Warning: Permanently added '[localhost]:44071' (ECDSA) to the list of known hosts. 2025/05/29 06:00:46 fuzzer started 2025/05/29 06:00:47 dialing manager at localhost:36815 syzkaller login: [ 99.864010] cgroup: Unknown subsys name 'net' [ 99.994443] cgroup: Unknown subsys name 'cpuset' [ 100.051647] cgroup: Unknown subsys name 'rlimit' 2025/05/29 06:01:02 syscalls: 2214 2025/05/29 06:01:02 code coverage: enabled 2025/05/29 06:01:02 comparison tracing: enabled 2025/05/29 06:01:02 extra coverage: enabled 2025/05/29 06:01:02 setuid sandbox: enabled 2025/05/29 06:01:02 namespace sandbox: enabled 2025/05/29 06:01:02 Android sandbox: enabled 2025/05/29 06:01:02 fault injection: enabled 2025/05/29 06:01:02 leak checking: enabled 2025/05/29 06:01:02 net packet injection: enabled 2025/05/29 06:01:02 net device setup: enabled 2025/05/29 06:01:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/29 06:01:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/29 06:01:02 USB emulation: enabled 2025/05/29 06:01:02 hci packet injection: enabled 2025/05/29 06:01:02 wifi device emulation: enabled 2025/05/29 06:01:02 802.15.4 emulation: enabled 2025/05/29 06:01:02 fetching corpus: 0, signal 0/0 (executing program) 2025/05/29 06:01:04 starting 8 fuzzer processes 06:01:04 executing program 0: ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file0\x00'}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8000, 0x10000, 0x10000, 0x9, 0x8]}, &(0x7f0000000140)=0x54) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000180), 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0x401, 0x0, 0x5, 0x7fff}, {0x1ff, 0xbb, 0x0, 0x6}, {0x4, 0x1, 0x7, 0x5}, {0x6, 0x1, 0x80, 0x3f}, {0x1, 0x1, 0x5, 0x34d}, {0x6, 0x7, 0x48, 0x7}, {0x20, 0x7, 0x7, 0x3b20000}, {0x1, 0x3, 0x4, 0x7}]}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000380)={0x1, 0x3, 0x1000, 0x2b, &(0x7f0000000240)="598d8019de5bd8194ea2f66338850fd5c88b3305306496b025a152678be313cda8a0f23bbbcc4f2b4b56c1", 0xcd, 0x0, &(0x7f0000000280)="559661544740e96c1224d1124d466de5e2b025a24692c05697084c27fd52e95da28fa8b93c7809d520e443d58e664f1ae34feae6a3dabc4cd3b0ebccc9f621345bb34e77e787745da72cbc6a16fd4f86b2f47256fc3fda809337ea8f48572651fafc0ecb5b541bf56610db8b9bcb76893ec5ac1fef06b5e8f286c92a31fc744bca726d97ac83030deea6242916ac466ef05bd6c73e8acbe3a730f24630a61d3ab36cc260e633ff1fbefd70b504ccaa728228f98e6239f18add1424906c7aaf331f66bcb33cc855db17278b38b2"}) write$P9_RREADLINK(r0, &(0x7f0000000400)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) recvmmsg$unix(r0, &(0x7f0000000840)=[{{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000740), 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x1, 0x10000, &(0x7f0000000880)) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f0000000980)={0x5c, 0x7d, 0x1, {{0x0, 0x46, 0x7ff, 0x20, {0x9, 0x1, 0x7}, 0x10000, 0x8, 0xea0, 0x0, 0x6, '.-[!!\xfb', 0x7, 'mangle\x00', 0x5, '\\[\x1b\\,', 0x1, '\x00'}, 0x1, '\xca', 0xee00, r4}}, 0x5c) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000a00)=0x8, 0x4) r5 = openat(r2, &(0x7f0000000a40)='./file0\x00', 0x400, 0x4) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r6 = syz_io_uring_setup(0x60ad, &(0x7f0000000bc0)={0x0, 0x1bea, 0x2, 0x1, 0x368, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000c40), &(0x7f0000000c80)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005, 0x50, r6, 0x10000000) r7 = socket(0x4, 0x5, 0xfffffff8) getsockopt$inet6_tcp_buf(r7, 0x6, 0xd, &(0x7f0000000cc0)=""/186, &(0x7f0000000d80)=0xba) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000dc0)=0x1, 0x4) 06:01:04 executing program 1: prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x19) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1b) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@can={0x1d, 0x0}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@generic={0xf, "988dab735b26540111b889fa55a3044f09d3f68e9ac509747aa0c71618b1bdd7427b2d6753aead2b1effc8ec06a55a6a031b713207be71a0ef6925fa181ac77a22cb36d946f17eefca2d24fefe5c805060a44bb2f1c0edda1d0e372c8c996bcf1f467f232e7e086ee1543fe21d3f6d26d6c6636650bc2bbc1f9282c63e43"}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000180)=0x100000000) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x4, 0x2000) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1ec, 0x0, 0x114, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x14}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0x25, 0x2a, [@ibss={0x6, 0x2, 0x7}, @ibss={0x6, 0x2, 0x4}, @ssid={0x0, 0x17, @random="5a0e9d628ee772e412d0322cb0c054c0e91bc43208caa5"}]}, @NL80211_ATTR_IE={0xca, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @random_vendor={0xdd, 0x58, "279eff5b7b51171f63721c6c7edd25ca3d2e08b4e8546d7aa7bb845da7123b6445ac3d355b771fe4e1b2d733c08cba82c435f1a13707a8f8754a8c6641b18ceb8c5c48a8b136f742d021b1746674e1f6a7680d85ad61c0b4"}, @preq={0x82, 0x57, @ext={{0x0, 0x1}, 0x6, 0x20, 0x0, @device_b, 0x9, @device_a, 0x7, 0x1ff, 0x5, [{{}, @device_a, 0xffffffff}, {{}, @broadcast, 0xdd27}, {{0x1, 0x0, 0x1}, @device_a, 0xffffffff}, {{0x1, 0x0, 0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_a, 0xfffffffd}]}}, @cf={0x4, 0x6, {0x5b, 0x0, 0x8, 0x100}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_IE={0x2d, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x38, 0x7}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x20, @device_a, 0x400, "", 0x4a, 0x4, @device_b, 0x4}}]}, @NL80211_ATTR_IE={0x51, 0x2a, [@chsw_timing={0x68, 0x4, {0x6}}, @peer_mgmt={0x75, 0x4, {0x0, 0x20, @void, @void, @void}}, @gcr_ga={0xbd, 0x6}, @cf={0x4, 0x6, {0xd, 0x8, 0xfff, 0xff}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x8, 0x80, @device_a, 0x37d9, 0x3, 0x9}}, @mic={0x8c, 0x10, {0x15c, "3b0c8abc2712", @short="a933545205b86fc6"}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE={0x39, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast}}, @link_id={0x65, 0x12, {@from_mac, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0xad}}, @cf={0x4, 0x6, {0x9, 0x7, 0x101, 0x5}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfffb}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) getpeername(r0, &(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000540)=0x80) ioctl$SNAPSHOT_FREE(r2, 0x3305) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='net/protocols\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x28008060}, 0x4000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000880)={[{0x2d, 'net_prio'}, {0x2b, 'hugetlb'}, {0x2b, 'devices'}, {0xac14c13dfb8d3a42, 'freezer'}, {0x2d, 'net_prio'}, {0x2b, 'freezer'}]}, 0x38) r5 = dup2(0xffffffffffffffff, r2) sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xcf14, 0x3e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000009c0)=0x8, 0x4) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x90, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x48000}, 0x40080) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b80), 0x90000, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r2) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0xa55b8a8ec2ecd471}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x110, r7, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x20000001) 06:01:04 executing program 2: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200480c0}, 0xc000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x881) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}, [""]}, 0x68}}, 0x14) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x84) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r2, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x200000c0}, 0x404c8a0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x120, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "461b737964c46ad80a166e3082b8f4062b48cc81f546569815f8748c0c03"}}, @TIPC_NLA_NODE_ID={0x8e, 0x3, "1d006f7ba0ae6d528e314bf1c0b3df948801a464b20e1a11b716ff99c013e52b72f3338490b06cdafb2f492e98b4b18c7db52f32675bb26ecaf5e176712d91572d5fa59bcf03ca9e2a38fc27279a3ca622200fb62afa7daa3e56cfa8756b58f4ec98690f2c716bed4eae2ea18fe172f3c7ac7f8ed571c48150fc5d7a74a3173455b11eb904d9ef6f360b"}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40050}, 0x4040001) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f00000008c0)='D![},\'&!\x00', &(0x7f0000000900)='./file1\x00', r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000940)={'vlan1\x00', {0x2, 0x0, @multicast2}}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000a80)) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x3, 0x0, 0x21, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x8, 0x8000, 0x81, 0x4}}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x6c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x78}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}}, 0x20000080) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000d00)={0x0, @nfc={0x27, 0x1, 0x0, 0x5}, @in={0x2, 0x4e20, @empty}, @nl=@kern={0x10, 0x0, 0x0, 0x40000000}, 0x81, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000cc0)='xfrm0\x00', 0x60, 0xfffffffffffffffc, 0x4}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0xc4) 06:01:04 executing program 3: ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x7) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="d867dba0c91884852e6103645e98") ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x3f, 0x9, 0xffffffff, 0x20c, 0x1f, "732f85514de697c437bab68df13d323b250857", 0x7ff, 0x6}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003cc0)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000280)=""/114, 0x72}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/210, 0xd2}, {&(0x7f0000002400)=""/212, 0xd4}], 0x5, &(0x7f0000002580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f0000003840)=[{&(0x7f0000002740)=""/207, 0xcf}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000003880)=@abs, 0x6e, &(0x7f0000003c00)=[{&(0x7f0000003900)=""/23, 0x17}, {&(0x7f0000003940)=""/219, 0xdb}, {&(0x7f0000003a40)=""/63, 0x3f}, {&(0x7f0000003a80)=""/90, 0x5a}, {&(0x7f0000003b00)=""/231, 0xe7}], 0x5, &(0x7f0000003c80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x3, 0x1140, &(0x7f0000003d80)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003e00)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000100)="0c9bd1e998008d2a6fad74bca2143dd8ee775569a47ae250007984d02d6bdf48b4cb04f4f8457ea4038666b2af14d276b28bca179f154e20a394de2bf2d5983f4332", 0x42}], 0x1, &(0x7f0000003dc0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r7}}}], 0x40, 0x8010}, 0xc000) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003e40), 0x80200, 0x0) ioctl$KDGKBMODE(r9, 0x4b44, &(0x7f0000003e80)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000003ec0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$GIO_UNISCRNMAP(r10, 0x4b69, &(0x7f0000003f00)=""/4096) fcntl$setpipe(r8, 0x407, 0xa9cf) getpeername$unix(r5, &(0x7f0000004f00), &(0x7f0000004f80)=0x6e) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000004fc0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000050c0)={'ip6gre0\x00', &(0x7f0000005040)={'syztnl0\x00', 0x0, 0x2f, 0x7f, 0x21, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7800, 0x19, 0x200}}) sendmsg$BATADV_CMD_GET_VLAN(r11, &(0x7f0000005180)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005140)={&(0x7f0000005100)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x48081}, 0x40004) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f00000051c0)={{0x1, 0x3}, 'port0\x00', 0xf9, 0x40040, 0xc34, 0x2ca, 0x6, 0x8, 0x7, 0x0, 0x2, 0x5}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000052c0), r1) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000005440)={&(0x7f0000005280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005400)={&(0x7f0000005340)={0x9c, r13, 0xc28, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0xc}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "637b0367cb87a61fbe29ab620e"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6f0d5fbff07ed56fd78a925861"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 06:01:04 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x172}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x1) getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0xffffffffffffffff, 0xee00, r2}, 0xc) getegid() sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = clone3(&(0x7f0000000740)={0x80000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x2d}, &(0x7f00000005c0)=""/239, 0xef, &(0x7f00000006c0), &(0x7f0000000700)=[0x0], 0x1}, 0x58) r5 = openat2(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x408141, 0x10, 0x14}, 0x18) r6 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r7 = creat(&(0x7f0000000940)='./file0\x00', 0x55) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000980)={0x2, 'veth1_to_bond\x00', {0x5}}) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}}, 0x805) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40640, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r9, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) 06:01:04 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x108, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x81}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3dbf}, {0x8, 0x13, 0x40f3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x8000}, {0x8, 0x13, 0xffffa261}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xeced}, {0x8}, {0x5, 0x14, 0x1}}]}, 0x108}}, 0x8000) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20040001) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}}, 0x4000050) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xae3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5dc}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd61}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe75}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12cd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2c}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9522}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x474}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xbc, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x946}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7a4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_PUBL={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x400c090) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x12000018}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4008004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x628201}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r3, 0x410, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x815}, 0x40) r4 = socket(0x25, 0x800, 0x7) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000b40)={0x3, 'veth1_macvtap\x00', {0x57}, 0x29}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000b80)=0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, 0x5, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4051}, 0x8000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, &(0x7f0000000d00)={0x8, 'wg0\x00', {'veth0\x00'}}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0xe9c96704136b389b) 06:01:04 executing program 7: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x3, 'geneve0\x00', {0x6}, 0x5}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x154, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe0000000}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x40080c0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)={'L-', 0x9d87}, 0x16, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0xda, 0x1, 0x200, 0x40, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8, 0x20, 0xffff}}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xc8, 0x13, 0x0, 0x70bd25, 0x25dfdbfc, {0x2a, 0x9, 0x5, 0xf0, {0x4e21, 0x4e21, [0x7, 0x100, 0x5, 0x3], [0x0, 0x2, 0x7, 0x1000], r1, [0x7, 0x7fffffff]}, 0xf2c, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x44, 0x1, "077e5e1abb2b45ff188098a0936b9efcddfd16504a0a422d42e610dfabdcad99577f613907e124b654e20830a298667717b45500c6f32b141a5c63fbf0897b74"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "583623c7d885aa994a18438017d14f4182c0827bcf54177dfc991e8fdde14b71fcc4713c712b29c7"}, @INET_DIAG_REQ_BYTECODE={0xa, 0x1, "18122b43b312"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000c4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000008c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x81c7}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r3 = signalfd(r0, &(0x7f0000000a40)={[0x3]}, 0x8) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'syztnl0\x00', r1, 0x4, 0x3e, 0x5, 0x4, 0x68, @empty, @private0, 0x80, 0x1, 0x80, 0x800}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x134, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x72}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x804}, 0x8d0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r3) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000001380)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000e80)={0x484, r6, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x80d}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65aefdde}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8974}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3f, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xab, @loopback, 0x10000}}}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa8e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeea}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb1bd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff926f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff438}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x484}, 0x1, 0x0, 0x0, 0x44}, 0x1) [ 116.723868] audit: type=1400 audit(1748498464.594:7): avc: denied { execmem } for pid=271 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:01:04 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x800}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x9}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x30}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xcec}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x48001) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000200)=0x8) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = signalfd(r3, &(0x7f0000000280)={[0x3f]}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000004c0)=r5) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='net/rt6_stats\x00') sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x0, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x53}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3648ebc0d485c4f06fb8e7a00a"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040800}, 0x5) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x110, r3, 0xba1cd000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000880)={0x0, 0x2, 0x1}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl0\x00', r2, 0x2f, 0x2, 0xcf, 0x0, 0x1, @loopback, @private2, 0x20, 0x8000, 0x200, 0xa8}}) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b80)='net/rt6_stats\x00') ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r10, 0x40089413, &(0x7f0000000bc0)=0x100000000000000) [ 118.199137] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.201978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.206648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.209794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.214587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.217194] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.221650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.236976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.238698] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.244190] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.295242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.316291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.321635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.330444] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.330714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.333400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.343412] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.345426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.350667] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.355507] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.363570] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.368192] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.369969] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.377658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.379562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.385764] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 118.386000] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.389511] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 118.391968] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 118.396197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.399763] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.401920] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 118.410540] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.413445] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 118.439333] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 118.450703] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 118.465852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 118.471288] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 118.486844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 118.490030] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 120.334122] Bluetooth: hci0: command tx timeout [ 120.334410] Bluetooth: hci1: command tx timeout [ 120.461399] Bluetooth: hci2: command tx timeout [ 120.462750] Bluetooth: hci3: command tx timeout [ 120.463723] Bluetooth: hci4: command tx timeout [ 120.527282] Bluetooth: hci5: command tx timeout [ 120.529366] Bluetooth: hci7: command tx timeout [ 120.530758] Bluetooth: hci6: command tx timeout [ 122.381297] Bluetooth: hci0: command tx timeout [ 122.382233] Bluetooth: hci1: command tx timeout [ 122.509300] Bluetooth: hci3: command tx timeout [ 122.510150] Bluetooth: hci4: command tx timeout [ 122.510896] Bluetooth: hci2: command tx timeout [ 122.573547] Bluetooth: hci6: command tx timeout [ 122.575274] Bluetooth: hci7: command tx timeout [ 122.575307] Bluetooth: hci5: command tx timeout [ 124.430131] Bluetooth: hci0: command tx timeout [ 124.430590] Bluetooth: hci1: command tx timeout [ 124.558164] Bluetooth: hci2: command tx timeout [ 124.558688] Bluetooth: hci4: command tx timeout [ 124.559233] Bluetooth: hci3: command tx timeout [ 124.621249] Bluetooth: hci5: command tx timeout [ 124.622757] Bluetooth: hci7: command tx timeout [ 124.623278] Bluetooth: hci6: command tx timeout [ 126.477193] Bluetooth: hci1: command tx timeout [ 126.477723] Bluetooth: hci0: command tx timeout [ 126.605189] Bluetooth: hci3: command tx timeout [ 126.605724] Bluetooth: hci4: command tx timeout [ 126.606300] Bluetooth: hci2: command tx timeout [ 126.670333] Bluetooth: hci7: command tx timeout [ 126.670857] Bluetooth: hci6: command tx timeout [ 126.670925] Bluetooth: hci5: command tx timeout [ 180.637252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.647438] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.649648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.652685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.654545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.693931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.698902] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.702261] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.719780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.723298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.724486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.728436] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.731191] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.734848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.736294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.741490] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.753214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.755117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.758666] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.760638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.777867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.782426] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.795774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.831296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.833343] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.844850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 180.848023] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 180.850178] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 180.855477] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 180.858749] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.900610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.904064] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.909362] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.912525] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.922181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.922892] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.934953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.941314] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.957365] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.962771] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.733283] Bluetooth: hci0: command tx timeout [ 182.797481] Bluetooth: hci2: command tx timeout [ 182.798007] Bluetooth: hci1: command tx timeout [ 182.862245] Bluetooth: hci3: command tx timeout [ 182.925197] Bluetooth: hci4: command tx timeout [ 182.925253] Bluetooth: hci7: command tx timeout [ 182.989125] Bluetooth: hci5: command tx timeout [ 183.054230] Bluetooth: hci6: command tx timeout [ 184.781132] Bluetooth: hci0: command tx timeout [ 184.845918] Bluetooth: hci1: command tx timeout [ 184.846153] Bluetooth: hci2: command tx timeout [ 184.910261] Bluetooth: hci3: command tx timeout [ 184.973146] Bluetooth: hci7: command tx timeout [ 184.973701] Bluetooth: hci4: command tx timeout [ 185.037258] Bluetooth: hci5: command tx timeout [ 185.102247] Bluetooth: hci6: command tx timeout [ 186.829142] Bluetooth: hci0: command tx timeout [ 186.893706] Bluetooth: hci1: command tx timeout [ 186.894243] Bluetooth: hci2: command tx timeout [ 186.958077] Bluetooth: hci3: command tx timeout [ 187.021193] Bluetooth: hci7: command tx timeout [ 187.021771] Bluetooth: hci4: command tx timeout [ 187.085242] Bluetooth: hci5: command tx timeout [ 187.149424] Bluetooth: hci6: command tx timeout [ 188.877120] Bluetooth: hci0: command tx timeout [ 188.941582] Bluetooth: hci2: command tx timeout [ 188.942189] Bluetooth: hci1: command tx timeout [ 189.005259] Bluetooth: hci3: command tx timeout [ 189.071995] Bluetooth: hci7: command tx timeout [ 189.072031] Bluetooth: hci4: command tx timeout [ 189.133121] Bluetooth: hci5: command tx timeout [ 189.197192] Bluetooth: hci6: command tx timeout [ 243.090979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.097634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.107917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.116851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.128179] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.131656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.145036] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.151474] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.182690] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.195109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.496996] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.506104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.512658] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.529387] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.549978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.573377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.579396] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.583324] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.588402] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.593393] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.605762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.613951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.618802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.648414] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.670969] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.706602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.717185] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.746417] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.750743] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.753576] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.757568] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.767593] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.775358] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.778314] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.786574] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.789384] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.807988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.811329] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.816472] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.821495] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 245.197173] Bluetooth: hci0: command tx timeout [ 245.261643] Bluetooth: hci1: command tx timeout [ 245.647727] Bluetooth: hci2: command tx timeout [ 245.773362] Bluetooth: hci4: command tx timeout [ 245.901159] Bluetooth: hci5: command tx timeout [ 245.901867] Bluetooth: hci6: command tx timeout [ 245.965144] Bluetooth: hci7: command tx timeout [ 246.029314] Bluetooth: hci3: command tx timeout [ 247.245590] Bluetooth: hci0: command tx timeout [ 247.309107] Bluetooth: hci1: command tx timeout [ 247.693995] Bluetooth: hci2: command tx timeout [ 247.821750] Bluetooth: hci4: command tx timeout [ 247.950541] Bluetooth: hci6: command tx timeout [ 247.952085] Bluetooth: hci5: command tx timeout [ 248.014119] Bluetooth: hci7: command tx timeout [ 248.077138] Bluetooth: hci3: command tx timeout [ 249.293179] Bluetooth: hci0: command tx timeout [ 249.358418] Bluetooth: hci1: command tx timeout [ 249.741158] Bluetooth: hci2: command tx timeout [ 249.869257] Bluetooth: hci4: command tx timeout [ 249.997205] Bluetooth: hci6: command tx timeout [ 249.998144] Bluetooth: hci5: command tx timeout [ 250.061666] Bluetooth: hci7: command tx timeout [ 250.125176] Bluetooth: hci3: command tx timeout [ 251.341531] Bluetooth: hci0: command tx timeout [ 251.405616] Bluetooth: hci1: command tx timeout [ 251.791349] Bluetooth: hci2: command tx timeout [ 251.917181] Bluetooth: hci4: command tx timeout [ 252.046335] Bluetooth: hci6: command tx timeout [ 252.046897] Bluetooth: hci5: command tx timeout [ 252.109332] Bluetooth: hci7: command tx timeout [ 252.174096] Bluetooth: hci3: command tx timeout [ 305.383635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.386728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.391661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.405104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.411443] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.567819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.573616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.577634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.590708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.598459] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.657765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.661552] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.674701] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.692771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.706796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.842984] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.856527] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.892955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.928556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.930950] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.937115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 305.952254] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 305.961556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.966716] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.970819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.975432] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.984560] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.993480] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.020627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.035772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.049824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.057383] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.060896] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.065716] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.070896] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.073515] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.148745] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.155737] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.159227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.167622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.471438] Bluetooth: hci0: command tx timeout [ 307.663080] Bluetooth: hci1: command tx timeout [ 307.789111] Bluetooth: hci2: command tx timeout [ 308.109386] Bluetooth: hci5: command tx timeout [ 308.173396] Bluetooth: hci4: command tx timeout [ 308.237341] Bluetooth: hci3: command tx timeout [ 308.301173] Bluetooth: hci7: command tx timeout [ 308.365178] Bluetooth: hci6: command tx timeout [ 309.518127] Bluetooth: hci0: command tx timeout [ 309.710067] Bluetooth: hci1: command tx timeout [ 309.837105] Bluetooth: hci2: command tx timeout [ 310.157303] Bluetooth: hci5: command tx timeout [ 310.222067] Bluetooth: hci4: command tx timeout [ 310.285130] Bluetooth: hci3: command tx timeout [ 310.349266] Bluetooth: hci7: command tx timeout [ 310.413254] Bluetooth: hci6: command tx timeout [ 311.565389] Bluetooth: hci0: command tx timeout [ 311.757104] Bluetooth: hci1: command tx timeout [ 311.885101] Bluetooth: hci2: command tx timeout [ 312.205514] Bluetooth: hci5: command tx timeout [ 312.269359] Bluetooth: hci4: command tx timeout [ 312.333173] Bluetooth: hci3: command tx timeout [ 312.399084] Bluetooth: hci7: command tx timeout [ 312.461369] Bluetooth: hci6: command tx timeout [ 313.613298] Bluetooth: hci0: command tx timeout [ 313.805380] Bluetooth: hci1: command tx timeout [ 313.933109] Bluetooth: hci2: command tx timeout [ 314.253406] Bluetooth: hci5: command tx timeout [ 314.319086] Bluetooth: hci4: command tx timeout [ 314.381296] Bluetooth: hci3: command tx timeout [ 314.445396] Bluetooth: hci7: command tx timeout [ 314.509236] Bluetooth: hci6: command tx timeout [ 367.715149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.728645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.734844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.743906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.752103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.903257] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.908633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.916553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.928547] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.943234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.001316] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.013555] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.016565] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.033551] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.041927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.177009] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.180703] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.191941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.210200] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.224609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.231440] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.236195] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.243242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.293614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.358721] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.362788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.367599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.376966] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.385005] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 368.389818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 368.391968] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 368.393924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.397338] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 368.415465] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 368.432477] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.455803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.498018] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.506311] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.514003] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.543798] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 369.806100] Bluetooth: hci0: command tx timeout [ 369.997303] Bluetooth: hci1: command tx timeout [ 370.125269] Bluetooth: hci2: command tx timeout [ 370.317781] Bluetooth: hci3: command tx timeout [ 370.509180] Bluetooth: hci4: command tx timeout [ 370.509974] Bluetooth: hci6: command tx timeout [ 370.638715] Bluetooth: hci7: command tx timeout [ 370.639503] Bluetooth: hci5: command tx timeout [ 371.854625] Bluetooth: hci0: command tx timeout [ 372.046085] Bluetooth: hci1: command tx timeout [ 372.174481] Bluetooth: hci2: command tx timeout [ 372.366342] Bluetooth: hci3: command tx timeout [ 372.557483] Bluetooth: hci4: command tx timeout [ 372.557959] Bluetooth: hci6: command tx timeout [ 372.685439] Bluetooth: hci7: command tx timeout [ 372.685909] Bluetooth: hci5: command tx timeout [ 373.902226] Bluetooth: hci0: command tx timeout [ 374.094550] Bluetooth: hci1: command tx timeout [ 374.222349] Bluetooth: hci2: command tx timeout [ 374.414121] Bluetooth: hci3: command tx timeout [ 374.607313] Bluetooth: hci4: command tx timeout [ 374.607808] Bluetooth: hci6: command tx timeout [ 374.734193] Bluetooth: hci5: command tx timeout [ 374.734689] Bluetooth: hci7: command tx timeout [ 375.950890] Bluetooth: hci0: command tx timeout [ 376.142058] Bluetooth: hci1: command tx timeout [ 376.269095] Bluetooth: hci2: command tx timeout [ 376.461133] Bluetooth: hci3: command tx timeout [ 376.654197] Bluetooth: hci6: command tx timeout [ 376.654695] Bluetooth: hci4: command tx timeout [ 376.781135] Bluetooth: hci7: command tx timeout [ 376.781648] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 06:06:05 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81a1526d RDX=ffff888016a33700 RSI=00000000000000f4 RDI=0000000000000005 RBP=ffffea0001b3aec0 RSP=ffff88802ed17aa0 R8 =00007fdde87fa000 R9 =fffff940003675d8 R10=0000000000000000 R11=0000000000000001 R12=ffffea0001b3aec0 R13=0000000000000000 R14=0000000000000000 R15=ffffea0001b3aed8 RIP=ffffffff81a15274 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdde86bc540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdde87f0570 CR3=000000000d99f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000ff0000000000000000000000 XMM01=ffffffff00ffffffffffffffffffffff XMM02=42494c4700342e332e325f4342494c47 XMM03=00000000000000000000000000006f72 XMM04=6f6c77725f646165726874705f5f0079 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000005 RBX=ffff888016f28000 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff888016f28a80 RDI=ffff888016f28a80 RBP=ffff888016f28a58 RSP=ffff888030f9f5f0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888016f28a80 R13=6a5c580aceac53cb R14=0000000000000000 R15=0000000000000001 RIP=ffffffff81514604 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055dc1048f080 CR3=000000001c506000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000