Warning: Permanently added '[localhost]:46229' (ECDSA) to the list of known hosts.
2024/11/07 06:14:46 fuzzer started
2024/11/07 06:14:47 dialing manager at localhost:46317
syzkaller login: [   76.769506] cgroup: Unknown subsys name 'net'
[   76.927766] cgroup: Unknown subsys name 'cpuset'
[   77.013054] cgroup: Unknown subsys name 'rlimit'
2024/11/07 06:15:04 syscalls: 2217
2024/11/07 06:15:04 code coverage: enabled
2024/11/07 06:15:04 comparison tracing: enabled
2024/11/07 06:15:04 extra coverage: enabled
2024/11/07 06:15:04 setuid sandbox: enabled
2024/11/07 06:15:04 namespace sandbox: enabled
2024/11/07 06:15:04 Android sandbox: enabled
2024/11/07 06:15:04 fault injection: enabled
2024/11/07 06:15:04 leak checking: enabled
2024/11/07 06:15:04 net packet injection: enabled
2024/11/07 06:15:04 net device setup: enabled
2024/11/07 06:15:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/07 06:15:04 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/07 06:15:04 USB emulation: enabled
2024/11/07 06:15:04 hci packet injection: enabled
2024/11/07 06:15:04 wifi device emulation: enabled
2024/11/07 06:15:04 802.15.4 emulation: enabled
2024/11/07 06:15:04 fetching corpus: 50, signal 25029/26780 (executing program)
2024/11/07 06:15:04 fetching corpus: 100, signal 35787/39060 (executing program)
2024/11/07 06:15:04 fetching corpus: 150, signal 44640/49299 (executing program)
2024/11/07 06:15:04 fetching corpus: 200, signal 50397/56405 (executing program)
2024/11/07 06:15:04 fetching corpus: 250, signal 53733/61081 (executing program)
2024/11/07 06:15:05 fetching corpus: 300, signal 60032/68469 (executing program)
2024/11/07 06:15:05 fetching corpus: 350, signal 63797/73371 (executing program)
2024/11/07 06:15:06 fetching corpus: 400, signal 67006/77692 (executing program)
2024/11/07 06:15:06 fetching corpus: 450, signal 69730/81524 (executing program)
2024/11/07 06:15:06 fetching corpus: 500, signal 75020/87648 (executing program)
2024/11/07 06:15:07 fetching corpus: 550, signal 78169/91741 (executing program)
2024/11/07 06:15:07 fetching corpus: 600, signal 81489/95843 (executing program)
2024/11/07 06:15:08 fetching corpus: 650, signal 84025/99256 (executing program)
2024/11/07 06:15:08 fetching corpus: 700, signal 87090/103037 (executing program)
2024/11/07 06:15:09 fetching corpus: 750, signal 88926/105724 (executing program)
2024/11/07 06:15:09 fetching corpus: 800, signal 90671/108371 (executing program)
2024/11/07 06:15:09 fetching corpus: 850, signal 92395/110950 (executing program)
2024/11/07 06:15:10 fetching corpus: 900, signal 95147/114286 (executing program)
2024/11/07 06:15:10 fetching corpus: 950, signal 96719/116635 (executing program)
2024/11/07 06:15:11 fetching corpus: 1000, signal 98355/119021 (executing program)
2024/11/07 06:15:11 fetching corpus: 1050, signal 99284/120750 (executing program)
2024/11/07 06:15:11 fetching corpus: 1100, signal 100447/122644 (executing program)
2024/11/07 06:15:12 fetching corpus: 1150, signal 101714/124619 (executing program)
2024/11/07 06:15:12 fetching corpus: 1200, signal 103830/127214 (executing program)
2024/11/07 06:15:12 fetching corpus: 1250, signal 104898/128980 (executing program)
2024/11/07 06:15:12 fetching corpus: 1300, signal 106775/131374 (executing program)
2024/11/07 06:15:13 fetching corpus: 1350, signal 108060/133248 (executing program)
2024/11/07 06:15:13 fetching corpus: 1400, signal 109176/135013 (executing program)
2024/11/07 06:15:13 fetching corpus: 1450, signal 110526/136916 (executing program)
2024/11/07 06:15:13 fetching corpus: 1500, signal 112229/139058 (executing program)
2024/11/07 06:15:14 fetching corpus: 1550, signal 112671/140268 (executing program)
2024/11/07 06:15:14 fetching corpus: 1600, signal 113559/141752 (executing program)
2024/11/07 06:15:14 fetching corpus: 1650, signal 114579/143356 (executing program)
2024/11/07 06:15:15 fetching corpus: 1700, signal 115840/145062 (executing program)
2024/11/07 06:15:15 fetching corpus: 1750, signal 117111/146772 (executing program)
2024/11/07 06:15:15 fetching corpus: 1800, signal 117825/148111 (executing program)
2024/11/07 06:15:15 fetching corpus: 1850, signal 118714/149515 (executing program)
2024/11/07 06:15:15 fetching corpus: 1900, signal 119929/151062 (executing program)
2024/11/07 06:15:16 fetching corpus: 1950, signal 120964/152521 (executing program)
2024/11/07 06:15:16 fetching corpus: 2000, signal 121848/153861 (executing program)
2024/11/07 06:15:16 fetching corpus: 2050, signal 122577/155064 (executing program)
2024/11/07 06:15:16 fetching corpus: 2100, signal 124668/157162 (executing program)
2024/11/07 06:15:17 fetching corpus: 2150, signal 125722/158544 (executing program)
2024/11/07 06:15:17 fetching corpus: 2200, signal 126358/159689 (executing program)
2024/11/07 06:15:17 fetching corpus: 2250, signal 127205/160938 (executing program)
2024/11/07 06:15:18 fetching corpus: 2300, signal 127819/162024 (executing program)
2024/11/07 06:15:18 fetching corpus: 2350, signal 128435/163127 (executing program)
2024/11/07 06:15:18 fetching corpus: 2400, signal 128966/164146 (executing program)
2024/11/07 06:15:19 fetching corpus: 2450, signal 129959/165405 (executing program)
2024/11/07 06:15:19 fetching corpus: 2500, signal 130606/166431 (executing program)
2024/11/07 06:15:19 fetching corpus: 2550, signal 131228/167462 (executing program)
2024/11/07 06:15:19 fetching corpus: 2600, signal 132016/168551 (executing program)
2024/11/07 06:15:19 fetching corpus: 2650, signal 133208/169842 (executing program)
2024/11/07 06:15:20 fetching corpus: 2700, signal 133782/170742 (executing program)
2024/11/07 06:15:20 fetching corpus: 2750, signal 134545/171783 (executing program)
2024/11/07 06:15:20 fetching corpus: 2800, signal 135351/172804 (executing program)
2024/11/07 06:15:21 fetching corpus: 2850, signal 135911/173707 (executing program)
2024/11/07 06:15:21 fetching corpus: 2900, signal 136638/174676 (executing program)
2024/11/07 06:15:21 fetching corpus: 2950, signal 137324/175588 (executing program)
2024/11/07 06:15:22 fetching corpus: 3000, signal 137841/176439 (executing program)
2024/11/07 06:15:22 fetching corpus: 3050, signal 138593/177391 (executing program)
2024/11/07 06:15:22 fetching corpus: 3100, signal 139392/178320 (executing program)
2024/11/07 06:15:22 fetching corpus: 3150, signal 139722/179085 (executing program)
2024/11/07 06:15:23 fetching corpus: 3200, signal 140171/179881 (executing program)
2024/11/07 06:15:23 fetching corpus: 3250, signal 140831/180745 (executing program)
2024/11/07 06:15:24 fetching corpus: 3300, signal 141421/181546 (executing program)
2024/11/07 06:15:24 fetching corpus: 3350, signal 142157/182443 (executing program)
2024/11/07 06:15:25 fetching corpus: 3400, signal 142599/183167 (executing program)
2024/11/07 06:15:25 fetching corpus: 3450, signal 143013/183874 (executing program)
2024/11/07 06:15:25 fetching corpus: 3500, signal 143429/184548 (executing program)
2024/11/07 06:15:25 fetching corpus: 3550, signal 143807/185239 (executing program)
2024/11/07 06:15:26 fetching corpus: 3600, signal 144202/185991 (executing program)
2024/11/07 06:15:26 fetching corpus: 3650, signal 144698/186709 (executing program)
2024/11/07 06:15:26 fetching corpus: 3700, signal 145272/187434 (executing program)
2024/11/07 06:15:27 fetching corpus: 3750, signal 145894/188155 (executing program)
2024/11/07 06:15:27 fetching corpus: 3800, signal 146421/188847 (executing program)
2024/11/07 06:15:27 fetching corpus: 3850, signal 147449/189635 (executing program)
2024/11/07 06:15:28 fetching corpus: 3900, signal 147990/190311 (executing program)
2024/11/07 06:15:28 fetching corpus: 3950, signal 148600/190950 (executing program)
2024/11/07 06:15:28 fetching corpus: 4000, signal 149078/191587 (executing program)
2024/11/07 06:15:28 fetching corpus: 4050, signal 149673/192255 (executing program)
2024/11/07 06:15:28 fetching corpus: 4100, signal 150428/192921 (executing program)
2024/11/07 06:15:29 fetching corpus: 4150, signal 151167/193577 (executing program)
2024/11/07 06:15:29 fetching corpus: 4200, signal 151722/194224 (executing program)
2024/11/07 06:15:29 fetching corpus: 4250, signal 152136/194805 (executing program)
2024/11/07 06:15:29 fetching corpus: 4300, signal 152614/195395 (executing program)
2024/11/07 06:15:30 fetching corpus: 4350, signal 153032/195950 (executing program)
2024/11/07 06:15:30 fetching corpus: 4400, signal 153517/196500 (executing program)
2024/11/07 06:15:31 fetching corpus: 4450, signal 154001/197064 (executing program)
2024/11/07 06:15:31 fetching corpus: 4500, signal 154644/197616 (executing program)
2024/11/07 06:15:31 fetching corpus: 4550, signal 154932/198120 (executing program)
2024/11/07 06:15:32 fetching corpus: 4600, signal 155348/198614 (executing program)
2024/11/07 06:15:32 fetching corpus: 4650, signal 155709/199097 (executing program)
2024/11/07 06:15:33 fetching corpus: 4700, signal 155902/199604 (executing program)
2024/11/07 06:15:33 fetching corpus: 4750, signal 156343/200114 (executing program)
2024/11/07 06:15:33 fetching corpus: 4800, signal 156686/200617 (executing program)
2024/11/07 06:15:34 fetching corpus: 4850, signal 157155/201108 (executing program)
2024/11/07 06:15:34 fetching corpus: 4900, signal 157490/201588 (executing program)
2024/11/07 06:15:34 fetching corpus: 4950, signal 157875/202041 (executing program)
2024/11/07 06:15:35 fetching corpus: 5000, signal 158311/202501 (executing program)
2024/11/07 06:15:35 fetching corpus: 5050, signal 158903/202951 (executing program)
2024/11/07 06:15:35 fetching corpus: 5100, signal 159349/203207 (executing program)
2024/11/07 06:15:36 fetching corpus: 5150, signal 159702/203207 (executing program)
2024/11/07 06:15:36 fetching corpus: 5200, signal 160040/203207 (executing program)
2024/11/07 06:15:36 fetching corpus: 5250, signal 160298/203207 (executing program)
2024/11/07 06:15:36 fetching corpus: 5300, signal 160659/203207 (executing program)
2024/11/07 06:15:37 fetching corpus: 5350, signal 161062/203207 (executing program)
2024/11/07 06:15:37 fetching corpus: 5400, signal 161409/203207 (executing program)
2024/11/07 06:15:37 fetching corpus: 5450, signal 161809/203208 (executing program)
2024/11/07 06:15:37 fetching corpus: 5500, signal 162115/203208 (executing program)
2024/11/07 06:15:37 fetching corpus: 5550, signal 162423/203215 (executing program)
2024/11/07 06:15:37 fetching corpus: 5600, signal 162659/203215 (executing program)
2024/11/07 06:15:37 fetching corpus: 5650, signal 162962/203215 (executing program)
2024/11/07 06:15:38 fetching corpus: 5700, signal 163381/203215 (executing program)
2024/11/07 06:15:38 fetching corpus: 5750, signal 163712/203215 (executing program)
2024/11/07 06:15:38 fetching corpus: 5800, signal 164183/203215 (executing program)
2024/11/07 06:15:39 fetching corpus: 5850, signal 164524/203216 (executing program)
2024/11/07 06:15:39 fetching corpus: 5900, signal 164779/203224 (executing program)
2024/11/07 06:15:39 fetching corpus: 5950, signal 165091/203224 (executing program)
2024/11/07 06:15:40 fetching corpus: 6000, signal 165426/203224 (executing program)
2024/11/07 06:15:40 fetching corpus: 6050, signal 165760/203224 (executing program)
2024/11/07 06:15:41 fetching corpus: 6100, signal 166040/203224 (executing program)
2024/11/07 06:15:41 fetching corpus: 6150, signal 166541/203224 (executing program)
2024/11/07 06:15:41 fetching corpus: 6200, signal 166789/203224 (executing program)
2024/11/07 06:15:42 fetching corpus: 6250, signal 167143/203224 (executing program)
2024/11/07 06:15:42 fetching corpus: 6300, signal 167410/203224 (executing program)
2024/11/07 06:15:42 fetching corpus: 6350, signal 167687/203224 (executing program)
2024/11/07 06:15:43 fetching corpus: 6400, signal 167960/203224 (executing program)
2024/11/07 06:15:43 fetching corpus: 6450, signal 168383/203224 (executing program)
2024/11/07 06:15:44 fetching corpus: 6500, signal 168819/203224 (executing program)
2024/11/07 06:15:44 fetching corpus: 6550, signal 169244/203224 (executing program)
2024/11/07 06:15:44 fetching corpus: 6600, signal 169579/203224 (executing program)
2024/11/07 06:15:44 fetching corpus: 6650, signal 169755/203224 (executing program)
2024/11/07 06:15:44 fetching corpus: 6700, signal 170219/203224 (executing program)
2024/11/07 06:15:44 fetching corpus: 6750, signal 170495/203224 (executing program)
2024/11/07 06:15:44 fetching corpus: 6800, signal 170779/203228 (executing program)
2024/11/07 06:15:44 fetching corpus: 6850, signal 171142/203228 (executing program)
2024/11/07 06:15:45 fetching corpus: 6900, signal 171347/203228 (executing program)
2024/11/07 06:15:45 fetching corpus: 6950, signal 171727/203233 (executing program)
2024/11/07 06:15:45 fetching corpus: 7000, signal 172022/203233 (executing program)
2024/11/07 06:15:45 fetching corpus: 7050, signal 172266/203234 (executing program)
2024/11/07 06:15:46 fetching corpus: 7100, signal 172545/203234 (executing program)
2024/11/07 06:15:46 fetching corpus: 7150, signal 172975/203234 (executing program)
2024/11/07 06:15:46 fetching corpus: 7200, signal 173170/203234 (executing program)
2024/11/07 06:15:47 fetching corpus: 7250, signal 173542/203234 (executing program)
2024/11/07 06:15:47 fetching corpus: 7300, signal 173719/203234 (executing program)
2024/11/07 06:15:47 fetching corpus: 7350, signal 173998/203234 (executing program)
2024/11/07 06:15:47 fetching corpus: 7400, signal 174146/203234 (executing program)
2024/11/07 06:15:47 fetching corpus: 7450, signal 174465/203234 (executing program)
2024/11/07 06:15:47 fetching corpus: 7500, signal 174646/203234 (executing program)
2024/11/07 06:15:48 fetching corpus: 7550, signal 174913/203234 (executing program)
2024/11/07 06:15:48 fetching corpus: 7600, signal 175294/203234 (executing program)
2024/11/07 06:15:48 fetching corpus: 7650, signal 175530/203234 (executing program)
2024/11/07 06:15:48 fetching corpus: 7700, signal 175994/203234 (executing program)
2024/11/07 06:15:48 fetching corpus: 7750, signal 176283/203234 (executing program)
2024/11/07 06:15:48 fetching corpus: 7800, signal 176586/203234 (executing program)
2024/11/07 06:15:49 fetching corpus: 7850, signal 176776/203234 (executing program)
2024/11/07 06:15:49 fetching corpus: 7900, signal 177140/203234 (executing program)
2024/11/07 06:15:50 fetching corpus: 7950, signal 177433/203234 (executing program)
2024/11/07 06:15:50 fetching corpus: 8000, signal 177711/203234 (executing program)
2024/11/07 06:15:50 fetching corpus: 8050, signal 177924/203234 (executing program)
2024/11/07 06:15:51 fetching corpus: 8100, signal 178134/203234 (executing program)
2024/11/07 06:15:51 fetching corpus: 8150, signal 178374/203234 (executing program)
2024/11/07 06:15:51 fetching corpus: 8200, signal 178627/203234 (executing program)
2024/11/07 06:15:52 fetching corpus: 8250, signal 178843/203234 (executing program)
2024/11/07 06:15:52 fetching corpus: 8300, signal 179013/203234 (executing program)
2024/11/07 06:15:52 fetching corpus: 8350, signal 179296/203234 (executing program)
2024/11/07 06:15:52 fetching corpus: 8400, signal 179509/203234 (executing program)
2024/11/07 06:15:53 fetching corpus: 8450, signal 179746/203234 (executing program)
2024/11/07 06:15:53 fetching corpus: 8500, signal 179994/203239 (executing program)
2024/11/07 06:15:54 fetching corpus: 8550, signal 180265/203239 (executing program)
2024/11/07 06:15:54 fetching corpus: 8600, signal 180908/203239 (executing program)
2024/11/07 06:15:55 fetching corpus: 8650, signal 181147/203239 (executing program)
2024/11/07 06:15:55 fetching corpus: 8700, signal 181499/203239 (executing program)
2024/11/07 06:15:55 fetching corpus: 8750, signal 181677/203239 (executing program)
2024/11/07 06:15:56 fetching corpus: 8800, signal 182114/203239 (executing program)
2024/11/07 06:15:56 fetching corpus: 8850, signal 182296/203239 (executing program)
2024/11/07 06:15:56 fetching corpus: 8900, signal 182506/203242 (executing program)
2024/11/07 06:15:57 fetching corpus: 8950, signal 182725/203242 (executing program)
2024/11/07 06:15:57 fetching corpus: 9000, signal 182929/203242 (executing program)
2024/11/07 06:15:57 fetching corpus: 9050, signal 183084/203242 (executing program)
2024/11/07 06:15:57 fetching corpus: 9100, signal 183393/203242 (executing program)
2024/11/07 06:15:57 fetching corpus: 9150, signal 183732/203242 (executing program)
2024/11/07 06:15:57 fetching corpus: 9200, signal 183898/203242 (executing program)
2024/11/07 06:15:57 fetching corpus: 9250, signal 184136/203242 (executing program)
2024/11/07 06:15:57 fetching corpus: 9300, signal 184338/203242 (executing program)
2024/11/07 06:15:58 fetching corpus: 9350, signal 184607/203242 (executing program)
2024/11/07 06:15:58 fetching corpus: 9400, signal 184860/203242 (executing program)
2024/11/07 06:15:58 fetching corpus: 9450, signal 185061/203242 (executing program)
2024/11/07 06:15:58 fetching corpus: 9500, signal 185347/203242 (executing program)
[  148.007512] hrtimer: interrupt took 3861180 ns
2024/11/07 06:15:58 fetching corpus: 9550, signal 185555/203242 (executing program)
2024/11/07 06:15:59 fetching corpus: 9600, signal 185729/203242 (executing program)
2024/11/07 06:15:59 fetching corpus: 9650, signal 185950/203242 (executing program)
2024/11/07 06:15:59 fetching corpus: 9700, signal 186166/203242 (executing program)
2024/11/07 06:16:00 fetching corpus: 9750, signal 186377/203242 (executing program)
2024/11/07 06:16:00 fetching corpus: 9800, signal 186479/203242 (executing program)
2024/11/07 06:16:00 fetching corpus: 9850, signal 186684/203242 (executing program)
2024/11/07 06:16:01 fetching corpus: 9900, signal 186857/203242 (executing program)
2024/11/07 06:16:01 fetching corpus: 9950, signal 187053/203242 (executing program)
2024/11/07 06:16:01 fetching corpus: 10000, signal 187205/203242 (executing program)
2024/11/07 06:16:01 fetching corpus: 10050, signal 187438/203242 (executing program)
2024/11/07 06:16:02 fetching corpus: 10100, signal 187585/203242 (executing program)
2024/11/07 06:16:02 fetching corpus: 10150, signal 187872/203242 (executing program)
2024/11/07 06:16:03 fetching corpus: 10200, signal 188072/203242 (executing program)
2024/11/07 06:16:03 fetching corpus: 10250, signal 188251/203242 (executing program)
2024/11/07 06:16:03 fetching corpus: 10300, signal 188523/203242 (executing program)
2024/11/07 06:16:04 fetching corpus: 10350, signal 188671/203242 (executing program)
2024/11/07 06:16:04 fetching corpus: 10400, signal 188840/203242 (executing program)
2024/11/07 06:16:04 fetching corpus: 10450, signal 189084/203242 (executing program)
2024/11/07 06:16:05 fetching corpus: 10500, signal 189359/203242 (executing program)
2024/11/07 06:16:05 fetching corpus: 10550, signal 189513/203242 (executing program)
2024/11/07 06:16:05 fetching corpus: 10600, signal 189714/203242 (executing program)
2024/11/07 06:16:06 fetching corpus: 10650, signal 189889/203242 (executing program)
2024/11/07 06:16:06 fetching corpus: 10700, signal 190012/203243 (executing program)
2024/11/07 06:16:07 fetching corpus: 10750, signal 190241/203243 (executing program)
2024/11/07 06:16:07 fetching corpus: 10800, signal 190455/203243 (executing program)
2024/11/07 06:16:07 fetching corpus: 10850, signal 190644/203243 (executing program)
2024/11/07 06:16:08 fetching corpus: 10900, signal 190805/203243 (executing program)
2024/11/07 06:16:08 fetching corpus: 10930, signal 190964/203243 (executing program)
2024/11/07 06:16:08 fetching corpus: 10930, signal 190964/203243 (executing program)
2024/11/07 06:16:11 starting 8 fuzzer processes
06:16:11 executing program 0:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x8)
r1 = epoll_create1(0x80000)
r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x9, 0x6003)
close_range(r1, r2, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x2710}, 0x10)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000140))
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000180))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)={<r4=>0x0})
r5 = socket$inet6(0xa, 0x4, 0x7fffffff)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000003c0)={{r4, 0x0, 0x2, 0x200, 0x4, 0x5, 0x3, 0x80, 0xa8, 0x6, 0x1, 0xaeb, 0x3, 0x20, 0x4}})
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f00000013c0))
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000001440)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @hci={0x1f, 0x1, 0x3}, @xdp={0x2c, 0xd, 0x0, 0x3f}, 0x3, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001400)='gre0\x00', 0x3, 0x1ff, 0xb2})
bind$802154_raw(r2, &(0x7f00000014c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14)
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x28, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x5d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0x20040080)
r7 = accept4$unix(r3, &(0x7f0000001600), &(0x7f0000001680)=0x6e, 0x181400)
shutdown(r7, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000001700)=0x7)

06:16:11 executing program 1:
r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80c0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000480)=""/94, 0x5e}], 0x4, &(0x7f0000000540)=[@rights={{0x24, 0x1, 0x1, [<r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff]}}], 0xc0}}], 0x1, 0x40000000, &(0x7f0000000640))
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x13, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20004000)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1d4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xdc, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6345739e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7eb1185}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6792327e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49814d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bcfccf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9a3b3f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc61c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e5cce54}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65fff3aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe41a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2423794}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc1a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34137799}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd16}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x290ee551}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4569bc15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e161135}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xafec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8476}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14fc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3482257a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d5f76b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x407c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f300c94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7929b625}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x766a0c25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7868ebf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe06173d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x6}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x10)
r7 = openat$incfs(r3, &(0x7f0000000b40)='.log\x00', 0x40000, 0x4)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x94, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x2}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008}, 0x4044000)
r8 = openat2(0xffffffffffffff9c, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x484100, 0xa3, 0x1}, 0x18)
r9 = accept4$inet6(r6, &(0x7f0000000d80)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000dc0)=0x1c, 0x80000)
sendfile(r8, r9, &(0x7f0000000e00), 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000e40)={'wpan1\x00'})
r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0)
sendmsg$NFT_MSG_GETSET(r10, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, 0xa, 0xa, 0x4, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008084)
r11 = syz_open_dev$vcsa(&(0x7f0000000fc0), 0x6, 0xd0000)
fsmount(r11, 0x0, 0x6)
setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000001000)=0xbbb, 0x4)

06:16:11 executing program 2:
shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x1000)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = shmget(0x0, 0x1000, 0x20, &(0x7f0000ffa000/0x1000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4096)
getgroups(0xa, &(0x7f0000001000)=[<r1=>0xffffffffffffffff, 0xee01, <r2=>0xee00, <r3=>0xee01, 0xee00, <r4=>0x0, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xee00])
getresgid(&(0x7f0000001040)=<r7=>0x0, &(0x7f0000001080)=<r8=>0x0, &(0x7f00000010c0))
r9 = clone3(&(0x7f00000013c0)={0x1100, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180), {0x32}, &(0x7f00000011c0)=""/152, 0x98, &(0x7f0000001280)=""/193, &(0x7f0000001380)=[0x0, 0x0, 0x0], 0x3}, 0x58)
r10 = fork()
shmctl$IPC_SET(r0, 0x1, &(0x7f0000001440)={{0x3, 0xee01, r2, 0xee01, r7, 0x2, 0x67d}, 0x6, 0x3, 0x6, 0xfffffffffffffff9, r9, r10, 0x1})
perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0x2, 0x9, 0x1, 0x4, 0x0, 0xb70, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x8001, 0x2}, 0x2c08, 0x6, 0xfffffff7, 0x1, 0x800, 0x6, 0x0, 0x0, 0x40, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x2)
r11 = gettid()
r12 = openat(0xffffffffffffffff, &(0x7f0000001800)='./file0\x00', 0x440040, 0xa8)
r13 = clone3(&(0x7f0000001840)={0x620a800, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0), {0x7}, &(0x7f0000001600)=""/214, 0xd6, &(0x7f0000001700)=""/176, &(0x7f00000017c0)=[r9, r9, r11, 0x0, r9, r10], 0x6, {r12}}, 0x58)
newfstatat(0xffffffffffffff9c, &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, <r14=>0x0}, 0x1000)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000001980)={<r15=>0x0}, &(0x7f00000019c0)=0xc)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000001a00)={{0x3, r14, r3, 0xee01, r8, 0x51}, 0x100, 0xffdc, 0x6b, 0x7, 0xffffffffffffffff, r15, 0x5})
r16 = getegid()
setgroups(0x5, &(0x7f0000001a80)=[r5, r6, r16, r1, r4])
pidfd_open(r13, 0x0)

[  160.705806] audit: type=1400 audit(1730960171.515:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
06:16:11 executing program 3:
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x8000)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x108, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1000}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x22, 0x1, "d2dd8c7276a4163d23f87cca3427bdea893926afb0c18a8d56e045b9e0a4"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1000}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x80}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x90, 0x3, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x87, 0x1, "20a7a02d502b74661a08583d97e144995cf1767ca8138781d8cf9c5d2ae3938f0c7bf581d51ffdebf9e8bb63e035f907ddff682b66bf2bfb36ddae3535cd05f2eb55d60291f9b6195199a08927a9ad75c3b237c4df92d7e311c4a62c875a3127dbe7542d2334c6e30e768ee07f15046a776f9fb490bfc7853c6454b647631e993cf1e8"}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x8010}, 0x4)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3ff}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xc000000}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x18040}, 0x8890)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000500)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000000600)=0xe8)
sendmsg$nl_generic(r0, &(0x7f0000000ac0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000640)={0x40c, 0x28, 0x100, 0x70bd2b, 0x25dfdbff, {0xa}, [@generic="47d6a20a22dc0b1f19892a80ff192a716c8c5b9e0b90c6b76bfea3900219182604202c1cfde207f275d24bd0f04a7c9865a61c4bee1f2e51627b718a0e140502ce8372de22f509d04fc2a3044abb9c85bd6211b595df404c25390d1e8dff935232bb644fdb2c41ff50", @nested={0x220, 0x8f, 0x0, 0x1, [@generic="423ce476362647c2d62cb45c713d40c01044065bfa5620b660279e24262a74818d3132d827775d5cdc47e24e4679ca77f7068089c36093991d577334a3630a694c6b30a70154ed9cbe83c13d072fc8bf153731dc1ef671adb2bca84c2f80a3a66cd9027bc8757a6a195bb970426be1c30c752f2fee8e5cced4097ff44773f6281f9023131814dfa3a35f8301bdf63e07f0c826eac15e0f93114bade13293819e841fa69a62f91d5d430e05fc99d6948d66e6b456f88b4c65fa4e200cfe2c842848c61d7009297e257f4a9e57917222f0b027077ccc", @generic="3bafaf43462515e7d49ca732d367aa7643f7b7e43ef909c2037512094883ac6d7ea9569d32d4ee90bd01c6d5bab1a268d3e82a64df52d1265f2488651157b9092a0b39588f1d8058bff578baf8a7e4a88f54650c61a6b06a185b2d001d3833671c26c104a016577572250be2b4edb9f8fff98d5373492dcc3f6fbb68171a19b057d1f5817d612e6fc7fffcc782c4f0f6f162549b2e7109", @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="bcc43e78bb41c637283217e1b777277d831f27860e19fd2f33c88ed8ec3cbfcccd24af1704fefe12b4361b7f1e2ee8d9e889a766e0bbadaf659346f24e534c8939627d31f8171d883c35e2726cdb28021763fee7ecf66b12bfa334ce5e33218495008385514e68022107ee25d2b3d380d5e7b08312824989d07a6e74b5994a9dc59483c983b930b6", @typed={0x4, 0x6f}, @typed={0x8, 0x1d, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x7, 0x0, 0x0, @uid=r2}]}, @generic="a3582f65793e04cb9bed3b101e700923e5f28f5edcf0dd0c2e66bebd213fb3ce5bf61ea27a501d8f867ac5a2f39780d9aee4e2215431841dfc7e71eb12881237ac854b40e4a51438731c1f4b2f839363bfe30c65c43b06e1658e3de1bd456bf96af7e2ad6c7e89ccfb4685a2a47f8e39974893a953f2434218a84c9d70bbdac376e1dcaf1b5e43e271796c0d45a8cd58f58a81bbcba677e700a4e335730387c91e90bd43b596e1ad64b8e5d0078740ad8987cbd130c4e3edac1ce816d6efb72fc56c41", @generic="14b48fc8af3d58ffbca0a3dd3b23cf7b689e9020bad2bd2226803e6b041cb6a76ebb3bd5d04c99e725d0418a8269b9a678e431f56fcbb88a66ca47ddbecb18b67010ec15fa420c009a3b985e09d1ce4c262f307b3f0c377d959189f64a486806fb1664bd833e15e0342c89549e024a0aa5829be721760d0cf3aed9cb1c1689705845229c95c86085ad1d1961720439e49ea18be6654d186f", @typed={0x8, 0x82, 0x0, 0x0, @uid=0xee01}, @typed={0xc, 0x39, 0x0, 0x0, @u64=0x80000000}]}, 0x40c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004)
r3 = pidfd_getfd(r0, r0, 0x0)
close_range(r0, r3, 0x0)
r4 = fcntl$getown(r3, 0x9)
r5 = perf_event_open(&(0x7f0000000b40)={0x4, 0x80, 0x34, 0x5, 0x1, 0x0, 0x0, 0x5, 0x20082, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000b00)}, 0x41082, 0x10000, 0xfae, 0x4, 0x2, 0x1ff, 0x6, 0x0, 0x81, 0x0, 0x4c2}, r4, 0x6, 0xffffffffffffffff, 0x8)
close_range(r5, r0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000bc0), 0x400800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000c00)={{0x1, 0x1, 0x18, <r7=>r0, {0x1ff}}, './file0\x00'})
sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0xec93d890152e9c8c}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, 0x13, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0xc010)
openat(0xffffffffffffffff, &(0x7f0000000d80)='./file0\x00', 0xc403, 0x80)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x902, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r6)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xbc, r9, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3e}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffe0}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2c}, @NL80211_ATTR_FRAME_MATCH={0x7c, 0x5b, "248bfe655198253ee62d220b9f02a30af743a17c48c4ac1c455367d65b23644ec3b48042daa4e3b06aecc1c93871f35a028d6857dab983a351b48e4951383c99d478488f6f0750d13c37a3ee69cdcd8ea411dd62b2fdd671e2e28c5d68c2be16d533c7c9b4cdd6f8513a6ee5b27f21871316e1c5bf89e53e"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8800}, 0x4000)

06:16:11 executing program 4:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x0, 0x44)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "30946b771210d344ba1ee7857ac23165"}, @NL80211_ATTR_PMK={0x14, 0xfe, "1a1ab5a87dc24a604c41a0f0a78753f3"}, @NL80211_ATTR_PMK={0x14, 0xfe, "843eb4a4abc1444816e1ee46d3efb3a8"}]}, 0x50}, 0x1, 0x0, 0x0, 0x24020081}, 0x4)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x69}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x4004000)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x6, 0x0, 0x1, 0x7a0, 0x3]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1dc, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8071bf4b4c6d8ab7e6543f1127e64829"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b49467430613b48734f3f0ebec7a711a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ce74d32523307abb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a35916111f951e24"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0501a6dbd11121c8b441a9a6300b1aec74f29c84b6e9f8ce"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8e570f21608054a703c17b2e5864a924"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="383b25d136a44837b6fda427d59a7bba"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c589af981f5a862e54fe78eda440890cee8c3ef30b270296e62554204ada8687"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c1683ab9eb80daa91d2135793704fa9a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="98d4316a9ce591cfc2625c238fc259a5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="44a6f41fb97eea07c4b2e23be7065184"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="581b42c60250c6673c05b86986443753dafdb534111d43cdede354f0a96594e9"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="432c8def401471b8372480e3fc16a57d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="54fff4559bb3f65e171e0b999a97c2d12f2db9bb5324d21b43bde9c29a942a1f"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="99d63fa2a3df911874e45c1596797b105c93693199668a28bc2393651ac6ff2f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "47de2d7c300a7390"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "39e7894af5ae8c36"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "af1e7df8eb2f67a4"}]}, @NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x65fd22c6}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x60040004}, 0x24040840)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x23}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x440d0)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, 0x15, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4018880}, 0x14)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan0\x00', <r4=>0x0})
shutdown(r0, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r2, 0x10, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x100, 0x6f}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x100, 0x1ff}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80), 0x101000, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x120, r6, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xea, 0xc5, "4680841a54eb3aaacf02cb8ee955b0763d8b3eab6f83b4bdad4afb27b7053dbd396d70d0b6eadaa52420c0252d3fc3a33f0cf56683e9c8c91556cef2dca1b27343ab8d888640c7286e70b0ee5c3ffedfb74e2becc9d3752fc3948f0539a045dceee84dfc7e875751ef2d82bba59ff7668ecd1cbe122fa2465f280573843c524ea15e91bc165b963191e690cd21a3f597d847d7ebdb68ab5c9339eb5cc0878f0676e6c04dd71b1a8c34d781743cf8b2d497d62e3eb45479312dc565f38cccea611a74c9ae3bab6c039234c3d99bf775a76ca94f7be0366f8bc150fd448457ededcb894eb48eb0"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80000000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3f}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}]}, 0x120}, 0x1, 0x0, 0x0, 0x40400c0}, 0x800)
r7 = dup(r0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r1, 0x408, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x81)
write$bt_hci(r0, &(0x7f0000000e00)={0x1, @create_conn={{0x405, 0xd}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0xcd, 0x4, 0x3, 0x1}}}, 0x11)
sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)={0x154, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1ff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xaa}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2b8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4a}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7, 0x80000001]}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1be}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x80000001, 0x7f, 0x5, 0xac9]}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x470}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffff5f4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x803f}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x400}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xad1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x69b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c080)

06:16:11 executing program 5:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa1828c10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x154, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2bff130af19d34a}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x40}}}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000084}, 0x80)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x30}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x316, 0x5c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20020000}, 0x4000)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x73}}}}, [@NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x43}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "e2dafbdd5df5"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0xc0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/class/mac80211_hwsim', 0x101000, 0x15)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
r3 = fsmount(r1, 0x1, 0x80)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008904}, 0x20040880)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r5)
sendfile(r2, r3, 0x0, 0x4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r2)
sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x78, r6, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x4000041)
signalfd(r1, &(0x7f0000000b80), 0x8)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x40011)

06:16:11 executing program 6:
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xec, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x12}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x9}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000}, 0x4000814)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfd}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r1, 0x104, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc5}]}, 0x8c}}, 0x20000000)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x40}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40488c5}, 0x20040000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x3, 0xb65}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x800)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x800)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r2, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffff8, 0x45}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x8804)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000001f40)={{0x1, 0x1, 0x18, <r7=>r5, {0xac, 0x80000001}}, './file0\x00'})
syz_genetlink_get_family_id$smc(&(0x7f0000000cc0), r7)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r7)
sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000)

06:16:11 executing program 7:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x4, 0x55, 0x4})
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x100000001, 0x5})
flock(r0, 0x6)
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000080)={'\x00', 0x0, 0x1, 0x2})
socketpair(0x15, 0x4, 0x9, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000180)={{r3}, {@val, @max}})
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f00000001c0)={'\x00', 0x8, 0x3, 0x8})
ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000240)={0x0, 0x80000001, [0x2, 0x9, 0x8, 0xff3, 0x7ff, 0xffff]})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xaa42b17adf6dbe2d}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x4040)
r4 = signalfd(r1, &(0x7f0000000380)={[0x1]}, 0x8)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r5, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x190, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x56}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x83}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000004}, 0x20044811)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x327e170daa99670a}, 0x20000810)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x88, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5fd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001)
clone3(&(0x7f0000000d40)={0x80860800, &(0x7f0000000a40), &(0x7f0000000a80)=<r6=>0x0, &(0x7f0000000ac0), {0x3b}, &(0x7f0000000b00)=""/216, 0xd8, &(0x7f0000000c00)=""/200, &(0x7f0000000d00)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58)
kcmp(r6, 0xffffffffffffffff, 0x2, r1, r4)
r7 = syz_open_dev$evdev(&(0x7f0000000dc0), 0x2, 0x90000)
io_submit(0x0, 0x1, &(0x7f0000000f00)=[&(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x2, r7, &(0x7f0000000e00)="88cbb5280db4748f36f9082546cc2b88f7325ece2cac172b97874b54475402b7908af3ee199635e7c606c6de04e140e0a204df39c86a23f52e0f0304ba469a7f99b411fa10e5e7de97e5e9d0d38caa3149986cfebf35fa2deea98fa0bda639fe6ca33a7a4896de92d3aa", 0x6a, 0x401, 0x0, 0x2}])

[  162.065970] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  162.067370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  162.070213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  162.072664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  162.074383] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  162.079598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  162.107045] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  162.111624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  162.113790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  162.124342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  162.129725] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  162.135793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  162.179538] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  162.180801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  162.182280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  162.185481] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  162.186438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  162.188207] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  162.189638] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  162.192279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  162.195669] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  162.213286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  162.214816] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  162.219546] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  162.267432] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  162.268616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  162.272365] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  162.279932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  162.287274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  162.304317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  162.306845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  162.307777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  162.312896] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  162.316706] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  162.318526] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  162.320944] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  162.322192] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  162.354935] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  162.367592] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  162.371388] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  162.376410] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  162.381017] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  162.383037] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  162.384248] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  162.396411] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  162.442004] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  162.456170] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  162.463432] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  164.163297] Bluetooth: hci0: command tx timeout
[  164.212950] Bluetooth: hci2: command tx timeout
[  164.214430] Bluetooth: hci1: command tx timeout
[  164.276336] Bluetooth: hci3: command tx timeout
[  164.406338] Bluetooth: hci4: command tx timeout
[  164.407556] Bluetooth: hci5: command tx timeout
[  164.468154] Bluetooth: hci6: command tx timeout
[  164.533303] Bluetooth: hci7: command tx timeout
[  166.196178] Bluetooth: hci0: command tx timeout
[  166.260669] Bluetooth: hci1: command tx timeout
[  166.261293] Bluetooth: hci2: command tx timeout
[  166.325210] Bluetooth: hci3: command tx timeout
[  166.452194] Bluetooth: hci5: command tx timeout
[  166.452695] Bluetooth: hci4: command tx timeout
[  166.517302] Bluetooth: hci6: command tx timeout
[  166.581219] Bluetooth: hci7: command tx timeout
[  168.246086] Bluetooth: hci0: command tx timeout
[  168.308203] Bluetooth: hci1: command tx timeout
[  168.308704] Bluetooth: hci2: command tx timeout
[  168.373319] Bluetooth: hci3: command tx timeout
[  168.501366] Bluetooth: hci5: command tx timeout
[  168.501875] Bluetooth: hci4: command tx timeout
[  168.565105] Bluetooth: hci6: command tx timeout
[  168.628148] Bluetooth: hci7: command tx timeout
[  170.292414] Bluetooth: hci0: command tx timeout
[  170.356290] Bluetooth: hci1: command tx timeout
[  170.356780] Bluetooth: hci2: command tx timeout
[  170.421598] Bluetooth: hci3: command tx timeout
[  170.549312] Bluetooth: hci4: command tx timeout
[  170.550734] Bluetooth: hci5: command tx timeout
[  170.612820] Bluetooth: hci6: command tx timeout
[  170.677163] Bluetooth: hci7: command tx timeout
[  224.647685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  224.649377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  224.651690] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  224.654887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  224.657256] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  224.659503] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  224.702824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  224.707475] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  224.714204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  224.723183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  224.727941] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  224.732816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  224.821453] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  224.827632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  224.832246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  224.841402] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  224.846648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  224.849630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  224.853011] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  224.854874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  224.860937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  224.867513] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  224.879276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  224.882378] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  224.883819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  224.884859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  224.889178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  224.890422] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  224.893213] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  224.896440] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  224.901424] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  224.905259] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  224.906792] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  224.913306] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  224.918753] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  224.920755] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  224.923638] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  224.924742] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  224.930771] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  224.935363] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  224.937783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  224.943290] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  224.951739] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  224.953988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  224.979298] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  225.003960] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  225.020566] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  225.027925] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  226.682268] Bluetooth: hci0: command tx timeout
[  226.868202] Bluetooth: hci3: command tx timeout
[  226.932180] Bluetooth: hci1: command tx timeout
[  226.997191] Bluetooth: hci2: command tx timeout
[  227.060205] Bluetooth: hci6: command tx timeout
[  227.060341] Bluetooth: hci5: command tx timeout
[  227.060887] Bluetooth: hci7: command tx timeout
[  227.124149] Bluetooth: hci4: command tx timeout
[  228.725277] Bluetooth: hci0: command tx timeout
[  228.916146] Bluetooth: hci3: command tx timeout
[  228.980322] Bluetooth: hci1: command tx timeout
[  229.045199] Bluetooth: hci2: command tx timeout
[  229.109202] Bluetooth: hci5: command tx timeout
[  229.109704] Bluetooth: hci6: command tx timeout
[  229.109728] Bluetooth: hci7: command tx timeout
[  229.173212] Bluetooth: hci4: command tx timeout
[  230.774101] Bluetooth: hci0: command tx timeout
[  230.965195] Bluetooth: hci3: command tx timeout
[  231.029136] Bluetooth: hci1: command tx timeout
[  231.093763] Bluetooth: hci2: command tx timeout
[  231.156188] Bluetooth: hci5: command tx timeout
[  231.156246] Bluetooth: hci7: command tx timeout
[  231.156683] Bluetooth: hci6: command tx timeout
[  231.220172] Bluetooth: hci4: command tx timeout
[  232.820156] Bluetooth: hci0: command tx timeout
[  233.012365] Bluetooth: hci3: command tx timeout
[  233.076153] Bluetooth: hci1: command tx timeout
[  233.141331] Bluetooth: hci2: command tx timeout
[  233.204169] Bluetooth: hci6: command tx timeout
[  233.207093] Bluetooth: hci7: command tx timeout
[  233.207159] Bluetooth: hci5: command tx timeout
[  233.270159] Bluetooth: hci4: command tx timeout
[  287.248162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  287.251166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  287.253399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  287.263617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  287.267754] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  287.269012] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  287.498850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  287.501241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  287.503446] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  287.504388] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  287.506346] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  287.513968] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  287.515333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  287.519597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  287.521371] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  287.522574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  287.536897] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  287.539801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  287.542334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  287.553483] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  287.553513] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  287.575732] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  287.581459] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  287.583786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  287.587231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  287.590464] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  287.592434] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  287.593665] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  287.597304] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  287.601329] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  287.602111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  287.603084] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  287.603873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  287.607084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  287.612156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  287.613821] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  287.616591] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  287.619357] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  287.620476] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  287.630169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  287.631789] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  287.639371] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  287.639948] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  287.642170] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  287.655558] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  287.660159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  287.684433] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  287.707646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  289.332144] Bluetooth: hci0: command tx timeout
[  289.588389] Bluetooth: hci3: command tx timeout
[  289.652219] Bluetooth: hci1: command tx timeout
[  289.716210] Bluetooth: hci2: command tx timeout
[  289.716226] Bluetooth: hci6: command tx timeout
[  289.717980] Bluetooth: hci7: command tx timeout
[  289.723743] Bluetooth: hci5: command tx timeout
[  289.780560] Bluetooth: hci4: command tx timeout
[  291.380124] Bluetooth: hci0: command tx timeout
[  291.637123] Bluetooth: hci3: command tx timeout
[  291.700182] Bluetooth: hci1: command tx timeout
[  291.765468] Bluetooth: hci7: command tx timeout
[  291.766004] Bluetooth: hci6: command tx timeout
[  291.767400] Bluetooth: hci2: command tx timeout
[  291.767433] Bluetooth: hci5: command tx timeout
[  291.829359] Bluetooth: hci4: command tx timeout
[  293.429738] Bluetooth: hci0: command tx timeout
[  293.686195] Bluetooth: hci3: command tx timeout
[  293.748209] Bluetooth: hci1: command tx timeout
[  293.813090] Bluetooth: hci6: command tx timeout
[  293.813624] Bluetooth: hci5: command tx timeout
[  293.814494] Bluetooth: hci2: command tx timeout
[  293.814948] Bluetooth: hci7: command tx timeout
[  293.876226] Bluetooth: hci4: command tx timeout
[  295.476228] Bluetooth: hci0: command tx timeout
[  295.732135] Bluetooth: hci3: command tx timeout
[  295.796201] Bluetooth: hci1: command tx timeout
[  295.860161] Bluetooth: hci5: command tx timeout
[  295.860402] Bluetooth: hci7: command tx timeout
[  295.860671] Bluetooth: hci2: command tx timeout
[  295.861245] Bluetooth: hci6: command tx timeout
[  295.924244] Bluetooth: hci4: command tx timeout
[  349.657465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  349.660002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  349.661824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  349.666908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  349.669505] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  349.671532] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  349.958499] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  349.962260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  349.963458] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  349.969127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  349.974328] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  349.978174] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  350.016796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  350.019671] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  350.022341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  350.023266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  350.026612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  350.028331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  350.032455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  350.032530] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  350.040238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  350.043319] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  350.043340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  350.046886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  350.148356] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  350.155300] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  350.160222] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  350.212652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  350.215572] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  350.217398] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  350.227928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  350.230003] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  350.231403] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  350.240241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  350.260979] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  350.261362] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  350.271598] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  350.271616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  350.272696] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  350.280701] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  350.299289] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  350.302273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  350.310232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  350.330328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  350.342241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  350.343468] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  350.355330] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  350.363309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  351.733218] Bluetooth: hci0: command tx timeout
[  352.052332] Bluetooth: hci1: command tx timeout
[  352.116120] Bluetooth: hci2: command tx timeout
[  352.116758] Bluetooth: hci3: command tx timeout
[  352.372149] Bluetooth: hci4: command tx timeout
[  352.372204] Bluetooth: hci5: command tx timeout
[  352.500130] Bluetooth: hci6: command tx timeout
[  352.500889] Bluetooth: hci7: command tx timeout
[  353.780429] Bluetooth: hci0: command tx timeout
[  354.100734] Bluetooth: hci1: command tx timeout
[  354.164242] Bluetooth: hci3: command tx timeout
[  354.164264] Bluetooth: hci2: command tx timeout
[  354.421116] Bluetooth: hci4: command tx timeout
[  354.421138] Bluetooth: hci5: command tx timeout
[  354.548197] Bluetooth: hci7: command tx timeout
[  354.548336] Bluetooth: hci6: command tx timeout
[  355.828669] Bluetooth: hci0: command tx timeout
[  356.149094] Bluetooth: hci1: command tx timeout
[  356.212115] Bluetooth: hci3: command tx timeout
[  356.213176] Bluetooth: hci2: command tx timeout
[  356.468211] Bluetooth: hci5: command tx timeout
[  356.471084] Bluetooth: hci4: command tx timeout
[  356.596366] Bluetooth: hci6: command tx timeout
[  356.597159] Bluetooth: hci7: command tx timeout
[  357.876231] Bluetooth: hci0: command tx timeout
[  358.196306] Bluetooth: hci1: command tx timeout
[  358.260319] Bluetooth: hci2: command tx timeout
[  358.260812] Bluetooth: hci3: command tx timeout
[  358.517079] Bluetooth: hci4: command tx timeout
[  358.517779] Bluetooth: hci5: command tx timeout
[  358.645162] Bluetooth: hci7: command tx timeout
[  358.645548] Bluetooth: hci6: command tx timeout
[  412.235729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  412.239594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  412.243694] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  412.251734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  412.254585] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  412.256710] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  412.418751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  412.421592] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  412.423548] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  412.438666] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  412.444796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  412.447813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  412.484776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  412.501873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  412.503878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  412.511410] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  412.513164] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  412.531751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  412.616373] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  412.624649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  412.632326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  412.642285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  412.646628] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  412.648403] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  412.696638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  412.698332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  412.699820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  412.702859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  412.706745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  412.708555] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  412.709503] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  412.714854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  412.744915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  412.757362] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  412.758141] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  412.766280] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  412.768451] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  412.779516] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  412.781252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  412.784402] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  412.804846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  412.805893] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  412.808259] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  412.822392] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  412.824367] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  412.825646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  412.840520] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  412.843216] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  414.324142] Bluetooth: hci0: command tx timeout
[  414.516562] Bluetooth: hci1: command tx timeout
[  414.580247] Bluetooth: hci2: command tx timeout
[  414.773070] Bluetooth: hci3: command tx timeout
[  414.902095] Bluetooth: hci5: command tx timeout
[  414.903104] Bluetooth: hci4: command tx timeout
[  414.903729] Bluetooth: hci6: command tx timeout
[  414.964142] Bluetooth: hci7: command tx timeout
[  416.373160] Bluetooth: hci0: command tx timeout
[  416.565178] Bluetooth: hci1: command tx timeout
[  416.630143] Bluetooth: hci2: command tx timeout
[  416.820093] Bluetooth: hci3: command tx timeout
[  416.949759] Bluetooth: hci6: command tx timeout
[  416.951258] Bluetooth: hci4: command tx timeout
[  416.952574] Bluetooth: hci5: command tx timeout
[  417.013129] Bluetooth: hci7: command tx timeout
[  418.420230] Bluetooth: hci0: command tx timeout
[  418.614077] Bluetooth: hci1: command tx timeout
[  418.677109] Bluetooth: hci2: command tx timeout
[  418.868167] Bluetooth: hci3: command tx timeout
[  418.996117] Bluetooth: hci5: command tx timeout
[  418.997620] Bluetooth: hci6: command tx timeout
[  418.999097] Bluetooth: hci4: command tx timeout
[  419.060503] Bluetooth: hci7: command tx timeout
[  420.469587] Bluetooth: hci0: command tx timeout
[  420.661067] Bluetooth: hci1: command tx timeout
[  420.725275] Bluetooth: hci2: command tx timeout
[  420.916120] Bluetooth: hci3: command tx timeout
[  421.045141] Bluetooth: hci6: command tx timeout
[  421.045690] Bluetooth: hci5: command tx timeout
[  421.046511] Bluetooth: hci4: command tx timeout
[  421.108065] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
06:21:16  Registers:
info registers vcpu 0
RAX=ffffffff811a8f24 RBX=ffffffff813ef450 RCX=0000000000000001 RDX=1ffff1100d9c135a
RSI=ffff88806ce09fb8 RDI=ffffffff811a8f24 RBP=ffff88806ce09ad0 RSP=ffff88806ce09a68
R8 =0000000000000001 R9 =ffff88806ce09ab8 R10=000000000003c001 R11=0000000000007fda
R12=ffff88806ce09b40 R13=0000000000000000 R14=ffff8880157a9b80 R15=ffff88803d3b6000
RIP=ffffffff81148e69 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f43ed29b540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f43ed77cf88 CR3=0000000033be4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000
XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff88806cf41940 RCX=1ffffffff0fdec3f RDX=dffffc0000000000
RSI=0000000000000080 RDI=ffffffff81844b31 RBP=ffff8880305efc10 RSP=ffff8880305efb38
R8 =0000000000000000 R9 =fffffbfff0fdc5ea R10=ffffffff87ee2f57 R11=0000000000000000
R12=0000000000000286 R13=ffff88806cf41960 R14=ffff888008ff03c0 R15=ffff888016048360
RIP=ffffffff8159d8ba RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe2700000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb78e7df580 CR3=0000000037b94000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000