Warning: Permanently added '[localhost]:36098' (ECDSA) to the list of known hosts. 2025/01/13 22:47:04 fuzzer started 2025/01/13 22:47:05 dialing manager at localhost:35571 syzkaller login: [ 63.111214] cgroup: Unknown subsys name 'net' [ 63.224489] cgroup: Unknown subsys name 'cpuset' [ 63.261280] cgroup: Unknown subsys name 'rlimit' [ 68.821156] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 78.542923] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/13 22:47:21 syscalls: 200 2025/01/13 22:47:21 code coverage: enabled 2025/01/13 22:47:21 comparison tracing: enabled 2025/01/13 22:47:21 extra coverage: enabled 2025/01/13 22:47:21 setuid sandbox: enabled 2025/01/13 22:47:21 namespace sandbox: enabled 2025/01/13 22:47:21 Android sandbox: enabled 2025/01/13 22:47:21 fault injection: enabled 2025/01/13 22:47:21 leak checking: enabled 2025/01/13 22:47:21 net packet injection: enabled 2025/01/13 22:47:21 net device setup: enabled 2025/01/13 22:47:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/13 22:47:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/13 22:47:21 USB emulation: enabled 2025/01/13 22:47:21 hci packet injection: enabled 2025/01/13 22:47:21 wifi device emulation: enabled 2025/01/13 22:47:21 802.15.4 emulation: enabled 2025/01/13 22:47:21 fetching corpus: 0, signal 0/0 (executing program) 2025/01/13 22:47:24 starting 8 fuzzer processes 22:47:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8040) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x712, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1800}, 0x4890) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2b}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}]}, 0x44}, 0x1, 0x0, 0x0, 0x8042}, 0x4040004) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x84, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0xfe}]}, 0x84}}, 0x2) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x2e5102c90f87cb4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x4e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0), r0) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}}, 0x400c1) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x21400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x178, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x757}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1b1419a7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4ad58279}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf37}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000a80)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0x7f, 0x401, {{0x1b, 0x4, 0x0, 0x8, 0x6c, 0x68, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x45, [@multicast2, @private=0xa010100, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x1b}]}, @timestamp={0x44, 0x2c, 0x59, 0x0, 0x7, [0xffffffff, 0x2, 0xbd, 0x3f, 0x400, 0x0, 0x3603, 0x8000, 0x1, 0x81]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b80)={0x158, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x158}}, 0x4000000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xac, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x1}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x5}, {0x4, 0x9}, {0x1, 0x6}, {0x3, 0x4}, {0x0, 0x5}, {0x6, 0x5}, {0x6, 0x3}, {0x2, 0x5}, {0x1, 0x1}, {0x6, 0x9}, {0x4, 0x4}, {0x1}, {0x6, 0x3}, {0x2, 0x6}, {0x6}, {0x4, 0x6}, {0x0, 0x5}, {0x3, 0x5}, {0x1, 0x9}, {0x6, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x0, 0x7}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1f, 0xbc00, 0x1, 0x5, 0x6d3, 0xfff, 0x81]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x3}, {0x2, 0x9}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x3}, {0x7, 0x3}, {0x2, 0xa}, {0x2, 0x7}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x3, 0x2}, {0x6, 0x8}, {0x1, 0x4}, {0x2, 0x4}, {0x2, 0x2}, {0x4}, {0x4, 0x8}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x2, 0x5}, {0x5, 0x6}, {0x7, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x2, 0x4}, {0x0, 0x2}, {0x0, 0x4}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xecb}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x20008000}, 0x44) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x6}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000041) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000001280)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001240)={&(0x7f0000001040)={0x1e0, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a52}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5669848}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf086}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4803}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2a1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8bcd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x1e0}}, 0xc0004) 22:47:24 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000080)={'full', 0x20, 0x6, 0x20, 0x8}, 0x2f) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040000) sched_getparam(0xffffffffffffffff, &(0x7f0000000240)) socketpair(0x8, 0x0, 0xffffff09, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8, 0x40, 0x3, 0x0, {{0x1e, 0x4, 0x0, 0x8, 0x78, 0x66, 0x0, 0x8, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x2b, 0x8f, [@local, @broadcast, @loopback, @broadcast, @loopback, @empty, @local, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010102]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x2, 0xe, "f668cd211b21caa2b2fd92ce"}, {0x2, 0x3, "ef"}]}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x17, 0x8e, [@multicast2, @rand_addr=0x64010102, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x88, 0x5, 'sM7'}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x700, 0x7800, 0xff81, 0x8, {{0x30, 0x4, 0x2, 0x4, 0xc0, 0x67, 0x0, 0xff, 0x2f, 0x0, @empty, @loopback, {[@rr={0x7, 0x13, 0x6c, [@broadcast, @local, @private=0xa010100, @remote]}, @generic={0x297a0e3f2fe9bc21, 0xc, "c474e77dc267b07c058c"}, @timestamp_addr={0x44, 0xc, 0xf3, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x34, 0x32, 0x3, 0x3, [{@rand_addr=0x64010101, 0x9}, {@multicast1, 0x401}, {@local, 0xb414}, {@empty, 0xfffffffc}, {@local, 0x7ff}, {@empty, 0xdc}]}, @ssrr={0x89, 0x1b, 0x60, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x37}, @empty]}, @lsrr={0x83, 0x23, 0x86, [@rand_addr=0x64010101, @remote, @multicast2, @loopback, @loopback, @multicast2, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xd}]}, @rr={0x7, 0xb, 0xad, [@loopback, @loopback]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x4, 0x40, 0x1, 0x1ff, 0x30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x7800, 0xbc00, 0x7fffffff, 0x1cf8ec0e}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001100)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000780)={0x904, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xdc7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8, 0x7, 0x81}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc8000000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x14e8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r10}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1e04}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x64}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r11}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x904}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x45f, 0x1e}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1c}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="3e030b78f66f"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048800}, 0x880) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), r2) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000001480)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x134, r12, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xae4}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8001, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @mcast1, 0xfff}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x15}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x41584a5c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000050) 22:47:24 executing program 0: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x17, &(0x7f0000000000)=@generic={0x1, 0x2, 0xf, "92a86417", "fb1c14768d91208a20b9f4c1305cff"}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) timer_create(0x5, &(0x7f0000000200)={0x0, 0x1a, 0x1, @thr={&(0x7f0000000140)="0121ee59bfbd9df8a0ac223c2a735bb763afa8b8103a733d51b9af7552d3d4cc10b500f0f5e3ae9c974a063d019ea2a80e25a21efe57648532e53040f8131c2c4c55469b56d7b2071ee0f08d1dd401555cf44aadb4cc22fcc1064d220bb8c07746b66cf5d71dcb12de4faf0c7d8a041490e14be125c85f2714d60c136a7f", &(0x7f00000001c0)="e2403cb598c0a6d5cc809648e0c43111d65287be99701323ccaa"}}, &(0x7f0000000240)=0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3f, 0x14}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x80) timer_gettime(r0, &(0x7f00000003c0)) socketpair(0x1e, 0x80000, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r3 = syz_usb_connect(0x2, 0x54d, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x63, 0xe5, 0x14, 0xb7, 0x471, 0x2088, 0x50d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53b, 0x1, 0x2, 0x90, 0x40, 0x0, [{{0x9, 0x4, 0xaa, 0x2, 0xc, 0xb9, 0x98, 0x27, 0x8, [@generic={0x6c, 0x7, "e43c8c2d56e0a6d1be7db7733be44afedd46f44af6bc1fb1d8559d5808a518db659d0ba7e0a660f9fc4d63471c75bb075925859e5e63096e16ea89a588a177238d705a4b73777f8f39577e78155b416286ee5b98572687d693d2e38cc5a68e407929e3af8ff1b394a71a"}], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x7, 0x4, 0x3f, [@generic={0xd0, 0x27, "9179a76383b5a4cc5ff8fc9feb5fc6e8a88782171293cfe2d9a52b6471e707c0543a46b9d19c6b73c7742f5b6341ff86cb14738567f6b40bf8d1ddb9f29394c523557463d66377b866d86461427d5e18006bf6320b8cb51ac1049e12b2d70c49fa6cb16ac2726fbb0eafed924757d91611e592e822a08e5a9ee0797979890656b69dbe3a0062b2f7cfa4687ca8b8b295666ab29b892b8885c25b74771e2988258611359f819f9fbf07d6915f710837c00452a26c22c6fe3e28a96aa245c01a92dfaba2f81cbc1e095e5ac1c1b0ce"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x6, 0xc4, 0xfd, [@generic={0xce, 0x22, "28a4bfd8b5b1bfe63c8b11ff0e83c4f076b7aac013f07b6c3d182b930b84f8d29d2eddaafa6ebbd0fb80285fc2f9790656848e23a5da58a80b1c8e3f33e1f7cd3378368fa0c5b6d0892fcd0c26a50af2b5f22d66719751d72630099517bd38d9e2f75c4c6d2b95a810a20e6105958a0864b3b522b294d144be11b21c5e7c767c46f3c8660c55a4af93d3339edfe51c5febfa06195e98ecd987ff09bf20c2c4e6dcbf989cde9cbe1a7be38a509d32a596289ea2281b436f10d8aaa57e6273e7d69ca57a3ef7ab6b441bfc907f"}, @generic={0xf3, 0x22, "bef7d8d3f598b53b6ef75ffbb3c967c8a909d85d2d6400f3ade5cdac9ff9129746449faf06fdf3a525a475033025c46ac6947f59159dc34817e57f2237ee11f2226d2be7aa57340a9a84499a3685ba7ebbe567fcda22fc388d7ab84b4f1d299a8a62963a03ed572b07dd773a1e041bb1ad20759bc1b4ac0cffa25ff2f18c774e50a211c8aafe906a70b915778f67b7a7a369a0d76c19cc610538dbf3fc37cdf27d519725267499646ce10ade1a949a9c9198f8586cedfbe8ea43bb2224c94d542b7aa747b806d69a2857bcd8bf0cf12db2fcdc736c95833a7c4cb524fadf5bfad61ae7dabd5b29e8bf572d3db4daf250b9"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x0, 0x80, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0xdd36}, @generic={0x47, 0x30, "0662a22efc2bcbe721c53764c2863f8eeac47dae2b840119cde0c7135314f8de0a5ce7545db90d6beb556dd6e5b8d6d295e82b5c1414b5c936ca9fa5e5b58169155e11a823"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x7f, 0x82, 0xad, [@generic={0xd0, 0x3, "c91b63794ac3ea801ede5a47b46d5e10c84f1a842349575ec954e205728b2ace5c1c73a901922674040a792949df52e6324d720d50f049ab370ecbbe60b98db7512995adb29e6129fd185589a06e5ebef8c61e3db794f2820814e57d54b7d0bae144f2d637a614199c95429ac4272b5c26b01712695d682d34736772d536c26f722f0aa7b9fd0e0d7318275b671a12fffc7f4320aa8f4b0d6d235dd50e659503824a73f491d4c4affe67916a9950556184cb8682718ffac3a259b365cf33bd45cb892a849a3a237c6fb83f05ff3d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x4, 0x7}}, {{0x9, 0x5, 0xb, 0x1, 0x7ff, 0x85, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x8}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x5, 0x1f, 0x8}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x4, 0x2, 0x97, [@generic={0x94, 0xc, "c486203404f159eaea3b0a362ef917d016020ef0b77d1c571f51141c7ede54c74450b8e73fb8c282150ca512577b9cb43e4c938fc919b6d409b4ee23331d7a7a40bfd8f4e1b8f4e30460fd36c0e53b6ced56dd0e0eda1c6350e0ddd9f40cc8a72fb296806faf88b457d050abf80431e73c691fa83a9f61cb36a16e5894cc9e8c16d5e41a6fe584a4257b5f4c57e3341e80af"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x3, 0x1, 0x58}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0x69, 0x4, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x9, 0xf0, 0xe5}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x110, 0x3, 0x9, 0x1}, 0x5, &(0x7f0000000ac0)={0x5, 0xf, 0x5}, 0x9, [{0xaa, &(0x7f0000000b00)=@string={0xaa, 0x3, "2e3b166849ace552b92532c8acb44170d50e6dc2c7ecda5f0dacb4bf424128971de28106f27350a89e448fac078ef00676250f5ce70ae7e184bf76c6437fb5a0bd2ef54add37d095067cde369eee9cb4772ed72442087845f4ea3a28fda9bf4c7508e230ad0949170e88633fb28f68f85ddc6254a284cd9799eec06355ad2bfc8082ad1d4a7aa64b4cfadd447dce435066d9b6a391667c71d2670658d484d36a7e9561930c2e3077"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x41f}}, {0x7b, &(0x7f0000000c00)=@string={0x7b, 0x3, "16a9fd8a294d7fc5b9a295a47012b774c36b2fac35e02ce7d318e90b5c7806b8f4cecb83d2b2270868368fad93e9304152258269d07cef3ea08d2d1f127e35080f7d5dbb092f8575615897b9e0b412cef72d56ced6296631856ff1b461d6ab28cdbcc26d8195606a2aaffc38386d9a958df7cbde3349f7e8bf"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x411}}, {0x3d, &(0x7f0000000cc0)=@string={0x3d, 0x3, "6d00be95a3c8856c45cdba75c74326c2aa649acb1bd89afa5255fb7b88d9a75186691030cc59d20c162eb7edaf1824c06d28f94a375ebe8ffbb962"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x4ff}}, {0x102, &(0x7f0000000d40)=@string={0x102, 0x3, "a69b309f8c8ff8d51234554cf0be100e4eb15ce3bdeccdc584190817829c4b9d129ae2dc7dae9bbe014b0016f7e266a42c680789ff45044bb8a4688516ac3f6fb2fd91efa321992fdcc6452b6b09eab91a7cebfbb2923629b27d6a6652557862a1b7be59862951b97c3f83cdd39e8712de74e8b07e9e6637e34b926ddf8c362b95d99c688e6106156d2d55909e318dd39d1a3fb5d0e49b86194e0d85a29ab01575ffe3dd92a833626c82e18c35167873b1d1de78c1bde5020ed541195db080e6a04837e85ebfeca8618ab76aabc4190557119b89deabfc8ef625db26746728ea809f298e6b64c435befa0bac9cd8dd819b43e1259c7ab49cf284cd1addb88d79"}}, {0x6a, &(0x7f0000000e80)=@string={0x6a, 0x3, "695134906483a90a0b70cf09ad1255afe97603bcf4b814c2b7018fc4ee6f8bd807c905951a2084f5b93a3a39c61110b4a2f1a337463fea5120e00f6378de106c2ff30e94cfb3f0e9555eced8ab5a6d51f7c31dfc745f33ebce5f97e516fd6da9d0ddb1d0fec96544"}}, {0xb0, &(0x7f0000000f00)=@string={0xb0, 0x3, "1e97102abbb835ed11ead42b730be549f37d1212aa95675b8311e96dc9476f1debbdd5a40b039f967bd45557d423770e2cf629934fcb334e2e396d75b29920d177ea958777fee63f3509949e4d082045bb0fb914e2686cdf513157fe3dae05b3c66cf16d3c49646bb93cdf0c1db1bf37c5ae57d6d8535ccc4e4258f9d61a9ee176d4b6392087a2408f6b16c787d9b9d4b07cba2972807a26cec5029caefdb4c7bde0c3ca61fb24fd65413faed4f6"}}]}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xaa, &(0x7f0000001080)=@generic={0x6, 0x2, 0xa2, "16436a06", "561c8330b4c2130c4650f5c9fe63ba1564a46e3835887e9e9e5f31416e2d6faff3f94a12592b6e046a084ae6fd4acdd55152c050f1fcddad4941f9ba59779561cbd8154c019034e5e288ce9b46ace8bc03360409cd3acf9f74edd3f2c3165d633acfe19abd29dd7c44000c8ede6ed4e8c9e4c2e7de3f11ee9f630adf8960bd02489db5818fe5d85351de2bfe14e741f33e690c08a71cb02c7c08f539ad204bc6b3fe"}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net/icmp6\x00') sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000001540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f00000011c0)={0x308, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "46ebb01b9faf72c385db67100659b32b07d8d85978c705"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1a}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbb8d3d5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x510bb13f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x570}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80000000, @mcast2, 0x80}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @mcast1, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4040800}, 0x20008084) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0xac, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x31c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x917}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000040}, 0x4041) socketpair(0xf, 0x4, 0x5, &(0x7f0000001740)={0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000001700), r5) timer_gettime(r0, &(0x7f0000001780)) r6 = getpid() write$cgroup_pid(r4, &(0x7f00000017c0)=r6, 0x12) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x2) 22:47:24 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x10, 0x0, &(0x7f0000000040)="068e235ca579ef1ca5851d00cd804349"}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x32c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x17}]}, @TIPC_NLA_NODE={0x1e4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x47, 0x3, "32c614c3cc62b36426c2945c49c8d0df348384e2b22b75c5b46a41cfe7182e01514c171faf0cb6ab7fedcfe5d23795e5f30273ecf9864d9449f42ec6e475066c530161"}, @TIPC_NLA_NODE_ID={0xff, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "9dae10272063c1a77fd29cba1a9c56794f143701cf8ec226ff"}}, @TIPC_NLA_NODE_ID={0x4f, 0x3, "73d24eaf980d79705fde423b0bb68ed69d980f58e33c7557311a3c781ddce2c1185f5a7196bfa777f2bae52e7ce09ef06303f3034de890a2037c5aa635a22de60150d325250e25ec074456"}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7aac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1ff, @private1, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x20040001}, 0x48c0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa4, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x52}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x24048000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2e4, r4, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x52}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff801}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xce5d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x300}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "4c8777f5cca72fd82d9aaf694659ad27e578f8c948c7e3427882"}}, @TIPC_NLA_NODE_ID={0x5d, 0x3, "048fc33107946af68714c979d23072d5494068421a6f80567f952a8c10f3491770d63b9f4bb7005a2cfc2e1aa61510ba09f15a52f406c88b9d39c8a46117eef087cf3d887805ad304111d54c1959a6219648ec9119a9fbab5f"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "0dca31f5fd51dec21856ce63635c7f6a8ef2c4a54067dfa97e68b2b3a4f0b984"}}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x5081}, 0x40010) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400202}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xac, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8811}, 0x80) syz_genetlink_get_family_id$team(&(0x7f0000000dc0), r3) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e00)='fd/4\x00') mq_notify(r6, &(0x7f0000000f40)={0x0, 0x18, 0x4, @thr={&(0x7f0000000e40)="a4e27f824c3d006cca977bf8989991bd9ea79d4195d29932dcdf7c3b2b546a1fade80f136c60a46327ee353aaf2e144cb59ba6fc76110220e2a73223ab224d24ff6df7fc91b9343c11b428ecccf8d938884deb1a21af21c6208fa489f49a6a5a1caebeba6867f8f535313d0fe2634483eff1e1f25f1b70ada68d7fa071c129782642685a38ed", &(0x7f0000000f00)='0n'}}) socketpair(0x1d, 0x4, 0x5, &(0x7f0000000f80)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r3) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000001580)={&(0x7f0000000fc0), 0xc, &(0x7f0000001540)={&(0x7f0000001040)={0x4d4, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8c, 0x3, "389d692f72ec2ab2c4b4b7e53ddaa8e9399aafd40eedd7f71e01475b937d182901dad0d1e3757d8383cd3fb44b088f9a051f73b6cfb3a745af723d5b026765687d8bec4e55c10461c51f0937dd90d5498b0b8ba1f01a26bf7c46d78fbbc59a219a6e3fdf19c9593d770d8980cc6d1397fee55730e7fa915caefb319463a6c3899ed9b10c85c7c4e8"}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "3bd186f543b2d62469f079079338dd3c6ce9efe2a9"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "5a6cb97dd362d939579662cd4226bdd26a1f939a89f1efb14a7197"}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x343, @loopback, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd6, 0x3, "8ce7ce8f2c5a7829b400c88cd9fbce44ea2ca84fd59e69403b42030ed68c4a26181387699cb9607f3048187f5ebc69da37b0684746345a31028cfc39fd34dc7065db7ed9121bc7dce5b303e52ca45bfe588b247cfd5c434d4d3b93106f77b44fa6215524d0d9eb3c7778090066d2df1f8f1f00918683a9e687834bfe5fdddb43c3604f8da6a121f8914e13bf1c65928c01c0d2589435fa304c0f1d10efa76f1eacec0af14116e70e66709c40a682821d5c0a7a88937b9628c6d20b64ba5f72796904adba3780b451c120d57848348e0ba51b"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x168, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xea5b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7df886bd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x120}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x944}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x24000010}, 0x20) [ 81.111230] audit: type=1400 audit(1736808444.200:7): avc: denied { execmem } for pid=274 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:47:24 executing program 4: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000005) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000340)={0x694, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1, 0x8d, 0x81, 0xbfd}, {0xa3, 0x3, 0x2, 0x11b42d3e}, {0x5e8, 0x6a, 0x6}]}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5d41}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}]}, 0x694}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004000) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400820}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b80), 0x200000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r5) r6 = getpid() r7 = syz_open_procfs(r6, &(0x7f0000000c40)='net/udp6\x00') sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001000)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000cc0)={0x2e4, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b69}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe3b4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @remote, 0x800}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9e, @private2, 0xfffffffe}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2b1ee0cd, @mcast2, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @private0, 0x3f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0x2e4}}, 0x4040000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x7c, r8, 0x600, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10000, 0x8}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "20992c912924da7cbd8a7a5fe2929611"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "1f81800a19a94201872de48eb3d0bc31"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6a7c8cda5cdf0ba1fc9441c4a13d14e9"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20048040}, 0x2004c0d1) 22:47:24 executing program 5: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x851}, 0x4004801) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x75}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c1394bc9cd59"}]}, 0x64}, 0x1, 0x0, 0x0, 0x40011}, 0x20004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r3, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0xe}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000014) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x2040, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r3, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x64e, 0x80}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4c}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x48}}, 0x40000) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x248, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "93c93045418be607d9c2acd3ea0b1cf9"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "3930abc7b1ae77b1f247a4981d99b384351a83f891716e483f86ad32db6c"}}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "775ec43753f5cca57f2242450aaa0abc8d98d4868d32d47dfb12367beef6cb8c240d47b78d7e7c0168467d8227f00536516c700159b45e36ab4af7ef7de7cd63e15fb871bce88079551dd1b8b042bcc2712101f9d7e45b34af35eb1aa51799c89ac045708cbf0d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffdfac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe941}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r4) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b80)={0x174, r5, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf4d}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xec3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4088800}, 0x8044) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000ec0)={&(0x7f0000000d80), 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a67e319caae2"}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), r4) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f00000012c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001280)={&(0x7f0000000f80)={0x2e0, r7, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ID={0x84, 0x3, "3785928676f56350568556aaa527213a00ab39263e6b366665f3991550fc54c56425635626787396717c3fa1ca4d5b93947479dbdb13eb19b6ed87a546e3b961e571c86b318c7553de443458878dd53052070d1335bd5c74af1f4f41333f81672194d304e2c3f7bd849252f259810ccf9aae0a97e829ace904869804556c68a3"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "94fb004cf439b410625b107f3b2c2d638920410cb4d35fdd438a34041c74c616114d8eb4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x68e}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xac}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x16, 0x3, "ba0e95bde4a51cbe3529cdd6d2fada06b250"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe, 0x3, "33ff2f2afb513d5a2344"}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x8040}, 0x4000011) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001300), r8) 22:47:24 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4a000}, 0x20000000) socketpair(0x11, 0x5, 0x6, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r6, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5e}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'gretap0\x00', r7, 0x80, 0x8, 0x1f, 0x1bc8, {{0xf, 0x4, 0x1, 0x22, 0x3c, 0x68, 0x0, 0x0, 0x29, 0x0, @remote, @multicast1, {[@lsrr={0x83, 0x27, 0x9, [@multicast1, @local, @remote, @private=0xa010100, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000006c0)={0x200}, 0x4) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80040c1) syz_io_uring_setup(0x4e9b, &(0x7f0000000800)={0x0, 0x3fca, 0x20, 0x0, 0x39a, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000880), &(0x7f00000008c0)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000900)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x1, 0x7, 0x0, 0x7, 0x0, 0x1}, 0x8) getgroups(0x9, &(0x7f0000000940)=[0x0, 0xee01, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) getgroups(0x1, &(0x7f0000000980)=[r9]) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000a80)={0x8, 0x0, &(0x7f0000000a00)=[@acquire={0x40046305, 0x2}], 0x31, 0x0, &(0x7f0000000a40)="36a5135edfc2d0bdfb1dfb9224ed62ac4ddd2a8ad8ee69ea1c646ddfe584567bb46e71a028b0f5bb5e6ec890016719af7b"}) 22:47:24 executing program 7: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x1) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x154, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000480)={0x0, "02b4df"}, 0x6) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'gre0\x00', r0, 0x20, 0x700, 0x5, 0x96, {{0xf, 0x4, 0x1, 0x5, 0x3c, 0x68, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0x8, 0x4b, 0x0, 0xb, [0x80]}, @timestamp={0x44, 0x20, 0x24, 0x0, 0x3, [0x80000001, 0x1ff, 0x5, 0x6, 0x2400, 0x2, 0xc1]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x98, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000004) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x151000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000800)={'syztnl1\x00', r0, 0x40, 0xc050, 0xffff, 0x8000, {{0x2f, 0x4, 0x2, 0x9, 0xbc, 0x65, 0x0, 0x3, 0x4, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x28, 0x1, [{0x1, 0x2}, {0x5, 0xc, "6be27e94e8dbb145010a"}, {0x5, 0xb, "873e7a5e4b0c2e05ac"}, {0x7, 0x3, "a9"}, {0xfdff4e4c6de0ddad, 0x4, 'U6'}, {0x1, 0x2}]}, @rr={0x7, 0x1f, 0xf5, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @private=0xa010102]}, @ssrr={0x89, 0x3, 0xb9}, @lsrr={0x83, 0x2b, 0xce, [@dev={0xac, 0x14, 0x14, 0x39}, @multicast2, @multicast1, @multicast1, @empty, @empty, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x20}, @local]}, @timestamp_prespec={0x44, 0x2c, 0xe7, 0x3, 0x1, [{@remote, 0x7fffffff}, {@broadcast, 0x2}, {@broadcast, 0x3ff}, {@empty, 0x71c6}, {@loopback, 0x7}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'ip6gre0\x00', r0, 0x29, 0x3f, 0x2, 0x8a, 0x52, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x20, 0x700, 0xfff, 0x7}}) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f00000010c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000000a40)={0x608, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r4}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x418d}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r4}, {0xb0, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x20, 0xfd, 0x6, 0x9}, {0x4, 0x4, 0x8}, {0x9, 0x5, 0x0, 0x3f}, {0x2, 0x7, 0x0, 0x4}, {0x4, 0x80, 0x2f, 0x1000}, {0x0, 0x9, 0x0, 0x2e2}, {0x1, 0x6, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x248, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf00}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcf}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x400, 0x9, 0x8, 0x2000}, {0x8, 0x1, 0x81, 0x1}, {0x7, 0x1, 0x7, 0x8}, {0x2f99, 0xfc, 0xd, 0x1}, {0x3, 0x5, 0x71, 0x8ad}, {0x3dbb, 0xde, 0x81, 0x7ff}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r0}}}]}}]}, 0x608}, 0x1, 0x0, 0x0, 0x4000004}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000001100), r9) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000001400)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001180)={0x20c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf4fb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x148, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000000}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e4c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe5d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12be}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fac}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3e21}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x66632ad9c6cae67c}, 0x140) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x38, r10, 0x108, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x35}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x15}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8000) [ 82.247756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.249379] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.250865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.260246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.262343] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.265035] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.623374] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.635149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.638109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.642119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.645270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.646944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.648296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.653737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.655204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.657862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.660539] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.662931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.664649] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.665973] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.667660] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.668846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.670114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.671332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.714492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.716017] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.718618] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.719302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.721985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.723318] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.727249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.728759] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.731042] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.732211] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.736966] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 82.738000] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 82.761906] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.767019] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.767572] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.776014] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.777174] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.796826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.804643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.805091] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.808688] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.809429] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.814265] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.816070] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.340214] Bluetooth: hci0: command tx timeout [ 84.723122] Bluetooth: hci2: command tx timeout [ 84.723483] Bluetooth: hci1: command tx timeout [ 84.723965] Bluetooth: hci3: command tx timeout [ 84.788905] Bluetooth: hci4: command tx timeout [ 84.788964] Bluetooth: hci7: command tx timeout [ 84.915046] Bluetooth: hci5: command tx timeout [ 84.915399] Bluetooth: hci6: command tx timeout [ 86.386885] Bluetooth: hci0: command tx timeout [ 86.770894] Bluetooth: hci2: command tx timeout [ 86.771000] Bluetooth: hci3: command tx timeout [ 86.771102] Bluetooth: hci1: command tx timeout [ 86.834870] Bluetooth: hci4: command tx timeout [ 86.835804] Bluetooth: hci7: command tx timeout [ 86.964760] Bluetooth: hci6: command tx timeout [ 86.964781] Bluetooth: hci5: command tx timeout [ 88.435780] Bluetooth: hci0: command tx timeout [ 88.818987] Bluetooth: hci1: command tx timeout [ 88.820774] Bluetooth: hci3: command tx timeout [ 88.820865] Bluetooth: hci2: command tx timeout [ 88.882892] Bluetooth: hci7: command tx timeout [ 88.882940] Bluetooth: hci4: command tx timeout [ 89.010914] Bluetooth: hci6: command tx timeout [ 89.010961] Bluetooth: hci5: command tx timeout [ 90.482920] Bluetooth: hci0: command tx timeout [ 90.866862] Bluetooth: hci2: command tx timeout [ 90.867054] Bluetooth: hci1: command tx timeout [ 90.867127] Bluetooth: hci3: command tx timeout [ 90.931028] Bluetooth: hci7: command tx timeout [ 90.931360] Bluetooth: hci4: command tx timeout [ 91.058861] Bluetooth: hci5: command tx timeout [ 91.058887] Bluetooth: hci6: command tx timeout [ 142.710052] syz-executor.0 (279) used greatest stack depth: 24336 bytes left [ 145.284907] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.287931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.288849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.291175] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.294150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.294484] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.301835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.305811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.306266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.306563] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.307547] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.313448] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.367201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.372118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.376345] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.378449] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.380966] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.384036] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.384599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.387177] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.389451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.391236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.405411] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.406955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.408351] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.408619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.409849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.410328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.415203] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.415534] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.419878] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.420104] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.424547] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.424770] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.425020] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.429531] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.431916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.435312] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.438882] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.440224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.440563] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.441067] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 145.517958] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.529089] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.537092] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.541298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.555887] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.570954] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.378913] Bluetooth: hci0: command tx timeout [ 147.380239] Bluetooth: hci1: command tx timeout [ 147.506996] Bluetooth: hci2: command tx timeout [ 147.507506] Bluetooth: hci6: command tx timeout [ 147.508175] Bluetooth: hci4: command tx timeout [ 147.508414] Bluetooth: hci5: command tx timeout [ 147.508637] Bluetooth: hci3: command tx timeout [ 147.634981] Bluetooth: hci7: command tx timeout [ 149.428906] Bluetooth: hci1: command tx timeout [ 149.429059] Bluetooth: hci0: command tx timeout [ 149.555331] Bluetooth: hci3: command tx timeout [ 149.555632] Bluetooth: hci5: command tx timeout [ 149.556663] Bluetooth: hci4: command tx timeout [ 149.556783] Bluetooth: hci6: command tx timeout [ 149.556854] Bluetooth: hci2: command tx timeout [ 149.683869] Bluetooth: hci7: command tx timeout [ 151.474947] Bluetooth: hci1: command tx timeout [ 151.476223] Bluetooth: hci0: command tx timeout [ 151.604796] Bluetooth: hci3: command tx timeout [ 151.605624] Bluetooth: hci5: command tx timeout [ 151.606277] Bluetooth: hci2: command tx timeout [ 151.606328] Bluetooth: hci6: command tx timeout [ 151.606376] Bluetooth: hci4: command tx timeout [ 151.731176] Bluetooth: hci7: command tx timeout [ 153.522929] Bluetooth: hci0: command tx timeout [ 153.523839] Bluetooth: hci1: command tx timeout [ 153.650833] Bluetooth: hci4: command tx timeout [ 153.650941] Bluetooth: hci6: command tx timeout [ 153.650993] Bluetooth: hci2: command tx timeout [ 153.651041] Bluetooth: hci5: command tx timeout [ 153.651088] Bluetooth: hci3: command tx timeout [ 153.778836] Bluetooth: hci7: command tx timeout [ 207.180074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.181492] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.182916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.187442] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.189203] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.190237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.306010] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.308874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.309523] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.310809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.312529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.314798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.317201] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.317598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.322150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.326092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.327214] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.338364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.352848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.355638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.364509] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.368399] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.370525] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.372202] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.388554] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.408961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.413151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.423800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.426903] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.428800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.432791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.442033] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.456011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.467769] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.482894] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.484043] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.499372] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.509020] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.542786] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 207.547533] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.562707] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 207.564270] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 207.566545] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 207.568164] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 207.569285] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 207.570386] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.572348] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 207.574857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.267827] Bluetooth: hci0: command tx timeout [ 209.395318] Bluetooth: hci2: command tx timeout [ 209.395364] Bluetooth: hci1: command tx timeout [ 209.395823] Bluetooth: hci3: command tx timeout [ 209.458851] Bluetooth: hci4: command tx timeout [ 209.587819] Bluetooth: hci5: command tx timeout [ 209.650828] Bluetooth: hci7: command tx timeout [ 209.651177] Bluetooth: hci6: command tx timeout [ 211.315034] Bluetooth: hci0: command tx timeout [ 211.444026] Bluetooth: hci2: command tx timeout [ 211.444327] Bluetooth: hci3: command tx timeout [ 211.444428] Bluetooth: hci1: command tx timeout [ 211.506771] Bluetooth: hci4: command tx timeout [ 211.634765] Bluetooth: hci5: command tx timeout [ 211.698761] Bluetooth: hci7: command tx timeout [ 211.698853] Bluetooth: hci6: command tx timeout [ 213.362802] Bluetooth: hci0: command tx timeout [ 213.490775] Bluetooth: hci1: command tx timeout [ 213.490878] Bluetooth: hci2: command tx timeout [ 213.490990] Bluetooth: hci3: command tx timeout [ 213.555027] Bluetooth: hci4: command tx timeout [ 213.684013] Bluetooth: hci5: command tx timeout [ 213.747795] Bluetooth: hci6: command tx timeout [ 213.747947] Bluetooth: hci7: command tx timeout [ 215.411905] Bluetooth: hci0: command tx timeout [ 215.539897] Bluetooth: hci3: command tx timeout [ 215.539937] Bluetooth: hci2: command tx timeout [ 215.540335] Bluetooth: hci1: command tx timeout [ 215.602726] Bluetooth: hci4: command tx timeout [ 215.730773] Bluetooth: hci5: command tx timeout [ 215.795736] Bluetooth: hci7: command tx timeout [ 215.795825] Bluetooth: hci6: command tx timeout [ 269.572898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.579138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.582569] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.590204] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.597476] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.602091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.699309] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.704173] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.708380] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.716310] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.719349] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.721556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.766083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.768439] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.771069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.776852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.779246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.783047] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.838240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.847070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.851156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.859126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.863466] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.867141] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.881021] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.893135] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.918332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.933048] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.949447] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.955104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.988898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.001189] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.021072] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.059190] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.061450] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 270.062789] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.064096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.074109] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.079072] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.094526] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.115768] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 270.125045] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.154601] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.180119] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.202146] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.335007] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.376847] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 270.379046] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.666903] Bluetooth: hci0: command tx timeout [ 271.794831] Bluetooth: hci1: command tx timeout [ 271.863382] Bluetooth: hci2: command tx timeout [ 271.922824] Bluetooth: hci3: command tx timeout [ 272.050779] Bluetooth: hci4: command tx timeout [ 272.115897] Bluetooth: hci5: command tx timeout [ 272.306934] Bluetooth: hci6: command tx timeout [ 272.566399] Bluetooth: hci7: command tx timeout [ 273.714726] Bluetooth: hci0: command tx timeout [ 273.842840] Bluetooth: hci1: command tx timeout [ 273.906819] Bluetooth: hci2: command tx timeout [ 273.970757] Bluetooth: hci3: command tx timeout [ 274.098732] Bluetooth: hci4: command tx timeout [ 274.163843] Bluetooth: hci5: command tx timeout [ 274.354770] Bluetooth: hci6: command tx timeout [ 274.610807] Bluetooth: hci7: command tx timeout [ 275.763705] Bluetooth: hci0: command tx timeout [ 275.890720] Bluetooth: hci1: command tx timeout [ 275.956671] Bluetooth: hci2: command tx timeout [ 276.018752] Bluetooth: hci3: command tx timeout [ 276.146799] Bluetooth: hci4: command tx timeout [ 276.211694] Bluetooth: hci5: command tx timeout [ 276.402715] Bluetooth: hci6: command tx timeout [ 276.658730] Bluetooth: hci7: command tx timeout [ 277.810830] Bluetooth: hci0: command tx timeout [ 277.938790] Bluetooth: hci1: command tx timeout [ 278.003081] Bluetooth: hci2: command tx timeout [ 278.066776] Bluetooth: hci3: command tx timeout [ 278.194952] Bluetooth: hci4: command tx timeout [ 278.259484] Bluetooth: hci5: command tx timeout [ 278.451779] Bluetooth: hci6: command tx timeout [ 278.706771] Bluetooth: hci7: command tx timeout [ 327.779252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.779376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.101878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.101973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.033182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.036714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.038993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.043880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.050176] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.051427] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.416724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.422724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.424883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.429390] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.432365] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.434381] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.489160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.504148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.511194] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.522046] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.533025] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.536416] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.540605] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 332.544102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.546817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.560185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.564810] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.568378] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.588341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.602838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.624011] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.647067] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.665119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.683988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.690457] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.697558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.700173] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.706560] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.709605] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.710969] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.823784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.834198] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.838290] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.867112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.872573] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.895922] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.900163] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.913327] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.917235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 332.921155] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 332.925097] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 332.945348] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.130828] Bluetooth: hci0: command tx timeout [ 334.450726] Bluetooth: hci1: command tx timeout [ 334.642752] Bluetooth: hci3: command tx timeout [ 334.643118] Bluetooth: hci2: command tx timeout [ 334.771875] Bluetooth: hci4: command tx timeout [ 334.772424] Bluetooth: hci5: command tx timeout [ 335.026978] Bluetooth: hci6: command tx timeout [ 335.027974] Bluetooth: hci7: command tx timeout [ 336.179089] Bluetooth: hci0: command tx timeout [ 336.498851] Bluetooth: hci1: command tx timeout [ 336.691209] Bluetooth: hci3: command tx timeout [ 336.691344] Bluetooth: hci2: command tx timeout [ 336.821007] Bluetooth: hci4: command tx timeout [ 336.821312] Bluetooth: hci5: command tx timeout [ 337.074812] Bluetooth: hci6: command tx timeout [ 337.074951] Bluetooth: hci7: command tx timeout [ 338.226703] Bluetooth: hci0: command tx timeout [ 338.546705] Bluetooth: hci1: command tx timeout [ 338.738743] Bluetooth: hci2: command tx timeout [ 338.738843] Bluetooth: hci3: command tx timeout [ 338.866820] Bluetooth: hci5: command tx timeout [ 338.866961] Bluetooth: hci4: command tx timeout [ 339.123528] Bluetooth: hci6: command tx timeout [ 339.123754] Bluetooth: hci7: command tx timeout [ 340.274853] Bluetooth: hci0: command tx timeout [ 340.595063] Bluetooth: hci1: command tx timeout [ 340.786823] Bluetooth: hci3: command tx timeout [ 340.786942] Bluetooth: hci2: command tx timeout [ 340.915774] Bluetooth: hci4: command tx timeout [ 340.915882] Bluetooth: hci5: command tx timeout [ 341.171674] Bluetooth: hci6: command tx timeout [ 341.171772] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:52:33 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=000000000000000c RCX=ffffffff814f40fe RDX=fffffbfff0fdffdd RSI=0000000000000008 RDI=ffffffff87effee0 RBP=ffff8880168ab780 RSP=ffff8880319ef948 R8 =0000000000000000 R9 =fffffbfff0fdffdc R10=ffffffff87effee7 R11=0000000000000001 R12=0000000000000008 R13=0000000000000100 R14=ffff8880168ac1d0 R15=0000000000000005 RIP=ffffffff814f4106 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8c9a288269 CR3=0000000022ba4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080010001 RBX=ffff888016b23780 RCX=0000000000000001 RDX=ffff888016b23780 RSI=ffffffff81740c36 RDI=ffff888016b23df8 RBP=0000000000000000 RSP=ffff88806cf09d80 R8 =0000000000000000 R9 =ffff888016b241c8 R10=000000000003500e R11=0000000000000001 R12=0000005ae93cb0f8 R13=fffffbfff0b42040 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81740c3d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7c33817368 CR3=0000000016ae0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000