Warning: Permanently added '[localhost]:17577' (ECDSA) to the list of known hosts.
2025/01/21 12:20:48 fuzzer started
2025/01/21 12:20:49 dialing manager at localhost:44833
syzkaller login: [   81.180592] cgroup: Unknown subsys name 'net'
[   81.319462] cgroup: Unknown subsys name 'cpuset'
[   81.392883] cgroup: Unknown subsys name 'rlimit'
[   87.038067] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[   97.678733] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/21 12:21:15 syscalls: 201
2025/01/21 12:21:15 code coverage: enabled
2025/01/21 12:21:15 comparison tracing: enabled
2025/01/21 12:21:15 extra coverage: enabled
2025/01/21 12:21:15 setuid sandbox: enabled
2025/01/21 12:21:15 namespace sandbox: enabled
2025/01/21 12:21:15 Android sandbox: enabled
2025/01/21 12:21:15 fault injection: enabled
2025/01/21 12:21:15 leak checking: enabled
2025/01/21 12:21:15 net packet injection: enabled
2025/01/21 12:21:15 net device setup: enabled
2025/01/21 12:21:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/21 12:21:15 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/21 12:21:15 USB emulation: enabled
2025/01/21 12:21:15 hci packet injection: enabled
2025/01/21 12:21:15 wifi device emulation: enabled
2025/01/21 12:21:15 802.15.4 emulation: enabled
2025/01/21 12:21:15 fetching corpus: 0, signal 0/0 (executing program)
2025/01/21 12:21:17 starting 8 fuzzer processes
12:21:17 executing program 0:
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020581}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x77}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4044000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x11c, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @empty, 0x2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "30ff7dd59b5af2cf28e6fc6ce50454f6a3d5fe3547990c60b4d9956dbca83a49"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "46a7204b5272500aa2f8cd851d3e9767bf246180222b2b102334b2096b7ab2e9"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x168}, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000640), 0x6e, &(0x7f00000017c0)=[{&(0x7f00000006c0)=""/118, 0x76}, {&(0x7f0000000740)=""/119, 0x77}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001800)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x10020)
r2 = socket(0x1e, 0xa, 0x40)
recvmsg(r2, &(0x7f00000020c0)={&(0x7f0000001880)=@rc, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/12, 0xc}, {&(0x7f0000001940)=""/56, 0x38}, {&(0x7f0000001980)=""/37, 0x25}, {&(0x7f00000019c0)=""/245, 0xf5}, {&(0x7f0000001ac0)=""/200, 0xc8}, {&(0x7f0000001bc0)=""/221, 0xdd}, {&(0x7f0000001cc0)=""/133, 0x85}, {&(0x7f0000001d80)=""/252, 0xfc}, {&(0x7f0000001e80)=""/148, 0x94}], 0x9, &(0x7f0000002000)=""/140, 0x8c}, 0x2100)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000002140), r2)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000002240)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x68, r4, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xfffffffa, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000000)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000023c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x50, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x90)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x30, r4, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xfffffffa, 0x0, 0x0, 0x7}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x1)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x24, r4, 0x12, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x4000091)
r6 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, r6)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000002840)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0x98, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000028c0), r3)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000029c0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x44, r7, 0x602, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008180}, 0x10)

12:21:17 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0xa4, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfe}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x98}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x530}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb758}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xbd}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x61ddbe78}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20044050}, 0x8884)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'wg0\x00', <r1=>0x0})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4890}, 0x10)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x44, r0, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x387}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8804}, 0x20008081)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x30, 0x0, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x17, {0xd, 0x3, @l2={'ib', 0x3a, 'hsr0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x8800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f0000001b80), 0x10000, 0xcb00)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x17, {0x1a, 0x8, @l2={'ib', 0x3a, 'wg1\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24048011}, 0x800)
r5 = syz_open_dev$vcsn(&(0x7f0000001cc0), 0x9, 0x40)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0xc810081}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x60, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044}, 0x800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, r0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x8000)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001fc0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f00000020c0)={&(0x7f0000001f80), 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x68, r7, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc840}, 0x40040)
recvmsg$unix(r5, &(0x7f0000002200)={&(0x7f0000002100)=@abs, 0x6e, 0xfffffffffffffffd, 0x0, &(0x7f0000002180)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0)
sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_BANDS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x4)

12:21:17 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x4c02)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x808, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', <r1=>0x0, 0x29, 0xc0, 0x1, 0x8, 0x50, @empty, @empty, 0x8, 0x7800, 0x7fffffff, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wg1\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x124, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x200000cd}, 0x51)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x2207c0, 0x0)
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x860}, 0x20000000)
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x438a, 0x4e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x12, r0, 0x10000000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003540)={'syztnl1\x00', &(0x7f00000034c0)={'sit0\x00', <r4=>r2, 0x29, 0xf9, 0x3, 0x169d, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, 0x10, 0x7, 0x2}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000038c0)={'wg0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000003c80)={'syztnl0\x00', &(0x7f0000003c00)={'ip6gre0\x00', <r6=>r2, 0x29, 0x2, 0x0, 0x7, 0x22, @mcast1, @dev={0xfe, 0x80, '\x00', 0x15}, 0x20, 0x700, 0x1, 0xfffffe01}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000003cc0)={'wg2\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000004240)={'wg0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000004580)={&(0x7f0000000d40), 0xc, &(0x7f0000004540)={&(0x7f0000004280)={0x28c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x28c}}, 0x10)
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000004680)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_USE_RRM={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x1)
r9 = syz_open_dev$vcsn(&(0x7f00000046c0), 0x4, 0x500)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004740), r3)
sendmsg$NL80211_CMD_PROBE_CLIENT(r9, &(0x7f0000004800)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000047c0)={&(0x7f0000004780)={0x40, r10, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c804}, 0x40)

12:21:17 executing program 3:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x1010, 0xffffffffffffffff, 0x8000000)
io_uring_setup(0x3910, &(0x7f0000000000)={0x0, 0xcee7, 0x0, 0x0, 0x34b})
io_uring_setup(0x3a29, &(0x7f0000000080)={0x0, 0x4b8c, 0x0, 0x0, 0x33c})
r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0xa2c, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x10010, r0, 0x10000000)
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000140)={'\x00', 0x3, 0x2, 0x80})
r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x6, 0x200)
openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000016c0)={{0x1, 0x1, 0x18, <r4=>r1, {0x2}}, './file0\x00'})
r5 = socket(0x23, 0x80000, 0xffff)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0x84, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r4}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x20000045)
r6 = openat$cgroup_ro(r4, &(0x7f0000001840)='io.stat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x58}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x80)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1000)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000001980)=0x2, 0x4)
bind$netlink(0xffffffffffffffff, &(0x7f00000019c0)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc)
openat$cgroup_devices(r1, &(0x7f0000001a00)='devices.deny\x00', 0x2, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8000201}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40850}, 0x800)

12:21:17 executing program 6:
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x9ebe361, 0x20, 0xd8c2, 0x20, 0x143}, 0x48)
setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000080)=0x1, 0x4)
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x2}}, './file0\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x401c042)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000400), 0x6e, &(0x7f0000001740)=[{&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/222, 0xde}, {&(0x7f0000001680)=""/160, 0xa0}], 0x4}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x28, r0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x80408c1}, 0x20000000)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x4c, r0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2000000000000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a40), r2)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x30, r5, 0x510, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz2\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000805)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), r2)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x7c, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40800)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000001d00), 0xffffffffffffffff)
r8 = socket(0x25, 0xa, 0xab0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d40)={<r9=>0xffffffffffffffff})
r10 = openat$cgroup_ro(r2, &(0x7f0000002580)='cgroup.kill\x00', 0x0, 0x0)
[  109.233591] audit: type=1400 audit(1737462077.372:7): avc:  denied  { execmem } for  pid=277 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002600)={0xbc, r7, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r8}, {0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r9}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x23898c77}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6d}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

12:21:17 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000085)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x1, 0x40000)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5c}}, 0x41)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x804)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000400)=0xf, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000e80)={'ip6gre0\x00', <r4=>0x0, 0x21, 0x1, 0xdc, 0x4, 0x0, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7, 0x6, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001100)={'sit0\x00', &(0x7f0000001080)={'sit0\x00', <r5=>0x0, 0x29, 0xfd, 0x8, 0x6, 0x54, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0xf808, 0x2eb05fd9936f5cbe, 0x7f, 0x2}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001140)={'wg0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002780)={'ip6gre0\x00', &(0x7f0000002700)={'syztnl2\x00', <r7=>0x0, 0x0, 0xa7, 0x3, 0x7fff, 0x4e, @private1, @local, 0x8000, 0x80, 0x5ae9, 0x1ff}})
sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000002940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002900)={&(0x7f00000027c0)={0x140, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
getpeername$netlink(r3, &(0x7f0000002980), &(0x7f00000029c0)=0xc)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r3)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002a80)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0xec, r8, 0x200, 0x70bd26, 0xfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0xa6, 0x33, @action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @device_b, @random="dc894ea86042", {0x3, 0x5}}, @ver_80211n={0x0, 0x3f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @tdls_teardown={0xc, 0x3, {0x2d, {0x37, 0x6c, {0x1f, 0x3, "a4ae33b593c6110d725e9db3066c58c3", "e0799c381fad9c5b8be6c10a4254b8e1d36234a7059cf3f051d792e07a577820", "563fa989ef2133624f8a4e00b6967f66b94a9016e4eeeb7c8b8928803872b474", [{0x2, 0xb, "5c39831a234cf65e46c91f"}, {0x1, 0x4, "c373f2b0"}, {0x1, 0x5, "ad73b77f8a"}]}}, {0x65, 0x12, {@random="79d6cebc59e1", @device_b, @broadcast}}}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}]]}, 0xec}, 0x1, 0x0, 0x0, 0x24000001}, 0x90)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x68, 0x0, 0x220, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x2, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x24040004}, 0x24004002)

12:21:17 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040854}, 0x1)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x8000080)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffffff7f, 0x3c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x80)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4040800)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x53}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4080)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x800)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r5=>r3, {0x1}}, './file0\x00'})
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xc0, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1e6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa206}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x70, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1c5, 0x48}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x821}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040004}, 0x40)
r7 = syz_open_dev$vcsn(&(0x7f0000000ec0), 0x10001, 0x12000)
clone3(&(0x7f0000000f00)={0x40244080, &(0x7f0000000d00), &(0x7f0000000d40), &(0x7f0000000d80), {0x34}, &(0x7f0000000dc0)=""/53, 0x35, &(0x7f0000000e00)=""/92, &(0x7f0000000e80)=[0xffffffffffffffff, 0x0], 0x2, {r7}}, 0x58)
r8 = syz_open_dev$vcsn(&(0x7f0000000f80), 0x100, 0xc000)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8051}, 0x20008000)

12:21:17 executing program 5:
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x21}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, './file0\x00'})
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x35}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x27ef}, @NL80211_ATTR_PMKID={0x14, 0x55, "7bbeec379d8f765b7e372ffc7f21d81d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "5d6b4413deedff3d911cba5f4b098b61"}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20048001)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = openat$cgroup_ro(r0, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x9, 0x3, 0x4, 0x5}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x4841)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000006c0)={'wg0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x20}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r6 = syz_open_dev$vcsn(&(0x7f0000000c80), 0x8, 0x6100)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000ec0)={0xc, 0x0, &(0x7f0000000dc0)=[@increfs={0x40046304, 0x3}, @register_looper], 0x91, 0x0, &(0x7f0000000e00)="7be1a8c6393b4bf4e3201d625e56330e5c7be6761afdb04eaab1d69da4d551022cf97e3a8616bc1467120ddb6455ffe7f3ea09b152c1db53cbe41f148475e5b723d63f58dbc77caa6c421a16b2ae3cffe198eb47b595df6d0e867826ac6429448c9b575846b6bfd5b622dd8294fca2037bc7ccdc43a67dcecaea12959ae86f63f5099daf8f1c5367fbcc2b0e68ae4477ff"})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000fc0)={'ip6tnl0\x00', <r7=>r5, 0x4, 0x40, 0x5, 0xffffffff, 0x4, @mcast2, @rand_addr=' \x01\x00', 0x8000, 0x7, 0x3f, 0xfffffffb}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000012c0)={'wg2\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000002700)={'ip6_vti0\x00', &(0x7f0000002680)={'syztnl0\x00', <r9=>r5, 0x4, 0x0, 0x6, 0x4, 0x22, @empty, @dev={0xfe, 0x80, '\x00', 0x17}, 0x700, 0x1, 0x5, 0x101}})
recvmsg(r2, &(0x7f0000002a40)={&(0x7f0000002740)=@ll={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002940)=[{&(0x7f00000027c0)=""/109, 0x6d}, {&(0x7f0000002840)=""/112, 0x70}, {&(0x7f00000028c0)=""/103, 0x67}], 0x3, &(0x7f0000002980)=""/178, 0xb2}, 0x40010001)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000004280)={'wg2\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000044c0)={'ip6gre0\x00', &(0x7f0000004440)={'ip6gre0\x00', <r12=>r5, 0x2f, 0x8, 0x0, 0xd0a, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x8000, 0x7fff, 0x200}})
sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000004700)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000046c0)={&(0x7f0000004500)={0x1a0, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x80}, 0x10)

[  110.911029] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.911547] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.927155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  110.927410] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.929358] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.930037] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.932902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.933843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  110.934313] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  110.958242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.958439] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  110.981173] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  110.993541] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  110.996646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  111.001624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  111.006389] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  111.007613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  111.010839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  111.012471] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  111.014757] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  111.016608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  111.021094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  111.021323] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  111.027754] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  111.027958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  111.028241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.032048] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  111.033341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  111.035803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  111.038845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.040314] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  111.040332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  111.041076] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.044060] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  111.046428] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  111.049788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  111.055089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.055713] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  111.055893] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  111.059960] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  111.062956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  111.064244] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  111.070685] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  111.075285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  111.079754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.084951] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  111.095844] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  111.097316] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  113.040193] Bluetooth: hci0: command tx timeout
[  113.102669] Bluetooth: hci1: command tx timeout
[  113.102893] Bluetooth: hci2: command tx timeout
[  113.103094] Bluetooth: hci6: command tx timeout
[  113.166998] Bluetooth: hci5: command tx timeout
[  113.167206] Bluetooth: hci3: command tx timeout
[  113.167222] Bluetooth: hci7: command tx timeout
[  113.167447] Bluetooth: hci4: command tx timeout
[  115.086566] Bluetooth: hci0: command tx timeout
[  115.150644] Bluetooth: hci6: command tx timeout
[  115.150687] Bluetooth: hci2: command tx timeout
[  115.150756] Bluetooth: hci1: command tx timeout
[  115.214627] Bluetooth: hci4: command tx timeout
[  115.215217] Bluetooth: hci3: command tx timeout
[  115.215262] Bluetooth: hci7: command tx timeout
[  115.215355] Bluetooth: hci5: command tx timeout
[  117.165693] Bluetooth: hci0: command tx timeout
[  117.201767] Bluetooth: hci1: command tx timeout
[  117.202338] Bluetooth: hci2: command tx timeout
[  117.209449] Bluetooth: hci6: command tx timeout
[  117.262619] Bluetooth: hci7: command tx timeout
[  117.262756] Bluetooth: hci5: command tx timeout
[  117.269604] Bluetooth: hci4: command tx timeout
[  117.269697] Bluetooth: hci3: command tx timeout
[  119.182582] Bluetooth: hci0: command tx timeout
[  119.246609] Bluetooth: hci6: command tx timeout
[  119.246702] Bluetooth: hci2: command tx timeout
[  119.246758] Bluetooth: hci1: command tx timeout
[  119.310618] Bluetooth: hci3: command tx timeout
[  119.310712] Bluetooth: hci4: command tx timeout
[  119.310768] Bluetooth: hci5: command tx timeout
[  119.310824] Bluetooth: hci7: command tx timeout
[  170.795857] syz-executor.0 (284) used greatest stack depth: 23584 bytes left
[  173.424451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.428433] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.444689] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.449944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.469353] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  173.470392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.475663] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  173.538064] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.544066] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  173.545218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  173.548400] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.549436] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  173.550412] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  173.550972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  173.554841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.554943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  173.555734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.560761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.577006] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.579227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  173.581265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.590004] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  173.616344] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.618040] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  173.619201] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  173.621964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  173.624431] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.626222] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  173.627372] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  173.627674] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  173.628708] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  173.629363] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  173.630756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  173.631625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  173.644662] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  173.645611] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  173.646049] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  173.654067] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  173.682277] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  173.682384] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  173.714899] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  173.715402] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  173.758998] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  173.760679] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  173.762178] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  173.788124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  173.795256] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  173.796738] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  175.566805] Bluetooth: hci0: command tx timeout
[  175.630622] Bluetooth: hci2: command tx timeout
[  175.696648] Bluetooth: hci1: command tx timeout
[  175.696941] Bluetooth: hci4: command tx timeout
[  175.759536] Bluetooth: hci7: command tx timeout
[  175.759545] Bluetooth: hci3: command tx timeout
[  175.822939] Bluetooth: hci5: command tx timeout
[  175.950658] Bluetooth: hci6: command tx timeout
[  177.614697] Bluetooth: hci0: command tx timeout
[  177.679608] Bluetooth: hci2: command tx timeout
[  177.742799] Bluetooth: hci4: command tx timeout
[  177.742823] Bluetooth: hci1: command tx timeout
[  177.806612] Bluetooth: hci7: command tx timeout
[  177.806633] Bluetooth: hci3: command tx timeout
[  177.904812] Bluetooth: hci5: command tx timeout
[  177.999565] Bluetooth: hci6: command tx timeout
[  179.662841] Bluetooth: hci0: command tx timeout
[  179.726619] Bluetooth: hci2: command tx timeout
[  179.790675] Bluetooth: hci4: command tx timeout
[  179.790727] Bluetooth: hci1: command tx timeout
[  179.854570] Bluetooth: hci3: command tx timeout
[  179.856153] Bluetooth: hci7: command tx timeout
[  179.919724] Bluetooth: hci5: command tx timeout
[  180.046535] Bluetooth: hci6: command tx timeout
[  181.710657] Bluetooth: hci0: command tx timeout
[  181.774604] Bluetooth: hci2: command tx timeout
[  181.838580] Bluetooth: hci1: command tx timeout
[  181.840116] Bluetooth: hci4: command tx timeout
[  181.902876] Bluetooth: hci7: command tx timeout
[  181.902903] Bluetooth: hci3: command tx timeout
[  181.967028] Bluetooth: hci5: command tx timeout
[  182.095541] Bluetooth: hci6: command tx timeout
[  235.677197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  235.678422] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  235.685818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  235.688730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  235.692535] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  235.697885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  235.864822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.866337] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.867308] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.869557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.870363] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  235.871209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  236.003378] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  236.038250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  236.040572] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  236.043957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  236.045077] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  236.046846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.096167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.137792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  236.147295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  236.169321] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  236.172698] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  236.173479] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  236.187402] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  236.188537] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.189127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  236.193726] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  236.194188] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  236.195791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  236.197035] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  236.213756] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  236.215167] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  236.215763] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  236.242328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  236.242988] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  236.252277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  236.253227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  236.290166] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  236.290906] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  236.293895] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  236.296708] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  236.316777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  236.338989] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  236.339137] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  236.341815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  236.343723] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  236.401869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  237.775907] Bluetooth: hci0: command tx timeout
[  237.904089] Bluetooth: hci1: command tx timeout
[  238.350831] Bluetooth: hci7: command tx timeout
[  238.351238] Bluetooth: hci2: command tx timeout
[  238.421545] Bluetooth: hci6: command tx timeout
[  238.478647] Bluetooth: hci5: command tx timeout
[  238.479713] Bluetooth: hci4: command tx timeout
[  238.547589] Bluetooth: hci3: command tx timeout
[  239.834502] Bluetooth: hci0: command tx timeout
[  239.983501] Bluetooth: hci1: command tx timeout
[  240.417774] Bluetooth: hci7: command tx timeout
[  240.417881] Bluetooth: hci2: command tx timeout
[  240.507509] Bluetooth: hci6: command tx timeout
[  240.545639] Bluetooth: hci4: command tx timeout
[  240.545753] Bluetooth: hci5: command tx timeout
[  240.594890] Bluetooth: hci3: command tx timeout
[  241.873885] Bluetooth: hci0: command tx timeout
[  241.998870] Bluetooth: hci1: command tx timeout
[  242.451532] Bluetooth: hci2: command tx timeout
[  242.451650] Bluetooth: hci7: command tx timeout
[  242.514283] Bluetooth: hci6: command tx timeout
[  242.574589] Bluetooth: hci5: command tx timeout
[  242.574702] Bluetooth: hci4: command tx timeout
[  242.639523] Bluetooth: hci3: command tx timeout
[  243.918849] Bluetooth: hci0: command tx timeout
[  244.046586] Bluetooth: hci1: command tx timeout
[  244.494935] Bluetooth: hci7: command tx timeout
[  244.496031] Bluetooth: hci2: command tx timeout
[  244.558555] Bluetooth: hci6: command tx timeout
[  244.622869] Bluetooth: hci4: command tx timeout
[  244.623749] Bluetooth: hci5: command tx timeout
[  244.686545] Bluetooth: hci3: command tx timeout
[  298.283369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  298.312133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  298.328022] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  298.350317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  298.352946] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  298.354059] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  298.593604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  298.598746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  298.605672] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.619281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.621656] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  298.621779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  298.622535] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.638306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  298.638930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  298.657783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  298.662675] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  298.664567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  298.674384] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  298.676295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  298.677403] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  298.684256] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  298.691879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  298.695664] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  298.698294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  298.699784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  298.701207] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  298.711993] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  298.725103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  298.726176] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  298.843855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  298.897078] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  298.897157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  298.924992] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  298.937781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  298.980120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  298.980893] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  298.984733] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  298.986280] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  298.992943] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  298.994531] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  299.006788] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  299.016120] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  299.016722] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  299.023098] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  299.128362] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  299.146690] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  299.163303] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  300.366720] Bluetooth: hci0: command tx timeout
[  300.686627] Bluetooth: hci2: command tx timeout
[  300.687122] Bluetooth: hci1: command tx timeout
[  300.814571] Bluetooth: hci4: command tx timeout
[  300.878654] Bluetooth: hci3: command tx timeout
[  301.134691] Bluetooth: hci6: command tx timeout
[  301.136226] Bluetooth: hci7: command tx timeout
[  301.198605] Bluetooth: hci5: command tx timeout
[  302.418574] Bluetooth: hci0: command tx timeout
[  302.734561] Bluetooth: hci1: command tx timeout
[  302.735273] Bluetooth: hci2: command tx timeout
[  302.869588] Bluetooth: hci4: command tx timeout
[  302.932493] Bluetooth: hci3: command tx timeout
[  303.183627] Bluetooth: hci6: command tx timeout
[  303.183748] Bluetooth: hci7: command tx timeout
[  303.246586] Bluetooth: hci5: command tx timeout
[  304.462726] Bluetooth: hci0: command tx timeout
[  304.782570] Bluetooth: hci2: command tx timeout
[  304.783263] Bluetooth: hci1: command tx timeout
[  304.910524] Bluetooth: hci4: command tx timeout
[  304.974511] Bluetooth: hci3: command tx timeout
[  305.232601] Bluetooth: hci7: command tx timeout
[  305.233419] Bluetooth: hci6: command tx timeout
[  305.295525] Bluetooth: hci5: command tx timeout
[  306.511734] Bluetooth: hci0: command tx timeout
[  306.833542] Bluetooth: hci2: command tx timeout
[  306.833668] Bluetooth: hci1: command tx timeout
[  306.982524] Bluetooth: hci4: command tx timeout
[  307.026504] Bluetooth: hci3: command tx timeout
[  307.280486] Bluetooth: hci6: command tx timeout
[  307.280598] Bluetooth: hci7: command tx timeout
[  307.342528] Bluetooth: hci5: command tx timeout
[  360.802566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  360.803852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  360.805654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  360.813383] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  360.815313] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  360.824592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  360.878725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  360.891721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  360.898506] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  360.906220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  360.908927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  360.911153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  361.069780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  361.103612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  361.109273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  361.138180] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  361.143788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  361.144233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  361.145324] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  361.148500] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  361.165518] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  361.183035] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  361.187203] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  361.193708] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  361.197620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  361.199055] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  361.200171] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  361.209950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  361.211612] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  361.215623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  361.271400] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.275306] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  361.284503] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.328358] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  361.331904] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.336869] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  361.338341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  361.350200] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  361.353940] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  361.355915] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  361.373694] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  361.396460] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  361.397213] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  361.442268] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  361.442358] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  361.523757] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  361.581582] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  361.584631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  362.896516] Bluetooth: hci0: command tx timeout
[  362.959589] Bluetooth: hci1: command tx timeout
[  363.215588] Bluetooth: hci2: command tx timeout
[  363.278585] Bluetooth: hci3: command tx timeout
[  363.342573] Bluetooth: hci4: command tx timeout
[  363.534584] Bluetooth: hci5: command tx timeout
[  363.598632] Bluetooth: hci6: command tx timeout
[  363.662667] Bluetooth: hci7: command tx timeout
[  364.942522] Bluetooth: hci0: command tx timeout
[  365.006598] Bluetooth: hci1: command tx timeout
[  365.263507] Bluetooth: hci2: command tx timeout
[  365.326607] Bluetooth: hci3: command tx timeout
[  365.390523] Bluetooth: hci4: command tx timeout
[  365.584234] Bluetooth: hci5: command tx timeout
[  365.646627] Bluetooth: hci6: command tx timeout
[  365.710739] Bluetooth: hci7: command tx timeout
[  366.990832] Bluetooth: hci0: command tx timeout
[  367.054732] Bluetooth: hci1: command tx timeout
[  367.316462] Bluetooth: hci2: command tx timeout
[  367.374530] Bluetooth: hci3: command tx timeout
[  367.438787] Bluetooth: hci4: command tx timeout
[  367.630700] Bluetooth: hci5: command tx timeout
[  367.694642] Bluetooth: hci6: command tx timeout
[  367.758708] Bluetooth: hci7: command tx timeout
[  369.038892] Bluetooth: hci0: command tx timeout
[  369.102508] Bluetooth: hci1: command tx timeout
[  369.360517] Bluetooth: hci2: command tx timeout
[  369.422664] Bluetooth: hci3: command tx timeout
[  369.487604] Bluetooth: hci4: command tx timeout
[  369.678622] Bluetooth: hci5: command tx timeout
[  369.742705] Bluetooth: hci6: command tx timeout
[  369.806496] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
12:26:28  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=1ffff11005647ef2 RCX=0000000000000000 RDX=ffff888015da9bc0
RSI=0000000000000008 RDI=ffff888015daa60c RBP=0000000000000001 RSP=ffff88802b23f778
R8 =0000000000000000 R9 =fffffbfff0c80a7a R10=ffffffff864053d7 R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=ffff88806ce402d0 R15=0000000000000000
RIP=ffffffff81502d58 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd7f2dd6540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560b7538bfa8 CR3=000000002e970000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff
XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69
XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000020000 RCX=ffffffff814fd719 RDX=1ffff1100676b4c1
RSI=0000000000000000 RDI=ffffffff87f0e535 RBP=ffff888033b5a638 RSP=ffff888023957500
R8 =0000000000000000 R9 =fffffbfff0fe19e4 R10=ffffffff87f0cf27 R11=0000000000000000
R12=ffff888033b59bc0 R13=ffffffff85c18d00 R14=0000000000000001 R15=0000000000000003
RIP=ffffffff814fd7e2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f43294bb260 CR3=000000003409e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000