syzkaller login: [   66.818497] sshd (233) used greatest stack depth: 23344 bytes left
Warning: Permanently added '[localhost]:28287' (ECDSA) to the list of known hosts.
2025/01/19 21:46:51 fuzzer started
2025/01/19 21:46:52 dialing manager at localhost:44245
[   69.913956] cgroup: Unknown subsys name 'net'
[   69.986443] cgroup: Unknown subsys name 'cpuset'
[   70.014462] cgroup: Unknown subsys name 'rlimit'
[   77.492811] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[   88.578420] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/19 21:47:11 syscalls: 2217
2025/01/19 21:47:11 code coverage: enabled
2025/01/19 21:47:11 comparison tracing: enabled
2025/01/19 21:47:11 extra coverage: enabled
2025/01/19 21:47:11 setuid sandbox: enabled
2025/01/19 21:47:11 namespace sandbox: enabled
2025/01/19 21:47:11 Android sandbox: enabled
2025/01/19 21:47:11 fault injection: enabled
2025/01/19 21:47:11 leak checking: enabled
2025/01/19 21:47:11 net packet injection: enabled
2025/01/19 21:47:11 net device setup: enabled
2025/01/19 21:47:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/19 21:47:11 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/19 21:47:11 USB emulation: enabled
2025/01/19 21:47:11 hci packet injection: enabled
2025/01/19 21:47:11 wifi device emulation: enabled
2025/01/19 21:47:11 802.15.4 emulation: enabled
2025/01/19 21:47:11 fetching corpus: 50, signal 27458/28942 (executing program)
2025/01/19 21:47:11 fetching corpus: 100, signal 35346/38052 (executing program)
2025/01/19 21:47:11 fetching corpus: 150, signal 41184/44898 (executing program)
2025/01/19 21:47:11 fetching corpus: 200, signal 46886/51438 (executing program)
2025/01/19 21:47:11 fetching corpus: 250, signal 50292/55695 (executing program)
2025/01/19 21:47:12 fetching corpus: 300, signal 56763/62575 (executing program)
2025/01/19 21:47:12 fetching corpus: 350, signal 59653/66018 (executing program)
2025/01/19 21:47:12 fetching corpus: 400, signal 64274/70903 (executing program)
2025/01/19 21:47:12 fetching corpus: 450, signal 67678/74598 (executing program)
2025/01/19 21:47:12 fetching corpus: 500, signal 69704/77035 (executing program)
2025/01/19 21:47:12 fetching corpus: 550, signal 71595/79280 (executing program)
2025/01/19 21:47:13 fetching corpus: 600, signal 73887/81768 (executing program)
2025/01/19 21:47:13 fetching corpus: 650, signal 76820/84710 (executing program)
2025/01/19 21:47:13 fetching corpus: 700, signal 78900/86834 (executing program)
2025/01/19 21:47:13 fetching corpus: 750, signal 81145/89054 (executing program)
2025/01/19 21:47:13 fetching corpus: 800, signal 83303/91061 (executing program)
2025/01/19 21:47:13 fetching corpus: 850, signal 86358/93689 (executing program)
2025/01/19 21:47:14 fetching corpus: 900, signal 88225/95390 (executing program)
2025/01/19 21:47:14 fetching corpus: 950, signal 90701/97337 (executing program)
2025/01/19 21:47:14 fetching corpus: 1000, signal 92360/98735 (executing program)
2025/01/19 21:47:14 fetching corpus: 1050, signal 93357/99641 (executing program)
2025/01/19 21:47:14 fetching corpus: 1100, signal 96316/101736 (executing program)
2025/01/19 21:47:14 fetching corpus: 1150, signal 97281/102506 (executing program)
2025/01/19 21:47:15 fetching corpus: 1200, signal 98776/103576 (executing program)
2025/01/19 21:47:15 fetching corpus: 1250, signal 100865/104893 (executing program)
2025/01/19 21:47:15 fetching corpus: 1300, signal 103339/106369 (executing program)
2025/01/19 21:47:15 fetching corpus: 1350, signal 104269/106937 (executing program)
2025/01/19 21:47:15 fetching corpus: 1400, signal 105597/107676 (executing program)
2025/01/19 21:47:15 fetching corpus: 1402, signal 105616/107761 (executing program)
2025/01/19 21:47:15 fetching corpus: 1402, signal 105616/107820 (executing program)
2025/01/19 21:47:15 fetching corpus: 1402, signal 105616/107898 (executing program)
2025/01/19 21:47:15 fetching corpus: 1402, signal 105616/107964 (executing program)
2025/01/19 21:47:15 fetching corpus: 1402, signal 105616/108030 (executing program)
2025/01/19 21:47:15 fetching corpus: 1402, signal 105616/108105 (executing program)
2025/01/19 21:47:15 fetching corpus: 1402, signal 105616/108166 (executing program)
2025/01/19 21:47:15 fetching corpus: 1402, signal 105616/108229 (executing program)
2025/01/19 21:47:15 fetching corpus: 1402, signal 105616/108307 (executing program)
2025/01/19 21:47:15 fetching corpus: 1402, signal 105616/108376 (executing program)
2025/01/19 21:47:15 fetching corpus: 1402, signal 105616/108464 (executing program)
2025/01/19 21:47:15 fetching corpus: 1402, signal 105616/108526 (executing program)
2025/01/19 21:47:15 fetching corpus: 1402, signal 105616/108588 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/108660 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/108723 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/108808 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/108882 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/108959 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/109032 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/109111 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/109183 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/109253 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/109330 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/109409 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/109477 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/109536 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/109597 (executing program)
2025/01/19 21:47:16 fetching corpus: 1402, signal 105616/109597 (executing program)
2025/01/19 21:47:19 starting 8 fuzzer processes
21:47:19 executing program 0:
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000040))
close(0xffffffffffffffff)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000140)=0x1c, 0x400)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180))
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000240)={0x964, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x1ac, 0x8, 0x0, 0x1, [{0x1a8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ALLOWEDIPS={0x134, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8b71ececb38836144bde91571cb4943a605c5d334ab02174ebdeade791c86032"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2825b5d17ea5c175171c4c6db5849047591b832300920b6efefafd34f63c184"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c2f3cf8eb7270bc65090961f87058441f6fa02b359a57161e51feaec4cdd19d4"}]}]}, @WGDEVICE_A_PEERS={0x78c, 0x8, 0x0, 0x1, [{0x580, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1bc, 0x9, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0xe4, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x90, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}]}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "300d57048531ea28399c0664a05c5fb32fda4021624d7bce49a85cc1c262cf81"}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "10fae48b34ead94771ec7393568829a8352934f9382b6525ec098a5c63dbf5af"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @mcast2, 0x9b76}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1000, @mcast2, 0x9}}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "65356648cc24e7c46ee4743a86ca0aa3800ea637848b72058adb0051160e22ea"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x10001, @private1, 0x41f9}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1f}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x964}, 0x1, 0x0, 0x0, 0x1000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000c40)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000c80)={0x1, 0x1, 0xd4})
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000d00)=@add_del={0x2, &(0x7f0000000cc0)='virt_wifi0\x00'})
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000d40)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000d80)=0x2c)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000dc0)={0x0, r3, 0x3, 0x400, 0x4, 0x101})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000e00), 0x80840, 0x0)
recvmmsg$unix(r4, &(0x7f00000069c0)=[{{&(0x7f0000000e40)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000ec0)=""/63, 0x3f}, {&(0x7f0000000f00)=""/206, 0xce}, {&(0x7f0000001000)=""/145, 0x91}, {&(0x7f00000010c0)=""/162, 0xa2}, {&(0x7f0000001180)=""/80, 0x50}, {&(0x7f0000001200)=""/71, 0x47}], 0x6}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001300)=""/87, 0x57}, {&(0x7f0000001380)=""/179, 0xb3}, {&(0x7f0000001440)=""/135, 0x87}, {&(0x7f0000001500)=""/50, 0x32}, {&(0x7f0000001540)=""/89, 0x59}, {&(0x7f00000015c0)=""/73, 0x49}, {&(0x7f0000001640)=""/105, 0x69}], 0x7, &(0x7f0000001740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001800)=""/119, 0x77}], 0x1}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001940)=""/108, 0x6c}, {&(0x7f00000019c0)=""/255, 0xff}, {&(0x7f0000001ac0)=""/165, 0xa5}, {&(0x7f0000001b80)=""/200, 0xc8}], 0x4, &(0x7f0000001cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000001e40)=@abs, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000001ec0)=""/232, 0xe8}, {&(0x7f0000001fc0)=""/16, 0x10}, {&(0x7f0000002000)=""/141, 0x8d}, {&(0x7f00000020c0)=""/236, 0xec}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000003340), 0x6e, &(0x7f00000044c0)=[{&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/224, 0xe0}], 0x2, &(0x7f0000004500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000004640)=@abs, 0x6e, &(0x7f0000006940)=[{&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/151, 0x97}, {&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000006780)=""/75, 0x4b}, {&(0x7f0000006800)=""/133, 0x85}, {&(0x7f00000068c0)=""/101, 0x65}], 0x6}}], 0x7, 0x20, 0x0)
write$bt_hci(r5, &(0x7f0000006b80)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80000000}}}, 0xe)
clock_gettime(0x0, &(0x7f000000ef40)={<r7=>0x0, <r8=>0x0})
recvmmsg$unix(r6, &(0x7f000000ed00)=[{{&(0x7f0000006bc0)=@abs, 0x6e, &(0x7f0000007ec0)=[{&(0x7f0000006c40)=""/4096, 0x1000}, {&(0x7f0000007c40)=""/135, 0x87}, {&(0x7f0000007d00)=""/156, 0x9c}, {&(0x7f0000007dc0)=""/186, 0xba}, {&(0x7f0000007e80)=""/42, 0x2a}], 0x5, &(0x7f0000007f40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f000000a240)=[{&(0x7f0000007f80)=""/82, 0x52}, {&(0x7f0000008000)=""/53, 0x35}, {&(0x7f0000008040)=""/175, 0xaf}, {&(0x7f0000008100)=""/41, 0x29}, {&(0x7f0000008140)=""/43, 0x2b}, {&(0x7f0000008180)=""/4096, 0x1000}, {&(0x7f0000009180)=""/4096, 0x1000}, {&(0x7f000000a180)=""/148, 0x94}], 0x8, &(0x7f000000a2c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f000000b640)=[{&(0x7f000000a300)=""/177, 0xb1}, {&(0x7f000000a3c0)=""/242, 0xf2}, {&(0x7f000000a4c0)=""/4096, 0x1000}, {&(0x7f000000b4c0)}, {&(0x7f000000b500)=""/14, 0xe}, {&(0x7f000000b540)=""/237, 0xed}], 0x6, &(0x7f000000b6c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f000000b800)=@abs, 0x6e, &(0x7f000000cc80)=[{&(0x7f000000b880)=""/128, 0x80}, {&(0x7f000000b900)=""/139, 0x8b}, {&(0x7f000000b9c0)=""/4096, 0x1000}, {&(0x7f000000c9c0)=""/201, 0xc9}, {&(0x7f000000cac0)=""/49, 0x31}, {&(0x7f000000cb00)=""/81, 0x51}, {&(0x7f000000cb80)=""/32, 0x20}, {&(0x7f000000cbc0)=""/192, 0xc0}], 0x8}}, {{0x0, 0x0, &(0x7f000000dfc0)=[{&(0x7f000000cd00)=""/131, 0x83}, {&(0x7f000000cdc0)=""/32, 0x20}, {&(0x7f000000ce00)=""/27, 0x1b}, {&(0x7f000000ce40)=""/200, 0xc8}, {&(0x7f000000cf40)=""/16, 0x10}, {&(0x7f000000cf80)=""/36, 0x24}, {&(0x7f000000cfc0)=""/4096, 0x1000}], 0x7, &(0x7f000000e040)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f000000e140), 0x6e, &(0x7f000000e500)=[{&(0x7f000000e1c0)=""/223, 0xdf}, {&(0x7f000000e2c0)=""/183, 0xb7}, {&(0x7f000000e380)=""/98, 0x62}, {&(0x7f000000e400)=""/208, 0xd0}], 0x4, &(0x7f000000e540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f000000e5c0), 0x6e, &(0x7f000000e800)=[{&(0x7f000000e640)=""/252, 0xfc}, {&(0x7f000000e740)=""/146, 0x92}], 0x2, &(0x7f000000e840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f000000e940)=@abs, 0x6e, &(0x7f000000ea40)=[{&(0x7f000000e9c0)=""/63, 0x3f}, {&(0x7f000000ea00)=""/49, 0x31}], 0x2}}, {{&(0x7f000000ea80), 0x6e, &(0x7f000000ec00)=[{&(0x7f000000eb00)=""/244, 0xf4}], 0x1, &(0x7f000000ec40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}], 0x9, 0x0, &(0x7f000000ef80)={r7, r8+60000000})
ioctl$TIOCGPTLCK(r9, 0x80045439, &(0x7f000000efc0))

21:47:19 executing program 1:
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x2, "83"}, 0x2, 0x0)
ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000080))
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f00000000c0))
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x501001, 0x28)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x20, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x70}}, 0xc011)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000280))
copy_file_range(r0, &(0x7f00000002c0)=0x4, r0, &(0x7f0000000300)=0x9b6, 0x4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffc01, 0x7}}, './file0\x00'})
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000380))
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000003c0))
write(0xffffffffffffffff, &(0x7f0000000400)="842ad41bc1001ee44b3664b012fedebeca0cab45f8b613769a917e457dece8858677a55af6c83fff895ae3a7f9db1ccbd7514fb323ea69bdd6a72b5e669097673e062027fa48afcd59e25c219629390c9a2ab89d1efd22222871bf544b008889c685ce4c745efe906663353a", 0x6c)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/sco\x00')
getresgid(&(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540), &(0x7f0000000580)=<r3=>0x0)
fsetxattr$system_posix_acl(r1, &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {}, [{0x2, 0x6, 0xee01}], {0x4, 0x6}, [{0x8, 0x0, r2}], {0x10, 0x2}, {0x20, 0x43e44a926e544ed0}}, 0x34, 0x2)
ioctl$RTC_AIE_ON(r0, 0x7001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {<r4=>0xee01, r3}}, './file0\x00'})
stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchownat(r0, &(0x7f0000000600)='./file0\x00', r4, r5, 0x100)
setfsgid(r5)

21:47:19 executing program 2:
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x0, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40880}, 0x4020054)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xffff25aa}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xb19b}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7ff}}, './file0\x00'})
getpeername$netlink(r0, &(0x7f0000000240), &(0x7f0000000280)=0xc)
r1 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x80)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0xe, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20040050}, 0x80)
syz_mount_image$tmpfs(&(0x7f0000000480), &(0x7f00000004c0)='./file1\x00', 0x80000000, 0x1, &(0x7f0000000540)=[{&(0x7f0000000500)='~', 0x1, 0x8}], 0x241002, &(0x7f0000000580)={[{@huge_always}], [{@seclabel}]})
socketpair(0xd, 0x6, 0x3f, &(0x7f00000005c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000050}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x7, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40050}, 0x20000000)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x134d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe4a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x2c}}, 0x4040080)
sendmsg$AUDIT_TRIM(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x10, 0x3f6, 0x2, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
r4 = syz_open_dev$mouse(&(0x7f0000003e40), 0x100000001, 0x2)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000003fc0)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003ec0)={0xbc, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x40044800)
r5 = openat(r4, &(0x7f0000004000)='./file0\x00', 0x0, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000004100)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1c010}, 0x4004800)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000004240)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x38, r6, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x38}}, 0x8009)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x38, 0x0, 0x2, 0x801, 0x0, 0x0, {0xc, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffff184a}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4800)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000004480)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x400, 0x6}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x48054)

21:47:19 executing program 3:
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000c0}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xc0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000805}, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x2000c801)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x16}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x890)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r2, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040010)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan3\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x4014}, 0x20044040)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/137, 0x89}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/145, 0x91}, {&(0x7f0000001980)=""/98, 0x62}, {&(0x7f0000001a00)=""/32, 0x20}, {&(0x7f0000001a40)=""/42, 0x2a}], 0x6, &(0x7f0000001b00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2000)
sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x68, r2, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x36}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "7b032c4d6d87a6f2ada02bee7820fe84"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3c9e307b27b0076da8b9ee04a9c85c79"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "730fb829bf384fb148d2928ce9012846"}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0000c4}, 0x400)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000001f00)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x94, r8, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xc196}, {0xc, 0x90, 0x200}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048001}, 0x4048)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f80), r0)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001fc0)={'wpan1\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, r9, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5a}, 0x20048000)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002100), r3)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x14, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x11)

21:47:19 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040))
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@rand_addr=0x64010100, @in=@broadcast, 0x4e20, 0x1673, 0x4e23, 0x5, 0x0, 0x80, 0x80, 0x32, 0x0, 0xee00}, {0x9, 0x5de, 0x9, 0x3, 0x80000000, 0x2, 0x1}, {0xc6ee, 0xffffffff, 0x7f1, 0xfffffffffffffffb}, 0x81, 0x0, 0x1, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x32}, 0xa, @in=@rand_addr=0x64010100, 0x3504, 0x2, 0x0, 0x3f, 0x0, 0x1000, 0x4}}, 0xe8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x3f}}, './file0\x00'})
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e22, 0x9, @empty, 0xff}, {0xa, 0x4e23, 0x1, @local, 0x401}, 0x3f, [0x28, 0x0, 0xfffffff9, 0x1, 0x6f95, 0x7fff, 0x7, 0x1584dc6e]}, 0x5c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, {0xa, 0x4e21, 0x4, @mcast2}, 0x8001, [0x1, 0x1, 0x20, 0x19c8, 0x6, 0xc1d8, 0x4, 0x1]}, 0x5c)
r3 = dup3(r0, r1, 0x80000)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
close(r4)
pwrite64(r1, &(0x7f0000000480)="f424036f86399abe3e19823fbd11246a4f", 0x11, 0x7)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000004c0))
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x9c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x82}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4d1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000680)={{}, "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"})
r5 = pidfd_getfd(r1, r1, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r7 = syz_open_dev$mouse(&(0x7f0000001680), 0x3, 0x48080)
poll(&(0x7f0000001940)=[{r5, 0x2110}, {r3, 0x2000}, {r6, 0x18}, {r7, 0x8100}, {r2, 0x10}, {0xffffffffffffffff, 0x10a8}, {r2, 0x100}, {0xffffffffffffffff, 0x80}], 0x8, 0x1f)

21:47:19 executing program 5:
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000000)={<r0=>0x0, 0x6, 0x724, 0x1})
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$binfmt_aout(r1, &(0x7f0000000400)={{0x10b, 0x1, 0x4, 0x3e8, 0x12c, 0x40, 0xe9, 0x9}, "737a3144952653b03b8a7babac6777ef0db53bc4dfa823ccec064888ca3c3fed12e7b2512c1d4102675c70ebebebcd631c38a6b7e57065dca6bb72cce5fa4e2b2671a3503ff38ac3ead745a20937a6a25e694192d5f3c6a4bc8b2d66f022a09ed90e26ea3281d55c38748a30a9241d44dd9d84619d35dbef9c018c58e63d9859259e9d375d339b5953cf58f2e40d8496b8725fe368d08ca271eb5b173699ee61c7945991dcca6c7836c675f91d73d8142c72831e6bc034d94e9433a17fe7959d71e0523645594f4a4810e739", ['\x00', '\x00']}, 0x2ec)
statx(r1, &(0x7f0000000700)='./file0\x00', 0x400, 0x2, &(0x7f0000000740))
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000840)=""/31, 0x1f, 0x1)
r2 = openat(r1, &(0x7f0000000880)='./file0\x00', 0x200940, 0x20)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x13, 0x4, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a40)={0x1e4, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "85e0ef6fe6a5e740"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dd20f471086939f5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x400}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2bf3981a69aa174da22be89f4ec1a53e5c7928b09595b8d8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95ae651023a39eb1d5b34636ae9c76cd"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f4b28f527cefa2648211efa23a4027ccfe4c7cef3b2724df"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3cdcc7274b997e32"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a2d95ef2e83213c6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5b464178b197cce2574060a8347c2019"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="91613860821611910f35d2c071f9e706c6011f3a71375126"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2ebcf0cd29a7400f6abccdc72cf8e8139d0075f5ba8391ea"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f60226c4fa965d1b2f050cb3c3436ba11d2dc55626cb7635073109628ed79240"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b8f0f04266a659b6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0bdee1fbbdc56aba"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a9e54a27fa485b49ce32a3abc2bf5d4ae13de43f14a02177"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e129a352df107121f731f585562fa9549cdfe9bb23463b04044cbfa2f7fadf6a"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c20b7372f2c12155"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d2a27b14bac572d1aee8c3bd9178ed5c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="962cfb0b5d0ca93ed0454ca2799113aa"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffc}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fe5e2769aa91781c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d31e52c41fa69031"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "496f80517848ebcd"}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4040100}, 0x80)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r1)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000e00))
readahead(r2, 0x101, 0x5)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000e40)={{0x1, 0x1, 0x18, <r5=>r1, {0x51d}}, './file0\x00'})
sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x21a4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
futimesat(r1, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={{0x0, 0xea60}, {0x0, 0x2710}})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000001040)={{0x1, 0x1, 0x18, <r6=>r5, {0x8}}, './file0\x00'})
ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000001080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f00000012c0)={r0, 0x0, 0x87d, 0x1})

[   97.064795] audit: type=1400 audit(1737323239.425:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
21:47:19 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind(r0, &(0x7f0000000000)=@ieee802154={0x24, @short={0x2, 0x3}}, 0x80)
fchdir(r0)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000080))
bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x76, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffb, 0x1}, 0xe)
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0xe, 0x80000)
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
bind$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x2, @none, 0x5, 0x2}, 0xe)
mount_setattr(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x9900, &(0x7f0000000640)={0x81, 0xfc, 0xa0000}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r3=>r1, {0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r4=>r3, {<r5=>r2}}, './file0\x00'})
bind$bt_l2cap(r5, &(0x7f0000000700)={0x1f, 0x7fff, @any, 0x4000, 0x1}, 0xe)
llistxattr(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=""/201, 0xc9)
bind$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0xfff8, @none, 0xa6, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000008c0)=0x7fff, &(0x7f0000000900)=0x2)
rename(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0\x00')
getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f00000009c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000a00)=0x2c)
bind$bt_l2cap(r1, &(0x7f0000000a40)={0x1f, 0x5, @any, 0xfffe}, 0xe)
bind$bt_l2cap(r4, &(0x7f0000000a80)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)

21:47:19 executing program 7:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'ip_vti0\x00', <r1=>0x0, 0x70f, 0x7800, 0xdeb, 0x6, {{0x2f, 0x4, 0x0, 0x7, 0xbc, 0x66, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @broadcast, {[@generic={0x88, 0xe, "75436ec3e5aaf3708c9cf8bb"}, @timestamp_prespec={0x44, 0x34, 0xb0, 0x3, 0x7, [{@remote, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x9}, {@multicast1, 0x22a}, {@empty, 0x3ff}, {@private=0xa010100, 0xb54}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4}]}, @timestamp={0x44, 0x14, 0xb5, 0x0, 0x0, [0x7fffffff, 0x2, 0x8, 0x7]}, @timestamp_prespec={0x44, 0x34, 0x3e, 0x3, 0x7, [{@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x2, 0x0}, 0x5}, {@loopback, 0x80000000}, {@rand_addr=0x64010100, 0x7}, {@rand_addr=0x64010102, 0x60000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}]}, @cipso={0x86, 0x1b, 0x0, [{0x2, 0xd, "924504c494a231bcd29ac5"}, {0x7, 0x2}, {0x7, 0x6, "ded98c8c"}]}]}}}}})
connect(r0, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4880)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x380, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_WOL_MODES={0x280, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x184, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x481}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb63e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '-*#)-#*\'\'-[+)-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/full\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!%})\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '(}]+\xbf#&.\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "ec0df2886d35465f0c3a341d5d9f7f93dbd1a990a536041cd4a8a1b3822767d1859015088af526d182876311ce5052b06384bf3dc02b0ddc5ad65083ab0f7bf597c0d511e93e325112420451789853c25d2c8c2469d8d10b9e1716b8cba3a829bbce68941b1738c365ef7622211b8511989d2c4a0e7b9c87e99801441f20a1df29fcb845d3a482f2318a1d9aaaf7ad895a5f3e117631b0ea8de9387c219450138c786b4d498f856e9dfd8d9fb52cbbd18143d63fcdc02ca9058ef09f40c49f5befb0e1123b6ff07703eb675f2e9d5c4f56bfae1c3ba8732cb5fae02efa871d8261e9216c1e2dbb"}]}, @ETHTOOL_A_WOL_SOPASS={0xc4, 0x3, "036ebe1cb29ea44fc42d6a0c21fcd00e786a07d8b6b6b5e99c485d53b1a3ea9282608e0d54abf2ec0e36d4c820a24830c9c72ad6b0c1fdb03520bc7ff93bb8c33e5bc223673f0a082433684a0f5be39bfd68d69956416e842f6ea169a13dd855ab8ff740e533c150b58873cf31bae2bd1f83d3c9b7cb9634c71e47aee7a664c8d3783817aac4f211a40ab698ca7a63e0422da85b7708e095705e97b801fd3e222224760c7be5cbc50dbd19e809bf5763c860723b704a6b51e951c97353670907"}]}, 0x380}, 0x1, 0x0, 0x0, 0x44044}, 0x0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000099}, 0x4000011)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl0\x00', <r3=>r1, 0x2f, 0x60, 0x80, 0x10000, 0x10, @dev={0xfe, 0x80, '\x00', 0x30}, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x7, 0x7, 0x6}})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x6c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4600c010}, 0x48004)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r6, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x6d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x40880)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xe8, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x16}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ede06ad869197050a32625a1d78e44b1d3a15d87f894ae62"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c3d655095f7478c3db8cae0aff15edda2433252a77e0179c"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x2080}, 0x4000)
r7 = openat$incfs(r0, &(0x7f0000000f40)='.log\x00', 0x101000, 0x8)
ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000001000)={0x0, @can={0x1d, <r8=>r1}, @tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x4}}, 0xffe0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000fc0)='ipvlan0\x00', 0x6, 0x5, 0xa83d})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000001100)={'syztnl2\x00', &(0x7f0000001080)={'sit0\x00', <r9=>r3, 0x29, 0x20, 0x6, 0x6, 0x1e, @local, @mcast2, 0x7, 0x6, 0x2, 0x6cdd}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f00000011c0)={'sit0\x00', &(0x7f0000001140)={'ip6_vti0\x00', <r10=>r3, 0x29, 0xfd, 0x1, 0x5, 0x10, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x700, 0x7, 0x5}})
sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000001480)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001200)={0x224, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)

[   98.534721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   98.541119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   98.543323] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   98.558378] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   98.562606] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   98.565119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   98.579095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   98.580232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   98.581299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   98.583116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   98.584334] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   98.584757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   98.606430] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   98.608153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   98.615214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   98.615820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   98.616971] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   98.619619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   98.624311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   98.627280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   98.629230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   98.630958] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   98.631328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   98.634269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   98.665623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   98.704918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   98.716973] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   98.728273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   98.732291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   98.748269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   98.748282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   98.759038] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   98.787140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   98.787611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   98.794444] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   98.798106] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   98.800045] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   98.802169] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   98.805100] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   98.805628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   98.813213] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   98.817223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   98.825207] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   98.827497] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   98.830911] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   98.832519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   98.832757] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   98.836276] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  100.622085] Bluetooth: hci0: command tx timeout
[  100.622647] Bluetooth: hci1: command tx timeout
[  100.684851] Bluetooth: hci2: command tx timeout
[  100.685171] Bluetooth: hci3: command tx timeout
[  100.876823] Bluetooth: hci4: command tx timeout
[  100.879733] Bluetooth: hci7: command tx timeout
[  100.942759] Bluetooth: hci6: command tx timeout
[  100.943019] Bluetooth: hci5: command tx timeout
[  102.668785] Bluetooth: hci1: command tx timeout
[  102.669835] Bluetooth: hci0: command tx timeout
[  102.733757] Bluetooth: hci3: command tx timeout
[  102.733838] Bluetooth: hci2: command tx timeout
[  102.924933] Bluetooth: hci7: command tx timeout
[  102.925094] Bluetooth: hci4: command tx timeout
[  102.989845] Bluetooth: hci5: command tx timeout
[  102.990361] Bluetooth: hci6: command tx timeout
[  104.716827] Bluetooth: hci0: command tx timeout
[  104.717006] Bluetooth: hci1: command tx timeout
[  104.780886] Bluetooth: hci2: command tx timeout
[  104.780909] Bluetooth: hci3: command tx timeout
[  104.972853] Bluetooth: hci4: command tx timeout
[  104.972880] Bluetooth: hci7: command tx timeout
[  105.037161] Bluetooth: hci6: command tx timeout
[  105.037219] Bluetooth: hci5: command tx timeout
[  106.764875] Bluetooth: hci0: command tx timeout
[  106.766135] Bluetooth: hci1: command tx timeout
[  106.829784] Bluetooth: hci3: command tx timeout
[  106.829811] Bluetooth: hci2: command tx timeout
[  107.020762] Bluetooth: hci4: command tx timeout
[  107.020796] Bluetooth: hci7: command tx timeout
[  107.084785] Bluetooth: hci6: command tx timeout
[  107.084868] Bluetooth: hci5: command tx timeout
[  161.222917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  161.229146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  161.232027] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  161.244498] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  161.248177] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  161.255112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  161.256515] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  161.257983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  161.260297] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  161.261426] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  161.263596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  161.266146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  161.267906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  161.269060] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  161.274333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  161.276042] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  161.277570] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  161.278601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  161.280112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  161.285982] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  161.287485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  161.289400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  161.292030] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  161.293358] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  161.305472] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  161.309657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  161.322962] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  161.324004] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  161.331449] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  161.332085] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  161.333627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  161.336581] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  161.340517] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  161.345720] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  161.346560] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  161.348150] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  161.351179] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  161.351384] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  161.356445] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  161.360091] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  161.368998] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  161.369333] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  161.378919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  161.418167] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  161.419338] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  161.423599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  161.428776] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  161.429937] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  163.341032] Bluetooth: hci2: command tx timeout
[  163.341054] Bluetooth: hci3: command tx timeout
[  163.341425] Bluetooth: hci0: command tx timeout
[  163.405784] Bluetooth: hci1: command tx timeout
[  163.405838] Bluetooth: hci4: command tx timeout
[  163.468872] Bluetooth: hci7: command tx timeout
[  163.468897] Bluetooth: hci5: command tx timeout
[  163.532868] Bluetooth: hci6: command tx timeout
[  165.388877] Bluetooth: hci3: command tx timeout
[  165.389030] Bluetooth: hci0: command tx timeout
[  165.389183] Bluetooth: hci2: command tx timeout
[  165.452781] Bluetooth: hci1: command tx timeout
[  165.455730] Bluetooth: hci4: command tx timeout
[  165.516756] Bluetooth: hci5: command tx timeout
[  165.516814] Bluetooth: hci7: command tx timeout
[  165.580822] Bluetooth: hci6: command tx timeout
[  167.437946] Bluetooth: hci2: command tx timeout
[  167.438002] Bluetooth: hci0: command tx timeout
[  167.438188] Bluetooth: hci3: command tx timeout
[  167.500764] Bluetooth: hci4: command tx timeout
[  167.500790] Bluetooth: hci1: command tx timeout
[  167.564831] Bluetooth: hci7: command tx timeout
[  167.564851] Bluetooth: hci5: command tx timeout
[  167.630013] Bluetooth: hci6: command tx timeout
[  169.484910] Bluetooth: hci0: command tx timeout
[  169.485371] Bluetooth: hci3: command tx timeout
[  169.485456] Bluetooth: hci2: command tx timeout
[  169.548767] Bluetooth: hci1: command tx timeout
[  169.549997] Bluetooth: hci4: command tx timeout
[  169.612908] Bluetooth: hci7: command tx timeout
[  169.613984] Bluetooth: hci5: command tx timeout
[  169.678711] Bluetooth: hci6: command tx timeout
[  223.516823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  223.521138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  223.528874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  223.536340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  223.543220] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  223.545616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  223.579321] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  223.584277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  223.587298] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  223.596196] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  223.600747] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  223.607353] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  223.678018] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  223.681043] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  223.684215] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  223.691937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  223.696455] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  223.699089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  223.877825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  223.882227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  223.887910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  223.908385] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  223.910446] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  223.943567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  223.946119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  223.949538] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  223.950959] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  223.951877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  223.954348] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  223.957104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  223.965794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  223.976277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  223.977033] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  223.987181] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  223.989614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  223.992052] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  223.993353] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  223.993879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  223.999489] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  224.039029] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  224.046525] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  224.050609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  224.117548] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  224.143804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  224.178307] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  224.200892] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  224.214953] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  224.224266] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  225.614915] Bluetooth: hci0: command tx timeout
[  225.676862] Bluetooth: hci1: command tx timeout
[  225.870891] Bluetooth: hci2: command tx timeout
[  226.061210] Bluetooth: hci4: command tx timeout
[  226.061477] Bluetooth: hci3: command tx timeout
[  226.125813] Bluetooth: hci5: command tx timeout
[  226.316880] Bluetooth: hci7: command tx timeout
[  226.382012] Bluetooth: hci6: command tx timeout
[  227.660798] Bluetooth: hci0: command tx timeout
[  227.726423] Bluetooth: hci1: command tx timeout
[  227.916848] Bluetooth: hci2: command tx timeout
[  228.110415] Bluetooth: hci4: command tx timeout
[  228.110963] Bluetooth: hci3: command tx timeout
[  228.173828] Bluetooth: hci5: command tx timeout
[  228.365887] Bluetooth: hci7: command tx timeout
[  228.430739] Bluetooth: hci6: command tx timeout
[  229.710705] Bluetooth: hci0: command tx timeout
[  229.772760] Bluetooth: hci1: command tx timeout
[  229.965762] Bluetooth: hci2: command tx timeout
[  230.157884] Bluetooth: hci3: command tx timeout
[  230.157924] Bluetooth: hci4: command tx timeout
[  230.220808] Bluetooth: hci5: command tx timeout
[  230.413365] Bluetooth: hci7: command tx timeout
[  230.477763] Bluetooth: hci6: command tx timeout
[  231.756785] Bluetooth: hci0: command tx timeout
[  231.820962] Bluetooth: hci1: command tx timeout
[  232.012846] Bluetooth: hci2: command tx timeout
[  232.204793] Bluetooth: hci3: command tx timeout
[  232.206034] Bluetooth: hci4: command tx timeout
[  232.270805] Bluetooth: hci5: command tx timeout
[  232.460817] Bluetooth: hci7: command tx timeout
[  232.526774] Bluetooth: hci6: command tx timeout
[  285.596211] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  285.598814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  285.603994] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  285.630843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  285.638561] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  285.643819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  285.917146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  285.920166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  285.922394] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  285.929245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  285.933488] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  285.938332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  285.980547] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  285.986192] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  285.990146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  285.998002] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  286.001210] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  286.004134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  286.074544] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  286.082008] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  286.085350] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  286.111960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  286.126956] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  286.128082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  286.141230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  286.143544] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  286.148415] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  286.157286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  286.167139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  286.174172] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  286.176469] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  286.197069] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  286.213090] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  286.215072] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  286.217387] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  286.224050] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  286.232200] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  286.234369] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  286.236194] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  286.242032] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  286.272624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  286.276341] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  286.278815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  286.289124] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  286.293444] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  286.304168] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  286.311906] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  286.328848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  287.693826] Bluetooth: hci0: command tx timeout
[  288.012794] Bluetooth: hci1: command tx timeout
[  288.078764] Bluetooth: hci2: command tx timeout
[  288.204803] Bluetooth: hci3: command tx timeout
[  288.332790] Bluetooth: hci4: command tx timeout
[  288.397088] Bluetooth: hci5: command tx timeout
[  288.398003] Bluetooth: hci6: command tx timeout
[  288.460802] Bluetooth: hci7: command tx timeout
[  289.741017] Bluetooth: hci0: command tx timeout
[  290.060902] Bluetooth: hci1: command tx timeout
[  290.125810] Bluetooth: hci2: command tx timeout
[  290.252743] Bluetooth: hci3: command tx timeout
[  290.381671] Bluetooth: hci4: command tx timeout
[  290.444788] Bluetooth: hci5: command tx timeout
[  290.445729] Bluetooth: hci6: command tx timeout
[  290.508703] Bluetooth: hci7: command tx timeout
[  291.788696] Bluetooth: hci0: command tx timeout
[  292.109086] Bluetooth: hci1: command tx timeout
[  292.173879] Bluetooth: hci2: command tx timeout
[  292.301504] Bluetooth: hci3: command tx timeout
[  292.429073] Bluetooth: hci4: command tx timeout
[  292.493175] Bluetooth: hci6: command tx timeout
[  292.493359] Bluetooth: hci5: command tx timeout
[  292.557736] Bluetooth: hci7: command tx timeout
[  293.836810] Bluetooth: hci0: command tx timeout
[  294.159665] Bluetooth: hci1: command tx timeout
[  294.220940] Bluetooth: hci2: command tx timeout
[  294.349745] Bluetooth: hci3: command tx timeout
[  294.476864] Bluetooth: hci4: command tx timeout
[  294.540722] Bluetooth: hci5: command tx timeout
[  294.540820] Bluetooth: hci6: command tx timeout
[  294.604881] Bluetooth: hci7: command tx timeout
[  346.225997] 
[  346.226252] ======================================================
[  346.226859] WARNING: possible circular locking dependency detected
[  346.227455] 6.13.0-rc7-next-20250117 #1 Not tainted
[  346.227954] ------------------------------------------------------
[  346.228841] kworker/u8:1/65 is trying to acquire lock:
[  346.235140] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[  346.237396] 
[  346.237396] but task is already holding lock:
[  346.238658] ffff888034a88768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  346.240841] 
[  346.240841] which lock already depends on the new lock.
[  346.240841] 
[  346.242550] 
[  346.242550] the existing dependency chain (in reverse order) is:
[  346.244118] 
[  346.244118] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  346.245597]        __mutex_lock+0x13d/0xb50
[  346.246623]        wiphy_register+0x1b2e/0x25d0
[  346.247720]        ieee80211_register_hw+0x23a4/0x3d60
[  346.248974]        mac80211_hwsim_new_radio+0x2759/0x4d50
[  346.250370]        init_mac80211_hwsim+0x389/0x870
[  346.251636]        do_one_initcall+0xf9/0x640
[  346.252822]        kernel_init_freeable+0x53d/0x7a0
[  346.254129]        kernel_init+0x1e/0x2d0
[  346.255176]        ret_from_fork+0x48/0x80
[  346.256270]        ret_from_fork_asm+0x1a/0x30
[  346.257479] 
[  346.257479] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  346.258980]        __lock_acquire+0x29fd/0x4580
[  346.260161]        lock_acquire+0x19b/0x520
[  346.261254]        __mutex_lock+0x13d/0xb50
[  346.262371]        unregister_netdevice_many_notify+0x1612/0x1c80
[  346.263873]        unregister_netdevice_queue+0x224/0x2e0
[  346.265259]        _cfg80211_unregister_wdev+0x57b/0x700
[  346.266610]        ieee80211_remove_interfaces+0x2f2/0x6b0
[  346.267942]        ieee80211_unregister_hw+0x55/0x3a0
[  346.269236]        hwsim_exit_net+0x3a0/0x730
[  346.270362]        ops_exit_list+0xb3/0x180
[  346.271432]        cleanup_net+0x546/0xad0
[  346.272504]        process_one_work+0x8ee/0x1a10
[  346.273733]        worker_thread+0x674/0xe70
[  346.274875]        kthread+0x3ab/0x720
[  346.275886]        ret_from_fork+0x48/0x80
[  346.276952]        ret_from_fork_asm+0x1a/0x30
[  346.278133] 
[  346.278133] other info that might help us debug this:
[  346.278133] 
[  346.279921]  Possible unsafe locking scenario:
[  346.279921] 
[  346.281312]        CPU0                    CPU1
[  346.282394]        ----                    ----
[  346.283468]   lock(&rdev->wiphy.mtx);
[  346.284454]                                lock(rtnl_mutex);
[  346.285869]                                lock(&rdev->wiphy.mtx);
[  346.287357]   lock(rtnl_mutex);
[  346.288220] 
[  346.288220]  *** DEADLOCK ***
[  346.288220] 
[  346.289614] 4 locks held by kworker/u8:1/65:
[  346.290687]  #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[  346.293189]  #1: ffff88800bc3fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[  346.295531]  #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[  346.297309]  #3: ffff888034a88768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  346.298937] 
[  346.298937] stack backtrace:
[  346.299632] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1
[  346.300780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  346.301550] Workqueue: netns cleanup_net
[  346.301973] Call Trace:
[  346.302228]  <TASK>
[  346.302454]  dump_stack_lvl+0xca/0x120
[  346.302867]  print_circular_bug+0x47b/0x750
[  346.303310]  check_noncircular+0x2e9/0x3c0
[  346.303741]  ? __pfx_check_noncircular+0x10/0x10
[  346.304222]  ? hlock_class+0x4e/0x130
[  346.304602]  ? srso_return_thunk+0x5/0x5f
[  346.305038]  ? mark_lock+0xac/0xed0
[  346.305414]  ? lockdep_lock+0xba/0x1b0
[  346.305832]  ? __pfx_lockdep_lock+0x10/0x10
[  346.306289]  __lock_acquire+0x29fd/0x4580
[  346.306722]  ? __pfx___lock_acquire+0x10/0x10
[  346.307175]  ? lock_release+0x20f/0x6f0
[  346.307586]  ? __pfx_lock_release+0x10/0x10
[  346.308030]  ? srso_return_thunk+0x5/0x5f
[  346.308472]  lock_acquire+0x19b/0x520
[  346.308868]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  346.309447]  ? __pfx_lock_acquire+0x10/0x10
[  346.309878]  ? __pfx_lock_release+0x10/0x10
[  346.310308]  ? __pfx_try_to_wake_up+0x10/0x10
[  346.310756]  ? srso_return_thunk+0x5/0x5f
[  346.311191]  ? lock_is_held_type+0x9e/0x120
[  346.311652]  ? srso_return_thunk+0x5/0x5f
[  346.312098]  __mutex_lock+0x13d/0xb50
[  346.312499]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  346.313074]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  346.313653]  ? srso_return_thunk+0x5/0x5f
[  346.314087]  ? synchronize_rcu_expedited+0x38a/0x420
[  346.314594]  ? __pfx___mutex_lock+0x10/0x10
[  346.315043]  ? srso_return_thunk+0x5/0x5f
[  346.315476]  ? srso_return_thunk+0x5/0x5f
[  346.315910]  ? kasan_quarantine_put+0x84/0x1e0
[  346.316412]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  346.316863]  ? srso_return_thunk+0x5/0x5f
[  346.317302]  unregister_netdevice_many_notify+0x1612/0x1c80
[  346.317860]  ? __virt_addr_valid+0x2e8/0x5d0
[  346.318320]  ? __pfx_lock_release+0x10/0x10
[  346.318754]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  346.319338]  ? find_held_lock+0x2c/0x110
[  346.319764]  ? srso_return_thunk+0x5/0x5f
[  346.320202]  ? kernfs_remove_by_name_ns+0xc7/0x130
[  346.320700]  ? srso_return_thunk+0x5/0x5f
[  346.321131]  ? lock_release+0x20f/0x6f0
[  346.321533]  ? __pfx_lock_release+0x10/0x10
[  346.321970]  ? srso_return_thunk+0x5/0x5f
[  346.322403]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  346.322929]  ? srso_return_thunk+0x5/0x5f
[  346.323368]  unregister_netdevice_queue+0x224/0x2e0
[  346.323864]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  346.324411]  ? up_write+0x195/0x520
[  346.324798]  _cfg80211_unregister_wdev+0x57b/0x700
[  346.325292]  ? srso_return_thunk+0x5/0x5f
[  346.325730]  ieee80211_remove_interfaces+0x2f2/0x6b0
[  346.326226]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  346.326769]  ? srso_return_thunk+0x5/0x5f
[  346.327226]  ? srso_return_thunk+0x5/0x5f
[  346.327673]  ? synchronize_rcu+0x1ff/0x260
[  346.328126]  ieee80211_unregister_hw+0x55/0x3a0
[  346.328613]  hwsim_exit_net+0x3a0/0x730
[  346.329023]  ? __pfx_hwsim_exit_net+0x10/0x10
[  346.329477]  ? srso_return_thunk+0x5/0x5f
[  346.329909]  ? netdev_run_todo+0x788/0x1040
[  346.330352]  ? srso_return_thunk+0x5/0x5f
[  346.330787]  ? __pfx_hwsim_exit_net+0x10/0x10
[  346.331248]  ops_exit_list+0xb3/0x180
[  346.331643]  cleanup_net+0x546/0xad0
[  346.332041]  ? __pfx_cleanup_net+0x10/0x10
[  346.332474]  process_one_work+0x8ee/0x1a10
[  346.332928]  ? __pfx_lock_acquire+0x10/0x10
[  346.333366]  ? __pfx_process_one_work+0x10/0x10
[  346.333854]  ? srso_return_thunk+0x5/0x5f
[  346.334289]  ? move_linked_works+0x172/0x270
[  346.334738]  ? srso_return_thunk+0x5/0x5f
[  346.335171]  ? assign_work+0x196/0x240
[  346.335586]  worker_thread+0x674/0xe70
[  346.336013]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  346.336543]  ? srso_return_thunk+0x5/0x5f
[  346.336975]  ? __pfx_worker_thread+0x10/0x10
[  346.337455]  kthread+0x3ab/0x720
[  346.337830]  ? __pfx_kthread+0x10/0x10
[  346.338238]  ? srso_return_thunk+0x5/0x5f
[  346.338669]  ? finish_task_switch.isra.0+0x206/0x840
[  346.339177]  ? __pfx_kthread+0x10/0x10
[  346.339600]  ret_from_fork+0x48/0x80
[  346.339984]  ? __pfx_kthread+0x10/0x10
[  346.340395]  ret_from_fork_asm+0x1a/0x30
[  346.340838]  </TASK>
[  347.926728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  347.932496] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  347.936536] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  347.940018] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  347.943185] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  347.945894] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  348.187472] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  348.192076] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  348.194396] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  348.199089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  348.202102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  348.204749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  348.436959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  348.439491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  348.441885] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  348.446108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  348.449320] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  348.454850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  348.477041] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  348.481008] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  348.484935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  348.506232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  348.509819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  348.511647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  348.511848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  348.515922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  348.519713] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  348.520006] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  348.524232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  348.524530] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  348.532014] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  348.543905] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  348.548790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  348.548988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  348.559193] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  348.561244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  348.569580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  348.574399] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  348.578926] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  348.584255] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  348.592887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  348.594821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  348.601677] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  348.601948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  348.605886] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  348.617969] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  348.648823] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  348.649161] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  349.964678] Bluetooth: hci0: command tx timeout
[  350.220660] Bluetooth: hci1: command tx timeout
[  350.477701] Bluetooth: hci3: command tx timeout
[  350.604731] Bluetooth: hci2: command tx timeout
[  350.670730] Bluetooth: hci5: command tx timeout
[  350.671302] Bluetooth: hci6: command tx timeout
[  350.671323] Bluetooth: hci4: command tx timeout
[  350.733723] Bluetooth: hci7: command tx timeout
[  352.013726] Bluetooth: hci0: command tx timeout
[  352.270593] Bluetooth: hci1: command tx timeout
[  352.524868] Bluetooth: hci3: command tx timeout
[  352.652758] Bluetooth: hci2: command tx timeout
[  352.717273] Bluetooth: hci6: command tx timeout
[  352.717347] Bluetooth: hci4: command tx timeout
[  352.717418] Bluetooth: hci5: command tx timeout
[  352.782644] Bluetooth: hci7: command tx timeout
[  354.060760] Bluetooth: hci0: command tx timeout
[  354.316769] Bluetooth: hci1: command tx timeout
[  354.573678] Bluetooth: hci3: command tx timeout
[  354.700885] Bluetooth: hci2: command tx timeout
[  354.764748] Bluetooth: hci5: command tx timeout
[  354.765395] Bluetooth: hci4: command tx timeout
[  354.766055] Bluetooth: hci6: command tx timeout
[  354.830671] Bluetooth: hci7: command tx timeout
[  356.110319] Bluetooth: hci0: command tx timeout

VM DIAGNOSIS:
21:51:28  Registers:
info registers vcpu 0
RAX=000000000005c9ad RBX=0000000000000000 RCX=ffffffff84a8bb27 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814b1b6a RBP=dffffc0000000000 RSP=ffffffff85a07e10
R8 =0000000000000001 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=0000000000000001
R12=ffffffff864021d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84a8cace RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffebf657000 CR3=000000000e980000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000004174352c00000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800bc3ebb8
R8 =0000000000000001 R9 =ffffed1001787d67 R10=000000000000006f R11=2f72656b726f776b
R12=000000000000006f R13=0000000000000001 R14=ffff888008fea02b R15=ffff88800bc3eeb8
RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbbd7e77618 CR3=000000000e980000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=000000c00030a180000000c000080280
XMM04=000000c000146090000000c000146060 XMM05=000000c0001460f0000000c0001460c0
XMM06=000000c000146150000000c000146120 XMM07=000000c000145760000000c0000874d0
XMM08=000000c0001464b0000000c000146480 XMM09=000000c000146510000000c0001464e0
XMM10=000000c000146540000000c000087530 XMM11=000000c0001465a0000000c000146570
XMM12=000000c000146600000000c0001465d0 XMM13=000000c000146660000000c000146630
XMM14=000000c0001466c0000000c000146690 XMM15=000000c0000e7080000000c0001466f0