Warning: Permanently added '[localhost]:8603' (ECDSA) to the list of known hosts.
2025/04/26 03:40:28 fuzzer started
2025/04/26 03:40:28 dialing manager at localhost:46629
syzkaller login: [   93.547990] cgroup: Unknown subsys name 'net'
[   93.679086] cgroup: Unknown subsys name 'cpuset'
[   93.722890] cgroup: Unknown subsys name 'rlimit'
2025/04/26 03:40:45 syscalls: 2214
2025/04/26 03:40:45 code coverage: enabled
2025/04/26 03:40:45 comparison tracing: enabled
2025/04/26 03:40:45 extra coverage: enabled
2025/04/26 03:40:45 setuid sandbox: enabled
2025/04/26 03:40:45 namespace sandbox: enabled
2025/04/26 03:40:45 Android sandbox: enabled
2025/04/26 03:40:45 fault injection: enabled
2025/04/26 03:40:45 leak checking: enabled
2025/04/26 03:40:45 net packet injection: enabled
2025/04/26 03:40:45 net device setup: enabled
2025/04/26 03:40:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/26 03:40:45 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/26 03:40:45 USB emulation: enabled
2025/04/26 03:40:45 hci packet injection: enabled
2025/04/26 03:40:45 wifi device emulation: enabled
2025/04/26 03:40:45 802.15.4 emulation: enabled
2025/04/26 03:40:46 fetching corpus: 0, signal 0/0 (executing program)
2025/04/26 03:40:48 starting 8 fuzzer processes
03:40:48 executing program 0:
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000000))
ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000040))
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000080)={0xc, 0x1c, 0xf, 0x10, 0x3, 0x1223, 0x3, 0xc7, 0x1})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1ab, 0x1e6a}}, './file0\x00'})
mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r0, 0x81)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000100))
ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000140))
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x25}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'sit0\x00', <r1=>0x0, 0x29, 0x0, 0x3, 0x4, 0x52, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7800, 0x4, 0x6}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x134, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x24040881}, 0x48001)
epoll_create(0x8000)
rt_sigaction(0x3d, &(0x7f00000005c0)={&(0x7f0000000540)="c421781130660f72e7839fc461a77c85bf880000f2470f8d97f08e3e366638d5f3400f1efb26a5f0410fc020c4a2f19c86feefffff", 0x10000001, &(0x7f0000000580)="3e0f38c9ce0f1b5a820f2fb2aaaf02a4c44239980b6690c4c22db66d588f097812c40f0ffeb7428ac42e366645dc6900", {[0x1ff]}}, &(0x7f0000000680)={&(0x7f0000000600)="3ee0000f6812c4c1fd1160982680e700c4015dde837a00000026f3a7f04500580f6e3e43d884922a69ccb78f0978cbaf71450000", 0x0, &(0x7f0000000640)="c4c3a55cc5fdc4a14610fec4216163c3c4a1e9147a023e43d3420b3626d9e1c4e14a5a760065f3df9107000000660f5fa1dc9993c826400fbafaad"}, 0x8, &(0x7f00000006c0))
recvfrom(0xffffffffffffffff, &(0x7f0000000700)=""/220, 0xdc, 0x1, 0x0, 0x0)
getpriority(0x2, 0x0)
rt_sigtimedwait(&(0x7f0000000800)={[0x7]}, 0x0, &(0x7f0000000840)={0x77359400}, 0x8)
accept4(0xffffffffffffffff, &(0x7f0000000880)=@nfc_llcp, &(0x7f0000000900)=0x80, 0x800)
rt_sigsuspend(&(0x7f0000000940)={[0x10000]}, 0x8)
clock_gettime(0x0, &(0x7f0000000a40)={<r2=>0x0, <r3=>0x0})
pselect6(0x40, &(0x7f0000000980)={0x0, 0x1, 0x80000001, 0x100000001, 0x100000000, 0x940, 0xffffffffffffffe1, 0x8}, &(0x7f00000009c0)={0x4, 0x3, 0x80000000, 0x0, 0x0, 0x800, 0x1800000, 0x7}, &(0x7f0000000a00)={0xfff, 0x4, 0x5, 0xb4, 0x4, 0x4, 0x9, 0x7fffffff}, &(0x7f0000000a80)={r2, r3+10000000}, &(0x7f0000000b00)={&(0x7f0000000ac0)={[0x3]}, 0x8})
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}}, 0x800)

03:40:48 executing program 1:
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x1e4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xca, 0x5, "c83fd6e19bf511056a2cc5d844055a2476b39481896094303b6ee5c6b5c1e8eb32b79c6c8a3031f384ac33ed2fb2dada6c7b0ac321b9e83e2e90d8a50c766137fd0131f701a38ad0e6ea1ca375b2dda4395f3fc87886e9647d6f180d60811d2b3271fe2ff6ddc3cf03172a08b8263e680ee77202aacc5305f9d25520eff4cd7b5652893320ebafc5d242903ed436d02e0bc58291b67ac36edba79410a0e601f6a5a68b0cc420d98db9d212abaeb453305b9fc13ae40867623f70c6bf01c8bbf6780645c01bcf"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xbf}, @ETHTOOL_A_BITSET_MASK={0xec, 0x5, "7a840ba2c428585a3befc958eb43e74caee5d9317c4293dcaaf3fe7eb9de73087a1aea65377c3e5ece2d82bc750d33e0a5a684c6567b1efaa5bc36bc4506417d133bfd0ed7a653bb79d2ddda49c0cfeaabf8379f34ac3b35ed82a9520e4afe3e0d7b55cd4463fc6f34e8c57e071c03b1ea36bdc8cdbad11c994e017aa1323e8e77af89847375d3d3db986cae4146c7df21ce9a3ffc81ddf2f6a4dec96b80582b3fa903c4c41e709a5676803c6b1e88e67a846a01f866abe12f7611295f5af280cc98cec61e30f07430c468ef954c8db2fa49d905b8830eebd3700ae555c455c925a4369952bf6d51"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf10}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x4)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000020}, 0x4800)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000d80)={'ip6_vti0\x00', &(0x7f0000000d00)={'syztnl2\x00', <r0=>0x0, 0x2f, 0x5, 0x0, 0x1, 0xe1, @private1, @private1, 0x18, 0x20, 0x5, 0x1eb}})
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000dc0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000e00)=0x14, 0x800)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x180, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20008000}, 0x4)
r3 = signalfd4(r1, &(0x7f0000001080), 0x8, 0x80800)
syz_genetlink_get_family_id$tipc(&(0x7f0000001040), r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x515242, 0xa)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000011c0)={'sit0\x00', &(0x7f0000001140)={'syztnl0\x00', <r5=>r2, 0x4, 0x3, 0x40, 0x3f, 0x20, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x1, 0x7fff, 0x9}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001240)={'gre0\x00', &(0x7f0000001200)={'syztnl1\x00', <r6=>r0, 0x40, 0x7, 0xfff, 0x8, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x64, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000001880)={'syztnl0\x00', &(0x7f0000001800)={'ip6_vti0\x00', <r7=>0x0, 0x4, 0x3, 0x40, 0x69, 0x39, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x10, 0x80, 0x1f}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000001b80)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b40)={&(0x7f00000018c0)={0x25c, 0x0, 0x400, 0x800, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x1028ce8228437b07)
r8 = syz_open_dev$vcsn(&(0x7f0000001bc0), 0x9, 0x84801)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001d00)={'syztnl0\x00', &(0x7f0000001c40)={'gre0\x00', <r9=>r2, 0x8, 0x7800, 0x33d4ea80, 0x6, {{0x20, 0x4, 0x2, 0x2b, 0x80, 0x68, 0x0, 0x6, 0x4, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x44, 0x3d, 0x3, 0xa, [{@multicast1, 0x3fd1}, {@broadcast, 0xffffffff}, {@multicast2, 0x2}, {@multicast2}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0xda6b}, {@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x3}]}, @rr={0x7, 0x27, 0x9, [@local, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @broadcast]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000001ec0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001d40)={0x11c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x10040}, 0x40080c0)
r10 = openat$full(0xffffffffffffff9c, &(0x7f0000001f00), 0x400000, 0x0)
accept$packet(r1, &(0x7f0000001f40)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001f80)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000002040)={'syztnl0\x00', &(0x7f0000001fc0)={'gretap0\x00', r11, 0x7800, 0x8000, 0x7f, 0x9, {{0xe, 0x4, 0x2, 0x0, 0x38, 0x64, 0x0, 0x80, 0x2f, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x23, 0x99, [@multicast1, @broadcast, @loopback, @remote, @multicast1, @multicast2, @rand_addr=0x64010100, @loopback]}, @noop]}}}}})
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000002140)={&(0x7f0000002080), 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x14, 0x2, 0x7, 0x801, 0x0, 0x0, {0xc, 0x0, 0x5}}, 0x14}}, 0x11)

03:40:48 executing program 2:
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000000))
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x82)
ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f00000000c0)={0x1f, 0x1})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000140)=0xcb8, 0x4)
r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r1)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mknodat(r1, &(0x7f0000000300)='./file0\x00', 0x4, 0x3)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$CDROMGETSPINDOWN(r3, 0x531d, &(0x7f0000000380))
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r5=>r3, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
syz_io_uring_setup(0x393f, &(0x7f0000000440)={0x0, 0xa09a, 0x1, 0x3, 0x2f4, 0x0, r5}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500))
listxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=""/27, 0x1b)
epoll_create1(0x80000)
r6 = epoll_create1(0x80000)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000005c0))
memfd_create(&(0x7f0000000600)='syz2\x00', 0x0)

03:40:48 executing program 3:
ioctl$CDROMCLOSETRAY(0xffffffffffffffff, 0x5319)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0xc000}, 0x1)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="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")
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={<r1=>0xffffffffffffffff, 0x1, 0x8, 0x8000})
ioctl$CDROM_CHANGER_NSLOTS(r1, 0x5328)
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000002c0))
r2 = fsmount(r1, 0x1, 0x9)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x640}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x177}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
fcntl$getown(r0, 0x9)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000440)={0x1, 0x2, 0x7, 0x3f, 0x4, 0x400})
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd8, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3c}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x845}, 0x24040040)
write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x21, 0x2}, 0x7)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000dc0)=<r4=>0x0)
sendmsg$AUDIT_SET(r1, &(0x7f0000000e80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80404000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, 0x3e9, 0x2, 0x70bd25, 0x25dfdbfd, {0x60, 0x0, 0x1, r4, 0x5, 0x3, 0xf13, 0x5, 0x0, 0x100000}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000ec0)=0x2)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x48, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xff}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x9}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8d1}, 0x20004004)
memfd_secret(0x0)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x74, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa6a4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x17}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000004)

[  112.939907] audit: type=1400 audit(1745638848.328:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:40:48 executing program 4:
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0xe00, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5a}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "26f428f4ef31b88a70cdfaa9a8d08d18"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'})
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x5, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000003c0)={{r2}, 0x0, 0x0, @unused=[0x9, 0x7fffffff, 0x799b, 0x1], @devid})
ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000001400)={{r2}, 0x1, &(0x7f00000013c0)=[0xc9], 0x1, 0x3, [0x5, 0x5, 0x6, 0x6]})
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000001480)={0x1, 0x5, [@multicast, @multicast, @multicast, @random="d47d11131727", @empty]})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r2)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000001b00)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001540)={0x580, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x9}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x553, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x80}, @device_a, @device_b, @from_mac, {0x2, 0xf80}}, @ver_80211n={0x0, 0x81, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x29, @val={0x10, 0x1, 0x24}, [{0xdd, 0xeb, "9590bd390712cad3ce378807a33c30d715663ab5f97c85b80c0985e80dbbc991c46cdf7428d3ce02a83b74c3261055021d081094cbdef4b8727de03d7a61dee62c4ca93807401c50de5136dbcd9fe0b9d544caed9f99f135a699af2c88dc927981eab9b91e1d51fff6c5db638976393e1322621df0c849d7615ae1ef33e1c8dfcb8a118f2297cfc617583de9667ce30ddaa6036055cd3af1de5e2f76f1bbfa34d05f1cbc71aab0d286619d7cedda74b2f47e8780459a027ef4add2377e879ed4651d7839c1d6381a838a44cefb2ae5d5abf2350b9643faaa5ad9c2e816812ce6e286048da271115072bd58"}, {0xdd, 0x33, "12a9461412dc8ac6820f085113fed87f4d87b032eebdd6d8dd9b0dc6d5cb2698c4ec4c2e29d38d175b3b73f1a164a65c477fac"}, {0xdd, 0x31, "5e2d1eaccb189a6ee1ec61bb705a1300478c7850322a14638d48b2361218f6e1355634775a871e235487e4a87227c88a6c"}, {0xdd, 0xf8, "58cd2173e79106bac803bb58195c3dba310398878aebfb6b32ba7b746ca9e521f908a0db38c307b5c657df816dddafe60adf6cb8b7f5f99d5cdc9e29b7824467728258e22078809abedb7a16098a910084b24adf6ef50de1cadb9d3ff4671c42f68b9d2fb4466ef02d8eafdb76c0d3c335a7bb6eb08ee3044114571f8dd582c3dafaadd64e82426de912a967a94a2ff822f9a34d7d54387868987cdbf07062641819dd11a0f80fda30b596ed438d3ac554e8221d1e5fa31403f5cd7081ba0b1d121d371f170cde5478e273a1f439c4eb606dae2c464a77741ee27492c084636b33fef83fe04aaa844212281474de30bc47067e2304c8b7d5"}, {0xdd, 0xfc, "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"}, {0xdd, 0x3e, "eeb3dbf6ed390e5b0557a2524f6807e165d6fff3664a405705624a0daec5a86304eee8f872501a33467b22f898162f781a17e3f34bdf625e25cd92a40fec"}, {0xdd, 0x9c, "762fc08bdeb871d1590f9ec4d73eb4b8210294d8f0a9820d726ffe3e4e4eb28f82afc42e2cf0db1c45b788bcfa599ae1e377edb5f03a32bb69bdb76ca04947f8016442665f1ba8ad28eaada34bd9f211197c54a6a2148bcf4ee44916ca8c2d7b5cfcfbc40e1b74fa048dd2cc4ef88e037d89c6e4c1c1a131dd89155953e475c44955a2e3397562e54a115905d9920893ac9c5a0841d62f95d02e89c1"}, {0xdd, 0xfd, "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"}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x4010}, 0x2400c080)
fcntl$getownex(r2, 0x10, &(0x7f0000001b40)={0x0, <r4=>0x0})
r5 = getpgid(0xffffffffffffffff)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
kcmp(r4, r5, 0x2, r2, r6)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001bc0), r2)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001c80)={'ip6tnl0\x00', &(0x7f0000001c00)={'syztnl0\x00', <r8=>0x0, 0x4, 0x7, 0xfe, 0xfdef, 0x1, @mcast1, @empty, 0x700, 0xb0, 0x1, 0x95}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={0xb8, r7, 0x4, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x8001}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x40068)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000001e40), r2)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x28, r9, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc001)

03:40:48 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x7)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)="3f60796a0409ffec1832a0dcfb8682f01da53fa1adc0b5b49f31c149cf8fad8aeedec245be40da9f8af647fb0d7202b5bedb9274b59bb92cd1efba5e54a09206e3135e1b683d5073c743153efbe802e093cb61f52ea092351c96fb13ec6d125fb6fffe8c282c66089de963241a9922018d40e438f9e816d6929c", 0x7a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000003140)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003100)={&(0x7f0000002f40)={0x1a4, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffe01, 0x22}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e3824f26fb3736f975db1ce2e609d34f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6f0423c221fa83c0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4dd1fb68f1d995b9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd9b}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d6cbeb644f6aded6"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8da964ae07f2e559be2fb3b057f92fce"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="514b7111f4b6218a2e56e54c9ef0b7aaa55451235096869fb8df1a893660a243"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="21aef787d55c0cd00bb704f9eef1eeb9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3f}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c0e5ff89a406a1f64d620e25abdb735ee024822ed954b92c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="244d33c25ec991c61846f4f74e381db2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1fee8cf319d69b6871cc7f78766755f4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b1ef8a5110b2465e427d3cd16ba440e7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a4e94eb543b299f3f805d8209a09cc43a42ff6e4a8566a0a3331c3ae28c81346"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cfb2ae5bb7807a229d540ae49f19320b1cffaec69fd3dc41"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="59293d63377043c39d32e8f3e1da44c3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6c7a4fe740adbd61"}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x80}, 0x84)
r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000003180)='devices.deny\x00', 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000031c0)=0x20000000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x68, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x1b}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x803afde5a550ff5f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x193}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ca}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004801}, 0x4040000)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003340), 0x200, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f00000035c0)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003580)={&(0x7f00000033c0)={0x1a8, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf2}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9c, 0x3, "39657a0d15518643fb92f21deda30c3ef304c34cd6005a999aafe3e23816ccb70b4f37249c228c84e05fc74c01bd4866f94b8e2026b1b5ec13e5e0e339f82d979785ff822221305752e983a5fbcb1f4abe36006c3281275da6052f489049937a0a24dc403a9d3f45efdd0cc3ca52c78f18ca1061b453c6553fb93cfb0b5b589038de1d2e7391125140d65fa1754fb9f99aae55bfbdefdcc7"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8081}, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000003600)={0x3, 0x1, 0x0, 0x200, 0x1501}, 0xc)
r5 = signalfd4(r3, &(0x7f0000003640)={[0x3de4]}, 0x8, 0x180000)
sendto(r5, &(0x7f0000003680)="6d1365837bc9039ba7d56fb57003fa677547c3f7ba78b498a5faefc3f81fa1fa969029abd766895e297015e1cebb5372bc7a09274f2722579eeeacc39b0211a7493070fa80c4b8be651531760339b36e6791ef5b0315e5b43e6ff1d9f5abcd6e10a1b56105fa5d28d60d2ec5e5739540", 0x70, 0x44000, &(0x7f0000003700)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40}, 0x80)
r6 = creat(&(0x7f0000003780)='./file0\x00', 0x2)
ioctl$TCSETAF(r6, 0x5408, &(0x7f00000037c0)={0x800, 0x7, 0x591, 0x1ff, 0x8, "1bb19dc25021fbc8"})
r7 = fsmount(r4, 0x0, 0x4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000080}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000003900), 0xffffffffffffffff)

03:40:48 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8801}, 0x20000080)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/usb_storage', 0x28203, 0x31)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x20040010)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000340))
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/pci', 0x204000, 0x4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2)
sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x5a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24080004}, 0x80)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4081)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000680)={0x14, 0x1f, &(0x7f0000000640)="dfcd87962d73cb10e10951bcce88e6c61172972bef0655d7a792eb22776bc0"})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x4c}}, 0x4040001)
ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, &(0x7f0000000840)={0x8, 0x1})
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000880)={0x1f, 0x1, 0x9, 0x40, 0x7, 0x6})

03:40:48 executing program 7:
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x204, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x140}, 0x41)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x2, 0x5, 0xfffa, 0x100, 0x3ff, 0x4410122})
r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x840)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="9e0037af365af06f44a7306aeed9403dcbbc32e1bac2189a6831fb26c3b34bc037de93341ad89690594209fa232294727e14da43119fe5ae1389040e81d48bedb81513cd8cccbd3a0cc3ff8b99a46b8a051ff22375560294f6430bb4ff6df7e454056ef4260c5ad055bf66d88d8d6893bf3dfbc0d8184e4467986b865f5d381e6f08f6a8a786f6aa9b957b43746c23d0b10d049c55d63a82", 0x98}, {&(0x7f00000003c0)="c2360beb4cadd2cd5c16c943d7f71f1da2fd0cc4d82aa29806f2e8d7273cb5f7395fb08b9b480e798aa2df118fefb678481cdd87446c80a1b98079f1ce0edf", 0x3f}, {&(0x7f0000000400)="9ee230f827ae6532b5f229b60f17b4ed174893be97bda2396f696d4733", 0x1d}, {&(0x7f0000000440)="1ec8d70ee9", 0x5}], 0x4}, 0x44040804)
setxattr$security_selinux(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x1)
r1 = syz_open_dev$mouse(&(0x7f00000005c0), 0x80000001, 0x325002)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x60}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}]}, 0x64}}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0x80}}, './file0\x00'})
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000780), 0x100, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", ""]}, 0x14}}, 0x20040040)
get_mempolicy(&(0x7f00000008c0), &(0x7f0000000900), 0xffffffffffff92c3, &(0x7f0000ff0000/0x10000)=nil, 0x5)
clock_gettime(0x0, &(0x7f0000000980)={<r3=>0x0, <r4=>0x0})
clock_gettime(0x0, &(0x7f00000009c0)={<r5=>0x0, <r6=>0x0})
utimes(&(0x7f0000000940)='./file0\x00', &(0x7f0000000a00)={{r3, r4/1000+60000}, {r5, r6/1000+60000}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b00)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000a40)="a3e2bb5bdb5b75010ae11a6e3a5a5c7b4a4abd1262462c60ff357ece154ac51d0ad7bd7df35ecedf00b6bd11512ab358d468d2bf8cce99dc3cb0cf1e9dd41660a358970ff85e76da48bafb743f8be768b3ea98595f70c3000102f2127502e114c1ff49c757d9019d19dac9118da9a0926194991ec381de856d5cbdab350403678c14942174caa4e1f4392c98d06905c1928d6aad41342a7a8d40959e99051f08a70d5a8955f6234e678c", 0xaa, r1}, 0x68)
get_thread_area(&(0x7f0000000b80)={0x1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000c00)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x170, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x11, 0x13, [{0x16, 0x1}, {0x0, 0x1}, {0x36}, {0x4, 0x1}, {0x1b, 0x1}, {0x48, 0x1}, {0x9, 0x1}, {0x36, 0x1}, {0x60, 0x1}, {0x18}, {0xc, 0x1}, {0xc}, {0x60}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa5, 0xbe, "9afd1eac29a36556e97e9ad25981b66aee263351c2377f2e38d275e0139cc0bf99cf0dc9fd756d0d8a9093eab59a690401747b37c4a5d2ac931877f4f5b34c58d5d8947980ee3c08556feff7ec6a7e2624f665c916e3e64b8fafba7dd309d62d26758f5d3b88cd31f511bf3e08527aa68da845bb706bd24b5ad5f5b940885aaa17a259b6e14fc44cf2d893752f8c9c819b2fae110d68c80d4ce95a2f2373944d9d"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x49, 0xbe, "216566a5467b5e3b916edbebfcc453434c93f0c326c7859735e0cf145b83b45690e833ee320c3ad7338d86a1cdfb2545288ad9f62f395f9155473bcf560e79d6ad46afda42"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xbd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c7}]}, 0x170}, 0x1, 0x0, 0x0, 0x60}, 0xd0)
clock_nanosleep(0x5, 0x1, &(0x7f0000000e40)={0x0, 0x3938700}, &(0x7f0000000e80))

[  114.366838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  114.369889] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  114.371005] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  114.375014] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  114.377347] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.404736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  114.413091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  114.416334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  114.417965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  114.419057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.422814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.423908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  114.425975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.436934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  114.447591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  114.544384] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  114.552616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  114.575934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  114.610927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  114.635919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  114.650656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  114.679135] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  114.706443] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.714609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.715937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  114.724314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  114.729488] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  114.741446] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  114.768441] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  114.804413] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.806026] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  114.806841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  114.808075] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  114.813942] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  114.815900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.818101] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  114.834562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  114.835931] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  114.851043] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.852222] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  116.441946] Bluetooth: hci2: command tx timeout
[  116.441961] Bluetooth: hci0: command tx timeout
[  116.506557] Bluetooth: hci1: command tx timeout
[  116.697419] Bluetooth: hci3: command tx timeout
[  116.889290] Bluetooth: hci7: command tx timeout
[  116.889599] Bluetooth: hci4: command tx timeout
[  116.955011] Bluetooth: hci6: command tx timeout
[  116.955042] Bluetooth: hci5: command tx timeout
[  118.489362] Bluetooth: hci2: command tx timeout
[  118.489991] Bluetooth: hci0: command tx timeout
[  118.553275] Bluetooth: hci1: command tx timeout
[  118.747460] Bluetooth: hci3: command tx timeout
[  118.937245] Bluetooth: hci7: command tx timeout
[  118.937371] Bluetooth: hci4: command tx timeout
[  119.001245] Bluetooth: hci6: command tx timeout
[  119.001616] Bluetooth: hci5: command tx timeout
[  120.537378] Bluetooth: hci0: command tx timeout
[  120.537402] Bluetooth: hci2: command tx timeout
[  120.601331] Bluetooth: hci1: command tx timeout
[  120.794755] Bluetooth: hci3: command tx timeout
[  120.985415] Bluetooth: hci4: command tx timeout
[  120.985707] Bluetooth: hci7: command tx timeout
[  121.049514] Bluetooth: hci5: command tx timeout
[  121.050046] Bluetooth: hci6: command tx timeout
[  122.585377] Bluetooth: hci0: command tx timeout
[  122.587419] Bluetooth: hci2: command tx timeout
[  122.649296] Bluetooth: hci1: command tx timeout
[  122.841301] Bluetooth: hci3: command tx timeout
[  123.033350] Bluetooth: hci4: command tx timeout
[  123.033451] Bluetooth: hci7: command tx timeout
[  123.098242] Bluetooth: hci6: command tx timeout
[  123.098300] Bluetooth: hci5: command tx timeout
[  175.318257] syz-executor.7 (285) used greatest stack depth: 23800 bytes left
[  177.130773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.136377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.139520] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.147013] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.150422] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  177.229925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  177.235783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  177.244436] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  177.262528] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  177.267597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  177.312479] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  177.317866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  177.323486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  177.338793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  177.343633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  177.519093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  177.529517] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  177.544294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  177.548132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  177.555904] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  177.562438] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.573099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  177.579736] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  177.584040] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  177.589561] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  177.599398] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  177.601570] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  177.616394] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  177.620361] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  177.633394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  177.634566] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  177.649065] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  177.650852] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  177.652342] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  177.658525] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  177.692661] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  177.695869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  177.700277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  177.718669] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  177.723037] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  179.225319] Bluetooth: hci0: command tx timeout
[  179.417243] Bluetooth: hci1: command tx timeout
[  179.481365] Bluetooth: hci2: command tx timeout
[  179.673299] Bluetooth: hci3: command tx timeout
[  179.801309] Bluetooth: hci7: command tx timeout
[  179.801330] Bluetooth: hci5: command tx timeout
[  179.802423] Bluetooth: hci6: command tx timeout
[  179.865398] Bluetooth: hci4: command tx timeout
[  181.273266] Bluetooth: hci0: command tx timeout
[  181.465490] Bluetooth: hci1: command tx timeout
[  181.529852] Bluetooth: hci2: command tx timeout
[  181.721252] Bluetooth: hci3: command tx timeout
[  181.851392] Bluetooth: hci6: command tx timeout
[  181.851834] Bluetooth: hci5: command tx timeout
[  181.852329] Bluetooth: hci7: command tx timeout
[  181.913462] Bluetooth: hci4: command tx timeout
[  183.322224] Bluetooth: hci0: command tx timeout
[  183.513234] Bluetooth: hci1: command tx timeout
[  183.579205] Bluetooth: hci2: command tx timeout
[  183.769430] Bluetooth: hci3: command tx timeout
[  183.897503] Bluetooth: hci5: command tx timeout
[  183.898834] Bluetooth: hci7: command tx timeout
[  183.899290] Bluetooth: hci6: command tx timeout
[  183.961551] Bluetooth: hci4: command tx timeout
[  185.369267] Bluetooth: hci0: command tx timeout
[  185.561534] Bluetooth: hci1: command tx timeout
[  185.625406] Bluetooth: hci2: command tx timeout
[  185.817283] Bluetooth: hci3: command tx timeout
[  185.945436] Bluetooth: hci7: command tx timeout
[  185.945579] Bluetooth: hci5: command tx timeout
[  185.946411] Bluetooth: hci6: command tx timeout
[  186.010407] Bluetooth: hci4: command tx timeout
[  239.588357] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  239.591932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  239.594472] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  239.600913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  239.606094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  239.653621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  239.658986] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  239.661443] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  239.667363] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  239.672930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  239.745086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  239.758491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  239.760949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  239.775054] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  239.782628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  239.833856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  239.845560] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  239.852654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  239.857462] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  239.861306] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  239.863999] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  239.873436] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  239.874129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  239.895089] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  239.920953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  239.923115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  239.930304] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  239.940843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  239.949405] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  239.950852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  239.957259] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  239.973662] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  239.979859] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  239.982998] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  239.987935] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  239.994997] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  240.006081] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  240.011843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  240.033028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  240.044879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  241.690247] Bluetooth: hci0: command tx timeout
[  241.754332] Bluetooth: hci1: command tx timeout
[  241.882251] Bluetooth: hci3: command tx timeout
[  242.009394] Bluetooth: hci2: command tx timeout
[  242.073287] Bluetooth: hci6: command tx timeout
[  242.073956] Bluetooth: hci5: command tx timeout
[  242.138442] Bluetooth: hci7: command tx timeout
[  242.265305] Bluetooth: hci4: command tx timeout
[  243.738243] Bluetooth: hci0: command tx timeout
[  243.802266] Bluetooth: hci1: command tx timeout
[  243.930437] Bluetooth: hci3: command tx timeout
[  244.057348] Bluetooth: hci2: command tx timeout
[  244.121413] Bluetooth: hci6: command tx timeout
[  244.121896] Bluetooth: hci5: command tx timeout
[  244.185718] Bluetooth: hci7: command tx timeout
[  244.313283] Bluetooth: hci4: command tx timeout
[  245.786367] Bluetooth: hci0: command tx timeout
[  245.849433] Bluetooth: hci1: command tx timeout
[  245.977241] Bluetooth: hci3: command tx timeout
[  246.106300] Bluetooth: hci2: command tx timeout
[  246.169591] Bluetooth: hci5: command tx timeout
[  246.170111] Bluetooth: hci6: command tx timeout
[  246.235230] Bluetooth: hci7: command tx timeout
[  246.362511] Bluetooth: hci4: command tx timeout
[  247.834451] Bluetooth: hci0: command tx timeout
[  247.898251] Bluetooth: hci1: command tx timeout
[  248.025245] Bluetooth: hci3: command tx timeout
[  248.153367] Bluetooth: hci2: command tx timeout
[  248.219203] Bluetooth: hci6: command tx timeout
[  248.219657] Bluetooth: hci5: command tx timeout
[  248.282248] Bluetooth: hci7: command tx timeout
[  248.410966] Bluetooth: hci4: command tx timeout
[  301.865689] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  301.871873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  301.874019] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  301.885711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  301.892746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.070134] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  302.075410] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  302.077803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  302.084926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  302.093628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  302.120904] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  302.127705] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  302.131737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  302.140107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  302.148717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  302.171235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  302.187075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  302.191619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  302.199864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  302.208069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  302.255541] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  302.267440] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  302.271416] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  302.276872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  302.280368] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  302.355376] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  302.365664] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  302.371566] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  302.379585] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  302.383390] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  302.467243] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  302.477719] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  302.508682] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  302.524502] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  302.537476] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  302.682577] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  302.711648] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  302.721683] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  302.767926] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  302.806421] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  303.962391] Bluetooth: hci0: command tx timeout
[  304.154477] Bluetooth: hci1: command tx timeout
[  304.217430] Bluetooth: hci2: command tx timeout
[  304.473715] Bluetooth: hci4: command tx timeout
[  304.537498] Bluetooth: hci5: command tx timeout
[  304.538885] Bluetooth: hci3: command tx timeout
[  304.666315] Bluetooth: hci7: command tx timeout
[  304.858044] Bluetooth: hci6: command tx timeout
[  306.010212] Bluetooth: hci0: command tx timeout
[  306.201256] Bluetooth: hci1: command tx timeout
[  306.265400] Bluetooth: hci2: command tx timeout
[  306.521660] Bluetooth: hci4: command tx timeout
[  306.585472] Bluetooth: hci5: command tx timeout
[  306.586040] Bluetooth: hci3: command tx timeout
[  306.714432] Bluetooth: hci7: command tx timeout
[  306.906763] Bluetooth: hci6: command tx timeout
[  308.057259] Bluetooth: hci0: command tx timeout
[  308.252336] Bluetooth: hci1: command tx timeout
[  308.313318] Bluetooth: hci2: command tx timeout
[  308.570219] Bluetooth: hci4: command tx timeout
[  308.635472] Bluetooth: hci5: command tx timeout
[  308.636031] Bluetooth: hci3: command tx timeout
[  308.762237] Bluetooth: hci7: command tx timeout
[  308.954449] Bluetooth: hci6: command tx timeout
[  310.105397] Bluetooth: hci0: command tx timeout
[  310.298245] Bluetooth: hci1: command tx timeout
[  310.361248] Bluetooth: hci2: command tx timeout
[  310.617241] Bluetooth: hci4: command tx timeout
[  310.682331] Bluetooth: hci3: command tx timeout
[  310.682914] Bluetooth: hci5: command tx timeout
[  310.809531] Bluetooth: hci7: command tx timeout
[  311.001575] Bluetooth: hci6: command tx timeout
[  364.786888] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  364.796448] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  364.801513] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  364.813726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  364.823437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  365.162923] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  365.166849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  365.169439] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  365.174997] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  365.184582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  365.377966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  365.380726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  365.384338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  365.394283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  365.422974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  365.451539] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  365.455537] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  365.457676] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  365.463906] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  365.482560] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  365.493671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  365.499609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  365.501624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  365.507792] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  365.510903] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  365.517330] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  365.522274] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  365.523890] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  365.529527] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  365.532457] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  365.536630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  365.546651] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  365.561737] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  365.561985] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  365.567406] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  365.587319] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  365.597378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  365.610984] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  365.632208] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  365.641015] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  366.873291] Bluetooth: hci0: command tx timeout
[  367.259214] Bluetooth: hci1: command tx timeout
[  367.514388] Bluetooth: hci2: command tx timeout
[  367.577303] Bluetooth: hci3: command tx timeout
[  367.705262] Bluetooth: hci5: command tx timeout
[  367.705315] Bluetooth: hci7: command tx timeout
[  367.769359] Bluetooth: hci4: command tx timeout
[  367.770252] Bluetooth: hci6: command tx timeout
[  368.921356] Bluetooth: hci0: command tx timeout
[  369.305284] Bluetooth: hci1: command tx timeout
[  369.561282] Bluetooth: hci2: command tx timeout
[  369.625647] Bluetooth: hci3: command tx timeout
[  369.753558] Bluetooth: hci5: command tx timeout
[  369.755668] Bluetooth: hci7: command tx timeout
[  369.817410] Bluetooth: hci6: command tx timeout
[  369.817848] Bluetooth: hci4: command tx timeout
[  370.969290] Bluetooth: hci0: command tx timeout
[  371.353465] Bluetooth: hci1: command tx timeout
[  371.610192] Bluetooth: hci2: command tx timeout
[  371.673517] Bluetooth: hci3: command tx timeout
[  371.801527] Bluetooth: hci7: command tx timeout
[  371.802012] Bluetooth: hci5: command tx timeout
[  371.867300] Bluetooth: hci4: command tx timeout
[  371.867775] Bluetooth: hci6: command tx timeout
[  373.019286] Bluetooth: hci0: command tx timeout
[  373.402193] Bluetooth: hci1: command tx timeout
[  373.657312] Bluetooth: hci2: command tx timeout
[  373.721407] Bluetooth: hci3: command tx timeout
[  373.849254] Bluetooth: hci5: command tx timeout
[  373.849731] Bluetooth: hci7: command tx timeout
[  373.913525] Bluetooth: hci4: command tx timeout
[  373.914004] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
03:45:56  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81737217 RDX=0000000000000000
RSI=ffffffff81737166 RDI=0000000000000001 RBP=ffffffff85c1bac0 RSP=ffff8880285c7808
R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000003
R12=ffffffff81737166 R13=0000000000000000 R14=ffffffff85c734c8 R15=ffff88800e6b08c0
RIP=ffffffff81518157 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe7400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4cf52fc59e CR3=00000000308c4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff819b73d4 RDX=1ffff1100700df95
RSI=ffffffff852ea5a0 RDI=0000000000000000 RBP=ffffffff852ea5a0 RSP=ffff88803806fa68
R8 =0000000000000001 R9 =ffffed1002c8fb50 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000001 R14=ffff88803806fca8 R15=0000000000000000
RIP=ffffffff8172e702 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f83d01a91f0 CR3=0000000035a14000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000