syzkaller login: [ 59.518938] sshd (230) used greatest stack depth: 23704 bytes left Warning: Permanently added '[localhost]:13926' (ECDSA) to the list of known hosts. 2025/01/16 22:48:02 fuzzer started 2025/01/16 22:48:02 dialing manager at localhost:45115 [ 63.385517] cgroup: Unknown subsys name 'net' [ 63.481581] cgroup: Unknown subsys name 'cpuset' [ 63.511599] cgroup: Unknown subsys name 'rlimit' [ 69.711119] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/16 22:48:20 syscalls: 203 2025/01/16 22:48:20 code coverage: enabled 2025/01/16 22:48:20 comparison tracing: enabled 2025/01/16 22:48:20 extra coverage: enabled 2025/01/16 22:48:20 setuid sandbox: enabled 2025/01/16 22:48:20 namespace sandbox: enabled 2025/01/16 22:48:20 Android sandbox: enabled 2025/01/16 22:48:20 fault injection: enabled 2025/01/16 22:48:20 leak checking: enabled 2025/01/16 22:48:20 net packet injection: enabled 2025/01/16 22:48:20 net device setup: enabled 2025/01/16 22:48:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/16 22:48:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/16 22:48:20 USB emulation: enabled 2025/01/16 22:48:20 hci packet injection: enabled 2025/01/16 22:48:20 wifi device emulation: enabled 2025/01/16 22:48:20 802.15.4 emulation: enabled 2025/01/16 22:48:20 fetching corpus: 0, signal 0/0 (executing program) 2025/01/16 22:48:23 starting 8 fuzzer processes 22:48:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x14000000}, 0x8080) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1d8, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x625df47f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcefeaf2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78fbfb7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1aa48c49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79a1f232}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe9576c2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2adf218e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6013d7ab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe0e1177}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c7777ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c04c96}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9c67499}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31626139}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b5b6797}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dca00b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a54ae5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16b3e5d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x739178a0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x34, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x17f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49406f2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x780ca249}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x517e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7139}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4885}, 0x44000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r2, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4bc55a35ea4bce03}, 0x8000) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x4100) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}]}, 0x3c}}, 0x4000000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x40}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x75}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40088d0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x80d0}, 0x804) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000ac0), r6) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0xfffffffffffffffd, 0x4080) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000bc0)={'gretap0\x00', &(0x7f0000000b40)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x2, 0x7ff, {{0x11, 0x4, 0x2, 0x38, 0x44, 0x64, 0x0, 0x4, 0x4, 0x0, @multicast1, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xea, 0x1, 0x9, [{@multicast1, 0xa0}]}, @cipso={0x86, 0x16, 0x3, [{0x5, 0x5, 'hxq'}, {0x2, 0xb, "7a09eb3e1935705a05"}]}, @cipso={0x86, 0xc, 0x0, [{0x6, 0x3, 'g'}, {0x7, 0x3, 'u'}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'tunl0\x00', &(0x7f0000000cc0)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x7, 0x400, {{0x10, 0x4, 0x2, 0x14, 0x40, 0x66, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@ssrr={0x89, 0xb, 0x31, [@dev={0xac, 0x14, 0x14, 0x20}, @local]}, @noop, @end, @timestamp={0x44, 0x8, 0xca, 0x0, 0x6, [0x3]}, @ssrr={0x89, 0xf, 0x5c, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000b00), 0xc, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x1c8, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) 22:48:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x194, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98c7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a6}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b93}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5cc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56e7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x924}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4ba}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x8010}, 0x881) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x8, 0x700, 0x4, 0x0, {{0x9, 0x4, 0x2, 0x2, 0x24, 0x65, 0x0, 0x40, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xf, 0xb3, [@empty, @local, @private=0xa010102]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x10, 0x1, 0x5, {{0x2b, 0x4, 0x1, 0x27, 0xac, 0x67, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp={0x44, 0xc, 0x56, 0x0, 0x2, [0x2, 0x8]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6e, 0x3, [{0x2, 0x4, '&I'}, {0x0, 0x2}, {0x6, 0x2}, {0x6, 0x10, "01b772ec6c2006b119f2786a08d0"}, {0x6, 0xf, "8ff5686c5a37992fca6eaa9115"}, {0x5, 0xc, "f4bded87760fcc9937bd"}, {0x4, 0x12, "bdee2f4e065063dca69df99d8aad7e88"}, {0x5, 0x11, "7ca6dbadd7c249e933654fe61ce02d"}, {0x7, 0xd, "17a92ec56873c710df98b2"}, {0x0, 0x5, "e84c1a"}]}, @timestamp={0x44, 0xc, 0xe2, 0x0, 0x3, [0x7fffffff, 0xfff]}, @generic={0x82, 0xe, "3d87b21f6ec86939e7bf2cef"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x4, 0xf8, 0x0, 0x40c, 0x42, @local, @mcast1, 0x20, 0x40, 0x3, 0x1ff}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, 0x0, 0x218, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000b80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000900)={0x20c, r5, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x99}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6c}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x764}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5fa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff435e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf22}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x73b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4004810) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x1010, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_complete(r6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r7) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000c40), r7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000ec0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xe8, r8, 0x1, 0x4, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x27c}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}]}, 0xe8}}, 0x4008800) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80c4) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8802}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r7) sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r10, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x4000000) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x38, r10, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="761482bf8b15"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x480c1) 22:48:23 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="e74cfabdb8bcc7e47f669ea33d4f2c892f5e786ff4bf5408d021c2bbe38f64bfa1f342926794b278e9243f5a5f6d5c1ad11be006de24758b257a4d", 0x3b}, {&(0x7f0000000040)="5d7510afb190be3c7cefdba30801105654f0fd88930d1a452653ab019abd97343d2a346f120cf5a4c96a36dc22b2ed61ae950e57eed55e30216f562b507ac18f88020345fb640157c252df6d7908656fe489ce5c5081d4f7aa167764f61cf574bc2562f8a0b49e4284fce8fa69f4f5", 0x6f}, {&(0x7f00000000c0)="e232ad8bc2209de60c48dbdda72df1bba5706f432df3430e6c125c765b4d5d5e7b3994cb89079b029ed213ed1e7fabbc665df3ead163ff41a74568af9668693946", 0x41}], 0x3, &(0x7f0000000180)=[{0x78, 0x114, 0x7ff, "bdb03254a78a2c53c32ae2a7edecb413ef2458b242d24acba092646f2567711d34a1b82581223a3c76d21317001b603f94c8d0eca6af50e39c83a10e59f4a921b16d6abe980f1fbb5e9430f2fd021792e1eeb8b809cb4f7d43062e8dbed0dc98db9c2daa7b"}, {0xd8, 0x1c, 0x9, "c88247be54eeb693ff60c5e1c15f81cbb558d376b0043e12686b33cb36461f478ca99605ab3dbc3b3c4d446c4a93a03d59d221e8772c9690bb4bbe668dd88223e18d824154a9e8123b469042fb38e1ec89a899d53cb706d02ade5e95e10e518e26169eb64fb9290b28f29b68c1f4c25c7271774c634d2a0b9f031197a83932033f790ff4061ce2ffd0d72057f58039568c06b2ce9fd3d9a66017a187dbeb991400fbbac86a733429c7a01d2941bb23e2786699644b11643f625d3c519fc1fb095980"}], 0x150}, 0x0, 0x80, 0x1}, 0x6b1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000380)=""/120, 0x78}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/222, 0xde}, {&(0x7f0000001500)=""/113, 0x71}, {&(0x7f0000001580)=""/175, 0xaf}, {&(0x7f0000001640)=""/225, 0xe1}, {&(0x7f0000001740)=""/221, 0xdd}, {&(0x7f0000001840)=""/11, 0xb}, {&(0x7f0000001880)=""/12, 0xc}], 0x9}, 0x40002101) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000019c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x7c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xbc0e, 0x34}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4880}, 0x44884) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000001ec0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001c00)={0x24c, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x74865922}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffd, @mcast1, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6a6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x401, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3c84}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xce2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5704f460}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77685c56}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c9b3bd6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7f}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xc3}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x4001) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000020c0)) r6 = accept4(r3, &(0x7f0000002100)=@pppol2tp, &(0x7f0000002180)=0x80, 0x800) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002200), r3) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000002340)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0xa0, r7, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20048000}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000023c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000002580)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002540)={&(0x7f0000002400)={0x10c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd8, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4a, 0x2, "62c99003fb498c689a45e505ccc8a33fbe77fec5e21b05c389e4e2c78a0212e6a4dcdf8408d0e0a97aa887d8de994768d19887b869b78a6caf20c2078052fbe5d0aebe786971"}}, {0x84, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x80, 0x2, "3d0849487f74899d22d7b74c3016702328ca7294531ea7b8b3fe7c602209c97ef52ba3015be11ec500454189c824ef9bfdd6c38933aa59021404cb573774a1c9e2c0f03ed465cfa063af1b45ab733801ffb9eaf88b4ba988ba3ff1aefc87d07953ec1682e4eb1027321eaae0a4023bad16b22af7415bf38f9ffb27a5"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4840}, 0x4044084) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x22000000) [ 82.516814] audit: type=1400 audit(1737067703.146:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:48:23 executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x100, 0x7, {{0xa, 0x4, 0x1, 0x6, 0x28, 0x68, 0x0, 0x80, 0x4, 0x0, @private=0xa010102, @loopback, {[@ssrr={0x89, 0x13, 0x88, [@remote, @rand_addr=0x9, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r0, 0x20, 0x80, 0x1000, 0x9, {{0x12, 0x4, 0x2, 0x2e, 0x48, 0x66, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x2c, 0x5e, 0x0, 0x8, [0x5, 0x5, 0x9e0, 0x20, 0x5, 0x9, 0x5, 0x9, 0x0, 0x8234]}, @timestamp_prespec={0x44, 0x4, 0xb6, 0x3, 0x4}, @noop]}}}}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x200008d4) r2 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@can, &(0x7f0000000340)=0x80, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x8, @bearer=@l2={'eth', 0x3a, 'veth1\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8c4) r4 = accept4(r2, 0x0, &(0x7f0000000580), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000600)={'erspan0\x00', r5, 0x20, 0x20, 0x4c0, 0x401, {{0x1a, 0x4, 0x0, 0x28, 0x68, 0x66, 0x0, 0x9, 0x2f, 0x0, @empty, @multicast2, {[@end, @ssrr={0x89, 0x17, 0x3b, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0xaa, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x2}, {@multicast1, 0x7}, {@loopback, 0x6ec}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@loopback, 0x81}]}]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x400, 0x7, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4010) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000b40)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, r8, 0x3cb8d207bb780bb, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000856}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x68, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x28, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000001}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x200}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc8080}, 0x20044895) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r2) sendmsg$NL80211_CMD_SET_WDS_PEER(r9, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r10, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xe99, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="57c855a4ff87"}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4048040) recvmsg(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/150, 0x96}, 0x0) 22:48:23 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@tipc, &(0x7f0000000080)=0x80, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1, 0x400, @l2={'eth', 0x3a, 'tunl0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004010}, 0x81) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa0000c00}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x7ffd}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x2c}}, 0xc0a08659c61c9050) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="a3259fa36e06"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008}, 0x4008000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000cc0), 0x404080, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c800}, 0x8800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r1) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, r3, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_io_uring_complete(0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r0) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x48, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @void, @val={0xc, 0x99, {0x3, 0x6a}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x68, r6, 0x50a, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x6, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x24044804) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000001540)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f0000001300)={0x1c8, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff3486}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe2}]}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56fd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fa1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64cdd0c1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x400c000}, 0x8) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001580), 0xc, &(0x7f0000001740)={&(0x7f00000015c0)={0x158, r3, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x60}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff8}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x40}, @NL80211_ATTR_IE={0xfa, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xa5, 0xd2}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @random={0x9, 0x5a, "bee1032107ec91c22fa2836fe400d3f4d4d9e51795103beb7392f1af76c33082af77ce58e571110e7f508358fd8b3543db39c59ebe5724c579a600cddac5321e931fc2daefc93c82d9b1fdd51748926c02949af81b851f2bedf5"}, @tim={0x5, 0x8b, {0x3, 0x93, 0xe8, "f5c96d2944597525622611a9e428dec054747f3be6ee884188833f780573ab5b7d3486e793eed1c9cddce3d2328dd71fcfcb5f555a1f22ec9403c08db7edc4ef2f895a4d0565009fba273cd793b94d0d9f8763df38c0cf17e7a1e1ca1f3a5dae80335cd76c9aa3c2d70eada67778a8a974ccb31967c8e6a1f6ba073d7a5c4f2dfa8cd65da9b9474b"}}, @ssid={0x0, 0x3, @random="a024a6"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7da}, {0x8}, {0x8, 0x0, 0x80000001}, {0x8, 0x0, 0x2}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x44000880}, 0x4004080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4040011) 22:48:23 executing program 7: recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/246, 0xf6}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/135, 0x87}, {&(0x7f0000000200)=""/185, 0xb9}], 0x4}, 0x10040) syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x2, 0x1000, {{0x20, 0x4, 0x3, 0x7, 0x80, 0x64, 0x0, 0x11, 0x29, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0xf, 0xd2, [@private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x3e}]}, @noop, @end, @noop, @timestamp={0x44, 0x24, 0xaa, 0x0, 0x4, [0x7, 0x3, 0x7, 0xffffffff, 0x6, 0x0, 0x47af, 0x0]}, @timestamp={0x44, 0x18, 0x2d, 0x0, 0xd, [0x2, 0x9, 0x0, 0xa44d, 0x6]}, @timestamp_addr={0x44, 0x1c, 0x50, 0x1, 0x0, [{@empty, 0x3b}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}}}}) recvmsg(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000480)=@caif, 0x80, &(0x7f0000001580)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/93, 0x5d}], 0x2, &(0x7f00000015c0)=""/116, 0x74}, 0x140) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001740)={'syztnl1\x00', &(0x7f0000001680)={'gre0\x00', r1, 0x20, 0x80, 0x2, 0x1, {{0x19, 0x4, 0x2, 0x5, 0x64, 0x65, 0x0, 0xf9, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x23}, {[@cipso={0x86, 0x1b, 0x3, [{0x1, 0xd, "369e97defb9d92b78fa7d8"}, {0x7, 0x6, 'hy!&'}, {0x5, 0x2}]}, @generic={0x7, 0x12, "75037b0f3c4b25b709e7917033f148fe"}, @end, @timestamp_prespec={0x44, 0x1c, 0xdc, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x249}, {@remote, 0x5}, {@local, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001780)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001880)={'gretap0\x00', &(0x7f00000017c0)={'syztnl1\x00', r2, 0x40, 0x7800, 0x7f, 0x1ff, {{0x24, 0x4, 0x1, 0x7, 0x90, 0x65, 0x0, 0xff, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0x63, 0x1, 0x2, [{@private=0xa010101, 0x6}, {@multicast2, 0x67}, {@loopback, 0x22c4}, {@empty, 0x1}, {@local, 0x7}, {@remote, 0x5}, {@local, 0x100}]}, @end, @end, @timestamp={0x44, 0x24, 0xbd, 0x0, 0x2, [0x800, 0xfffffffd, 0x9c, 0x2, 0xffff, 0xfffffffa, 0x0, 0x5ebe]}, @end, @end, @rr={0x7, 0x17, 0x18, [@empty, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) recvmsg(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/53, 0x35}, {&(0x7f0000001d00)=""/179, 0xb3}], 0x2, &(0x7f0000001e00)=""/195, 0xc3}, 0x10000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r4, 0x808, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x4000000) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000002240), 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002380)={'syztnl2\x00', &(0x7f0000002340)={'gretap0\x00', 0x0, 0x10, 0x7, 0x400, 0x8, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast2, @rand_addr=0x64010100}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002440)={'erspan0\x00', &(0x7f00000023c0)={'ip_vti0\x00', r7, 0x20, 0x7, 0x6, 0x10000, {{0x17, 0x4, 0x1, 0x6, 0x5c, 0x67, 0x0, 0xf1, 0x2f, 0x0, @multicast2, @multicast1, {[@noop, @generic={0x82, 0x9, "e32d52f948b343"}, @end, @lsrr={0x83, 0x7, 0xeb, [@loopback]}, @lsrr={0x83, 0x17, 0x83, [@empty, @private=0xa010101, @broadcast, @rand_addr=0x64010102, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0xc9, 0x1, 0x8, [{@broadcast, 0x1}, {@rand_addr=0x64010101, 0x7}, {@broadcast, 0x1f}]}]}}}}}) r9 = syz_io_uring_complete(0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r9, 0x80045400, &(0x7f0000002480)) accept4(r6, &(0x7f00000024c0)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000002540)=0x80, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000002600)={'gre0\x00', &(0x7f0000002580)={'syztnl1\x00', r8, 0x80, 0x1, 0x5e, 0x6, {{0xf, 0x4, 0x2, 0x0, 0x3c, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, {[@lsrr={0x83, 0x27, 0x70, [@rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010102, @broadcast, @local, @local, @dev={0xac, 0x14, 0x14, 0x34}, @private=0xa010100, @loopback]}]}}}}}) 22:48:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001c40)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001780)={0x464, r1, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1c94}]}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x10}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}]}]}, @NL80211_ATTR_TID_CONFIG={0x3d0, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x6}, {0x7, 0x5}, {0x3, 0x1}, {0x2, 0xa}, {0x0, 0x1}, {0x3, 0xa}, {0x4, 0x5}, {0x3, 0x9}, {0x0, 0x1}, {0x3, 0x8}, {}, {0x4, 0x2}, {0x3, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x7, 0x3}, {0x7, 0x8}, {0x4, 0x6}, {0x0, 0xa}, {0x1}, {0x2, 0x8}, {0x5, 0x1}, {0x4}, {0x5}, {0x6, 0x3}, {0x4, 0x3}, {0x3, 0x5}, {0x2, 0x1}, {0x0, 0x5}, {0x6, 0x5}, {0x4, 0x3}, {0x2, 0x9}, {0x3, 0x4}, {0x7, 0x6}, {0x2, 0x3}, {0x7, 0x2}, {0x4, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x6, 0x8}, {0x7, 0x3}, {0x3, 0x7}, {0x1, 0xa}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0xa}, {0x3, 0x8}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x100, 0x0, 0x9c, 0x2, 0x8, 0x100]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x24, 0xb, 0x1, 0x5, 0x6c, 0x48, 0x3, 0x6e, 0x12]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x9}, {0x0, 0x6}, {0x1, 0x5}, {0x1}, {0x2, 0x8}, {0x0, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x2, 0x9}, {0x4}, {0x1, 0x9}, {0x2, 0x3}, {0x6, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x2, 0x7}, {}, {0x4, 0x1}, {0x6, 0x2}, {0x3, 0x2}, {0x3, 0xa}, {0x5, 0xa}, {0x4, 0x7}, {0x2, 0x7}, {0x2, 0x7}, {0x6, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1f, 0x0, 0x401, 0x3ff, 0x4, 0x6, 0x3]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0x48, 0x37, 0x18, 0x6, 0x24, 0x6, 0x16, 0x36, 0x5, 0x6c, 0x5, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x1, 0x5, 0x16, 0x9, 0x5, 0x1, 0x36, 0x2, 0x60, 0x60, 0x1, 0x1b, 0x30, 0x1, 0x2, 0x12, 0x28, 0x12]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x1}, {0x7, 0x3}, {0x3, 0x2}, {0x2, 0x2}, {0x7, 0x6}, {0x5, 0x4}, {0x7, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x4, 0x6}, {0x1, 0x7}, {0x4, 0x8}, {0x4, 0x1}, {0x0, 0x7}, {0x5, 0x9}, {0x7, 0x7}, {0x3, 0x4}, {0x6, 0x1}, {0x6, 0x3}, {0x1, 0x4}, {0x5, 0x9}, {0x5}, {0x5, 0x8}, {0x2, 0x4}, {0x4, 0x9}, {0x7, 0x5}, {0x2, 0x3}, {0x1}, {0x5, 0x9}, {0x0, 0x3}, {0x2, 0x9}, {0x3, 0x3}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0x9}, {0x7, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x1, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x101, 0x2c8, 0x1, 0xfff, 0x40, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x18, 0x77, 0x9, 0xb, 0x6c, 0x39, 0xc, 0x1, 0xfa2d9e98e2b53ed1, 0x18, 0x18, 0x2, 0x16, 0xb, 0x18, 0x12, 0x36]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x3, 0x6, 0x6c, 0x4, 0xb, 0x2, 0x2, 0x24, 0x5, 0x4, 0x3, 0x5, 0x4, 0x60, 0x5, 0x9, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x401, 0x6, 0x44, 0x1f, 0x0, 0x9, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x2, 0x4}, {0x6, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x8}, {0x0, 0xa}, {0x2, 0x1}, {0x2}, {0x7, 0x4}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x6}, {0x5, 0x9}, {0x5, 0x8}, {0x1, 0x7}, {0x6, 0x5}, {0x2, 0x4}, {0x3, 0x7}, {0x5, 0x1}, {0x7, 0x2}, {0x7, 0x7}, {0x3, 0xa}, {0x3, 0x5}, {0x6, 0x2}, {0x0, 0x2}, {0x3, 0x7}, {0x7, 0x4}, {0x3, 0x6}, {0x0, 0x9}, {0x2, 0x4}, {0x2, 0x2}, {0x4, 0x3}, {0x4, 0x5}, {0x4, 0x9}, {0x0, 0x9}, {0x1, 0x3}, {0x2, 0xa}, {0x2, 0x7}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0xa}, {}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x8}, {0x6, 0x9}, {0x4, 0x1}, {0x1, 0x8}, {0x4, 0x2}, {0x7, 0x8}, {0x2, 0x6}, {0x1, 0x3}, {0x1, 0x4}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0xa}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0xa}, {0x2, 0x2}, {0x1}, {0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x3, 0x8}, {0x3, 0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x48, 0x6, 0x16, 0x16, 0x60, 0x24, 0x12, 0x18, 0x2, 0x16, 0x9, 0x1b, 0x16, 0x48, 0x1b, 0x24, 0x16, 0x18, 0x3, 0x12, 0x1, 0x1b, 0x9, 0x9, 0x1e, 0x4, 0x0, 0x3b]}]}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x30, 0x60, 0x60, 0x0, 0x24, 0x6c, 0x36, 0x5, 0x3, 0x1, 0x35, 0x4, 0x18, 0x16, 0x9, 0x12, 0xb, 0xc, 0x48, 0x5, 0x24, 0x1, 0x18, 0xc, 0x5, 0x2, 0x3, 0x6c, 0x18, 0x12, 0x9]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x66, 0x24, 0xb, 0x48, 0xb, 0x1b, 0x6c, 0x48, 0x6c, 0x9, 0x52, 0xc, 0xc, 0x60, 0x4, 0x18, 0x1]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x48, 0x60, 0x24, 0x0, 0x2, 0x3, 0x5, 0x18, 0x24, 0x4, 0x17, 0xc, 0x48, 0x48, 0xb, 0x4, 0x12, 0xc, 0x4, 0x30, 0x36, 0x3, 0x2, 0x36, 0x5, 0x18, 0xb, 0x1b, 0x9, 0x0, 0x24]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0xc, 0x16, 0x24, 0x16, 0x0, 0x30, 0x36, 0x0, 0xc, 0x1, 0x1b, 0x16, 0x16, 0x9, 0x48, 0x5, 0x16, 0x24, 0x0, 0x16]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x76}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x79}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x37}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x4062c4cea3227679}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xae}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xac}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x89}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x66}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8e4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x36}]}]}]}, 0x464}, 0x1, 0x0, 0x0, 0x14}, 0x30004800) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={0xbc, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x40, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xffffffffffff0083}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x11}, 0x24008844) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f80)={&(0x7f0000001e40)={0x13c, r1, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x128, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x3, 0x2, 0xb, 0x4, 0x5, 0x9, 0x6c, 0x1b, 0x48, 0x4, 0x16, 0x2, 0x60, 0x6, 0x4b, 0xb, 0x1b, 0x16, 0x60, 0xb, 0x3, 0x60]}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x1, 0x0, 0x5, 0x4000, 0xd5, 0x101]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x3}, {0x3, 0x7}, {0x0, 0x5}, {0x0, 0xa}, {}, {0x3, 0x7}, {0x5, 0x5}, {0x3, 0x8}, {0x0, 0x5}, {0x2, 0x4}, {0x2, 0x6}, {0x4}, {0x5, 0x9}, {0x6, 0xa}, {0x1, 0x9}, {0x3, 0x5}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x7, 0xa}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0x9}, {0x3}, {0x4, 0x3}, {0x2, 0x7}, {0x0, 0x7}, {0x4, 0x1}, {0x3, 0x4}, {0x2}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x2}, {0x3, 0x9}, {0x1, 0x3}, {0x2, 0xa}, {0x0, 0x1}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0x3}, {0x6, 0x6}, {0x3, 0x4}, {0x4, 0xa}, {0x1}, {0x2, 0x5}, {0x4, 0x2}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x8}, {0x6, 0x5}, {0x2, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x2, 0xa}, {0x7, 0x9}, {0x7, 0x4}, {0x0, 0x18}, {0x1, 0xa}, {0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x2}, {0x6, 0xa}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x5}, {0x2, 0x5}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x2, 0x7}, {0x2, 0x3}, {0x6, 0x5}, {0x5, 0x3}, {0x0, 0x3}, {0x3, 0x4}, {0x7, 0x3}, {0x7, 0x9}, {0x2, 0x6}, {0x1}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x8}, {0x2, 0x1}, {0x1, 0x8}, {0x6, 0x4}, {0x6, 0x6}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x0, 0x8}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0x5}, {0x4, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0x8}, {0x4, 0x7}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x4, 0x9}, {0x6}, {0x7, 0x1}, {0x5, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0xd}, {0x4, 0x5}, {0x3, 0x7}, {0x3, 0x4}, {0x6, 0x6}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x5, 0x7}, {0x7, 0x4}, {0x7, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x1}, {0x6, 0x9}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x4}, {0x2, 0x3}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0xa}, {0x2, 0x8}, {0x3, 0x3}, {0x3, 0x7}, {0x2, 0x4}, {0x6, 0x2}, {0x1, 0x1}, {0x5, 0x8}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x28e1, 0x7f, 0x430, 0x7f, 0x3, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1}, {0x5, 0x2}, {0x3, 0x8}, {0x3, 0xa}, {0x6, 0x5}, {0x4, 0x4}, {0x6, 0x3}, {0x2, 0x8}, {0x1, 0x2}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x13c}}, 0x4000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x64, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c2be6f056d9b850aa8cad5746cb759867e017fc4e852bc2c"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0x88, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r4 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x38, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x64}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x101}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xd0}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1f}]}, 0x38}, 0x1, 0x0, 0x0, 0x44841}, 0x11) r5 = syz_io_uring_setup(0x7612, &(0x7f0000002480)={0x0, 0x5d79, 0x10, 0x3, 0x292, 0x0, r4}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000002500)=0x0, &(0x7f0000002540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x118, &(0x7f0000002580)=0x401, 0x0, 0x4) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x30, r8, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}}, 0x20048044) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_io_uring_setup(0x7a0c, &(0x7f0000002840)={0x0, 0x4fb, 0x0, 0x1, 0x7a, 0x0, r5}, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f00000028c0), &(0x7f0000002900)) 22:48:23 executing program 6: sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1e0, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r0 = accept4(0xffffffffffffffff, &(0x7f00000002c0)=@x25={0x9, @remote}, &(0x7f0000000340)=0x80, 0x80000) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x201, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4850}, 0x4040804) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345}, 0x80000001) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r1, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2010}, 0x8810) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) r4 = fork() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x44}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x3e}}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x75}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000ac0)) r5 = syz_io_uring_complete(0x0) recvmsg(r5, &(0x7f0000000f00)={&(0x7f0000000b00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000b80)=""/249, 0xf9}, {&(0x7f0000000c80)=""/110, 0x6e}, {&(0x7f0000000d00)=""/151, 0x97}], 0x3, &(0x7f0000000e00)=""/247, 0xf7}, 0x40002061) getsockname(r0, &(0x7f00000014c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001540)=0x80) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, r7, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000016c0)={'batadv_slave_1\x00'}) [ 84.212615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.222914] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.224300] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.224914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.226214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.227355] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.233516] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.237893] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.242835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.243759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.247746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.252540] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.258656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.266598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.278526] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.280922] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.284104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.290069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.293979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.296708] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.298420] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.305327] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.310772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.312277] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.328373] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.330359] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.332557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.334081] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.335449] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.344116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.351083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.369521] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.375645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.423709] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.423862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.427610] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.429846] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.432554] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.437688] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.437734] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.441846] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.442850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.454676] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.457202] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.460521] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.464965] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.476079] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.481821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.287719] Bluetooth: hci2: command tx timeout [ 86.351402] Bluetooth: hci1: command tx timeout [ 86.415495] Bluetooth: hci3: command tx timeout [ 86.415669] Bluetooth: hci0: command tx timeout [ 86.416498] Bluetooth: hci4: command tx timeout [ 86.480579] Bluetooth: hci7: command tx timeout [ 86.480758] Bluetooth: hci5: command tx timeout [ 86.543295] Bluetooth: hci6: command tx timeout [ 88.337189] Bluetooth: hci2: command tx timeout [ 88.399243] Bluetooth: hci1: command tx timeout [ 88.463550] Bluetooth: hci4: command tx timeout [ 88.464103] Bluetooth: hci3: command tx timeout [ 88.465733] Bluetooth: hci0: command tx timeout [ 88.527355] Bluetooth: hci5: command tx timeout [ 88.527999] Bluetooth: hci7: command tx timeout [ 88.592313] Bluetooth: hci6: command tx timeout [ 90.385208] Bluetooth: hci2: command tx timeout [ 90.448228] Bluetooth: hci1: command tx timeout [ 90.511300] Bluetooth: hci0: command tx timeout [ 90.511378] Bluetooth: hci4: command tx timeout [ 90.512549] Bluetooth: hci3: command tx timeout [ 90.576239] Bluetooth: hci5: command tx timeout [ 90.576314] Bluetooth: hci7: command tx timeout [ 90.640233] Bluetooth: hci6: command tx timeout [ 92.432223] Bluetooth: hci2: command tx timeout [ 92.495277] Bluetooth: hci1: command tx timeout [ 92.561190] Bluetooth: hci3: command tx timeout [ 92.561266] Bluetooth: hci4: command tx timeout [ 92.561349] Bluetooth: hci0: command tx timeout [ 92.626195] Bluetooth: hci7: command tx timeout [ 92.626271] Bluetooth: hci5: command tx timeout [ 92.688420] Bluetooth: hci6: command tx timeout [ 146.226537] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.228260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.234021] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.242512] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.247541] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.249876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.397097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.406535] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.411590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.417605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.425584] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.427171] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.457258] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.459428] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.460576] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.463605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.464196] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.467101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.470298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.470889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.476553] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.490890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.496910] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.499332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.603808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.608588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.613797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.618916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.621457] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.625655] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.636230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.663482] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.672391] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.686360] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.688068] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.690101] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.698962] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.714682] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.716121] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.717034] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.746038] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.791787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.792650] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.809053] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.833504] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.833897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.843899] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.854776] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.304325] Bluetooth: hci0: command tx timeout [ 148.495350] Bluetooth: hci1: command tx timeout [ 148.495344] Bluetooth: hci2: command tx timeout [ 148.559625] Bluetooth: hci3: command tx timeout [ 148.751264] Bluetooth: hci5: command tx timeout [ 148.815859] Bluetooth: hci4: command tx timeout [ 148.943605] Bluetooth: hci6: command tx timeout [ 148.944477] Bluetooth: hci7: command tx timeout [ 150.352668] Bluetooth: hci0: command tx timeout [ 150.543698] Bluetooth: hci2: command tx timeout [ 150.543795] Bluetooth: hci1: command tx timeout [ 150.607314] Bluetooth: hci3: command tx timeout [ 150.800367] Bluetooth: hci5: command tx timeout [ 150.863312] Bluetooth: hci4: command tx timeout [ 150.991226] Bluetooth: hci7: command tx timeout [ 150.992287] Bluetooth: hci6: command tx timeout [ 152.399360] Bluetooth: hci0: command tx timeout [ 152.591319] Bluetooth: hci1: command tx timeout [ 152.591473] Bluetooth: hci2: command tx timeout [ 152.655621] Bluetooth: hci3: command tx timeout [ 152.848250] Bluetooth: hci5: command tx timeout [ 152.912065] Bluetooth: hci4: command tx timeout [ 153.040268] Bluetooth: hci6: command tx timeout [ 153.040299] Bluetooth: hci7: command tx timeout [ 154.447488] Bluetooth: hci0: command tx timeout [ 154.639220] Bluetooth: hci2: command tx timeout [ 154.639300] Bluetooth: hci1: command tx timeout [ 154.704260] Bluetooth: hci3: command tx timeout [ 154.896225] Bluetooth: hci5: command tx timeout [ 154.960185] Bluetooth: hci4: command tx timeout [ 155.087273] Bluetooth: hci6: command tx timeout [ 155.088246] Bluetooth: hci7: command tx timeout [ 208.679426] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.681700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.684048] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.688546] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.691042] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.692226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.792228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.795302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.799250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.806422] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.809379] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.811581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.876549] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.882998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.886331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.895310] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.899385] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.905854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.925741] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.927671] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.930887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.936669] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.937902] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.941611] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.943459] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.945841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.951396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.982464] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.997961] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.001818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.003770] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.004611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.015302] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.024570] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.026265] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.031206] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.036601] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.037737] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.038303] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.048882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.060565] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.094235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.096299] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.135711] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.145290] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.155571] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.171716] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.176550] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.767483] Bluetooth: hci0: command tx timeout [ 210.833191] Bluetooth: hci1: command tx timeout [ 211.023312] Bluetooth: hci2: command tx timeout [ 211.088294] Bluetooth: hci4: command tx timeout [ 211.151447] Bluetooth: hci3: command tx timeout [ 211.151789] Bluetooth: hci6: command tx timeout [ 211.215876] Bluetooth: hci7: command tx timeout [ 211.279278] Bluetooth: hci5: command tx timeout [ 212.817200] Bluetooth: hci0: command tx timeout [ 212.880211] Bluetooth: hci1: command tx timeout [ 213.072204] Bluetooth: hci2: command tx timeout [ 213.136241] Bluetooth: hci4: command tx timeout [ 213.200463] Bluetooth: hci6: command tx timeout [ 213.201201] Bluetooth: hci3: command tx timeout [ 213.263430] Bluetooth: hci7: command tx timeout [ 213.327366] Bluetooth: hci5: command tx timeout [ 214.863228] Bluetooth: hci0: command tx timeout [ 214.928207] Bluetooth: hci1: command tx timeout [ 215.119445] Bluetooth: hci2: command tx timeout [ 215.183252] Bluetooth: hci4: command tx timeout [ 215.248218] Bluetooth: hci3: command tx timeout [ 215.248854] Bluetooth: hci6: command tx timeout [ 215.312168] Bluetooth: hci7: command tx timeout [ 215.376225] Bluetooth: hci5: command tx timeout [ 216.911282] Bluetooth: hci0: command tx timeout [ 216.976301] Bluetooth: hci1: command tx timeout [ 217.169153] Bluetooth: hci2: command tx timeout [ 217.233213] Bluetooth: hci4: command tx timeout [ 217.295243] Bluetooth: hci3: command tx timeout [ 217.295388] Bluetooth: hci6: command tx timeout [ 217.359325] Bluetooth: hci7: command tx timeout [ 217.423321] Bluetooth: hci5: command tx timeout [ 270.880321] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.881972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.884493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.894032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.898088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.901767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.073900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.077899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.081430] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.086623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.092270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.095799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.203614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.210364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.217772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.227402] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.234529] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.238399] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.270794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.274959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.297831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.300629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.307007] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.307806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.308784] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.314756] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.320502] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.323542] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.323714] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.325043] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.330689] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.338603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.353021] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.357642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.359371] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.360980] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.370342] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.374415] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.379572] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.394509] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.398315] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.411049] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.413613] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.414634] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.414995] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.420293] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.422202] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.425824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.975313] Bluetooth: hci0: command tx timeout [ 273.167349] Bluetooth: hci1: command tx timeout [ 273.296162] Bluetooth: hci2: command tx timeout [ 273.424192] Bluetooth: hci4: command tx timeout [ 273.425084] Bluetooth: hci3: command tx timeout [ 273.487332] Bluetooth: hci6: command tx timeout [ 273.488404] Bluetooth: hci5: command tx timeout [ 273.551234] Bluetooth: hci7: command tx timeout [ 275.023243] Bluetooth: hci0: command tx timeout [ 275.215201] Bluetooth: hci1: command tx timeout [ 275.348208] Bluetooth: hci2: command tx timeout [ 275.472160] Bluetooth: hci3: command tx timeout [ 275.472960] Bluetooth: hci4: command tx timeout [ 275.535211] Bluetooth: hci6: command tx timeout [ 275.535773] Bluetooth: hci5: command tx timeout [ 275.601303] Bluetooth: hci7: command tx timeout [ 277.072228] Bluetooth: hci0: command tx timeout [ 277.263287] Bluetooth: hci1: command tx timeout [ 277.391246] Bluetooth: hci2: command tx timeout [ 277.520200] Bluetooth: hci4: command tx timeout [ 277.522249] Bluetooth: hci3: command tx timeout [ 277.583196] Bluetooth: hci6: command tx timeout [ 277.583281] Bluetooth: hci5: command tx timeout [ 277.647198] Bluetooth: hci7: command tx timeout [ 279.119331] Bluetooth: hci0: command tx timeout [ 279.311337] Bluetooth: hci1: command tx timeout [ 279.440310] Bluetooth: hci2: command tx timeout [ 279.567268] Bluetooth: hci3: command tx timeout [ 279.567372] Bluetooth: hci4: command tx timeout [ 279.631226] Bluetooth: hci5: command tx timeout [ 279.631314] Bluetooth: hci6: command tx timeout [ 279.695195] Bluetooth: hci7: command tx timeout [ 333.084642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.091004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.092849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.098294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.102884] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.104567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.207277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.210369] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.212035] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.216929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.220677] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.222109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.348379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.352450] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.353904] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.357959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.359242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.360680] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.361819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.362310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.363027] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.375850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.381920] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.383165] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.415447] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.420490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.425758] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.436547] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.437489] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.438731] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.450230] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.450310] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.459311] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.461588] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.463461] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.468317] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.470252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.471233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.476281] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.484280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.485687] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.490679] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.490696] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.496389] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.496728] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.514041] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.521686] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 333.522692] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.119597] Bluetooth: hci0: command tx timeout [ 335.248281] Bluetooth: hci1: command tx timeout [ 335.375301] Bluetooth: hci2: command tx timeout [ 335.439183] Bluetooth: hci3: command tx timeout [ 335.567255] Bluetooth: hci4: command tx timeout [ 335.631256] Bluetooth: hci5: command tx timeout [ 335.631584] Bluetooth: hci7: command tx timeout [ 335.631787] Bluetooth: hci6: command tx timeout [ 337.170110] Bluetooth: hci0: command tx timeout [ 337.295467] Bluetooth: hci1: command tx timeout [ 337.423443] Bluetooth: hci2: command tx timeout [ 337.488494] Bluetooth: hci3: command tx timeout [ 337.616167] Bluetooth: hci4: command tx timeout [ 337.679274] Bluetooth: hci7: command tx timeout [ 337.679463] Bluetooth: hci5: command tx timeout [ 337.679597] Bluetooth: hci6: command tx timeout [ 339.216300] Bluetooth: hci0: command tx timeout [ 339.344448] Bluetooth: hci1: command tx timeout [ 339.473147] Bluetooth: hci2: command tx timeout [ 339.536170] Bluetooth: hci3: command tx timeout [ 339.665180] Bluetooth: hci4: command tx timeout [ 339.729205] Bluetooth: hci7: command tx timeout [ 339.729309] Bluetooth: hci6: command tx timeout [ 339.729332] Bluetooth: hci5: command tx timeout [ 341.263224] Bluetooth: hci0: command tx timeout [ 341.391290] Bluetooth: hci1: command tx timeout [ 341.521152] Bluetooth: hci2: command tx timeout [ 341.583222] Bluetooth: hci3: command tx timeout [ 341.711209] Bluetooth: hci4: command tx timeout [ 341.775245] Bluetooth: hci5: command tx timeout [ 341.775385] Bluetooth: hci6: command tx timeout [ 341.775474] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 22:53:31 Registers: info registers vcpu 0 RAX=ffffed1005e3afc7 RBX=ffff88802f1d7e10 RCX=ffff88802f1d7e38 RDX=1ffff11005e3afc9 RSI=ffff88802f1d7e28 RDI=ffff88802f1d7e10 RBP=dffffc0000000000 RSP=ffff88802f1d7d38 R8 =0000000000000000 R9 =fffffbfff0fe13e4 R10=0000000000000001 R11=0000000000000000 R12=0000000000000014 R13=00007f01f40f0570 R14=ffff88802f1d7e4d R15=00007f01f40f0570 RIP=ffffffff8171a180 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f01f3fbc540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f01f40f0570 CR3=0000000033750000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000ff0000000000000000000000 XMM01=ffffffff00ffffffffffffffffffffff XMM02=42494c4700342e332e325f4342494c47 XMM03=00000000000000000000000000006f72 XMM04=6f6c77725f646165726874705f5f0079 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff888009e0cc00 RCX=ffffffff819ea848 RDX=ffff888016559bc0 RSI=0000000000000004 RDI=ffff888009e0d45c RBP=00007fcbc55fffff RSP=ffff8880354df838 R8 =0000000000000001 R9 =ffffed1006a9bee9 R10=000000000daa4067 R11=0000000000000001 R12=ffff888009e0d45c R13=ffff88800d944150 R14=ffff8880354dfce8 R15=ffff8880354dfce8 RIP=ffffffff81abb7d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4a89d388f0 CR3=000000001aad6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000