syzkaller login: [   62.852606] sshd (230) used greatest stack depth: 24216 bytes left
Warning: Permanently added '[localhost]:59287' (ECDSA) to the list of known hosts.
2025/01/23 23:27:11 fuzzer started
2025/01/23 23:27:12 dialing manager at localhost:45511
[   65.883049] cgroup: Unknown subsys name 'net'
[   65.993231] cgroup: Unknown subsys name 'cpuset'
[   66.026533] cgroup: Unknown subsys name 'rlimit'
[   72.050529] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/23 23:27:29 syscalls: 2217
2025/01/23 23:27:29 code coverage: enabled
2025/01/23 23:27:29 comparison tracing: enabled
2025/01/23 23:27:29 extra coverage: enabled
2025/01/23 23:27:29 setuid sandbox: enabled
2025/01/23 23:27:29 namespace sandbox: enabled
2025/01/23 23:27:29 Android sandbox: enabled
2025/01/23 23:27:29 fault injection: enabled
2025/01/23 23:27:29 leak checking: enabled
2025/01/23 23:27:29 net packet injection: enabled
2025/01/23 23:27:29 net device setup: enabled
2025/01/23 23:27:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/23 23:27:29 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/23 23:27:29 USB emulation: enabled
2025/01/23 23:27:29 hci packet injection: enabled
2025/01/23 23:27:29 wifi device emulation: enabled
2025/01/23 23:27:29 802.15.4 emulation: enabled
2025/01/23 23:27:30 fetching corpus: 0, signal 0/2000 (executing program)
2025/01/23 23:27:30 fetching corpus: 0, signal 0/4000 (executing program)
2025/01/23 23:27:30 fetching corpus: 0, signal 0/6000 (executing program)
2025/01/23 23:27:30 fetching corpus: 0, signal 0/8000 (executing program)
2025/01/23 23:27:30 fetching corpus: 0, signal 0/8321 (executing program)
2025/01/23 23:27:30 fetching corpus: 0, signal 0/8321 (executing program)
2025/01/23 23:27:33 starting 8 fuzzer processes
23:27:33 executing program 0:
mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9800, &(0x7f0000000040)={0x8, 0x7, 0x808d3bc64098396f}, 0x20)
getdents64(0xffffffffffffff9c, &(0x7f0000000080)=""/63, 0x3f)
umount2(&(0x7f00000000c0)='./file0\x00', 0x5)
mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x6da63a5b26d0002)
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x20000, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
name_to_handle_at(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3f, 0x2858, 0x169c, 0xff}, 0xf00, 0x7f}}, &(0x7f0000000200), 0x800)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{}, {@dfltgid}], [{@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x33, 0x38, 0x35, 0x37, 0x38, 0x62, 0x38], 0x2d, [0x62, 0x30, 0x66, 0x64], 0x2d, [0x33, 0x3c, 0x61, 0x64], 0x2d, [0x30, 0x38, 0x34, 0x61], 0x2d, [0x31, 0x64, 0x30, 0x37, 0x62, 0x32, 0x62, 0x35]}}}]}})
ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000380)={0x4, "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"})
fchmodat(r1, &(0x7f00000005c0)='./file0\x00', 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000640))
rename(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0\x00')
recvmsg$unix(r1, &(0x7f0000000bc0)={&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000880)=""/166, 0xa6}, {&(0x7f0000000940)=""/48, 0x30}, {&(0x7f0000000980)=""/97, 0x61}, {&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/33, 0x21}], 0x6, &(0x7f0000000b40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r4=>0xffffffffffffffff]}}], 0x50}, 0x40000001)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000c40)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000d40)=0xe8)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000e00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x2c}}, 0x80)
ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000e40)={{r2}, "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"})
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001f80)={'filter\x00', 0x0, 0x3, 0xd2, [0x7fffffff, 0x80000000, 0x7, 0x3, 0x5, 0x17f7e134], 0x1, &(0x7f0000001e40)=[{}], &(0x7f0000001e80)=""/210}, &(0x7f0000002000)=0x78)
io_uring_setup(0x5687, &(0x7f0000002040)={0x0, 0x9fec, 0x4, 0x1, 0x89, 0x0, r4})

23:27:33 executing program 2:
r0 = openat2(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x400080, 0x156}, 0x18)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x74, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000085)
r1 = dup2(r0, r0)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x1)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20008054)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001a80)={{0x1, 0x1, 0x18, <r2=>r0, {0x3}}, './file0\x00'})
sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x1)
bind(r1, &(0x7f0000001bc0)=@hci={0x1f, 0x2, 0x4}, 0x80)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffff000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20004880)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x2c, 0x0, 0x100, 0x70bd2a, 0x8, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}}, 0x4040)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000001e40))
r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001e80))
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000001ec0))
r5 = accept(r0, &(0x7f0000001f00)=@caif=@util, &(0x7f0000001f80)=0x80)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000001fc0)={0x3, 'ip_vti0\x00', {0x1}, 0x8})
r6 = accept4$bt_l2cap(r5, &(0x7f0000002000)={0x1f, 0x0, @none}, &(0x7f0000002040)=0xe, 0x180800)
open_by_handle_at(r6, &(0x7f0000002080)=@shmem={0xc, 0x1, {0x2, 0xef15}}, 0x2002)
r7 = openat(r2, &(0x7f00000020c0)='./file0\x00', 0x8140, 0x28)
ftruncate(r7, 0x1)

23:27:33 executing program 1:
prctl$PR_SET_ENDIAN(0x14, 0x2)
prctl$PR_SET_ENDIAN(0x14, 0x0)
sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x3ed, 0x800, 0x70bd29, 0x25dfdbfd, "c508ae23cb4ac350f30b2a0670ea7b2b86b54abd5925d2b5264c445aa77566580cdd471001d4b114d510b81c75c4ac35abfa102222436c6a228327a6ded6d3efca7d3a6186a39834e13ad130f4ced2374e31ee6107326176fa", ["", "", "", "", ""]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})
ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000180)={'\x00', 0x3ff, 0x3, 0x2})
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4090}, 0x20010810)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc8d0, 0x6a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000010)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000480)={0x0, 0xfff, 0x400})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/asound/seq/clients\x00', 0x0, 0x0)
openat$cgroup_type(r2, &(0x7f00000008c0), 0x2, 0x0)
read(r2, &(0x7f0000000900)=""/174, 0xae)
prctl$PR_SET_ENDIAN(0x14, 0x2)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000009c0)={0x4, 0x1, 0x9, 0x6, 0x9})
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r0)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000e00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x340, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x146b3a32}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4a4}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ef}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd55b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x43}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf9b5}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x16c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x291}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xff, @private0, 0x595b}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x40, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x48000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xa43d, @mcast1, 0x7ff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3f, @loopback, 0x80000000}}}}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x48004}, 0xc080)
r4 = dup(r2)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), r4)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xf8, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe360000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3116}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$FICLONE(r4, 0x40049409, 0xffffffffffffffff)

23:27:33 executing program 3:
r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "bb1373adfe0639c78b8df6791c44aa96182fd5dacc64a37351aafaf28337a706972f00fbf094304a14c4a9ff9c0a3ce39a3a9e067463a45bbcf96dacca39c22d", 0x18}, 0x48, 0xfffffffffffffffd)
r1 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="c71473a58cea3efd0536977e963b0a03b99ddd46270412bbbfd58b9b6ff26cc89103c94c60ab6ea03af66d5186ddff5afed7af617cd58189f2a964cadc88292d503fde0c370111d0f8b3147431fb2d47280d7b0fe12c3bb1f468f552f0d3100b7a210fd57718631901b82c64b91d684274cae6ee75449519a67e1263b735dd86c5a8538ca60acbd332111a632c764de95a6555", 0x93, r0)
request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='e355a76a11a1be18', r1)
pipe2(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000340)=0x8)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}}, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000001800))
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000001c00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001880)={0x314, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="73b6abcfbee2a68c2c6fb734f599f60475f56f3e5acc41fe18cbd555589fd858"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "648b156a41dda472"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0dcd7a5729e78869"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c781bdeef07166e25d18441c69dba21b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b9a504d33c8630a3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7a611fe04350b3c38b71bee4721228811b11181229df2052"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="81cf87302f2a3beda8d70b5df7ac80c9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1f}]}, @NL80211_ATTR_REKEY_DATA={0xc0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "113d3102881e6865"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b703932975949fc15353b3d3d8a502a41bd983432f31428c088cc439e6c61744"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c96261688183f9a7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3275188312f1170ac09ca4c1d8a80789a286428ee773312bd865e6914949cb8d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="55505170476d8a8bb86903d4e849ac7aa8aa713e63e2d98f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "01d6d8418db51310"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6557298e78db4602"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "deffca95ad66cb06"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="aeb580bab74aeb50bcfcf713aa9fd6825e5db6115269cf4d"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0862487b05fd8c4903848ab765af5c3d115aa32bc0c333005c4b16c502d90c4b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8d87ded0b9db834d3a46a4350aefb8a1"}]}, @NL80211_ATTR_REKEY_DATA={0xcc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="39505e27a673ed3dfec7cba39051bad1bd6442dc37ecbd76"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="099c6e6f31f166c78e0fba77dfa11fb4"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="970c42f522a362f429e12813f2266f086bd820f8205b9682"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d233cfb9a81203a9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b297725e54994a18c2849bccddb68324"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6659bdf701e7a3ef"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="bf20dc6e07ef9a8e066e4bd2a9238036c7288a172bb58a528dc9ca716ad4865f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="24bbea9fec16aa5ef4d7dab0604f667a8d986ed92e652055ab459f24a4f7b65e"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe70}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="43cc0304694b5fb75fe90f0a9f25e76c428b9c460c590dbef14b743e06ffb1d1"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bc0fb97a657974180b53f260284af57d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fa6e9f4deb7a68c0881910cbaaea3631"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x20}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5f18d9d42d7a2ed7125c4acc979c9531"}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x314}, 0x1, 0x0, 0x0, 0x4c084}, 0x20040000)
ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000001c40)=0x1)
r5 = add_key$keyring(&(0x7f0000001c80), &(0x7f0000001cc0)={'syz', 0x2}, 0x0, 0x0, r1)
keyctl$reject(0x13, r5, 0x800, 0x7c, r1)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x38, 0x1, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3e0000}]}, 0x38}}, 0x4000000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000001e00)={0x80002000})
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000001e40)={<r6=>0x0, 0x9, 0x0, [0x41, 0x40, 0x0, 0x101, 0x7], [0x81, 0xa4, 0x6, 0x6, 0xe2b, 0x4, 0x0, 0x19, 0xffffffffffffff03, 0x7fffffff, 0x7, 0x1ff, 0x50900f44, 0x4, 0x8, 0x8, 0x100000001, 0xac4e, 0xb55, 0x6, 0x7, 0x7, 0x100, 0x0, 0x6, 0x100000001, 0x259, 0x9, 0xfffffffffffffff9, 0x3, 0x800, 0x7, 0xda, 0x0, 0x7f, 0x5, 0x5, 0x4, 0xf6, 0x3, 0x6, 0x0, 0x100, 0x8000, 0x33, 0x5, 0x4, 0x1, 0x80, 0x3, 0x3fff8, 0x7f, 0x1, 0x2, 0x7, 0x3, 0x9, 0x86, 0x3, 0x5, 0x1, 0x9, 0x4e, 0xffff, 0x1, 0xffffffffffffffe1, 0x5, 0x8, 0x101, 0x1, 0xf24, 0x0, 0x100000000, 0x8, 0x491, 0x2, 0xf490, 0x51, 0x2, 0x3, 0x3, 0x81, 0x4, 0x7, 0x6, 0x7ff, 0x7f, 0x6, 0x2, 0x0, 0x5, 0x8, 0x6, 0x0, 0x34eb, 0x5, 0x0, 0x100000000, 0x7fff, 0xc7, 0x9, 0xa9, 0x6, 0x3, 0xf40000000000000, 0x4, 0x1010, 0x3, 0x0, 0x800, 0x20, 0x6, 0x6, 0x525, 0x8, 0xff, 0x3ff, 0x8, 0x101, 0x1000, 0x100000001]})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000002280)={0x10, 0x4, {0x4b2, @usage=0x8000, 0x0, 0x20, 0x0, 0x8, 0xa7, 0x6, 0xc0, @usage=0x26c358a, 0x9, 0x4, [0x2, 0x5, 0x1, 0x7f, 0x4, 0x80]}, {0x3, @struct={0x4a, 0x8}, 0x0, 0x5, 0x1f, 0x8, 0x8001, 0xfff, 0x0, @usage, 0x47, 0x3, [0x9, 0x5, 0x2, 0x5d3, 0x5, 0xab]}, {0x8000, @usage=0xffffffffffffffff, r6, 0x2, 0x6ea711ef, 0x6, 0x7, 0xd7cd, 0x0, @usage=0xffff, 0x5, 0x40, [0x80000000, 0x3, 0x7, 0x3f, 0x1, 0xfffffffffffffff7]}, {0x1, 0x10001, 0x2}})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000002680)={0x0, 0x7})
keyctl$read(0xb, r5, &(0x7f0000003680)=""/114, 0x72)
add_key$user(&(0x7f0000003700), &(0x7f0000003740)={'syz', 0x2}, &(0x7f0000003780)="e08c2c7c7ce509e90380cf50ff0fbd618f4afe3a12b2856eb8373bd65ab3f5fc6283e3c36e3fe791e25189c440d21d8bdd160a5688f270d3a2dd49ae629e9d801583fbb46c2b351eb990fb69444a8bd89b2c5e7939576081236fefcd2903a2443367b134012508fe8b42a46348a31260efb2485fe3882e7ad1c9b5f12f13db3d26c0db09ab98582d0137531c4ee7d1d30975d19b241f61b476", 0x99, 0x0)

[   86.731410] audit: type=1400 audit(1737674853.271:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:27:33 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r0=>0x0, 0x4, 0x5, 0x3, 0x800, 0x35, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fdff84f8dfd899d, 0x1, 0x3, 0x401}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', r0, 0x29, 0x6, 0x8, 0xfffffff7, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x700, 0xffffffff}})
removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.metacopy\x00')
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={<r1=>0xffffffffffffffff, 0x1, 0x7, 0x9})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r2, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000081)
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x0)
fchown(r1, r3, 0xee00)
socket$nl_xfrm(0x10, 0x3, 0x6)
capget(&(0x7f0000000440)={0x20071026}, &(0x7f0000000480)={0x6, 0xffffffff, 0x1, 0x9, 0x10001, 0x1})
r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x800)
getresuid(&(0x7f00000006c0)=<r5=>0x0, &(0x7f0000000700), &(0x7f0000000740))
mount$9p_unix(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x80, &(0x7f0000000780)={'trans=unix,', {[{@uname={'uname', 0x3d, 'trusted.overlay.metacopy\x00'}}, {@access_uid={'access', 0x3d, r5}}, {@debug={'debug', 0x3d, 0xfffffffffffffff8}}, {@cachetag={'cachetag', 0x3d, '/dev/zero\x00'}}, {@nodevmap}, {@uname={'uname', 0x3d, '/#[\\[:['}}], [{@smackfsdef={'smackfsdef', 0x3d, '\\+'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xc822}}, {@smackfsroot={'smackfsroot', 0x3d, 'syztnl1\x00'}}]}})
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000880), 0x101000, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r7=>r4}, './file0\x00'})
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r6)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x1b8, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x104, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc53}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb700000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xea}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x1b8}}, 0x41)

23:27:33 executing program 4:
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)=""/205, &(0x7f0000000100)=0xcd)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x2}, 0x8)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x20c, 0x0, 0x4568d4c94d067ae9, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4a9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x58}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbcc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4456}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x699}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd66}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x300000000000}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000080)
mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x200040, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@access_user}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, 'eth\x00'}}]}})
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r2 = getgid()
fchown(r1, 0xffffffffffffffff, r2)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x2, 0x7, 0x201, 0x0, 0x0, {0x9, 0x0, 0xa}, [@NFACCT_FLAGS={0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3f}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000780), 0x2, 0x0)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x95}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
r3 = openat2(r0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x2000, 0x67, 0x19}, 0x18)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r6, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x88f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x116e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x25b86ac5efcbd8e5}, 0x4080)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x48, r4, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x200, 0x72}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1000}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x4000010)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, r7, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)

23:27:33 executing program 5:
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x4}, @timestamp, @timestamp], 0x3)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x2a8, r0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x36, 0x45, "5bf4f300177396ea27f7af7b3feb4038bacc5c94a32a28e0b9fa3be12115f51598744b41a5ba141d0007502bbd8109b92548"}, @NL80211_ATTR_TESTDATA={0x36, 0x45, "4b55d7c6059ddcc4a405dc651d75feb1cecf598f70d35cbdbf3532e50da5260586433fd5ec8750742eb144d7e9f1d515896a"}, @NL80211_ATTR_TESTDATA={0xf2, 0x45, "1c913d0a824a09de1edf0759345958a7471a7a2c8cd0a8ff6be6e068c31c4f3f0db11bb50e231c6cbc7208cc1ca9d66bf45e95d358c684c4f12bd14a7db224e5b39d82c87d3ebd3d0f135d33c9a6f4c1228d7cf1b8ccd544e582083cdb2aebed896894b0a7d15159eaa345070102df7a69446997523997506c420e89de3b5d5b55c2531ff93797aab390486d8d9f2b2b42eea6f86ccb656f77683c9df10077e84e1cc6fb021cad95fd861bfa6d470d609d7b3b68c98bf1c1d0329accc2672c69767e6eec5a077e0fc5b133d6e7420b81a2a2168af625d5ab8fdeca2af73b0fcdbd972a18b062d683e7849816bbd6"}, @NL80211_ATTR_TESTDATA={0x98, 0x45, "eb6f60000b9563f1566add84d2ecdbab3cbb4c0f9f70e4342ffd2f032dbdcdb3bfb0c62bc29e620e0c3123ad01bd61c437c193d0749b850d867542246276a50b297c221b6d9b935ccb1d687a4a06ffede3d042b513503f34c9d7ca4f9afecdc87c8639e3ffb48e7c0311c36214de971bd174124616e0722fc830a84810407d7da285504ae7df69ac23c392ed0a9a7ffd1e355756"}, @NL80211_ATTR_TESTDATA={0x8f, 0x45, "69ed5d041d8c4190a39ea15fc1171e9cdacf2188a07d5a5d9b995e63374b10fd8d10d2baee3a8395672ee904b7767e9710dc9737ff5c0ff71a1c0cd6022886fcce260da1dcb26dda0d29bb8b0e357f7d2a6cd99e2d0d9ff616c77b4870c0b3706d6ac1b098418c464cfd7b9600d801fb0e870968361abe145019fb477684074b7f76f81d2e806650d94c16"}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x40448c2}, 0x20000000)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x354, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3fc0000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x287}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x232}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x118, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2b3d, @remote, 0xff}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @remote, 0x1f71}}}}]}]}, 0x354}}, 0x4000044)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000840)=0xc72)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f00000009c0), 0x4000, 0x0)
r3 = creat(&(0x7f0000000a00)='./file0\x00', 0x82)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000a40))
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/module/dm_mod', 0x2, 0x2)
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xec, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20004800}, 0x20050)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x50, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1000}, {0x8, 0x15, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10004814}, 0x90)
accept4(r1, 0x0, &(0x7f0000000f80), 0x80800)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x64, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001100)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r4)
sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x2c, r6, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x60}}, 0x20004)

23:27:33 executing program 7:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40050)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x248, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x11c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x33f}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000001}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffd}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4963}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0xcc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x94, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000000000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xae77}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe2e5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x40}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x40}, 0x85)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file0\x00'})
sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c444}, 0x20040000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, <r6=>r5}, './file1\x00'})
ioctl$HIDIOCGSTRING(r6, 0x81044804, &(0x7f00000009c0)={0x4e, "07b3fb3a47fa7b2dd714ffb00cf691e11ea2226a3861ce6aa437ed81feaa79cbb7df237f2cf140019950738547e55f37ae6c36ff9270608cc391774952ab1b7dd85dea4897d79d65a46f3ec50d0f"})
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4)
stat(&(0x7f0000000c00)='./file1/file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000d80)={0x0, <r9=>0x0}, &(0x7f0000000dc0)=0xc)
fstat(r6, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
mount$9p_rdma(&(0x7f0000000b40), &(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0), 0x0, &(0x7f0000000e80)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@access_uid={'access', 0x3d, r7}}, {@rq={'rq', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0xbe}}], [{@fowner_eq={'fowner', 0x3d, r8}}, {@uid_eq={'uid', 0x3d, r9}}, {@euid_gt={'euid>', r10}}, {@measure}]}})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f0000001240)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001200)={&(0x7f0000000fc0)={0x234, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x200000000000000}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x18c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffd}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e6aa84d4252e4a5be108f233030e1c3d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fd1ebd3b2c4eefd118f23e8b9fd528c6fd73314b9adb7671748a4ff629cba430"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "385bac9e887ed500d4580d04e1a1982c195c14e5ce79e5f0ddabb8f0c3570ecd"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x40, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "aa9ca85248d9b561da992ac2a29c48e3"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "08fbb24beda56a7e34e55bcaa3bd434d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "870f1b26eadcb37822875b0c7008df38"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x234}, 0x1, 0x0, 0x0, 0x20040044}, 0x10004000)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x4c, r0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20040040)

[   88.137802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.143654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.147036] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.150093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.157896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.169999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.173917] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   88.176200] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.182429] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.194420] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.204610] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   88.213896] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.224676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.238120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.243787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.246528] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.277769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.281736] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   88.284014] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.289656] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.289655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.297183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.301441] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.304629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.322859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.334689] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.346440] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   88.351781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.354476] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   88.357068] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.358355] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   88.389694] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   88.394834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   88.401175] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   88.406683] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   88.408774] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   88.413393] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   88.417871] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   88.427464] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   88.430972] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   88.443823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   88.447721] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   88.449668] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   88.459761] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   88.462868] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   88.466995] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   88.472722] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   88.474635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   90.225809] Bluetooth: hci0: command tx timeout
[   90.289489] Bluetooth: hci1: command tx timeout
[   90.353621] Bluetooth: hci2: command tx timeout
[   90.417555] Bluetooth: hci3: command tx timeout
[   90.481700] Bluetooth: hci4: command tx timeout
[   90.545445] Bluetooth: hci5: command tx timeout
[   90.546179] Bluetooth: hci6: command tx timeout
[   90.546228] Bluetooth: hci7: command tx timeout
[   92.273667] Bluetooth: hci0: command tx timeout
[   92.337355] Bluetooth: hci1: command tx timeout
[   92.401592] Bluetooth: hci2: command tx timeout
[   92.465688] Bluetooth: hci3: command tx timeout
[   92.529769] Bluetooth: hci4: command tx timeout
[   92.593425] Bluetooth: hci5: command tx timeout
[   92.593469] Bluetooth: hci7: command tx timeout
[   92.593870] Bluetooth: hci6: command tx timeout
[   94.321379] Bluetooth: hci0: command tx timeout
[   94.385973] Bluetooth: hci1: command tx timeout
[   94.449616] Bluetooth: hci2: command tx timeout
[   94.513379] Bluetooth: hci3: command tx timeout
[   94.578312] Bluetooth: hci4: command tx timeout
[   94.643295] Bluetooth: hci7: command tx timeout
[   94.643798] Bluetooth: hci6: command tx timeout
[   94.644304] Bluetooth: hci5: command tx timeout
[   96.369643] Bluetooth: hci0: command tx timeout
[   96.433377] Bluetooth: hci1: command tx timeout
[   96.497351] Bluetooth: hci2: command tx timeout
[   96.561486] Bluetooth: hci3: command tx timeout
[   96.626309] Bluetooth: hci4: command tx timeout
[   96.689443] Bluetooth: hci5: command tx timeout
[   96.689963] Bluetooth: hci6: command tx timeout
[   96.691357] Bluetooth: hci7: command tx timeout
[  147.982718] syz-executor.2 (280) used greatest stack depth: 23504 bytes left
[  150.572785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  150.577714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  150.580660] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.591514] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  150.592617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  150.599126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  150.599647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  150.601083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.601501] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  150.603987] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  150.605900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  150.615035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.615434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  150.621028] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  150.622953] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  150.624895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  150.627103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  150.638910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  150.659753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  150.674754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  150.677431] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  150.689678] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  150.699782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  150.710016] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  150.840423] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  150.849702] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  150.859733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  150.866337] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  150.869621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  150.871545] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  150.875561] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  150.879645] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  150.881771] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  150.886593] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  150.889541] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  150.891674] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  150.949297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  150.962594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  150.965776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  150.967141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  150.969175] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  150.971905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  150.973957] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  150.982874] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  151.001311] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  151.034216] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  151.043427] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  151.046611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  152.625458] Bluetooth: hci0: command tx timeout
[  152.689350] Bluetooth: hci1: command tx timeout
[  152.689368] Bluetooth: hci2: command tx timeout
[  152.754378] Bluetooth: hci3: command tx timeout
[  153.009767] Bluetooth: hci7: command tx timeout
[  153.073316] Bluetooth: hci4: command tx timeout
[  153.137345] Bluetooth: hci5: command tx timeout
[  153.137408] Bluetooth: hci6: command tx timeout
[  154.675679] Bluetooth: hci0: command tx timeout
[  154.737304] Bluetooth: hci1: command tx timeout
[  154.737318] Bluetooth: hci2: command tx timeout
[  154.802311] Bluetooth: hci3: command tx timeout
[  155.057466] Bluetooth: hci7: command tx timeout
[  155.123016] Bluetooth: hci4: command tx timeout
[  155.185823] Bluetooth: hci5: command tx timeout
[  155.186390] Bluetooth: hci6: command tx timeout
[  156.721370] Bluetooth: hci0: command tx timeout
[  156.785312] Bluetooth: hci1: command tx timeout
[  156.785775] Bluetooth: hci2: command tx timeout
[  156.852318] Bluetooth: hci3: command tx timeout
[  157.105317] Bluetooth: hci7: command tx timeout
[  157.169411] Bluetooth: hci4: command tx timeout
[  157.233359] Bluetooth: hci6: command tx timeout
[  157.233801] Bluetooth: hci5: command tx timeout
[  158.771366] Bluetooth: hci0: command tx timeout
[  158.834533] Bluetooth: hci2: command tx timeout
[  158.834603] Bluetooth: hci1: command tx timeout
[  158.898287] Bluetooth: hci3: command tx timeout
[  159.153518] Bluetooth: hci7: command tx timeout
[  159.217326] Bluetooth: hci4: command tx timeout
[  159.281425] Bluetooth: hci5: command tx timeout
[  159.281961] Bluetooth: hci6: command tx timeout
[  213.060674] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  213.062683] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  213.065739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  213.069670] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  213.072083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  213.073788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.126953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  213.138201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  213.141574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  213.143609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  213.148671] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  213.152621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  213.160699] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.166710] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.167742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  213.176438] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  213.176504] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.180520] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  213.187749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.189854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  213.195722] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  213.199484] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.200744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  213.206607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  213.214144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  213.221670] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  213.227608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  213.273620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  213.277556] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  213.280613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  213.308165] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  213.320880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  213.340639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  213.416816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  213.432782] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  213.434175] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  213.445908] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  213.450580] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  213.452438] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  213.459438] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  213.462033] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  213.476549] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  213.482940] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  213.489546] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  213.491143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  213.509342] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  213.519654] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  213.523726] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  215.153350] Bluetooth: hci0: command tx timeout
[  215.281395] Bluetooth: hci3: command tx timeout
[  215.282806] Bluetooth: hci1: command tx timeout
[  215.283994] Bluetooth: hci2: command tx timeout
[  215.345384] Bluetooth: hci4: command tx timeout
[  215.537735] Bluetooth: hci7: command tx timeout
[  215.538804] Bluetooth: hci5: command tx timeout
[  215.601357] Bluetooth: hci6: command tx timeout
[  217.201320] Bluetooth: hci0: command tx timeout
[  217.329476] Bluetooth: hci3: command tx timeout
[  217.330360] Bluetooth: hci1: command tx timeout
[  217.330788] Bluetooth: hci2: command tx timeout
[  217.393763] Bluetooth: hci4: command tx timeout
[  217.585304] Bluetooth: hci7: command tx timeout
[  217.585348] Bluetooth: hci5: command tx timeout
[  217.649290] Bluetooth: hci6: command tx timeout
[  219.249465] Bluetooth: hci0: command tx timeout
[  219.377374] Bluetooth: hci2: command tx timeout
[  219.377443] Bluetooth: hci1: command tx timeout
[  219.377923] Bluetooth: hci3: command tx timeout
[  219.442270] Bluetooth: hci4: command tx timeout
[  219.634369] Bluetooth: hci5: command tx timeout
[  219.634467] Bluetooth: hci7: command tx timeout
[  219.697274] Bluetooth: hci6: command tx timeout
[  221.298250] Bluetooth: hci0: command tx timeout
[  221.425345] Bluetooth: hci3: command tx timeout
[  221.425495] Bluetooth: hci2: command tx timeout
[  221.426736] Bluetooth: hci1: command tx timeout
[  221.490306] Bluetooth: hci4: command tx timeout
[  221.681297] Bluetooth: hci7: command tx timeout
[  221.682838] Bluetooth: hci5: command tx timeout
[  221.745336] Bluetooth: hci6: command tx timeout
[  274.881754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  274.888829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  274.891390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  274.899130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  274.904553] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  274.908800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  275.076421] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.082992] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.087481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.097356] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.102877] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  275.107435] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  275.212854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  275.224649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  275.230415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  275.235983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  275.238714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  275.244769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  275.252656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  275.256004] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  275.261107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  275.279964] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  275.298543] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  275.301111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  275.340675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  275.358677] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  275.361840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  275.385050] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  275.416747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  275.421155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  275.427464] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  275.442618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  275.449998] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  275.482018] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  275.523528] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  275.526785] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  275.533414] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  275.536609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  275.547552] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  275.554019] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  275.556875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  275.625510] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  275.631974] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  275.634526] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  275.647812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  275.674549] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  275.704384] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  275.738681] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  276.978446] Bluetooth: hci0: command tx timeout
[  277.171393] Bluetooth: hci1: command tx timeout
[  277.361430] Bluetooth: hci3: command tx timeout
[  277.361475] Bluetooth: hci2: command tx timeout
[  277.617700] Bluetooth: hci5: command tx timeout
[  277.681415] Bluetooth: hci6: command tx timeout
[  277.745417] Bluetooth: hci4: command tx timeout
[  277.809347] Bluetooth: hci7: command tx timeout
[  279.025488] Bluetooth: hci0: command tx timeout
[  279.217540] Bluetooth: hci1: command tx timeout
[  279.409582] Bluetooth: hci3: command tx timeout
[  279.409979] Bluetooth: hci2: command tx timeout
[  279.665335] Bluetooth: hci5: command tx timeout
[  279.730279] Bluetooth: hci6: command tx timeout
[  279.793385] Bluetooth: hci4: command tx timeout
[  279.857356] Bluetooth: hci7: command tx timeout
[  281.073270] Bluetooth: hci0: command tx timeout
[  281.266371] Bluetooth: hci1: command tx timeout
[  281.457537] Bluetooth: hci3: command tx timeout
[  281.458044] Bluetooth: hci2: command tx timeout
[  281.713280] Bluetooth: hci5: command tx timeout
[  281.777496] Bluetooth: hci6: command tx timeout
[  281.841610] Bluetooth: hci4: command tx timeout
[  281.906280] Bluetooth: hci7: command tx timeout
[  283.121506] Bluetooth: hci0: command tx timeout
[  283.313344] Bluetooth: hci1: command tx timeout
[  283.505718] Bluetooth: hci2: command tx timeout
[  283.505784] Bluetooth: hci3: command tx timeout
[  283.761319] Bluetooth: hci5: command tx timeout
[  283.825519] Bluetooth: hci6: command tx timeout
[  283.890357] Bluetooth: hci4: command tx timeout
[  283.953808] Bluetooth: hci7: command tx timeout
[  337.992520] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  338.001707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  338.003736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  338.007402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  338.011061] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  338.020103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  338.024494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  338.027762] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  338.032744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  338.037449] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  338.042880] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  338.045927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  338.076347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  338.082881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  338.086811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  338.102254] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  338.109877] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  338.117653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  338.186319] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  338.191956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  338.210867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  338.222887] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  338.229567] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  338.231812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  338.278789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  338.331733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  338.360754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  338.379944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  338.390656] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  338.402698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  338.408288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  338.430100] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  338.439725] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  338.444411] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  338.453740] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  338.478681] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  338.486653] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  338.501510] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  338.516457] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  338.529662] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  338.539675] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  338.542030] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  338.542753] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  338.550914] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  338.561718] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  338.635122] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  338.640587] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  338.648603] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  340.082299] Bluetooth: hci1: command tx timeout
[  340.145282] Bluetooth: hci0: command tx timeout
[  340.209350] Bluetooth: hci2: command tx timeout
[  340.273454] Bluetooth: hci3: command tx timeout
[  340.530244] Bluetooth: hci4: command tx timeout
[  340.658284] Bluetooth: hci6: command tx timeout
[  340.659152] Bluetooth: hci5: command tx timeout
[  340.722337] Bluetooth: hci7: command tx timeout
[  342.130279] Bluetooth: hci1: command tx timeout
[  342.193388] Bluetooth: hci0: command tx timeout
[  342.257336] Bluetooth: hci2: command tx timeout
[  342.322123] Bluetooth: hci3: command tx timeout
[  342.578380] Bluetooth: hci4: command tx timeout
[  342.706294] Bluetooth: hci6: command tx timeout
[  342.706794] Bluetooth: hci5: command tx timeout
[  342.771239] Bluetooth: hci7: command tx timeout
[  344.178388] Bluetooth: hci1: command tx timeout
[  344.241243] Bluetooth: hci0: command tx timeout
[  344.305234] Bluetooth: hci2: command tx timeout
[  344.371326] Bluetooth: hci3: command tx timeout
[  344.626436] Bluetooth: hci4: command tx timeout
[  344.753267] Bluetooth: hci6: command tx timeout
[  344.753775] Bluetooth: hci5: command tx timeout
[  344.818332] Bluetooth: hci7: command tx timeout
[  346.226319] Bluetooth: hci1: command tx timeout
[  346.291302] Bluetooth: hci0: command tx timeout
[  346.354239] Bluetooth: hci2: command tx timeout
[  346.418426] Bluetooth: hci3: command tx timeout
[  346.674341] Bluetooth: hci4: command tx timeout
[  346.803315] Bluetooth: hci5: command tx timeout
[  346.803815] Bluetooth: hci6: command tx timeout
[  346.867216] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
23:32:40  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff888015697aa0 RCX=0000000000000000 RDX=0000000000000070
RSI=0000000000000000 RDI=ffff888015697a08 RBP=ffff8880365d9bc0 RSP=ffff8880156979b0
R8 =0000000000000001 R9 =0000000000000000 R10=ffff888015697a08 R11=0000000000000000
R12=0000000000000000 R13=ffff888015697a30 R14=ffff8880365d9bc0 R15=ffff888015697a08
RIP=ffffffff84a8f8e6 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f94130d7028 CR3=000000002b254000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff8880156c26fa RCX=000000004c2978e1 RDX=1ffff11002ad84c0
RSI=0000000000000001 RDI=00000000b142fdb1 RBP=ffff8880156c26d8 RSP=ffff88800f1278c0
R8 =0000000000000000 R9 =fffffbfff0fe15e4 R10=ffffffff87f0af27 R11=0000000000000000
R12=ffff8880156c1bc0 R13=1f254eb86c6c81c5 R14=ffffffff86405170 R15=0000000000000000
RIP=ffffffff814fe092 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f7bfd2d5540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7bfd435270 CR3=00000000320fe000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150
XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000