Warning: Permanently added '[localhost]:51581' (ECDSA) to the list of known hosts.
2025/04/28 05:06:11 fuzzer started
2025/04/28 05:06:11 dialing manager at localhost:46629
syzkaller login: [   98.341348] cgroup: Unknown subsys name 'net'
[   98.482270] cgroup: Unknown subsys name 'cpuset'
[   98.529184] cgroup: Unknown subsys name 'rlimit'
2025/04/28 05:06:35 syscalls: 2214
2025/04/28 05:06:35 code coverage: enabled
2025/04/28 05:06:35 comparison tracing: enabled
2025/04/28 05:06:35 extra coverage: enabled
2025/04/28 05:06:35 setuid sandbox: enabled
2025/04/28 05:06:35 namespace sandbox: enabled
2025/04/28 05:06:35 Android sandbox: enabled
2025/04/28 05:06:35 fault injection: enabled
2025/04/28 05:06:35 leak checking: enabled
2025/04/28 05:06:35 net packet injection: enabled
2025/04/28 05:06:35 net device setup: enabled
2025/04/28 05:06:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/28 05:06:35 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/28 05:06:35 USB emulation: enabled
2025/04/28 05:06:35 hci packet injection: enabled
2025/04/28 05:06:35 wifi device emulation: enabled
2025/04/28 05:06:35 802.15.4 emulation: enabled
2025/04/28 05:06:35 fetching corpus: 0, signal 0/0 (executing program)
2025/04/28 05:06:38 starting 8 fuzzer processes
05:06:38 executing program 0:
read$usbmon(0xffffffffffffffff, &(0x7f0000000000)=""/46, 0x2e)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000050)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000180)={<r1=>0x0, 0x2, 0x45df})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000580)={<r2=>0x0, "581e18b6744ec4474e9f3c0cd4bbf545"})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001580)={0xc, 0x6, {0x1f, @struct={0xc90, 0x8}, r1, 0x9, 0x2, 0x8, 0x5, 0x1, 0x2, @usage=0x4, 0x20, 0x1, [0x556, 0x20, 0x100000001, 0xb4d2, 0x7ff]}, {0x2, @struct={0x5c, 0x412}, r2, 0x3, 0x3, 0x8, 0x1, 0x3, 0x82, @usage=0x9, 0x7, 0x10001, [0xffffffffffffffe1, 0x0, 0x800, 0x0, 0x8f, 0x1]}, {0x10001, @struct={0x0, 0x6}, 0x0, 0x4, 0x8, 0x400, 0x4, 0x12, 0x2a, @struct={0x5, 0x4}, 0xffff, 0x80000000, [0x81, 0x2, 0x7ff, 0x5, 0x80000001, 0x10001]}, {0x4b, 0x81, 0x4}})
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, r0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x76}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x800)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001a80), 0xc101, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000001ac0))
ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000001b00)={'\x00', 0x1, 0x0, 0x4})
ftruncate(r3, 0x1)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x84, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000080}, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000001d00), r3)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000001d40)={0x7, 0x81, 0x3f, 0xfffffff9, 0xff, "3702da7f8f321feddd89201b1eab98aaa11845", 0x2, 0x30ba})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000001d80)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e00)={0x11c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x72f}, {0x6, 0x11, 0x101}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x55}, 0x880)
r5 = socket$netlink(0x10, 0x3, 0x1)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5}}, './file0\x00'})
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x34, 0x0, 0x122, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1fffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4890)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)

05:06:38 executing program 1:
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r0=>0x0, 0x29, 0x0, 0x0, 0xc1, 0x2, @private0, @local, 0x1, 0x20, 0x4, 0x8}})
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xffffffff7fffffff]}, 0x8, 0x80000)
fcntl$getflags(r1, 0xb)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', <r2=>r0, 0x0, 0x0, 0x80, 0x400, 0x33, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x700, 0x80, 0x1f}})
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x7fff, 0x1}]})
r3 = syz_open_dev$mouse(&(0x7f0000000300), 0x4, 0x800)
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, r2}, 0x14)
prctl$PR_SET_TIMERSLACK(0x1d, 0xff)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x28000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f00000003c0)={{0x0, 0x1, 0x1ff, 0x2, 0x232352d}, 0x0, 0x3964})
write$nbd(r4, &(0x7f0000000440)={0x67446698, 0x0, 0x1, 0x3, 0x3, "fd21bfae03f44259487369f8a7d14fd85e1d8e5c8377000ebd65694c2ab80a5485e281621470bd45e496b18309a6f9a8ec25d50930815d639e27da7cca6d244f988e20eed9ed478057bb4713ace5c58f72c605ce93d05f424898b25e2ea6241d32658311546f941dbe0757e30feee33f7c91bc05d85cd7fcda81195e707cae44be643922aa1eb0449f1b7ebfd620599ebfb7391c1d7adc8677c31b74e07bc67d725d7fbfb79cdf695491788599a196edc0981db9ae8c3b3746ba0731efe3163d1aad1ccf9d0808d4556b448eee74"}, 0xde)
mount$9p_rdma(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x800028, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@mmap}, {@timeout={'timeout', 0x3d, 0x5}}, {@timeout={'timeout', 0x3d, 0x950}}, {@sq={'sq', 0x3d, 0x1}}], [{@euid_lt}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}})
setxattr$trusted_overlay_redirect(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000000740)='./file0\x00', 0x8, 0x2)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000780), 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r5, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x35}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xfffffff7}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x1f}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20004004)
getsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000940), &(0x7f0000000980)=0x4)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000009c0), 0x4)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0xbe57fda2c0d9e734, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000a40))

05:06:38 executing program 2:
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb64e514a109f959c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x69}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x802}, 0x20000004)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4112001}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0x34}}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x12c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xc}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3f33027c455e78f2e3c57e5d95abdeea218e719c935cb773"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2ff35a13ef9388b14ba7e6d46edfe5537cc763bfacd2ac59"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9b3cdb02a26f56df94fefaed3d51aa08c488bfdfd78fe729"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6gretap0\x00'}]}, 0x12c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4010)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000044}, 0xc013)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xec, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x805}, 0x40000)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000ac0)='./file0\x00', 0x80800)
sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x22cfd214affce75}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0xbeebb65f4fa6fcca}, 0x20000000)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80804220}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2140}, 0x4000004)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000d40)={{0x0, 0x603, 0x80, 0x5, 0x100000000, 0xffffffff, 0x9, 0x0, 0x1, 0x9, 0x9, 0x5, 0x6, 0xccf3, 0x100}})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001d80)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x58, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x8, 0x8, 0x3, 0x101, 0x9, 0x1, 0x6, 0xef4e, 0x1, 0x3, 0x5, 0x3, 0x0, 0x4, 0xae8f, 0x7]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x58}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x30, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7c}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0x98, r4, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x0, 0x5, 0x0, {0x48000000, 0x9, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x300, 0x7, 0x1}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x40, 0x0, 0x6, 0x0, {0x3, 0x1bab, 0x0, 0x81, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x4}}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7fff}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xc2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x844}, 0x4000000)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0), 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x74, r4, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x8040)

05:06:38 executing program 3:
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'veth0\x00', {0x6}, 0x4})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000040)={{0x1, 0x6}, 0x0, 0x9, 0x8, {0x0, 0x5}, 0x9, 0xff})
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10)
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x0)
ppoll(&(0x7f0000000180)=[{r0, 0x1}], 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x84]}, 0x8)
clock_gettime(0x0, &(0x7f00000019c0)={<r2=>0x0, <r3=>0x0})
recvmmsg(r0, &(0x7f0000001900)=[{{&(0x7f0000000240)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000002c0)}, 0x7}, {{&(0x7f0000000300)=@nl=@unspec, 0x80, &(0x7f0000001580)=[{&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f0000000400)=""/236, 0xec}, {&(0x7f0000000500)=""/29, 0x1d}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/14, 0xe}], 0x6, &(0x7f0000001600)}, 0xa5d9}, {{&(0x7f0000001640)=@nl=@proc, 0x80, &(0x7f00000017c0)=[{&(0x7f00000016c0)=""/56, 0x38}, {&(0x7f0000001700)=""/131, 0x83}], 0x2, &(0x7f0000001800)=""/217, 0xd9}}], 0x3, 0x40, &(0x7f0000001a00)={r2, r3+10000000})
syz_extract_tcp_res(&(0x7f0000001a40), 0x1, 0x8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001b40)={'syztnl0\x00', &(0x7f0000001a80)={'gre0\x00', r1, 0x8020, 0x7800, 0x7, 0x537, {{0x1b, 0x4, 0x2, 0x8, 0x6c, 0x65, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@lsrr={0x83, 0x7, 0xb6, [@local]}, @timestamp_prespec={0x44, 0x44, 0xa6, 0x3, 0x5, [{@multicast1, 0xff}, {@broadcast, 0x81}, {@remote, 0x58ae0b57}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@broadcast}, {@multicast2, 0x7ff}, {@broadcast, 0x40}, {@loopback, 0x7fff}]}, @generic={0x89, 0xb, "80116a4d644664e7ee"}]}}}}})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001b80)={0x8, 0x6, {0x6, @usage=0x8, 0x0, 0x100, 0x20, 0x6, 0x3, 0x1, 0x0, @struct={0x81, 0x4}, 0x1, 0x31, [0x3f, 0x2, 0x9, 0x1ff, 0x9, 0xc72]}, {0xfffffffffffffffb, @usage=0x8, 0x0, 0x9, 0x7, 0xffffffffffff8f2a, 0xffffffff, 0xee0, 0x40, @struct={0x3, 0xf6a}, 0x5, 0x0, [0xca, 0x80, 0x1, 0x7, 0x3, 0x1ff]}, {0x3, @usage=0xffffffff, 0x0, 0x100, 0x0, 0x76f01d8e, 0x3f, 0x7, 0x0, @struct={0xffffffff, 0x4}, 0xfffffffb, 0x9, [0x6, 0xbf2c, 0x1, 0x401, 0x7, 0x1]}, {0x9, 0xfffffffffffffff9, 0x40}})
r4 = creat(&(0x7f0000001f80)='./file0\x00', 0x140)
sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {0xd, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000800)
recvfrom(0xffffffffffffffff, &(0x7f00000020c0)=""/64, 0x40, 0x40002140, &(0x7f0000002100)=@tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}, 0x1}}, 0x80)
fcntl$setstatus(r0, 0x4, 0x42000)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002280))
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000002300)={0x7, 0x2, 0x2, 0x0, 0xfffffffc, 0x4200})
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvfrom$inet(r5, &(0x7f0000002340)=""/152, 0x98, 0x12140, &(0x7f0000002400)={0x2, 0x4e24, @multicast1}, 0x10)

05:06:38 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x6}}, './file0\x00'})
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4d}, 0x40089)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "e1fc08c1e2ec0fe0ebd17a8627b2f35dc2cb5b0dcc6439d1a2954d789f8aeebd8a6cf4e4b0539c8f2309d4dd61ba5e72318bab634d7d06569de3601ef33ee47c7fe13a67cf44c55eb8afb6f1d65229c6e1414af5a4f487785818f8ad7ca389a3af6422e093654aa04521bf2e55032a50c0cca68c4d3a8fd0343b0d047f612aa07b4c2982a07ba3da338975951231b35bd1e552c32e150a88915f29c1a89c42773c2b4577462e9606492a45dbdc3c5235847263cab590ab3a1b100dcf6fb48c5a26bdd68278c61784b16aeb92e18db8ef9f133715dcf266da2337a61a8aee0e847914c3ed8fd10c90e20feac83a7457aea32497a918147c9d2b9b5f05a2f812e4", "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"})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8800)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001280), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x30, r1, 0x2, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x3, 0x2, 0x4, 0x101}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000001380)='blkio.bfq.sectors\x00', 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000001540)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001500)={&(0x7f0000001400)={0xf8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x61980}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7da}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xedab}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff8000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6460}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb3e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x24000041}, 0x4048804)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
finit_module(r3, &(0x7f00000015c0)='*.\x00', 0x2)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000001600)=0x401)
ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000001640)=0x1)
r4 = syz_open_dev$vcsn(&(0x7f0000001680), 0x401, 0x8203)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f00000016c0)=0x7, 0x4)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001f00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001f40)=""/59, &(0x7f0000001f80)=0x3b)
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000001fc0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002000)={{0x1, 0x1, 0x18, <r6=>r4, {0xee00}}, './file0\x00'})
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000002040))

05:06:38 executing program 4:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffc00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}]}, 0x80}, 0x1, 0x0, 0x0, 0x5}, 0x10000804)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2422}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x48894)
r1 = socket(0x23, 0x80000, 0x81)
sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xbc, 0x0, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_LABELS_MASK={0x4}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @remote}}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x64}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}]}, 0xbc}, 0x1, 0x0, 0x0, 0x44845}, 0x4000881)
r2 = accept$unix(0xffffffffffffffff, &(0x7f00000006c0)=@abs, &(0x7f0000000740)=0x6e)
setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000780)={0x0, 0x2710}, 0x10)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4040)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'ip6tnl0\x00', <r4=>0x0, 0x29, 0x2, 0x1, 0x5, 0x2, @remote, @empty, 0x8, 0x10, 0x6e}})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000000c00)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000c40)={'team0\x00', <r6=>0x0})
getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000c80)={@rand_addr, @local, <r7=>0x0}, &(0x7f0000000cc0)=0xc)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001580)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000d00)={0x810, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x178b0380}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}]}}, {{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xc00, 0xff, 0x5, 0x7}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x3, 0x3}, {0x8000, 0x3f, 0x0, 0x800000}, {0x6, 0x6, 0x3, 0x1}, {0x1d9, 0x96, 0x80, 0x5}, {0x9, 0x8, 0x8, 0x4}, {0x5, 0xeb, 0x1, 0x5}, {0x9, 0x6, 0x9, 0xda2}]}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x810}, 0x1, 0x0, 0x0, 0x40081}, 0x1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0xa0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001740)={@broadcast, @multicast2}, &(0x7f0000001780)=0xc)
sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)={0xb4, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x1f}}}}, [@NL80211_ATTR_IE={0x3f, 0x2a, [@link_id={0x65, 0x12, {@random="d5e920285e47", @broadcast, @broadcast}}, @link_id={0x65, 0x12, {@random="2ba25540ba00", @device_a, @device_b}}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_FILS_KEK={0x29, 0xf2, "538de601dcdb9e41ca87dfc023686e7aeeec17a0c8e6e6df13c07fd55375c4f61b313e1c80"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x24004045}, 0xc000)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000001a00)={@loopback}, 0x14)

[  124.654219] audit: type=1400 audit(1745816798.470:7): avc:  denied  { execmem } for  pid=286 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:06:38 executing program 6:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x509001, 0x0)
fsync(r0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x23}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4008840)
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder-control\x00', 0x802, 0x0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6f}]}, 0x48}, 0x1, 0x0, 0x0, 0x24}, 0x4000041)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={<r2=>r1, 0x8, 0x4, 0x29})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r2)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x704, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000000)
r4 = signalfd4(r1, &(0x7f0000000840)={[0x2]}, 0x8, 0x800)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x40)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000c00)={"43fe4ff00d6f1067573dd7a288746248", 0x0, <r7=>0x0, {0x649, 0x7f}, {0x6, 0x8}, 0x81, [0x2, 0x0, 0x3, 0x80, 0x273d, 0x1ff, 0x5f2, 0x800, 0x101, 0x10001, 0x10000, 0xa3a, 0x3ff, 0x67, 0x6, 0x8]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000d00)={"07c2a90d9fbb3461b5b2977586c03bea", 0x0, <r8=>0x0, {0x10000, 0x4}, {0x80, 0x7}, 0x0, [0x8, 0x8, 0x3, 0x7f, 0x40, 0x401, 0x8001, 0x100000001, 0x2bc00000, 0x9, 0xc3b, 0x2, 0x8, 0xff, 0x7, 0x7f]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000e00)={"a73dd88084f951d7e0b17b3d4c0fae43", r7, r8, {}, {0x7}, 0x8, [0x2, 0x6, 0x0, 0xfffffffffffffffb, 0x280000000000, 0x2e06, 0xff, 0x3, 0x4, 0x6, 0x8, 0x8, 0xffffffff, 0x2, 0x7fff, 0x2]})
ioctl$LOOP_SET_CAPACITY(r4, 0x4c07)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000f00))

05:06:38 executing program 7:
getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x30201)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000140)={0x3}, 0x4)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000180)=0x100000001)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/cpu', 0x141000, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x33}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80c0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x24040, 0x0)
ioctl$TIOCGETD(r5, 0x5424, &(0x7f00000003c0))
setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000400)={0x1, 0x1000, 0x5}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000600)={'wg1\x00', <r6=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001380)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000640)={0xccc, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xc60, 0x8, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @local, 0x8}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1000, @remote, 0xca3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}, {0x4e4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_ALLOWEDIPS={0x470, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}]}, {0x304, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @local, 0x8}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b3023a1f23b9d0f427c3ebedfd0ab7d1480d6c1130697bd02537a6d816545423"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "91c5254c1b53e0af2b8fb3e92221444d5070db4f0859fc3b5bb4a0cd03cf8001"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @mcast1, 0x7}}, @WGPEER_A_ALLOWEDIPS={0x244, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x354, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1492722b4e44b19ce7e8e0cd87bcec1ae0fa8bd844b5d407404d2b0dab7e786a"}, @WGPEER_A_ALLOWEDIPS={0x1c0, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x720, @empty, 0x5a3}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0xccc}}, 0x81)
fcntl$getownex(r0, 0x10, &(0x7f00000013c0)={0x0, <r7=>0x0})
write$binfmt_elf32(r1, &(0x7f0000001400)={{0x7f, 0x45, 0x4c, 0x46, 0x16, 0x0, 0x9, 0x0, 0x43, 0x3, 0x6, 0x7, 0xae, 0x38, 0x36a, 0x2, 0x8001, 0x20, 0x2, 0x3, 0x8b9f, 0x2}, [{0x1474e551, 0x699, 0x7fffffff, 0x81, 0x5, 0x418, 0xfffffffb, 0x1}], "b39d23bd87c81449dd7a27ca49e06d0971fbd2ed94d48d7c3f2967e4b46894f567bbfd1f012a123f590806efcf7987c0793c5d113c923a0b1d173399f03a380ae1b55319152e00e001edeb16c47d4809899502ce8cc6e29c49daf3ac7f93e2f49223e354f3b74953e5f88b4a750f32c88da694241f1615a7f03c1038df57ba0aa8c5e1fe320de1c07c3b2d804ed2cece2a5caec2b1c2f7916b824141bcb778d294704986219d8172c55185e0b8a5cbd319325b5001e01770f3a539392f8a4413ffd02c8682fc73735357", ['\x00', '\x00', '\x00']}, 0x422)
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001840), 0x103080, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
kcmp(r7, r7, 0x4, r8, r9)
io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0)

[  126.213866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  126.220238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  126.230355] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  126.232879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.238200] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.241761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.244567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  126.250708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.252683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  126.257478] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.292248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.306717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.320180] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  126.332471] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.336475] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.341854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  126.343750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.346611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  126.356186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.364453] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.366468] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  126.369870] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  126.376249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.381428] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.384356] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.399536] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  126.399840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  126.402541] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  126.405649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.413432] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.425427] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.431161] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  126.431323] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  126.438703] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  126.439848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  126.445843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  126.447682] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  126.458247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  126.538377] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  126.554462] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  128.340459] Bluetooth: hci1: command tx timeout
[  128.342329] Bluetooth: hci2: command tx timeout
[  128.531673] Bluetooth: hci0: command tx timeout
[  128.533353] Bluetooth: hci7: command tx timeout
[  128.534567] Bluetooth: hci3: command tx timeout
[  128.535725] Bluetooth: hci4: command tx timeout
[  128.598002] Bluetooth: hci6: command tx timeout
[  128.660026] Bluetooth: hci5: command tx timeout
[  130.387695] Bluetooth: hci1: command tx timeout
[  130.388221] Bluetooth: hci2: command tx timeout
[  130.579116] Bluetooth: hci3: command tx timeout
[  130.579586] Bluetooth: hci0: command tx timeout
[  130.580520] Bluetooth: hci4: command tx timeout
[  130.580992] Bluetooth: hci7: command tx timeout
[  130.643003] Bluetooth: hci6: command tx timeout
[  130.707161] Bluetooth: hci5: command tx timeout
[  132.434991] Bluetooth: hci1: command tx timeout
[  132.435488] Bluetooth: hci2: command tx timeout
[  132.627245] Bluetooth: hci3: command tx timeout
[  132.627717] Bluetooth: hci4: command tx timeout
[  132.628625] Bluetooth: hci7: command tx timeout
[  132.629470] Bluetooth: hci0: command tx timeout
[  132.693012] Bluetooth: hci6: command tx timeout
[  132.755216] Bluetooth: hci5: command tx timeout
[  134.483324] Bluetooth: hci1: command tx timeout
[  134.483846] Bluetooth: hci2: command tx timeout
[  134.675041] Bluetooth: hci0: command tx timeout
[  134.675527] Bluetooth: hci7: command tx timeout
[  134.676432] Bluetooth: hci4: command tx timeout
[  134.676855] Bluetooth: hci3: command tx timeout
[  134.739343] Bluetooth: hci6: command tx timeout
[  134.802977] Bluetooth: hci5: command tx timeout
[  185.787019] syz-executor.0 (295) used greatest stack depth: 24400 bytes left
[  188.531672] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.536496] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.542761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.550128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  188.554667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.557233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  188.560578] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  188.562660] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  188.578768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  188.588274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  188.654501] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  188.669600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  188.674590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  188.691860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  188.703755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  188.788179] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  188.791393] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  188.797452] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  188.805879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  188.810157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  189.150196] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.177220] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.203236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  189.208202] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.211370] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  189.232494] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  189.280740] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.289385] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.295820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.302301] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  189.325161] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  189.327685] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.353235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  189.356340] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.370859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  189.372622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  189.392643] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  189.396339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  189.453842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  189.478355] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  190.675365] Bluetooth: hci1: command tx timeout
[  190.675644] Bluetooth: hci0: command tx timeout
[  190.804749] Bluetooth: hci2: command tx timeout
[  190.867405] Bluetooth: hci3: command tx timeout
[  191.380600] Bluetooth: hci4: command tx timeout
[  191.443074] Bluetooth: hci6: command tx timeout
[  191.507513] Bluetooth: hci5: command tx timeout
[  191.635075] Bluetooth: hci7: command tx timeout
[  192.723082] Bluetooth: hci0: command tx timeout
[  192.724013] Bluetooth: hci1: command tx timeout
[  192.851313] Bluetooth: hci2: command tx timeout
[  192.915119] Bluetooth: hci3: command tx timeout
[  193.427240] Bluetooth: hci4: command tx timeout
[  193.491042] Bluetooth: hci6: command tx timeout
[  193.555075] Bluetooth: hci5: command tx timeout
[  193.682997] Bluetooth: hci7: command tx timeout
[  194.772967] Bluetooth: hci1: command tx timeout
[  194.773443] Bluetooth: hci0: command tx timeout
[  194.899061] Bluetooth: hci2: command tx timeout
[  194.963314] Bluetooth: hci3: command tx timeout
[  195.475326] Bluetooth: hci4: command tx timeout
[  195.539998] Bluetooth: hci6: command tx timeout
[  195.603244] Bluetooth: hci5: command tx timeout
[  195.731610] Bluetooth: hci7: command tx timeout
[  196.819090] Bluetooth: hci0: command tx timeout
[  196.819219] Bluetooth: hci1: command tx timeout
[  196.947332] Bluetooth: hci2: command tx timeout
[  197.011007] Bluetooth: hci3: command tx timeout
[  197.525121] Bluetooth: hci4: command tx timeout
[  197.586970] Bluetooth: hci6: command tx timeout
[  197.651168] Bluetooth: hci5: command tx timeout
[  197.780034] Bluetooth: hci7: command tx timeout
[  250.471990] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  250.478528] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  250.484041] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  250.495876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  250.501674] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  250.550410] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  250.554552] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  250.562409] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  250.568400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  250.574764] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  250.933693] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  250.936523] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  250.940829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  250.949694] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  250.960254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  250.966460] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  250.968847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  250.978578] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  250.984643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  250.986791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  251.050438] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  251.068441] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.108466] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.128482] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  251.130241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  251.132855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  251.136700] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  251.139092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.152475] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  251.155621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  251.169606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  251.204335] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  251.229693] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  251.232305] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  251.235541] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  251.240890] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  251.244722] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  251.256741] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  251.305243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  251.325995] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  252.564009] Bluetooth: hci0: command tx timeout
[  252.627226] Bluetooth: hci1: command tx timeout
[  253.139194] Bluetooth: hci2: command tx timeout
[  253.139262] Bluetooth: hci3: command tx timeout
[  253.203061] Bluetooth: hci5: command tx timeout
[  253.331278] Bluetooth: hci4: command tx timeout
[  253.397945] Bluetooth: hci6: command tx timeout
[  253.461953] Bluetooth: hci7: command tx timeout
[  254.610977] Bluetooth: hci0: command tx timeout
[  254.675837] Bluetooth: hci1: command tx timeout
[  255.187541] Bluetooth: hci2: command tx timeout
[  255.187639] Bluetooth: hci3: command tx timeout
[  255.251100] Bluetooth: hci5: command tx timeout
[  255.381400] Bluetooth: hci4: command tx timeout
[  255.443625] Bluetooth: hci6: command tx timeout
[  255.508364] Bluetooth: hci7: command tx timeout
[  256.659455] Bluetooth: hci0: command tx timeout
[  256.723048] Bluetooth: hci1: command tx timeout
[  257.236995] Bluetooth: hci3: command tx timeout
[  257.237065] Bluetooth: hci2: command tx timeout
[  257.299252] Bluetooth: hci5: command tx timeout
[  257.427073] Bluetooth: hci4: command tx timeout
[  257.492028] Bluetooth: hci6: command tx timeout
[  257.555040] Bluetooth: hci7: command tx timeout
[  258.707074] Bluetooth: hci0: command tx timeout
[  258.771184] Bluetooth: hci1: command tx timeout
[  259.283025] Bluetooth: hci2: command tx timeout
[  259.283048] Bluetooth: hci3: command tx timeout
[  259.348037] Bluetooth: hci5: command tx timeout
[  259.475077] Bluetooth: hci4: command tx timeout
[  259.539035] Bluetooth: hci6: command tx timeout
[  259.602990] Bluetooth: hci7: command tx timeout
[  312.817766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  312.822024] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  312.826319] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  312.837625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  312.845226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.011419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  313.014728] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  313.021080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  313.030602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  313.034361] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  313.137481] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  313.151443] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  313.157399] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  313.168626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  313.185022] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  313.219548] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  313.226454] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  313.232589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  313.247508] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  313.262739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  313.264687] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  313.271393] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  313.278836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  313.292945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  313.298996] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  313.303434] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  313.315387] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  313.319178] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  313.344140] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  313.348350] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  313.349674] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  313.352598] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  313.358714] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  313.361516] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  313.370298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  313.382366] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  313.384732] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  313.389462] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  313.405811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  313.444494] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  314.899185] Bluetooth: hci0: command tx timeout
[  315.091001] Bluetooth: hci1: command tx timeout
[  315.284026] Bluetooth: hci2: command tx timeout
[  315.411993] Bluetooth: hci7: command tx timeout
[  315.412856] Bluetooth: hci4: command tx timeout
[  315.475340] Bluetooth: hci3: command tx timeout
[  315.539021] Bluetooth: hci6: command tx timeout
[  315.539866] Bluetooth: hci5: command tx timeout
[  316.947264] Bluetooth: hci0: command tx timeout
[  317.140235] Bluetooth: hci1: command tx timeout
[  317.330968] Bluetooth: hci2: command tx timeout
[  317.459672] Bluetooth: hci7: command tx timeout
[  317.460474] Bluetooth: hci4: command tx timeout
[  317.523920] Bluetooth: hci3: command tx timeout
[  317.587255] Bluetooth: hci5: command tx timeout
[  317.587697] Bluetooth: hci6: command tx timeout
[  318.995928] Bluetooth: hci0: command tx timeout
[  319.187087] Bluetooth: hci1: command tx timeout
[  319.380255] Bluetooth: hci2: command tx timeout
[  319.507031] Bluetooth: hci4: command tx timeout
[  319.507531] Bluetooth: hci7: command tx timeout
[  319.571106] Bluetooth: hci3: command tx timeout
[  319.636596] Bluetooth: hci6: command tx timeout
[  319.637360] Bluetooth: hci5: command tx timeout
[  321.042965] Bluetooth: hci0: command tx timeout
[  321.234962] Bluetooth: hci1: command tx timeout
[  321.427127] Bluetooth: hci2: command tx timeout
[  321.555045] Bluetooth: hci4: command tx timeout
[  321.555543] Bluetooth: hci7: command tx timeout
[  321.619218] Bluetooth: hci3: command tx timeout
[  321.682979] Bluetooth: hci5: command tx timeout
[  321.683471] Bluetooth: hci6: command tx timeout
[  375.208580] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  375.214004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  375.221094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  375.229513] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  375.238573] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  375.528241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  375.534175] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  375.543558] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  375.555401] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  375.565495] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  375.594776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  375.600085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  375.606159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  375.618675] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  375.624779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  375.658345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  375.679286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  375.691238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  375.695845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  375.697368] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  375.701452] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  375.704331] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  375.709812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  375.712370] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  375.717430] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  375.722507] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  375.723639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  375.724178] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  375.733529] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  375.733650] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  375.737657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  375.748425] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  375.750442] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  375.757149] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  375.767471] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  375.786359] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  375.803494] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  375.807170] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  375.816461] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  375.818728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  377.299164] Bluetooth: hci0: command tx timeout
[  377.619940] Bluetooth: hci1: command tx timeout
[  377.684190] Bluetooth: hci2: command tx timeout
[  377.875204] Bluetooth: hci5: command tx timeout
[  377.876158] Bluetooth: hci3: command tx timeout
[  377.939968] Bluetooth: hci7: command tx timeout
[  378.005209] Bluetooth: hci4: command tx timeout
[  378.005822] Bluetooth: hci6: command tx timeout
[  379.347951] Bluetooth: hci0: command tx timeout
[  379.668930] Bluetooth: hci1: command tx timeout
[  379.731318] Bluetooth: hci2: command tx timeout
[  379.923043] Bluetooth: hci5: command tx timeout
[  379.923542] Bluetooth: hci3: command tx timeout
[  379.988014] Bluetooth: hci7: command tx timeout
[  380.052949] Bluetooth: hci4: command tx timeout
[  380.053386] Bluetooth: hci6: command tx timeout
[  381.394983] Bluetooth: hci0: command tx timeout
[  381.714978] Bluetooth: hci1: command tx timeout
[  381.780106] Bluetooth: hci2: command tx timeout
[  381.971965] Bluetooth: hci5: command tx timeout
[  381.972471] Bluetooth: hci3: command tx timeout
[  382.036345] Bluetooth: hci7: command tx timeout
[  382.099027] Bluetooth: hci6: command tx timeout
[  382.099474] Bluetooth: hci4: command tx timeout
[  383.443054] Bluetooth: hci0: command tx timeout
[  383.764019] Bluetooth: hci1: command tx timeout
[  383.827934] Bluetooth: hci2: command tx timeout
[  384.019984] Bluetooth: hci3: command tx timeout
[  384.020441] Bluetooth: hci5: command tx timeout
[  384.083924] Bluetooth: hci7: command tx timeout
[  384.148007] Bluetooth: hci4: command tx timeout
[  384.148452] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
05:11:40  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000081 RCX=ffffffff81b66e40 RDX=ffff888025520000
RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88800b908cc0 RSP=ffff88802a61f9c0
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000
R12=0000000000000001 R13=00000000000041ed R14=ffffffff85d26880 R15=0000000000000000
RIP=ffffffff81b66e40 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7b673698e0 CR3=000000000f1b2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff0000ffffffffff00000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff88803561c970 RBX=ffff88800dc6bc80 RCX=ffffea0000d58600 RDX=00000000000008b0
RSI=ffffea0000d58601 RDI=ffff88800a887bc0 RBP=ffff888009404780 RSP=ffff88802a66fac0
R8 =0000000000000000 R9 =ffffffff81ae0a00 R10=ffff888008c41780 R11=ffff88806cf3b950
R12=0000000000000000 R13=ffff88802a66faf8 R14=ffff88800a887bc0 R15=ffff88800a887bc0
RIP=ffffffff81ae0a48 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f698cb30580 CR3=000000002a08a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000