Warning: Permanently added '[localhost]:59939' (ECDSA) to the list of known hosts.
2025/04/25 00:02:14 fuzzer started
2025/04/25 00:02:14 dialing manager at localhost:46629
syzkaller login: [   93.963686] cgroup: Unknown subsys name 'net'
[   94.112623] cgroup: Unknown subsys name 'cpuset'
[   94.160124] cgroup: Unknown subsys name 'rlimit'
2025/04/25 00:02:31 syscalls: 2214
2025/04/25 00:02:31 code coverage: enabled
2025/04/25 00:02:31 comparison tracing: enabled
2025/04/25 00:02:31 extra coverage: enabled
2025/04/25 00:02:31 setuid sandbox: enabled
2025/04/25 00:02:31 namespace sandbox: enabled
2025/04/25 00:02:31 Android sandbox: enabled
2025/04/25 00:02:31 fault injection: enabled
2025/04/25 00:02:31 leak checking: enabled
2025/04/25 00:02:31 net packet injection: enabled
2025/04/25 00:02:31 net device setup: enabled
2025/04/25 00:02:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/25 00:02:31 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/25 00:02:31 USB emulation: enabled
2025/04/25 00:02:31 hci packet injection: enabled
2025/04/25 00:02:31 wifi device emulation: enabled
2025/04/25 00:02:31 802.15.4 emulation: enabled
2025/04/25 00:02:31 fetching corpus: 0, signal 0/0 (executing program)
2025/04/25 00:02:34 starting 8 fuzzer processes
00:02:34 executing program 0:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x581040)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, 0x0, 0x9, 0x3, 0x0, 0x0, {0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1b2}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x161535c}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
sendfile(r0, r0, &(0x7f0000000200)=0x28, 0x1)
getsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)={0x338, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x188, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @loopback, 0x2ad7}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33ed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x83fada83, @ipv4={'\x00', '\xff\xff', @remote}, 0xfa5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x23}, 0x2}}}}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3c65}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "a60a27e33ffd594702943bddff9e9579e14af8f9f298a37f8af927"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "c1f59d6cf764f7bffb8c39fdf350f50ab705330666d6667a6abcd1de8d29c2"}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5ebf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa5}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x98, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x40004}, 0x40810)
exit_group(0xbb)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe8a770}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x42000}, 0x8004)
memfd_secret(0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000009c0), 0x1, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0xadb, 0xe8a9]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x5, 0x48, 0x2, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000d80)={&(0x7f0000000c40), 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xc0, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4aa0f391}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f2a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f33}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xaa}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24044000}, 0x800)
r4 = syz_open_dev$mouse(&(0x7f0000000dc0), 0x5, 0x10000)
sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x38, 0x4, 0xa, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000fc0)={'syztnl0\x00', &(0x7f0000000f40)={'syztnl0\x00', <r5=>0x0, 0x7, 0x80, 0x1, 0xfc, {{0x12, 0x4, 0x3, 0xe, 0x48, 0x67, 0x0, 0x0, 0x4, 0x0, @remote, @multicast2, {[@end, @rr={0x7, 0x17, 0x8f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}, @timestamp={0x44, 0x1c, 0xec, 0x0, 0x2, [0x5, 0x4, 0x4, 0x16, 0x13d, 0xbd]}]}}}}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001340)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001000)={0x2dc, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4c2e}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x4, 0xb7, 0x100}, {0x9, 0x99, 0x9, 0xffffff00}, {0x9, 0x0, 0x1, 0x3ff}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x2dc}}, 0x8004)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x78, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'mode\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'enabled\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x5800)

00:02:34 executing program 1:
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)='/\x00', 0x2, 0x3)
setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'btrfs.', 'trusted.overlay.nlink\x00'}, &(0x7f0000000140)='trusted.overlay.nlink\x00', 0x16, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fcbcf1936691f65d7eefb5a45bf64379e09f8dcd28d780b9fc8f4324693218f378ff0ec3a4fb107190bde5cbb580fe1a0b26d59237346891173ad7e7ef44bb76cf3404c328c3b07fbebb077b2a95618e25792aed813a4c437adbe371ad75d4cfa0709bd14a6abb3f22f73c", 0x6b}, {&(0x7f0000000200)}], 0x2, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x25, 0xfa20}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xa6}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x90}, 0x0)
faccessat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x10, 0x100)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000400), 0xffffffffffffffd5, 0x402c00)
futimesat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)={{0x0, 0x2710}, {0x77359400}})
setxattr$incfs_size(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x3)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000580)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000005c0)=0x2c)
setxattr$incfs_id(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000640), &(0x7f0000000680)={'0000000000000000000000000000000', 0x30}, 0x20, 0x1)
symlinkat(&(0x7f00000006c0)='./file1\x00', r1, &(0x7f0000000700)='./file0/file0\x00')
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000740)={[0x248]}, 0x8, 0x80000)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000780)=0x7ff)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept(r3, &(0x7f00000007c0)=@can, &(0x7f0000000840)=0x80)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
poll(&(0x7f0000000880)=[{r1, 0x110}, {r1, 0x1000}, {r4, 0x8000}, {r0, 0x110}], 0x4, 0x5)
readlinkat(r0, &(0x7f00000008c0)='./file2\x00', &(0x7f0000000900)=""/205, 0xcd)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x4000, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40840)

00:02:34 executing program 2:
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044400}, 0xe4cddfe8301af345)
geteuid()
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x40)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40011}, 0x40c0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x490700, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100120000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x44014}, 0x20000000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r3=>r2, {0x3f}}, './file0\x00'})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4829000}, 0xc, &(0x7f0000000a40)={&(0x7f00000006c0)={0x34c, r0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xc, 0x34, @random="e3cfc97c33e49717"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_IE={0x123, 0x2a, [@perr={0x84, 0x9d, {0x0, 0xb, [@not_ext={{}, @device_b, 0x4, "", 0x24}, @not_ext={{}, @device_a, 0x5, "", 0x2a}, @not_ext={{}, @device_a, 0x7, "", 0xd}, @not_ext={{}, @broadcast, 0x3, "", 0x21}, @ext={{}, @device_b, 0x7, @device_a, 0x4}, @not_ext={{}, @broadcast, 0x7ff, "", 0x5}, @not_ext={{}, @device_b, 0x4a50, "", 0xc}, @not_ext={{}, @device_a, 0x9, "", 0x3f}, @not_ext={{}, @device_b, 0x4, "", 0x11}, @not_ext={{}, @broadcast, 0x3, "", 0x29}, @ext={{}, @broadcast, 0x4, @broadcast, 0x2c}]}}, @cf={0x4, 0x6, {0x4, 0x5, 0x568, 0x2}}, @prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x2, @device_b, 0x9, "", 0x9320, 0xffff0000, @broadcast, 0xfffffc00}}, @mic={0x8c, 0x10, {0x615, "3bb24dfd29ac", @short="3edac015aeaf78d1"}}, @perr={0x84, 0x3b, {0x20, 0x3, [@ext={{}, @device_a, 0x6, @broadcast, 0x9}, @ext={{}, @broadcast, 0x7ff, @device_b, 0x33}, @ext={{}, @device_a, 0x7, @device_a, 0x27}]}}, @supported_rates={0x1, 0x6, [{0x4}, {0x2}, {0x60}, {0x12}, {0x6, 0x1}, {0x1}]}]}, @NL80211_ATTR_IE={0xec, 0x2a, [@preq={0x82, 0x4c, @ext={{}, 0x8, 0x2, 0x2, @device_b, 0xfff, @broadcast, 0x400, 0x400, 0x4, [{{}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x1000}, {{0x1}}, {{0x0, 0x0, 0x1}, @device_a, 0x20}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0xb4, 0x1}}, @fast_bss_trans={0x37, 0x8d, {0x7, 0x2, "66fd68c5a177f610623937a5a577d29b", "cd97c5ae942281752e70296b89e9110934e76485d1c5b3df4b4c964aed429e22", "d9a8a57e438286e4e571eaa08d654f69f79fae549ca879882d9e7724aa90801f", [{0x3, 0x13, "2ea7996cc07db4955938b93196187b571a978d"}, {0x2, 0x24, "426f2eef6cd5f30561db306e87ba1c7e309be67dae94bfbb0554eabd2d7b9bf1cbba5aaa"}]}}, @channel_switch={0x25, 0x3, {0x1, 0xb1, 0x80}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xe7, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x2, 0x7f, @broadcast, 0x1, "", 0xc18d, 0xff, @broadcast, 0x9}}, @random={0x2, 0xc0, "fa486fbd773e67c3c1624644e580dbec8cf5e9e0cb3cff89b99a21bda27f37a5901b5b8df54f34daa5218940de6d0dd4fa1186cdd4eabc2ce9e65d8cb9a88257281a5a574d06b7bff28e627907d6d151337b194b22c031004e3dde2109d5ea22fa31044dc06ca1e36689010bab61c65bdd3b17857c70c4f6ea8d9cfff012685afd4b9d1f68fe7ded3da99af206d0e500101bd546c8a86418a6fc29d1e04a1067e20682b0653b7f1b0a7a8fac43a242e7180d40c8b776766c26baaf692f676cb0"}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7ca5758c2439"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x34c}, 0x1, 0x0, 0x0, 0x24040804}, 0x40084)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004801}, 0x40480c1)
pivot_root(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000c40)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x78, r0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3f, 0x5c}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x67}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4084)
setxattr$security_capability(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), &(0x7f0000000f80)=@v2={0x2000000, [{0x6, 0x7}, {0x7, 0x6}]}, 0x14, 0x1)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001000), r4)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20)

[  113.889903] audit: type=1400 audit(1745539354.735:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
00:02:34 executing program 3:
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x914, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x64}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040080)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x24}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8b0}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2c}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x11}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8040)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', <r1=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x24040081}, 0x24000000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4aa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000804}, 0x15)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1e0, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff21}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000000}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0xc041}, 0x40)
socketpair(0xf, 0x800, 0x5, &(0x7f0000000800)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xf0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcce}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x40001)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000a00), 0x8100, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xc4, 0x2, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_MASTER={0x98, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x14, 0x4, @private0}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40080d1}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1)
r7 = syz_open_dev$vcsu(&(0x7f0000000d00), 0x2, 0x1)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8090)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000011c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000000fc0)={0x1a8, r8, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0xd}}}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8000000}, 0x8800)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, 0xa, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x200}]}, 0x28}}, 0x40)

00:02:34 executing program 4:
mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000c, 0x10, 0xffffffffffffffff, 0x9)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x10000}}, './file0\x00'})
eventfd2(0x400, 0x80800)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000000c0)={0x9, 0x48c2f3da, 0x1, 'queue0\x00', 0x7})
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs\x00', 0x1ff)
r4 = semget(0x1, 0x3, 0x402)
semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f00000001c0)=""/117)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1b4, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x937}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f8a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x56}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x16}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20000800}, 0xc0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000500))
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000580)={0x1ff, 0x7, 0x3, 0x8ac, 0x2}, 0x14)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20404}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x0, 0x20, 0x70bd28, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x800)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x501002, 0x10, 0x8}, 0x18)
ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

00:02:34 executing program 5:
r0 = syz_io_uring_complete(0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1408c140}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000)
r1 = signalfd4(r0, &(0x7f0000000100)={[0x3f]}, 0x8, 0x800)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140)=0x80000001, 0x4)
ioctl$VT_WAITACTIVE(r1, 0x5607)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x184, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8094}, 0x4000)
io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000400)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1a)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x4, 0x6, @l2={'eth', 0x3a, 'gretap0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24044881)
fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
statx(r1, &(0x7f0000000800)='./file0\x00', 0x800, 0x1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
recvmmsg$unix(r0, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000a00)=""/20, 0x14}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x2, &(0x7f0000001a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001b40)=""/233, 0xe9}, {&(0x7f0000001c40)=""/230, 0xe6}, {&(0x7f0000001d40)=""/195, 0xc3}, {&(0x7f0000001e40)=""/114, 0x72}, {&(0x7f0000001ec0)=""/78, 0x4e}, {&(0x7f0000001f40)=""/83, 0x53}], 0x6, &(0x7f0000002040)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002080)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002100)=""/173, 0xad}], 0x1, &(0x7f0000002200)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}], 0x3, 0x20, &(0x7f0000002380))
getresgid(&(0x7f00000023c0), &(0x7f0000002400), &(0x7f0000002440)=<r8=>0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000700)='system.posix_acl_access\x00', &(0x7f0000002480)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x2, 0xee01}, {0x2, 0x5, 0xee01}, {0x2, 0x1, r2}, {0x2, 0x1, 0xee01}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x6}, {0x2, 0x0, r3}], {0x4, 0x4}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x2, r4}, {0x8, 0x2, 0xee00}, {0x8, 0x3, r5}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x0, r8}], {0x10, 0x6}, {0x20, 0x1}}, 0x94, 0x3)
r9 = creat(&(0x7f0000002540)='./file0\x00', 0x8c)
flistxattr(r9, &(0x7f0000002580)=""/16, 0x10)
get_robust_list(r6, &(0x7f0000002640)=&(0x7f0000002600)={&(0x7f00000025c0)}, &(0x7f0000002680)=0x18)
ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f00000026c0))
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x80489439, &(0x7f0000002700))

00:02:34 executing program 6:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)={'ip_vti0\x00', <r1=>0x0, 0x8, 0x40, 0x1000, 0x8001, {{0x25, 0x4, 0x0, 0x7, 0x94, 0x64, 0x0, 0x9, 0x0, 0x0, @local, @loopback, {[@lsrr={0x83, 0xb, 0xd9, [@rand_addr=0x64010101, @rand_addr=0x64010101]}, @ssrr={0x89, 0x17, 0xa6, [@multicast2, @rand_addr=0x64010102, @broadcast, @remote, @multicast1]}, @generic={0x44, 0x11, "2eba6379dabacbfeaf979016adb9cd"}, @lsrr={0x83, 0x13, 0x11, [@private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @generic={0x86, 0xc, "010ff03bb2c297030c5b"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x23, 0x0, 0x6, [0x9, 0xe99, 0x1, 0xa74]}, @timestamp_prespec={0x44, 0x14, 0xc9, 0x3, 0xf, [{@broadcast, 0x1}, {@multicast1, 0x2}]}]}}}}})
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, @xdp={0x2c, 0x2, <r4=>0x0, 0xe}, @hci={0x1f, 0x0, 0x642c947e2dd7f06e}, @l2tp={0x2, 0x0, @remote, 0x3}, 0x5, 0x0, 0x0, 0x0, 0xfffc, &(0x7f0000000280)='bridge_slave_0\x00', 0x7ff, 0x8f})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x154, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/schedstat\x00', 0x0, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x180, r6, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x600}, {0xc, 0x90, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8b}, {0xc, 0x90, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x5448}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xfff}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xff}, {0xc, 0x90, 0x3}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40d0}, 0x1)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r5)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x40)
pipe(&(0x7f0000000980)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a00)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r9, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x94, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xc}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x94}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xd0}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7fff}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x45}, @NL80211_MESHCONF_MAX_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x20}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9e}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x7}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xd7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000b80)=0x200, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000bc0)={<r11=>r0, 0xfff, 0x2, 0x6})
sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0xdeb61c96317adf97}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40001)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000002140)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@remote}, 0x0, @in6=@private0}}, &(0x7f0000002240)=0xe8)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000023c0)={&(0x7f0000000d00), 0xc, &(0x7f0000002380)={&(0x7f0000002280)={0xd0, r12, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040830}, 0x20000800)

00:02:34 executing program 7:
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4e}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x1}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008004)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x801, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="fc322acf581d"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x40000)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x9c, 0x13, 0x8, 0x70bd2a, 0x25dfdbfe, {0x1f, 0x0, 0x1, 0x0, {0x4e20, 0x4e21, [0x80000000, 0x5, 0x1, 0x5], [0x48, 0x4, 0x800, 0x5], 0x0, [0x4d, 0x9]}, 0x3, 0x40}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "3e2fc717d71a4b037547dfb51c9cac35c0bc664b6358a6199260813187d56b2ed3d3baf39095715921eafd6ca63e4600736052af2a55e70e34ad3ac1c964b03391b7b0b7bcd1aefb903b8100"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x28001}, 0x4004001)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000480)={&(0x7f0000000400)=""/77, 0x4d, 0x3, 0xffffffff})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6gre0\x00', <r2=>0x0, 0x4, 0x4, 0x81, 0x12e, 0x8, @dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x40, 0x20, 0x8, 0x1f}})
getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000640)={0x3a0, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1d8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x15c, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5a0e0904}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']$[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[\\&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x37af}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf425}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x48}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5dc2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '[&#\\!!:(*/^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xab}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x78, 0x4, "c023c7555ade8955f8198aed83d1fdc4ea507e6d29d5ef3e8235fb5ca733a98c340e028c7bc5fd228ba88dde7bd928c27f579b99baaaa956b7953860d49a03bc5375b3bbf32307883e57c5a87214ab70a833b0cb8d6adc9b4d34a566ed359117e6da3b4bf2a8232834ec9870fe33d9f9634a40ef"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x29, 0x4, "d8b381b7f0df712dbedf67e122d1f5589aee8a4ab45356f81a494425c5101db8fcbdbb3fa8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x56, 0x5, "fc1626e67d3763c6526ed140dc5847dd92c6053839db9925df050d0383f4c05afc75273efa953252f2e1ed5df4d4633731ac5d0605737d549956eb0e076733ca2b06bf192f977f8128c1850d635e379b19a0"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x40040}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'sit0\x00', <r4=>r3, 0x29, 0xd2, 0x3f, 0x4, 0x31, @dev={0xfe, 0x80, '\x00', 0x1f}, @local, 0x8, 0x7800, 0x7, 0x80000001}})
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x4, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000bc0)}], 0x1, &(0x7f0000000c40)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}], 0x30}, 0x20000801)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000cc0)={0x7, '\x00', {0x4}, 0x8})
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810)
r5 = accept(0xffffffffffffffff, &(0x7f0000000e40)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000ec0)=0x80)
getsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000f00), &(0x7f0000000f40)=0x4)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r5)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001080)={'syztnl1\x00', &(0x7f0000001000)={'syztnl0\x00', <r7=>r2, 0x2f, 0x4, 0x7f, 0x10001, 0x61, @mcast2, @mcast2, 0x8000, 0x80, 0xeca, 0x495ae973}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001140)={'syztnl2\x00', &(0x7f00000010c0)={'ip6tnl0\x00', <r8=>r4, 0x29, 0x40, 0x0, 0xda2, 0x42, @rand_addr=' \x01\x00', @mcast1, 0x1, 0x7, 0x52, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001240)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001280)={0x194, r6, 0xa47bd9528bdfed28, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000)

[  115.118549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  115.121389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  115.123904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  115.128922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  115.132208] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  115.294861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  115.308369] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  115.323061] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  115.359144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  115.362310] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  115.366665] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  115.371513] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  115.379061] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  115.383211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  115.387231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  115.451985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  115.467950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  115.491056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  115.506845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.515209] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  115.519810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  115.524606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.535044] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  115.543204] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  115.555187] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.560041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  115.572148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.579374] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  115.588560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.594684] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  115.597544] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.603928] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  115.614999] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  115.633537] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  115.650289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  115.665474] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  115.674386] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  115.680633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  115.703083] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  115.705632] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  117.202424] Bluetooth: hci0: command tx timeout
[  117.456860] Bluetooth: hci1: command tx timeout
[  117.456868] Bluetooth: hci2: command tx timeout
[  117.584931] Bluetooth: hci3: command tx timeout
[  117.649801] Bluetooth: hci5: command tx timeout
[  117.712831] Bluetooth: hci6: command tx timeout
[  117.712856] Bluetooth: hci4: command tx timeout
[  117.776830] Bluetooth: hci7: command tx timeout
[  119.248891] Bluetooth: hci0: command tx timeout
[  119.504880] Bluetooth: hci1: command tx timeout
[  119.505384] Bluetooth: hci2: command tx timeout
[  119.632990] Bluetooth: hci3: command tx timeout
[  119.698764] Bluetooth: hci5: command tx timeout
[  119.761143] Bluetooth: hci4: command tx timeout
[  119.762077] Bluetooth: hci6: command tx timeout
[  119.825068] Bluetooth: hci7: command tx timeout
[  121.297927] Bluetooth: hci0: command tx timeout
[  121.554789] Bluetooth: hci2: command tx timeout
[  121.554807] Bluetooth: hci1: command tx timeout
[  121.680868] Bluetooth: hci3: command tx timeout
[  121.744898] Bluetooth: hci5: command tx timeout
[  121.810777] Bluetooth: hci6: command tx timeout
[  121.810795] Bluetooth: hci4: command tx timeout
[  121.872797] Bluetooth: hci7: command tx timeout
[  123.344864] Bluetooth: hci0: command tx timeout
[  123.601795] Bluetooth: hci2: command tx timeout
[  123.601814] Bluetooth: hci1: command tx timeout
[  123.730044] Bluetooth: hci3: command tx timeout
[  123.793085] Bluetooth: hci5: command tx timeout
[  123.857155] Bluetooth: hci4: command tx timeout
[  123.857822] Bluetooth: hci6: command tx timeout
[  123.921096] Bluetooth: hci7: command tx timeout
[  176.074971] syz-executor.7 (284) used greatest stack depth: 24368 bytes left
[  178.279091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  178.286545] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  178.288127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  178.291778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  178.296125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  178.310366] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  178.313145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  178.314824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  178.323166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  178.326296] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.348441] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  178.354755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  178.354939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  178.359134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  178.363635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  178.367583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  178.383472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  178.388980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  178.396913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  178.401702] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  178.418828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  178.443156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  178.445605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  178.463163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  178.472531] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  178.479928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  178.491128] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  178.495134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  178.540407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  178.558503] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  178.560831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  178.575382] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  178.584132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  178.591036] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  178.595369] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  178.601223] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  178.622327] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  178.633347] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  178.636606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  178.649910] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  180.369311] Bluetooth: hci1: command tx timeout
[  180.433329] Bluetooth: hci3: command tx timeout
[  180.433337] Bluetooth: hci0: command tx timeout
[  180.498813] Bluetooth: hci2: command tx timeout
[  180.560940] Bluetooth: hci4: command tx timeout
[  180.624894] Bluetooth: hci5: command tx timeout
[  180.689132] Bluetooth: hci6: command tx timeout
[  180.690974] Bluetooth: hci7: command tx timeout
[  182.418656] Bluetooth: hci1: command tx timeout
[  182.480890] Bluetooth: hci0: command tx timeout
[  182.482011] Bluetooth: hci3: command tx timeout
[  182.546084] Bluetooth: hci2: command tx timeout
[  182.608839] Bluetooth: hci4: command tx timeout
[  182.674466] Bluetooth: hci5: command tx timeout
[  182.737080] Bluetooth: hci7: command tx timeout
[  182.737588] Bluetooth: hci6: command tx timeout
[  184.465121] Bluetooth: hci1: command tx timeout
[  184.529292] Bluetooth: hci3: command tx timeout
[  184.529834] Bluetooth: hci0: command tx timeout
[  184.592994] Bluetooth: hci2: command tx timeout
[  184.656877] Bluetooth: hci4: command tx timeout
[  184.722289] Bluetooth: hci5: command tx timeout
[  184.785070] Bluetooth: hci6: command tx timeout
[  184.785981] Bluetooth: hci7: command tx timeout
[  186.513140] Bluetooth: hci1: command tx timeout
[  186.576942] Bluetooth: hci3: command tx timeout
[  186.580202] Bluetooth: hci0: command tx timeout
[  186.643410] Bluetooth: hci2: command tx timeout
[  186.706038] Bluetooth: hci4: command tx timeout
[  186.770334] Bluetooth: hci5: command tx timeout
[  186.833236] Bluetooth: hci6: command tx timeout
[  186.833328] Bluetooth: hci7: command tx timeout
[  240.173690] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  240.178951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  240.185220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  240.195139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  240.200631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  240.311586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  240.314897] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  240.317543] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  240.327535] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  240.334687] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  240.551169] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  240.554266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  240.556431] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  240.570319] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  240.575330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  240.629955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  240.647815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  240.650597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  240.653290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  240.658373] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  240.666210] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  240.672212] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  240.678432] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  240.693190] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  240.705663] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  240.718632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  240.724554] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  240.736787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  240.738810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  240.740713] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  240.746408] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  240.749614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  240.793620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  240.798505] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  240.804688] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  240.872561] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  240.917012] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  240.942364] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  240.983685] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  240.998576] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  242.257110] Bluetooth: hci0: command tx timeout
[  242.384878] Bluetooth: hci1: command tx timeout
[  242.642997] Bluetooth: hci2: command tx timeout
[  242.705960] Bluetooth: hci4: command tx timeout
[  242.769668] Bluetooth: hci5: command tx timeout
[  243.088980] Bluetooth: hci3: command tx timeout
[  243.345221] Bluetooth: hci7: command tx timeout
[  243.345457] Bluetooth: hci6: command tx timeout
[  244.305961] Bluetooth: hci0: command tx timeout
[  244.433274] Bluetooth: hci1: command tx timeout
[  244.689143] Bluetooth: hci2: command tx timeout
[  244.753792] Bluetooth: hci4: command tx timeout
[  244.817160] Bluetooth: hci5: command tx timeout
[  245.137141] Bluetooth: hci3: command tx timeout
[  245.392997] Bluetooth: hci6: command tx timeout
[  245.393183] Bluetooth: hci7: command tx timeout
[  246.353819] Bluetooth: hci0: command tx timeout
[  246.482174] Bluetooth: hci1: command tx timeout
[  246.739010] Bluetooth: hci2: command tx timeout
[  246.802792] Bluetooth: hci4: command tx timeout
[  246.865865] Bluetooth: hci5: command tx timeout
[  247.185834] Bluetooth: hci3: command tx timeout
[  247.441579] Bluetooth: hci7: command tx timeout
[  247.442557] Bluetooth: hci6: command tx timeout
[  248.400978] Bluetooth: hci0: command tx timeout
[  248.529179] Bluetooth: hci1: command tx timeout
[  248.785283] Bluetooth: hci2: command tx timeout
[  248.849015] Bluetooth: hci4: command tx timeout
[  248.912889] Bluetooth: hci5: command tx timeout
[  249.232903] Bluetooth: hci3: command tx timeout
[  249.489147] Bluetooth: hci7: command tx timeout
[  249.489405] Bluetooth: hci6: command tx timeout
[  303.017593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  303.019455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  303.020957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  303.027296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  303.028529] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  303.031565] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  303.032595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  303.036166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  303.037305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  303.045923] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  303.103925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  303.112988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  303.114492] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  303.119488] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  303.125867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  303.144407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  303.150489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  303.160446] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  303.170831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  303.181037] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  303.357529] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  303.366287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  303.368701] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  303.382041] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  303.390212] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  303.392663] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  303.395082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  303.397826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  303.403415] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  303.410366] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  303.427574] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  303.441680] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  303.456125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  303.475301] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  303.478885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  303.486298] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  303.492104] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  303.495120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  303.527949] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  303.551922] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  305.105453] Bluetooth: hci1: command tx timeout
[  305.106454] Bluetooth: hci0: command tx timeout
[  305.233843] Bluetooth: hci3: command tx timeout
[  305.234881] Bluetooth: hci2: command tx timeout
[  305.425513] Bluetooth: hci5: command tx timeout
[  305.555244] Bluetooth: hci6: command tx timeout
[  305.557147] Bluetooth: hci4: command tx timeout
[  305.616940] Bluetooth: hci7: command tx timeout
[  307.154124] Bluetooth: hci1: command tx timeout
[  307.155057] Bluetooth: hci0: command tx timeout
[  307.281109] Bluetooth: hci2: command tx timeout
[  307.281611] Bluetooth: hci3: command tx timeout
[  307.474821] Bluetooth: hci5: command tx timeout
[  307.600933] Bluetooth: hci4: command tx timeout
[  307.601020] Bluetooth: hci6: command tx timeout
[  307.664942] Bluetooth: hci7: command tx timeout
[  309.201203] Bluetooth: hci0: command tx timeout
[  309.202256] Bluetooth: hci1: command tx timeout
[  309.328998] Bluetooth: hci3: command tx timeout
[  309.329017] Bluetooth: hci2: command tx timeout
[  309.521023] Bluetooth: hci5: command tx timeout
[  309.648865] Bluetooth: hci4: command tx timeout
[  309.649702] Bluetooth: hci6: command tx timeout
[  309.713299] Bluetooth: hci7: command tx timeout
[  311.248943] Bluetooth: hci0: command tx timeout
[  311.250183] Bluetooth: hci1: command tx timeout
[  311.376964] Bluetooth: hci2: command tx timeout
[  311.377045] Bluetooth: hci3: command tx timeout
[  311.570800] Bluetooth: hci5: command tx timeout
[  311.696877] Bluetooth: hci6: command tx timeout
[  311.697396] Bluetooth: hci4: command tx timeout
[  311.762381] Bluetooth: hci7: command tx timeout
[  365.288153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  365.295353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  365.298824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  365.308541] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  365.314596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  365.477198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  365.481530] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  365.488607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  365.498242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  365.504035] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  365.597344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  365.602277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  365.612624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  365.626406] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  365.630013] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  365.811530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  365.863220] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  365.873644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  365.897877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  365.904275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  365.907942] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  365.914281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  365.920621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  365.927017] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  365.927171] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  365.945095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  365.949774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  365.965690] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  365.996605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  366.006245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  366.008973] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  366.015498] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  366.026066] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  366.043653] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  366.046209] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  366.072222] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  366.098835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  366.135184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  366.142697] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  366.156164] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  367.376832] Bluetooth: hci0: command tx timeout
[  367.568833] Bluetooth: hci1: command tx timeout
[  367.696976] Bluetooth: hci2: command tx timeout
[  368.145052] Bluetooth: hci4: command tx timeout
[  368.146441] Bluetooth: hci3: command tx timeout
[  368.209658] Bluetooth: hci5: command tx timeout
[  368.274137] Bluetooth: hci6: command tx timeout
[  368.275665] Bluetooth: hci7: command tx timeout
[  369.424854] Bluetooth: hci0: command tx timeout
[  369.618792] Bluetooth: hci1: command tx timeout
[  369.744812] Bluetooth: hci2: command tx timeout
[  370.193148] Bluetooth: hci4: command tx timeout
[  370.193639] Bluetooth: hci3: command tx timeout
[  370.256901] Bluetooth: hci5: command tx timeout
[  370.320871] Bluetooth: hci7: command tx timeout
[  370.321314] Bluetooth: hci6: command tx timeout
[  371.473062] Bluetooth: hci0: command tx timeout
[  371.665371] Bluetooth: hci1: command tx timeout
[  371.793048] Bluetooth: hci2: command tx timeout
[  372.242119] Bluetooth: hci3: command tx timeout
[  372.242589] Bluetooth: hci4: command tx timeout
[  372.304820] Bluetooth: hci5: command tx timeout
[  372.368856] Bluetooth: hci6: command tx timeout
[  372.369406] Bluetooth: hci7: command tx timeout
[  373.521937] Bluetooth: hci0: command tx timeout
[  373.713040] Bluetooth: hci1: command tx timeout
[  373.840946] Bluetooth: hci2: command tx timeout
[  374.288855] Bluetooth: hci3: command tx timeout
[  374.289392] Bluetooth: hci4: command tx timeout
[  374.353321] Bluetooth: hci5: command tx timeout
[  374.417313] Bluetooth: hci7: command tx timeout
[  374.418380] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
00:07:42  Registers:
info registers vcpu 0
RAX=1ffffffff0cfe73e RBX=0000000000000001 RCX=ffffffff867f39ec RDX=0000000000000000
RSI=dffffc0000000000 RDI=ffff888038857530 RBP=ffff888038857520 RSP=ffff888038857458
R8 =ffffffff867f39f0 R9 =ffff888038857508 R10=000000000003b0c2 R11=0000000000012abc
R12=ffff888038857528 R13=ffff888038857510 R14=ffff888038857600 R15=ffff8880388574c8
RIP=ffffffff813514a4 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f92e96118b0 CR3=000000003890c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffffffff819bca94 RCX=ffff88806cf0897c RDX=1ffff1100d9e1150
RSI=ffffffff85c1bac0 RDI=ffffffff819bca94 RBP=ffffffff819bca94 RSP=ffff88806cf089d8
R8 =0000000000000001 R9 =ffff88806cf08a68 R10=000000000003b0c2 R11=0000000000020fea
R12=0000000000000001 R13=0000000000000000 R14=ffff88802ab25340 R15=ffff88800ea5b840
RIP=ffffffff8142f9c2 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe2500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f130b7886f4 CR3=00000000246d0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f130b79747000007f130b796f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000