Warning: Permanently added '[localhost]:5201' (ECDSA) to the list of known hosts. 2025/01/23 01:28:35 fuzzer started 2025/01/23 01:28:36 dialing manager at localhost:38529 syzkaller login: [ 62.912849] cgroup: Unknown subsys name 'net' [ 62.998121] cgroup: Unknown subsys name 'cpuset' [ 63.031093] cgroup: Unknown subsys name 'rlimit' [ 68.238932] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 01:28:52 syscalls: 2217 2025/01/23 01:28:52 code coverage: enabled 2025/01/23 01:28:52 comparison tracing: enabled 2025/01/23 01:28:52 extra coverage: enabled 2025/01/23 01:28:52 setuid sandbox: enabled 2025/01/23 01:28:52 namespace sandbox: enabled 2025/01/23 01:28:52 Android sandbox: enabled 2025/01/23 01:28:52 fault injection: enabled 2025/01/23 01:28:52 leak checking: enabled 2025/01/23 01:28:52 net packet injection: enabled 2025/01/23 01:28:52 net device setup: enabled 2025/01/23 01:28:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 01:28:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 01:28:52 USB emulation: enabled 2025/01/23 01:28:52 hci packet injection: enabled 2025/01/23 01:28:52 wifi device emulation: enabled 2025/01/23 01:28:52 802.15.4 emulation: enabled 2025/01/23 01:28:52 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/23 01:28:52 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/23 01:28:52 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/23 01:28:52 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/23 01:28:52 fetching corpus: 0, signal 0/9435 (executing program) 2025/01/23 01:28:52 fetching corpus: 0, signal 0/9435 (executing program) 2025/01/23 01:28:54 starting 8 fuzzer processes 01:28:54 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe8, r0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000080}, 0x8090) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x73}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x7a62c6bf94b39c4a) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000340)={0x1b, 0x7, 0x1, 0x5, 0x10000, 0xfffffffffffffff9}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x124, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x5, 0x5}, {0x1}, {0x81, 0x7}, {0x8, 0x5}], "20a4ab7c71f870b3"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x0, 0x6}, {0x0, 0x5}, {0xb6, 0x1}, {0xff, 0x4}, {0x6, 0x5}, {0x4, 0x2}, {0x2, 0x2}, {0x9b, 0x4}, {0x9}, {0x7, 0x2}, {0x1}, {0x7f, 0x7}], "04a9fc1c1531db44"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x8, 0x2}], "d7d92f95a3ee8bed"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0xe1, 0x4}, {0x1f, 0x6}, {0x1f, 0x2}, {0x1, 0x5}, {0x87, 0x5}, {0x2, 0x3}, {0x7f, 0x5}, {0x3, 0x3}, {0x41, 0x4}, {0x7f}, {0x80}, {0x6, 0x2}, {0x3f, 0x2}], "00d4177668715ba2"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x3, 0x3}], "9921db62b6ceae65"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x1, 0x1}, {0x7f, 0x3}, {0x1, 0x7}, {0x1, 0x2}, {0x37, 0x5}, {0x93, 0x4}, {0x20, 0x1}, {0x0, 0x7}, {0x1, 0x6}, {0x9, 0x4}, {0x7, 0x7}, {0x0, 0x5}, {0x75, 0x5}, {0x0, 0x3}, {0x7f, 0x2}, {0xf, 0x6}, {0x6, 0x5}], "1a39b921ef9dad8a"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x3}, {}, {0x1f, 0x6}, {0xfb, 0x7}, {0x1f, 0x6}, {0x1f, 0x7}, {0x1, 0x6}, {0x40, 0x3}, {0x6, 0x2}, {0x5, 0x5}, {0x4, 0x5}, {0xbc, 0x5}, {0x2, 0x1}, {0x9, 0x5}, {0x7f, 0x3}, {0x80, 0x2}, {0x5, 0x5}, {0x2, 0x1}, {0xf9, 0x2}, {0x7, 0x3}], "cbcfb3d9ed84f331"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xea, 0x6}, {0x6, 0x3}, {0x93, 0x4}, {0x0, 0x6}, {0x2, 0x1}, {0x9, 0x4}, {0x8, 0x1}, {0x9, 0x6}, {0x7f, 0x5}, {0x7, 0x2}, {0x3, 0x6}, {0x5}], "5c8d7ecf11778a8c"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r5 = open(&(0x7f00000005c0)='./file0\x00', 0x101000, 0x29) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x160, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}}, 0x24000880) pipe2(&(0x7f0000000840)={0xffffffffffffffff}, 0x4800) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x88, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x74, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2dd8b388}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x20000080) pipe2(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getpeername$packet(r6, &(0x7f0000000c40)={0x11, 0x0, 0x0}, &(0x7f0000000c80)=0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x6008084) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000f00), 0x80000, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r9, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x60, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "28f623f973493ad0eee87d05ad78478c70c0da10"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x200400d0}, 0x4000051) 01:28:54 executing program 1: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4801}, 0x1) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000180)=""/20, 0x14}, {&(0x7f00000001c0)=""/23, 0x17}], 0x3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000000380)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f00000004c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) getresgid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000740)={{}, {0x1, 0x1}, [{0x2, 0x0, r1}, {0x2, 0x2, 0xee00}, {0x2, 0x1, 0xee00}, {0x2, 0x5, r3}, {0x2, 0x1, 0xee01}, {0x2, 0x1}, {0x2, 0x3, r4}], {0x4, 0x3}, [{0x8, 0x2}, {0x8, 0x6, r5}, {0x8, 0x2, r6}, {0x8, 0x8fe1662c1f488fae, 0xee00}], {0x10, 0x5}, {0x20, 0x3}}, 0x7c, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000840)="828f6afb16cf401fbcf339357109bec85f3cf5c0417fbc4fd44b6caaacbd9e61bd2af34bc6", 0x25, 0x80, &(0x7f0000000880)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r7, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080c0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xe0, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x1) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c40), 0x2000, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r9, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xf3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4045000}, 0x20004000) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r9) sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r10, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8f}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x100) r11 = open_tree(r9, &(0x7f0000000f00)='./file0\x00', 0x9401) setsockopt$inet_mtu(r11, 0x0, 0xa, &(0x7f0000000f40)=0x4, 0x4) 01:28:54 executing program 2: mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0xad810, 0xffffffffffffffff, 0xad) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x80000000, &(0x7f0000000080)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000140)) syz_io_uring_setup(0x5d8, &(0x7f0000000180)={0x0, 0xc71c, 0x10, 0x1, 0xa6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000040) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f00000003c0)) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10080}, 0x4000000) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000640)={"6f37556d76b0402811493540", &(0x7f0000000580)="1ac687374c08e790b97671ef20a11bf2ac8333806ab43b6a37dee2d8442765b6c13b5024af8428c2b66e44c76abc", 0x2e, 0x4, &(0x7f00000005c0)={0x3, 0x1, 0x5, 0xb, 0x0, 0x1, 0x0, "753b9812", 0xf7, "ce8b06eb", 0xff, 0x1, 0x1, "f32165", "21a1d36c087a0b7f8cf661c38d6b2c5fccf1f4ae0a1e79635b2e297cec1b42f5e77f50ed9844121a70302a85c34f"}, 0x1, 0x4, 0xcd, &(0x7f0000000600)}) syz_io_uring_setup(0x1dd0, &(0x7f0000000680)={0x0, 0xcfb9, 0x2, 0x3, 0x1c0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000700)=0x0, &(0x7f0000000740)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x80, &(0x7f0000000780)=0x2, 0x0, 0x4) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000007c0), 0x111040, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x29, 0x3, 0x0, 0x2, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x1, 0x80, 0x5}}) r4 = openat$cgroup_devices(r1, &(0x7f00000008c0)='devices.deny\x00', 0x2, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000900)=0x4) lsetxattr$trusted_overlay_nlink(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980), &(0x7f00000009c0)={'U-', 0x9}, 0x16, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x15c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x5}, {0x5}, {0x7f, 0x6}, {0x4, 0x6}, {0x4, 0x6}, {0x8, 0x4}, {0x1, 0x1}, {0x8}, {0x9e, 0x4}, {0x80, 0x5}, {0x5}, {0x80}, {0x5, 0x7}, {0x2, 0x2}, {0xd7}, {0x57}, {0x6, 0x4}, {0x6, 0x2}, {0x1f, 0x4}], "67b1a594d62011e1"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x4}, {0x80}, {0x0, 0x5}, {0x3, 0x3}, {0x2, 0x6}, {0x9, 0x5}, {0x3, 0x5}, {0xfd, 0x1}, {0x8, 0x6}, {0x4, 0x2}, {0x2, 0x6}, {0x10, 0x1}, {0x0, 0x6}, {0xfa}, {0x1f, 0x2}, {0x1f, 0x1}, {0x6, 0x1}, {0x1c, 0x2}, {0xff, 0x7}, {0x1f, 0x6}], "b1953c2a0a41a21b"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x78, 0x6}, {0xe7, 0x6}, {0x0, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x80, 0x2}, {0x1, 0x3}, {0x5, 0x4}, {0x80, 0x3}, {0x2a, 0x5}], "4baf233f429731a2"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "55dcdfda26c85fa2"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x3, 0x1}, {0x5, 0x6}, {0x80, 0x2}, {0x2, 0x2}, {0x3, 0x3}, {0x46}, {0x5, 0x5}], "75bd80203addce2a"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x4, 0x1}, {0xf8, 0x3}, {0x9}, {0x6, 0x5}], "f8f84e42ec304556"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x18}, {0xc8, 0x4}, {0x3, 0x5}, {0x7f}, {0xb8, 0x7}, {0xfe, 0x7}, {0x80, 0x4}, {0x9, 0x4}, {0x6, 0x2}, {0x3, 0x6}, {0x1f, 0x1}, {0x96, 0x6}, {0x0, 0x3}, {0xe5, 0x1}, {0x80, 0x4}, {0x40, 0x4}], "06f2dec417326c58"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3, 0x3}, {0x7, 0x1}, {0xff, 0x2}, {0xf5, 0x1}, {0x2, 0x3}], "11279b2949a48045"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x4, 0x1}, {0x5, 0x5}, {0xfc, 0x1}, {0x4, 0x4}, {0x6, 0x3}, {0x30, 0x5}, {0x1f, 0x6}, {0xf6, 0x3}, {0x3, 0x1}, {0x81, 0x7}], "edcd69799dc7057b"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xd3, 0x7}, {0x9, 0x2}, {0x6, 0x5}], 'i1e33N{T'}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x400c804) [ 81.036908] audit: type=1400 audit(1737595734.669:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:28:54 executing program 3: ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@mcast1, 0x38}) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x4, 0x4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/32, &(0x7f0000000140)=0x20) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x101]}, 0x8) write$vga_arbiter(r0, &(0x7f00000001c0)=@other={'decodes', ' ', 'io+mem'}, 0xf) syz_usb_connect$cdc_ecm(0x3, 0x85, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0x40, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0xb5, {{0xb, 0x24, 0x6, 0x0, 0x0, "2e55de30efd7"}, {0x5, 0x24, 0x0, 0x383c}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3, 0x8000, 0x93}, [@mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x0, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x40, 0x3, [0xa6d5, 0x4, 0x1, 0x800, 0x200, 0x81]}, @mbim_extended={0x8, 0x24, 0x1c, 0x53f7, 0x1f, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x20, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x220, 0x2, 0x0, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0x4, 0xb2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x2a, 0x5, 0x81, 0x639cea8dd043c845, 0xf0}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4001}}, {0x2f, &(0x7f00000003c0)=@string={0x2f, 0x3, "7ebc866539132c1d6a81af44ceeea4b44a2496129f3b0afbef952a0d04ee880944a4c4e04e7693cd01513d74ca"}}, {0x1d, &(0x7f0000000400)=@string={0x1d, 0x3, "3d52a54089cf4b45dc5da8d35ca6bd63834b77c18f6f71cca9b173"}}, {0x6d, &(0x7f0000000440)=@string={0x6d, 0x3, "df4920afeeaa69cac35bf482f1aa645b0520690777665141d2cfb958666192edd22ae764aed6992f1d5c7d33ec5fd2e2604da8099d743e7c6cecd31c341f71322b17e109d15752aca1e69cb2c8608b781c9e849078b21b6506722890bc50c3ba960da980f64f0a48ffdee9"}}, {0xb4, &(0x7f00000004c0)=@string={0xb4, 0x3, "ca7cb50df337133af9ec7c76bf4730849d339ce65e0b2de3f25519329284b6fe715f3c354e5e6a6492cb04e748ef416ca067a0ae398567ea9cd2ac75e8a38ecb5e036e0c76ef846196bc570d83ff6ae4b15528d18e7174aef5056a5bf8b77a17267580f2e3e2012469285b8c5bfdd6cea4863399868130f5627b0727f4b10cedeff54589febc227bde97962ade64de41d54224a6fe40190a2bd806521d2870f0089d87d5b379984a80b49306295957a9a613"}}]}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000600)=0x1) r1 = getpgrp(0x0) r2 = fsmount(r0, 0x1, 0x7a) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000640)={r2, r0, 0x6}) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x4) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000680)=""/16) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3, {0x10001}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000a00)={0x64, 0x0, &(0x7f00000008c0)=[@acquire_done={0x40106309, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@flat=@binder={0x73622a85, 0x1101}, @fda={0x66646185, 0x0, 0x0, 0x3a}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/213, 0xd5, 0x1, 0x2f}}, &(0x7f0000000880)={0x0, 0x18, 0x38}}}, @free_buffer], 0xa6, 0x0, &(0x7f0000000940)="0f5550c468c2c84ff9c6ab06684d0703a8d891d0a20ec35785a21c0f6efd1c89f489c9b1d74a83b4629645a4fd81c189d098d3f8216488b055ecad125c2fdd56a2ae431cbaeb3d0a01d1b95bccecf95ec963c344190c1eb851651475ce7b66eee802caabdfcaaea9232e05f0c5bfc99f110ccda549fdf42234710a113cb0e35db129d0348c61adb0bb738fc0921ff535a6b8abc14bce6ace48ee1033c7b57ac4ad692c2159db"}) sendmsg$AUDIT_USER(r2, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0x98, 0x3ed, 0x200, 0x70bd2d, 0x25dfdbfc, "b36d221f61c0726ad8943d58beb5c81a0ff0dbad989d730f2cd5aaafad89e6dcd6d20400e078e00b0a0ea7f38762fc676addeff3ad5b85dab4395e6a4c2bca7742d1b9cee1e4c23816b8cdb955bf62817f747d839abc73d2c678ecb311fe19e63da1a2bc8e0f4ae2ccacffbc8a8af7b1ea71b6cf5997901b9d421f477fcb11f09d051f7b48ac84", ["", "", "", "", "", ""]}, 0x98}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000bc0)={0x10000, 0x1f, 0x1000, 0x80000000, 0x4, "2c4df21457309496337516f1f7b5fc33455171", 0x9, 0x400}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000c00)) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000002400)={0x2, 0xfd, "aee27701ab3dc1a3599a67c44c1b351ed964205543f0fdbad0e1fcf0d7cc993f83b6b0713f2ca9ac674b829cd3e118322fbcb813be7814632a769d6f139b65afe933bcb081c7128d283255441575cb0d1446fe1410dbbc5a572fd4bf9d6f766fb84ca1bb12756867fe6be9011603ed7eb00d75d3c422873eedb13585b9b8bd330551da4d00fa1fb36d06499e7d7f557b2cdc05eff063e9da54a9d205920bce8581fa3b617eb3068a26abfa841c78e09cd67faadd687f771988311fc63b59fbb1a797e42ff0b613bc647ae89110e9b9c752693ad7302072299dac5dda1ed5a84ba5b0a620cdbf955fc1a6a104e732ba3e30ee624039652e1f4cd098eba5"}) 01:28:54 executing program 4: ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000040)) semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000000080)=""/18) semctl$SEM_STAT(0xffffffffffffffff, 0x3, 0x12, &(0x7f00000000c0)=""/158) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000180)=0x8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004200)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f0000001380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001400)=""/191, 0xbf}, {&(0x7f00000014c0)=""/76, 0x4c}, {&(0x7f0000001540)}, {&(0x7f0000001580)}, {&(0x7f00000015c0)=""/103, 0x67}], 0x5, &(0x7f00000016c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001740)=""/187, 0xbb}, {&(0x7f0000001800)=""/188, 0xbc}, {&(0x7f00000018c0)=""/181, 0xb5}, {&(0x7f0000001980)=""/87, 0x57}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/197, 0xc5}, {&(0x7f0000002b00)=""/47, 0x2f}], 0x7, &(0x7f0000002bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000002cc0)=@abs, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000002d40)=""/213, 0xd5}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000003f40), 0x6e, &(0x7f0000004000)=[{&(0x7f0000003fc0)=""/29, 0x1d}], 0x1, &(0x7f0000004040)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004080)=@abs, 0x6e, &(0x7f0000004140)=[{&(0x7f0000004100)=""/38, 0x26}], 0x1, &(0x7f0000004180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}], 0x7, 0x0, 0x0) sendto$inet6(r10, &(0x7f00000043c0)="5d56225849f324fe2294cc455ddddadb511abe0ee4aead43e4143ebab8d58b13fe8fc9b5cb95343bee48cd26f600bd637e6f6119", 0x34, 0x4004000, &(0x7f0000004400)={0xa, 0x4e22, 0x8001, @rand_addr=' \x01\x00', 0x81}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000004480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000004540)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x17}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040004) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000004580)="2933de9da0039231626520a5c30569a3320cd37da4b3adbdf3efd2030e71b4e27f8ab937e4113e017d4d41f9681e2b17968cc3596cfd2db16f945820471fa2c4cc940a69163223db37053160ac39b0b95b7e042a4479272855942e521f55149a9b5ee08535f91661d7d479149156fc45452d9f7b35e429340773ad6f5bac64d5682cfbc0d6294d670aae02a8505578e736a63bbc1b403e72779991eb7cd740099fad0542e08ba2560c181050da3cb0e27d8aaa55f0fa74c30eb450b3af91eb2700dcfe03d68996bd896dd893e3db7c6706") ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000004680)={0xffff, 0x5}) mknodat(r0, &(0x7f00000046c0)='./file0\x00', 0x200, 0xddbe) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000004800)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000047c0)={&(0x7f0000004740)={0x58, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc6be}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb90}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000004840)=0x3) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000048c0), r8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000004980)={'sit0\x00', &(0x7f0000004900)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0xbe, 0x1, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x8, 0x1, 0x8, 0x101}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000004a80)={'tunl0\x00', &(0x7f00000049c0)={'tunl0\x00', 0x0, 0x7, 0x80, 0xfffffffd, 0x2, {{0x20, 0x4, 0x1, 0x34, 0x80, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x43}, {[@rr={0x7, 0x7, 0xfd, [@dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp_addr={0x44, 0x2c, 0x56, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0xe1e}, {@local}, {@multicast2, 0x5}, {@remote, 0x10001}, {@multicast1, 0x2}]}, @cipso={0x86, 0x39, 0x1, [{0x5, 0xb, "7cf3ffa05afc629f2a"}, {0x5, 0xb, "3bbbd936a5c891eb8a"}, {0x2, 0x7, "c742c2a6ad"}, {0x1, 0x9, "75a686ae7b40bf"}, {0x5, 0x3, "ee"}, {0x6, 0x3, '-'}, {0x5, 0x7, "c68af99123"}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000004bc0)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004b80)={&(0x7f0000004ac0)={0xb8, r12, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44000}, 0x4020050) sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000004d00)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c80)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x84, 0x65}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4810) 01:28:54 executing program 5: sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0xaa}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x45) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x40) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0xc}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x14}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x34}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x40) epoll_pwait2(0xffffffffffffffff, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000440)={0x77359400}, &(0x7f0000000480)={[0x1]}, 0x8) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4890}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x118, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xad0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc249f585730a484a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000007c0)=0xb6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r2, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5f}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10020}, 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x298, 0x0, 0xecdddeef346b9f32, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xb5fd, @local, 0x171ebd3a}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x68cc2043}]}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "41fb857b532c074211058cba966c924ab202368d34aebfba64b1a6df64abd5"}}, @TIPC_NLA_NODE_ID={0x98, 0x3, "8c7f4c6d83034a60f8972cff495b13169886598b8ff654c114abd51f3f8528fa5f3b8e657a8800412554e5740c74b8e1eb701a661d50e8f651215ea23361aef3a4a48df70f14194f3936061b6fbddfe35d6b555684ec89da8f7238cfb2e851ef742cae000be3c668dc3d8d7c3ee615c027c1196088fd8f8905768a06df9bd79668d540095655ab39bb351389e17d196eacd32b1f"}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b1ed623}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x90}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x51ef}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x8080}, 0x4044080) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000cc0)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000dc0)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000e00)={@multicast1, @empty, r3}, 0xc) r4 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = openat(r4, &(0x7f0000000f40)='./file0\x00', 0x284000, 0x101) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x74}}, 0x20000080) bind(r4, &(0x7f00000010c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x80) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4004004) 01:28:54 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/hci\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0xc1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040d0}, 0x4) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x23}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x78}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4040851) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f00000006c0)=""/2, 0x2}, {&(0x7f0000000700)=""/207, 0xcf}], 0x5, 0x1ff, 0xfffff909) syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000900)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1}, 0x88c0) r2 = open_tree(r0, &(0x7f0000000940)='./file0\x00', 0x91000) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x8, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8075}, 0x20000040) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xade}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200000d1}, 0x40) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x18, 0x3f9, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x90) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000e00)={0x1, 0x2, 0x1000, 0xfd, &(0x7f0000000cc0)="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", 0x0, 0x0, &(0x7f0000000dc0)}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x84, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x5}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "c0d7d514fe6caf3d9a6b1f54f5cb0c5a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK={0x14, 0xfe, "1c93338b2963e1e8a3380dcb617ad860"}, @NL80211_ATTR_PMKID={0x14, 0x55, "3e1531a8dc88165a8364160ac1bb0f6d"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="06d27d846fc6"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8001}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0xc080) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000001000)={0x0, @time={0x8, 0x3f}, 0x8, {0x66, 0x3f}, 0x62, 0x2, 0x46}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x8c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0xc11) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f00000011c0)={0x0, 0x9}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x7c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x800}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x800}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x4e86}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xea}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xfc}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xe, 0x34, @random="fef1bf57449a810f2f61"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x480}, 0x4044000) 01:28:54 executing program 7: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x62, 0x5, 0x14, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x3, 0x90}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={0x29c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x2c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x198, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x5b75ef49a1bf7eca}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0xa57a92a48b1019d6, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000700)={'nat\x00', 0x0, [0x1, 0x8000, 0x4, 0xfffffff7, 0x80]}, &(0x7f0000000780)=0x54) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000007c0)) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x48011}, 0x44084) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x88, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x27}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x29}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = dup(r1) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x400}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff0f}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff20}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x80}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x9ff6510a8707db2d}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x148, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_DATA={0x102, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2d}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0x148}, 0x1, 0x0, 0x0, 0x40010}, 0x810) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r3) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004050}, 0x80) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001100), 0x10000, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000001140)={'veth1_virt_wifi\x00', 0xff}) [ 82.412668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.418329] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.420876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.424670] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.425694] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.427310] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.427897] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.435669] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.436030] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.440089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.443825] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.445849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.446630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.446695] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.452191] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.467971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.474642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.475168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.488049] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.492192] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.494361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.499410] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.510804] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.512692] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.532911] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.538384] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.547237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.556876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.568945] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.571903] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.614362] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.617066] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.619376] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.623086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.627344] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.630334] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.632415] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.641776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.664858] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.665452] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.678350] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.690797] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.690813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.698957] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.703784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.718198] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.729204] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 82.731264] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.502627] Bluetooth: hci1: command tx timeout [ 84.502890] Bluetooth: hci2: command tx timeout [ 84.566904] Bluetooth: hci3: command tx timeout [ 84.567102] Bluetooth: hci0: command tx timeout [ 84.629568] Bluetooth: hci4: command tx timeout [ 84.758570] Bluetooth: hci5: command tx timeout [ 84.758889] Bluetooth: hci6: command tx timeout [ 84.821650] Bluetooth: hci7: command tx timeout [ 86.551657] Bluetooth: hci2: command tx timeout [ 86.551819] Bluetooth: hci1: command tx timeout [ 86.613967] Bluetooth: hci0: command tx timeout [ 86.614347] Bluetooth: hci3: command tx timeout [ 86.677615] Bluetooth: hci4: command tx timeout [ 86.806013] Bluetooth: hci6: command tx timeout [ 86.806606] Bluetooth: hci5: command tx timeout [ 86.869908] Bluetooth: hci7: command tx timeout [ 88.599924] Bluetooth: hci1: command tx timeout [ 88.600767] Bluetooth: hci2: command tx timeout [ 88.662200] Bluetooth: hci3: command tx timeout [ 88.662727] Bluetooth: hci0: command tx timeout [ 88.725654] Bluetooth: hci4: command tx timeout [ 88.853734] Bluetooth: hci5: command tx timeout [ 88.853775] Bluetooth: hci6: command tx timeout [ 88.918741] Bluetooth: hci7: command tx timeout [ 90.645723] Bluetooth: hci2: command tx timeout [ 90.645758] Bluetooth: hci1: command tx timeout [ 90.709710] Bluetooth: hci0: command tx timeout [ 90.709928] Bluetooth: hci3: command tx timeout [ 90.773613] Bluetooth: hci4: command tx timeout [ 90.902325] Bluetooth: hci6: command tx timeout [ 90.902463] Bluetooth: hci5: command tx timeout [ 90.965584] Bluetooth: hci7: command tx timeout [ 142.243944] syz-executor.1 (281) used greatest stack depth: 24096 bytes left [ 144.911084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.918897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.919384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.921873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.922213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.923835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.930940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.933183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.936036] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.937315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.938736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.939984] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.943003] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.943834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.946261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.972970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.003058] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.006665] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.007878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.010808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.019964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.033827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.037071] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.042904] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.092571] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.107843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.112435] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.126134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.132688] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 145.137751] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.144231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.147923] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.149012] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 145.149408] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.149925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.160298] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.171235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 145.175037] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.177763] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.178226] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.194876] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.195240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.197364] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 145.200805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.202172] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 145.202987] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 145.207842] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.213378] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.965732] Bluetooth: hci1: command tx timeout [ 147.029596] Bluetooth: hci0: command tx timeout [ 147.094667] Bluetooth: hci3: command tx timeout [ 147.094893] Bluetooth: hci2: command tx timeout [ 147.285670] Bluetooth: hci4: command tx timeout [ 147.286229] Bluetooth: hci7: command tx timeout [ 147.286320] Bluetooth: hci5: command tx timeout [ 147.349859] Bluetooth: hci6: command tx timeout [ 149.013880] Bluetooth: hci1: command tx timeout [ 149.077633] Bluetooth: hci0: command tx timeout [ 149.141767] Bluetooth: hci3: command tx timeout [ 149.141794] Bluetooth: hci2: command tx timeout [ 149.334054] Bluetooth: hci5: command tx timeout [ 149.334248] Bluetooth: hci4: command tx timeout [ 149.334343] Bluetooth: hci7: command tx timeout [ 149.397860] Bluetooth: hci6: command tx timeout [ 151.061685] Bluetooth: hci1: command tx timeout [ 151.127551] Bluetooth: hci0: command tx timeout [ 151.189694] Bluetooth: hci2: command tx timeout [ 151.190455] Bluetooth: hci3: command tx timeout [ 151.381739] Bluetooth: hci5: command tx timeout [ 151.382058] Bluetooth: hci7: command tx timeout [ 151.382147] Bluetooth: hci4: command tx timeout [ 151.447242] Bluetooth: hci6: command tx timeout [ 153.111539] Bluetooth: hci1: command tx timeout [ 153.174555] Bluetooth: hci0: command tx timeout [ 153.238657] Bluetooth: hci3: command tx timeout [ 153.239961] Bluetooth: hci2: command tx timeout [ 153.429601] Bluetooth: hci4: command tx timeout [ 153.429720] Bluetooth: hci7: command tx timeout [ 153.429812] Bluetooth: hci5: command tx timeout [ 153.493548] Bluetooth: hci6: command tx timeout [ 207.140765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.145042] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.146998] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.153888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.157705] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.162187] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.337926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.348716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.351871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.369371] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.375982] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.379935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.408311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.410945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.413222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.434243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.437536] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.439657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.763026] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.775900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.782181] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.790913] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.803157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.822141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.823085] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.829772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.842955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.846793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.853675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.854046] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.855708] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.864886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.885344] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.892734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.893516] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 207.899878] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.908930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 207.910661] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.914039] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.917561] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.925071] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.927666] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 207.945983] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 207.951711] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.963114] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 207.966617] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 207.971986] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.972191] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.239543] Bluetooth: hci0: command tx timeout [ 209.493657] Bluetooth: hci2: command tx timeout [ 209.494043] Bluetooth: hci1: command tx timeout [ 209.942632] Bluetooth: hci3: command tx timeout [ 210.006522] Bluetooth: hci4: command tx timeout [ 210.070690] Bluetooth: hci6: command tx timeout [ 210.134613] Bluetooth: hci5: command tx timeout [ 210.134799] Bluetooth: hci7: command tx timeout [ 211.285551] Bluetooth: hci0: command tx timeout [ 211.542570] Bluetooth: hci1: command tx timeout [ 211.542665] Bluetooth: hci2: command tx timeout [ 211.990547] Bluetooth: hci3: command tx timeout [ 212.054102] Bluetooth: hci4: command tx timeout [ 212.118654] Bluetooth: hci6: command tx timeout [ 212.182550] Bluetooth: hci7: command tx timeout [ 212.182638] Bluetooth: hci5: command tx timeout [ 213.334763] Bluetooth: hci0: command tx timeout [ 213.589541] Bluetooth: hci2: command tx timeout [ 213.589640] Bluetooth: hci1: command tx timeout [ 214.038559] Bluetooth: hci3: command tx timeout [ 214.103586] Bluetooth: hci4: command tx timeout [ 214.165527] Bluetooth: hci6: command tx timeout [ 214.231002] Bluetooth: hci7: command tx timeout [ 214.231086] Bluetooth: hci5: command tx timeout [ 215.382658] Bluetooth: hci0: command tx timeout [ 215.638944] Bluetooth: hci1: command tx timeout [ 215.639035] Bluetooth: hci2: command tx timeout [ 216.086888] Bluetooth: hci3: command tx timeout [ 216.150523] Bluetooth: hci4: command tx timeout [ 216.213526] Bluetooth: hci6: command tx timeout [ 216.278619] Bluetooth: hci5: command tx timeout [ 216.278925] Bluetooth: hci7: command tx timeout [ 269.221301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.226723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.230091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.239752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.243216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.245896] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.360918] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.363779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.366764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.372885] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.376414] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.379005] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.420222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.428103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.430905] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.454908] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.462849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.463828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.540381] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.558825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.570027] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.600337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.602088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.603160] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.693894] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.697988] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.701813] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.702718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 269.703374] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.711877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.715002] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.726071] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.728404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.732760] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.734073] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 269.735833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 269.740841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 269.743066] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 269.745591] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 269.755131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 269.761864] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 269.764386] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 269.809025] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.811906] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.817640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.825662] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 269.834230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 269.853720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.317727] Bluetooth: hci0: command tx timeout [ 271.446602] Bluetooth: hci1: command tx timeout [ 271.509619] Bluetooth: hci2: command tx timeout [ 271.637612] Bluetooth: hci3: command tx timeout [ 271.829584] Bluetooth: hci6: command tx timeout [ 271.894828] Bluetooth: hci7: command tx timeout [ 271.957652] Bluetooth: hci4: command tx timeout [ 272.021612] Bluetooth: hci5: command tx timeout [ 273.366610] Bluetooth: hci0: command tx timeout [ 273.493577] Bluetooth: hci1: command tx timeout [ 273.557542] Bluetooth: hci2: command tx timeout [ 273.685868] Bluetooth: hci3: command tx timeout [ 273.877688] Bluetooth: hci6: command tx timeout [ 273.941843] Bluetooth: hci7: command tx timeout [ 274.007567] Bluetooth: hci4: command tx timeout [ 274.069538] Bluetooth: hci5: command tx timeout [ 275.413606] Bluetooth: hci0: command tx timeout [ 275.542484] Bluetooth: hci1: command tx timeout [ 275.605631] Bluetooth: hci2: command tx timeout [ 275.733542] Bluetooth: hci3: command tx timeout [ 275.925566] Bluetooth: hci6: command tx timeout [ 275.990545] Bluetooth: hci7: command tx timeout [ 276.053533] Bluetooth: hci4: command tx timeout [ 276.117488] Bluetooth: hci5: command tx timeout [ 277.461618] Bluetooth: hci0: command tx timeout [ 277.590469] Bluetooth: hci1: command tx timeout [ 277.653525] Bluetooth: hci2: command tx timeout [ 277.781547] Bluetooth: hci3: command tx timeout [ 277.973733] Bluetooth: hci6: command tx timeout [ 278.037568] Bluetooth: hci7: command tx timeout [ 278.101636] Bluetooth: hci4: command tx timeout [ 278.165537] Bluetooth: hci5: command tx timeout [ 331.300240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.305301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.309709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.316304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.325151] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.328987] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.619296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.623357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.628882] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.633286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.636895] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 331.639036] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 331.822799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.825822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.830812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.840316] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.845116] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 331.847101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.905020] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.910137] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.915389] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.956718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.959856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.961721] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 331.966619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 331.970613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.972732] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 331.977036] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.986659] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.987157] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 331.991188] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 331.992986] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 331.993564] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.996739] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.997106] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 332.038241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 332.040582] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.055045] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.056984] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.065112] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.065500] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 332.069805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.079408] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 332.081206] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.115618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 332.130867] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.162403] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 332.164133] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.397883] Bluetooth: hci0: command tx timeout [ 333.718719] Bluetooth: hci1: command tx timeout [ 333.909607] Bluetooth: hci2: command tx timeout [ 334.039763] Bluetooth: hci7: command tx timeout [ 334.101932] Bluetooth: hci4: command tx timeout [ 334.167492] Bluetooth: hci5: command tx timeout [ 334.167686] Bluetooth: hci3: command tx timeout [ 334.294551] Bluetooth: hci6: command tx timeout [ 335.446564] Bluetooth: hci0: command tx timeout [ 335.765489] Bluetooth: hci1: command tx timeout [ 335.958545] Bluetooth: hci2: command tx timeout [ 336.085476] Bluetooth: hci7: command tx timeout [ 336.149533] Bluetooth: hci4: command tx timeout [ 336.213520] Bluetooth: hci3: command tx timeout [ 336.213550] Bluetooth: hci5: command tx timeout [ 336.342559] Bluetooth: hci6: command tx timeout [ 337.494562] Bluetooth: hci0: command tx timeout [ 337.814670] Bluetooth: hci1: command tx timeout [ 338.007500] Bluetooth: hci2: command tx timeout [ 338.134519] Bluetooth: hci7: command tx timeout [ 338.197543] Bluetooth: hci4: command tx timeout [ 338.261541] Bluetooth: hci3: command tx timeout [ 338.261627] Bluetooth: hci5: command tx timeout [ 338.389633] Bluetooth: hci6: command tx timeout [ 339.543515] Bluetooth: hci0: command tx timeout [ 339.863580] Bluetooth: hci1: command tx timeout [ 340.053516] Bluetooth: hci2: command tx timeout [ 340.181549] Bluetooth: hci7: command tx timeout [ 340.245547] Bluetooth: hci4: command tx timeout [ 340.310639] Bluetooth: hci3: command tx timeout [ 340.310793] Bluetooth: hci5: command tx timeout [ 340.437867] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 01:34:05 Registers: info registers vcpu 0 RAX=00007fa3d9137270 RBX=0000000000000126 RCX=0000000000000000 RDX=0000000000000005 RSI=0000000000000060 RDI=0000000000000001 RBP=000000c00002d650 RSP=000000c00002d600 R8 =0000000000000017 R9 =000000000123bb80 R10=00007fa3d91358c8 R11=0000000000000000 R12=0000000000000000 R13=000000c0005fc480 R14=0000000000000001 R15=0000000000000001 RIP=0000000000423b3f RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000094b10 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f19c62d9260 CR3=0000000015792000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000003f361dfea556b968 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c000085dd0000000c000085a30 XMM04=000000c000302280000000c000085f10 XMM05=000000c0000a8330000000c0000a82c0 XMM06=000000c0000a8480000000c0000a83c8 XMM07=000000c0000858b0000000c0000a85c0 XMM08=000000c000085a80000000c0000858f0 XMM09=000000c000302150000000c000085c20 XMM10=000000c0000a8280000000c0000a8268 XMM11=000000c0000a8320000000c0000a82a8 XMM12=000000c0000a8548000000c0000a8390 XMM13=000000c00000f458000000c0000a82d0 XMM14=000000c0000a8120000000c0000a85e0 XMM15=000000c0000854b0000000c0000a8200 info registers vcpu 1 RAX=fffff940001a0780 RBX=fffff940001a0781 RCX=ffffffff81a60b2d RDX=fffff940001a0781 RSI=0000000000000008 RDI=ffffea0000d03c00 RBP=fffff940001a0780 RSP=ffff8880288276a8 R8 =0000000000000000 R9 =fffff940001a0780 R10=ffffea0000d03c07 R11=0000000000000001 R12=ffff888027befc28 R13=ffffea0000d03c00 R14=0000000000000000 R15=00000000000001fd RIP=ffffffff81abc331 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005633d1f98090 CR3=0000000015792000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0020016c6c6f502e726567616e614d0c XMM02=0e007a7a75662063657865090a010001 XMM03=0b006574616469646e61632063657865 XMM04=6578650d006567616972742063657865 XMM05=636578650a00657a696d696e696d2063 XMM06=6e6567206365786508006873616d7320 XMM07=617473657220726f7475636578651100 XMM08=646e616320636578650e007a7a756620 XMM09=6169727420636578650b006574616469 XMM10=7a696d696e696d20636578650d006567 XMM11=6508006873616d7320636578650a0065 XMM12=6f74756365786511006e656720636578 XMM13=636578650a0073747261747365722072 XMM14=65657320636578650a0073746e696820 XMM15=00006c61746f7420636578650a007364