Warning: Permanently added '[localhost]:38570' (ECDSA) to the list of known hosts.
2025/05/26 07:29:08 fuzzer started
2025/05/26 07:29:09 dialing manager at localhost:46087
syzkaller login: [   94.031701] cgroup: Unknown subsys name 'net'
[   94.187645] cgroup: Unknown subsys name 'cpuset'
[   94.235198] cgroup: Unknown subsys name 'rlimit'
2025/05/26 07:29:27 syscalls: 206
2025/05/26 07:29:27 code coverage: enabled
2025/05/26 07:29:27 comparison tracing: enabled
2025/05/26 07:29:27 extra coverage: enabled
2025/05/26 07:29:27 setuid sandbox: enabled
2025/05/26 07:29:27 namespace sandbox: enabled
2025/05/26 07:29:27 Android sandbox: enabled
2025/05/26 07:29:27 fault injection: enabled
2025/05/26 07:29:27 leak checking: enabled
2025/05/26 07:29:27 net packet injection: enabled
2025/05/26 07:29:27 net device setup: enabled
2025/05/26 07:29:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/26 07:29:27 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/26 07:29:27 USB emulation: enabled
2025/05/26 07:29:27 hci packet injection: enabled
2025/05/26 07:29:27 wifi device emulation: enabled
2025/05/26 07:29:27 802.15.4 emulation: enabled
2025/05/26 07:29:27 fetching corpus: 0, signal 0/0 (executing program)
2025/05/26 07:29:29 starting 8 fuzzer processes
07:29:29 executing program 0:
r0 = socket(0x9, 0x80000, 0xebe)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x18}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x9}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0xc4}}, 0x4810)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x42000, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffe}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2f}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c0}, 0x84)
r5 = socket(0x1f, 0x5, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x310, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfbc}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000841)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x14bb41, 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2d7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044004}, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xdc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004}, 0x4000)
r9 = socket(0x18, 0x800, 0x8)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r9)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000bc0), r8)
sendmsg$SEG6_CMD_SET_TUNSRC(r11, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r12, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe12}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40410}, 0x0)
sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, r10, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x3f, 0xa8, @random="6510e3fc233c876aa47456200447776c77972d492d906e91d6e168af8568eaab6cdaa5c19bc87372984bcde8dea28fb603e865013852cdc9cb15f6"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x41)

07:29:29 executing program 1:
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
r0 = socket(0x15, 0x8000d, 0x4)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x20002, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x62}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48c0}, 0x4040000)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd9d}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}]}, 0xd0}}, 0x40000)
r4 = syz_io_uring_setup(0x6956, &(0x7f0000000540)={0x0, 0x4421, 0x2, 0x0, 0x302}, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600))
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000640)=[0xffffffffffffffff, r0, r0], 0x3)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000800)={&(0x7f0000000680), 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd4, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd4}}, 0x4000)
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000840)=0x101)
r5 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x33}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8e}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8000}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xdb}]}, 0x48}, 0x1, 0x0, 0x0, 0x4081}, 0x8080)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r6, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x20008001)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x2e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x42000}, 0x4000)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x160, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbdc6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x950}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x5}, 0x4008000)
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000f80)=0x6)

07:29:29 executing program 2:
r0 = socket(0x22, 0x3, 0x8)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x7, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x69b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x60}}, 0x4010)
r2 = socket(0x1, 0x5, 0x762f)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0)
sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x802, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdd6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x40000)
r4 = socket(0x2a, 0x4, 0x3)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x118, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x14}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20040000}, 0x80)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r4)
sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10002000}, 0x20000080)
getitimer(0x1, &(0x7f0000000700))
syz_genetlink_get_family_id$fou(&(0x7f0000000740), r5)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r3, 0x800, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r5)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1dc, r7, 0x8, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x78, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x5)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000001480)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001440)={&(0x7f0000000d80)={0x6b8, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x124, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @chsw_timing={0x68, 0x4, {0xf76b, 0x8}}, @ssid={0x0, 0xf, @random="d8895f121f2ff08b60efd96bb5ec5e"}, @mesh_chsw={0x76, 0x6, {0x0, 0x7, 0x34, 0x9}}, @measure_req={0x26, 0xeb, {0x0, 0x9, 0x2, "443e749249aee5d070317a7bbc53a54817e0b502006b04c891e6b00dd15802ed0253d5f559ff1eddcd21f30c86be86f51e687b917c058c820ab738e3e8131b9560a811d8b3e5596963204dc6778669e1e0aed3baa0367987dfe3f1389032d28308e37813f37e8d17da2f0d0d570cd15219a68043b851ad5dc6d5a311a0026b6cd331b48ab90b55e5b4e2a39bbdf4f8030d203269e81f955743f1b2bb8ce831b04129945368ffb46e95b9fffe6d313713bf57403ea947200eb1cfc2cb7862a7802e698ab9cbb86f6ba1d0b059e6d85ab96a29ef4fbdb4c8f0662d6f6a733e68019f40a71016992ce8"}}]}, @NL80211_ATTR_IE={0x327, 0x2a, [@measure_req={0x26, 0x62, {0x1, 0x8, 0x1, "1402a3060018ea74854f0ca1a7ba11d34c006e5d79d858928e3b2011496c19549564681c85fb2f515bac7c66b88a03db7cfbce7f7d57be9b0293427015168998cbdcc8804efd15bb14e639551a4e17b29e31e49b3b8d2371cbe1cb9626b03a"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @fast_bss_trans={0x37, 0xd8, {0x5e, 0x5, "b0607f2339bc7c19940ba96522cb846a", "5a8dd9023ee683297652c00b2a5ddcd9be4a6b61124ccb3ce565bc92b4c2007d", "e6679ad2b39f8a7fd714bfbec18c590c77854c1b216e864d57b8121c0e6e662a", [{0x4, 0x11, "d698f62b54fa5ebc7dae40dbf16bbb5887"}, {0x1, 0x10, "c7de19c3f1ad99d9680a9fb1babd61fe"}, {0x3, 0x13, "720ad25a6b7483de61e6103fc2d78205ad0152"}, {0x2, 0x20, "9f93ee69767bd5784a44a2b4a783970d105b1f2ac66268c444b77b1df16282c8"}, {0x4, 0x28, "baa9f57d3c94d0b0723e8da1a8d69ae270582e843b08413b134612e204df9433c88cdd9170f0dbc9"}]}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @device_b}}, @gcr_ga={0xbd, 0x6, @device_b}, @random_vendor={0xdd, 0xe5, "19b3e8778615d70a291e902ec2096a7e437306332e8aa3f43d797139665c4314f8a535a006b383093b2be25d7bf785879d145992837cb867469141c96fd11f6b04da33fc9d945aafc4e36e2814e76efd656b631a3920b0f24ee5bea9c9aab60e06b4a13290e377af5fb45b948353a1b83dfe72c8a4b06853c64a7332d72e2dd009541f507760fddc7283524736245081e7855024d99525e3d72a5f8f509af98e8ff2714ed20361883a13e4b65b720f50545bdecfa4eb40ec88ada353e72ba724aa880763633abe36a6a1690f6f91c66e83036b5af9ded7dfab5c5af1a9bbc2e0f2c1e3dc51"}, @challenge={0x10, 0x1, 0x9c}, @fast_bss_trans={0x37, 0xd5, {0x3, 0x6, "4d5db22b379a43fc504e880de2cb9d57", "ca2b74ae1c00f46671711c462ae79c2c60a2f5fb58ae1006803a575a408949d8", "aa56d4a1e96786c38601372c63bd565814ba380cfb729ad403e84c011c69c8c5", [{0x2, 0x10, "c722fff34ad43efc02172555818ee2b5"}, {0x1, 0x23, "2bbc02da439907ee23983ab0dd817f6069ba3c8af09dfd487cc5271287d6cc3f4eb37a"}, {0x1, 0x4, "81f1b972"}, {0x3, 0x8, "e19f35adc355bba4"}, {0x3, 0x19, "c27605ef2b90786cd90fdd7c6bc959af7a5a3d2c503547d565"}, {0x3, 0x1f, "4d2047312ab0f60e3eb564535abe0d426a316c9245e69fc336e4f47db2c9c1"}]}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x203, 0x2a, [@perr={0x84, 0x6f, {0x5, 0x7, [@not_ext={{}, @broadcast, 0xbf0, "", 0x2f}, @not_ext={{}, @device_b, 0x200, "", 0x1c}, @not_ext={{}, @device_b, 0x7, "", 0xd}, @not_ext={{}, @broadcast, 0x1, "", 0x32}, @ext={{}, @broadcast, 0x4, @device_a, 0x23}, @ext={{}, @device_a, 0x5, @device_b, 0x2d}, @ext={{}, @broadcast, 0x10000, @device_b, 0x34}]}}, @random={0x3f, 0x20, "e6f15850e483217900e30bb95351459d5ebab8542028603af87eddf366aa06a0"}, @ssid={0x0, 0x6, @default_ibss_ssid}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @tim={0x5, 0x20, {0x20, 0x84, 0x3, "91e3cd76dea2b48ee4bf8fa322ac316b5a213f9bf5b6bdc95faeee8ec8"}}, @dsss={0x3, 0x1, 0xb0}, @perr={0x84, 0x102, {0x0, 0x10, [@not_ext={{}, @device_b, 0x10001, "", 0xf}, @not_ext={{}, @device_a, 0x80000001, "", 0x41}, @ext={{}, @device_a, 0x7, @broadcast, 0xc}, @not_ext={{}, @device_b, 0x20, "", 0x13}, @ext={{}, @device_b, 0x80, @device_a, 0x1b}, @not_ext={{}, @device_a, 0xac19, "", 0x3}, @not_ext={{}, @device_a, 0x10000, "", 0x15}, @ext={{}, @device_b, 0x2, @broadcast, 0x20}, @ext={{}, @device_a, 0x8b49, @device_a, 0x8}, @ext={{}, @broadcast, 0xc6a, @device_a, 0x3c}, @ext={{}, @device_a, 0x3, @device_b, 0xc}, @ext={{}, @broadcast, 0x8d34, @device_b, 0x19}, @not_ext={{}, @device_a, 0x10001, "", 0x2a}, @not_ext={{}, @device_a, 0x2, "", 0x1e}, @not_ext={{}, @device_b, 0x2, "", 0x1a}, @ext={{}, @broadcast, 0x0, @device_a, 0x3a}]}}, @preq={0x82, 0x36, @ext={{0x0, 0x1}, 0x4, 0x5, 0xe4c3, @device_a, 0x4, @broadcast, 0x3, 0x2, 0x2, [{{0x1, 0x0, 0x1}, @broadcast, 0xfffffba0}, {{0x1}, @device_a, 0x9}]}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x40}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x56}]}, 0x6b8}, 0x1, 0x0, 0x0, 0x1}, 0x0)

07:29:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x7b}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "17a14e75f714fb84809ba9fe9c5c959a"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "6ad242cb47c49268e37f5b7a65a8570d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e53da950e80e3e338b054c6b16052539"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "3a92e4131f24a3a47da79983528d47e6"}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x14)
r2 = socket(0x5, 0x5, 0x3f)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xc0, r3, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x39}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x66, 0x2a, [@peer_mgmt={0x75, 0x18, {0x1, 0x0, @val=0x7fff, @val=0x40, @val="b93e26cde4d961d3c2f55e11099a6b68"}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x2, 0x80, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x15}, 0x9, 0x3, @broadcast, 0x1, 0x20}}, @rann={0x7e, 0x15, {{0x1, 0xe}, 0x6e, 0xa4, @device_b, 0x6, 0x1f, 0x8000}}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x40}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ibss={0x6, 0x2, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24000011}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r4, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x3}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x46}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x39}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x74}, 0x1, 0x0, 0x0, 0x44080}, 0x20008041)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000000)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xac46}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
r6 = eventfd(0x3)
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000780)=r6, 0x1)
r7 = socket(0x23, 0x6, 0x4b1d)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xf4, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000)
r9 = socket(0x15, 0x1, 0x3ec7)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x24100, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000a40)={0x3, 0x0, &(0x7f0000000a00)=[r2, r9, r0, r10, r6]}, 0x5)
syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff)

[  113.716864] audit: type=1400 audit(1748244569.417:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:29:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x284, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1f}, {0x5, 0x12, 0xa2}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5a7}, {0x6, 0x16, 0x5}, {0x5}, {0x6}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7ff}, {0x6, 0x16, 0x99}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x243}, {0x5}, {0x6, 0x11, 0x40}, {0x8, 0xb, 0xfffffffe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x81}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff9}, {0x8, 0xb, 0x7fffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x658}, {0x8, 0xb, 0xa476}}]}, 0x284}, 0x1, 0x0, 0x0, 0x48085}, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'IPVS\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r1, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4041004}, 0x4000000)
r2 = socket(0x2a, 0x1, 0x9)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x88, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x84)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r0)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4009090}, 0x40000)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'secondname\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40011)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x468e00a74caa4812}, 0x10)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000c00), 0x200, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c80)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x61}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4004000)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008020)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0)
sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0x98, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x1)

07:29:29 executing program 4:
io_uring_enter(0xffffffffffffffff, 0x4a12, 0x2051, 0x3, &(0x7f0000000000)={[0x3]}, 0x8)
io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xa)
r0 = syz_io_uring_setup(0x6e4b, &(0x7f00000000c0)={0x0, 0xc953, 0x8, 0x1, 0x246}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180))
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000003, 0x30, r0, 0x8000000)
r1 = eventfd2(0x721, 0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[r0, r0, r1, r0, r0], 0x5)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
r3 = syz_open_dev$rtc(&(0x7f0000000240), 0x81, 0x323c82)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x802, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0xcde, 0x0, &(0x7f00000002c0)=[r2, r1, r3, r2, r1, r4, r1]}, 0x7)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'})
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r6, 0x10c, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3a}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000}, 0x4000000)
r8 = socket(0x8, 0xa, 0xfff)
sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8edb79f32fa57787}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc011}, 0x24000804)

07:29:29 executing program 7:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400401, 0x0)
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040))
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x2c8000, 0x0)
ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0xffffffe5)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1aa80, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x20000044)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1090000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x10}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000003c0)=0x2)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xde}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000540)=0x6)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x81}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x40}, 0x1, 0x0, 0x0, 0x40051}, 0x20000000)
sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x40000)
eventfd(0xffffffff)
r6 = eventfd(0x8)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000780)={0x10000009})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000007c0)={0x1000001a})
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x680, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4040080)

07:29:29 executing program 6:
r0 = shmget(0x2, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil)
shmctl$IPC_RMID(r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x106c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7589}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4080}, 0x40008c1)
r5 = socket(0x1d, 0xa, 0x81)
sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x44}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xe5c00c8104787899}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000640)={'team0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000ec0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f00000006c0)={0x7c0, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd059}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x27}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r9}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb3ca9b51}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r10}, {0x1b0, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x48, 0x8, 0x9}, {0x3, 0x1f, 0x5, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5480}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r12}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x7c0}, 0x1, 0x0, 0x0, 0x884}, 0x40)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x44}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x40)

[  115.228846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  115.232309] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  115.234841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  115.238933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  115.240155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  115.242109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  115.243256] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  115.243798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  115.244308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  115.247755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  115.249986] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  115.255528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  115.257165] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  115.277345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  115.289152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  115.301316] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  115.309491] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.313306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.316787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.323299] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.330410] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  115.333091] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.335930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  115.337337] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  115.341872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  115.344658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  115.346324] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  115.352740] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  115.367339] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  115.368391] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  115.394300] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  115.396077] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  115.397266] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  115.399173] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  115.401653] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  115.403776] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  115.408040] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  115.436353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.437725] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  115.478778] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  117.312425] Bluetooth: hci1: command tx timeout
[  117.312436] Bluetooth: hci2: command tx timeout
[  117.374665] Bluetooth: hci4: command tx timeout
[  117.374698] Bluetooth: hci0: command tx timeout
[  117.438616] Bluetooth: hci3: command tx timeout
[  117.566224] Bluetooth: hci5: command tx timeout
[  117.566483] Bluetooth: hci7: command tx timeout
[  117.695353] Bluetooth: hci6: command tx timeout
[  119.360088] Bluetooth: hci1: command tx timeout
[  119.360568] Bluetooth: hci2: command tx timeout
[  119.422167] Bluetooth: hci4: command tx timeout
[  119.422956] Bluetooth: hci0: command tx timeout
[  119.487001] Bluetooth: hci3: command tx timeout
[  119.614022] Bluetooth: hci5: command tx timeout
[  119.615015] Bluetooth: hci7: command tx timeout
[  119.743224] Bluetooth: hci6: command tx timeout
[  121.406035] Bluetooth: hci2: command tx timeout
[  121.407207] Bluetooth: hci1: command tx timeout
[  121.470037] Bluetooth: hci4: command tx timeout
[  121.471349] Bluetooth: hci0: command tx timeout
[  121.534138] Bluetooth: hci3: command tx timeout
[  121.662979] Bluetooth: hci5: command tx timeout
[  121.663073] Bluetooth: hci7: command tx timeout
[  121.791537] Bluetooth: hci6: command tx timeout
[  123.454121] Bluetooth: hci1: command tx timeout
[  123.454186] Bluetooth: hci2: command tx timeout
[  123.518000] Bluetooth: hci0: command tx timeout
[  123.518443] Bluetooth: hci4: command tx timeout
[  123.582127] Bluetooth: hci3: command tx timeout
[  123.710158] Bluetooth: hci5: command tx timeout
[  123.710534] Bluetooth: hci7: command tx timeout
[  123.838212] Bluetooth: hci6: command tx timeout
[  175.250853] syz-executor.4 (288) used greatest stack depth: 24800 bytes left
[  175.314537] syz-executor.6 (287) used greatest stack depth: 24640 bytes left
[  177.487814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.491809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.498621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.518621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.523324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  177.568194] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  177.574018] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  177.577375] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  177.582135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  177.587004] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  177.651779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  177.682066] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  177.688620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  177.691576] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  177.692377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  177.694559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  177.699855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  177.701499] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  177.704289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.706682] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  177.743833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  177.747786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  177.750154] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  177.754279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  177.756828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  177.757379] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  177.768453] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  177.769667] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  177.773637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  177.775302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  177.909189] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  177.913794] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  177.920528] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  177.934798] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  177.955599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  177.958636] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  177.961007] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  177.967458] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  177.978226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  177.985391] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  179.581982] Bluetooth: hci0: command tx timeout
[  179.646005] Bluetooth: hci1: command tx timeout
[  179.838070] Bluetooth: hci6: command tx timeout
[  179.838111] Bluetooth: hci3: command tx timeout
[  179.839079] Bluetooth: hci2: command tx timeout
[  179.902104] Bluetooth: hci4: command tx timeout
[  180.094060] Bluetooth: hci7: command tx timeout
[  180.094975] Bluetooth: hci5: command tx timeout
[  181.630246] Bluetooth: hci0: command tx timeout
[  181.695978] Bluetooth: hci1: command tx timeout
[  181.886119] Bluetooth: hci3: command tx timeout
[  181.886656] Bluetooth: hci6: command tx timeout
[  181.887140] Bluetooth: hci2: command tx timeout
[  181.952032] Bluetooth: hci4: command tx timeout
[  182.143010] Bluetooth: hci5: command tx timeout
[  182.143145] Bluetooth: hci7: command tx timeout
[  183.678948] Bluetooth: hci0: command tx timeout
[  183.742947] Bluetooth: hci1: command tx timeout
[  183.934075] Bluetooth: hci3: command tx timeout
[  183.934111] Bluetooth: hci2: command tx timeout
[  183.934590] Bluetooth: hci6: command tx timeout
[  183.999017] Bluetooth: hci4: command tx timeout
[  184.190136] Bluetooth: hci5: command tx timeout
[  184.190647] Bluetooth: hci7: command tx timeout
[  185.727940] Bluetooth: hci0: command tx timeout
[  185.790414] Bluetooth: hci1: command tx timeout
[  185.981981] Bluetooth: hci2: command tx timeout
[  185.982099] Bluetooth: hci3: command tx timeout
[  185.982453] Bluetooth: hci6: command tx timeout
[  186.046006] Bluetooth: hci4: command tx timeout
[  186.238183] Bluetooth: hci7: command tx timeout
[  186.238207] Bluetooth: hci5: command tx timeout
[  240.214109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  240.217299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  240.221434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  240.230618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  240.239569] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  240.275822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  240.293311] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  240.302285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  240.314745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  240.322621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  240.390988] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  240.394434] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  240.397440] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  240.408688] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  240.411850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  240.415491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  240.422215] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  240.427393] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  240.440579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  240.457689] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  240.552089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  240.563438] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  240.581410] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  240.604451] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  240.613392] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  240.696251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  240.732879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  240.745635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  240.769956] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  240.798613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  240.902068] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  240.930501] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  240.938765] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  240.947384] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  240.953261] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  240.966654] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  240.980963] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  241.038649] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  241.074767] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  241.087540] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  242.302152] Bluetooth: hci0: command tx timeout
[  242.366023] Bluetooth: hci1: command tx timeout
[  242.494387] Bluetooth: hci2: command tx timeout
[  242.686111] Bluetooth: hci4: command tx timeout
[  242.750228] Bluetooth: hci3: command tx timeout
[  242.879955] Bluetooth: hci5: command tx timeout
[  243.198211] Bluetooth: hci7: command tx timeout
[  243.327064] Bluetooth: hci6: command tx timeout
[  244.350879] Bluetooth: hci0: command tx timeout
[  244.414573] Bluetooth: hci1: command tx timeout
[  244.542998] Bluetooth: hci2: command tx timeout
[  244.735301] Bluetooth: hci4: command tx timeout
[  244.799122] Bluetooth: hci3: command tx timeout
[  244.925991] Bluetooth: hci5: command tx timeout
[  245.246926] Bluetooth: hci7: command tx timeout
[  245.374005] Bluetooth: hci6: command tx timeout
[  246.399001] Bluetooth: hci0: command tx timeout
[  246.463039] Bluetooth: hci1: command tx timeout
[  246.593005] Bluetooth: hci2: command tx timeout
[  246.782345] Bluetooth: hci4: command tx timeout
[  246.847941] Bluetooth: hci3: command tx timeout
[  246.974959] Bluetooth: hci5: command tx timeout
[  247.296066] Bluetooth: hci7: command tx timeout
[  247.423225] Bluetooth: hci6: command tx timeout
[  248.446557] Bluetooth: hci0: command tx timeout
[  248.511941] Bluetooth: hci1: command tx timeout
[  248.638017] Bluetooth: hci2: command tx timeout
[  248.830831] Bluetooth: hci4: command tx timeout
[  248.894000] Bluetooth: hci3: command tx timeout
[  249.022074] Bluetooth: hci5: command tx timeout
[  249.342009] Bluetooth: hci7: command tx timeout
[  249.470999] Bluetooth: hci6: command tx timeout
[  302.802400] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  302.810315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  302.817548] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  302.831369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  302.839704] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.933628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  302.935597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  302.938548] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  302.940838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  302.946694] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  302.951271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  302.954169] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  302.960374] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  302.961155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  302.985880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  303.096031] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  303.114231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  303.117838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  303.125520] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  303.129549] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  303.132348] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  303.138728] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  303.145399] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  303.158368] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  303.163583] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  303.164128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  303.168867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  303.177863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  303.178770] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  303.181354] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  303.190430] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  303.198194] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  303.208103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  303.219450] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  303.223746] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  303.248757] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  303.253515] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  303.255325] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  303.263560] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  303.300017] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  304.894061] Bluetooth: hci0: command tx timeout
[  305.023134] Bluetooth: hci2: command tx timeout
[  305.086109] Bluetooth: hci1: command tx timeout
[  305.342218] Bluetooth: hci5: command tx timeout
[  305.343140] Bluetooth: hci6: command tx timeout
[  305.343649] Bluetooth: hci4: command tx timeout
[  305.406046] Bluetooth: hci3: command tx timeout
[  305.406090] Bluetooth: hci7: command tx timeout
[  306.942407] Bluetooth: hci0: command tx timeout
[  307.070029] Bluetooth: hci2: command tx timeout
[  307.134106] Bluetooth: hci1: command tx timeout
[  307.390495] Bluetooth: hci5: command tx timeout
[  307.390655] Bluetooth: hci4: command tx timeout
[  307.391244] Bluetooth: hci6: command tx timeout
[  307.454294] Bluetooth: hci3: command tx timeout
[  307.454976] Bluetooth: hci7: command tx timeout
[  308.990158] Bluetooth: hci0: command tx timeout
[  309.118983] Bluetooth: hci2: command tx timeout
[  309.182154] Bluetooth: hci1: command tx timeout
[  309.439236] Bluetooth: hci5: command tx timeout
[  309.439728] Bluetooth: hci4: command tx timeout
[  309.441017] Bluetooth: hci6: command tx timeout
[  309.502113] Bluetooth: hci3: command tx timeout
[  309.504285] Bluetooth: hci7: command tx timeout
[  311.038958] Bluetooth: hci0: command tx timeout
[  311.165971] Bluetooth: hci2: command tx timeout
[  311.231113] Bluetooth: hci1: command tx timeout
[  311.485980] Bluetooth: hci6: command tx timeout
[  311.486489] Bluetooth: hci5: command tx timeout
[  311.487232] Bluetooth: hci4: command tx timeout
[  311.551308] Bluetooth: hci7: command tx timeout
[  311.551787] Bluetooth: hci3: command tx timeout
[  364.886612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  364.891844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  364.894528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  364.906432] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  364.914266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  365.215147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  365.225227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  365.232324] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  365.241398] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  365.247224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  365.348336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  365.351947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  365.354355] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  365.360494] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  365.364275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  365.443704] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  365.461636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  365.470265] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  365.477503] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  365.487563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  365.512333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  365.526362] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  365.526991] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  365.536875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  365.545007] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  365.551662] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  365.551735] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  365.568582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  365.583666] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  365.592401] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  365.596312] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  365.600566] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  365.604520] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  365.608633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  365.614746] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  365.620005] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  365.640323] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  365.640693] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  365.677167] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  365.743651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  366.975260] Bluetooth: hci0: command tx timeout
[  367.295294] Bluetooth: hci1: command tx timeout
[  367.423471] Bluetooth: hci2: command tx timeout
[  367.743023] Bluetooth: hci5: command tx timeout
[  367.807000] Bluetooth: hci4: command tx timeout
[  367.807275] Bluetooth: hci3: command tx timeout
[  367.870007] Bluetooth: hci7: command tx timeout
[  367.934026] Bluetooth: hci6: command tx timeout
[  369.023681] Bluetooth: hci0: command tx timeout
[  369.344916] Bluetooth: hci1: command tx timeout
[  369.471962] Bluetooth: hci2: command tx timeout
[  369.792192] Bluetooth: hci5: command tx timeout
[  369.853978] Bluetooth: hci3: command tx timeout
[  369.855420] Bluetooth: hci4: command tx timeout
[  369.918916] Bluetooth: hci7: command tx timeout
[  369.982231] Bluetooth: hci6: command tx timeout
[  371.070227] Bluetooth: hci0: command tx timeout
[  371.389952] Bluetooth: hci1: command tx timeout
[  371.518309] Bluetooth: hci2: command tx timeout
[  371.838190] Bluetooth: hci5: command tx timeout
[  371.902119] Bluetooth: hci4: command tx timeout
[  371.902194] Bluetooth: hci3: command tx timeout
[  371.965997] Bluetooth: hci7: command tx timeout
[  372.030078] Bluetooth: hci6: command tx timeout
[  373.119959] Bluetooth: hci0: command tx timeout
[  373.438183] Bluetooth: hci1: command tx timeout
[  373.566948] Bluetooth: hci2: command tx timeout
[  373.887954] Bluetooth: hci5: command tx timeout
[  373.950014] Bluetooth: hci4: command tx timeout
[  373.950977] Bluetooth: hci3: command tx timeout
[  374.014943] Bluetooth: hci7: command tx timeout
[  374.080000] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
07:34:37  Registers:
info registers vcpu 0
RAX=00000000ffffffff RBX=0000000000000000 RCX=bde53094b5b1327e RDX=00000000db688f6a
RSI=000000000b6dc639 RDI=00000000d61cd15b RBP=ffffffff85c1d1c0 RSP=ffff888009617768
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200
RIP=ffffffff8151b073 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0bcb376028 CR3=000000002634d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=bde53094b5b1327e RDX=ffffffff81353c39
RSI=000000000b6dc639 RDI=00000000d61cd15b RBP=ffff88806cf08ad0 RSP=ffff88806cf08a08
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=ffff88806cf08ac0 R14=ffff8880155a1b80 R15=ffff88806cf08a78
RIP=ffffffff81353c53 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2b57ef00a0 CR3=0000000019b30000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000