syzkaller login: [ 56.366873] sshd (238) used greatest stack depth: 24216 bytes left [ 63.545313] sshd (231) used greatest stack depth: 23760 bytes left Warning: Permanently added '[localhost]:63731' (ECDSA) to the list of known hosts. 2024/11/09 16:09:50 fuzzer started 2024/11/09 16:09:51 dialing manager at localhost:46317 [ 68.068797] cgroup: Unknown subsys name 'net' [ 68.159069] cgroup: Unknown subsys name 'cpuset' [ 68.172956] cgroup: Unknown subsys name 'rlimit' 2024/11/09 16:10:07 syscalls: 201 2024/11/09 16:10:07 code coverage: enabled 2024/11/09 16:10:07 comparison tracing: enabled 2024/11/09 16:10:07 extra coverage: enabled 2024/11/09 16:10:07 setuid sandbox: enabled 2024/11/09 16:10:07 namespace sandbox: enabled 2024/11/09 16:10:07 Android sandbox: enabled 2024/11/09 16:10:07 fault injection: enabled 2024/11/09 16:10:07 leak checking: enabled 2024/11/09 16:10:07 net packet injection: enabled 2024/11/09 16:10:07 net device setup: enabled 2024/11/09 16:10:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/09 16:10:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/09 16:10:07 USB emulation: enabled 2024/11/09 16:10:07 hci packet injection: enabled 2024/11/09 16:10:07 wifi device emulation: enabled 2024/11/09 16:10:07 802.15.4 emulation: enabled 2024/11/09 16:10:07 fetching corpus: 0, signal 0/0 (executing program) 2024/11/09 16:10:09 starting 8 fuzzer processes 16:10:09 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000080)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r1, 0x6efce6aecd78ea13, 0xff, 0x9, 0x5565, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x7800, 0x8, 0x1ff, 0x7}}) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000001c0)={0x1f, "c6a51c1d9cb06ebfdd5ecfcc9ff5d9415e5b35589e451525612d80b70650382b5053d3dee5c3696ab79e80962f5a5dc204352df5868b30cc1d7b41d818563a32"}) r3 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x501080) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', r4, 0x2f, 0x0, 0x6, 0xfffff000, 0x2, @empty, @dev={0xfe, 0x80, '\x00', 0x42}, 0x8, 0x1, 0x1, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x8, 0x20, 0x10, @private1, @loopback, 0x8000, 0x8, 0x1f, 0x3ad}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r8) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/keys\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x2000088d) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008880}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000780)={'gre0\x00', r1, 0x40, 0x20, 0x800, 0x6, {{0x16, 0x4, 0x1, 0x5, 0x58, 0x67, 0x0, 0x6, 0x29, 0x0, @empty, @private=0xa010100, {[@rr={0x7, 0x27, 0xd6, [@multicast2, @rand_addr=0x64010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, @private=0xa010102, @multicast2, @broadcast, @rand_addr=0x64010101]}, @end, @noop, @ssrr={0x89, 0x1b, 0xc3, [@loopback, @rand_addr=0x64010100, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @loopback]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000840)={@empty, 0x43, r10}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', r2, 0x29, 0x7f, 0x6, 0xffffcc96, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, 0x20, 0xf864181d11b62a97, 0x1e2, 0x9}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x28044004) 16:10:09 executing program 1: modify_ldt$write2(0x11, &(0x7f0000000000)={0x3ff, 0x1000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x81, 0x0, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x7, 0x8000, 0x4, 0xa418}}) modify_ldt$write2(0x11, &(0x7f0000000140)={0x9, 0x100000, 0x4000, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', r0, 0x0, 0x1, 0x0, 0x7fff, 0x20, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x40, 0x1, 0x5}}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000300)=0x6) socketpair(0x2c, 0x7, 0x5, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000380), 0x4) socketpair(0x6, 0x1, 0xffff6508, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000400)={{{@in6, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f0000000500)=0xe8) modify_ldt$write2(0x11, &(0x7f0000000540)={0x89be, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x9061a264d08f7b76, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000005c0)={'mangle\x00', 0x0, [0x3, 0x8432, 0x1, 0x1, 0x100]}, &(0x7f0000000640)=0x54) socketpair(0x2b, 0x5, 0x6, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r2, 0x29, 0x1f, 0x4a, 0xbac, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x8, 0x7, 0xcb}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'syztnl2\x00', r0, 0x2b, 0x8, 0x7c, 0xd8, 0x0, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x10, 0x6, 0x80}}) r7 = syz_open_dev$mouse(&(0x7f0000000840), 0x7, 0x100) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048001}, 0x4c080) 16:10:09 executing program 2: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x400}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x38d4067a, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x19}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x11}}]}, 0x64}}, 0x20040001) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:pam_console_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080000}, 0x40010) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x0, 0x40) syz_io_uring_setup(0xfbd, &(0x7f0000000580)={0x0, 0x2f35, 0x8, 0x0, 0x1c, 0x0, r4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'erspan0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x2, 0x7fff, {{0x37, 0x4, 0x3, 0x3, 0xdc, 0x68, 0x0, 0x3, 0x2f, 0x0, @private=0xa010102, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x3, 0xc5}, @end, @timestamp_prespec={0x44, 0x54, 0xa, 0x3, 0x7, [{@remote}, {@remote, 0x5}, {@multicast2, 0x6}, {@local, 0xa447}, {@local, 0xfff}, {@rand_addr=0x64010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x1000}, {@remote, 0x7}, {@empty, 0x3}, {@private=0xa010100, 0xeed}]}, @lsrr={0x83, 0x13, 0x5a, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010100, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xf0, 0x1, 0x1, [{@multicast1, 0x7fff}]}, @timestamp_prespec={0x44, 0x34, 0xd3, 0x3, 0xa, [{@rand_addr=0x64010102, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x8}, {@remote}, {@broadcast, 0x10001}, {@rand_addr=0x64010100, 0x1f}]}, @lsrr={0x83, 0x17, 0xc8, [@multicast1, @local, @broadcast, @empty, @multicast1]}]}}}}}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x40, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10001}]}, 0x40}}, 0x40) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r6, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1028}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x80) [ 85.821387] audit: type=1400 audit(1731168609.467:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:10:09 executing program 3: prctl$PR_SET_ENDIAN(0x14, 0x1) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xdaae5546f46bbe22, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x80, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xff, 0x5}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xb1, 0x38, 0xff, 0x40, 0xff}, 0x24, &(0x7f0000000080)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xf9, "a2dcf11cc70a5cd830c1e0da85081246"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xdf, 0x0, 0x6f4, 0x80}]}, 0x5, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x430}}, {0x41, &(0x7f0000000180)=@string={0x41, 0x3, "616c889b0bce899f31b80a1f2b1aaa163c26b14b30900041433ee4eecc0ec1507d187d0b9f69a62938377e0f3b09c37667d2cf49ac3b76b8727730dc6665ba"}}, {0x1a, &(0x7f0000000200)=@string={0x1a, 0x3, "55a489d3858facf3dce86228762a666c3fa4158a2489bc52"}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x0, 0x23, 0x92, {0x92, 0x23, "92464080714a8f7a9652b2622f32c1ebaa1aecc93c7b96a6c49a8b69afb4f37fcfa8080a5c0e7854dbcf45da7e3133b68c97c6080dfcea5136de36bebbf659ba6be7ca8dd43fb419e78cfb86eecae7078e329c1da5a69c8c3888b0140eb3b5f702b9d19e05f30fe16a2604a2f51408ab6b3b61293ec05c2ad6bf36aa227cee883f426e2f12ba0ba89e9d7805bde94708"}}, &(0x7f0000000380)={0x0, 0x3, 0x60, @string={0x60, 0x3, "3d0f22c1669fa3643c6d247924c842b58d7bae50ecdb01f529c160f4d3b4285237e35baabbf410753fd08717c593472729a85bd0e9bda0e53f265f878c8c9cffa4c9efae06cca4cd38be2a24f971214453eafe76e02885e79a45d26aa3d0"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x20, 0xc, 0x55, "f9bbcb230af16ad5fe82f019bf6948fe20abe7240bc83e1ac293a301124122cb5dded93b69a6de8d4b9292edacdc7100a3b9801651f6f7009b49f5a9e0034f7fd4a8bbe74eead7881ca0584df5364667e82e03f046"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x92, {0x90, "6595ca046d8cd62ab8a7dbc2daa17f502b1ca1cc0d709f6766c17dc2bdc364148e8d8ed0d315d1f5dc85aa5304ad10ff62c4df5641a604f872f05cbf12ed77db731a003e8970fb7b94fd4dfffe2dda890fccedb98fd486cbc2ea9276e1ff9c754a0c4d3ffcea9618109255c6b8ed1a9b1ca25f58252ecec046e092e128d3d3a785851f0e928a4c6c63405a1f8565fabc"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x4, 0x80, 0xff, 0x7e0, 0x60, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x40, 0x8000, 0x6, 0x3ff}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'erspan0\x00', &(0x7f0000000780)={'gre0\x00', r1, 0x40, 0x8, 0x10001, 0x2, {{0x24, 0x4, 0x0, 0x20, 0x90, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0x7, 0xdd, [@multicast2]}, @ssrr={0x89, 0x17, 0x91, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x35}, @loopback, @dev={0xac, 0x14, 0x14, 0x31}]}, @noop, @lsrr={0x83, 0x7, 0x1f, [@local]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0xfa, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x84}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010102, 0x2b72}]}, @timestamp_prespec={0x44, 0xc, 0xdc, 0x3, 0x7, [{@broadcast, 0x1000}]}, @lsrr={0x83, 0x7, 0x5a, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1b, 0x46, [@loopback, @dev={0xac, 0x14, 0x14, 0x35}, @loopback, @private=0xa010100, @multicast2, @private=0xa010102]}]}}}}}) syz_usb_connect$cdc_ecm(0x2, 0x4e, &(0x7f0000000880)={{0x12, 0x1, 0x2b7e977e16e5dc54, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x1, 0x8, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x1f, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, 'T'}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8fa6, 0xfffc, 0xfe}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x8, 0x4}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x250, 0x30, 0x1, 0x8, 0xff, 0x3f}, 0x23, &(0x7f0000000940)={0x5, 0xf, 0x23, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0x1, 0xdb}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7f, 0x8, 0x81}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0x7c, 0x5}]}, 0x2, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x813}}, {0xfa, &(0x7f00000009c0)=@string={0xfa, 0x3, "3edaece251943d7111f5d7d2127f2f0d8a024cbb73402dc214f8e2ddf6475afd4a1033aacf53bb21270e355e0cdcd148f513ea63c78f9254db1417b85dc069f382941a31b198f2ff8dbe682f21e9e864a9d00a48ae436c35c41dfad601543e87ac0415c8fd040da794975051e66fcd9119bfa7ddb7dee0aacf2c732d344eaa66b8da639e1facafcd4c49f30fec7f8a440968c7969adf44f36d4a38a504d728f269720e124b197f40d56d7559e20f862e5756de8fea1a8b3a7533ff9a49bf9dc7c496019717dba92dc71197d38ad93600d84aee1e00dc56332e7b1442a033bd6fb71a10e683aa28db647a337320c30775ab1a55a82c38e19d"}}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000b00)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'erspan0\x00', r1, 0x80, 0x40, 0x1f3a, 0x5d6f, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x67, 0x0, 0x40, 0x29, 0x0, @multicast2, @private=0xa010101, {[@noop, @timestamp={0x44, 0x14, 0x3d, 0x0, 0x8, [0xfffffffc, 0x6, 0x0, 0xb4b6]}, @ssrr={0x89, 0xb, 0xd6, [@empty, @local]}]}}}}}) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r5, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004050) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000d40)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000e00)={'sit0\x00', &(0x7f0000000d80)={'syztnl1\x00', r6, 0x2f, 0x9, 0x4, 0x7fffffff, 0x60, @mcast2, @remote, 0x700, 0x20, 0xfffeffff, 0x101}}) mq_open(&(0x7f0000000e40)='ip6tnl0\x00', 0x1, 0x4, &(0x7f0000000e80)={0x5, 0xfffffffffffffffc, 0xffffffffffffffff, 0x7}) socket(0x26, 0x783b2026c3aeee70, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000f40)={'syztnl2\x00', &(0x7f0000000ec0)={'syztnl1\x00', r7, 0x4, 0x0, 0x6, 0x751, 0x0, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x20, 0x5, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000010c0)={'syztnl1\x00', &(0x7f0000000f80)={'syztnl2\x00', r4, 0x80, 0x10, 0x81, 0x9, {{0x3f, 0x4, 0x3, 0x2, 0xfc, 0x65, 0x0, 0xa5, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x54, 0x8, 0x3, 0xf, [{@broadcast, 0x6d}, {@multicast2, 0x9}, {@remote, 0x71d90ac4}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf17}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffffffb}, {@local, 0x6}, {@multicast1, 0x1000}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2c, 0x0, [{0x6, 0x12, "f967ccd3c5f20e3b21677a1573151ae8"}, {0x2, 0x8, "4c50bf4238d1"}, {0x2, 0xc, "0f7b3f3b3dffa059e7b7"}]}, @rr={0x7, 0x1b, 0xe7, [@multicast2, @loopback, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1f, 0x1f, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100, @multicast2, @broadcast, @loopback]}, @end, @ssrr={0x89, 0x27, 0x9b, [@local, @private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0xf}, @remote, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @local]}]}}}}}) 16:10:09 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x8, 0x9eb, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @empty, 0xff00, 0x8000, 0x6, 0x1ff}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', r0, 0x29, 0x1f, 0x0, 0x6, 0x24, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7800, 0x100, 0x4b9}}) socketpair(0x10, 0x6, 0x7, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x28000080}, 0x8000) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@empty, 0x7e, r2}) r4 = socket(0xa, 0x5, 0x9) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x103000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x8000) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x1, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x48001) r6 = socket(0xf, 0xa, 0x6) r7 = socket(0xf, 0x3, 0xfff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6tnl0\x00', r2, 0x2f, 0x94, 0x83, 0x7c, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x40, 0x20, 0x50, 0x60}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x7c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8040801) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc050}, 0x8000) recvfrom(r6, &(0x7f0000000ac0)=""/53, 0x35, 0x40, &(0x7f0000000b00)=@qipcrtr={0x2a, 0x4}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'sit0\x00', r0, 0x2f, 0xed, 0x20, 0x0, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x0, 0x20}}) 16:10:09 executing program 5: r0 = io_uring_setup(0x2dbb, &(0x7f0000000000)={0x0, 0xad98, 0x4, 0x1, 0x8d}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xa00, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x7b8c1a5fe163eff0}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_PROTOINFO={0x4c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x48, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x37}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x6}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}]}}, @CTA_LABELS_MASK={0x10, 0x17, [0x7, 0xffff, 0x9]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x88}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2202}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, {0x8, 0x2, @multicast2}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x14, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x10, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x6b}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x54}, 0x4004014) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/crypto\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x29, 0x7a, 0x0, 0x7, 0x52, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x7800, 0x7ff, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x9, 0x3, 0xf, @private2, @remote, 0x20, 0x40, 0x2, 0x56b}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x2b, 0xda, 0x8, 0xdc, 0x21, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x8000, 0x20, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x86, 0x4, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x8, 0x7, 0x7}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000ac0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x1b8, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, 0x0, 0x10c, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x340080c0}, 0x4000000) r8 = io_uring_setup(0x57b7, &(0x7f0000000c40)={0x0, 0xe1, 0x10, 0x3, 0x280, 0x0, r0}) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28000090}, 0x24000005) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000dc0)={'batadv0\x00', 0x0}) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00), 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r10 = socket(0x0, 0x1, 0x1) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000001500)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001340)={0x150, r11, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x78295aff8159334e}, 0x0) 16:10:09 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2b73, 0x200) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000040)={0x5, "2319450c4525c28c07534278d4197bc8470d5f5482f0411c66e52e0b772146e24d7521b59d938ff3434fe3da54043e0799326f93930e802bde34964a2b8fc60d"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x22}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4041}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r2, 0x29, 0x67, 0x9, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x7800, 0x710, 0x4, 0x8}}) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000300)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x79d2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000096}, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x2, {{0xa, 0x4e20, 0x8, @empty, 0x4}}, {{0xa, 0x4e22, 0x9, @private1, 0x2}}}, 0x108) r4 = socket$inet_udplite(0x2, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000700)=[r0, r1, r4, r1], 0x4) shmget$private(0x0, 0x8000, 0x8, &(0x7f0000ff8000/0x8000)=nil) sendmsg$802154_raw(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f00000007c0)={&(0x7f0000000780)="52838be8e8f970aad14dda60269d070150d96a351c98652f73060cb957d2023abb762db2db21681f21", 0x29}, 0x1, 0x0, 0x0, 0x10}, 0x4080) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000880)={0x0, @isdn={0x22, 0x81, 0x4, 0x1, 0x3}, @phonet={0x23, 0x2, 0xff, 0x3}, @phonet={0x23, 0xff, 0x4, 0x80}, 0x2, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)='ipvlan0\x00', 0x100000001, 0x7}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r3, 0x2f, 0x9c, 0x4, 0x453e, 0x10, @private0, @local, 0x20, 0x20, 0x380, 0x1f}}) semctl$GETZCNT(0x0, 0x3, 0xf, &(0x7f00000009c0)=""/23) keyctl$session_to_parent(0x12) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'ip6_vti0\x00', r5, 0x29, 0x1, 0x5, 0x80000000, 0x1b, @local, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x10, 0x7800, 0x40, 0x3}}) 16:10:09 executing program 7: sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40010) r0 = semget(0x2, 0x0, 0x22) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000140)=""/174) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x800}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7878}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x80, 0x5, 0x22, @dev={0xfe, 0x80, '\x00', 0x37}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x600000, 0x5a8}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0880}, 0x24000000) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000580)={0x0, @xdp={0x2c, 0x0, r1, 0x22}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, @generic={0x23, "a699b4b06b2b877aa0feddecd667"}, 0x4, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)='geneve0\x00', 0x0, 0x0, 0x7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl0\x00', r2, 0x2f, 0x3f, 0x9, 0x5, 0x40, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40, 0x7, 0x5, 0x80}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={0x0, @rc={0x1f, @none, 0x4}, @isdn={0x22, 0x8, 0x2, 0x8, 0x4}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xff}, 0x1f, 0x0, 0x0, 0x0, 0x3b4, &(0x7f00000006c0)='ipvlan1\x00', 0x3, 0xc8, 0x7}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6_vti0\x00', r3, 0x4, 0x0, 0x3, 0x8001, 0x5a, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x40, 0x40, 0x81, 0x7}}) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000840)=""/24) r4 = semget$private(0x0, 0x1, 0x580) semctl$SEM_INFO(r4, 0x0, 0x13, &(0x7f0000000880)=""/137) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000940)={@private2, 0x0}, &(0x7f0000000980)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'sit0\x00', r5, 0x2f, 0x6, 0x8, 0x800, 0x0, @mcast2, @mcast1, 0x7800, 0x80, 0x2400, 0x9}}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008801}, 0x20000000) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000bc0)=[0xf1, 0x1ff, 0x516c, 0x2, 0x5]) semop(r4, &(0x7f0000000c00)=[{0x4, 0xfffa}, {0x0, 0x8001, 0x1800}], 0x2) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4008080}, 0x5004) [ 87.210917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.213015] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.214215] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.217371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.219782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.221506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.267647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.271440] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.273364] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.275834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.277803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.281972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.283811] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.284923] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.286542] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.295754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.304288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.305431] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.324646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.332329] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.340481] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.344463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.347741] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.349084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.405820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.410633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.411782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.420707] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.423969] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.425806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.426811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.428358] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.429078] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.430288] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.431595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.432425] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.442389] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.453570] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.476719] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.477938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.478892] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.484505] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.490385] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.492341] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.500376] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.504453] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.526987] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.528697] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.235750] Bluetooth: hci0: command tx timeout [ 89.365337] Bluetooth: hci3: command tx timeout [ 89.366989] Bluetooth: hci2: command tx timeout [ 89.367649] Bluetooth: hci1: command tx timeout [ 89.491227] Bluetooth: hci4: command tx timeout [ 89.554700] Bluetooth: hci5: command tx timeout [ 89.618275] Bluetooth: hci6: command tx timeout [ 89.619033] Bluetooth: hci7: command tx timeout [ 91.283249] Bluetooth: hci0: command tx timeout [ 91.410208] Bluetooth: hci2: command tx timeout [ 91.410740] Bluetooth: hci1: command tx timeout [ 91.411792] Bluetooth: hci3: command tx timeout [ 91.538357] Bluetooth: hci4: command tx timeout [ 91.602184] Bluetooth: hci5: command tx timeout [ 91.666298] Bluetooth: hci6: command tx timeout [ 91.666610] Bluetooth: hci7: command tx timeout [ 93.330192] Bluetooth: hci0: command tx timeout [ 93.458353] Bluetooth: hci1: command tx timeout [ 93.458443] Bluetooth: hci2: command tx timeout [ 93.459421] Bluetooth: hci3: command tx timeout [ 93.587398] Bluetooth: hci4: command tx timeout [ 93.650250] Bluetooth: hci5: command tx timeout [ 93.714222] Bluetooth: hci6: command tx timeout [ 93.714721] Bluetooth: hci7: command tx timeout [ 95.378204] Bluetooth: hci0: command tx timeout [ 95.506836] Bluetooth: hci1: command tx timeout [ 95.506943] Bluetooth: hci3: command tx timeout [ 95.507467] Bluetooth: hci2: command tx timeout [ 95.635253] Bluetooth: hci4: command tx timeout [ 95.700377] Bluetooth: hci5: command tx timeout [ 95.762199] Bluetooth: hci6: command tx timeout [ 95.763210] Bluetooth: hci7: command tx timeout [ 152.912402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.913284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.913908] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.917662] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.918941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.927399] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.928316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.929893] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.932448] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.933735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.933735] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.934373] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.934677] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.937267] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.937364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.939034] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.940055] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.940361] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.943885] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.945515] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.946592] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.959170] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.961438] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.963005] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.965310] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.969372] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.981521] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.987420] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.988629] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.989952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.991309] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.992603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.994282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.000610] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.001762] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.033861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.056631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.058307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.062290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.072547] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.075448] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.082330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.083875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.084989] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.118280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.258790] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.262199] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.264512] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.962201] Bluetooth: hci6: command tx timeout [ 155.026184] Bluetooth: hci1: command tx timeout [ 155.027191] Bluetooth: hci4: command tx timeout [ 155.091381] Bluetooth: hci0: command tx timeout [ 155.091411] Bluetooth: hci5: command tx timeout [ 155.218316] Bluetooth: hci3: command tx timeout [ 155.346412] Bluetooth: hci2: command tx timeout [ 155.346511] Bluetooth: hci7: command tx timeout [ 157.011271] Bluetooth: hci6: command tx timeout [ 157.074275] Bluetooth: hci4: command tx timeout [ 157.074454] Bluetooth: hci1: command tx timeout [ 157.138363] Bluetooth: hci5: command tx timeout [ 157.139270] Bluetooth: hci0: command tx timeout [ 157.266283] Bluetooth: hci3: command tx timeout [ 157.394447] Bluetooth: hci2: command tx timeout [ 157.395258] Bluetooth: hci7: command tx timeout [ 159.061215] Bluetooth: hci6: command tx timeout [ 159.122470] Bluetooth: hci1: command tx timeout [ 159.124325] Bluetooth: hci4: command tx timeout [ 159.186544] Bluetooth: hci0: command tx timeout [ 159.187051] Bluetooth: hci5: command tx timeout [ 159.315158] Bluetooth: hci3: command tx timeout [ 159.442195] Bluetooth: hci7: command tx timeout [ 159.442244] Bluetooth: hci2: command tx timeout [ 161.106608] Bluetooth: hci6: command tx timeout [ 161.170282] Bluetooth: hci4: command tx timeout [ 161.170308] Bluetooth: hci1: command tx timeout [ 161.234283] Bluetooth: hci5: command tx timeout [ 161.234589] Bluetooth: hci0: command tx timeout [ 161.363252] Bluetooth: hci3: command tx timeout [ 161.490329] Bluetooth: hci2: command tx timeout [ 161.493137] Bluetooth: hci7: command tx timeout [ 212.324747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.327045] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.330274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.345805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.350049] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.351869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.378422] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.381052] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.382930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.388831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.390560] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.392140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.512366] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.516601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.517924] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.519938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.520866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.523876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.525347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.526936] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.531298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.537498] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.541747] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.548348] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.572706] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.582233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.587023] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.614659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.619346] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.645478] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.646655] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.647507] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.675214] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.676740] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.678547] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.683257] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.685860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.706733] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.707825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.715289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.724738] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.726395] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.760510] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.796195] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.835586] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.841841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.845288] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.850606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.419251] Bluetooth: hci1: command tx timeout [ 214.420229] Bluetooth: hci0: command tx timeout [ 214.546727] Bluetooth: hci2: command tx timeout [ 214.674195] Bluetooth: hci3: command tx timeout [ 214.740161] Bluetooth: hci4: command tx timeout [ 214.802264] Bluetooth: hci6: command tx timeout [ 214.866317] Bluetooth: hci5: command tx timeout [ 214.995147] Bluetooth: hci7: command tx timeout [ 216.467158] Bluetooth: hci0: command tx timeout [ 216.467200] Bluetooth: hci1: command tx timeout [ 216.594167] Bluetooth: hci2: command tx timeout [ 216.722216] Bluetooth: hci3: command tx timeout [ 216.786247] Bluetooth: hci4: command tx timeout [ 216.852387] Bluetooth: hci6: command tx timeout [ 216.914155] Bluetooth: hci5: command tx timeout [ 217.043171] Bluetooth: hci7: command tx timeout [ 218.514544] Bluetooth: hci1: command tx timeout [ 218.515267] Bluetooth: hci0: command tx timeout [ 218.642291] Bluetooth: hci2: command tx timeout [ 218.770153] Bluetooth: hci3: command tx timeout [ 218.834150] Bluetooth: hci4: command tx timeout [ 218.899120] Bluetooth: hci6: command tx timeout [ 218.962230] Bluetooth: hci5: command tx timeout [ 219.108119] Bluetooth: hci7: command tx timeout [ 220.562218] Bluetooth: hci1: command tx timeout [ 220.563154] Bluetooth: hci0: command tx timeout [ 220.691162] Bluetooth: hci2: command tx timeout [ 220.818347] Bluetooth: hci3: command tx timeout [ 220.882154] Bluetooth: hci4: command tx timeout [ 220.946361] Bluetooth: hci6: command tx timeout [ 221.012131] Bluetooth: hci5: command tx timeout [ 221.138385] Bluetooth: hci7: command tx timeout [ 275.241625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.243304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.256453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.261665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.269676] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.270898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.293879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.296645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.298410] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.306158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.307843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.309319] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.360381] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.368263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.377451] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.388620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.403181] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.409267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.456621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.464331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.473399] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.489363] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.497280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.499637] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.503300] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.506392] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.512529] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.526749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.554624] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.557463] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.620222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.638099] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.642374] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.650389] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.662705] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.666661] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.675318] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.689313] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.690926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.692640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.710248] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.715352] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.030628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.044681] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.065340] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.120649] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.141502] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.174381] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.330404] Bluetooth: hci1: command tx timeout [ 277.331981] Bluetooth: hci0: command tx timeout [ 277.458200] Bluetooth: hci2: command tx timeout [ 277.587228] Bluetooth: hci3: command tx timeout [ 277.650322] Bluetooth: hci4: command tx timeout [ 277.778377] Bluetooth: hci6: command tx timeout [ 277.970684] Bluetooth: hci5: command tx timeout [ 278.290440] Bluetooth: hci7: command tx timeout [ 279.378797] Bluetooth: hci0: command tx timeout [ 279.378865] Bluetooth: hci1: command tx timeout [ 279.508123] Bluetooth: hci2: command tx timeout [ 279.634153] Bluetooth: hci3: command tx timeout [ 279.698185] Bluetooth: hci4: command tx timeout [ 279.828109] Bluetooth: hci6: command tx timeout [ 280.018146] Bluetooth: hci5: command tx timeout [ 280.338146] Bluetooth: hci7: command tx timeout [ 281.426189] Bluetooth: hci0: command tx timeout [ 281.426283] Bluetooth: hci1: command tx timeout [ 281.555301] Bluetooth: hci2: command tx timeout [ 281.683169] Bluetooth: hci3: command tx timeout [ 281.746173] Bluetooth: hci4: command tx timeout [ 281.874322] Bluetooth: hci6: command tx timeout [ 282.066162] Bluetooth: hci5: command tx timeout [ 282.386151] Bluetooth: hci7: command tx timeout [ 283.474204] Bluetooth: hci1: command tx timeout [ 283.474768] Bluetooth: hci0: command tx timeout [ 283.602164] Bluetooth: hci2: command tx timeout [ 283.730411] Bluetooth: hci3: command tx timeout [ 283.794301] Bluetooth: hci4: command tx timeout [ 283.922226] Bluetooth: hci6: command tx timeout [ 284.114262] Bluetooth: hci5: command tx timeout [ 284.435144] Bluetooth: hci7: command tx timeout [ 337.831412] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.833470] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.835343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.836330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.837586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.838569] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.841994] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.850577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.857246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.857345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.865281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.867191] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.888308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.894772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.909602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.913901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.923101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.925313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.951512] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.955501] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.962015] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.965181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.978512] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.980295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.016376] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.022484] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.023552] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.023976] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.026768] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.027371] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.028394] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.029616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.032171] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.034792] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.036330] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.037478] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.039855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.046579] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.051257] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.060790] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.062487] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.070706] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.070882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.075254] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.077286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.078841] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.080369] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.082112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.924174] Bluetooth: hci1: command tx timeout [ 339.925703] Bluetooth: hci0: command tx timeout [ 339.986372] Bluetooth: hci2: command tx timeout [ 340.050164] Bluetooth: hci5: command tx timeout [ 340.051811] Bluetooth: hci3: command tx timeout [ 340.114253] Bluetooth: hci7: command tx timeout [ 340.178195] Bluetooth: hci6: command tx timeout [ 340.180212] Bluetooth: hci4: command tx timeout [ 341.971283] Bluetooth: hci0: command tx timeout [ 341.971979] Bluetooth: hci1: command tx timeout [ 342.034486] Bluetooth: hci2: command tx timeout [ 342.099470] Bluetooth: hci5: command tx timeout [ 342.100974] Bluetooth: hci3: command tx timeout [ 342.162520] Bluetooth: hci7: command tx timeout [ 342.227141] Bluetooth: hci6: command tx timeout [ 342.228732] Bluetooth: hci4: command tx timeout [ 344.019140] Bluetooth: hci0: command tx timeout [ 344.019644] Bluetooth: hci1: command tx timeout [ 344.083065] Bluetooth: hci2: command tx timeout [ 344.146717] Bluetooth: hci3: command tx timeout [ 344.147463] Bluetooth: hci5: command tx timeout [ 344.210323] Bluetooth: hci7: command tx timeout [ 344.275300] Bluetooth: hci6: command tx timeout [ 344.275776] Bluetooth: hci4: command tx timeout [ 346.068103] Bluetooth: hci0: command tx timeout [ 346.068592] Bluetooth: hci1: command tx timeout [ 346.131219] Bluetooth: hci2: command tx timeout [ 346.195155] Bluetooth: hci5: command tx timeout [ 346.195652] Bluetooth: hci3: command tx timeout [ 346.259278] Bluetooth: hci7: command tx timeout [ 346.324140] Bluetooth: hci4: command tx timeout [ 346.324625] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 16:15:10 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=000000000000009b RCX=ffffffff812f079e RDX=fffffbfff0fdc5e7 RSI=0000000000000008 RDI=ffffffff87ee2f30 RBP=ffff88800f505280 RSP=ffff88802710f4d8 R8 =0000000000000000 R9 =fffffbfff0fdc5e6 R10=ffffffff87ee2f37 R11=0000000000000000 R12=ffffffff85cf6fa0 R13=0000000000000000 R14=0000000000040000 R15=ffff88800f505d10 RIP=ffffffff812f07a8 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb289f44028 CR3=0000000018e40000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=00007fdad803b699 RCX=1ffffffff0c7e7a8 RDX=0000000000000000 RSI=ffffffff81009ad0 RDI=0000000000000007 RBP=00007fdad803b699 RSP=ffff88802e76f760 R8 =ffffffff86bf5fe8 R9 =ffff88802e76f7f8 R10=00007fdad803b000 R11=00000000000c33ea R12=0000000000000000 R13=0000000000000000 R14=ffff88802c2b5280 R15=ffff88800bf642a0 RIP=ffffffff8121f17c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbc277d5c48 CR3=00000000358a0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000