Warning: Permanently added '[localhost]:5511' (ECDSA) to the list of known hosts. 2025/06/15 13:48:10 fuzzer started 2025/06/15 13:48:10 dialing manager at localhost:42061 syzkaller login: [ 93.093804] cgroup: Unknown subsys name 'net' [ 93.243130] cgroup: Unknown subsys name 'cpuset' [ 93.329502] cgroup: Unknown subsys name 'rlimit' 2025/06/15 13:48:26 syscalls: 204 2025/06/15 13:48:26 code coverage: enabled 2025/06/15 13:48:26 comparison tracing: enabled 2025/06/15 13:48:26 extra coverage: enabled 2025/06/15 13:48:26 setuid sandbox: enabled 2025/06/15 13:48:26 namespace sandbox: enabled 2025/06/15 13:48:26 Android sandbox: enabled 2025/06/15 13:48:26 fault injection: enabled 2025/06/15 13:48:26 leak checking: enabled 2025/06/15 13:48:26 net packet injection: enabled 2025/06/15 13:48:26 net device setup: enabled 2025/06/15 13:48:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/15 13:48:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/15 13:48:26 USB emulation: enabled 2025/06/15 13:48:26 hci packet injection: enabled 2025/06/15 13:48:26 wifi device emulation: enabled 2025/06/15 13:48:26 802.15.4 emulation: enabled 2025/06/15 13:48:26 fetching corpus: 0, signal 0/0 (executing program) 2025/06/15 13:48:27 starting 8 fuzzer processes 13:48:27 executing program 0: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2d}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6f0e}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004000}, 0x4185f5c532cc7c71) r2 = openat$cgroup_type(r0, &(0x7f0000000240), 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000020) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fdd3a9e1f906c792432be19fa2"}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x20000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4840}, 0x4000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040094}, 0x40000804) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x30}}, 0x24000000) r7 = memfd_secret(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000840)='\x00', &(0x7f0000000880)='./file0\x00', r7) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000900), r5) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)={0x1b4, r8, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x100, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc208560}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60cb639c}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a933de5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa716d20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4268ec1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c914060}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a4f8d53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16393bc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbd6817}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x383a10a6}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b6c2039}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fb97744}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69f218a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e489ec}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xea7325138a605402}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19454d08}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20839552}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a1e5cc8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc40a63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4400c810}, 0x0) write$cgroup_type(r7, &(0x7f0000000c80), 0x9) 13:48:27 executing program 1: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffff9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x2, 0x9, 0x8, 0x9, 0x5]}]}, 0x6c}}, 0x4004055) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2a12b7efba4f6bff}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x288, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x1bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x97, 0x5, "04af87bf32c16b914c74b572828e72d7887df53031c1d6171339e4f7fc2469ac0ab15a2aecfe79e25efe451a1221362b6939ffde3e01aeda3fb803800402eb5428eafa8ae1896572b4f145065f1fc1d45b792e56b8e5a18bbe446f5415efe3d14ea4eef05334d0f840ac56b22f5bacab43735a1bb0daa46da17d4389d081f7d5dc118452fa07dcfdb802304920768a4445c694"}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff57}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%*-\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x92}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$\\#}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '[:[+/\xc1@%]&*-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_MODES_OURS={0xa8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x3e, 0x5, "6bae4acd623204031b83ba47a2b38ceb497974f4958a0ef67d820bf5390412b9b58034688f1865bde21ef7d6d79f09785a518526dc25bbb57742"}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SEG6\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc4c0}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x28b}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x25}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c9}, 0x30) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0xfffffffffffffff9) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xe96, 0x0, 0x7, 0x9e}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008e7}, 0x41) r7 = socket(0x6, 0xa, 0x7) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000040}, 0x4048000) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000c40), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20042810}, 0x20018045) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xf8, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000010) 13:48:27 executing program 2: ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xbf3da) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/167, 0xa7}) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0x40010, r0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xffff) r1 = socket(0xf, 0x1, 0x80000000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000014) r2 = memfd_secret(0x0) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) r3 = socket(0x21, 0x800, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)) r4 = io_uring_setup(0xdc, &(0x7f00000002c0)={0x0, 0xc960, 0x4, 0x2, 0x296}) io_uring_setup(0x4cc6, &(0x7f0000000340)={0x0, 0x40d6, 0x4, 0x3, 0x27b, 0x0, r4}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) socket(0x21, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x9ccbf) syz_usb_disconnect(0xffffffffffffffff) [ 110.140799] audit: type=1400 audit(1749995307.778:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:48:27 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xd69, 0xffffffa2, 0x600, 0x6}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x4008000) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x9014) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r1, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x24048010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r3, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x44800) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x81) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b40), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r8, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000840) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) 13:48:27 executing program 4: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0xf8, 0x3, 0x6, 0x5, 0x0, 0xf56, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x104, 0x3ff, 0x7, 0x3, 0x1f, 0x8, 0x9, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="57b7a7", 0x3, 0xfffffffffffffff8) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x53, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000040) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004805}, 0x820) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800) perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x20, 0xba, 0x3f, 0x9a, 0x0, 0x8, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x72c, 0x4, @perf_config_ext={0x8a, 0x5}, 0x2, 0x10, 0x4000, 0x6, 0x0, 0x8, 0x9, 0x0, 0xffffffff, 0x0, 0x4}, r1, 0x10, 0xffffffffffffffff, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xa6240}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r4, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffffb, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000900), r3) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r6, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004084) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24008001) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xc4, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7bc}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @private2}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) 13:48:27 executing program 5: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x5c}}, 0x40380c5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x5}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xde}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x136}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x4008000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x771}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x92c}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4008000) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r8, 0x120, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x30048000) 13:48:27 executing program 6: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x80) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2, 0xff, 0x20, 0x100, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8000, 0x80, 0x7a5e, 0x9}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8c74}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x11) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x428, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe067}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3c78}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33c}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80000000, @private1, 0xfffffe01}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @mcast2, 0x23}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x9, 0xa621, @remote, 0x4}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x667}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4565378f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1377}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc2ba}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x53b5}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6507}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd5f00000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xebf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffd}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x86}]}]}, 0x428}, 0x1, 0x0, 0x0, 0x4008000}, 0xc001) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40880}, 0x40181) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x947}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004a041}, 0x20040000) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xea32}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40041}, 0x4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x30, r5, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r7 = socket(0x28, 0x800, 0x100) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000fc0), r6) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xd4, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000810) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x17c, r8, 0x300, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x251}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x11b}, {0xc, 0x90, 0x665}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6e7}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1f}, {0xc, 0x90, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc}, {0xc, 0x90, 0x8001}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 13:48:28 executing program 7: r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) r3 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xadef}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffc0}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x43}]}, 0x104}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_SEQ={0xd, 0x4, "cc2193cd854defa353"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fc98616022"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "17dde75cea8d284e1e1452043f"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9911ea98bc"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0x87a01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "01837458b6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0625c25ae422b88fdcd4e72db4"}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0xc4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20008804) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000bc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000700)={0x45c, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x46}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x326}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x30, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x8}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x20}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x164, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x9, 0x1ff, 0xc80a, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x76c, 0x5, 0x4, 0x8, 0x4, 0x1000, 0x37, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x7, 0x9fe9, 0xe012, 0xf3b3, 0xfff, 0x3df6, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x4, 0x4, 0x9, 0x1b, 0x16, 0x6, 0x6, 0x18, 0x2, 0x4, 0x30, 0x16, 0x0, 0x5, 0xb, 0x1b, 0x48, 0x30, 0x60, 0x30, 0x6c, 0x2e, 0x18, 0x16, 0x18, 0x5, 0x0, 0x2, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x7}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x9}, {0x2, 0x6}, {0x6}, {0x5, 0x3}, {0x5, 0x4}, {0x2, 0x2}, {0x6, 0x2}, {0x5, 0x3}, {0x5, 0x5}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x8}, {0x2, 0xa}, {}]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x8, 0x401, 0x8000, 0x7f, 0xe0, 0xf84d]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x36, 0x12, 0x1, 0x48, 0x16, 0x4, 0x18, 0x1b, 0x36, 0x18, 0x24, 0x24, 0x16, 0x48, 0x4, 0x3, 0x48, 0xc, 0x30, 0x6c, 0x24, 0x4, 0x30, 0x24]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0xf800, 0xfff9, 0x1, 0x1, 0x40, 0x384]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x1, 0x9, 0x8, 0x556d, 0x2, 0x1, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1b, 0x6, 0x0, 0x9, 0x7, 0x9, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x6}, {0x3, 0xa}, {0x2}, {0x1, 0x6}, {0x2, 0x1}, {0x6}, {0x5, 0x4}, {0x0, 0x9}, {0x5, 0x7}, {0x4, 0x3}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x6, 0x4}, {0x1, 0x8}, {0x6, 0x6}, {0x7, 0x3}, {0x7}, {0x4, 0x6}, {0x1}, {0x4, 0x4}, {0x2, 0xa}, {0x3, 0x7}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x6}, {0x4, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x400, 0x7f, 0x0, 0x1, 0x8, 0x263, 0x2c]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3f, 0x4cc3, 0x9, 0x5, 0x800, 0x63f6, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x24c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xc, 0x4, 0x6, 0x6c, 0x2, 0x5, 0x1b, 0x3, 0x26, 0x48, 0xb, 0x4, 0x18, 0x16, 0x5, 0x18, 0x2, 0x6, 0xb, 0x3, 0x6c, 0x6, 0x48, 0x1b, 0x36]}, @NL80211_TXRATE_HT={0x8, 0x2, [{}, {0x0, 0x4}, {0x1, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb12, 0x101, 0x401, 0x7, 0x0, 0x6, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x2}, {0x0, 0x7}, {0x4, 0x6}, {0x4}, {0x1, 0x1}, {0x6, 0x9}, {0x4, 0x2}, {0x3, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0x4}, {0x0, 0x1}, {0x3, 0x2}, {0x2, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {}, {0x7, 0x5}, {0x1, 0x1}, {0x4, 0x2}, {0x7, 0x7}, {0x1}, {0x3, 0x7}, {0x7, 0x2}, {0x0, 0x6}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x1}, {0x2, 0x1}, {0x2, 0x7}, {0x5, 0xa}, {0x6, 0x11}, {0x5, 0x3}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x3}, {0x6}, {0x6, 0x7}, {0x7, 0x8}, {0x4, 0x2}, {}, {0x2, 0x7}, {0x1, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0x5}, {0x4, 0x5}, {0x4, 0x4}, {0x2, 0xa}, {0x1, 0x8}, {}, {0x7, 0x5}, {0x1, 0x3}, {0x3}, {0x0, 0x2}, {0x2, 0xa}, {0x7, 0x8}, {0x5, 0xa}, {0x5, 0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0x6}, {0x3}, {0x2, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xe, 0x6, 0x16, 0x12, 0x16, 0x3, 0x30, 0xc, 0x6, 0x12, 0x6, 0x6c, 0x60, 0x9, 0x6c, 0x6c, 0xb, 0x12, 0x24, 0x1d, 0x3, 0xc, 0x2, 0x12, 0x36, 0x9]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x1, 0x3db6, 0x4, 0x7, 0x80, 0x3]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xb2fe, 0x0, 0x3, 0x3, 0x81, 0xf001, 0x7f]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x7, 0x8}, {0x3, 0x5}, {0x6, 0x3}, {0x5, 0x6}, {0x1, 0x2}, {0x3, 0x9}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {}, {0x0, 0x9}, {0x1, 0x2}, {0x7, 0x7}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x2}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x6}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x9}, {0x4}, {0x6, 0x3}, {0x2, 0x4}, {0x1, 0x4}, {0x7, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x0, 0x4}, {0x5}, {0x5, 0x6}, {0x7, 0x5}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x2}, {0x2, 0x8}, {0x0, 0x7}, {0x5, 0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0xa}, {0x3, 0x5}, {0x3, 0xa}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x1}, {0x5, 0xa}, {0x3, 0x8}, {0x0, 0x6}, {0x0, 0x1}, {0x5, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x4, 0xa}, {0x3}, {0x4, 0x3}, {0x3, 0x2}, {}, {0x3, 0x6}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2f, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1000, 0x3, 0x4, 0x3, 0xd6c3, 0x101, 0x2]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0xb, 0xb, 0x1b, 0x1b, 0x1b, 0x3]}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x173, 0x4, 0x0, 0x3f, 0x0, 0x1000, 0x5f7, 0x7ff]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x6}, {0x5}, {0x0, 0x3}, {0x5, 0x7}, {0x7}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x2}, {0x7, 0x2}, {0x0, 0x5}, {0x4, 0x9}, {0x4, 0x1}, {0x1, 0x5}, {0x4, 0x7}, {0x7, 0x5}, {0x1, 0x3}, {0x6, 0x1}, {0x2, 0x9}, {0x7, 0xa}, {0x1, 0x7}, {0x7, 0xa}, {0x3, 0xa}, {0x0, 0x5}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0x2}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x0, 0x24, 0x35, 0xc, 0x16, 0x24, 0xb, 0x5, 0x2e, 0x16, 0x4, 0x1, 0xc, 0x30]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x2, 0x48, 0x36, 0x30, 0x4, 0x3, 0x3, 0x36, 0x48, 0x3, 0x60, 0x9, 0x48, 0x9, 0x3, 0x3, 0x3, 0x24, 0x6, 0x1b, 0x3]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x3}, {0x3, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x4}, {0x7, 0x9}, {}, {0x7, 0x4}, {0x5, 0x1}, {0x7, 0x1}, {0x2, 0x2}, {0x6, 0x6}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x5, 0xa}, {0x6, 0x7}, {0x5, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x2}, {0x7, 0x1}, {0x5, 0x9}, {0x7, 0x9}, {0x2}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x6}, {0x5}, {0x6, 0x6}, {0x1, 0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x5}, {0x7, 0x1}, {0x6, 0x2}, {0x1, 0x8}, {0x5, 0x5}, {0x4, 0x1e}, {0x3, 0xa}, {0x7}, {0x7, 0x5}, {0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x1}, {0x5, 0x7}, {0x6, 0x5}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x4, 0x5}, {0x6, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x7fff, 0x1, 0x6, 0x62ff, 0x8000, 0x1, 0x7ff]}}]}]}]}, 0x45c}, 0x1, 0x0, 0x0, 0xf646218eb17c2304}, 0x24000810) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000c40), r3) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r7 = memfd_secret(0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r8, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8}, @val={0xc, 0x99, {0x8, 0x68}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x10) r9 = socket(0x5, 0x6, 0x1) sendmsg$TIPC_CMD_SET_NETID(r9, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x7d43}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x815}, 0x4000001) [ 111.490222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.495503] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.498946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.502897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.509450] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.523658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.532158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.548125] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.550009] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.561400] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.564010] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.584683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.586911] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.621628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.625568] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.680719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.687673] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.704636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.735397] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.743785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.776691] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.806464] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.813872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.819617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.821178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.830278] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.840393] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.844670] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.851804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.856991] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.863969] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.871843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.872196] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.878844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.893773] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.897805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.910824] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.917439] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.921841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.924037] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.618158] Bluetooth: hci0: command tx timeout [ 113.681147] Bluetooth: hci2: command tx timeout [ 113.681927] Bluetooth: hci1: command tx timeout [ 113.873172] Bluetooth: hci3: command tx timeout [ 113.935147] Bluetooth: hci4: command tx timeout [ 113.999246] Bluetooth: hci6: command tx timeout [ 113.999319] Bluetooth: hci5: command tx timeout [ 113.999849] Bluetooth: hci7: command tx timeout [ 115.665224] Bluetooth: hci0: command tx timeout [ 115.728264] Bluetooth: hci1: command tx timeout [ 115.728721] Bluetooth: hci2: command tx timeout [ 115.920159] Bluetooth: hci3: command tx timeout [ 115.983212] Bluetooth: hci4: command tx timeout [ 116.047348] Bluetooth: hci5: command tx timeout [ 116.047865] Bluetooth: hci6: command tx timeout [ 116.048149] Bluetooth: hci7: command tx timeout [ 117.711338] Bluetooth: hci0: command tx timeout [ 117.775277] Bluetooth: hci1: command tx timeout [ 117.776566] Bluetooth: hci2: command tx timeout [ 117.968377] Bluetooth: hci3: command tx timeout [ 118.032328] Bluetooth: hci4: command tx timeout [ 118.095139] Bluetooth: hci7: command tx timeout [ 118.097219] Bluetooth: hci6: command tx timeout [ 118.097632] Bluetooth: hci5: command tx timeout [ 119.759319] Bluetooth: hci0: command tx timeout [ 119.823611] Bluetooth: hci2: command tx timeout [ 119.823798] Bluetooth: hci1: command tx timeout [ 120.017096] Bluetooth: hci3: command tx timeout [ 120.080470] Bluetooth: hci4: command tx timeout [ 120.143330] Bluetooth: hci6: command tx timeout [ 120.143371] Bluetooth: hci7: command tx timeout [ 120.144158] Bluetooth: hci5: command tx timeout [ 171.591843] syz-executor.0 (282) used greatest stack depth: 24640 bytes left [ 171.793871] syz-executor.7 (287) used greatest stack depth: 24544 bytes left [ 174.106909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.110339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.112776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.117843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.119806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.258688] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.263509] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.265035] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.269904] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.273328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.345798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.347890] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.349752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.370880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.381403] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.382209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.384672] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.385545] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.386450] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.392997] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.398620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.403776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.408098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.409337] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.410447] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.414634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.422783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.426842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.446391] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.448806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.452524] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.456532] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.463359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.482944] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.484788] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.502344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.507461] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.511506] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.521896] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.526037] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.207196] Bluetooth: hci0: command tx timeout [ 176.336140] Bluetooth: hci1: command tx timeout [ 176.527417] Bluetooth: hci4: command tx timeout [ 176.528035] Bluetooth: hci2: command tx timeout [ 176.591450] Bluetooth: hci3: command tx timeout [ 176.592015] Bluetooth: hci7: command tx timeout [ 176.592628] Bluetooth: hci6: command tx timeout [ 176.593177] Bluetooth: hci5: command tx timeout [ 178.255163] Bluetooth: hci0: command tx timeout [ 178.383803] Bluetooth: hci1: command tx timeout [ 178.575181] Bluetooth: hci2: command tx timeout [ 178.575237] Bluetooth: hci4: command tx timeout [ 178.639271] Bluetooth: hci6: command tx timeout [ 178.639709] Bluetooth: hci5: command tx timeout [ 178.640450] Bluetooth: hci7: command tx timeout [ 178.640503] Bluetooth: hci3: command tx timeout [ 180.304146] Bluetooth: hci0: command tx timeout [ 180.431273] Bluetooth: hci1: command tx timeout [ 180.623177] Bluetooth: hci4: command tx timeout [ 180.626136] Bluetooth: hci2: command tx timeout [ 180.687172] Bluetooth: hci5: command tx timeout [ 180.689322] Bluetooth: hci3: command tx timeout [ 180.689738] Bluetooth: hci7: command tx timeout [ 180.691189] Bluetooth: hci6: command tx timeout [ 182.351189] Bluetooth: hci0: command tx timeout [ 182.479376] Bluetooth: hci1: command tx timeout [ 182.671192] Bluetooth: hci2: command tx timeout [ 182.671219] Bluetooth: hci4: command tx timeout [ 182.735195] Bluetooth: hci7: command tx timeout [ 182.735262] Bluetooth: hci6: command tx timeout [ 182.735640] Bluetooth: hci3: command tx timeout [ 182.736792] Bluetooth: hci5: command tx timeout [ 236.332313] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.334123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.335938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.337139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.338659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.340131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.345085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.346633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.350463] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.351357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.388004] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.388956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.392369] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.393528] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.395367] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.395910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.415197] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.418501] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.419462] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.421451] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.619933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.621503] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.622936] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.629205] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.630955] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.658020] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.659529] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.661353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.665353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.666988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.733770] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.746024] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.755773] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.756666] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.763267] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.768783] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.814378] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.820186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.831845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.849202] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.415173] Bluetooth: hci1: command tx timeout [ 238.415933] Bluetooth: hci0: command tx timeout [ 238.480177] Bluetooth: hci3: command tx timeout [ 238.480783] Bluetooth: hci2: command tx timeout [ 238.671184] Bluetooth: hci5: command tx timeout [ 238.735192] Bluetooth: hci4: command tx timeout [ 238.927167] Bluetooth: hci7: command tx timeout [ 238.927971] Bluetooth: hci6: command tx timeout [ 240.463996] Bluetooth: hci1: command tx timeout [ 240.465297] Bluetooth: hci0: command tx timeout [ 240.528304] Bluetooth: hci2: command tx timeout [ 240.529201] Bluetooth: hci3: command tx timeout [ 240.719339] Bluetooth: hci5: command tx timeout [ 240.783228] Bluetooth: hci4: command tx timeout [ 240.976188] Bluetooth: hci6: command tx timeout [ 240.976259] Bluetooth: hci7: command tx timeout [ 242.511554] Bluetooth: hci1: command tx timeout [ 242.512301] Bluetooth: hci0: command tx timeout [ 242.575292] Bluetooth: hci3: command tx timeout [ 242.575470] Bluetooth: hci2: command tx timeout [ 242.769093] Bluetooth: hci5: command tx timeout [ 242.832365] Bluetooth: hci4: command tx timeout [ 243.023537] Bluetooth: hci6: command tx timeout [ 243.023572] Bluetooth: hci7: command tx timeout [ 244.559537] Bluetooth: hci0: command tx timeout [ 244.559667] Bluetooth: hci1: command tx timeout [ 244.623275] Bluetooth: hci2: command tx timeout [ 244.624166] Bluetooth: hci3: command tx timeout [ 244.815683] Bluetooth: hci5: command tx timeout [ 244.879395] Bluetooth: hci4: command tx timeout [ 245.073474] Bluetooth: hci6: command tx timeout [ 245.074231] Bluetooth: hci7: command tx timeout [ 298.593235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.599320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.603843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.617914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.624866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.668655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.671493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.673713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.679102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.682644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.866832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.880646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.891308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.907687] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.921631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.945293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.960561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.963223] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.986843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.022694] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.049272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 299.053008] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 299.059491] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.061994] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.068677] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.073601] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.076881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 299.083491] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.087335] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.093499] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.103377] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 299.108610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.122461] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.124410] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.129935] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.133010] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.138713] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.143453] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.145543] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.160855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.688152] Bluetooth: hci0: command tx timeout [ 300.752140] Bluetooth: hci1: command tx timeout [ 301.007149] Bluetooth: hci2: command tx timeout [ 301.199419] Bluetooth: hci6: command tx timeout [ 301.199664] Bluetooth: hci3: command tx timeout [ 301.263154] Bluetooth: hci7: command tx timeout [ 301.328468] Bluetooth: hci4: command tx timeout [ 301.391174] Bluetooth: hci5: command tx timeout [ 302.736227] Bluetooth: hci0: command tx timeout [ 302.799426] Bluetooth: hci1: command tx timeout [ 303.055115] Bluetooth: hci2: command tx timeout [ 303.248204] Bluetooth: hci3: command tx timeout [ 303.248675] Bluetooth: hci6: command tx timeout [ 303.312094] Bluetooth: hci7: command tx timeout [ 303.375152] Bluetooth: hci4: command tx timeout [ 303.440235] Bluetooth: hci5: command tx timeout [ 304.785082] Bluetooth: hci0: command tx timeout [ 304.847262] Bluetooth: hci1: command tx timeout [ 305.105323] Bluetooth: hci2: command tx timeout [ 305.295167] Bluetooth: hci3: command tx timeout [ 305.295627] Bluetooth: hci6: command tx timeout [ 305.360326] Bluetooth: hci7: command tx timeout [ 305.424289] Bluetooth: hci4: command tx timeout [ 305.488114] Bluetooth: hci5: command tx timeout [ 306.832143] Bluetooth: hci0: command tx timeout [ 306.895637] Bluetooth: hci1: command tx timeout [ 307.152244] Bluetooth: hci2: command tx timeout [ 307.343217] Bluetooth: hci6: command tx timeout [ 307.343708] Bluetooth: hci3: command tx timeout [ 307.407142] Bluetooth: hci7: command tx timeout [ 307.471114] Bluetooth: hci4: command tx timeout [ 307.535118] Bluetooth: hci5: command tx timeout [ 360.864550] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.867622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.871579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.881622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.885464] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.023683] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.027697] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.035305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.045869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.051656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.118446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.145620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.162343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.168693] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.178446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.187552] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.191748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.199517] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.211178] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.215484] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.312562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.325713] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.329207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.329642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.333821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.344275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.348108] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.355597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.362914] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.375013] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.506661] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.521343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.547670] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.552722] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.555480] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.802505] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.805609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.808671] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.813494] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.816392] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.959234] Bluetooth: hci0: command tx timeout [ 363.151232] Bluetooth: hci1: command tx timeout [ 363.279440] Bluetooth: hci3: command tx timeout [ 363.343236] Bluetooth: hci2: command tx timeout [ 363.408453] Bluetooth: hci7: command tx timeout [ 363.535373] Bluetooth: hci4: command tx timeout [ 363.727203] Bluetooth: hci5: command tx timeout [ 363.855330] Bluetooth: hci6: command tx timeout [ 365.008213] Bluetooth: hci0: command tx timeout [ 365.199136] Bluetooth: hci1: command tx timeout [ 365.328183] Bluetooth: hci3: command tx timeout [ 365.392093] Bluetooth: hci2: command tx timeout [ 365.455164] Bluetooth: hci7: command tx timeout [ 365.584456] Bluetooth: hci4: command tx timeout [ 365.775542] Bluetooth: hci5: command tx timeout [ 365.904250] Bluetooth: hci6: command tx timeout [ 367.055336] Bluetooth: hci0: command tx timeout [ 367.248370] Bluetooth: hci1: command tx timeout [ 367.376459] Bluetooth: hci3: command tx timeout [ 367.439264] Bluetooth: hci2: command tx timeout [ 367.503157] Bluetooth: hci7: command tx timeout [ 367.632355] Bluetooth: hci4: command tx timeout [ 367.823151] Bluetooth: hci5: command tx timeout [ 367.951393] Bluetooth: hci6: command tx timeout [ 369.104425] Bluetooth: hci0: command tx timeout [ 369.296304] Bluetooth: hci1: command tx timeout [ 369.424401] Bluetooth: hci3: command tx timeout [ 369.488113] Bluetooth: hci2: command tx timeout [ 369.552433] Bluetooth: hci7: command tx timeout [ 369.680245] Bluetooth: hci4: command tx timeout [ 369.872089] Bluetooth: hci5: command tx timeout [ 370.000279] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 13:53:29 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00007f1504c51c60 RCX=0000000000000000 RDX=000000000000000b RSI=00007f150515d978 RDI=00007f1504c51760 RBP=0000000000000014 RSP=00007ffe124e1910 R8 =000000000000ffff R9 =0000000000000008 R10=fffffffffffff988 R11=00007f150515d760 R12=00007f150515da48 R13=0000000000000014 R14=00007f150514ff20 R15=00007f1505182ca0 RIP=00007f150516e415 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1504c4427c CR3=00000000285d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000ff0000000000000000000000 XMM01=0000000000ffffffffffffffffffffff XMM02=0005000000455441564952505f434249 XMM03=0000000000000000564952505f434249 XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffffffff0c8df51 RBX=ffffffff8646fa8c RCX=ffffffff81356741 RDX=0000000000000000 RSI=ffffffff867b6096 RDI=ffffffff8646fa8c RBP=ffffffff8646fa8c RSP=ffff88801758f6c0 R8 =ffffffff867b6096 R9 =0000000000000000 R10=000000000003b4ed R11=0000000000006bd3 R12=ffffffff8646fa8c R13=ffffffff8646fa8c R14=ffffffff8646fa8c R15=dffffc0000000000 RIP=ffffffff8135331f RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555586d17400 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1d4b9e6260 CR3=0000000026519000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff0000000000ff00000000000000ff00 XMM02=000000000000000000ff000000000000 XMM03=000000000000000000ff0000000000ff XMM04=000000ff0000000000ff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000