Warning: Permanently added '[localhost]:15010' (ECDSA) to the list of known hosts. 2025/01/21 11:05:22 fuzzer started 2025/01/21 11:05:22 dialing manager at localhost:44833 syzkaller login: [ 93.658915] cgroup: Unknown subsys name 'net' [ 93.775974] cgroup: Unknown subsys name 'cpuset' [ 93.833425] cgroup: Unknown subsys name 'rlimit' [ 99.531038] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 102.079705] hrtimer: interrupt took 2932438 ns 2025/01/21 11:05:44 syscalls: 200 2025/01/21 11:05:44 code coverage: enabled 2025/01/21 11:05:44 comparison tracing: enabled 2025/01/21 11:05:44 extra coverage: enabled 2025/01/21 11:05:44 setuid sandbox: enabled 2025/01/21 11:05:44 namespace sandbox: enabled 2025/01/21 11:05:44 Android sandbox: enabled 2025/01/21 11:05:44 fault injection: enabled 2025/01/21 11:05:44 leak checking: enabled 2025/01/21 11:05:44 net packet injection: enabled 2025/01/21 11:05:44 net device setup: enabled 2025/01/21 11:05:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/21 11:05:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/21 11:05:44 USB emulation: enabled 2025/01/21 11:05:44 hci packet injection: enabled 2025/01/21 11:05:44 wifi device emulation: enabled 2025/01/21 11:05:44 802.15.4 emulation: enabled 2025/01/21 11:05:44 fetching corpus: 0, signal 0/0 (executing program) 11:05:46 executing program 0: r0 = gettid() r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x99e) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/time_for_children\x00') ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = gettid() sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x3ff) r4 = socket(0x2a, 0xa, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', r2, 0x0, 0x81, 0x80, 0x3, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80, 0x10, 0xfffffff8, 0xb82}}) memfd_create(&(0x7f00000001c0)='*-#!](:*\x00', 0x1) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x2000, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "95d542ba666a129ec7c345b48a"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b723a8057e"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f4ea2a8225"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}}, 0x20000000) modify_ldt$write2(0x11, &(0x7f0000000380)={0xffffffff, 0x0, 0x400, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000003c0)={0x1, 0x1000, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) ptrace$setregs(0xd, r3, 0x7, &(0x7f0000000400)="7971ba706fc71a8c03fa50a78f29f28d05ad8311d6db8314e683983f90be3012f8fa2fd370d5143d9de66c092ca93bac") pipe2$9p(&(0x7f0000000440), 0x0) r5 = socket(0x21, 0x0, 0x101) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000480)=0xfffffffe, 0x4) modify_ldt$write2(0x11, &(0x7f00000004c0)={0x0, 0x100000, 0x400, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) 2025/01/21 11:05:46 starting 8 fuzzer processes [ 117.217672] audit: type=1400 audit(1737457546.697:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:05:46 executing program 1: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x401, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x851}, 0xc000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)="a9efac996af6ee0c799b295e658ba5eb216ae18153e91796910dfc1cab97157be2afd7bd9d72462e763ec4a62a69d4004b23e30adef4055fbda3f80fdd0b0c9f282aeaf964b2c2e4579255aa8316890250bd424e0f73d516f9c83ba54feba719f99b28aa8c8e6465a5e2078b761dae431cb03ce527e03e469e12c2d26d2546728e4a382d42625b702b0575fd51b4d5a1ae34d0a95bd01e404baec4", 0x9b}], 0x1, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x78}, 0x21040) write$tun(0xffffffffffffffff, &(0x7f0000000700)={@void, @void, @x25={0x3, 0x7, 0xf, "980cc59657d829af9f0f65fedb2e874baec273239c411853cbb3412c7ab3ce8ebb45a73f0a2d10b0f413430cdd8bb556bd7944cf212f88e63e2d102ca1ca9fa49a1dae2def0a85671cde5971928f355e46e674eb93251152ec8d62fc1ca903586e865e1b4eb141e449381814968ef52f4c3593bbeadf70d42414a957083f929e1de9b9357e355ff3e9e6d1fff5b7768aebc25c2b22a48847396fad1d328d7509323871373d3b8c5054a2c023f6d75d60427bd1ad7413670ef2d9de6aeaecaf14da68b05b7a3425fbde56903baf3e3e62327aa5431d332124"}}, 0xdb) sendmmsg(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xcc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x74, 0xac, "064cdfaee003f87329b58337ddf1a3c7d0df26405bc4462ae89a57010912259251d13683bf0da84f0ad804b366339b2c17f82464fe265afdfb5810f91688861ea279bbd559e09e150a2f4ec7e81c38d355b1b33ef5f381d53757fd9c6c3259ecbaa5b65324eb29b398cb690d3cd2d239"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x32e}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x31, 0xac, "5015416b8116d1609b22379f3e1238fa5378a05a73e945cc8fefc322dbe408d2a6a6903c9abcf3614c8325c0b3"}]}, 0xcc}}, 0x40801) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x190, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xb}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x124, 0x33, @mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_a, @device_a, @from_mac=@device_b, {0x3, 0x1}}, @val={0x0, 0x3, @random="701ff5"}, @val={0x1, 0x2, [{0x6c, 0x1}, {0x1}]}, @val={0x3, 0x1, 0x40}, @val={0x2d, 0x1a, {0x10, 0x1, 0x4, 0x0, {0x6, 0x3, 0x0, 0x7f, 0x0, 0x1, 0x1}, 0x1, 0x2b, 0x59}}, @val={0x72, 0x6}, [{0xdd, 0xd6, "5f9847ef8e60dbe6392f59847529e081e318a9993142f12ab9c4a11f6da1b8fa084a9471103f9714d2dcc344dcfa8b6832754870e1bf62af7365c3a676d0148e8e68cda03c9f963aed06460784ec32425b9ef62aca2eef52e3eb3a5b642f44a153cdbf44121ae3fbd336241aa4f15774dfa4917efc865023dcdf7ed7abddee4b5aa7ade00b5a2e3e5237de518501a015d84fe7226d021e75d0f475965e71dc066d1f08e98f9d141d65ab03eb33b7e6cd19aeda5a85407dd4729c5cc5994081176c7b5fe12b3da3ea033a7699957209823f4be6c25833"}]}}, @NL80211_ATTR_FRAME={0x34, 0x33, @mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3f0c}, @broadcast, @device_b, @random="699bef3e28de", {0x8, 0x6}}, @ver_80211n={0x0, 0x20, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1d, @val={0x8c, 0x10, {0x570, "88806b353803", @short="7206bfd8b1694dd5"}}}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x805) r3 = socket(0x2, 0x1, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) read$char_usb(0xffffffffffffffff, &(0x7f0000000d00)=""/161, 0xa1) socketpair(0x18, 0x4, 0x4, &(0x7f0000000dc0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e40), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xa0, r5, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc434}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x45, 0xbf89, 0x4, 0x401, 0x1000]}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8, 0x5, 0x3]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40840}, 0x20044080) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000fc0)={r2, 0x1, 0x6, @remote}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001300)={0x5a4, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf468}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x3, 0x3, 0x8, 0xf2}, {0x20, 0x7, 0x80, 0x1}, {0x7, 0x81, 0x2, 0xfffff6f7}, {0x1ff, 0x5, 0x1f, 0x5}, {0x1f, 0x1f, 0x80, 0x7}, {0x7ff, 0x3f, 0x5f, 0x29}, {0xfe00, 0x3f, 0x5, 0x9}, {0x1000, 0x1, 0x0, 0xa85c}, {0x0, 0x7, 0x0, 0x8}]}}}]}}, {{0x8, 0x1, r2}, {0x278, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff55e2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xcd5, 0x3, 0x0, 0x200}, {0x9, 0x7, 0x5, 0x4}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x77}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5a4}, 0x1, 0x0, 0x0, 0x800}, 0x10) 11:05:46 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x1d}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="d3689103ab41"}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}]]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x16c, r0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x7a, 0x33, @mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {0x3d8}, @device_b, @device_b, @from_mac=@device_b, {0x7, 0x3}}, @ver_80211n={0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x18, 0x1}, {0x30}]}, @void, @val={0x2d, 0x1a, {0x2000, 0x2, 0x7, 0x0, {0x101, 0x1, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x2, 0x80}}, @val={0x72, 0x6}, [{0xdd, 0x28, "e1893470f3dd791764ab2aa4a22de09d20f635595574aa9eb56c3675702b8bb58ef4c47b38db6b65"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}}, @NL80211_ATTR_FRAME={0x76, 0x33, @mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x80}, @device_b, @device_b, @random="6d6adad29ac2", {0x9, 0xf1}}, @ver_80211n={0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x0, 0x4e, @default, @void, @void, [{0xdd, 0x4e, "8016430d99da6b67bcfe1bbcd825e77c6104e480fc9ca8efedbe944957c1525cdbed12b555ea9de25a67191ae36c220ae1450dfe2b6692e009c4356614471510d2ef00e1baf9fb078ed065504cda"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x2}, @broadcast, @from_mac=@device_b}}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {}, @broadcast}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000801}, 0x44000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x254, r3, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xc4, 0x5b, "28e220da32ff0687415483c844d4ff6a0364ea5ca01a059805a921f26a32200192baebde65b8a99de78377137498707e88d7ce27d8094226f1c101f24222c1002a65e53ae63e0e5397f51e433677511d24d7fcc41891079a7a37e042219fd2d728d378b91e014777a652c1423ba65b06c40d37dc96011cf7b1a91aa83c18cc647062fdd2ee02f411cb0ef9a6470336b16e8de9fc4c5cdd4e77375f36f778d818180ac93d3f0e81b7cbf3b850cc3749c4d2460164c0cae388fc15bece6eae0c86"}, @NL80211_ATTR_FRAME_MATCH={0x68, 0x5b, "60763da33ffdac43fb7e5dabf90146cbba55d634a773f7c3928a75c4c29f21e04df22883632718c96c96c195b14b33e9478383a81cc5252aad81b8857811d7830f478285d6693ce70d2f2b8d42fc26144d8c5307a000e74d013db5a78b82894375a0807d"}, @NL80211_ATTR_FRAME_MATCH={0x9e, 0x5b, "80dd7c065cbd45ac97ade44d5c13b87ffa22230be3777d31fccb2f6ccd15bc84daa10ade3e61264008d425b3f0f68a4e126b5e3709ba01e8374b90c3ba3dc70a78d211bc7bb5c7cca1bfddaa352e0c2fb07f89904d182b9b6a999539acee1cb0f06cf96dcc778d7391e252063f216e9e6e6da9a6d4714459b07c1ce0339320c805d79f12950061de92b9066ea6b6d42b1e3a601c472decee6941"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf0}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfbff}, @NL80211_ATTR_FRAME_MATCH={0x51, 0x5b, "48fe04fcb01d5716b5d93272b27752ba9db2ee87eae6d38d04d79b19a64e5e2e441806abeefca456012781375a489db634941bb2b734bbe3783adf051dd7ce9e668448bfa52ec9bf1b231e608d"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x254}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x88224004}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x70}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x40) syz_genetlink_get_family_id$team(&(0x7f0000000900), r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x70, 0x7763, 0x21, @empty, @remote, 0x8, 0x7800, 0x5fbd, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl1\x00', r4, 0x29, 0xb1, 0x81, 0xfd92, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0xf826, 0x40, 0x3, 0x811a}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b00)=0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000041}, 0x51) socketpair(0xa, 0x1, 0x9, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000c80), r5) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0xa0, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xef97, 0x4e}}}}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x1, 0x1, 0x0, {0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x8}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x57}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x1720}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff0d}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x2}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x20}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x18b0}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2400c860}, 0x1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r2) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={&(0x7f0000000f80), 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x50, r6, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0xd, 0xa, "befd67a8e7ec1caf72"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bcf9a1c61a"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fd97b5884fe8d21af330f50822"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8050}, 0x20044004) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x54, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x20014004}, 0x801) 11:05:46 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x238, r0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x159, 0x2a, [@ssid={0x0, 0x18, @random="cee644b0b2afe29ec18e93a5c3ba79e7681c2a0d7ebf005e"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x72, @not_ext={{0x0, 0x0, 0x1}, 0x0, 0xb0, 0x400, @device_a, 0x200, "", 0x400, 0x8, 0x8, [{{0x1}, @device_a, 0x1f}, {{}, @device_a, 0x4cc1}, {{}, @device_b, 0x3f}, {{0x0, 0x0, 0x1}, @device_b, 0x116d59ca}, {{0x1}, @device_b, 0x3f}, {{0x1, 0x0, 0x1}, @broadcast, 0x8fef}, {{0x1, 0x0, 0x1}, @device_b}, {{0x1, 0x0, 0x1}, @device_b}]}}, @ssid={0x0, 0x6, @default_ap_ssid}, @random_vendor={0xdd, 0xa4, "21695e728eacbd16152a998f9c03e405c8fb571ee8f09b92e172c11eea3c2bba1c43edfe5752024f73c6630a510b55782269c67c589ad2b0c75094e716d98a7819a8df734f6dab4093fd079e933ad36d3e9540dbe724343241e6ccd9ff697fee18dc5ae1852e64eacebcc1ae6e0c945e3848b5910be0aa420d1a408b66c646ed7d3769d59d293da40e53832aa7852c84258156a10a4813037533b89bfb0d30acfac7430f"}, @chsw_timing={0x68, 0x4, {0x7, 0x1}}]}, @NL80211_ATTR_IE={0x71, 0x2a, [@fast_bss_trans={0x37, 0x5e, {0x20, 0x1, "1fdb249eaa6408d217abc7bda96b841c", "285ae85f47c6692e10ffff75dc7a077f08b3be629c4e76c1feffc981128f83e9", "b3ec038b98f150cbf7cce65a6534b8c745eef57a0f8a51ef12da3b24d53a0197", [{0x3, 0xa, "528ca26ce9a6b92a9cd6"}]}}, @mesh_id={0x72, 0x6}, @tim={0x5, 0x3, {0x0, 0xd3, 0x3f}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7f}, @NL80211_ATTR_IE={0x4b, 0x2a, [@supported_rates={0x1, 0x5, [{0x12}, {0x4, 0x1}, {0x5c, 0x1}, {0x2, 0x1}, {0xb, 0x1}]}, @preq={0x82, 0x20, @ext={{0x0, 0x1, 0x1}, 0x1, 0x7, 0x6, @device_a, 0x2, @broadcast, 0xfff, 0x1}}, @mic={0x8c, 0x10, {0xc10, "e18ed9de0de9", @short="64965435d156a39d"}}, @supported_rates={0x1, 0x2, [{0x0, 0x1}, {0x19}]}, @ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x280, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x110, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xc8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8c2fc5c40e55db24}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000050) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x5e}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfff7}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7a8}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x19, 0xac, "74dac88ccf1079fd7a8ec50e4917289d1789a19925"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048040}, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c048}, 0x651e471017e6ddb6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x80, 0x0, 0x100, 0x5, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x72}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1a10b621acfd6efe1d5c32ab7d"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "1e21bc35f152e56819fc"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40805}, 0x95) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, r0, 0x6bf72d94c7c323d, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xda82, 0x64}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x5c, r7, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20008030) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x58, r0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1f, 0x6e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0xc004) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x38, r7, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004041}, 0x840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001080)={'batadv_slave_1\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0xfc97ff13780c965e}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x40, 0x80}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 11:05:46 executing program 4: setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x88a2}, @val={0x1, 0x1, 0xfffb, 0xe9, 0x3a0c, 0x8}, @mpls={[{0x44c3, 0x0, 0x1}], @llc={@snap={0x1, 0x1, "ce", "b856ec", 0x8906, "4303ac87741f3dd37c3639bed7f06a7338f2f104b64ecc5cb48cf6189624af4ef62a2a608a41d9c880f301993fc45ed56aa673d7c66ef083338bcfff298d910c429a703abdadf949a872ccd45e1867466e8f5f63e8f4c8abf1cd3d178cffff54abdc9732839c35614746bc7d12398e90ec19e244f586e16ddd948c8360f978af18d90911377f44b912ea6054"}}}}, 0xa6) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x80800) recvfrom$packet(r1, &(0x7f00000001c0)=""/117, 0x75, 0x2022, &(0x7f0000000240)={0x11, 0x21, r0, 0x1, 0x7, 0x6, @remote}, 0x14) syz_extract_tcp_res(&(0x7f0000000280), 0x7, 0x7) r3 = syz_usb_connect(0x5, 0x14e, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0xc3, 0x46, 0xfc, 0xaf, 0x1199, 0x9008, 0x75ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13c, 0x1, 0x0, 0x8, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x9, 0x7, 0x84, 0xb3, 0xd3, 0x1f, [@uac_control={{0xa, 0x24, 0x1, 0xb1e5, 0x3f}, [@processing_unit={0xb, 0x24, 0x7, 0x5, 0x2, 0x80, "80fac679"}, @selector_unit={0x6, 0x24, 0x5, 0x6, 0x3, '$'}]}], [{{0x9, 0x5, 0xb, 0xc, 0x3ff, 0xd7, 0x2, 0x3, [@generic={0x3a, 0x30, "2cdb18a21ad161d4c4612e436fba24eb8185154ae9ac4d1db7470c45bcfa60492be38af33c79443d7f92efcbcf1f243a91e4ccf31d51244b"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x5, 0xe1, 0x8}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x1, 0x6, 0x81}}, {{0x9, 0x5, 0x8, 0x8ed73bd24b55c8a0, 0x10, 0x3f, 0x0, 0x3f}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x2, 0x20, 0x2, [@generic={0x38, 0x10, "a6d81f2729b1cd8adf4f6492082a3e089670e1187466ed7d62a4f51a044cfdcc1761435eac1794323ff8e26df18135bdbd9199a43798"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x5, 0x7d, 0x3f, [@generic={0x5f, 0x9, "0fce0e09a11044193d53c7f4a4aa4c9542e66338d982d4876048808e668a6ffce073e1d936874c325dc822d0e5d56147ab2c0b1a61b5ca23f41017c1f79acc081287e6f7d34d22af03b994f9f6812b5c4e3eb6e901637feb72dccbb368"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x2, 0x4, 0x8}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0xff, 0x1, 0x81, 0xff, 0x2}, 0x3d, &(0x7f0000000480)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x20, 0xf00, 0xd934, [0xf, 0xff000f, 0xf, 0xc0, 0xffff00, 0x3fc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "20b8ee3b330e1b089064ecad0d7e85bd"}]}, 0x8, [{0x36, &(0x7f00000004c0)=@string={0x36, 0x3, "71bac2172bb0dc025cd03fa0635309e70a6b48b084cd6bee6bf42c7bfe7785d6078477ef0fd29f9d784fd029b9dcc9fca1cc74b5"}}, {0x1c, &(0x7f0000000500)=@string={0x1c, 0x3, "3089cedfe3a3cf4914954afba6fcc3c9165666beefe2735ffc56"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x100c}}, {0x4a, &(0x7f0000000640)=@string={0x4a, 0x3, "0c5ec89d7caa05fcc8e75ab92d0dac712616018b78b7479025e2d95370eac9f59bfee115d7e7ab54602e7aefb9c2a9859776c931bb88a35b20a6dbaced85cc6138c6f0563f41d335"}}, {0xf6, &(0x7f00000006c0)=@string={0xf6, 0x3, "b3c32b54c286b076eef4b55912bc6ee64263f4084b9456d00a595dd51e3b7cd5937ab1651a7685563ed3184a87dd09086ab50295bab777c62b4fa60e3650e029281f558e31040e50dd31d42ec555e1b236623cf7d5e84176a694691423717936857fa230e1295adf1be98c66d44df6ec459e44763de3890513b888eedbcd31590b70db7e573aaba6af60f87d73892f38112f78cd237e7a83231197e5cd495ede54d2de30d57fc1f150e1348979b280164ca876f4007fafe9923c42b112af3aaca669a59ddfabeb4d806399f6be6886167b4b625a287a8176ea9412448e10fbd03598f69a3accc095abaf9555deaaacbd55944b23"}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000980)={0x14, &(0x7f0000000840)={0x0, 0x0, 0xbe, {0xbe, 0x35, "9ebeff59db44bf569d0ebd15ef5ae98d9cd72c29b5f38373020c8116b1929ad216e96c610e4c3256416fed59303c93f2dd94397c9b6f9874389c2210558295859618638aee26be2794a17b777c7f6abab230446d8507c20f1b3098b6adecdb6a1263f473dc183f044798e58a207825a2c59c50657d22f76446337177290fdb4d619bd4c82b64b9316448f30e664352a0f3d347a37e0080d65462b2fa39d731694a9c8363fe406e2de67d5d3201ff88889ac49886c79f1d28396366fc"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}}, &(0x7f0000000c00)={0x34, &(0x7f00000009c0)={0x20, 0x2d, 0x26, "74ae4b28282f33160860b68a20f0a03d7d983a5cfc54b69c25b306c1fc66c2ace2203bfae010"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a80)={0x20, 0x0, 0xdf, {0xdd, "5691732a0bcbca6a1f576daf91a14c5d7c9b81e22b4008bbf99d8f9335dd2a19bf3ecdff6df1afda476e484af6b0994849c16d25119f9cac1c4afa8d34eb66ad1da6399002dcd8cc687905b7f22ac26fe4c4c90ee9616e7dd75fe36c672a819057c8310b1df4e922b4ed42a7c70938046db62a06cc39b496623976b86347f589032fcb1d8cbf76276bbd77d66cb20db7e8edcc648c5820891673e3327ff7ecce26df3bd56a50a530e0c15141c9bf35b74b5498760ab014cd597687a601099a49ffa3deb9dc7ba8605c2426c91b924fd82eacbc0c6fd0eb10bbdceebd24"}}, &(0x7f0000000b80)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000000bc0)={0x20, 0x0, 0x1, 0x1f}}) socketpair(0x8, 0x800, 0xffffffff, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r6, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x48c0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000dc0)={0xc941, 0x800, 0x8, 0xd}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x3f}, @device_b}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40002801}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000f40)={'wlan1\x00'}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000f80)={r0, 0x1, 0x6, @link_local}, 0x10) syz_usb_ep_read(0xffffffffffffffff, 0x5, 0x69, &(0x7f0000000fc0)=""/105) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r7, 0x89fa, &(0x7f0000001100)={'syztnl0\x00', &(0x7f0000001080)={'ip6_vti0\x00', r2, 0x2f, 0x3, 0x4, 0xfffffff7, 0x1b, @dev={0xfe, 0x80, '\x00', 0x26}, @loopback, 0x700, 0x8000, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000011c0)={'ip6gre0\x00', &(0x7f0000001140)={'ip6gre0\x00', r2, 0x4, 0x1, 0x3, 0x7ff, 0x47, @empty, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x3, 0x365}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000002640)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002600)={&(0x7f0000001bc0)={0xa14, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9b10}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb9b}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xee03}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r2}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r2}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x34}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9b}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x400, 0x8, 0x8, 0x4}, {0x6, 0x7f, 0x7, 0x7}, {0x4, 0x6e, 0x9c, 0x8f}, {0xe000, 0x40, 0x8, 0x8}, {0x1, 0x4d, 0x3, 0xff}, {0xfff9, 0xa4, 0x1, 0xd1ac}, {0x400, 0x0, 0xbc, 0x2}, {0x7fff, 0x5, 0xe, 0x8}, {0x4b2, 0x0, 0x7, 0x101}, {0x5127, 0x2, 0x3f, 0x7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xedf}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x81, 0x7, 0x5}, {0x3, 0x3, 0x4, 0x4}, {0x7, 0x2, 0x2, 0x40}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0xa14}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 11:05:46 executing program 5: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x11, 0x10, 0xfffffffc, 0x8000, {{0x36, 0x4, 0x2, 0x3, 0xd8, 0x66, 0x0, 0x4, 0x29, 0x0, @local, @local, {[@rr={0x7, 0x27, 0x8b, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @empty, @rand_addr=0x64010101, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0xa}]}, @timestamp_prespec={0x44, 0x3c, 0xcc, 0x3, 0x3, [{@multicast1, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@private=0xa010101, 0x3}, {@rand_addr=0x1f, 0x7f}, {@multicast1, 0xffff}, {@local, 0x40}, {@private=0xa010100, 0x3}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x20, 0x0, [{0xa2d8351afbdd838f, 0x9, "f158db9c7dc666"}, {0x7, 0xe, "01a856d9cb0fbff291ea1892"}, {0x6, 0x3, 'T'}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x5, 0xf, "00757a9b4d2b00978714f43a51"}, {0x1, 0xf, "aa6bc7a079a58bd2c9b9c16874"}, {0x2, 0x7, "d4e2800fc6"}]}, @rr={0x7, 0xf, 0xba, [@empty, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x7fffffff, 0x400, {{0x20, 0x4, 0x2, 0x1, 0x80, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x13}, {[@timestamp={0x44, 0x8, 0x2f, 0x0, 0x4, [0x5140]}, @timestamp_prespec={0x44, 0x34, 0x1d, 0x3, 0x5, [{@broadcast, 0x9735}, {@multicast1, 0x5}, {@rand_addr=0x64010100, 0x1}, {@remote, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xfffffffc}, {@remote}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xe1, 0x3, 0x4, [{@private=0xa010102, 0x40}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x6b77ec72}, {@multicast2, 0x5}, {@remote, 0xf7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x40004852) getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000840)={'erspan0\x00', r0, 0x700, 0x1, 0x6a, 0x6f, {{0x3a, 0x4, 0x1, 0x2, 0xe8, 0x67, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp={0x44, 0x10, 0xe6, 0x0, 0xc, [0x8000, 0x101, 0x7fffffff]}, @timestamp_prespec={0x44, 0x3c, 0xb5, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x6}, {@empty, 0x3}, {@private=0xa010101, 0x5b}, {@remote, 0x3000000}, {@multicast2, 0xf34}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4}, {@empty, 0x2}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xae, [@multicast2, @multicast2, @private=0xa010101]}, @timestamp={0x44, 0xc, 0x42, 0x0, 0xb, [0x0, 0x85]}, @end, @timestamp_addr={0x44, 0x24, 0xd7, 0x1, 0x3, [{@loopback, 0x6}, {@broadcast, 0x8}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x1}]}, @timestamp_addr={0x44, 0x44, 0xbb, 0x1, 0xc, [{@remote, 0x2}, {@rand_addr=0x64010101, 0x3}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7c}, {@private=0xa010101, 0xc6b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2e9f}, {@broadcast, 0x8000}, {@rand_addr=0x64010101, 0x8000000}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl0\x00', r0, 0x2f, 0x1, 0x80, 0x4000000, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x7800, 0x8, 0x1, 0x9}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001180)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000000a80)={0x6a4, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r0}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5a71772c}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r1}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r1}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2d1}}}]}}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x15}, 0x11) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x34, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x847a}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x800}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001340), 0x107800, 0x0) sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x3c}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001440)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x7c, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x100}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x81}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x200}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040d1}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000001680)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001700)={'batadv_slave_0\x00', 0x0}) accept4$packet(r10, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001780)=0x14, 0x80000) sendmsg$ETHTOOL_MSG_DEBUG_GET(r11, &(0x7f0000001d80)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b00)={0x210, r7, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x14088}, 0x20040041) 11:05:46 executing program 6: sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x14}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044001}, 0x880) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x400, 0x2, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x10, 0x7820, 0x7fffffff, 0x80, {{0x24, 0x4, 0x3, 0x9, 0x90, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@timestamp={0x44, 0x18, 0x8, 0x0, 0x9, [0xffffffff, 0x13, 0x10001, 0x6, 0x81]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x6a, 0x3, 0x1, [{@empty, 0xfffffff9}, {@rand_addr=0x64010101, 0x4}, {@private=0xa010101, 0x3f}, {@rand_addr=0x64010101, 0x3}, {@empty, 0xe37}]}, @timestamp_addr={0x44, 0x14, 0xf1, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x43}}, {@multicast1, 0x3}]}, @rr={0x7, 0x17, 0x40, [@dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @remote]}, @generic={0xda, 0xc, "1e4bf07a2f9f5f80d8bb"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x2f, 0x3f, 0x3, 0x80, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xda4dd5395c02a7b0, 0x8000, 0x0, 0x7f}}) r7 = accept$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x7, 0xfffffffc, {{0x7, 0x4, 0x0, 0x7, 0x1c, 0x65, 0x0, 0x7, 0x29, 0x0, @empty, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xf9, [@remote]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x1f, 0x3ff, 0x2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x80, 0xffff, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001280)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001240)={&(0x7f00000009c0)={0x858, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8553}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe3b}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xac}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe868}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff7f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}]}, 0x858}, 0x1, 0x0, 0x0, 0x10}, 0x10) getsockname$packet(r7, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xc4, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x42, 0x33, @mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7fff}, @device_a, @device_a, @initial, {0x2, 0x800}}, @tdls_setup_resp={0xc, 0x1, 0x50, 0x6, @val=0x400, @val={0x1, 0x1, [{0x5}]}, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x114, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x6, 0xc8, 0x29}}, @void}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44}, 0x0) r14 = socket(0x11, 0x1, 0x557) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r14, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f0000001600)={0xc4, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "5c6eb02b5c86"}]}, @NL80211_ATTR_NAN_FUNC={0xa0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x85, 0xb, "25c4ff4e52253b6f95a35bbf09319c8a0076394a8610049ce9b06b77342ce8ec75f469911e2eed60f0ce1c5ce53370ad113743851f13e8c14256a270cce1c7cdd81cc8983de39a7b1fe56f59c2e2122f5548391a3c27a3c8763960d82a267ebda98bf95e87aa7b39f87e0f33d0c8a1b4956da6a8362a26bad41203e1b66981805f"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8}]}]}, 0xc4}}, 0x20000040) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000001780)={r13, 0x1, 0x6, @broadcast}, 0x10) 11:05:47 executing program 7: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x7, 0x4fcc9dd8, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x1, 0x8, 0x800, 0x43c7}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @can={0x1d, 0x0}, @l2tp={0x2, 0x0, @private=0xa010100, 0x3}, @llc={0x1a, 0x303, 0x2, 0xa5, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='erspan0\x00', 0x800000000000000, 0x51e5b7cb, 0x101}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) r4 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14, 0x800) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)={0x430, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x80, 0x8, 0x40}, {0xc084, 0x4, 0x81, 0x4}]}}}]}}, {{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2d4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x3f, 0x80, 0x7f}, {0xfa08, 0xfd, 0x5, 0x6}, {0xfa2, 0x7f, 0x40, 0xffffff9d}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x430}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) getsockname$packet(r4, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000008c0)=0x14) connect$packet(r6, &(0x7f0000000900)={0x11, 0x15, r8, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000980)={'erspan0\x00', &(0x7f0000000940)=@ethtool_sset_info={0x37, 0x101, 0x80000001, [0x1, 0x2, 0x4, 0x800]}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) getpeername$packet(r6, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a40)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a80)={'syztnl0\x00', r1, 0x4, 0x7, 0x81, 0x7, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}, @local, 0x10, 0x8000, 0x3, 0xfffffff8}}) r11 = accept$packet(r6, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xdc, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7f}, @ETHTOOL_A_RINGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8011) r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r13, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) connect$packet(r14, &(0x7f0000000f80)={0x11, 0x7, r0, 0x1, 0x1}, 0x14) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10001}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) [ 119.035027] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.036510] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.052755] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.053087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.054892] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.057641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.059344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.060235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.060757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.075378] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.104589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.109722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.111475] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 119.112423] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.134262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.141160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.143256] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.144574] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.183378] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.184907] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.186681] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.187241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.188713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.195730] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.195814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.197056] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 119.197589] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.228258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.230584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.230951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.234105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.235695] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 119.238314] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.245132] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.253016] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 119.254268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.263282] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 119.265934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 119.268697] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.283137] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.292734] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 119.294543] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.297926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.324649] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.351725] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.363783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.374748] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 119.375665] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.136929] Bluetooth: hci1: command tx timeout [ 121.201548] Bluetooth: hci0: command tx timeout [ 121.201595] Bluetooth: hci2: command tx timeout [ 121.267078] Bluetooth: hci3: command tx timeout [ 121.267418] Bluetooth: hci4: command tx timeout [ 121.331282] Bluetooth: hci6: command tx timeout [ 121.331308] Bluetooth: hci5: command tx timeout [ 121.520637] Bluetooth: hci7: command tx timeout [ 123.187508] Bluetooth: hci1: command tx timeout [ 123.248516] Bluetooth: hci2: command tx timeout [ 123.256501] Bluetooth: hci0: command tx timeout [ 123.317551] Bluetooth: hci4: command tx timeout [ 123.317663] Bluetooth: hci3: command tx timeout [ 123.379187] Bluetooth: hci6: command tx timeout [ 123.382640] Bluetooth: hci5: command tx timeout [ 123.570613] Bluetooth: hci7: command tx timeout [ 125.232670] Bluetooth: hci1: command tx timeout [ 125.296777] Bluetooth: hci0: command tx timeout [ 125.297401] Bluetooth: hci2: command tx timeout [ 125.360586] Bluetooth: hci3: command tx timeout [ 125.360610] Bluetooth: hci4: command tx timeout [ 125.425646] Bluetooth: hci5: command tx timeout [ 125.425964] Bluetooth: hci6: command tx timeout [ 125.616546] Bluetooth: hci7: command tx timeout [ 127.281661] Bluetooth: hci1: command tx timeout [ 127.345493] Bluetooth: hci2: command tx timeout [ 127.345597] Bluetooth: hci0: command tx timeout [ 127.409250] Bluetooth: hci3: command tx timeout [ 127.409618] Bluetooth: hci4: command tx timeout [ 127.473550] Bluetooth: hci6: command tx timeout [ 127.473664] Bluetooth: hci5: command tx timeout [ 127.665721] Bluetooth: hci7: command tx timeout [ 179.335528] syz-executor.5 (287) used greatest stack depth: 23248 bytes left [ 181.624081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.629247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.653311] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.721455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.742759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.744346] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.750322] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.752765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.757939] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 181.758360] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.775230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 181.782534] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.998193] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.010989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.011700] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.039634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.041007] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 182.048870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.049821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.051022] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 182.059510] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 182.060618] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 182.061548] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.062666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.065099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.070715] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 182.071662] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.074828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.077638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.081560] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.084621] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 182.085095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.090814] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 182.091292] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 182.102989] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 182.133714] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.135143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 182.139526] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 182.196158] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 182.197388] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.215766] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.216378] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.218596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.219398] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 182.220460] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.226630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 182.240995] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 182.244814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.794067] Bluetooth: hci1: command tx timeout [ 183.856493] Bluetooth: hci0: command tx timeout [ 184.241760] Bluetooth: hci4: command tx timeout [ 184.242137] Bluetooth: hci5: command tx timeout [ 184.305501] Bluetooth: hci2: command tx timeout [ 184.305715] Bluetooth: hci7: command tx timeout [ 184.369654] Bluetooth: hci3: command tx timeout [ 184.433471] Bluetooth: hci6: command tx timeout [ 185.841956] Bluetooth: hci1: command tx timeout [ 185.907456] Bluetooth: hci0: command tx timeout [ 186.289523] Bluetooth: hci4: command tx timeout [ 186.289635] Bluetooth: hci5: command tx timeout [ 186.353658] Bluetooth: hci7: command tx timeout [ 186.353815] Bluetooth: hci2: command tx timeout [ 186.416652] Bluetooth: hci3: command tx timeout [ 186.480501] Bluetooth: hci6: command tx timeout [ 187.889162] Bluetooth: hci1: command tx timeout [ 187.953732] Bluetooth: hci0: command tx timeout [ 188.337529] Bluetooth: hci5: command tx timeout [ 188.337635] Bluetooth: hci4: command tx timeout [ 188.401601] Bluetooth: hci7: command tx timeout [ 188.401704] Bluetooth: hci2: command tx timeout [ 188.465588] Bluetooth: hci3: command tx timeout [ 188.529500] Bluetooth: hci6: command tx timeout [ 189.941725] Bluetooth: hci1: command tx timeout [ 190.001447] Bluetooth: hci0: command tx timeout [ 190.385534] Bluetooth: hci4: command tx timeout [ 190.385639] Bluetooth: hci5: command tx timeout [ 190.448663] Bluetooth: hci2: command tx timeout [ 190.448771] Bluetooth: hci7: command tx timeout [ 190.512601] Bluetooth: hci3: command tx timeout [ 190.576484] Bluetooth: hci6: command tx timeout [ 244.181069] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.183617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.184131] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.186280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.187792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 244.188275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.447029] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.450656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.452156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.453558] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.454005] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.455008] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.457190] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.460029] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.460653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.460968] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.461901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.462729] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.467061] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.470639] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 244.473298] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.477707] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.482656] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 244.488054] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.492883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.497494] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.534344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.539660] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.542241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.567682] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.568559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.608859] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 244.657828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.658291] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.675695] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 244.675709] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.700764] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.711690] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 244.713069] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 244.725805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.734657] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 244.736146] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 244.739051] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 244.740295] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 244.741766] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.757182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.827735] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 244.839469] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.192586] Bluetooth: hci0: command tx timeout [ 246.512526] Bluetooth: hci2: command tx timeout [ 246.707975] Bluetooth: hci1: command tx timeout [ 246.769127] Bluetooth: hci4: command tx timeout [ 246.833620] Bluetooth: hci3: command tx timeout [ 246.833639] Bluetooth: hci7: command tx timeout [ 246.896727] Bluetooth: hci6: command tx timeout [ 247.089553] Bluetooth: hci5: command tx timeout [ 248.270829] Bluetooth: hci0: command tx timeout [ 248.562192] Bluetooth: hci2: command tx timeout [ 248.754445] Bluetooth: hci1: command tx timeout [ 248.827277] Bluetooth: hci4: command tx timeout [ 248.880639] Bluetooth: hci7: command tx timeout [ 248.883472] Bluetooth: hci3: command tx timeout [ 248.956496] Bluetooth: hci6: command tx timeout [ 249.137702] Bluetooth: hci5: command tx timeout [ 250.294494] Bluetooth: hci0: command tx timeout [ 250.608589] Bluetooth: hci2: command tx timeout [ 250.800739] Bluetooth: hci1: command tx timeout [ 250.864569] Bluetooth: hci4: command tx timeout [ 250.928623] Bluetooth: hci3: command tx timeout [ 250.928901] Bluetooth: hci7: command tx timeout [ 250.992634] Bluetooth: hci6: command tx timeout [ 251.184611] Bluetooth: hci5: command tx timeout [ 252.351455] Bluetooth: hci0: command tx timeout [ 252.656487] Bluetooth: hci2: command tx timeout [ 252.848506] Bluetooth: hci1: command tx timeout [ 252.927576] Bluetooth: hci4: command tx timeout [ 252.990450] Bluetooth: hci3: command tx timeout [ 252.990558] Bluetooth: hci7: command tx timeout [ 253.040479] Bluetooth: hci6: command tx timeout [ 253.237465] Bluetooth: hci5: command tx timeout [ 307.246704] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.250752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.272346] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.279900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.281167] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.281969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.282703] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.284090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.286730] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.287970] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.289759] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.290886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.291200] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.292931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.298454] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 307.298968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.316527] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 307.319198] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.353187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.358647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.360996] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.361873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.362963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.363319] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.373961] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.374329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.375174] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.380041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.381089] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 307.381627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.398566] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.413776] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.417513] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.423283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.423956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 307.424894] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.430326] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 307.436859] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 307.437519] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.438738] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.440320] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.441777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.445835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.446999] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 307.448996] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.469762] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.481737] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 307.482868] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 309.361779] Bluetooth: hci2: command tx timeout [ 309.362305] Bluetooth: hci0: command tx timeout [ 309.425497] Bluetooth: hci1: command tx timeout [ 309.488487] Bluetooth: hci3: command tx timeout [ 309.488774] Bluetooth: hci6: command tx timeout [ 309.489581] Bluetooth: hci5: command tx timeout [ 309.554626] Bluetooth: hci4: command tx timeout [ 309.555238] Bluetooth: hci7: command tx timeout [ 311.409535] Bluetooth: hci0: command tx timeout [ 311.409662] Bluetooth: hci2: command tx timeout [ 311.472759] Bluetooth: hci1: command tx timeout [ 311.540424] Bluetooth: hci5: command tx timeout [ 311.540532] Bluetooth: hci6: command tx timeout [ 311.540629] Bluetooth: hci3: command tx timeout [ 311.601494] Bluetooth: hci7: command tx timeout [ 311.601615] Bluetooth: hci4: command tx timeout [ 313.456705] Bluetooth: hci2: command tx timeout [ 313.457332] Bluetooth: hci0: command tx timeout [ 313.520571] Bluetooth: hci1: command tx timeout [ 313.584632] Bluetooth: hci3: command tx timeout [ 313.584868] Bluetooth: hci6: command tx timeout [ 313.585077] Bluetooth: hci5: command tx timeout [ 313.654463] Bluetooth: hci4: command tx timeout [ 313.654562] Bluetooth: hci7: command tx timeout [ 315.505511] Bluetooth: hci0: command tx timeout [ 315.505530] Bluetooth: hci2: command tx timeout [ 315.569451] Bluetooth: hci1: command tx timeout [ 315.634611] Bluetooth: hci3: command tx timeout [ 315.634655] Bluetooth: hci5: command tx timeout [ 315.634988] Bluetooth: hci6: command tx timeout [ 315.696667] Bluetooth: hci7: command tx timeout [ 315.696730] Bluetooth: hci4: command tx timeout [ 369.578875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.581984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.581997] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.587813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.601481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.605186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.606990] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 369.608565] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.625162] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.633614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.635762] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 369.640915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.730985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.738833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.744598] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.756560] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.762953] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 369.765501] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.771917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.792121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.794902] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.795887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.800699] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.801982] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.804706] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.805963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.808935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.810630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.813709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.815762] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 369.816974] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.819569] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.820803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.822025] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 369.823717] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 369.824181] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.831762] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.838277] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 369.839181] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 369.843989] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 369.845605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.858938] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.859967] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 369.860670] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.865312] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 369.866044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.894630] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 369.902793] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 371.636131] Bluetooth: hci0: command tx timeout [ 371.773458] Bluetooth: hci1: command tx timeout [ 371.910459] Bluetooth: hci5: command tx timeout [ 371.910985] Bluetooth: hci3: command tx timeout [ 371.911210] Bluetooth: hci2: command tx timeout [ 371.952524] Bluetooth: hci7: command tx timeout [ 371.953039] Bluetooth: hci4: command tx timeout [ 371.954646] Bluetooth: hci6: command tx timeout [ 373.681497] Bluetooth: hci0: command tx timeout [ 373.809095] Bluetooth: hci1: command tx timeout [ 373.936601] Bluetooth: hci2: command tx timeout [ 373.936716] Bluetooth: hci3: command tx timeout [ 373.936774] Bluetooth: hci5: command tx timeout [ 374.000748] Bluetooth: hci4: command tx timeout [ 374.001602] Bluetooth: hci6: command tx timeout [ 374.001719] Bluetooth: hci7: command tx timeout [ 375.729530] Bluetooth: hci0: command tx timeout [ 375.858532] Bluetooth: hci1: command tx timeout [ 375.986224] Bluetooth: hci5: command tx timeout [ 375.986333] Bluetooth: hci3: command tx timeout [ 375.987462] Bluetooth: hci2: command tx timeout [ 376.048505] Bluetooth: hci7: command tx timeout [ 376.048626] Bluetooth: hci6: command tx timeout [ 376.048736] Bluetooth: hci4: command tx timeout [ 377.780295] Bluetooth: hci0: command tx timeout [ 377.904470] Bluetooth: hci1: command tx timeout [ 378.034432] Bluetooth: hci2: command tx timeout [ 378.034576] Bluetooth: hci3: command tx timeout [ 378.034648] Bluetooth: hci5: command tx timeout [ 378.096501] Bluetooth: hci4: command tx timeout [ 378.096532] Bluetooth: hci6: command tx timeout [ 378.096641] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 11:10:52 Registers: info registers vcpu 0 RAX=ffff8880368a1bc0 RBX=ffff8880163c8c10 RCX=0000000000001a65 RDX=0000000000000000 RSI=00000000d9229213 RDI=ffffffff815a949e RBP=0000000000000200 RSP=ffff88803204fdb8 R8 =ffff88806bb779f0 R9 =0000000000000000 R10=ffffffff864053d7 R11=0000000000000000 R12=ffffffff81aeec10 R13=ffffea00003a2e80 R14=0000000000000000 R15=ffff88800e8bba40 RIP=ffffffff84a8cb71 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdd1abca540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0bfce4b710 CR3=000000002b3e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000001 RBX=1ffff11005822fa9 RCX=ffffffff819a98c9 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000005 RBP=8000000007724025 RSP=ffff88802c117d08 R8 =0000000000000001 R9 =ffffed1005822f94 R10=0000000000000001 R11=0000000000000001 R12=ffff88802d95dab8 R13=0000000000001a55 R14=0000000000000001 R15=ffff888025c43930 RIP=ffffffff81719cfa RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc98027d540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc980757000 CR3=0000000025c6c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000000000766e65 XMM04=6c665f7465735f5854435f43414d4800 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000