Warning: Permanently added '[localhost]:7720' (ECDSA) to the list of known hosts. 2025/06/23 08:43:37 fuzzer started 2025/06/23 08:43:38 dialing manager at localhost:33119 syzkaller login: [ 99.071079] cgroup: Unknown subsys name 'net' [ 99.212037] cgroup: Unknown subsys name 'cpuset' [ 99.235365] cgroup: Unknown subsys name 'rlimit' 2025/06/23 08:44:00 syscalls: 2214 2025/06/23 08:44:00 code coverage: enabled 2025/06/23 08:44:00 comparison tracing: enabled 2025/06/23 08:44:00 extra coverage: enabled 2025/06/23 08:44:00 setuid sandbox: enabled 2025/06/23 08:44:00 namespace sandbox: enabled 2025/06/23 08:44:00 Android sandbox: enabled 2025/06/23 08:44:00 fault injection: enabled 2025/06/23 08:44:00 leak checking: enabled 2025/06/23 08:44:00 net packet injection: enabled 2025/06/23 08:44:00 net device setup: enabled 2025/06/23 08:44:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/23 08:44:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/23 08:44:00 USB emulation: enabled 2025/06/23 08:44:00 hci packet injection: enabled 2025/06/23 08:44:00 wifi device emulation: enabled 2025/06/23 08:44:00 802.15.4 emulation: enabled 2025/06/23 08:44:00 fetching corpus: 0, signal 0/0 (executing program) 2025/06/23 08:44:01 starting 8 fuzzer processes 08:44:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000040}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x881) recvfrom(r0, &(0x7f0000000240)=""/132, 0x84, 0x2101, &(0x7f0000000300)=@ethernet={0x1}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x244, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x4b}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x1, 0x7, 0x0, {0x5, 0x1e93, 0x0, 0xff, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x7fffffff, 0x8}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x2, 0x5, 0x0, {0x3f, 0x1ffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0xffff, 0x9}}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "39b63ca0d81f2af1afca133c43f639ee"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "7280f8"}, @NL80211_ATTR_FILS_ERP_RRK={0x62, 0xfc, "971a6358c26785b7e42ed490ac43d0e6fba8d8a01f19e79c005ec63fbe5252c8603f0c7e4ebfdb9149e67755000c0f15a1886a0a9b560f49769a13021e0e4e43b335fe46943f32699d70eef7d47e26f87ef80d0aaca41fefdae6d779aa90"}, @NL80211_ATTR_FILS_ERP_RRK={0x95, 0xfc, "4fcf4f8c707367197b2bd572d49ee8c79168b4c9318e495398a195bbfe05fb0478a0f3d13e14de7a03b2090adc4a75465c6719682862b15409f4a5c1a4ced821af7471cc6e84034523620b34b288e0fdd4a70f5bf0a2dd18be5359cf07ab3a0c217f1d55af489ae2dc7181fefb14f9c5e5b015b26a56ac8287ac2db28ef42c81db76451f67bc12c0061f4da6c440f90d1a"}, @NL80211_ATTR_FILS_ERP_REALM={0xae, 0xfa, "ebf4c3953265c3af966293f9ea39304c0d45276a895796e89d91c4c5a48c50d29ce66319cfb22f6d01185e6c424553977a7b8740a1ef4ca20dd4447883dfb51c8ed9d2d27b1b535cd775929641626c57ac484d7810ac17b27451fba921f104901d36c799e99e5e371fd627f69afa4a20b919285552078495912198da8784b2a8d0645c1f3d47f91cfc456787b2072e4fc8a379c5be910e4427df939b295abdfd6af792c0d9a8184625b5"}], @NL80211_ATTR_PBSS={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x404c040) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x791}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000004}, 0x20008000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000840)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000008c0), r2) accept$packet(r2, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000940)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'sit0\x00', 0x0, 0x29, 0x1, 0x8, 0x1, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x700, 0x80, 0x2, 0x7}}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000a40)={@private2, 0x0}, &(0x7f0000000a80)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000ac0)={@rand_addr, 0x0}, &(0x7f0000000b00)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000004cc0)={@multicast1, @dev, 0x0}, &(0x7f0000004d00)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000054c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005480)={&(0x7f0000004d40)={0x718, r4, 0x8, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8000, 0x3f, 0x8, 0x7}, {0x71, 0x2, 0x1, 0x9}, {0x9, 0x6, 0x20, 0x5}, {0x3, 0x1f}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9f9a}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1ff, 0x2, 0x1, 0x8b3a}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1dd8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}]}}]}, 0x718}, 0x1, 0x0, 0x0, 0x10}, 0x1) clock_gettime(0x0, &(0x7f0000009b40)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f00000099c0)=[{{&(0x7f0000005500)=@abs, 0x6e, &(0x7f0000005800)=[{&(0x7f0000005580)=""/228, 0xe4}, {&(0x7f0000005680)=""/82, 0x52}, {&(0x7f0000005700)=""/176, 0xb0}, {&(0x7f00000057c0)=""/23, 0x17}], 0x4}}, {{0x0, 0x0, &(0x7f0000006e80)=[{&(0x7f0000005840)=""/223, 0xdf}, {&(0x7f0000005940)=""/145, 0x91}, {&(0x7f0000005a00)=""/240, 0xf0}, {&(0x7f0000005b00)=""/24, 0x18}, {&(0x7f0000005b40)=""/196, 0xc4}, {&(0x7f0000005c40)=""/173, 0xad}, {&(0x7f0000005d00)=""/189, 0xbd}, {&(0x7f0000005dc0)=""/4096, 0x1000}, {&(0x7f0000006dc0)=""/90, 0x5a}, {&(0x7f0000006e40)=""/42, 0x2a}], 0xa, &(0x7f0000006f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000007000), 0x6e, &(0x7f0000007380)=[{&(0x7f0000007080)=""/32, 0x20}, {&(0x7f00000070c0)=""/58, 0x3a}, {&(0x7f0000007100)=""/36, 0x24}, {&(0x7f0000007140)=""/120, 0x78}, {&(0x7f00000071c0)=""/208, 0xd0}, {&(0x7f00000072c0)=""/164, 0xa4}], 0x6, &(0x7f0000007400)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000007480)=[{&(0x7f0000007440)=""/30, 0x1e}], 0x1, &(0x7f00000074c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000007500), 0x6e, &(0x7f00000086c0)=[{&(0x7f0000007580)=""/4096, 0x1000}, {&(0x7f0000008580)=""/16, 0x10}, {&(0x7f00000085c0)=""/28, 0x1c}, {&(0x7f0000008600)=""/154, 0x9a}], 0x4, &(0x7f0000008700)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f00000087c0), 0x6e, &(0x7f0000009940)=[{&(0x7f0000008840)=""/219, 0xdb}, {&(0x7f0000008940)=""/4096, 0x1000}], 0x2, &(0x7f0000009980)=[@cred={{0x1c}}], 0x20}}], 0x6, 0x2040, &(0x7f0000009b80)={r10, r11+60000000}) sendmsg$GTP_CMD_GETPDP(r12, &(0x7f0000009c80)={&(0x7f0000009bc0)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000009c40)={&(0x7f0000009c00)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000009f00)={&(0x7f0000009cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000009ec0)={&(0x7f0000009e00)={0xa0, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 08:44:02 executing program 2: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x7, 0x2}, 0x9) socketpair(0x1e, 0x80000, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x6, 0x101, 0x8001, 0x4a135791, 0x7, 0x1e7, 0x0, 0x0, 0x3, 0x4, 0xfffffffffffffffe, 0xd66f, 0x8, 0x4}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000180)={{r2, 0x0, 0x8000, 0xffffffffffff7fff, 0x800, 0x0, 0xa4ed, 0x2, 0x0, 0x1ec5, 0x3, 0x8001, 0x81, 0xff, 0x9}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) fchmod(r1, 0x10) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000240)) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') r4 = dup3(r3, r0, 0x80000) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000000300)={{0xb030, 0x3}, 0x100, './file0\x00'}) write$P9_RXATTRWALK(r4, &(0x7f0000000440)={0xf, 0x1f, 0x1, 0x5}, 0xf) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000480)={{0x7, 0x7}, {0x1, 0x1}, 0x2, 0x0, 0x7}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) fcntl$setstatus(r7, 0x4, 0x40000) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb4, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x405}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1f}]}, 0xb4}}, 0x800) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x1, 0x2, 0x79, @dev={0xfe, 0x80, '\x00', 0x38}, @private2, 0x8000, 0x8000, 0x2, 0x4}}) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000007c0)='/%\x00', 0x0, r7) 08:44:02 executing program 1: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x20, 0x60}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x9002}, 0x44) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000140)=0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x300, 0x9, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x800}, {0xc, 0x90, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x80}, {0xc, 0x90, 0x8000}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000007) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f6, 0x800, 0x70bd26, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000848}, 0x40000) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000480)={0x7f, 0x20, '\x00', 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) socketpair(0x5, 0x5, 0x5, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffffffffffffffe1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x1) r2 = syz_open_dev$mouse(&(0x7f0000000640), 0x3f, 0x22000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x20, 0x1f, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @local, 0x7, 0x700, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x80, 0xc, @mcast1, @mcast2, 0x1, 0x20, 0x6, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x1, 0x3, {{0xf, 0x4, 0x2, 0x21, 0x3c, 0x65, 0x0, 0x81, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @end, @timestamp={0x44, 0x24, 0x84, 0x0, 0x1, [0xcf, 0x5, 0x0, 0x9, 0x3, 0x6, 0x2, 0x80000000]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'gre0\x00', 0x0, 0x8, 0x7800, 0x2b6, 0xad, {{0x13, 0x4, 0x0, 0x1, 0x4c, 0x68, 0x8, 0x2, 0x4, 0x0, @broadcast, @private=0xa010100, {[@timestamp={0x44, 0x24, 0x35, 0x0, 0xe, [0x2b, 0x65, 0xbd83, 0x9, 0xffff, 0x5, 0xffffff71, 0x100]}, @rr={0x7, 0x13, 0x24, [@remote, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b40)={'sit0\x00', 0x0, 0x4, 0x9, 0x4, 0x4, 0x44, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x40, 0x8000, 0x26, 0x80}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001100)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000c00)={0x4a8, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x31}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1f88, 0xe1, 0x57, 0x2d}, {0x5, 0x7f, 0x20, 0x259}, {0x2, 0x0, 0xf9, 0x34e}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x840}, 0x40050) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000001140)={0x1, 'veth0_to_batadv\x00', {}, 0x401}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), r0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001340)={&(0x7f0000001200)={0x104, r8, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd06}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4800000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfad0}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb00c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x100408c0}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001480)={'ip_vti0\x00', &(0x7f00000013c0)={'syztnl0\x00', r3, 0x7800, 0x7, 0x2, 0xfffff57e, {{0x1c, 0x4, 0x2, 0x0, 0x70, 0x68, 0x0, 0x2, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x38}, {[@ssrr={0x89, 0xb, 0x29, [@broadcast, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x24, 0x81, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast1, 0x4}]}, @timestamp_prespec={0x44, 0x1c, 0xb0, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x1}, {@multicast1, 0x5}, {@local, 0xc36b}]}, @cipso={0x86, 0xe, 0x0, [{0x1, 0x5, "72a568"}, {0x7, 0x3, 'H'}]}]}}}}}) 08:44:02 executing program 3: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x20000, 0x4) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x9, 0x5acb, 0x80, 0xa91, 0x0, "cf420f9bacaba308fb4b60360371f4f38525ef", 0x6, 0xacb}) faccessat(r1, &(0x7f0000000100)='./file0\x00', 0x1a4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6, 0x5}}, './file2\x00'}) ioctl$KDENABIO(r2, 0x4b36) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000180)={0x8, 0x7, 0xcc52, 0xfffe, 0x4, "7c9677e7c407fd9d"}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000200)={@id={0x2, 0x0, @b}, 0x40, 0x0, '\x00', @b}) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x48000, 0x10) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000300)={0xc1, 0x5, 0x2, 0x8, 0x8001}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000380)={0x7fff, 0x34, 0x81, 0x4, 0x8dffea2}) utimensat(r6, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0x2710}}, 0x100) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000480)=0x2) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000004c0)=0x1) [ 122.582013] audit: type=1400 audit(1750668242.057:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:44:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040)) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c004}, 0x20008840) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000480)={@remote, @private, 0x0}, &(0x7f00000004c0)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x188, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x188}, 0x1, 0x0, 0x0, 0x80c0}, 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x1a000, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x158, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20040001}, 0x800) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r6 = accept$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x0, @loopback}, &(0x7f0000000a00)=0x10) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000a40)={@loopback, @dev}, &(0x7f0000000a80)=0xc) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x8001, 0x0) readv(r7, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/228, 0xe4}, {&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/36, 0x24}], 0x3) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000cc0)=""/224, &(0x7f0000000dc0)=0xe0) r9 = dup2(r5, r1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f0000000e00)={0x0, @aes128, 0x0, @desc2}) 08:44:02 executing program 5: sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) r0 = dup(0xffffffffffffffff) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0xfffff56e, 0x1, 0x200}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x482004, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/84, &(0x7f0000000280)=0x54) write(r0, &(0x7f00000002c0)="e37d29", 0x3) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd3c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004005}, 0x24000044) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000885}, 0x40000001) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x7, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x40850) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000880)='ipvlan1\x00') sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x80) timer_create(0x5, &(0x7f0000000ac0)={0x0, 0x14, 0x0, @thr={&(0x7f00000009c0)="f5f11c8972fba9a9857887c6bf0cf764412cf50bbb1ad97d41f34db97437a081100f5495e81302bd3924a9714e2bf49a7e568dad2048df1f4733f01e4214a0d33b2563431fbf696e6d0a6c587132d821d59d46e7e00dc47c72cef83098d09afadfc31d674e8e435cae396f0a3f4acf22cc2078b57d121a608013c6433f62085baef0ab3b3fdcd4c663ffddb3b0d53663ab3257ccc1d3729eba", &(0x7f0000000a80)="4945a90868c7d773133575"}}, &(0x7f0000000b00)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80080}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0xe}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xff22}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}]}, 0x38}}, 0x801) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x29c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7105accc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x168, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x35d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7fffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @private0, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @remote, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff7cd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) 08:44:02 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x200, 0x70bd2c, 0x5, {{}, {@void, @val={0xc, 0x99, {0x93d, 0x20}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x24068841}, 0x40000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc008000}, 0x20004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4}}}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "830609d3a694cbef8ced92"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x54) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40890) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000600)={0x3, 0x81, 0x1, 0x6, 0x20, 0x5, @lba=0x2, @lba=0x1}) r6 = open(&(0x7f0000000640)='./file0\x00', 0x400400, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x24000000) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000780), &(0x7f00000007c0)=0x8) r7 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x40000) r8 = openat$incfs(r6, &(0x7f0000000900)='.log\x00', 0x200, 0x4) preadv(r8, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/149, 0x95}, {&(0x7f0000000a00)=""/79, 0x4f}, {&(0x7f0000000a80)=""/63, 0x3f}], 0x3, 0x40, 0x9) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000b00)={'batadv_slave_0\x00'}) 08:44:02 executing program 7: recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/235, 0xeb}], 0x2, &(0x7f00000011c0)=""/50, 0x32}}, {{&(0x7f0000001200)=@hci, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001280)=""/21, 0x15}], 0x1, &(0x7f0000001300)=""/118, 0x76}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001380)=""/121, 0x79}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/42, 0x2a}], 0x3, &(0x7f00000014c0)=""/120, 0x78}}], 0x3, 0x1, &(0x7f0000001600)={0x0, 0x3938700}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x36}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4018}, 0x48000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x20, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001ac0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001bc0)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001c40)={0x0, @local, @multicast1}, &(0x7f0000001c80)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001cc0)={'ip6erspan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d00)={0xe0, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40805}, 0x20000000) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001e80), 0x311080, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000010) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000001fc0)=0x2, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002040), r1) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x38, r8, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x240400d0}, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20041002}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x20, r9, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008880}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x78, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x362e0f958f7b199f}, 0x4800) [ 124.023220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.025305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.028633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.031036] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.033597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.034758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.042546] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.044992] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.045486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.053866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.099370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.110059] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.114579] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.121574] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.135562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.160238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.162746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.164450] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.171349] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.177543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.210416] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.231502] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.233416] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.236438] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.242662] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 124.245039] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.250853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.253949] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.255725] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 124.256760] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.260301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.273467] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.276976] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 124.279868] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.281995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.283012] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.295336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.300364] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.317576] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 124.332614] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 126.108768] Bluetooth: hci1: command tx timeout [ 126.109947] Bluetooth: hci0: command tx timeout [ 126.235576] Bluetooth: hci2: command tx timeout [ 126.236753] Bluetooth: hci3: command tx timeout [ 126.362269] Bluetooth: hci6: command tx timeout [ 126.364014] Bluetooth: hci4: command tx timeout [ 126.364077] Bluetooth: hci5: command tx timeout [ 126.427305] Bluetooth: hci7: command tx timeout [ 128.154266] Bluetooth: hci1: command tx timeout [ 128.154409] Bluetooth: hci0: command tx timeout [ 128.284606] Bluetooth: hci2: command tx timeout [ 128.284870] Bluetooth: hci3: command tx timeout [ 128.410779] Bluetooth: hci6: command tx timeout [ 128.410815] Bluetooth: hci5: command tx timeout [ 128.410873] Bluetooth: hci4: command tx timeout [ 128.474222] Bluetooth: hci7: command tx timeout [ 130.202997] Bluetooth: hci1: command tx timeout [ 130.203566] Bluetooth: hci0: command tx timeout [ 130.330359] Bluetooth: hci3: command tx timeout [ 130.331461] Bluetooth: hci2: command tx timeout [ 130.458660] Bluetooth: hci6: command tx timeout [ 130.459468] Bluetooth: hci4: command tx timeout [ 130.459975] Bluetooth: hci5: command tx timeout [ 130.523210] Bluetooth: hci7: command tx timeout [ 132.251384] Bluetooth: hci1: command tx timeout [ 132.251501] Bluetooth: hci0: command tx timeout [ 132.380168] Bluetooth: hci2: command tx timeout [ 132.380189] Bluetooth: hci3: command tx timeout [ 132.506236] Bluetooth: hci5: command tx timeout [ 132.506436] Bluetooth: hci4: command tx timeout [ 132.506771] Bluetooth: hci6: command tx timeout [ 132.570342] Bluetooth: hci7: command tx timeout [ 187.051583] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.054455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.057512] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.063560] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.069253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.181755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.186582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.188821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.193046] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.197859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.254415] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.261299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.267688] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.280776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.285596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.297045] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.301910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.309555] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.311331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.323529] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.333610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.345732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.348439] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.350262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.353617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.355299] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.358496] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.360679] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.389073] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.392456] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.407149] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.408806] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.416578] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.416647] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.437208] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.453698] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.458752] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.468052] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.469582] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.490692] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 189.146919] Bluetooth: hci0: command tx timeout [ 189.275248] Bluetooth: hci1: command tx timeout [ 189.340218] Bluetooth: hci2: command tx timeout [ 189.402487] Bluetooth: hci3: command tx timeout [ 189.467666] Bluetooth: hci4: command tx timeout [ 189.530529] Bluetooth: hci6: command tx timeout [ 189.594229] Bluetooth: hci5: command tx timeout [ 189.658228] Bluetooth: hci7: command tx timeout [ 191.195443] Bluetooth: hci0: command tx timeout [ 191.322424] Bluetooth: hci1: command tx timeout [ 191.387548] Bluetooth: hci2: command tx timeout [ 191.450709] Bluetooth: hci3: command tx timeout [ 191.514214] Bluetooth: hci4: command tx timeout [ 191.578329] Bluetooth: hci6: command tx timeout [ 191.642274] Bluetooth: hci5: command tx timeout [ 191.706589] Bluetooth: hci7: command tx timeout [ 193.242803] Bluetooth: hci0: command tx timeout [ 193.370320] Bluetooth: hci1: command tx timeout [ 193.436533] Bluetooth: hci2: command tx timeout [ 193.499074] Bluetooth: hci3: command tx timeout [ 193.562684] Bluetooth: hci4: command tx timeout [ 193.626240] Bluetooth: hci6: command tx timeout [ 193.690509] Bluetooth: hci5: command tx timeout [ 193.754418] Bluetooth: hci7: command tx timeout [ 195.290561] Bluetooth: hci0: command tx timeout [ 195.418242] Bluetooth: hci1: command tx timeout [ 195.482825] Bluetooth: hci2: command tx timeout [ 195.546246] Bluetooth: hci3: command tx timeout [ 195.610205] Bluetooth: hci4: command tx timeout [ 195.674216] Bluetooth: hci6: command tx timeout [ 195.738209] Bluetooth: hci5: command tx timeout [ 195.802211] Bluetooth: hci7: command tx timeout [ 249.320665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.322649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.324497] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.333297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.336044] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.444503] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.447977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.451293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.457008] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.459584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.493704] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.500755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.502948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.509277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.513261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.648147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.655650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.666710] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.688571] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.709790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.710872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.722901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.738458] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.765561] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.816729] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.819514] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.832091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.849924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.863424] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.872805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.890880] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.910314] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.933059] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.933814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.961401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.970340] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.970365] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.971288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.024295] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 250.061474] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.418662] Bluetooth: hci0: command tx timeout [ 251.546419] Bluetooth: hci1: command tx timeout [ 251.612183] Bluetooth: hci2: command tx timeout [ 251.802326] Bluetooth: hci3: command tx timeout [ 251.866384] Bluetooth: hci4: command tx timeout [ 252.123490] Bluetooth: hci5: command tx timeout [ 252.123522] Bluetooth: hci6: command tx timeout [ 252.250321] Bluetooth: hci7: command tx timeout [ 253.466410] Bluetooth: hci0: command tx timeout [ 253.594266] Bluetooth: hci1: command tx timeout [ 253.658352] Bluetooth: hci2: command tx timeout [ 253.851260] Bluetooth: hci3: command tx timeout [ 253.915207] Bluetooth: hci4: command tx timeout [ 254.170221] Bluetooth: hci6: command tx timeout [ 254.171378] Bluetooth: hci5: command tx timeout [ 254.298252] Bluetooth: hci7: command tx timeout [ 255.515545] Bluetooth: hci0: command tx timeout [ 255.642268] Bluetooth: hci1: command tx timeout [ 255.706288] Bluetooth: hci2: command tx timeout [ 255.900221] Bluetooth: hci3: command tx timeout [ 255.962211] Bluetooth: hci4: command tx timeout [ 256.219201] Bluetooth: hci5: command tx timeout [ 256.219239] Bluetooth: hci6: command tx timeout [ 256.348422] Bluetooth: hci7: command tx timeout [ 257.562466] Bluetooth: hci0: command tx timeout [ 257.690620] Bluetooth: hci1: command tx timeout [ 257.754291] Bluetooth: hci2: command tx timeout [ 257.946332] Bluetooth: hci3: command tx timeout [ 258.010257] Bluetooth: hci4: command tx timeout [ 258.267460] Bluetooth: hci6: command tx timeout [ 258.267789] Bluetooth: hci5: command tx timeout [ 258.396417] Bluetooth: hci7: command tx timeout [ 311.913949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.916088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.922996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.928919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.931534] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.016203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.020672] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.026563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.035012] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.040513] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.108991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.116604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.119196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.128950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.133652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.135848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.143505] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.144945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.156314] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.181026] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.199586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.216970] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.221454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.228324] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.232601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.234038] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.240576] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.242019] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.247870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.258765] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.387397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.431570] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.444304] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.496764] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.499144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.544837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.547135] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.549995] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.562192] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.564164] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 314.010232] Bluetooth: hci0: command tx timeout [ 314.074539] Bluetooth: hci1: command tx timeout [ 314.202259] Bluetooth: hci3: command tx timeout [ 314.202311] Bluetooth: hci2: command tx timeout [ 314.266299] Bluetooth: hci4: command tx timeout [ 314.331251] Bluetooth: hci5: command tx timeout [ 314.586551] Bluetooth: hci7: command tx timeout [ 314.586584] Bluetooth: hci6: command tx timeout [ 316.058197] Bluetooth: hci0: command tx timeout [ 316.123152] Bluetooth: hci1: command tx timeout [ 316.251309] Bluetooth: hci3: command tx timeout [ 316.251373] Bluetooth: hci2: command tx timeout [ 316.315168] Bluetooth: hci4: command tx timeout [ 316.378526] Bluetooth: hci5: command tx timeout [ 316.634353] Bluetooth: hci7: command tx timeout [ 316.636080] Bluetooth: hci6: command tx timeout [ 318.106403] Bluetooth: hci0: command tx timeout [ 318.170219] Bluetooth: hci1: command tx timeout [ 318.298291] Bluetooth: hci2: command tx timeout [ 318.298327] Bluetooth: hci3: command tx timeout [ 318.362436] Bluetooth: hci4: command tx timeout [ 318.426284] Bluetooth: hci5: command tx timeout [ 318.682357] Bluetooth: hci6: command tx timeout [ 318.682900] Bluetooth: hci7: command tx timeout [ 320.154198] Bluetooth: hci0: command tx timeout [ 320.218542] Bluetooth: hci1: command tx timeout [ 320.346586] Bluetooth: hci2: command tx timeout [ 320.346610] Bluetooth: hci3: command tx timeout [ 320.411296] Bluetooth: hci4: command tx timeout [ 320.475591] Bluetooth: hci5: command tx timeout [ 320.730513] Bluetooth: hci7: command tx timeout [ 320.731185] Bluetooth: hci6: command tx timeout [ 374.384050] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.388727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.391376] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.398500] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.402592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.637294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.645068] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.648376] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.654453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.658387] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.716249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.719189] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.721162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.729674] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.732985] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.797046] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.799864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.806594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.817412] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.819564] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.829503] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.833056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.834971] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.855452] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.858456] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.903578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.903766] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.911644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.921010] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.923984] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.924190] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.931664] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.941725] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.002403] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.020902] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.041559] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 375.082055] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.086627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.181035] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.208363] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.475363] Bluetooth: hci0: command tx timeout [ 376.731151] Bluetooth: hci1: command tx timeout [ 376.794350] Bluetooth: hci2: command tx timeout [ 376.858486] Bluetooth: hci3: command tx timeout [ 377.050194] Bluetooth: hci4: command tx timeout [ 377.114446] Bluetooth: hci6: command tx timeout [ 377.114467] Bluetooth: hci5: command tx timeout [ 377.371153] Bluetooth: hci7: command tx timeout [ 378.522606] Bluetooth: hci0: command tx timeout [ 378.778167] Bluetooth: hci1: command tx timeout [ 378.843449] Bluetooth: hci2: command tx timeout [ 378.907162] Bluetooth: hci3: command tx timeout [ 379.098770] Bluetooth: hci4: command tx timeout [ 379.162199] Bluetooth: hci6: command tx timeout [ 379.163640] Bluetooth: hci5: command tx timeout [ 379.418420] Bluetooth: hci7: command tx timeout [ 380.570184] Bluetooth: hci0: command tx timeout [ 380.826211] Bluetooth: hci1: command tx timeout [ 380.890410] Bluetooth: hci2: command tx timeout [ 380.954546] Bluetooth: hci3: command tx timeout [ 381.146161] Bluetooth: hci4: command tx timeout [ 381.210364] Bluetooth: hci5: command tx timeout [ 381.210403] Bluetooth: hci6: command tx timeout [ 381.467123] Bluetooth: hci7: command tx timeout [ 382.618498] Bluetooth: hci0: command tx timeout [ 382.874563] Bluetooth: hci1: command tx timeout [ 382.938264] Bluetooth: hci2: command tx timeout [ 383.002218] Bluetooth: hci3: command tx timeout [ 383.194232] Bluetooth: hci4: command tx timeout [ 383.258298] Bluetooth: hci6: command tx timeout [ 383.258867] Bluetooth: hci5: command tx timeout [ 383.515149] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 08:49:07 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff8880371eb700 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c1cb80 RDI=ffff8880371ec180 RBP=ffffffff85c5ace0 RSP=ffff88802cfcfe38 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=00007fcdc496e000 R14=0000000000000001 R15=ffff8880371ec180 RIP=ffffffff84b2895e RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcdc449c540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcdc496e000 CR3=000000000e717000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff819f29f8 RDX=0000000000009f29 RSI=0000000000009f29 RDI=ffffffff86c89784 RBP=ffff888033f6f748 RSP=ffff888033f6f680 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=0000000000000001 R12=ffff888033f6f750 R13=ffff888033f6f738 R14=ffff888033f6f731 R15=ffff888033f6f6f0 RIP=ffffffff81353e52 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f942ca3c540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f65eb826028 CR3=00000000265cf000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000