] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.552730] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.593052] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.603586] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.606577] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.608625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.615317] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.616301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.618177] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.623426] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.625612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.636474] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.639306] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.641644] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.644604] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.652428] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.654697] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.673229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.676166] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.679264] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.269232] Bluetooth: hci0: command tx timeout [ 155.400083] Bluetooth: hci1: command tx timeout [ 155.461221] Bluetooth: hci2: command tx timeout [ 155.589248] Bluetooth: hci3: command tx timeout [ 155.653242] Bluetooth: hci4: command tx timeout [ 155.718134] Bluetooth: hci6: command tx timeout [ 155.781145] Bluetooth: hci5: command tx timeout [ 155.782101] Bluetooth: hci7: command tx timeout [ 157.318062] Bluetooth: hci0: command tx timeout [ 157.445381] Bluetooth: hci1: command tx timeout [ 157.511124] Bluetooth: hci2: command tx timeout [ 157.637138] Bluetooth: hci3: command tx timeout [ 157.701088] Bluetooth: hci4: command tx timeout [ 157.766090] Bluetooth: hci6: command tx timeout [ 157.829249] Bluetooth: hci5: command tx timeout [ 157.829349] Bluetooth: hci7: command tx timeout [ 159.366206] Bluetooth: hci0: command tx timeout [ 159.494105] Bluetooth: hci1: command tx timeout [ 159.558103] Bluetooth: hci2: command tx timeout [ 159.686269] Bluetooth: hci3: command tx timeout [ 159.749278] Bluetooth: hci4: command tx timeout [ 159.814094] Bluetooth: hci6: command tx timeout [ 159.878125] Bluetooth: hci5: command tx timeout [ 159.878149] Bluetooth: hci7: command tx timeout [ 161.413220] Bluetooth: hci0: command tx timeout [ 161.541132] Bluetooth: hci1: command tx timeout [ 161.605148] Bluetooth: hci2: command tx timeout [ 161.733313] Bluetooth: hci3: command tx timeout [ 161.797135] Bluetooth: hci4: command tx timeout [ 161.861416] Bluetooth: hci6: command tx timeout [ 161.927096] Bluetooth: hci5: command tx timeout [ 161.927623] Bluetooth: hci7: command tx timeout [ 215.504201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.510149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.523747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.544362] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.547102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.548811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.759198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.762318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.763670] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.772587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.774221] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.775309] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.838612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.842775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.843921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.855736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.859828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.862389] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.912250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.916252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.917638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.919159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.920854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.925732] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.928246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.932124] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.948218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.951262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.965318] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.972471] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.978261] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.979267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.985769] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.987482] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.989103] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.000722] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.008637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.019025] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.020689] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.021756] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.038238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.046158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.052689] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.054309] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.055534] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.058497] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.060397] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.062298] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.606206] Bluetooth: hci0: command tx timeout [ 217.797105] Bluetooth: hci1: command tx timeout [ 217.925117] Bluetooth: hci2: command tx timeout [ 218.055229] Bluetooth: hci4: command tx timeout [ 218.057050] Bluetooth: hci3: command tx timeout [ 218.117295] Bluetooth: hci6: command tx timeout [ 218.118391] Bluetooth: hci7: command tx timeout [ 218.119054] Bluetooth: hci5: command tx timeout [ 219.653102] Bluetooth: hci0: command tx timeout [ 219.845098] Bluetooth: hci1: command tx timeout [ 219.973224] Bluetooth: hci2: command tx timeout [ 220.101158] Bluetooth: hci3: command tx timeout [ 220.101210] Bluetooth: hci4: command tx timeout [ 220.165253] Bluetooth: hci6: command tx timeout [ 220.165801] Bluetooth: hci5: command tx timeout [ 220.167047] Bluetooth: hci7: command tx timeout [ 221.701279] Bluetooth: hci0: command tx timeout [ 221.895104] Bluetooth: hci1: command tx timeout [ 222.021146] Bluetooth: hci2: command tx timeout [ 222.149373] Bluetooth: hci3: command tx timeout [ 222.149941] Bluetooth: hci4: command tx timeout [ 222.213163] Bluetooth: hci7: command tx timeout [ 222.213725] Bluetooth: hci6: command tx timeout [ 222.214405] Bluetooth: hci5: command tx timeout [ 223.750313] Bluetooth: hci0: command tx timeout [ 223.941133] Bluetooth: hci1: command tx timeout [ 224.069281] Bluetooth: hci2: command tx timeout [ 224.199114] Bluetooth: hci3: command tx timeout [ 224.199664] Bluetooth: hci4: command tx timeout [ 224.261915] Bluetooth: hci5: command tx timeout [ 224.263081] Bluetooth: hci6: command tx timeout [ 224.263564] Bluetooth: hci7: command tx timeout [ 277.909618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.912440] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.930888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.935350] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.937707] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.940806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.943923] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.945195] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.947029] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.947704] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.956323] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.963564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.171581] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.181385] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.183855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.189746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.192157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.196370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.201479] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.205170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.220698] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.223410] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.228487] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.228593] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.232355] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.247754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.251737] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.253412] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.255685] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.259418] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.343680] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.354896] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.378403] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.408469] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.410833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.419124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.421429] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.429541] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.456644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.502969] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.505481] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.510931] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.512780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.518472] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.521090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.533624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.611264] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.626829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.005093] Bluetooth: hci1: command tx timeout [ 280.006109] Bluetooth: hci0: command tx timeout [ 280.262284] Bluetooth: hci3: command tx timeout [ 280.325287] Bluetooth: hci4: command tx timeout [ 280.325339] Bluetooth: hci2: command tx timeout [ 280.581165] Bluetooth: hci6: command tx timeout [ 280.775052] Bluetooth: hci5: command tx timeout [ 280.901258] Bluetooth: hci7: command tx timeout [ 282.053826] Bluetooth: hci1: command tx timeout [ 282.053857] Bluetooth: hci0: command tx timeout [ 282.309228] Bluetooth: hci3: command tx timeout [ 282.373267] Bluetooth: hci2: command tx timeout [ 282.374888] Bluetooth: hci4: command tx timeout [ 282.629088] Bluetooth: hci6: command tx timeout [ 282.821375] Bluetooth: hci5: command tx timeout [ 282.949128] Bluetooth: hci7: command tx timeout [ 284.101212] Bluetooth: hci0: command tx timeout [ 284.101251] Bluetooth: hci1: command tx timeout [ 284.358276] Bluetooth: hci3: command tx timeout [ 284.421212] Bluetooth: hci2: command tx timeout [ 284.423513] Bluetooth: hci4: command tx timeout [ 284.679038] Bluetooth: hci6: command tx timeout [ 284.869094] Bluetooth: hci5: command tx timeout [ 284.997125] Bluetooth: hci7: command tx timeout [ 286.149062] Bluetooth: hci0: command tx timeout [ 286.149655] Bluetooth: hci1: command tx timeout [ 286.407129] Bluetooth: hci3: command tx timeout [ 286.469227] Bluetooth: hci4: command tx timeout [ 286.469457] Bluetooth: hci2: command tx timeout [ 286.726104] Bluetooth: hci6: command tx timeout [ 286.917081] Bluetooth: hci5: command tx timeout [ 287.045063] Bluetooth: hci7: command tx timeout [ 340.248542] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.252183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.254293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.258142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.259671] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.260701] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.308560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.312486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.320697] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.328081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.330499] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.331613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.372648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.376613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.378438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.382696] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.386188] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.387361] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.431634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.447087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.452258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.455297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.457074] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.458365] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.571936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.577836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.593208] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.594551] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.601170] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.601742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.611362] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.618923] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.636920] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.643781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.647192] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.650246] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.659257] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.663164] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.667154] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.676463] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.678894] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.679608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.679798] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.689984] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.697615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.698434] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.742021] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.749577] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.278143] Bluetooth: hci0: command tx timeout [ 342.406302] Bluetooth: hci1: command tx timeout [ 342.472113] Bluetooth: hci3: command tx timeout [ 342.472153] Bluetooth: hci2: command tx timeout [ 342.790491] Bluetooth: hci4: command tx timeout [ 342.792076] Bluetooth: hci6: command tx timeout [ 342.792392] Bluetooth: hci5: command tx timeout [ 342.853278] Bluetooth: hci7: command tx timeout [ 344.325125] Bluetooth: hci0: command tx timeout [ 344.454258] Bluetooth: hci1: command tx timeout [ 344.517073] Bluetooth: hci2: command tx timeout [ 344.518390] Bluetooth: hci3: command tx timeout [ 344.839042] Bluetooth: hci5: command tx timeout [ 344.840439] Bluetooth: hci6: command tx timeout [ 344.841730] Bluetooth: hci4: command tx timeout [ 344.902021] Bluetooth: hci7: command tx timeout [ 346.373181] Bluetooth: hci0: command tx timeout [ 346.501370] Bluetooth: hci1: command tx timeout [ 346.565211] Bluetooth: hci2: command tx timeout [ 346.567067] Bluetooth: hci3: command tx timeout [ 346.885339] Bluetooth: hci4: command tx timeout [ 346.886887] Bluetooth: hci6: command tx timeout [ 346.887016] Bluetooth: hci5: command tx timeout [ 346.951998] Bluetooth: hci7: command tx timeout [ 348.422060] Bluetooth: hci0: command tx timeout [ 348.549184] Bluetooth: hci1: command tx timeout [ 348.613269] Bluetooth: hci3: command tx timeout [ 348.613385] Bluetooth: hci2: command tx timeout [ 348.933359] Bluetooth: hci5: command tx timeout [ 348.935040] Bluetooth: hci4: command tx timeout [ 348.935116] Bluetooth: hci6: command tx timeout [ 348.998090] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 10:37:26 Registers: info registers vcpu 0 RAX=ffffffff8181743a RBX=0000000000000009 RCX=0000000000000001 RDX=0000000000092cc0 RSI=0000000000000011 RDI=ffff888029c974d8 RBP=dffffc0000000000 RSP=ffff888029c97408 R8 =0000000000000001 R9 =ffff888027f68a38 R10=ffffffff863f274f R11=00000000000c2f81 R12=0000000000000011 R13=ffff888029c97490 R14=00000000000000e8 R15=0000000000092cc0 RIP=ffffffff813e9149 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff75cc68260 CR3=000000002f466000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=000000000000000d RCX=ffffffff816dc622 RDX=ffff888034781b80 RSI=ffffffff816dc688 RDI=ffffea000022de74 RBP=ffffea000022de40 RSP=ffff888027f87810 R8 =0000000000000001 R9 =fffff94000045bc6 R10=000000000000000d R11=00000000000007e0 R12=ffff888027f8796c R13=ffff888027f879d8 R14=dffffc0000000000 R15=ffff888027f87a48 RIP=ffffffff816dc68c RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2c82318008 CR3=000000003080e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000