Warning: Permanently added '[localhost]:26392' (ECDSA) to the list of known hosts.
2025/04/26 19:53:57 fuzzer started
2025/04/26 19:53:57 dialing manager at localhost:46629
syzkaller login: [  107.736360] cgroup: Unknown subsys name 'net'
[  107.859753] cgroup: Unknown subsys name 'cpuset'
[  107.899339] cgroup: Unknown subsys name 'rlimit'
2025/04/26 19:54:13 syscalls: 2214
2025/04/26 19:54:13 code coverage: enabled
2025/04/26 19:54:13 comparison tracing: enabled
2025/04/26 19:54:13 extra coverage: enabled
2025/04/26 19:54:13 setuid sandbox: enabled
2025/04/26 19:54:13 namespace sandbox: enabled
2025/04/26 19:54:13 Android sandbox: enabled
2025/04/26 19:54:13 fault injection: enabled
2025/04/26 19:54:13 leak checking: enabled
2025/04/26 19:54:13 net packet injection: enabled
2025/04/26 19:54:13 net device setup: enabled
2025/04/26 19:54:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/26 19:54:13 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/26 19:54:13 USB emulation: enabled
2025/04/26 19:54:13 hci packet injection: enabled
2025/04/26 19:54:13 wifi device emulation: enabled
2025/04/26 19:54:13 802.15.4 emulation: enabled
2025/04/26 19:54:13 fetching corpus: 0, signal 0/0 (executing program)
2025/04/26 19:54:15 starting 8 fuzzer processes
19:54:15 executing program 0:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20500}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2081}, 0x800)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005011}, 0x40000)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xec, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7e, 0xbe, "584f804d723d6f617c79182adc42ea86a7e03d8df5ae678c574da1450def4f7b7f2211177c71cab2864232b582212d444a37771bfb7434ce7b60c6dc5a624bf43b44288e8e230b23f6007a599c6ae858483a9103c905e36756affe7a39179085326da6209125319ea2793c82dc0eb57650ab1a1f0170cbe93356"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x80000000, 0x1}}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0xec}, 0x1, 0x0, 0x0, 0x8014}, 0x20040810)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xbc, 0x0, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xf8, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x48001)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c1}, 0x4000)
r2 = creat(&(0x7f0000000880)='./file0\x00', 0x20)
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2000}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xfc}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2c008880}, 0x40080)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x5c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x14)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000b40), 0x2, 0x0)
fchmod(r3, 0x20)
r4 = socket$inet6(0xa, 0x5, 0x1ff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'ip6gre0\x00', <r5=>0x0, 0x4, 0x2, 0x4, 0x2020, 0xf, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x700, 0x7, 0x80000001}})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000c40)={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x4, 0x40, 0x4ec5, 0x100, 0x1, 0x0, r5})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file0/file0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r2)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000000e00)={&(0x7f0000000d00), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r7, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x34}}, 0xc009c)

19:54:15 executing program 1:
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', <r1=>0x0, 0x4, 0x7f, 0x2, 0x7, 0x1, @private2, @mcast1, 0x10, 0x8000, 0x4, 0x3}})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x81)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000400))
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffffb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0xd3)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xdc, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98}]}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
getsockname(0xffffffffffffffff, &(0x7f0000000780)=@generic, &(0x7f0000000800)=0x80)
socketpair(0x1d, 0x4, 0xcd9, &(0x7f0000000840)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, 0x1, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x11)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x1)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000b00)={0x8000, 0x8, 0x0, 0x6, 0x2, [{0x800, 0x834, 0x84, '\x00', 0x7}, {0x2, 0x2, 0x3000000000000000, '\x00', 0x1841}]})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000bc0), r5)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r4)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x1)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x5c, 0x1, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_STATUS={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000f40)={'sit0\x00', &(0x7f0000000ec0)={'syztnl2\x00', r1, 0x2f, 0x4, 0xa0, 0xce000000, 0x53, @private1, @empty, 0x1, 0x7, 0x3, 0x40}})

19:54:15 executing program 2:
process_vm_readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)=""/68, 0x44}, {&(0x7f0000000080)=""/175, 0xaf}, {&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000300)=""/65, 0x41}], 0x6, &(0x7f0000000840)=[{&(0x7f0000000400)=""/141, 0x8d}, {&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f00000005c0)=""/235, 0xeb}, {&(0x7f00000006c0)=""/126, 0x7e}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)}], 0x6, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000008c0), &(0x7f0000000900)=0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x1)
mkdirat(0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', 0x20)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000009c0), 0x210880, 0x0)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040885}, 0x40800)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r0)
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}, ["", "", ""]}, 0x28}}, 0x20000000)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000c80)={0x8, 0x7, 0x400, 0x80000000, 0x80000000, 0x4000})
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000cc0)={0x8cdd, 0x5})
setxattr$incfs_metadata(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), &(0x7f0000000d80)="f21cead79ac01457c5a30adce7b189203386835fbb943544a67ae7bf9b647390ebb27cae75187df44eb27c53eb82ad3a8ac191e12a228ccbc36a9263d23b745f9271d0c1c1c6528864a2b64de64a147171b522e87eb14e235eb529b85965c6c1d6888e677c2ad0635bbeffda", 0x6c, 0x2)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001100)={0x53, 0xfffffffffffffffd, 0x6f, 0xc1, @scatter={0x2, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000e00)=""/154, 0x9a}, {&(0x7f0000000ec0)=""/251, 0xfb}]}, &(0x7f0000001000)="881c96d418f90da889949c72070374b848f493c610d4f2241e989c9f6707ec4399003febe5eca25067af51f85fb70a6ecddd78b10e02e9590512644a6892383a5f36d0e4dc998fd65a8444af4d2fc3d3349656194063673fbdec6414624f8cf856333f898e95061de9dd5061341552", &(0x7f0000001080)=""/16, 0x1, 0x0, 0x2, &(0x7f00000010c0)})
r3 = syz_open_dev$vcsn(&(0x7f0000001180), 0x47ebbc0e, 0x480)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000012c0), r4)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001300)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
write$P9_RFSYNC(r5, &(0x7f0000001340)={0x7, 0x33, 0x2}, 0x7)
io_cancel(0x0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x80, r3, &(0x7f00000013c0)="da763bec862a58d481c05fece3a852a882c4b94b50274af5ddb7f0111a24ec16094bc385f05d6ac9e05bcbb6b5947639699938aed01159fac366167e57d35dfa1f177323fec2fdf8abd88cc83db4df051e221cd72a7ca7436123c3a1331dda82bfcac728c823a2861af6b992a6f862ed7fc1e4d5ad6e709a892e1cc61fe16c", 0x7f, 0x3b, 0x0, 0x1, r3}, &(0x7f0000001480))

19:54:15 executing program 3:
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x1ff, 0x18, 0x2a, &(0x7f0000000000)="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"})
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x101100, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000480)=0x61)
r1 = memfd_secret(0x80000)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000004c0)={0x3, 0x2})
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
r2 = epoll_create1(0x80000)
ioctl$FIONCLEX(r2, 0x5450)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700), 0xd2000, 0x0)
write$P9_RLOCK(r3, &(0x7f0000000740)={0x8, 0x35, 0x1, 0x1}, 0x8)
r4 = signalfd(r1, &(0x7f0000000780)={[0x9]}, 0x8)
pidfd_getfd(r4, r3, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000007c0)=0x3)
connect$inet6(r3, &(0x7f0000000800)={0xa, 0x4e20, 0x6, @mcast1, 0xe9d5}, 0x1c)
ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000880)={0x2, 0x8, '\x00', 0x1, &(0x7f0000000840)=[0x0]})
r5 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000900)={0x4, &(0x7f00000008c0)=[{0x0, 0x1f}, {0xbe, 0x40}, {0x7fff, 0xdfd9}, {0x8001, 0x7fff}]})
r6 = accept$packet(r4, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001080)=0x14)
accept4$packet(r6, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001100)=0x14, 0x800)

[  125.044596] audit: type=1400 audit(1745697255.434:7): avc:  denied  { execmem } for  pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
19:54:15 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x504c0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x3a, 0x33, @mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7f}, @device_b, @broadcast, @initial, {0x1, 0x7}}, @tdls_chsw_req={0xc, 0x5, {0x2c, 0xc2, @void, {0x65, 0x12, {@initial, @device_a, @broadcast}}, {0x68, 0x4, {0xffff, 0xe1ae}}}}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r2=>r0, {<r3=>r0}}, './file0\x00'})
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000300))
sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xac, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x95, 0x3, "4f0432f28ba5d505cc5939ff1e0ea0b7a485e88ad7955309545a4ef08649a2a300f9bc039a20c456f6ccd03eabad5595cc80ee5d01fc86f60a2ad22a896c969c7ba8a03a914f0ddc1d985e31eb2870ea784b24303c75b9ac5331ead2844e1e36a959aa476c55a0a75499a6f8cd8d736f46443a5c1ef31e57dbefd7098a5954efa2078b0fbc51ea26e187afbdd822066581"}]}, 0xac}, 0x1, 0x0, 0x0, 0x40841}, 0x804)
getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f00000004c0)=""/29, &(0x7f0000000500)=0x1d)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb737}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbf07}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x28}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x20006854)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000700)={0x2, 0x2, 'client1\x00', 0x8000000040000000, "a3d4ce4d3241f0a5", "e511020e40c3e5d7ca93d8fd02ab75034e895a03da3d54da213c2860ae60bc0b", 0x2})
sendfile(r4, r3, &(0x7f00000007c0)=0x2, 0x5)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000800)={'vcan0\x00'})
sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2050000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x124, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000940)={0x9, 0x2, 0x7fff})
sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80031000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0xc4}}, 0x4000000)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000000b80)={{0xfffffffd, 0x5a9}, 0x100, './file1\x00'})
getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000cc0), &(0x7f0000000d00)=0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'})

19:54:15 executing program 5:
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x453, 0x8, 0x70bd27, 0x25dfdbfb, "20e9f6db63d7d1b199af6ba8f9580b99976926df4c8c100af78d677665b262a68de71d529e16abf22af5", ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x30000000}, 0x8881)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x3f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xc000)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
pipe2(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x184800)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x4c}}, 0x80)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xf454f24a4d8a30d}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8005)
sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f2febfd}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WDS_PEER(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40081)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, 0x3, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x240068c4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x1b8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3f}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}]}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ff80}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffeffff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000001}]}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x1b8}, 0x1, 0x0, 0x0, 0xc081}, 0x0)
ftruncate(r6, 0x1)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000ec0)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r8, 0x333, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x22040084}, 0x4000000)

19:54:15 executing program 6:
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'veth0\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x868}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xeb}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xac5fb0ecab9f237}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x9}}, './file0\x00'})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x41c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "e41ebb99742ab9e8af2655e38bc221c366faaaa7a6c4b6091ba8"}}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4800000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x68f8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "13d44a094e5372e3f21952e4ff3ce6f810c8b6a4cdbb0dc0c2201243ee45326889fd3d29a667af5e749748ce56340c317b80dc0494587096a3a183f6b86171cb73e5a84639b8477f8355a66e4bfdd8e48d5301f14fad9f1a5047860aaa2fdf46af75904c25494debac9eddc102154c4ce485f02a04f0e79c4abb74802aa7a6c8f9daac28fc99f2bf2208de1afe436ae1a4eee80656ab7e0f789b317fd2945783bb0544721879e1f88c599d9137b4eab94e1494bd9b6e3249e7fc0171a0a91981f15d1f3d2498d2928aa58405411a3474ae534a3825f3963f83244124b4e26b8717c10fc9e9be8415c450"}]}, @TIPC_NLA_BEARER={0x1e4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8da9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb60f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x491}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffff2940}}, {0x20, 0x2, @in6={0xa, 0x8b, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xffffff97}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x936ef7e6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffff, @private2, 0x4a}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @local, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xe65, @private2, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}}]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x94}, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x80, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}]}, 0x80}, 0x1, 0x0, 0x0, 0x2}, 0x4040801)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf9c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x64}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800)
r3 = syz_io_uring_setup(0x5266, &(0x7f0000000b00)={0x0, 0xcf30, 0x0, 0x2, 0xf7, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x5000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000c00)={{0x1, 0x1, 0x18, <r4=>r3, {0x7ef}}, './file0\x00'})
rmdir(&(0x7f0000000c40)='./file0\x00')
syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r4)
r5 = open(&(0x7f0000000cc0)='./file1\x00', 0x40100, 0x20)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000d40)={'ipvlan1\x00', &(0x7f0000000d00)=@ethtool_gfeatures={0x3a, 0x2, [{}, {}]}})
sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
pipe(&(0x7f0000000e80)={<r6=>0xffffffffffffffff})
futimesat(r6, &(0x7f0000000ec0)='./file2\x00', &(0x7f0000000f00)={{0x0, 0x2710}})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x32}, @NL80211_ATTR_PMKID={0x14, 0x55, "84fc8e1eafc5499e4889eb47ee11d357"}, @NL80211_ATTR_PMK={0x14, 0xfe, "1f90f8165ca3015d80965307a7060df5"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6ebf33bbfe10"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x800)
rename(&(0x7f0000001080)='./file2/file0\x00', &(0x7f00000010c0)='./file1\x00')
ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0)

19:54:15 executing program 7:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb7)
ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000040)="ad1b7d505856d1e2317a93be3528e04f1cac69159a3b2dca9bf0fa21c33d336527a14a0acca885bf4e34d214ee93cccf6b39ccf2ac32b06cb61d3485611d1cb5812b2578cde579e685090fdf86aef8597e26615ad3fc0ce5ed10ef7cb46c73be3202515607a3f83a3c05523ec8f0d6c39f97b18dc59e3fab5c6730b38cdbb3a013f99fde9e6561ef384846ed3657046e172bee8454384ee08f7b245f3b1386cd5ba4326e42361666108880b5ec07afff7ef56bc26c99")
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x4040, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x90)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', <r3=>0x0, 0x29, 0x4, 0x40, 0x6, 0x19, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x37}, 0x8000, 0x40, 0x8, 0x8}})
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000340))
socketpair(0x28, 0x2, 0x3, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$packet(r4, &(0x7f00000003c0)={0x11, 0x10, r3, 0x1, 0x42, 0x6, @random="5e968f30acae"}, 0x14)
r6 = accept$unix(r0, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e)
connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
connect$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x17, r3, 0x1, 0xb3, 0x6, @local}, 0x14)
ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000580)=""/231)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl1\x00', <r7=>r3, 0x29, 0x7, 0xa, 0x8, 0x2a, @loopback, @loopback, 0x700, 0x7, 0x0, 0x86b}})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000740)={@private0, @mcast1, @loopback, 0x5, 0x1000, 0x8001, 0x0, 0xfffffffffffffff9, 0x800004, r7})
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x144, 0x0, 0x8, 0x70bd27, 0x9, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1bb3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20008040}, 0x40)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000a00), r8)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000a80)={0x1, 0x0, &(0x7f0000000a40)=[r5, r2, r5]}, 0x3)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000b00))

[  126.446954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.448191] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.450043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.451251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.454070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.456047] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.459372] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.464592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.479831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.487271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.489501] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  126.492204] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.495925] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.496004] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  126.498179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.500472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.502925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  126.505213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  126.515446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  126.518046] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  126.608488] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.625127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.653123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.686094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.694115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  126.750402] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  126.770666] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  126.804861] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  126.821402] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  126.826459] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  126.828495] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  126.831205] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  126.836628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  126.840857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  126.843219] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  126.865291] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  126.892162] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  126.898835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  126.940208] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  126.961827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  128.515771] Bluetooth: hci0: command tx timeout
[  128.577812] Bluetooth: hci2: command tx timeout
[  128.578501] Bluetooth: hci3: command tx timeout
[  128.579362] Bluetooth: hci1: command tx timeout
[  128.769790] Bluetooth: hci4: command tx timeout
[  128.961778] Bluetooth: hci5: command tx timeout
[  129.025848] Bluetooth: hci7: command tx timeout
[  129.089751] Bluetooth: hci6: command tx timeout
[  130.562003] Bluetooth: hci0: command tx timeout
[  130.627137] Bluetooth: hci1: command tx timeout
[  130.627608] Bluetooth: hci3: command tx timeout
[  130.628797] Bluetooth: hci2: command tx timeout
[  130.818063] Bluetooth: hci4: command tx timeout
[  131.010354] Bluetooth: hci5: command tx timeout
[  131.075719] Bluetooth: hci7: command tx timeout
[  131.138351] Bluetooth: hci6: command tx timeout
[  132.610486] Bluetooth: hci0: command tx timeout
[  132.673967] Bluetooth: hci3: command tx timeout
[  132.674418] Bluetooth: hci2: command tx timeout
[  132.675803] Bluetooth: hci1: command tx timeout
[  132.865812] Bluetooth: hci4: command tx timeout
[  133.057993] Bluetooth: hci5: command tx timeout
[  133.123709] Bluetooth: hci7: command tx timeout
[  133.186127] Bluetooth: hci6: command tx timeout
[  134.657750] Bluetooth: hci0: command tx timeout
[  134.722759] Bluetooth: hci3: command tx timeout
[  134.723207] Bluetooth: hci2: command tx timeout
[  134.723628] Bluetooth: hci1: command tx timeout
[  134.913776] Bluetooth: hci4: command tx timeout
[  135.105780] Bluetooth: hci5: command tx timeout
[  135.169739] Bluetooth: hci7: command tx timeout
[  135.233879] Bluetooth: hci6: command tx timeout
[  188.892088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.893542] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.894934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.897408] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.906566] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.087982] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.104661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.109881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.110248] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.113300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.115568] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.117549] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.117775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.121070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.122168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  189.128450] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  189.130588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  189.135110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  189.141029] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  189.143217] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.148350] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.164192] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  189.171842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  189.172556] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  189.183612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  189.194490] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  189.197623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  189.203991] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  189.225974] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.230118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.241009] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  189.246989] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.269353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  189.270133] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  189.279625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  189.311575] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  189.315927] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  189.339509] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  189.355276] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  189.360075] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  190.977901] Bluetooth: hci0: command tx timeout
[  191.234042] Bluetooth: hci1: command tx timeout
[  191.234099] Bluetooth: hci4: command tx timeout
[  191.297774] Bluetooth: hci2: command tx timeout
[  191.298805] Bluetooth: hci3: command tx timeout
[  191.362788] Bluetooth: hci5: command tx timeout
[  191.362814] Bluetooth: hci6: command tx timeout
[  191.425860] Bluetooth: hci7: command tx timeout
[  193.025871] Bluetooth: hci0: command tx timeout
[  193.282798] Bluetooth: hci4: command tx timeout
[  193.282820] Bluetooth: hci1: command tx timeout
[  193.346061] Bluetooth: hci3: command tx timeout
[  193.346137] Bluetooth: hci2: command tx timeout
[  193.409825] Bluetooth: hci5: command tx timeout
[  193.409842] Bluetooth: hci6: command tx timeout
[  193.474845] Bluetooth: hci7: command tx timeout
[  195.075026] Bluetooth: hci0: command tx timeout
[  195.329955] Bluetooth: hci4: command tx timeout
[  195.330082] Bluetooth: hci1: command tx timeout
[  195.394130] Bluetooth: hci2: command tx timeout
[  195.394543] Bluetooth: hci3: command tx timeout
[  195.457777] Bluetooth: hci5: command tx timeout
[  195.459914] Bluetooth: hci6: command tx timeout
[  195.521739] Bluetooth: hci7: command tx timeout
[  197.121796] Bluetooth: hci0: command tx timeout
[  197.377944] Bluetooth: hci4: command tx timeout
[  197.378092] Bluetooth: hci1: command tx timeout
[  197.441870] Bluetooth: hci3: command tx timeout
[  197.441959] Bluetooth: hci2: command tx timeout
[  197.507720] Bluetooth: hci6: command tx timeout
[  197.507737] Bluetooth: hci5: command tx timeout
[  197.570825] Bluetooth: hci7: command tx timeout
[  250.966131] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  250.969330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  250.974000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  250.982361] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  250.986886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  251.157098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  251.159965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  251.163235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  251.173033] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  251.179997] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  251.182291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  251.185136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  251.187611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  251.193071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  251.196648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  251.253065] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.258162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.260403] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.265955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.273634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.309219] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  251.343327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.391971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.432501] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  251.448233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.455006] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  251.459498] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  251.473605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  251.483805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  251.494197] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  251.496812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  251.515977] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  251.521363] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  251.527228] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  251.554173] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  251.560398] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  251.570393] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  251.577659] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  251.602974] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  251.611151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.058765] Bluetooth: hci0: command tx timeout
[  253.249798] Bluetooth: hci2: command tx timeout
[  253.251775] Bluetooth: hci1: command tx timeout
[  253.377950] Bluetooth: hci3: command tx timeout
[  253.570920] Bluetooth: hci4: command tx timeout
[  253.698804] Bluetooth: hci5: command tx timeout
[  253.699748] Bluetooth: hci6: command tx timeout
[  253.700323] Bluetooth: hci7: command tx timeout
[  255.105995] Bluetooth: hci0: command tx timeout
[  255.298796] Bluetooth: hci1: command tx timeout
[  255.299238] Bluetooth: hci2: command tx timeout
[  255.425739] Bluetooth: hci3: command tx timeout
[  255.617736] Bluetooth: hci4: command tx timeout
[  255.746842] Bluetooth: hci5: command tx timeout
[  255.747284] Bluetooth: hci7: command tx timeout
[  255.748039] Bluetooth: hci6: command tx timeout
[  257.153895] Bluetooth: hci0: command tx timeout
[  257.346073] Bluetooth: hci1: command tx timeout
[  257.346530] Bluetooth: hci2: command tx timeout
[  257.473769] Bluetooth: hci3: command tx timeout
[  257.667131] Bluetooth: hci4: command tx timeout
[  257.793812] Bluetooth: hci6: command tx timeout
[  257.794254] Bluetooth: hci7: command tx timeout
[  257.795713] Bluetooth: hci5: command tx timeout
[  259.202077] Bluetooth: hci0: command tx timeout
[  259.395059] Bluetooth: hci2: command tx timeout
[  259.395507] Bluetooth: hci1: command tx timeout
[  259.521735] Bluetooth: hci3: command tx timeout
[  259.713744] Bluetooth: hci4: command tx timeout
[  259.841818] Bluetooth: hci7: command tx timeout
[  259.842262] Bluetooth: hci5: command tx timeout
[  259.842736] Bluetooth: hci6: command tx timeout
[  313.499762] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  313.505278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.507837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.518015] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.524098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.682085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  313.686246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  313.691348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  313.700161] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  313.707184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  313.767884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  313.776472] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  313.780455] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  313.788718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  313.792923] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  313.828349] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  313.850063] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  313.856324] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  313.913277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  313.925280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  313.945455] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  313.948472] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  313.950969] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  313.980011] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  313.984275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  313.986838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  313.993317] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  313.993474] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  313.997240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  313.999648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  314.002347] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  314.004407] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.010844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.016526] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.030995] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  314.032471] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  314.039198] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  314.067911] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  314.070258] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  314.079579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  315.585846] Bluetooth: hci0: command tx timeout
[  315.778609] Bluetooth: hci1: command tx timeout
[  315.907160] Bluetooth: hci2: command tx timeout
[  316.098838] Bluetooth: hci3: command tx timeout
[  316.162382] Bluetooth: hci7: command tx timeout
[  316.162832] Bluetooth: hci6: command tx timeout
[  316.163496] Bluetooth: hci4: command tx timeout
[  316.226928] Bluetooth: hci5: command tx timeout
[  317.633737] Bluetooth: hci0: command tx timeout
[  317.827731] Bluetooth: hci1: command tx timeout
[  317.954104] Bluetooth: hci2: command tx timeout
[  318.145820] Bluetooth: hci3: command tx timeout
[  318.210490] Bluetooth: hci4: command tx timeout
[  318.210518] Bluetooth: hci6: command tx timeout
[  318.211121] Bluetooth: hci7: command tx timeout
[  318.273778] Bluetooth: hci5: command tx timeout
[  319.681855] Bluetooth: hci0: command tx timeout
[  319.873851] Bluetooth: hci1: command tx timeout
[  320.002854] Bluetooth: hci2: command tx timeout
[  320.194940] Bluetooth: hci3: command tx timeout
[  320.257732] Bluetooth: hci7: command tx timeout
[  320.258775] Bluetooth: hci6: command tx timeout
[  320.259304] Bluetooth: hci4: command tx timeout
[  320.322767] Bluetooth: hci5: command tx timeout
[  321.729824] Bluetooth: hci0: command tx timeout
[  321.922744] Bluetooth: hci1: command tx timeout
[  322.050754] Bluetooth: hci2: command tx timeout
[  322.241805] Bluetooth: hci3: command tx timeout
[  322.305829] Bluetooth: hci6: command tx timeout
[  322.306309] Bluetooth: hci7: command tx timeout
[  322.307283] Bluetooth: hci4: command tx timeout
[  322.369986] Bluetooth: hci5: command tx timeout
[  375.897187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  375.900403] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  375.909585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  375.924417] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  375.930489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.093203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.102280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.106526] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  376.109595] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  376.112222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  376.122486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.137722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  376.140533] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  376.142108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.146771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  376.149233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  376.152478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  376.168984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  376.174002] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  376.181444] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  376.255795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  376.261605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  376.267340] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  376.272367] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  376.276500] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  376.282267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  376.284745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  376.293429] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  376.297116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  376.300130] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  376.319182] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  376.327369] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  376.332180] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  376.368237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  376.375366] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  376.586005] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  376.598528] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  376.604248] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  376.622489] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  376.630282] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  377.985851] Bluetooth: hci0: command tx timeout
[  378.241893] Bluetooth: hci2: command tx timeout
[  378.242803] Bluetooth: hci1: command tx timeout
[  378.305876] Bluetooth: hci3: command tx timeout
[  378.498962] Bluetooth: hci5: command tx timeout
[  378.561772] Bluetooth: hci4: command tx timeout
[  378.625910] Bluetooth: hci6: command tx timeout
[  378.689741] Bluetooth: hci7: command tx timeout
[  380.034949] Bluetooth: hci0: command tx timeout
[  380.290844] Bluetooth: hci2: command tx timeout
[  380.291318] Bluetooth: hci1: command tx timeout
[  380.353735] Bluetooth: hci3: command tx timeout
[  380.545910] Bluetooth: hci5: command tx timeout
[  380.610751] Bluetooth: hci4: command tx timeout
[  380.673782] Bluetooth: hci6: command tx timeout
[  380.738415] Bluetooth: hci7: command tx timeout
[  382.082889] Bluetooth: hci0: command tx timeout
[  382.339961] Bluetooth: hci2: command tx timeout
[  382.340436] Bluetooth: hci1: command tx timeout
[  382.402738] Bluetooth: hci3: command tx timeout
[  382.595137] Bluetooth: hci5: command tx timeout
[  382.659135] Bluetooth: hci4: command tx timeout
[  382.723896] Bluetooth: hci6: command tx timeout
[  382.787145] Bluetooth: hci7: command tx timeout
[  384.129758] Bluetooth: hci0: command tx timeout
[  384.385793] Bluetooth: hci1: command tx timeout
[  384.386285] Bluetooth: hci2: command tx timeout
[  384.449750] Bluetooth: hci3: command tx timeout
[  384.642967] Bluetooth: hci5: command tx timeout
[  384.706910] Bluetooth: hci4: command tx timeout
[  384.770739] Bluetooth: hci6: command tx timeout
[  384.833951] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
19:59:16  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff81902dcb RDX=ffffea00004fd440
RSI=0000000000000008 RDI=ffffea00004fd440 RBP=ffffea00004fd440 RSP=ffff88802f157a38
R8 =0000000000000000 R9 =fffff9400009fa88 R10=ffffea00004fd447 R11=0000000000000000
R12=0000000000000000 R13=ffffea00004fd440 R14=ffff88802f157df0 R15=dffffc0000000000
RIP=ffffffff81902dce RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f145f437540 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563094a94868 CR3=000000002e01a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff888027f7f948 RBX=ffff888027f7f948 RCX=ffffffff84a608c0 RDX=ffff8880154a1bc0
RSI=ffffffff84a5f89b RDI=ffff888027f7f948 RBP=dffffc0000000000 RSP=ffff888027f7f770
R8 =0000000000000001 R9 =ffff888027f7fe30 R10=00000000fffffffe R11=0000000000000000
R12=00000000fffffffe R13=0000000000000000 R14=ffff888027f7f985 R15=0000000000000002
RIP=ffffffff84a5f89e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe4300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6a411f7610 CR3=00000000339f6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000