Warning: Permanently added '[localhost]:4845' (ECDSA) to the list of known hosts.
2025/01/25 10:13:00 fuzzer started
2025/01/25 10:13:00 dialing manager at localhost:40883
syzkaller login: [   74.022920] cgroup: Unknown subsys name 'net'
[   74.127511] cgroup: Unknown subsys name 'cpuset'
[   74.169643] cgroup: Unknown subsys name 'rlimit'
[   80.443247] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/25 10:13:18 syscalls: 2217
2025/01/25 10:13:18 code coverage: enabled
2025/01/25 10:13:18 comparison tracing: enabled
2025/01/25 10:13:18 extra coverage: enabled
2025/01/25 10:13:18 setuid sandbox: enabled
2025/01/25 10:13:18 namespace sandbox: enabled
2025/01/25 10:13:18 Android sandbox: enabled
2025/01/25 10:13:18 fault injection: enabled
2025/01/25 10:13:18 leak checking: enabled
2025/01/25 10:13:18 net packet injection: enabled
2025/01/25 10:13:18 net device setup: enabled
2025/01/25 10:13:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/25 10:13:18 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/25 10:13:18 USB emulation: enabled
2025/01/25 10:13:18 hci packet injection: enabled
2025/01/25 10:13:18 wifi device emulation: enabled
2025/01/25 10:13:18 802.15.4 emulation: enabled
2025/01/25 10:13:18 fetching corpus: 0, signal 0/2000 (executing program)
2025/01/25 10:13:18 fetching corpus: 0, signal 0/4000 (executing program)
2025/01/25 10:13:18 fetching corpus: 0, signal 0/6000 (executing program)
2025/01/25 10:13:18 fetching corpus: 0, signal 0/8000 (executing program)
2025/01/25 10:13:19 fetching corpus: 0, signal 0/10000 (executing program)
2025/01/25 10:13:19 fetching corpus: 0, signal 0/12000 (executing program)
2025/01/25 10:13:19 fetching corpus: 0, signal 0/14000 (executing program)
2025/01/25 10:13:19 fetching corpus: 0, signal 0/14245 (executing program)
2025/01/25 10:13:19 fetching corpus: 0, signal 0/14245 (executing program)
2025/01/25 10:13:21 starting 8 fuzzer processes
10:13:21 executing program 0:
setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "6bd299f2b36072ad", "80519b54f0be5e1678499df6bacc34c6", "cf5f8fa5", "c1a11247b692679d"}, 0x28)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000080)={0x1, 0xffffffffffffad43, 0x2})
r2 = accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c, 0x80000)
listen(r2, 0x5)
r3 = signalfd4(r2, &(0x7f0000000140)={[0x7]}, 0x8, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000200)={0x1f, 0x50, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r2, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
sendmsg$inet6(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="47007a4f90a24ba422d2a29cc2c31e355793e57fa9f74fbdaa3b4a58eb6ef0c576c555ab379a20f4ec5434d8edb93c9417f4a869f56d8480a44b1dcb66b3292d81ecbc54b8fa6379eee3eeceed5f7fc0769105ad697e177eec599b7e97ca6030997e373110eec4570da02e71243468a2a899c26aa0db9046e62ce5d22c062472a0c1e2c601c21043868d624572a8adf2f5b3b38a3521ea9f411e7aa97e6bf1ea9e6bc858382a5c4aa96c432a855f4a3b82c825fff4d83e961e8ddbeb1f97", 0xbe}, {&(0x7f0000000340)="39710923148605b507b2483ebcdda7d5ebf42ff05d03185ab03c9f7853a8cc6dcf2fd2ce3dcc32256b5fe400fa7430d91ea46767d2ced1614d37bb988d278fed7995363a74d80d93878498cee7cdb2b91f5776a28ec6bcb1f03129d2b14870ca230fa2d182717c0eb0af8d7feedccd286e7a2ba94a1c0c847ef775ddd730e2719e20829dbf0f336d97c3570b68", 0x8d}], 0x2, &(0x7f0000000440)=[@dstopts={{0x50, 0x29, 0x37, {0x6c, 0x6, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x7f, 0xbc8, [0x1f, 0x7, 0xe365]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x9}]}}}], 0x50}, 0x20004001)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x8)
getsockopt$sock_buf(r2, 0x1, 0xb9fe3b4b0cd3162a, &(0x7f0000000500)=""/184, &(0x7f00000005c0)=0xb8)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'erspan0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x7, 0x700, 0x9, 0x2, {{0xa, 0x4, 0x0, 0x14, 0x28, 0x67, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0x3, 0xe4}, @cipso={0x86, 0x6, 0x3}, @noop, @lsrr={0x83, 0x7, 0x1d, [@remote]}]}}}}})
recvfrom$inet6(r2, &(0x7f00000006c0)=""/242, 0xf2, 0x2000, &(0x7f00000007c0)={0xa, 0x4e22, 0x6, @empty, 0x3f}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x8000}}, './file0/file0\x00'})
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000840)={0x909, 0x7, 0x5, 0x80000000, 0x6, [{0x3, 0x100000001, 0x5, '\x00', 0x1001}, {0x3, 0x100000001, 0x7, '\x00', 0x1781}, {0x5, 0x9, 0x400000000000, '\x00', 0x108}, {0x6, 0x1, 0x1, '\x00', 0x1400}, {0x7, 0x0, 0x8}, {0xfc, 0x80, 0x3f, '\x00', 0x480}]})
pipe(&(0x7f00000009c0)={<r6=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000a00)=[@window={0x3, 0x6, 0x81}, @sack_perm], 0x2)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000a40), 0x141002, 0x0)
ioctl$HIDIOCGFIELDINFO(r7, 0xc038480a, &(0x7f0000000a80)={0x2, 0x1, 0x8000, 0x401, 0x926, 0x800, 0xc9f, 0x7, 0x7ff, 0x1, 0x3f, 0x3, 0xb232, 0x5})

10:13:21 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x30540, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008814}, 0x4000000)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r2, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f451abc83c"}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "d54f9a1baf"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "26cdd185382d137158fe6a9ebc"}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x10)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0)
getsockopt$sock_int(r3, 0x1, 0x13, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
r4 = msgget$private(0x0, 0x8)
msgctl$IPC_RMID(r4, 0x0)
recvmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000000440)=@llc, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)=""/50, 0x32}, {&(0x7f0000000600)=""/35, 0x23}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/255, 0xff}, {&(0x7f0000000800)=""/27, 0x1b}], 0x6, &(0x7f00000008c0)=""/93, 0x5d}, 0x745b5702}, {{&(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f00000009c0)=""/165, 0xa5}, {&(0x7f0000000a80)=""/42, 0x2a}, {&(0x7f0000000ac0)=""/164, 0xa4}, {&(0x7f0000000b80)=""/241, 0xf1}, {&(0x7f0000000c80)=""/172, 0xac}, {&(0x7f0000000d40)=""/202, 0xca}, {&(0x7f0000000e40)=""/6, 0x6}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x8, &(0x7f0000001f00)=""/176, 0xb0}, 0x1}, {{&(0x7f0000001fc0)=@nfc, 0x80, &(0x7f0000002300)=[{&(0x7f0000002040)=""/150, 0x96}, {&(0x7f0000002100)=""/47, 0x2f}, {&(0x7f0000002140)=""/130, 0x82}, {&(0x7f0000002200)=""/194, 0xc2}], 0x4, &(0x7f0000002340)=""/55, 0x37}, 0x5}, {{&(0x7f0000002380)=@pppol2tpv3in6, 0x80, &(0x7f0000002600)=[{&(0x7f0000002400)=""/236, 0xec}, {&(0x7f0000002500)=""/238, 0xee}], 0x2, &(0x7f0000002640)=""/181, 0xb5}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002700)=""/253, 0xfd}], 0x1, &(0x7f0000002840)=""/214, 0xd6}}, {{&(0x7f0000002940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002ec0)=[{&(0x7f00000029c0)=""/181, 0xb5}, {&(0x7f0000002a80)=""/216, 0xd8}, {&(0x7f0000002b80)=""/200, 0xc8}, {&(0x7f0000002c80)=""/230, 0xe6}, {&(0x7f0000002d80)=""/73, 0x49}, {&(0x7f0000002e00)=""/60, 0x3c}, {&(0x7f0000002e40)=""/9, 0x9}, {&(0x7f0000002e80)=""/9, 0x9}], 0x8}, 0x4}], 0x6, 0x142, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003100), r3)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x3c, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}}, 0x11)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000003200)={{0x1, 0x1, 0x18, <r7=>r5, {0x3, 0x295f}}, './file0\x00'})
sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x54, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_COMPAT_NAME={0xc, 0x1, 'nl80211\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x9, 0x1, 'v*}[\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x2400c845)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000003380)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff, {0xfffffc00}}, './file1\x00'})
sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x54, r2, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0xc0)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f00000036c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003680)={&(0x7f0000003540)={0x11c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x10002}, 0x8044)
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)

10:13:21 executing program 5:
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x4}, 0x1c)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x4004044)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x47}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4000000)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x800}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4000001)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.sectors\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff09c5}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1000}, 0x4c000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x5}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x1}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x2}]}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048140}, 0x4000090)
setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000780)=0x7, 0x4)
sendmsg$FOU_CMD_ADD(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x6c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000010}, 0xc000)
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000900))
syncfs(r3)
getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000940)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000980)=0x28)
getresgid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40))
mount$9p_fd(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x80000a, &(0x7f0000000b00)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@access_uid}, {@loose}, {@access_client}, {@fscache}, {@posixacl}, {@version_u}], [{@smackfsroot={'smackfsroot', 0x3d, '-'}}]}})

10:13:21 executing program 2:
semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f0000000000))
r0 = semget(0x2, 0x1ee0e6f3bd16f38b, 0x600)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/147, 0x93}, {&(0x7f0000001180)=""/169, 0xa9}, {&(0x7f0000001240)=""/230, 0xe6}], 0x4, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/200, 0xc8}, {&(0x7f00000014c0)=""/62, 0x3e}], 0x2, &(0x7f0000001540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [<r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000001900)=[{&(0x7f0000001680)=""/200, 0xc8}, {&(0x7f0000001780)=""/10, 0xa}, {&(0x7f00000017c0)=""/21, 0x15}, {&(0x7f0000001800)=""/225, 0xe1}], 0x4, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r6=>0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x3, 0x77bbd537bcd5504d, 0x0)
semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000001a80)={{0x1, r6, 0xffffffffffffffff, 0x0, 0xee01, 0x158, 0x7}, 0x8001, 0x78, 0x0, 0x0, 0x0, 0x0, 0x86c0})
semtimedop(r0, &(0x7f0000001b00)=[{0x2, 0x5, 0x1800}, {0x1, 0x6, 0x1000}], 0x2, &(0x7f0000001b40)={0x0, 0x989680})
ioctl$HIDIOCGRAWNAME(r5, 0x80404804, &(0x7f0000001b80))
ioctl$RTC_AIE_OFF(r4, 0x7002)
nanosleep(&(0x7f0000001bc0)={0x77359400}, &(0x7f0000001c00))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001c80)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000001e80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x150, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_KEYS={0x128, 0x51, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f36d436d0d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "35e66bd3ad"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xd, 0x4, "c5072ea326d656254c"}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a7da25414e"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "420e2644c1065b95b1d9c6d141"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8e0862e0f6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a4c15239f1d48771f7f13ed4b3"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x13, 0x4, "08eab42fb505f363e2544581ccb8f0"}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x150}, 0x1, 0x0, 0x0, 0x4040}, 0x40001)
r9 = openat(r7, &(0x7f0000001ec0)='./file0\x00', 0x220000, 0x2)
bind$bt_hci(r9, &(0x7f0000001f00)={0x1f, 0x3, 0x4}, 0x6)
r10 = creat(&(0x7f0000001f40)='./file0\x00', 0x20)
sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4841)
r11 = semget$private(0x0, 0x1, 0x564)
semctl$IPC_RMID(r11, 0x0, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
r13 = signalfd4(r3, &(0x7f0000002080)={[0x5]}, 0x8, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, &(0x7f0000002100)={0xfbd0, 0x0, &(0x7f00000020c0)=[0xffffffffffffffff, r12, r3, r13]}, 0x4)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002140), 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)

10:13:21 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4)
recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f00000000c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000180)=""/89, 0x59}, {&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000240)=""/19, 0x13}], 0x4, &(0x7f00000002c0)=[@rights={{0x28, 0x1, 0x1, [<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x1)
ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000380))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x2f, 0x8d, 0x81, 0x9, 0x20, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x40, 0x40, 0x9, 0x7}})
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x8)
ioctl$INCFS_IOC_CREATE_FILE(r8, 0xc058671e, &(0x7f00000007c0)={{'\x00', 0x2}, {0x9}, 0x1, 0x0, 0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)="9b01947c67687cb7c091d42fb94f9e24ce08b3fa43e882bba5b5e6f98b4aaaadd8711e02d0fc1095280251cc4871025c692ddd9d0b58008bfc57c65c7ea990a949872fe6d021642193ac1512273202fccee5ad5f398239d24b2d030ba150ed13ecb7d4da3b20c165474ad546fad1fe2f224e86634648f03c837395d888b0ad35f4e9528dd25d79f52a494f629bb33d748e2a9931c36c6890fd207dc73cbfd14bfe111f909163fc6526636c0bc9aa8a3dd8097aed66982efde531d27b952454d1973246088b3d054118499df20d7021ce7157a6cc06fc95d1d4", 0xd9, 0x0, &(0x7f0000000600)={0x2, 0xfc, {0x1, 0xc, 0x33, "092e017060a8f101e4ad6d1b0ad751dcf1f26f7684deef48fb62630417cb7bcf53a4da5cb35458ae134371e79eb49d3ca6e331", 0xbc, "dfac543ed54469e353cb6a681ce57bbbcbb00e46fc8783d985c5210d4a7a4480a1a7f198b3096628bf3135d9bb8a0a5d5349d3369d31734db2daa165964fd55dcd16d1c1934e23d89a3903be62d7ca58802e10a281596f52e38b138d139d060acbecf49b88ccc8ab001311ea7fbb71673bed4afbe587d8a9848509a2af60f8fc15b16264b3a199b853b505c93ee0cf3017777217c1a44636df93afdea52b36bffc3101c30b3d61d473c6691b6fe4bbf4c79ace94589d9c25a7f4c566"}, 0x9e, "6849dbd43c8936a3b662102837e2a05daea8bef2a6a602f365e32eb7e2b32bf015e813b37d4dd35fbb4cafa7aeefa8bbeed9d975149227550a9ad3e040f95e4942aa54534b448ec0e32f912c989e3a327c0417e5e860e1048ffd5e4ff38763b7631c07e5910619e847e60c8af3d9068173a42f55b27de02067769001919024079fac445a6e1bf4032b9e078376a3fa12b63ed985d66296c3077376be070c"}, 0x1a6})
newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x1000)
r9 = openat$cgroup(r1, &(0x7f0000000900)='syz1\x00', 0x200002, 0x0)
write$binfmt_aout(r9, &(0x7f0000000940)={{0x107, 0xa7, 0x1, 0x151, 0x13, 0x6, 0x24c, 0xfd}, "8066b28067568061784b99523832d3a2e8b8a1d32a04e5031d412a31264cd3dde9aeb8d771c5c3d1fe86d8993e6aa085b7617bd2211a104fefc723c92f24b57ab5f4d2bc8179e578dae1bade2866d7ec80b86a95218608d75a4665a2eb2eeea478724066d47fb0956c95e280cd5450609eef450638789ae8b99ff55e30453692582188d4170b0d08c93e7334f21f37e87be6487d055193775014e0e53732f15f54366a81baf305f36eb28cdca2e03b432959d4f6ce96ea2dc4aca7ffa75a3ee12724f1ee18e663ea81cf4d0c546a7e1e9eaefef0960faa0bf9c900537cd46be23639c9d17a1a133bfd88d3358fb85bdc9364e0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x813)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000001180))
openat$ptp0(0xffffffffffffff9c, &(0x7f00000011c0), 0x20000, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000001200))
getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000001240)={'TPROXY\x00'}, &(0x7f0000001280)=0x1e)
ioctl$BLKSECTGET(r7, 0x1267, &(0x7f00000012c0))
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x80, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0c0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000001440), &(0x7f0000001480)=0x6)
r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0), 0x6000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, r4}, './file0\x00'})

10:13:21 executing program 4:
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @multicast2, <r0=>0x0}, &(0x7f0000000040)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r0, 0x4, 0x7f, 0x7, 0x7f, 0x20, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x80, 0x40, 0x70, 0x6}})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/nfs', 0x102, 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x1, 0x6, 0x1})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r1, {0x0, 0xee01}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x6, 0x80000001, 0x8, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000, 0x40, 0x7, 0x64}})
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000300))
r3 = dup(r2)
ioctl$CDROM_SELECT_DISK(r3, 0x5322, 0x4000000000)
ioctl$CDROMVOLREAD(r3, 0x5313, &(0x7f0000000340))
sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x370, 0x13, 0x400, 0x70bd27, 0x25dfdbff, {0x8, 0x3, 0x9, 0xbb, {0x4e24, 0x4e24, [0x7, 0x800, 0xffffffff, 0x2], [0x2, 0x7fff, 0xf5e, 0xd122], r0, [0x1, 0xfff]}, 0x40, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "c1131a93f44bbb138ba7c98e0b13bab02394d6e2fbe2457eeb39017944e89cf973d72be74deaba8e203271a9e98cb4d7694a527024fb22e6b687441f8049574f2b04a84498535e441aeb8ca1cc82d3c2e979bcab9ec2f032"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "75598f4769b6768aff2e64eeb8a90bc46ac95c6da3f0a79453"}, @INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "2f80239594d115fd3fdaa5106f8c32df744f8f8194c5b5d915d2c33ad34e146f20b96797c04c67d815897d0424c8cd37a4cbb80dd262afd0db5097e82a16bf5e2e6b35d7e25b88c846b6d52d1789a3a3202393af80afb83f5957c3884b165977fc54c2c418d918ca67ed7bea38cc92bd3b67cb3badfa99ef57983aa45e0587856253d4a19fc7437834a01a6f78b7c00c818ed3855c665760b66db4d22ce15476c8cfcc83227d091fe079f6803d22e9efb87caa9f09642eb54e0b20b7c91f196c51fae10d9ccc3c3c0003fb20eb50fa483b1e"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "038f1891539dffcd27537476269898cdf05f2e29eedab4bb4aeb8c5e1395382f7d3b32b3afcb7cbe955ad92b4be68d41fdf9f91ad8b53ec61c9337ffd8360df23f6e618c79e9ab377f336cf4a01c2a8435a157216e52abe4f263b8df5128933c4fa4c75782c506ff0c"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "c57a02474d1bdc2f4d7b66a4c5d4bbe31f820258495ab8213644d3a0b0bc09aa28efd3977dd8dab38395a6eb27ff7512456e4fee2eaa7fb2def9c4332908bbf6d68e9c7f99c43d777fe23d43066f5204633065199b6c7abc5d3f6399275133a440c3d72354ef5508f85652f3f2e08ad8de4edfd6f6186a6c02da8b17a2ce4c6ce4880ddfbfc502621d63f4bbba90495026689294568cd569df2894dfcac83392c525171abf5ae2a91387d776084d09937a126f4b682b671e9c57445e648afae322e90b5b642558b408726c"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "64e3af815ef735881e6cbf3ba71dce605084884d191bb52e0b421de6b04bbaec7467ec9d956991c55a4cf3ff48079e1e3c7d09b5102bd0cb6ad63b7f8485636019cd6bddd076af5ecd9efb3996eab922f92812c8d68c979586d354347671e2bffab30d6bcced49d43cfd3eac73664e27ceeb5412f677b756a9b1d1068cb78cd1272585a9b0839ca6ea"}]}, 0x370}, 0x1, 0x0, 0x0, 0x40050}, 0x20000801)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000, 0x0)
write$P9_RFLUSH(r4, &(0x7f0000000800)={0x7, 0x6d, 0x1}, 0x7)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000880)={0x56, 0x4b3, 0x7, {0x24, 0x6}, {0x2}, @period={0x59, 0x800, 0x0, 0x7, 0x6, {0x401, 0x0, 0x200, 0x5}, 0x2, &(0x7f0000000840)=[0x4, 0x1]}})
open(&(0x7f00000008c0)='./file0\x00', 0x400000, 0x114)
r5 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
fsync(r5)
r6 = memfd_secret(0x0)
sendmsg$OSF_MSG_ADD(r6, &(0x7f00000010c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000000940)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x5}, 0x3, 0x1, 0xa89, 0x2, 0x27, 'syz1\x00', "d0180c8fddeae246179e4d724fede8454662b02183ce23813263d1300438491f", "38401681de3ec290b9f8738d7589206b9dcfcf81943fca60fc5c757b3ccb6a02", [{0xf916, 0x7, {0x3, 0x8}}, {0x800, 0x5, {0x3, 0x8}}, {0x0, 0xfffd, {0x0, 0x8}}, {0x7, 0x200, {0x0, 0x387363f5}}, {0x7, 0x8, {0x1, 0x5}}, {0x100, 0xe8f2, {0x0, 0x4}}, {0x7, 0x1, {0x2, 0x9}}, {0x80, 0x101, {0x2, 0x3}}, {0x2, 0xda, {0x0, 0x5}}, {0x2, 0x2, {0x2, 0x484}}, {0x20, 0x8000, {0x3, 0x40}}, {0x9, 0xf6b, {0x2, 0x7}}, {0xddba, 0x44, {0x1, 0x20}}, {0x4, 0x2, {0x0, 0x3}}, {0x4, 0x20, {0x3, 0x6}}, {0x7f, 0xfff, {0x2, 0x5}}, {0xa, 0xb49, {0x3, 0x5}}, {0x8000, 0x1000, {0x2, 0x81}}, {0x400, 0x58, {0x0, 0x10001}}, {0x8, 0x1000, {0x0, 0x2}}, {0x9, 0x4d97, {0x3, 0xee}}, {0x87, 0x20, {0x1}}, {0x346e, 0x0, {0x7909063390acf549, 0xffffffff}}, {0x2, 0x5, {0x3, 0xb0f}}, {0x40, 0xff81, {0x3, 0xc116}}, {0xf0a7, 0x7ff, {0x0, 0x37}}, {0x80, 0x1, {0x3, 0x6}}, {0x8, 0x4, {0x3, 0x1b2f}}, {0x8000, 0x1000, {0x0, 0x1}}, {0x3, 0x2, {0x3}}, {0x3, 0x4, {0x1, 0x7}}, {0x400, 0xe7e2, {0x0, 0x6}}, {0x4, 0x4, {0x3, 0x100}}, {0x139, 0x7, {0x3, 0x101}}, {0xa7c0, 0x7fff, {0x2, 0x1f}}, {0x2, 0x2, {0x3, 0x4d}}, {0xfff9, 0x4, {0x3, 0xffffffff}}, {0x148f, 0xca, {0x1, 0x40}}, {0x8, 0x1, {0x1, 0xc9}}, {0x1, 0x0, {0x0, 0x4cdb}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x0, 0x1, 0x6, 0xff80, 0x1c, 'syz0\x00', "6d30f67fe71487297aab066f0d48c2037f853cc1ac3ebc665ddfad579dc75941", "63562e95438d5938b169d6cf80fd167b5c5f583550cf5a24bf90a3c31d7f2d0a", [{0xfff9, 0x20, {0x3}}, {0x8001, 0x1, {0x2, 0x2}}, {0x8, 0x3, {0x1, 0x9}}, {0x1f, 0x4, {0x0, 0xb16}}, {0x400, 0x1000, {0x1, 0x1ebb}}, {0x5, 0x627, {0x0, 0x18}}, {0x9c6, 0x800, {0x1, 0xffffffff}}, {0x401, 0x3, {0x3, 0x7}}, {0x8a, 0x8, {0x1, 0x80000000}}, {0x50c4, 0x5, {0x1, 0x2}}, {0xff, 0x7fff, {0x2}}, {0x40, 0x4, {0x0, 0x7fffffff}}, {0x0, 0x2e0e, {0x1, 0x4}}, {0x9, 0x1a, {0x2, 0xfffffffe}}, {0x1, 0x23b, {0x3, 0x8e}}, {0x0, 0xff, {0x3, 0x1}}, {0x9, 0x9}, {0x1, 0xfffb, {0x3, 0xbdb5}}, {0xdc94, 0x40, {0x3, 0x8}}, {0x8, 0x6, {0x0, 0x201}}, {0x100, 0x2, {0x1, 0x9}}, {0x9, 0x9, {0x1, 0xfffffff8}}, {0x8, 0x5, {0x3, 0x10001}}, {0x7, 0x1, {0x3, 0x2}}, {0x4, 0x100, {0x0, 0x6}}, {0x8, 0x0, {0x0, 0x7}}, {0x41, 0x9, {0x0, 0x8}}, {0x1754, 0x3f, {0x3, 0xeb0}}, {0x7fff, 0xa1d6, {0x0, 0x9}}, {0x8000, 0x3, {0x3, 0x7}}, {0x6, 0x1ff, {0x3, 0x800}}, {0x8001, 0x66c, {0x3, 0xbb59}}, {0x3, 0x2, {0x3}}, {0x401, 0x1000, {0x1, 0x81}}, {0x1, 0x7fff, {0x3, 0x5}}, {0x4, 0x9, {0x1, 0x3}}, {0x8, 0x8, {0x2, 0xcb}}, {0x3, 0x4, {0x1, 0x1ac}}, {0x30, 0x9, {0x2, 0x401}}]}}}, {{0x254, 0x1, {{0x3, 0x7a}, 0x2, 0x3, 0x3f, 0x1, 0x27, 'syz0\x00', "98df6a2ba96b96c04ed4b2d7688da7e45fe9281b124a8630e57def7d4fbd07c4", "2decfdc40792f47944e21bb9389c79bf238dcc0b999f45f2ab15e34e993c19de", [{0xfc98, 0x2, {0x1, 0x1}}, {0x5, 0x7fff, {0x2}}, {0x1, 0x7, {0x3, 0x6}}, {0x4, 0xff7d, {0x0, 0x1f}}, {0x3, 0x5, {0x1, 0x9}}, {0x1f, 0xfc00, {0x2, 0x1000}}, {0x1, 0x400, {0x1, 0xfff}}, {0x7f, 0x0, {0x2, 0x3}}, {0x8, 0x3, {0x3, 0x6}}, {0x92, 0x8, {0x3, 0x7fff}}, {0x0, 0x1, {0x2, 0xfffffbbd}}, {0x800, 0x7f, {0x1, 0x4}}, {0x606e, 0xffe1, {0x0, 0x8}}, {0x8, 0xf, {0x2, 0x5}}, {0x7, 0xfdd, {0x2, 0x8000}}, {0x0, 0xff0, {0x3, 0x6}}, {0x2, 0x310e, {0x2, 0x4f}}, {0xbae, 0x3, {0x0, 0x3}}, {0x2, 0x8e00, {0x0, 0x7fffffff}}, {0x401, 0xfffc, {0x2, 0x3ff}}, {0x9, 0x9, {0x0, 0xfffffffa}}, {0x8, 0x1, {0x1, 0x81}}, {0x3, 0x11, {0x3, 0xe0000000}}, {0x4, 0xb8fe, {0x1, 0x8}}, {0x7ff, 0x20, {0x1, 0x7}}, {0x0, 0xa080, {0x2, 0x9}}, {0x7, 0x8, {0x3, 0x3}}, {0x1000, 0x8000, {0x0, 0x3}}, {0x3f, 0xfffa, {0x0, 0xffff}}, {0x80, 0x57, {0x1, 0x756}}, {0x8, 0x2, {0x0, 0x9}}, {0x8, 0x100, {0x2, 0x45}}, {0x400, 0x4, {0x3, 0x81}}, {0x100, 0x8000, {0x1, 0x1}}, {0x200, 0xfffa, {0x2, 0x1}}, {0x401, 0x40, {0x3, 0x1}}, {0x1ff, 0x8000, {0x0, 0x9}}, {0xeeed, 0x8, {0x0, 0x6}}, {0x101, 0x0, {0x0, 0x3}}, {0x80, 0x100, {0x0, 0x1}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8800}, 0x8000)
msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)

10:13:21 executing program 6:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400101, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x170, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x138, 0x3, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7a3}, @NFTA_SET_ELEM_USERDATA={0xcf, 0x6, 0x1, 0x0, "83114e54606b14db5f6fdb888793c65e12684d2cdd75a17a4820a9e3766a81060840882176f51392159255750d1b181298fa71aa0b0795490a5e91135517ddc59325a09fd36f3a253d1e00f2d9b17448a03a21975fb2521d51eff985436430b8d5e249596df5896ff6ea2200a49c8b807824d81b051181a9573f4f373623c13c6b823293a213360022236e5a34e625759505ba477ba8dcd346baedecf84b7015a724226f1fff9138c8611d2f242d49d49b52dc4af0c9fdd563a55818d2b72d6a2fb1ee80cd6375242af4d1"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfb}]}, {0x4}, {0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x1d, 0x6, 0x1, 0x0, "7ba50e25ea06d176a67d49bbddfc79315ad49e17e1397bdf62"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfff}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x48005}, 0x0)
write$tcp_congestion(r0, &(0x7f0000000280)='cdg\x00', 0x4)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000003c0)=<r2=>0x0)
r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
r4 = getpid()
r5 = fcntl$getown(r1, 0x9)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x104, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x104}, 0x1, 0x0, 0x0, 0x810}, 0x1)
recvmsg$unix(r0, &(0x7f0000001a00)={&(0x7f00000005c0), 0x6e, &(0x7f0000001900)=[{&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/64, 0x40}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/198, 0xc6}], 0x5, &(0x7f0000001980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}], 0x78}, 0x102)
r11 = openat$incfs(r6, &(0x7f00000020c0)='.log\x00', 0x60100, 0x162)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r10)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r11, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x2c, r12, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008}, 0x80)
r13 = signalfd4(r8, &(0x7f0000002240)={[0x4d]}, 0x8, 0x80000)
sendmsg$NL80211_CMD_DEL_PMK(r13, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x34, r12, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000002}, 0x80)
fremovexattr(r8, &(0x7f0000002380)=@random={'user.', 'netdevsim\x00'})
r14 = signalfd(r9, &(0x7f0000002740)={[0x100000000]}, 0x8)
openat$cgroup(r14, &(0x7f0000002780)='syz0\x00', 0x200002, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x881)

[   94.208036] audit: type=1400 audit(1737800001.188:7): avc:  denied  { execmem } for  pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:13:21 executing program 7:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}]}, 0x40}}, 0x80)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x9}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40881}, 0x4080)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x44)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r5=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xec, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x970}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)={0x358, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x6c, 0x6, 0x36, 0x2, 0x4]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x3}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0xa}, {0x4, 0x3}, {}, {0x1, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x4}, {0x5, 0x5}, {0x2, 0x1}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x8}, {0x7, 0x8}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0x9}, {0x7}, {0x5, 0x7}, {0x4, 0xa}, {0x7}, {0x5, 0x1}, {0x1, 0xa}, {0x0, 0x8}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x3}, {0x3, 0x1}, {0x7, 0xb}, {0x4}, {0x4, 0xa}, {0x3, 0x8}, {0x7, 0x1}, {0x4}, {0x0, 0xa}, {0x5, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0xa}, {0x2, 0xa}, {0x5, 0x8}, {0x0, 0x1}, {0x0, 0x3}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x5, 0x2}, {0x4}, {0x1, 0x3}, {0x5, 0x1}, {0x0, 0x6}, {0x1, 0x6}, {0x2, 0xa}, {0x3, 0x7}, {}, {0x1, 0x5}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x7}, {0x5, 0xa}, {0x4, 0x5}, {0x2, 0x4}, {0x5, 0x4}, {0x5, 0x1}, {0x5, 0x8}, {0x2, 0x9}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x7}, {0x0, 0x4}, {0x5, 0x1}, {0x3, 0x5}, {0x4, 0x3}, {0x3, 0x3}, {0x0, 0x3}, {0x7, 0x5}, {0x4}, {0x1, 0x4}, {0x4, 0x1}, {0x2}, {0x3, 0xa}, {0x5, 0x7}, {0x0, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0x2c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xab, 0x5, 0x9, 0x4, 0x8000, 0x7ed, 0x7f, 0x3]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x9}, {0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x7}, {0x2, 0x3}, {0x3, 0x8}, {0x4, 0x4}, {0x0, 0x2}, {0x4, 0xa}, {0x0, 0x1}, {0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x2, 0x5}, {0x4, 0x9}, {0x6, 0x3}, {0x4, 0xa}, {0x2, 0x4}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x9}, {0x7, 0x9}, {0x1, 0x1}, {0x6, 0xa}, {0x2, 0x7}, {0x2, 0x2}, {0x2, 0x9}, {0x2, 0x4}, {0x3, 0x5}, {0x7, 0x5}, {0x6, 0x3}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0xa}, {0x6, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x2, 0x3}, {0x0, 0x6}, {0x2, 0x2}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe35d, 0x400, 0xd8ec, 0x81, 0x2, 0x40, 0x4fe]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0xe9, 0x4, 0xffff, 0x3ff, 0x100, 0x3d52]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x3}, {0x0, 0xa}, {0x5, 0x5}, {0x1, 0x4}, {0x1, 0x2}, {0x5, 0x2}, {0x7, 0x9}, {0x5, 0x5}, {0x4, 0x8}, {0x7, 0x1}, {0x2, 0x6}, {0x4, 0x8}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x40, 0x1, 0x6, 0x8, 0x0, 0x99f, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x3, 0x20, 0x3, 0x5, 0x9, 0x3, 0xefa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x4}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x4, 0xef, 0x0, 0x9, 0x4, 0x8f0]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x8}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x3, 0xa}, {0x4, 0x4}, {0x2, 0x8}, {0x3, 0x7}, {0x1, 0x2}, {0x5, 0x7}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x6}, {0x5}, {0x2, 0xa}, {0x0, 0x4}, {0x3, 0x2}, {0x0, 0x7}, {0x5, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x5, 0x4}, {0x6, 0x3}, {0x5, 0x6}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0x3}, {0x5, 0xa}, {0x5}, {0x1, 0x3}, {0x3, 0x2}, {0x4, 0x4}, {0x5, 0x4}]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xdab6, 0x6, 0x8000, 0x4, 0x5, 0x200, 0x8001]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x36, 0x1]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x5}, {}, {0x6, 0x9}, {0x4, 0x8}, {0x7}, {0x7, 0x4}, {0x4}, {0x2}, {0x6, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x2, 0x5}, {0x3}, {0x2, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x2, 0x5}, {0x3, 0x6}, {0x6, 0x8}, {0x1}, {0x7, 0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x1, 0x6}, {0x6, 0x3}, {0x4, 0x2}, {0x1}, {0x0, 0x3}, {0x0, 0x4}, {0x3, 0xa}, {0x6, 0x9}, {0x5, 0x7}, {0x6, 0x4}, {0x3, 0x5}, {0x0, 0xa}, {0x5, 0x5}, {0x5, 0x6}, {0x5, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd3a, 0x1f, 0x6, 0x800, 0x3, 0x4, 0x6, 0x401]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x0, 0x30, 0x6, 0x16, 0x60, 0x30, 0x39, 0x36, 0x2, 0x3]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x81, 0x7, 0x0, 0xff7f, 0x3, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x58a7, 0x23, 0x2, 0x1, 0x5, 0x1f, 0xd93, 0x9]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x8}, {0x4, 0x6}, {0x2, 0x3}, {0x5}, {0x2, 0x3}, {}, {0x0, 0x1}, {0x3}, {0x6, 0xa}, {0x5, 0x9}, {0x4, 0x9}, {0x2, 0x9}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x6, 0x9}, {0x1}, {0x0, 0x1}, {0x7, 0x4}, {0x2, 0x9}, {0x3, 0x2}, {0x1, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x27e9, 0x0, 0x4, 0x2, 0x4]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x8}, {0x7}, {0x0, 0x6}, {0x6, 0x6}, {0x5, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0xa}, {0x7, 0x9}, {0x5, 0x4}, {0x6, 0x7}, {0x2}, {0x6, 0x7}, {0x2, 0x4}, {0x2, 0x3}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x9}, {0x6, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x1, 0xa}, {0x5, 0x2}, {0x7, 0x8}, {0x5, 0x5}, {0x5, 0x1}, {0x7, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x3}, {0x7, 0x6}, {0x1, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x4, 0x6}, {0x2, 0x7}, {0x1, 0x8}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0xa}, {0x3, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x7, 0x1}, {0x1, 0x9}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x2}, {0x3, 0x9}, {}, {0x1}, {0x3, 0x6}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x1}, {0x3, 0x8}, {0x4}, {0x5, 0x8}, {0x0, 0x8}, {0x4, 0x4}, {0x4, 0x4}, {0x7, 0x5}, {0x6, 0x9}, {0x6, 0x5}, {0x1, 0x5}, {0x6, 0x1e}, {0x6, 0x6}, {0x3, 0x6}, {0x2, 0x5}, {0x7, 0x4}, {0x1, 0x4}, {0x6, 0x6}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x0, 0x0, 0x5, 0x12, 0x24, 0x48, 0x1b, 0x9, 0x5, 0x4, 0x1b, 0x1b, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0xb4fe, 0x4, 0x0, 0x7, 0x0, 0x80]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x49, 0x2, 0x60, 0x48, 0x1, 0x4]}]}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x40}, 0x20004004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2c000010)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r1)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x595}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x9898}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x51}, {0x5, 0x14, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
recvfrom(r6, &(0x7f0000000e80)=""/243, 0xf3, 0x41, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5c}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x200008c4)
r8 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000001140)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x4e23, 0x800, 0x4e23, 0x8, 0xa, 0x0, 0x80, 0x8, 0x0, r5}, {0xfff, 0x6, 0x43dd, 0x1ff, 0x7f, 0xff, 0xda8, 0x8001}, {0x8, 0x5, 0xa59, 0xffffffffffffff83}, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@private=0xa010100, 0x4d3, 0xff}, 0xa, @in=@multicast2, 0x3505, 0x5, 0x3, 0xe, 0x88c, 0x1, 0x3}}, 0xe8)

[   95.655660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.666077] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.668777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.679012] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.683513] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   95.687668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.738886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.752978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.756893] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.772228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.774375] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   95.777983] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   95.782691] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   95.791770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   95.796151] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   95.798156] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   95.801024] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.806162] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.813895] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.819223] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   95.861859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   95.867930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.871255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.877036] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   95.882355] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   95.885348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   95.890303] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   95.905091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.911382] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   95.914387] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   95.916532] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   95.926723] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   95.929163] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   95.931642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   95.933748] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   95.941589] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.950968] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   95.952875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   95.960071] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   95.973057] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   95.975394] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   95.984931] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   95.987648] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   95.995861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   95.998006] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   96.001581] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   96.003691] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   96.020630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   97.796877] Bluetooth: hci0: command tx timeout
[   97.860603] Bluetooth: hci2: command tx timeout
[   97.924508] Bluetooth: hci1: command tx timeout
[   98.052519] Bluetooth: hci3: command tx timeout
[   98.053930] Bluetooth: hci5: command tx timeout
[   98.054525] Bluetooth: hci4: command tx timeout
[   98.116538] Bluetooth: hci6: command tx timeout
[   98.117194] Bluetooth: hci7: command tx timeout
[   99.845703] Bluetooth: hci0: command tx timeout
[   99.909810] Bluetooth: hci2: command tx timeout
[   99.972878] Bluetooth: hci1: command tx timeout
[  100.101542] Bluetooth: hci5: command tx timeout
[  100.102376] Bluetooth: hci4: command tx timeout
[  100.103610] Bluetooth: hci3: command tx timeout
[  100.164880] Bluetooth: hci6: command tx timeout
[  100.165970] Bluetooth: hci7: command tx timeout
[  101.892496] Bluetooth: hci0: command tx timeout
[  101.956503] Bluetooth: hci2: command tx timeout
[  102.020543] Bluetooth: hci1: command tx timeout
[  102.150581] Bluetooth: hci4: command tx timeout
[  102.151030] Bluetooth: hci5: command tx timeout
[  102.152215] Bluetooth: hci3: command tx timeout
[  102.212555] Bluetooth: hci6: command tx timeout
[  102.213338] Bluetooth: hci7: command tx timeout
[  103.940500] Bluetooth: hci0: command tx timeout
[  104.004571] Bluetooth: hci2: command tx timeout
[  104.068519] Bluetooth: hci1: command tx timeout
[  104.196520] Bluetooth: hci5: command tx timeout
[  104.196567] Bluetooth: hci3: command tx timeout
[  104.197003] Bluetooth: hci4: command tx timeout
[  104.260613] Bluetooth: hci6: command tx timeout
[  104.263512] Bluetooth: hci7: command tx timeout
[  158.161363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  158.164342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  158.170841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  158.181837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  158.186967] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  158.189643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  158.479252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  158.482609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  158.486273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  158.491155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  158.494636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  158.499857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  158.502205] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  158.503829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  158.506074] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  158.509051] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  158.517492] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  158.521289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  158.548899] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  158.553076] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  158.556220] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  158.566724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  158.569263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  158.571648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  158.596771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  158.605680] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  158.628290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  158.645961] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  158.705082] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  158.707328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  158.784138] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  158.786550] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  158.788139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  158.790031] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  158.794781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  158.799257] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  158.801945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  158.805922] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  158.808086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  158.823234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  158.828692] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  158.830181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  158.885542] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  158.901260] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  158.917912] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  158.938267] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  158.940319] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  158.958662] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  160.263458] Bluetooth: hci0: command tx timeout
[  160.582529] Bluetooth: hci1: command tx timeout
[  160.582737] Bluetooth: hci2: command tx timeout
[  160.644590] Bluetooth: hci3: command tx timeout
[  160.837007] Bluetooth: hci4: command tx timeout
[  160.900737] Bluetooth: hci6: command tx timeout
[  161.093357] Bluetooth: hci5: command tx timeout
[  161.094206] Bluetooth: hci7: command tx timeout
[  162.309500] Bluetooth: hci0: command tx timeout
[  162.628511] Bluetooth: hci2: command tx timeout
[  162.628558] Bluetooth: hci1: command tx timeout
[  162.692546] Bluetooth: hci3: command tx timeout
[  162.884703] Bluetooth: hci4: command tx timeout
[  162.950486] Bluetooth: hci6: command tx timeout
[  163.140523] Bluetooth: hci7: command tx timeout
[  163.141513] Bluetooth: hci5: command tx timeout
[  164.356506] Bluetooth: hci0: command tx timeout
[  164.676544] Bluetooth: hci1: command tx timeout
[  164.676644] Bluetooth: hci2: command tx timeout
[  164.740680] Bluetooth: hci3: command tx timeout
[  164.932521] Bluetooth: hci4: command tx timeout
[  164.997667] Bluetooth: hci6: command tx timeout
[  165.190711] Bluetooth: hci5: command tx timeout
[  165.190785] Bluetooth: hci7: command tx timeout
[  166.405481] Bluetooth: hci0: command tx timeout
[  166.724606] Bluetooth: hci1: command tx timeout
[  166.725111] Bluetooth: hci2: command tx timeout
[  166.788501] Bluetooth: hci3: command tx timeout
[  166.980724] Bluetooth: hci4: command tx timeout
[  167.044490] Bluetooth: hci6: command tx timeout
[  167.236637] Bluetooth: hci7: command tx timeout
[  167.237496] Bluetooth: hci5: command tx timeout
[  221.335723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  221.337799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  221.339215] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  221.345617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  221.347988] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  221.349472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  221.405275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  221.409498] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  221.414110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  221.425603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  221.431266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  221.437069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  221.473925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  221.482744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  221.489733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  221.503006] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  221.510735] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  221.515724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  221.636134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  221.651270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  221.653134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  221.658640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  221.659538] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  221.664722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  221.668588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  221.673977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  221.676825] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  221.683501] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  221.684830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  221.692709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  221.713228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  221.715838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  221.719603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  221.725834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  221.726830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  221.730744] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  221.734355] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  221.769554] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  221.771660] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  221.835413] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  221.842781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  221.848711] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  221.849597] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  221.852138] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  221.871702] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  221.946588] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  221.955736] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  221.957821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  223.429524] Bluetooth: hci0: command tx timeout
[  223.493905] Bluetooth: hci1: command tx timeout
[  223.620636] Bluetooth: hci2: command tx timeout
[  223.812603] Bluetooth: hci3: command tx timeout
[  223.812799] Bluetooth: hci5: command tx timeout
[  223.814192] Bluetooth: hci4: command tx timeout
[  223.940498] Bluetooth: hci6: command tx timeout
[  224.004830] Bluetooth: hci7: command tx timeout
[  225.478429] Bluetooth: hci0: command tx timeout
[  225.541234] Bluetooth: hci1: command tx timeout
[  225.669492] Bluetooth: hci2: command tx timeout
[  225.861433] Bluetooth: hci5: command tx timeout
[  225.862073] Bluetooth: hci4: command tx timeout
[  225.863044] Bluetooth: hci3: command tx timeout
[  225.989420] Bluetooth: hci6: command tx timeout
[  226.052706] Bluetooth: hci7: command tx timeout
[  227.524477] Bluetooth: hci0: command tx timeout
[  227.590507] Bluetooth: hci1: command tx timeout
[  227.716505] Bluetooth: hci2: command tx timeout
[  227.908548] Bluetooth: hci3: command tx timeout
[  227.908994] Bluetooth: hci4: command tx timeout
[  227.909488] Bluetooth: hci5: command tx timeout
[  228.036712] Bluetooth: hci6: command tx timeout
[  228.101458] Bluetooth: hci7: command tx timeout
[  229.573493] Bluetooth: hci0: command tx timeout
[  229.636527] Bluetooth: hci1: command tx timeout
[  229.764561] Bluetooth: hci2: command tx timeout
[  229.958437] Bluetooth: hci5: command tx timeout
[  229.958938] Bluetooth: hci4: command tx timeout
[  229.959419] Bluetooth: hci3: command tx timeout
[  230.084454] Bluetooth: hci6: command tx timeout
[  230.148468] Bluetooth: hci7: command tx timeout
[  280.135165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.136725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.456363] 
[  282.456635] ======================================================
[  282.457258] WARNING: possible circular locking dependency detected
[  282.457882] 6.13.0-next-20250124 #1 Not tainted
[  282.458374] ------------------------------------------------------
[  282.459292] kworker/u8:0/11 is trying to acquire lock:
[  282.460147] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[  282.461720] 
[  282.461720] but task is already holding lock:
[  282.462727] ffff888037630768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  282.464374] 
[  282.464374] which lock already depends on the new lock.
[  282.464374] 
[  282.465716] 
[  282.465716] the existing dependency chain (in reverse order) is:
[  282.467557] 
[  282.467557] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  282.469205]        __mutex_lock+0x13d/0xb50
[  282.470410]        wiphy_register+0x1b2e/0x25d0
[  282.471589]        ieee80211_register_hw+0x23a4/0x3d60
[  282.472187]        mac80211_hwsim_new_radio+0x2759/0x4d60
[  282.472814]        init_mac80211_hwsim+0x389/0x870
[  282.473376]        do_one_initcall+0xf9/0x640
[  282.473895]        kernel_init_freeable+0x53d/0x7a0
[  282.474476]        kernel_init+0x1e/0x2d0
[  282.474924]        ret_from_fork+0x48/0x80
[  282.475384]        ret_from_fork_asm+0x1a/0x30
[  282.475919] 
[  282.475919] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  282.476585]        __lock_acquire+0x29fd/0x4580
[  282.477097]        lock_acquire+0x19b/0x520
[  282.477574]        __mutex_lock+0x13d/0xb50
[  282.478067]        unregister_netdevice_many_notify+0x1612/0x1c80
[  282.478720]        unregister_netdevice_queue+0x224/0x2e0
[  282.479309]        _cfg80211_unregister_wdev+0x57b/0x700
[  282.479909]        ieee80211_remove_interfaces+0x2f2/0x6b0
[  282.481014]        ieee80211_unregister_hw+0x55/0x3a0
[  282.481999]        hwsim_exit_net+0x3a0/0x730
[  282.482885]        ops_exit_list+0xb3/0x180
[  282.483716]        cleanup_net+0x546/0xad0
[  282.484522]        process_one_work+0x8ee/0x1a10
[  282.485407]        worker_thread+0x674/0xe70
[  282.486347]        kthread+0x3ab/0x720
[  282.487198]        ret_from_fork+0x48/0x80
[  282.487955]        ret_from_fork_asm+0x1a/0x30
[  282.488801] 
[  282.488801] other info that might help us debug this:
[  282.488801] 
[  282.490178]  Possible unsafe locking scenario:
[  282.490178] 
[  282.491234]        CPU0                    CPU1
[  282.492213]        ----                    ----
[  282.493068]   lock(&rdev->wiphy.mtx);
[  282.493825]                                lock(rtnl_mutex);
[  282.494899]                                lock(&rdev->wiphy.mtx);
[  282.496078]   lock(rtnl_mutex);
[  282.496752] 
[  282.496752]  *** DEADLOCK ***
[  282.496752] 
[  282.497819] 4 locks held by kworker/u8:0/11:
[  282.498633]  #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[  282.500561]  #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[  282.502187]  #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[  282.503712]  #3: ffff888037630768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  282.505460] 
[  282.505460] stack backtrace:
[  282.506205] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250124 #1
[  282.506278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  282.506321] Workqueue: netns cleanup_net
[  282.506401] Call Trace:
[  282.506421]  <TASK>
[  282.506443]  dump_stack_lvl+0xca/0x120
[  282.506557]  print_circular_bug+0x47b/0x750
[  282.506648]  check_noncircular+0x2e9/0x3c0
[  282.506729]  ? lock_repin_lock+0x207/0x320
[  282.506846]  ? __pfx_check_noncircular+0x10/0x10
[  282.506928]  ? hlock_class+0x4e/0x130
[  282.506989]  ? mark_lock+0xac/0xed0
[  282.507068]  ? __pfx_lock_repin_lock+0x10/0x10
[  282.507193]  ? lockdep_lock+0xba/0x1b0
[  282.507306]  ? __pfx_lockdep_lock+0x10/0x10
[  282.507430]  __lock_acquire+0x29fd/0x4580
[  282.507537]  ? __pfx___lock_acquire+0x10/0x10
[  282.507624]  ? lock_release+0x20f/0x6f0
[  282.507712]  ? __pfx_lock_release+0x10/0x10
[  282.507807]  lock_acquire+0x19b/0x520
[  282.507905]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  282.508003]  ? __pfx_lock_acquire+0x10/0x10
[  282.508092]  ? srso_return_thunk+0x5/0x5f
[  282.508202]  ? lock_release+0x20f/0x6f0
[  282.508289]  ? srso_return_thunk+0x5/0x5f
[  282.508399]  ? lock_is_held_type+0x9e/0x120
[  282.508508]  ? srso_return_thunk+0x5/0x5f
[  282.508626]  __mutex_lock+0x13d/0xb50
[  282.508730]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  282.508820]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  282.508912]  ? srso_return_thunk+0x5/0x5f
[  282.509021]  ? synchronize_rcu_expedited+0x38a/0x420
[  282.509108]  ? __pfx___mutex_lock+0x10/0x10
[  282.509215]  ? __pfx_autoremove_wake_function+0x10/0x10
[  282.509322]  ? srso_return_thunk+0x5/0x5f
[  282.509432]  ? kasan_quarantine_put+0x84/0x1e0
[  282.509551]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  282.509621]  ? srso_return_thunk+0x5/0x5f
[  282.509740]  unregister_netdevice_many_notify+0x1612/0x1c80
[  282.509831]  ? __virt_addr_valid+0x2e8/0x5d0
[  282.509935]  ? __pfx_lock_release+0x10/0x10
[  282.510025]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  282.510117]  ? find_held_lock+0x2c/0x110
[  282.510232]  ? srso_return_thunk+0x5/0x5f
[  282.510347]  ? kernfs_remove_by_name_ns+0xc7/0x130
[  282.510466]  ? srso_return_thunk+0x5/0x5f
[  282.510576]  ? lock_release+0x20f/0x6f0
[  282.510664]  ? __pfx_lock_release+0x10/0x10
[  282.510750]  ? srso_return_thunk+0x5/0x5f
[  282.510860]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  282.510955]  ? srso_return_thunk+0x5/0x5f
[  282.511075]  unregister_netdevice_queue+0x224/0x2e0
[  282.511162]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  282.511249]  ? up_write+0x195/0x520
[  282.511358]  _cfg80211_unregister_wdev+0x57b/0x700
[  282.511463]  ? srso_return_thunk+0x5/0x5f
[  282.511580]  ieee80211_remove_interfaces+0x2f2/0x6b0
[  282.511657]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  282.511734]  ? srso_return_thunk+0x5/0x5f
[  282.511844]  ? srso_return_thunk+0x5/0x5f
[  282.511966]  ? synchronize_rcu+0x1ff/0x260
[  282.512051]  ieee80211_unregister_hw+0x55/0x3a0
[  282.512140]  hwsim_exit_net+0x3a0/0x730
[  282.512224]  ? __pfx_hwsim_exit_net+0x10/0x10
[  282.512305]  ? srso_return_thunk+0x5/0x5f
[  282.512415]  ? netdev_run_todo+0x788/0x1040
[  282.512509]  ? srso_return_thunk+0x5/0x5f
[  282.512622]  ? __pfx_hwsim_exit_net+0x10/0x10
[  282.512708]  ops_exit_list+0xb3/0x180
[  282.512792]  cleanup_net+0x546/0xad0
[  282.512881]  ? __pfx_cleanup_net+0x10/0x10
[  282.512988]  process_one_work+0x8ee/0x1a10
[  282.513119]  ? __pfx_lock_acquire+0x10/0x10
[  282.513208]  ? __pfx_process_one_work+0x10/0x10
[  282.513324]  ? srso_return_thunk+0x5/0x5f
[  282.513434]  ? move_linked_works+0x172/0x270
[  282.513523]  ? srso_return_thunk+0x5/0x5f
[  282.513633]  ? assign_work+0x196/0x240
[  282.513747]  worker_thread+0x674/0xe70
[  282.513863]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  282.513968]  ? __pfx_worker_thread+0x10/0x10
[  282.514087]  kthread+0x3ab/0x720
[  282.514190]  ? __pfx_kthread+0x10/0x10
[  282.514294]  ? srso_return_thunk+0x5/0x5f
[  282.514404]  ? finish_task_switch.isra.0+0x206/0x840
[  282.514504]  ? __pfx_kthread+0x10/0x10
[  282.514612]  ret_from_fork+0x48/0x80
[  282.514674]  ? __pfx_kthread+0x10/0x10
[  282.514780]  ret_from_fork_asm+0x1a/0x30
[  282.514912]  </TASK>
[  283.918329] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  283.920971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  283.924899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  283.928931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  283.930245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  283.932300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  283.936267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  283.938786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  283.941689] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  283.942278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  283.944819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  283.959611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  284.168566] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  284.170578] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  284.172236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  284.175481] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  284.178105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  284.180061] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  284.247889] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  284.251079] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  284.252738] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  284.257237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  284.259512] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  284.261093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  284.302754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  284.304629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  284.306210] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  284.310998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  284.313358] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  284.315205] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  284.404935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  284.411742] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  284.415633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  284.415644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  284.420175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  284.426636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  284.439857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  284.441126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  284.444237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  284.445563] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  284.467658] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  284.471079] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  284.541152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  284.558745] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  284.581432] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  284.612823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  284.616341] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  284.618061] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  285.957403] Bluetooth: hci0: command tx timeout
[  286.020607] Bluetooth: hci1: command tx timeout
[  286.212631] Bluetooth: hci2: command tx timeout
[  286.342378] Bluetooth: hci4: command tx timeout
[  286.342853] Bluetooth: hci3: command tx timeout
[  286.532420] Bluetooth: hci5: command tx timeout
[  286.596439] Bluetooth: hci6: command tx timeout
[  286.724487] Bluetooth: hci7: command tx timeout
[  288.004792] Bluetooth: hci0: command tx timeout
[  288.068455] Bluetooth: hci1: command tx timeout
[  288.261453] Bluetooth: hci2: command tx timeout
[  288.388627] Bluetooth: hci3: command tx timeout
[  288.389553] Bluetooth: hci4: command tx timeout
[  288.580663] Bluetooth: hci5: command tx timeout
[  288.644726] Bluetooth: hci6: command tx timeout
[  288.772480] Bluetooth: hci7: command tx timeout
[  290.052563] Bluetooth: hci0: command tx timeout
[  290.116735] Bluetooth: hci1: command tx timeout
[  290.308749] Bluetooth: hci2: command tx timeout
[  290.436505] Bluetooth: hci4: command tx timeout
[  290.437416] Bluetooth: hci3: command tx timeout
[  290.628862] Bluetooth: hci5: command tx timeout
[  290.692490] Bluetooth: hci6: command tx timeout
[  290.820628] Bluetooth: hci7: command tx timeout
[  292.100422] Bluetooth: hci0: command tx timeout
[  292.164518] Bluetooth: hci1: command tx timeout
[  292.356479] Bluetooth: hci2: command tx timeout

VM DIAGNOSIS:
10:16:29  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88800ed81bc0 RCX=ffffffff81429a4a RDX=ffff88800ed81bc0
RSI=ffffffff814299d3 RDI=ffff88800ed81bec RBP=0000000000000000 RSP=ffff88800f187db8
R8 =0000000000000000 R9 =ffffed1001742a00 R10=ffff88800ba15007 R11=ffff88800ed82078
R12=ffffc900002feff9 R13=ffff88800b2f3cb8 R14=ffff88800ed81bc0 R15=0000000000000086
RIP=ffffffff814299d7 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b9f62a9a40 CR3=000000000b8f8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000c00008d9e0000000c00008d9b0
XMM02=000000c00008daa0000000c0002ec230 XMM03=000000c00008dc80000000c0002ec280
XMM04=000000c00017a090000000c00017a060 XMM05=000000c00017a0f0000000c00017a0c0
XMM06=000000c00017a150000000c00017a120 XMM07=000000c000179760000000c0000554d0
XMM08=000000c00017a4b0000000c00017a480 XMM09=000000c00017a510000000c00017a4e0
XMM10=000000c00017a540000000c000055530 XMM11=000000c00017a5a0000000c00017a570
XMM12=000000c00017a600000000c00017a5d0 XMM13=000000c00017a660000000c00017a630
XMM14=000000c00017a6c0000000c00017a690 XMM15=000000c000105080000000c00017a6f0
info registers vcpu 1
RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff8283f0d0 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095deca8
R8 =0000000000000001 R9 =ffffed10012bbd86 R10=0000000000000000 R11=3064353278302020
R12=0000000000000033 R13=ffffffff886970b0 R14=ffffffff88697060 R15=ffffffff88697320
RIP=ffffffff8283f125 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d1dff45018 CR3=000000000b8f8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=000000000000000040fabf0000000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000