Warning: Permanently added '[localhost]:48494' (ECDSA) to the list of known hosts. 2025/01/05 19:59:05 fuzzer started 2025/01/05 19:59:06 dialing manager at localhost:34561 syzkaller login: [ 69.770658] cgroup: Unknown subsys name 'net' [ 69.876292] cgroup: Unknown subsys name 'cpuset' [ 69.913022] cgroup: Unknown subsys name 'rlimit' 2025/01/05 19:59:26 syscalls: 204 2025/01/05 19:59:26 code coverage: enabled 2025/01/05 19:59:26 comparison tracing: enabled 2025/01/05 19:59:26 extra coverage: enabled 2025/01/05 19:59:26 setuid sandbox: enabled 2025/01/05 19:59:26 namespace sandbox: enabled 2025/01/05 19:59:26 Android sandbox: enabled 2025/01/05 19:59:26 fault injection: enabled 2025/01/05 19:59:26 leak checking: enabled 2025/01/05 19:59:26 net packet injection: enabled 2025/01/05 19:59:26 net device setup: enabled 2025/01/05 19:59:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/05 19:59:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/05 19:59:26 USB emulation: enabled 2025/01/05 19:59:26 hci packet injection: enabled 2025/01/05 19:59:26 wifi device emulation: enabled 2025/01/05 19:59:26 802.15.4 emulation: enabled 2025/01/05 19:59:26 fetching corpus: 0, signal 0/0 (executing program) 2025/01/05 19:59:28 starting 8 fuzzer processes 19:59:28 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\a\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c0c0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20008081) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r7, 0x304, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x8001) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r9) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000005c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x800) 19:59:28 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456}, 0x80000000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r0, 0x80, &(0x7f0000000040)=@ieee802154={0x24, @short={0x2, 0x3}}}, 0x800) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x600, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x3b}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008800) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x700c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40001}, 0x7f6cb2454cc25994) r2 = syz_open_dev$vcsu(&(0x7f0000000380), 0xfffffffffffffffb, 0xe401) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x42010040}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'veth1\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x801) pidfd_send_signal(0xffffffffffffffff, 0x14, &(0x7f0000000500)={0x37, 0xfffffffe, 0x3748}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xac, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x626, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x8}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc010}, 0x4004055) syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x400, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r6) r7 = socket(0x23, 0x2, 0x1) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x40804) 19:59:28 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3b5, 0x2000) write$P9_RWALK(r0, &(0x7f0000000040)={0x3d, 0x6f, 0x2, {0x4, [{0x2, 0x4, 0x3}, {0x4a, 0x4, 0x5}, {0x40, 0x3, 0x6}, {0x80, 0x2, 0x1}]}}, 0x3d) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0xcd, 0x7f, 0x8, 0x44, @loopback, @loopback, 0x7800, 0x10, 0x513a, 0x8000}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2f4, 0x0, 0x302, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe5000000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8001, 0xff, 0xff, 0x4}]}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xaaf}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb7e6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x8000}, 0x40811) r3 = syz_open_dev$vcsu(&(0x7f0000000640), 0x7fff, 0x80000) r4 = syz_open_dev$vcsu(&(0x7f0000000680), 0x7, 0x220000) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x8c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa0}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc010) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000840)=0x8000, 0x4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40082}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x102, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) recvmmsg$unix(r4, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/107, 0x6b}, {&(0x7f0000000a00)=""/52, 0x34}], 0x2}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/69, 0x45}], 0x1, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}], 0x2, 0x1, &(0x7f0000000d00)={0x0, 0x3938700}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000e00)={'ip6tnl0\x00', &(0x7f0000000d80)={'sit0\x00', r1, 0x29, 0x7, 0x3, 0x7, 0x8, @mcast2, @empty, 0x20, 0x10, 0x4b, 0xf6}}) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000f00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}}, 0x4000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000001540)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f0000000f80)={0x550, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x50}, @broadcast, @broadcast, @from_mac, {0x0, 0x8}}, @ver_80211n={0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x10, @val={0x8c, 0x18, {0x7d9, "ca3a46922e71", @long="0e943228e6426485c218037920ad94cd"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0xc0, 0x33, @mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_b, @device_a, @initial, {0x2, 0x8}}, @ver_80211n={0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x4002, 0x2c8c, {0x0, 0xc, @random="826b7fd94b1f4fbd8ad80cb3"}, @val={0x1, 0x4, [{0x6, 0x1}, {0x6}, {0xc, 0x1}, {0x36, 0x1}]}, @void, [{0xdd, 0x86, "03c8bbaa8bf183ff190f1198250cad167bff8246287d7ab8f78ebcfd2e7f53a439e57f6265435bbed56f7f1f762b99c0421c0b586e8ea78a867962384b75442935d6a5c186fae9181db3cf7a0be3d3b24ecca19f7eacb0bab65a6ba25fd13f84ccecfa574ac476160b8e059c01bca1afcbb199278aff922454c60cd5ff41a075874114f7d631"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x428, 0x33, @mgmt_frame=@reassoc_req={@wo_ht={{}, {0x8}, @device_b, @broadcast, @random="9e9c5c197425", {0x4, 0x3f}}, 0x4880, 0x8, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0xdd, "d042ccd17ca7412c94b59f4ea1af2e412661e7eee329ed567803a76577cf71a2884a17289cdbc9edee65e310b1c19492baf167ea0fab757f47ecb5afbc4840fba69d6c0f71c1f51f490e5d36816c45edda34cd835b88d9a0a1c9179cf29388b857063d7228c74fa5fbb048aeafdaeb0efa485c5db8d27d06e0f0c528c0401db291f3b150cf4722517c1e184adc9820362b1049aecdad1e93222e9af7f63bf54c453f7c1079dae2c2b3087703308fd61046d3cee6038fadb9e4c6b5f39972c7388069d72e854bda7302706379b8ecebf4246d918a70ad0163d6e6ab3185"}, {0xdd, 0xcb, "5aa7a25707afc487f687343213356e1fadc7bbf561aca1bc58f31a5b82d60c9dd85aebca74fce66a0397a147808fbc3c4e0965c3b6872e424023664537729c10d93f6444d045ee443be59aafd31137b59d41f9f379fa9653ee5b74e23a72b3d8133f1b65348716f63d7c6f212e9593604a6328451b2462a505cd84c06ce2570947086387c338a4d508079a89d4231aad76994863226633c06ba3e5deb2dc7ef7a6124c2518625e6e8adf09d43958652960a86eb1d315709fcc3515a706d9c69f89cf492e2d301361efe104"}, {0xdd, 0x21, "b120e60582981cd24871693d8ff06668da4c556f08a58cc416a7a3fde368c2147d"}, {0xdd, 0x6e, "b8a4cf25c98723bc27bde55b4bbc33a83a7d84c8f8c6daecf23a362231878d097354f12f39c4191adbfb3ee835afbf224ffc0a5983d23f23a74abe35935d718cc088111abaa11589b3bb24d1795d33f960ce2a5c365b556cb3b8d89cff22ae769b7eb9f54ce445c99c755ba0929f"}, {0xdd, 0xae, "b85b8491ee3e1a764fba8c07c9f33ea6fd56ab355852bbc79a9dfbdf63a31735a5ec5d51f65aa51c25709b237d6b2ef747b0b18e1dd8af6c125945c5a2f88dc1e53feb5422254eb497a0466f39e80dfc5bd08ee2a65b3f8fc51c79530cc7ccb7e073c834b9ae296b96144cc6a0d45753a5b707d1b42a067df79effce09272378aa606b774321b2ec3eca5276d494b1ccc07809caf6976825a4a8e0c70f9ebe8387ebf27746a53c060355069177cd"}, {0xdd, 0xb1, "2ba35b1bf575e4e8762b6e76c60a1aed2ed4f1edcd901e0b8a15f97b828d08528cb7136899f41641bc856e13c649ba45d4eb8dbc1178026ca810c59ecac483d17c2cc00c41009e39e8a2885aca51cda32d7e7c426c79fbafabc9bf3f66ec11c664fc40eae25975f825c729df24de091bf93d1539eff30248295a372d6d08daeb2c1aa0911ac1ea53980cabfdbdd073c78d9ff5c903735f402390fa63e3f1803be0d53e437d9a30ee0a531f8378037330e2"}, {0xdd, 0x37, "23cb61be5aafd99e6fef11d205d56d3a8732ead8796c550ea938de16dd5cdcd9bbc590521ab8ac44a26f869a11932ce3e707919e1b4949"}, {0xdd, 0x8, "d7e523d67855d6a0"}, {0xdd, 0x13, "0e0a27b70d70569c5b91437bbae30ddc1ba61b"}]}}]}, 0x550}, 0x1, 0x0, 0x0, 0x800}, 0x404a000) syz_open_dev$vcsu(&(0x7f0000001580), 0x2, 0x4000) r8 = syz_open_dev$vcsu(&(0x7f0000001600), 0x80, 0x400) syz_genetlink_get_family_id$smc(&(0x7f00000015c0), r8) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001780)) write$cgroup_netprio_ifpriomap(r8, &(0x7f00000017c0)={'macvtap0', 0x32, 0x32}, 0xb) 19:59:28 executing program 3: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x40000000}}, 0x434) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, 0x0, 0x228, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0xd3f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0xfe8e}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x54c}, {0x6, 0x11, 0x8}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x40000040) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x800) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x64}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000081) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r3, 0x72c, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xff, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20001080}, 0x4000000) recvmmsg$unix(r0, &(0x7f0000000800)=[{{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/125, 0x7d}], 0x1, &(0x7f0000000780)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}}], 0x1, 0x40000122, &(0x7f0000000840)={0x0, 0x989680}) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x8100000000000000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000880), 0x7d49868e22d1b142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r5) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, r8, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x8082) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_WRITE={0x17, 0x4, 0x4000, @fd_index=0x2, 0x3, &(0x7f0000000a40)="b22d338a2aa906c4a61b596586", 0xd, 0x1, 0x1}, 0xfffffc79) 19:59:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7, 0x288080) r3 = socket(0xa, 0x5, 0x7fff) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006880)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000001540)=[{&(0x7f0000000180)=""/204, 0xcc}, {&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/47, 0x2f}, {&(0x7f0000001440)=""/221, 0xdd}], 0x6, &(0x7f00000015c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001640), 0x6e, &(0x7f0000001880)=[{&(0x7f00000016c0)=""/170, 0xaa}, {&(0x7f0000001780)=""/211, 0xd3}], 0x2, &(0x7f00000018c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000001a40)=@abs, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000001ac0)=""/197, 0xc5}, {&(0x7f0000001bc0)=""/94, 0x5e}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x4}}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004d00)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000004d40)=""/203, 0xcb}, {&(0x7f0000004e40)=""/255, 0xff}, {&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/28, 0x1c}, {&(0x7f0000005f80)=""/100, 0x64}], 0x5, &(0x7f0000006080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000006140), 0x6e, &(0x7f00000062c0)=[{&(0x7f00000061c0)=""/60, 0x3c}, {&(0x7f0000006200)=""/136, 0x88}], 0x2, &(0x7f0000006300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000006400)=@abs, 0x6e, &(0x7f0000006780)=[{&(0x7f0000006480)=""/81, 0x51}, {&(0x7f0000006500)=""/151, 0x97}, {&(0x7f00000065c0)=""/197, 0xc5}, {&(0x7f00000066c0)=""/163, 0xa3}], 0x4, &(0x7f00000067c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}], 0x7, 0x20, &(0x7f0000006a40)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000006b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006b40)={&(0x7f0000006a80)={0x98, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r12}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x17f}]}, 0x98}, 0x1, 0x0, 0x0, 0x4048000}, 0x8000) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000006c00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r14, &(0x7f0000006cc0)={&(0x7f0000006bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006c80)={&(0x7f0000006c40)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4040040) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000006d00)=""/200) r16 = syz_open_dev$vcsu(&(0x7f0000006e00), 0x3, 0x8102) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006e80), r8) sendmsg$TIPC_NL_NAME_TABLE_GET(r16, &(0x7f0000007040)={&(0x7f0000006e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000007000)={&(0x7f0000006ec0)={0x140, r17, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x435bec63}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2fb2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc38}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd67}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x89}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x95a}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3982}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40000}, 0x40088c1) socket$unix(0x1, 0x1, 0x0) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r18, &(0x7f0000007140)={&(0x7f0000007080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000007100)={&(0x7f00000070c0)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x28048001) setsockopt$inet_tcp_TCP_MD5SIG(r13, 0x6, 0xe, &(0x7f0000007180)={@in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x14, 0x0, "00fcf5a5df32442ab597ab6774cc9dd0606fba00822b53432c031ab2370b6ef2c41c5564a5313e17048053b786329e76fedec43b99704ea9f8686805d8ec0aab108d4d1e2c369a1e6e344282be11ae7f"}, 0xd8) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f00000072c0), r5) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r10, &(0x7f00000073c0)={&(0x7f0000007280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000007380)={&(0x7f0000007300)={0x70, r19, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x2e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) io_submit(0x0, 0x2, &(0x7f0000007680)=[&(0x7f0000007540)={0x0, 0x0, 0x0, 0xb, 0x5, 0xffffffffffffffff, &(0x7f0000007500)="cda41183a5b3f930b1ddafb126b3de6ed5d4b03a224f09", 0x17, 0x5, 0x0, 0x2, r4}, &(0x7f0000007640)={0x0, 0x0, 0x0, 0x4, 0x5, r7, &(0x7f0000007580)="631d939dccd040c7c974f339824ffe2e690c3ffe145b34058519a9d17ea90c09aef3cf056cfb3f73a886934e41b4ae9473c2c7ea6a8fe5e4190d88c751325fb65b0c9b62255d6179de8ff8401c5a1443ee94dc6d9de114b22712c91e02124ff0d80ed269d78ed6715219dee36dfdb5b00faba8ddff9f901146f04cd515ddb260413c8f85798d0dc3c30a85cc6c2b7380ef06bbebba25ea311533", 0x9a, 0x6, 0x0, 0x1, r11}]) [ 90.806646] audit: type=1400 audit(1736107168.318:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:59:28 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4204}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x150, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x40000000000000}, {0xc, 0x90, 0x1d7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xffffffffffff0001}, {0xc, 0x90, 0x2}}]}, 0x150}, 0x1, 0x0, 0x0, 0x840}, 0x4000011) r2 = pidfd_getfd(r0, r0, 0x0) r3 = socket(0xcaf6fcf4abafe28a, 0x6, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r3) recvmsg$unix(r2, &(0x7f0000001680)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000380)=""/115, 0x73}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/131, 0x83}, {&(0x7f00000014c0)=""/229, 0xe5}, {&(0x7f00000015c0)=""/37, 0x25}], 0x5}, 0x10040) r4 = syz_open_dev$vcsu(&(0x7f00000016c0), 0xffffffffd21b9b3d, 0x501400) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000001700)=0x9, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x38, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x49}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x80) process_mrelease(r0, 0x0) recvmsg$unix(r4, &(0x7f0000001bc0)={&(0x7f0000001880), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001900)=""/54, 0x36}, {&(0x7f0000001940)=""/211, 0xd3}, {&(0x7f0000001a40)=""/140, 0x8c}, {&(0x7f0000001b00)=""/12, 0xc}], 0x4, &(0x7f0000001b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x100) syz_genetlink_get_family_id$team(&(0x7f0000001c00), r2) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x4c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048805}, 0x4c090) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x38, r5, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2c00}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0xc884}, 0x4048010) r7 = pidfd_getfd(r2, r0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000002080)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002040)={&(0x7f0000001ec0)={0x180, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc4a4}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xebb5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6392fa60}]}, 0x180}, 0x1, 0x0, 0x0, 0x44004000}, 0x44051) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r2) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x44, r8, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040890}, 0x800) 19:59:28 executing program 6: ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e20, 0x19a, @dev={0xfe, 0x80, '\x00', 0xf}}}, 0x0, 0x0, 0x1d, 0x0, "dc18d33a8a92519ee92e06e4440d5846dc48164b2be8d18f766e7c9e1b598a4ae0e49db284809674b4e77e5876dd6ff6f83d75898e184427d8144a74b3538e471b1c287b4a472f409e72c9a7b9984bfb"}, 0xd8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x101, r0, &(0x7f0000000180)="7e79571a05db0bf4d89081b8d98b855d45867ba50ef3a3c6627da30e59831ccf765525368cd4f9fa92bbbbd5af1a2ed1f7b5c8c3031fd289c5d237d567eea3af148a5f126b52f1a422755a3c0ca2aec88c5032a0e4c97b8d85f8e8a3a7a5c9278b579fc8fe995fa1826d463f7ec5e4e5866e94", 0x73, 0x8}, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x0, 0x6, 0x28, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x7, 0x5, 0x80000001}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x6, 0x7b, 0xd, @mcast1, @dev={0xfe, 0x80, '\x00', 0x24}, 0x7800, 0x29eef0d122c858c3, 0x9, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x29, 0xd8, 0x8, 0x5, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x10000, 0x3}}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x11, 0x7, 0x48, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x1, 0x3}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000840)=0xe8) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000880)={0x810, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r3}, {0xc8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xd4e, 0x4, 0xe5, 0x2}, {0x8, 0x3, 0x1, 0x7f}, {0xef49, 0x34, 0x9, 0x20}, {0x2, 0x40, 0x4}, {0x7, 0x8, 0x3f, 0x9}, {0x6, 0xff, 0x6, 0x2}, {0xed6f, 0x5, 0x9, 0x4}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x95}}, {0x8}}}]}}, {{0x8}, {0x2a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x8000, 0x5, 0x9, 0x4}, {0x8, 0x9, 0x3f, 0x7}, {0x8e7, 0xb7, 0x9a, 0xffff0001}, {0x2, 0x3, 0x1, 0x5}, {0x3, 0x11, 0x2}, {0x1, 0x0, 0x5f, 0x1}, {0x200, 0x0, 0x1f, 0x1}, {0x6, 0x6, 0x6, 0x200}, {0x1, 0xbc, 0x1, 0x101}, {0x3, 0x1, 0x1, 0x1}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa8b6}}}]}}]}, 0x810}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000001240)="48a71a619fd7f840302aa132e98c4d59", 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r10) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000001380)={&(0x7f0000001280), 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x30, r11, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x68}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000894}, 0x4000804) 19:59:28 executing program 7: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1e008100}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x21c, 0x0, 0x130c, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x876}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff01}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000003c0)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, r3, 0x20, 0x70bd2b, 0x40, {{}, {@void, @val={0xc, 0x99, {0x40, 0x63}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000005c0), 0x200000, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x31}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x8004) getsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000700), &(0x7f0000000740)=0x10) r5 = memfd_secret(0x80000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r6, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5b8, 0x41}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0xfe67, 0x2, 0x4, 0x6, 0xfff, 0x9]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6b4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x44850}, 0x20000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r5) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xec, r6, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ef}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2ce63e16}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x152}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80000000}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x20}]}, 0xec}, 0x1, 0x0, 0x0, 0x8}, 0x4008004) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000000d40)={&(0x7f0000000c40), 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x71}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000d80)) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) [ 92.380551] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.385668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.387329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.389018] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.390795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.392254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.403566] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.407323] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.408608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.414988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.416820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.418215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.444375] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.445847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.450313] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.454437] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.456141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.459943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.462780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.474226] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.477608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.479102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.481212] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.494304] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.538917] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.541709] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.543875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.554175] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.554711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.557659] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.559371] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.560860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.561815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.568986] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.570670] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.571878] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.578768] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.593422] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.599518] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.618423] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.620122] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.621225] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.623718] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.625323] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.628569] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.629996] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.637332] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.638885] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.466641] Bluetooth: hci0: command tx timeout [ 94.467457] Bluetooth: hci1: command tx timeout [ 94.530172] Bluetooth: hci2: command tx timeout [ 94.594228] Bluetooth: hci3: command tx timeout [ 94.595007] Bluetooth: hci6: command tx timeout [ 94.659246] Bluetooth: hci7: command tx timeout [ 94.660571] Bluetooth: hci4: command tx timeout [ 94.722209] Bluetooth: hci5: command tx timeout [ 96.514193] Bluetooth: hci0: command tx timeout [ 96.514752] Bluetooth: hci1: command tx timeout [ 96.578259] Bluetooth: hci2: command tx timeout [ 96.643093] Bluetooth: hci6: command tx timeout [ 96.643121] Bluetooth: hci3: command tx timeout [ 96.707159] Bluetooth: hci4: command tx timeout [ 96.707723] Bluetooth: hci7: command tx timeout [ 96.770147] Bluetooth: hci5: command tx timeout [ 98.562583] Bluetooth: hci0: command tx timeout [ 98.562650] Bluetooth: hci1: command tx timeout [ 98.629104] Bluetooth: hci2: command tx timeout [ 98.690314] Bluetooth: hci3: command tx timeout [ 98.693112] Bluetooth: hci6: command tx timeout [ 98.754130] Bluetooth: hci7: command tx timeout [ 98.754265] Bluetooth: hci4: command tx timeout [ 98.818204] Bluetooth: hci5: command tx timeout [ 100.610248] Bluetooth: hci1: command tx timeout [ 100.611133] Bluetooth: hci0: command tx timeout [ 100.683568] Bluetooth: hci2: command tx timeout [ 100.738128] Bluetooth: hci6: command tx timeout [ 100.738164] Bluetooth: hci3: command tx timeout [ 100.802479] Bluetooth: hci4: command tx timeout [ 100.803432] Bluetooth: hci7: command tx timeout [ 100.866187] Bluetooth: hci5: command tx timeout [ 154.830923] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.838570] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.845270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.846847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.854818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.858258] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.860781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.864703] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.866918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.892289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.894868] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.896200] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.978216] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.981909] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.988266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.994204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.996276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.997571] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.031893] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.040106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.042508] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.046219] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.048776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.051583] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.086074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.102597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.116411] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.145274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.149819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.153834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.169984] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.182683] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.187964] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.191812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.202400] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.206510] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.211625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.211627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.214446] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.222237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.242615] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.243862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.289361] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.297407] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.315236] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.347611] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.353637] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.354502] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.930780] Bluetooth: hci0: command tx timeout [ 156.932098] Bluetooth: hci1: command tx timeout [ 157.058133] Bluetooth: hci2: command tx timeout [ 157.122292] Bluetooth: hci3: command tx timeout [ 157.250182] Bluetooth: hci4: command tx timeout [ 157.314149] Bluetooth: hci5: command tx timeout [ 157.442162] Bluetooth: hci6: command tx timeout [ 157.443294] Bluetooth: hci7: command tx timeout [ 158.978255] Bluetooth: hci0: command tx timeout [ 158.978401] Bluetooth: hci1: command tx timeout [ 159.106140] Bluetooth: hci2: command tx timeout [ 159.170266] Bluetooth: hci3: command tx timeout [ 159.299077] Bluetooth: hci4: command tx timeout [ 159.362146] Bluetooth: hci5: command tx timeout [ 159.490152] Bluetooth: hci7: command tx timeout [ 159.490177] Bluetooth: hci6: command tx timeout [ 161.026138] Bluetooth: hci1: command tx timeout [ 161.028201] Bluetooth: hci0: command tx timeout [ 161.156081] Bluetooth: hci2: command tx timeout [ 161.218147] Bluetooth: hci3: command tx timeout [ 161.346134] Bluetooth: hci4: command tx timeout [ 161.410207] Bluetooth: hci5: command tx timeout [ 161.538157] Bluetooth: hci7: command tx timeout [ 161.539693] Bluetooth: hci6: command tx timeout [ 163.075135] Bluetooth: hci0: command tx timeout [ 163.075165] Bluetooth: hci1: command tx timeout [ 163.203257] Bluetooth: hci2: command tx timeout [ 163.266156] Bluetooth: hci3: command tx timeout [ 163.394126] Bluetooth: hci4: command tx timeout [ 163.458147] Bluetooth: hci5: command tx timeout [ 163.586256] Bluetooth: hci6: command tx timeout [ 163.586758] Bluetooth: hci7: command tx timeout [ 216.913680] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.917633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.919942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.925528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.930402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.932506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.175397] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.178680] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.187388] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.194692] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.200443] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.203282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.236620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.247842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.252224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.264636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.270993] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.273171] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.342269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.356781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.368530] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.381257] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.384455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.385909] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.387656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.392674] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.392973] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.393909] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.397770] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.402596] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.404516] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.404558] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.416267] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.418345] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.421755] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.424575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.427952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.440771] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.443477] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.445695] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.447694] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.456186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.475805] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.515812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.546482] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.565653] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.594782] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.598906] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.946378] Bluetooth: hci0: command tx timeout [ 219.267448] Bluetooth: hci1: command tx timeout [ 219.394196] Bluetooth: hci2: command tx timeout [ 219.524139] Bluetooth: hci4: command tx timeout [ 219.525604] Bluetooth: hci3: command tx timeout [ 219.526759] Bluetooth: hci5: command tx timeout [ 219.586221] Bluetooth: hci6: command tx timeout [ 219.778476] Bluetooth: hci7: command tx timeout [ 220.995227] Bluetooth: hci0: command tx timeout [ 221.314531] Bluetooth: hci1: command tx timeout [ 221.442990] Bluetooth: hci2: command tx timeout [ 221.570261] Bluetooth: hci5: command tx timeout [ 221.571320] Bluetooth: hci3: command tx timeout [ 221.572239] Bluetooth: hci4: command tx timeout [ 221.635149] Bluetooth: hci6: command tx timeout [ 221.826260] Bluetooth: hci7: command tx timeout [ 223.042203] Bluetooth: hci0: command tx timeout [ 223.362154] Bluetooth: hci1: command tx timeout [ 223.491410] Bluetooth: hci2: command tx timeout [ 223.618086] Bluetooth: hci3: command tx timeout [ 223.619272] Bluetooth: hci5: command tx timeout [ 223.619809] Bluetooth: hci4: command tx timeout [ 223.682087] Bluetooth: hci6: command tx timeout [ 223.874110] Bluetooth: hci7: command tx timeout [ 225.091094] Bluetooth: hci0: command tx timeout [ 225.411222] Bluetooth: hci1: command tx timeout [ 225.539070] Bluetooth: hci2: command tx timeout [ 225.667125] Bluetooth: hci5: command tx timeout [ 225.667634] Bluetooth: hci4: command tx timeout [ 225.668139] Bluetooth: hci3: command tx timeout [ 225.731146] Bluetooth: hci6: command tx timeout [ 225.923157] Bluetooth: hci7: command tx timeout [ 279.124857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.127181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.133507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.146793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.155528] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.157845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.383797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.387929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.391323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.395918] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.401466] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.404606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.443194] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.451521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.454331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.457422] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.459298] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.465411] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.468303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.472458] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.474540] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.476222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.511964] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 279.513915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.641104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.645656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.648506] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.651928] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.657554] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.665469] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.669483] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.671658] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.683451] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.683946] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.693102] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.698416] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.700414] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.719313] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.731446] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.731568] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.732786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.739289] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.741325] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.743583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.749474] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.751818] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.761372] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.772649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.218216] Bluetooth: hci0: command tx timeout [ 281.474157] Bluetooth: hci1: command tx timeout [ 281.538324] Bluetooth: hci3: command tx timeout [ 281.538429] Bluetooth: hci2: command tx timeout [ 281.801069] Bluetooth: hci7: command tx timeout [ 281.859234] Bluetooth: hci4: command tx timeout [ 281.924346] Bluetooth: hci5: command tx timeout [ 281.925371] Bluetooth: hci6: command tx timeout [ 283.266111] Bluetooth: hci0: command tx timeout [ 283.523076] Bluetooth: hci1: command tx timeout [ 283.586156] Bluetooth: hci2: command tx timeout [ 283.586660] Bluetooth: hci3: command tx timeout [ 283.842348] Bluetooth: hci7: command tx timeout [ 283.906298] Bluetooth: hci4: command tx timeout [ 283.970269] Bluetooth: hci6: command tx timeout [ 283.971106] Bluetooth: hci5: command tx timeout [ 285.314078] Bluetooth: hci0: command tx timeout [ 285.570085] Bluetooth: hci1: command tx timeout [ 285.634123] Bluetooth: hci3: command tx timeout [ 285.634698] Bluetooth: hci2: command tx timeout [ 285.890055] Bluetooth: hci7: command tx timeout [ 285.955125] Bluetooth: hci4: command tx timeout [ 286.018205] Bluetooth: hci5: command tx timeout [ 286.018770] Bluetooth: hci6: command tx timeout [ 287.364040] Bluetooth: hci0: command tx timeout [ 287.620116] Bluetooth: hci1: command tx timeout [ 287.683087] Bluetooth: hci2: command tx timeout [ 287.683556] Bluetooth: hci3: command tx timeout [ 287.940068] Bluetooth: hci7: command tx timeout [ 288.003106] Bluetooth: hci4: command tx timeout [ 288.067257] Bluetooth: hci5: command tx timeout [ 288.068754] Bluetooth: hci6: command tx timeout [ 341.201185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 341.207463] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.213450] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 341.222046] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 341.227699] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 341.231518] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.363145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.367499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.371636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.376891] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.382111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.384342] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.522254] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.526408] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.534262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.547662] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.552384] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.566372] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.648129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.658562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 341.669915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 341.671706] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 341.680514] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 341.704208] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 341.704254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 341.711434] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 341.716890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.720621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 341.755670] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 341.767852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.793410] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.834120] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.847951] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.865460] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.868580] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.882142] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.888430] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.896775] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.899581] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.902400] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.903898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.909320] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.912402] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.915363] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.920868] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.923826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.935583] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.952200] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.298274] Bluetooth: hci0: command tx timeout [ 343.426152] Bluetooth: hci1: command tx timeout [ 343.618154] Bluetooth: hci2: command tx timeout [ 343.810129] Bluetooth: hci3: command tx timeout [ 343.874113] Bluetooth: hci4: command tx timeout [ 344.002168] Bluetooth: hci6: command tx timeout [ 344.002829] Bluetooth: hci5: command tx timeout [ 344.066380] Bluetooth: hci7: command tx timeout [ 345.346157] Bluetooth: hci0: command tx timeout [ 345.475149] Bluetooth: hci1: command tx timeout [ 345.666038] Bluetooth: hci2: command tx timeout [ 345.860031] Bluetooth: hci3: command tx timeout [ 345.922171] Bluetooth: hci4: command tx timeout [ 346.050128] Bluetooth: hci5: command tx timeout [ 346.050626] Bluetooth: hci6: command tx timeout [ 346.114094] Bluetooth: hci7: command tx timeout [ 347.394061] Bluetooth: hci0: command tx timeout [ 347.522049] Bluetooth: hci1: command tx timeout [ 347.714176] Bluetooth: hci2: command tx timeout [ 347.907052] Bluetooth: hci3: command tx timeout [ 347.970169] Bluetooth: hci4: command tx timeout [ 348.098766] Bluetooth: hci6: command tx timeout [ 348.099293] Bluetooth: hci5: command tx timeout [ 348.162130] Bluetooth: hci7: command tx timeout [ 349.442156] Bluetooth: hci0: command tx timeout [ 349.570057] Bluetooth: hci1: command tx timeout [ 349.762064] Bluetooth: hci2: command tx timeout [ 349.954074] Bluetooth: hci3: command tx timeout [ 350.018157] Bluetooth: hci4: command tx timeout [ 350.148039] Bluetooth: hci5: command tx timeout [ 350.148552] Bluetooth: hci6: command tx timeout [ 350.210070] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 20:04:34 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff87eff470 RCX=ffffffff814ff5e7 RDX=fffffbfff0fdfbe5 RSI=0000000000000004 RDI=ffffffff87eff534 RBP=ffff88802b92dd88 RSP=ffff888024caf950 R8 =0000000000000000 R9 =fffffbfff0fdfbe4 R10=ffffffff87efdf27 R11=0000000000000000 R12=0000000000000004 R13=dffffc0000000000 R14=ffff88802b92d340 R15=0000000000000001 RIP=ffffffff814ff51e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4db3df9008 CR3=0000000033e6a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff86823da2 RBX=0000000000000001 RCX=ffffffff86823da2 RDX=0000000000000000 RSI=ffffffff86823d90 RDI=ffffffff864b5c38 RBP=ffff88802d557220 RSP=ffff88802d557158 R8 =ffffffff86823d90 R9 =ffff88802d557208 R10=000000000003aab6 R11=000000000001efe4 R12=ffff88802d557228 R13=ffff88802d557210 R14=ffff88802d557209 R15=ffff88802d5571c8 RIP=ffffffff8134a224 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd594de7028 CR3=0000000034f6e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000