Warning: Permanently added '[localhost]:60167' (ECDSA) to the list of known hosts. 2025/06/25 08:07:21 fuzzer started 2025/06/25 08:07:21 dialing manager at localhost:42423 syzkaller login: [ 101.406885] cgroup: Unknown subsys name 'net' [ 101.480479] cgroup: Unknown subsys name 'cpuset' [ 101.526940] cgroup: Unknown subsys name 'rlimit' 2025/06/25 08:07:45 syscalls: 217 2025/06/25 08:07:45 code coverage: enabled 2025/06/25 08:07:45 comparison tracing: enabled 2025/06/25 08:07:45 extra coverage: enabled 2025/06/25 08:07:45 setuid sandbox: enabled 2025/06/25 08:07:45 namespace sandbox: enabled 2025/06/25 08:07:45 Android sandbox: enabled 2025/06/25 08:07:45 fault injection: enabled 2025/06/25 08:07:45 leak checking: enabled 2025/06/25 08:07:45 net packet injection: enabled 2025/06/25 08:07:45 net device setup: enabled 2025/06/25 08:07:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/25 08:07:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/25 08:07:45 USB emulation: enabled 2025/06/25 08:07:45 hci packet injection: enabled 2025/06/25 08:07:45 wifi device emulation: enabled 2025/06/25 08:07:45 802.15.4 emulation: enabled 2025/06/25 08:07:45 fetching corpus: 0, signal 0/0 (executing program) 2025/06/25 08:07:46 starting 8 fuzzer processes 08:07:46 executing program 0: sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004081}, 0x94) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x2, 0x101, 0x4, @private1, @mcast2, 0x1, 0x8000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x80, 0x49, 0x1000, 0x27, @mcast2, @mcast1, 0x8000, 0x0, 0x1, 0x4}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1c0, r0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x2b, 0x8, 0x81, 0xb6, 0x20, @private0, @rand_addr=' \x01\x00', 0x80, 0x20, 0x9, 0xfffffffc}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r2, 0x4, 0x9, 0x3, 0x7, 0x22, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x700, 0x8000, 0x10000, 0x905}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r2, 0x29, 0x9, 0x1c, 0x1, 0x43, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x40, 0x20, 0x80000000, 0xa76}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'syztnl0\x00', r4, 0x2f, 0x1f, 0x8, 0x1, 0x11, @dev={0xfe, 0x80, '\x00', 0xb}, @dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x20, 0x5, 0x3}}) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'ip6tnl0\x00', r3, 0x4, 0x1f, 0x0, 0x1, 0x2, @loopback, @mcast1, 0x7800, 0x700, 0x2, 0x47}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'syztnl0\x00', r7, 0x4, 0x40, 0x20, 0x5, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x1, 0x6, 0x2}}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/bus/hid', 0x80040, 0x1c1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r8, 0x89f7, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'syztnl2\x00', r2, 0x4, 0x3, 0x1, 0x3, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x80, 0x2, 0x20}}) r9 = socket(0xf, 0x4, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xc4, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7a}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x90, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001000}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc06}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x890}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@mcast1, @in6=@ipv4}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000dc0)=0xe8) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x40, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x700000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000f00), &(0x7f0000000f40)=0x14) 08:07:46 executing program 1: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5a2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_BSS_SELECT={0x18, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0x7f}}]}]}, 0x80}}, 0x40010) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x31}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x41}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="053d7bf1bfdc"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40080) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000811}, 0x48011) r0 = syz_open_dev$vcsn(&(0x7f0000000480), 0x9, 0x501000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x20000001) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) pipe2(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x80, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1f}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x11) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7d}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3a}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x50, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x20008840) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x38, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000847}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4002000) 08:07:46 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x60, &(0x7f0000000080)={[{0x4a, 0x4e00, "91bab1f853d5cbd2e738347ec34f53f9237f87c1da39d477811d41a5ad138acefc6c76782a78ac1bc28a150599b982d3e3beb6ef8484493ea1babf0485e9208ea4eed74e83e1e9a683d3"}, {0xb, 0x4e00, "16dd67af77ff7e55de1c72"}]}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xae, &(0x7f0000000100)=@generic={0x0, 0x0, 0xa6, "8ecb1894", "f8bba929c8f364687058f5eda967cb49fc657fab4ee3f99856ed0b300cf9b85c1c9d1c52d56bf6e897393ab5ca9c6621cda33b75ef855969d8675e9d49469e36442f1a92436d220e28b5a360fa5694ea9e53be29732ee2732f4ad75e783be99fd1ba3659e3eb9655f83c1f03125db2afd96d14176ee1a579d1cc4b3081d4c99a1ec6f4ca9638f4cf970047bc48ad5b230fca4184084fdb76ce1967cede4dbc2b3d6669355838"}) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="7eb84c62f7e40ef5e48aa00ec984688f", 0x10) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000240)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000280)) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xec, &(0x7f00000002c0)=@generic={0x5, 0x0, 0xe4, "23e5b874", "eaa3fcd71f77c9c0fbd257b64f676d4ac8d9d0d5d53f337db9b7570ba37eb9d7df42805b032d591dac8dad8a7c6da336ee45abeb3858931961c4b8a8e9f755d392332742c603f80052df681e1b31712c136eef43870d5f82e4ffef3aa5dfc4ecb983c5d2072c4501165223655851dff8cc8fef01ab77fa68d220a6ff6c8324fcec9d799bbd41b90824e4ce538af2804d1f6781b5b48677f2386d51b5df332c0ca9844879b76a9653478f8bbb64ba48ff400296ba55f75ded3ebb418df9b3c76823c38ab4accddd8df9d32330d95756f03821b3a6e3394065a30a18815464799ed5aa1363"}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000003c0)) r1 = socket(0x0, 0x800, 0x5) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x63}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x1150, &(0x7f0000000600)={[{0x8c, 0x4e00, "478b927a6a0127963b976e9ae82de8b77c5eb30a7d13c5edabe97541b6b841ecef3f101f30f0350af36fa2f644e50c9874e52aa54eb08a37879fc6d583a2298ea3359205695118588e5ddf8ee875791c73229daeac14bb2ac4a9dceaac2aa6ec3925131ec90f43134b82707c7cc8ea434a69799a71e85aa0efb957c48cee20d68476af78ae86c3da1626178c"}, {0x4c, 0x4e00, "374d49a5d667bc68793265cbc876697c723576cad65e0decfe150188ac8eca7a52179177fa69d5be5a91ae5775a3510ac0c4fc2ea75c77bad182a58d1410be353e2da4071de08a49a3230ff1"}, {0x1b, 0x4e00, "6eada1b84cf58de01d529b21fdd7d49c2845dfd2d199b0164ea669"}, {0x45, 0x4e00, "19aae3ea1308ff1e1ebbdc0270dfcaa8e617f6526eb0145f683191e7ee262482d81109582ae7f0dc612d07947094130c136a2bf53c3033245d91c6ff631d42b378b81baeaf"}, {0x1000, 0x4e00, "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"}]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000017c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000018c0)={&(0x7f0000001780), 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x64, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xca}, @NL80211_ATTR_AUTH_TYPE={0x8}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x20002000) pipe2(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001980), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000001c00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001bc0)={&(0x7f00000019c0)={0x1c8, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4044000}, 0x20040840) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000001c40)) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000001c80)=0x1) [ 126.143228] audit: type=1400 audit(1750838866.766:7): avc: denied { execmem } for pid=279 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:07:46 executing program 3: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x80) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1a8, r0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0c, 0xfac0c, 0xfac08, 0xfac02]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x11}, @NL80211_ATTR_PMK={0x102, 0xfe, "eb922b7abbf9f01a33e5a794ccdc1836b580bdc4cfb4177a444a41eb07ba90a8494e75a8031b379dd6ae6e8da78461bed401eb47fd8b73170a6b2e2791793a5207a2ea59491e5f8c72dd01fa8ed1d685d225e09146cce591fd6aeacc37cc7c4175617d5eb7d8e468eaf24e27a7997a2cc735872ac176a8d157d42e089609b184018cd919406d8514bd877ffbfa8cc2f42ac8a5446bb1e88fb1cfc730b91773693564cdda3f4e5fe927ab41c618449efd0748c148865cc40e2319b6f2e0a009b83e75afb23b03dbeabe4339174a12c710527cfc2cb61e49981497882622f319df3ab3e631edea4d92158a7e60f7e60c5ffa28e9d7d85bb06e5f180b537cf3"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]]}, 0x1a8}}, 0x20000841) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c844) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7, 0x8}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x29, 0xac, 0x7, 0x3, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x1, 0x1, 0x8001}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xc8, r5, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x70, r1, 0x724, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x28}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8001}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x116}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf741}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r4, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r4) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x120, r9, 0x312, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1a}}}}, [@NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x1f, 0x6}, {0x4, 0x5}, {0x8, 0x1}, {0x1, 0x5}, {0x1, 0x5}, {0x81, 0x3}, {}, {0x6}, {}], "06176318f16227e3"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x8, 0x4}, {0x7, 0x7}, {0x3f, 0x4}, {0x40, 0x4}, {0xcc}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0x3}, {0x9, 0x1}, {0x5}, {0x0, 0x5}, {0xff, 0x3}, {0x5, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x5, 0x1}, {0x81, 0x7}, {0x2, 0x7}, {0x3}], "43cf308abfbc32fa"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x80, 0x6}, {0x2, 0x2}, {0xd5, 0x1}, {0x1, 0x1}, {0x9}, {0x81, 0x6}, {0xe7, 0x1}, {0x3f, 0x2}, {0x7, 0x6}, {0x69}, {0x5, 0x1}, {0x3, 0x7}, {0x1, 0x5}, {0x80, 0x2}, {0xd8, 0x7}, {0x3, 0xfc}, {0x2, 0x7}, {0x1f, 0x1}, {0x5, 0x6}], "d52e6d84a0a60949"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x6}, {0x20, 0x1}, {0x2, 0x7}, {0xff, 0x5}, {0x7, 0x5}, {0x2, 0x6}, {0x7}, {0x9, 0x6}, {0x1f, 0x6}], "fa40a0c7b3963433"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7f, 0x5}, {0xfd, 0x5}, {0x7, 0x5}, {0x7, 0x5}, {0xe0, 0x7}, {0x1, 0x4}, {0xfd}, {0x6, 0x6}, {0x8, 0x1}, {0x2, 0x6}, {0x8, 0x4}, {0xf5, 0x5}, {0x6, 0x7}, {0x81, 0x1}, {0x0, 0x1}, {0x2, 0x4}], "f9e972ae99865329"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7}, {0x8, 0x1}, {0xae, 0x7}, {0xff, 0x4}, {0x0, 0x2}, {0x5}, {0xf8}, {0x5, 0x3}, {0xc6, 0x2}, {0x8, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x81, 0x4}, {0x1, 0x2}, {0x0, 0x2}, {0x0, 0x1}], "1f391758aa10ac8b"}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0xc080) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x8000) 08:07:46 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r0, 0x2f, 0xeb, 0x4, 0x81, 0x20, @private1, @private1, 0x40, 0x40, 0x3, 0x8}}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d5}, 0x8011) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000002c0)=0x7, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', r0, 0x4, 0xcf, 0x6f, 0x3, 0x40, @mcast2, @rand_addr=' \x01\x00', 0x0, 0x700, 0x80, 0x7}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/sunrpc', 0x82000, 0x1) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000440)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000004c0)={0x0, @xdp={0x2c, 0x8, r1, 0x5}, @llc={0x1a, 0x8, 0xcb, 0x1, 0x0, 0x9, @multicast}, @nl=@kern={0x10, 0x0, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000480)='gretap0\x00', 0x7fffffff, 0x0, 0x7fff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r5, 0x4, 0xfc, 0x7, 0x2, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x4b, 0x3}}) r6 = socket(0x9, 0x800, 0x40) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={0x0, @can={0x1d, r2}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, @generic={0x1, "2b3a88179386b89e4578a0171e5b"}, 0xf221, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)='bridge_slave_0\x00', 0x100000000, 0x4, 0x800}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r7, 0x29, 0x5, 0x6, 0x7, 0x42, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, 0x80, 0x40, 0x800, 0x1000}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}}, 0x2400c000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl0\x00', r8, 0x2f, 0x0, 0x2, 0xfff, 0x45, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x10, 0x700, 0x2, 0xffffffff}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000b40)={@dev={0xfe, 0x80, '\x00', 0xe}, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8001, 0x40, 0x8, 0x0, 0x0, 0xc0011}) 08:07:46 executing program 5: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2c000000}, 0xc090) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={0x0, 0x15, 0xa}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'cbcmac(des3_ede)\x00'}}, &(0x7f0000000200)="96bf144b6bbac75a75db43d2d1bc57a862c2b27e6d", &(0x7f0000000240)=""/10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r0, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, 0x0, 0x10c, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004}, 0x44801) r4 = syz_open_dev$vcsn(&(0x7f0000000800), 0xfffffffffffffffd, 0x20180) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000080}, 0x820) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x11c, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2c}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40805}, 0x4044000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r1) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xe4, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xeaddd70b8cf96b1e}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x200400c1) pipe2(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x134, r0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x10e, 0x2a, [@perr={0x84, 0x108, {0x1, 0x10, [@not_ext={{}, @device_b, 0x1, "", 0x22}, @ext={{}, @device_a, 0x8, @device_b, 0x6}, @not_ext={{}, @device_a, 0x0, "", 0x22}, @ext={{}, @device_a, 0x1f, @broadcast, 0x35}, @ext={{}, @broadcast, 0x341e, @device_a, 0x2}, @ext={{}, @device_a, 0xfffff801, @broadcast, 0xc}, @not_ext={{}, @device_a, 0x4, "", 0x3e}, @not_ext={{}, @broadcast, 0x2, "", 0x33}, @ext={{}, @broadcast, 0x7ff, @broadcast, 0x35}, @not_ext={{}, @device_b, 0x8000, "", 0x37}, @ext={{}, @broadcast, 0x4, @device_b, 0x10}, @ext={{}, @device_b, 0x1, @device_b, 0x38}, @not_ext={{}, @device_b, 0xffffffff, "", 0x17}, @not_ext={{}, @broadcast, 0x0, "", 0x8}, @ext={{}, @device_b, 0x100, @device_a, 0x35}, @ext={{}, @device_b, 0x101, @broadcast, 0x18}]}}]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000f80)=0xffffffffffffffff, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r8, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 08:07:46 executing program 7: sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x44015}, 0x20008814) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1b12200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xafa}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x14) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/ata_piix', 0x80000, 0xc) getsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000680), &(0x7f00000006c0)=0x10) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r2) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x890) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000a00)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/46, 0x2e, 0x0, &(0x7f0000000900)=""/226, 0xe2}, &(0x7f0000000a40)=0x40) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r3) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r6, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x14dff12d}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000001cc0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/4096, 0x1000, 0x1, &(0x7f0000001c00)=""/131, 0x83}, &(0x7f0000001d00)=0x40) getgid() 08:07:46 executing program 6: ioprio_get$uid(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x21df, &(0x7f0000000000)={0x0, 0x94f, 0x4, 0x3, 0x22b}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x1}, 0x3f) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x100010, r0, 0x0) r4 = syz_io_uring_setup(0x4b4, &(0x7f0000000180)={0x0, 0x2aae, 0x20, 0x2, 0xe4, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14, 0x1}, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bond_slave_1\x00'}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000400)=0x4, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x0, 0x40, 0x26, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x0, 0x3, 0x7}}) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x4004, @fd_index, 0xfffffffffffffffd, 0x0, 0x0, 0x16, 0x0, {0x1}}, 0x9) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000540)={@remote, @local, 0x0}, &(0x7f0000000580)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', r8, 0x29, 0x24, 0x9, 0x20, 0x2, @private2, @empty, 0x10, 0x20, 0xa341, 0x4}}) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000680), 0x4) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/mem_sleep', 0x500040, 0x101) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd39}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x2400c014) sendmsg$NL80211_CMD_GET_INTERFACE(r9, &(0x7f0000000880)={0xffffffffffffffff, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000041) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x11, r9, 0x10000000) syz_io_uring_submit(r5, r10, &(0x7f0000000900)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r4], 0x1, 0x0, 0x1}, 0x4) [ 127.588605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.591826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.594256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.603196] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.605306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.649243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.655766] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.658123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.665247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.669562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.671256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.713157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.715318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.723373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.737393] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.738689] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.744398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.748341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.750196] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.751356] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.753649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.763957] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.766330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.771173] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.772589] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.829273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.846062] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.848036] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.849326] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.851722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.852219] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.854278] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.858805] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.861520] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 127.866160] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.877416] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.882675] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.887480] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.901515] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.909342] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.678008] Bluetooth: hci0: command tx timeout [ 129.740049] Bluetooth: hci1: command tx timeout [ 129.805142] Bluetooth: hci4: command tx timeout [ 129.806021] Bluetooth: hci2: command tx timeout [ 129.868379] Bluetooth: hci3: command tx timeout [ 129.934368] Bluetooth: hci7: command tx timeout [ 129.997335] Bluetooth: hci6: command tx timeout [ 129.998259] Bluetooth: hci5: command tx timeout [ 131.724740] Bluetooth: hci0: command tx timeout [ 131.789344] Bluetooth: hci1: command tx timeout [ 131.853464] Bluetooth: hci4: command tx timeout [ 131.854374] Bluetooth: hci2: command tx timeout [ 131.917328] Bluetooth: hci3: command tx timeout [ 131.981086] Bluetooth: hci7: command tx timeout [ 132.045100] Bluetooth: hci6: command tx timeout [ 132.045699] Bluetooth: hci5: command tx timeout [ 133.773008] Bluetooth: hci0: command tx timeout [ 133.836302] Bluetooth: hci1: command tx timeout [ 133.900538] Bluetooth: hci4: command tx timeout [ 133.901836] Bluetooth: hci2: command tx timeout [ 133.965070] Bluetooth: hci3: command tx timeout [ 134.028117] Bluetooth: hci7: command tx timeout [ 134.092329] Bluetooth: hci6: command tx timeout [ 134.092970] Bluetooth: hci5: command tx timeout [ 135.820201] Bluetooth: hci0: command tx timeout [ 135.884188] Bluetooth: hci1: command tx timeout [ 135.949358] Bluetooth: hci2: command tx timeout [ 135.950191] Bluetooth: hci4: command tx timeout [ 136.013149] Bluetooth: hci3: command tx timeout [ 136.076066] Bluetooth: hci7: command tx timeout [ 136.141075] Bluetooth: hci6: command tx timeout [ 136.141651] Bluetooth: hci5: command tx timeout [ 190.488201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.492129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.494431] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.498723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.500739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.625481] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.631676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.634234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.636238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.640477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.642225] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.644300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.655158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.667072] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.672357] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.715344] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.718632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.721321] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.729173] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.729234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.753262] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.762996] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.771092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.772390] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.776991] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.781780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.794133] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.795622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.820825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.841349] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.856165] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.865771] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 190.872362] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 190.873793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.878858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.904306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.907315] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.909839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.936666] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 190.940368] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 192.525255] Bluetooth: hci0: command tx timeout [ 192.716170] Bluetooth: hci1: command tx timeout [ 192.717116] Bluetooth: hci2: command tx timeout [ 192.844274] Bluetooth: hci4: command tx timeout [ 192.909099] Bluetooth: hci3: command tx timeout [ 192.972465] Bluetooth: hci5: command tx timeout [ 193.037596] Bluetooth: hci7: command tx timeout [ 193.037753] Bluetooth: hci6: command tx timeout [ 194.572185] Bluetooth: hci0: command tx timeout [ 194.764049] Bluetooth: hci2: command tx timeout [ 194.765549] Bluetooth: hci1: command tx timeout [ 194.892279] Bluetooth: hci4: command tx timeout [ 194.958093] Bluetooth: hci3: command tx timeout [ 195.020265] Bluetooth: hci5: command tx timeout [ 195.085103] Bluetooth: hci7: command tx timeout [ 195.085732] Bluetooth: hci6: command tx timeout [ 196.621448] Bluetooth: hci0: command tx timeout [ 196.813435] Bluetooth: hci1: command tx timeout [ 196.813463] Bluetooth: hci2: command tx timeout [ 196.941036] Bluetooth: hci4: command tx timeout [ 197.004259] Bluetooth: hci3: command tx timeout [ 197.068999] Bluetooth: hci5: command tx timeout [ 197.132191] Bluetooth: hci6: command tx timeout [ 197.132514] Bluetooth: hci7: command tx timeout [ 198.668003] Bluetooth: hci0: command tx timeout [ 198.860471] Bluetooth: hci1: command tx timeout [ 198.861369] Bluetooth: hci2: command tx timeout [ 198.988050] Bluetooth: hci4: command tx timeout [ 199.053015] Bluetooth: hci3: command tx timeout [ 199.117624] Bluetooth: hci5: command tx timeout [ 199.179995] Bluetooth: hci7: command tx timeout [ 199.181035] Bluetooth: hci6: command tx timeout [ 253.079017] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.081463] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.083543] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.090190] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.093227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.160479] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.164478] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.166645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.173322] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.176129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.240528] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.244499] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.256467] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.266809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.276390] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.345223] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.359759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.362341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.367245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.371357] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.470818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.476532] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.480379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.492254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.502326] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.568391] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.577881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.595451] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.596765] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.602596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.604277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.623661] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.625878] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.629439] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.630910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.641296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.679706] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 253.693049] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.744357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.802604] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.117309] Bluetooth: hci0: command tx timeout [ 255.245263] Bluetooth: hci1: command tx timeout [ 255.308355] Bluetooth: hci2: command tx timeout [ 255.436609] Bluetooth: hci3: command tx timeout [ 255.564999] Bluetooth: hci4: command tx timeout [ 255.756022] Bluetooth: hci6: command tx timeout [ 255.822128] Bluetooth: hci5: command tx timeout [ 255.950487] Bluetooth: hci7: command tx timeout [ 257.164485] Bluetooth: hci0: command tx timeout [ 257.292236] Bluetooth: hci1: command tx timeout [ 257.357343] Bluetooth: hci2: command tx timeout [ 257.485309] Bluetooth: hci3: command tx timeout [ 257.612050] Bluetooth: hci4: command tx timeout [ 257.805458] Bluetooth: hci6: command tx timeout [ 257.867996] Bluetooth: hci5: command tx timeout [ 257.996982] Bluetooth: hci7: command tx timeout [ 259.213262] Bluetooth: hci0: command tx timeout [ 259.340132] Bluetooth: hci1: command tx timeout [ 259.405190] Bluetooth: hci2: command tx timeout [ 259.533000] Bluetooth: hci3: command tx timeout [ 259.660411] Bluetooth: hci4: command tx timeout [ 259.853037] Bluetooth: hci6: command tx timeout [ 259.917417] Bluetooth: hci5: command tx timeout [ 260.044986] Bluetooth: hci7: command tx timeout [ 261.259999] Bluetooth: hci0: command tx timeout [ 261.390534] Bluetooth: hci1: command tx timeout [ 261.453399] Bluetooth: hci2: command tx timeout [ 261.580233] Bluetooth: hci3: command tx timeout [ 261.709071] Bluetooth: hci4: command tx timeout [ 261.901026] Bluetooth: hci6: command tx timeout [ 261.965161] Bluetooth: hci5: command tx timeout [ 262.092074] Bluetooth: hci7: command tx timeout [ 315.864646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.871263] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.874827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.881513] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.884334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.998212] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.004325] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.009749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.015213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.018672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.064199] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.066109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.068352] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.075408] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.080447] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.081613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.085007] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.095263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.098790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.101461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.142164] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.183315] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.190407] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.202498] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.249315] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.429861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.444429] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.484421] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.504043] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.520342] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.715132] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.733184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.742144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.768396] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.794452] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.144173] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.217332] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.223430] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.228664] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.233141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 317.900065] Bluetooth: hci0: command tx timeout [ 318.092029] Bluetooth: hci1: command tx timeout [ 318.156269] Bluetooth: hci2: command tx timeout [ 318.220129] Bluetooth: hci3: command tx timeout [ 318.285010] Bluetooth: hci4: command tx timeout [ 318.668422] Bluetooth: hci7: command tx timeout [ 318.924003] Bluetooth: hci5: command tx timeout [ 319.308048] Bluetooth: hci6: command tx timeout [ 319.949684] Bluetooth: hci0: command tx timeout [ 320.140256] Bluetooth: hci1: command tx timeout [ 320.204823] Bluetooth: hci2: command tx timeout [ 320.268377] Bluetooth: hci3: command tx timeout [ 320.332057] Bluetooth: hci4: command tx timeout [ 320.716184] Bluetooth: hci7: command tx timeout [ 320.972145] Bluetooth: hci5: command tx timeout [ 321.356468] Bluetooth: hci6: command tx timeout [ 321.996041] Bluetooth: hci0: command tx timeout [ 322.189161] Bluetooth: hci1: command tx timeout [ 322.253347] Bluetooth: hci2: command tx timeout [ 322.316087] Bluetooth: hci3: command tx timeout [ 322.381373] Bluetooth: hci4: command tx timeout [ 322.764552] Bluetooth: hci7: command tx timeout [ 323.020025] Bluetooth: hci5: command tx timeout [ 323.403994] Bluetooth: hci6: command tx timeout [ 324.044045] Bluetooth: hci0: command tx timeout [ 324.237285] Bluetooth: hci1: command tx timeout [ 324.301295] Bluetooth: hci2: command tx timeout [ 324.364097] Bluetooth: hci3: command tx timeout [ 324.428149] Bluetooth: hci4: command tx timeout [ 324.812315] Bluetooth: hci7: command tx timeout [ 325.069975] Bluetooth: hci5: command tx timeout [ 325.453962] Bluetooth: hci6: command tx timeout [ 378.282401] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.285542] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.291978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.309577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.318395] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.401691] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.405205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.409053] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.415386] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.419532] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.473338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.484001] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.498359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.513135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.523586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.613829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.627240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.639153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.669635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.711404] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.716190] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.720521] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.746379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.750851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.756451] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.760587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.764279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.795976] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.801600] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 378.805747] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.817522] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 378.830647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.845505] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.852737] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.856663] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.863359] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.875344] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 378.906423] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.927166] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 378.961378] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 380.367009] Bluetooth: hci0: command tx timeout [ 380.493469] Bluetooth: hci1: command tx timeout [ 380.557014] Bluetooth: hci2: command tx timeout [ 380.812992] Bluetooth: hci3: command tx timeout [ 380.876992] Bluetooth: hci4: command tx timeout [ 380.940984] Bluetooth: hci5: command tx timeout [ 381.004674] Bluetooth: hci6: command tx timeout [ 381.070305] Bluetooth: hci7: command tx timeout [ 382.412122] Bluetooth: hci0: command tx timeout [ 382.540281] Bluetooth: hci1: command tx timeout [ 382.604136] Bluetooth: hci2: command tx timeout [ 382.860123] Bluetooth: hci3: command tx timeout [ 382.924740] Bluetooth: hci4: command tx timeout [ 382.988280] Bluetooth: hci5: command tx timeout [ 383.053009] Bluetooth: hci6: command tx timeout [ 383.116062] Bluetooth: hci7: command tx timeout [ 384.459975] Bluetooth: hci0: command tx timeout [ 384.587977] Bluetooth: hci1: command tx timeout [ 384.651950] Bluetooth: hci2: command tx timeout [ 384.908306] Bluetooth: hci3: command tx timeout [ 384.971970] Bluetooth: hci4: command tx timeout [ 385.035968] Bluetooth: hci5: command tx timeout [ 385.100942] Bluetooth: hci6: command tx timeout [ 385.164402] Bluetooth: hci7: command tx timeout [ 386.508952] Bluetooth: hci0: command tx timeout [ 386.635970] Bluetooth: hci1: command tx timeout [ 386.699955] Bluetooth: hci2: command tx timeout [ 386.956114] Bluetooth: hci3: command tx timeout [ 387.020017] Bluetooth: hci4: command tx timeout [ 387.083959] Bluetooth: hci5: command tx timeout [ 387.148439] Bluetooth: hci6: command tx timeout [ 387.212956] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 08:12:50 Registers: info registers vcpu 0 RAX=00007fc8642a218c RBX=00007fc864324430 RCX=000000000000000e RDX=00007fc8642a9f40 RSI=00007fc8642a34d8 RDI=00007fc8642a0800 RBP=00007ffc39f73bf0 RSP=00007ffc39f73b80 R8 =00007fc86477da20 R9 =00007fc8642a0fcc R10=00007fc864397ae0 R11=0000000000000000 R12=00007ffc39f73be0 R13=00007fc8647b6060 R14=00000000000fbae0 R15=00007fc8642a0ffc RIP=00007fc8643d33a4 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc864273540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc8643d3270 CR3=000000000e7da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffff11001393535 RBX=ffff88800ecb8e48 RCX=ffff888035802500 RDX=1ffff110018fdf35 RSI=ffffffff88313770 RDI=ffff88800e903510 RBP=ffff88800e903508 RSP=ffff888029a5f420 R8 =0000000000000000 R9 =ffff88800c7ef9a8 R10=0000000000000003 R11=0000000000000001 R12=ffff88800c7ef9a8 R13=dffffc0000000000 R14=ffff888009c9a9a8 R15=0000000000000282 RIP=ffffffff84ae57b4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa671b0e1f0 CR3=000000001c275000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000