Warning: Permanently added '[localhost]:59936' (ECDSA) to the list of known hosts.
2025/04/30 10:25:39 fuzzer started
2025/04/30 10:25:40 dialing manager at localhost:46073
syzkaller login: [  100.849386] cgroup: Unknown subsys name 'net'
[  100.990956] cgroup: Unknown subsys name 'cpuset'
[  101.034786] cgroup: Unknown subsys name 'rlimit'
2025/04/30 10:26:05 syscalls: 2214
2025/04/30 10:26:05 code coverage: enabled
2025/04/30 10:26:05 comparison tracing: enabled
2025/04/30 10:26:05 extra coverage: enabled
2025/04/30 10:26:05 setuid sandbox: enabled
2025/04/30 10:26:05 namespace sandbox: enabled
2025/04/30 10:26:05 Android sandbox: enabled
2025/04/30 10:26:05 fault injection: enabled
2025/04/30 10:26:05 leak checking: enabled
2025/04/30 10:26:05 net packet injection: enabled
2025/04/30 10:26:05 net device setup: enabled
2025/04/30 10:26:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/30 10:26:05 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/30 10:26:05 USB emulation: enabled
2025/04/30 10:26:05 hci packet injection: enabled
2025/04/30 10:26:05 wifi device emulation: enabled
2025/04/30 10:26:05 802.15.4 emulation: enabled
2025/04/30 10:26:05 fetching corpus: 0, signal 0/0 (executing program)
2025/04/30 10:26:07 starting 8 fuzzer processes
10:26:07 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x8, 0xf2}}, './file0\x00'})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40054}, 0x200000c4)
execve(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='\xf4}:[},@*{[$-\\.\x00', &(0x7f0000000240)='/:#*\x95\x00', &(0x7f0000000280)='#@!:](!]\\*\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='^\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000580)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)=')%\'/:{^\x00', &(0x7f0000000480)=']+\x00', &(0x7f00000004c0)='&\x00', &(0x7f0000000500)='[:,\x00', &(0x7f0000000540)='\x00'])
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'})
listen(r0, 0x81)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xff}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_IFACE={0x14, 0x17, 'ipvlan0\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x8100, 0x0)
ioctl$TIOCSCTTY(r1, 0x540e, 0x100)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000007c0))
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000800))
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000840)={'c', ' *:* ', 'm\x00'}, 0x8)
lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0))
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xff, 0x3a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24004080)
getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000a80), &(0x7f0000000ac0))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x6041210}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffd, 0x7}}}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xff, 0x7}, {0x2, 0x1}, {0x1, 0x5}, {0x40, 0x1}], "d7816cf544bd673e"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x4, 0x3}, {0x7f, 0x6}, {0xfc, 0x4}, {0x4, 0x2}, {0x5, 0x4}, {0xc6, 0x2}, {0x3f, 0x7}, {0x0, 0x6}, {0xdc, 0x3}, {0x3, 0x6}, {0x4, 0x3}, {0x5, 0x6}], "324dd575b936c446"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x20}, {0x2, 0x6}, {0x81, 0x6}, {0x7, 0x81}, {0x5, 0x6}, {0x2, 0x1}, {0x7, 0x6}, {0x1}, {0x6, 0x5}, {0x6a}, {0x9, 0x3}, {0xbf, 0x4}, {0x81, 0x3}, {0x0, 0x2}, {0xb0, 0x7}, {0xdc, 0x5}, {0x80}], "f59c5f89bd763c54"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x5, 0x4}, {0xb3}, {0x6, 0x2}, {0x81, 0x7}], "22005df609959e8b"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x3, 0x3}], "21af4e6986849e73"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x3}, {0x3f}, {0x5, 0x5}, {0x1}, {0x0, 0x1}, {0x8, 0x4}, {0x27, 0x5}, {0xde, 0x1}, {0xc2, 0x3}, {0x64, 0x6}, {0x3, 0x7}, {0x0, 0x3}], "871df2380d40ce26"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000d00))
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000d80)={0x1756, 0x6, 0x7fff, 0x1f, 0x20, 0xff, 0x6}, 0xc)

10:26:07 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x102c1, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000100))
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000140)={0x30, 0xb, 0xa, 0x5, 0x3, 0x7, 0x4, 0x60})
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x424, 0x3f3, 0x300, 0x70bd29, 0x25dfdbfd, {0x4, 0x2, 0x1f, [0x6f5, 0x1, 0x0, 0x4, 0xaa, 0x1, 0x8, 0x3, 0x7, 0x2, 0x0, 0xffffffb6, 0x8, 0x80000001, 0x5, 0x80, 0x0, 0x6, 0xffffff80, 0x5, 0x8001, 0x240, 0x5, 0x0, 0x0, 0x9b3, 0x8000, 0x3662, 0x8001, 0xf1f5, 0xff, 0x0, 0x8, 0x2, 0x9, 0x153, 0x4, 0x800, 0x5, 0x7fff, 0x1, 0x20, 0x1, 0x1, 0x1000, 0x7, 0x7f, 0xb90, 0x7, 0xff, 0x1d, 0x101, 0x4, 0x84, 0x0, 0x9, 0x0, 0xb56, 0x1ff, 0x0, 0x1, 0x0, 0xa8d3, 0xfffffffa], [0x8, 0x34b, 0x81, 0x6, 0x7, 0x9, 0x3f, 0x10000, 0xd09, 0x0, 0x2, 0x8, 0xb6, 0xfffff800, 0x5, 0x800, 0x1, 0xd1, 0x22e, 0xffff0000, 0x1, 0x3, 0x7fffffff, 0xc7, 0xa6, 0x80, 0xfffffff8, 0x0, 0x0, 0x6a3c, 0x9, 0xfffffffa, 0x3, 0x6, 0x5, 0x1000, 0x1, 0x6, 0x658e02bd, 0xfffffeea, 0xfffffffa, 0x3, 0xffffffc5, 0x3, 0x0, 0x5, 0x8, 0x80000000, 0x2, 0x8, 0x800, 0x40, 0x630, 0x7, 0x10000, 0xbd12, 0x4, 0x1, 0x3f, 0xc454, 0x7fffffff, 0x3f1, 0x5, 0x1], [0xfff, 0x5, 0x9, 0x101, 0x3ff, 0xfffffff9, 0x7, 0x3, 0x965, 0x0, 0x400, 0x5, 0x9, 0x87e, 0x6, 0x3ff, 0x80000001, 0x5, 0x2, 0x2, 0xffffffff, 0x9, 0x101, 0x846b, 0x10000, 0x81, 0x0, 0x0, 0x0, 0x9, 0x7fffffff, 0x1000, 0x20, 0x3, 0x15e7, 0xffff, 0x26d, 0x9, 0x32, 0xffff, 0x0, 0x0, 0x7fff, 0x1, 0xfff, 0xd90, 0x1, 0x0, 0x81, 0xfffffffa, 0x0, 0xfffffff9, 0x2, 0x18000, 0x1, 0x9f98, 0xfffc, 0x0, 0x4, 0x4, 0x3, 0x5, 0x3, 0x2], [0x2, 0x1f, 0x8, 0x9, 0x100, 0x3ff, 0x7, 0x48, 0x54ee, 0xffffff4c, 0x4, 0x1, 0x1, 0x7, 0x1f, 0x6, 0x3, 0x4, 0x9, 0x7113, 0x4, 0xfffffffc, 0x1, 0x0, 0x1000, 0x8, 0x80, 0xdab2, 0x9, 0x0, 0x7fff, 0x1, 0x7f, 0xffff, 0x8, 0x9, 0x2, 0x0, 0x731c, 0x5, 0x2, 0x8000, 0x8, 0x81, 0xffffffff, 0x0, 0x7, 0x3f, 0x0, 0x3, 0x8, 0x3e, 0x97, 0x7, 0xffffffe1, 0x1, 0xd3, 0xffff, 0x7, 0x61, 0x9, 0x3ee, 0x1, 0x6], 0x4, ['(#\\\x00']}, ["", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x80}, 0x488c4)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/bus/event_source', 0x4000, 0x101)
ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000900)=""/62)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r3=>r2, {0xe54, 0x1}}, './file0\x00'})
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000980)={0x6, 0x3})
sync_file_range(r3, 0x80000001, 0xb34, 0x4)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r5=>r2, {0x6}}, './file0\x00'})
lsetxattr$security_ima(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), &(0x7f0000000ac0)=@v1={0x2, "843be108"}, 0x5, 0x2)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000b00)={<r6=>r2, 0x0, 0x5d})
sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x140400d0}, 0x4000000)
sendmmsg$sock(r4, &(0x7f0000000d80)=[{{&(0x7f0000000c40)=@pppoe={0x18, 0x0, {0x3, @empty, 'veth1_to_bond\x00'}}, 0x80, &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=[@txtime={{0x18, 0x1, 0x3d, 0x20000}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x21}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x78}}], 0x1, 0x24004081)
fallocate(r5, 0x10, 0x5, 0x5)
lseek(r0, 0x0, 0x4)

10:26:07 executing program 3:
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000))
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x10, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24008101}, 0x40000)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x5]}, 0x8)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x7a}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000640)={0x2, 0x2, 0x0, 0x0, 0xff})
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000680)=0x9)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r4=>r1, {0x4}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x40)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, 0x5, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x40000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r7 = syz_open_dev$mouse(&(0x7f0000000ac0), 0x7, 0x4040)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r4)
sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x7c, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8004800}, 0x4)

10:26:07 executing program 2:
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "7c84471ad616b1c5", "56b014d86c9559778dcdd7ffed875fc41ddcc02a31ae1f2abea041aeafc6c8d9", "1c24e550", "13fab05b5df87a9d"}, 0x38)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x1)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$VT_RELDISP(r0, 0x5605)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9e}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x20040000)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000240)={0x2, 0x2, 0x12})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x3d4, r3, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x9}, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xa0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x80, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x3}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x3}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x5}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x9}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x2b, 0xb, "d86f685131383f5bf540dddc4b5f3a0c626224a476d1993ac14dae93aaf0aa801fab25688a4e30"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @broadcast}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x74, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x28, 0x12, 0x0, 0x1, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x101}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x34}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x30, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="d3f802180c12"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xf6c9}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x23c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x17c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xfffffffa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0xa0}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_IE={0x151, 0x2a, [@perr={0x84, 0x1c, {0x4, 0x2, [@not_ext={{}, @broadcast, 0x0, "", 0x21}, @not_ext={{}, @device_b, 0x8, "", 0x2b}]}}, @cf={0x4, 0x6, {0x6, 0x20, 0xfa, 0x5}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3f, 0x1, 0x80}}, @challenge={0x10, 0x1, 0xf5}, @link_id={0x65, 0x12, {@random="297491874b39", @device_b, @broadcast}}, @preq={0x82, 0x2b, @ext={{0x0, 0x1}, 0x81, 0xa6, 0x10001, @device_b, 0x3f, @device_b, 0x7, 0x800, 0x1, [{{0x0, 0x0, 0x1}, @broadcast, 0x80}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @perr={0x84, 0xcf, {0x12, 0xd, [@not_ext={{}, @device_a, 0x2, "", 0x32}, @ext={{}, @device_b, 0x80000001, @device_b, 0x31}, @ext={{}, @device_a, 0x3, @device_b, 0x2f}, @not_ext={{}, @device_a, 0x7, "", 0x20}, @ext={{}, @device_a, 0x3, @device_b, 0x7}, @not_ext={{}, @device_b, 0x7ff, "", 0x20}, @not_ext={{}, @device_a, 0x1ff, "", 0x26}, @ext={{}, @device_b, 0x9, @broadcast, 0x1d}, @not_ext={{}, @device_b, 0x1, "", 0x14}, @not_ext={{}, @broadcast, 0xfffffffe, "", 0x3a}, @not_ext={{}, @device_a, 0x0, "", 0x1b}, @ext={{}, @device_a, 0x1, @device_b, 0x6}, @ext={{}, @device_a, 0x0, @broadcast, 0x39}]}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0x2, 0x40, 0x20}}]}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xa0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_MASK={0x9a, 0xb, "e9cf2b56f72811438ad3d443a18c36d00825d17999a652c5b81eaeba6ad45d62c054d631409da82b8d2677fc56992596f910c21bcab2d63168ee285d513fb47b314e932d0b0a9ee56a09f85aec04b10d0d78cfa09acdd269496c3629b59b4b769690d328833118c7795118965ade222249a06fe105f2799c4bdddd024e6756f779cbd5348524986c3937a2e54f3c884ddfedbb0fd368"}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x50, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x34, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x4, 0x401, 0x4}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x5}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x0, 0x7f}}]}]}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x80}, 0x44004)
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000780)=""/249, 0xf9, 0x20, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r4=>r1, {0x5822c9c9}}, './file0/../file0\x00'})
ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f00000008c0)={0xfffff801, 0x8000})
sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
r5 = socket$netlink(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r4)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, r6, 0x2, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x8, 0x0, 0x5, 0x7}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000c5)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xf0, r7, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

10:26:07 executing program 4:
semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f0000000000)=""/91)
semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x1b, 0x7f, 0x8000])
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, 0x5, 0x1, 0x3})
write$P9_RREADLINK(r0, &(0x7f0000000100)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x141000, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000)
r2 = dup3(r1, r1, 0x0)
ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000280))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r3=>r2, {0x3}}, './file0\x00'})
ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000300)=""/246)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x40081, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000006c0)={0x50, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/52, 0x34, 0x0, 0x3b}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000500)={0x0, 0x28, 0x40}}}, @decrefs={0x40046307, 0x10001}, @exit_looper], 0xea, 0x0, &(0x7f00000005c0)="983ad596c8abe158e52d89b3f583aa0baa239adb3c2229226ae6511245b9df9faae64816ab961147c4736fb0b5e2fa9f2942abc16f48c9e51931966db410b590d9c3d8f540d70e36d5004ca6562fbc7c65d8113c749193234059758e7dc07886bcfa6fb66e2bb38c7de34265b3d6a03965e3d13561961979f1107027b004bc09b8a7ca715baabc8dd138813c72c9644103bae1e0609418030aab4d99108b48af626e0c514d35599d8cafc8b59a19daf408a8679289d31035b4b06d942801f6c0c69b2d3df54839c77a932ff332d411adb8a7918bdac633daaec54ea9aa65c9f32ae00cb0fe17950f707b"})
r5 = dup2(r3, r1)
statx(r4, &(0x7f00000009c0)='./file0\x00', 0x6000, 0x2, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = getegid()
r8 = syz_mount_image$nfs(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x7f, 0x4, &(0x7f0000000ec0)=[{&(0x7f0000000b80)="9838cee791044619c0889a926e9bb844aaa2eb276d66cf0f0bf25510ed0892ae0180f3f352f2863d2478faf39a2de4a568a8989921f9130480bf6fa7ad3191b86ef2d026974e6fe7fa0cd9df9b9789f065f14fd3ab8d40662834ac8d93f68b10938ee6bd5f3828aa0ca54d2e6fb05b73ef6ecdca46416e57ae275455195f4339d46dcf256900921e1f5f9949feeccc54b79418248eb005b67bf34f605a59476613959dac23512bed7a5c1fc8dfcbe84c16525af8ea527c77ed66d55e57bf213f135ae5b6a5ec6bbcbbb4104bb5e00eed0c4786cadc71b1bb3e6e7841", 0xdc, 0x7}, {&(0x7f0000000c80)="189d6dc3b2a0369a95bd8cf57be792b170e925401efb6d8ed5bd475b9f375e9bd16829c202fb8f06f23c88fc3fbdfd337df8d89107e47ea8927e484e99e327c934039413a028f877fff2fd7464528c87a2649f3dfe6dfb67d391baf2b7c64f336a206414c8ea43ec30c0ec3d1abfa0e9bb91bc064f19fbf1a187a98e7b6df835b4abfad3978dfb2c6ce67a7d79d493af0532eea4f9147464b4e03a6b3ebddfe5611357984cbba5d66e51c25db999c937efc15b326921591f45881a1a8e8f62851ebb9d937d5788e300cbfed231a69e470a6e69e9d667a3002bf5da8c2c58d2e2cdde", 0xe2, 0x5}, {&(0x7f0000000d80)="607dcf58cc5c9ace9c0ddd5effaa5e9fb5b5b6b473edbc1154e9d30707a8acbd2e2f01c631094486314b941290e7fcfc202b706c587d8daeeac74d6e3f79c75f2a566388e0c07b35f5c83de32f7257571f17237ff1e0c7e202a95884aa80732921839df38bf4cca0829cc578190b575753909bb16f7954011b392e8c307eb2b54148ddc13635d0d0c8f05791ecdc58662731c9d5528d887bc0d8d5c7d7b38e5f3c40ed381d591fa21a7b0adf8ae30c197478287efac78601f7b92cc9720e68ffe1c5e0d4e6", 0xc5, 0x80}, {&(0x7f0000000e80)="4d849fe37bccac6af0ce3e31422d76fa38badd110a7f7fdf3531abfc03bbb1041676f7560f66c08d5ba6", 0x2a, 0x100}], 0x180005, &(0x7f0000000f40)={[{':+\xce&}/:'}, {'/dev/null\x00'}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@audit}, {@subj_role={'subj_role', 0x3d, '/dev/nvram\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/nvram\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}]})
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
r10 = syz_open_dev$loop(&(0x7f0000000fc0), 0x4, 0x8000)
sendmsg$unix(r3, &(0x7f00000012c0)={&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000780)="45bc0b7fa345216c1aa5a532adcb666575f9d305cba52e782e2bc00eb6cf88be4d7a97f6046f4113c33642dc2917acb62e6d5659545d6255e0ed924319267ba9189d02f61c145a6360ec6e869cad123f530d428119695e", 0x57}, {&(0x7f0000000800)="7d62ef550299c439b4dffceecca6f72da32c8852485ca693e3d3ee8fe11272c4d5a712c22c09be7cd5a438cd8ffd8f19f008f896751a6fd021b25fada1dd4955a64a21abc7496c1e5cc305f8ece8138e1c63e78d64320811e300270d05cde065fbae10468dc0cabe20f8ebdab3e19f7d2649dc27acd118ec84a9e1106bd2a48b06af704d4a7730d7eed99e20c5d320e68bd287431ab4e5c32dc1183e0c890632f6eb6b25b8df3200e5c7a80ef6f17d924464d84e455727d3f8bf59e687edc3ff201e758f6cd06968bf66b1cabae249ef7693491156de63f7af19fc", 0xdb}, {&(0x7f0000000900)="60f5ca209cf132d70239bfac3f1b2dc13aaaf105970fe277a00defb16aa479e9408ab26dc24597ab7929a40b2cfac1430cbb8f72e59960acbd5e14f0012610368d483fe9e568f1f243efaa8e6affd6a685e1758a8a0d62554c6a3d45ec02b3a82e2586a418ad264edd47c6628a6de376dd96fbfc79de", 0x76}], 0x3, &(0x7f0000001200)=[@rights={{0x20, 0x1, 0x1, [r5, r3, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, r8, r9, r10]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r1, r3, 0xffffffffffffffff]}}], 0xb8}, 0x4000040)

[  127.697289] audit: type=1400 audit(1746008767.311:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:26:07 executing program 6:
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb90}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x58}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x2110f26c5dae54d3)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc008800)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4004840)
pipe2(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x400, 0x12}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x5, 0x2}, {0x9}], "acba2fbe29cf7dff"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7}], "8201ae34085ef3c8"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7f}, {0x6, 0x3}, {0x1, 0x5}, {0x8, 0x4}, {0x2d, 0x7}, {}, {0x3f, 0x5}, {0x1, 0x6}, {0x6, 0x1}, {0xff, 0x2}, {0x5, 0x5}, {0x0, 0x3}, {0xca, 0x2}, {0x57, 0x2}, {0x20, 0x2}, {0x3}], "b358fdf6707a49d6"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0xa0, 0x3}, {0x6, 0x2}], "c5e9626007a5d33d"}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x788c8)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r0)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8082}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r3=>r0, {0x2}}, './file0\x00'})
sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0xcd31bb81f742a0d4, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x5, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24048804}, 0x1)
gettid()
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@multicast2, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f00000009c0)=0xe8)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x37}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x77c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4e56}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x800)
write$binfmt_elf32(r0, &(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0xe0, 0x20, 0xe2, 0x0, 0x9, 0x2, 0x3, 0x0, 0x344, 0x38, 0x143, 0x3f80, 0xd9a, 0x20, 0x2, 0x1, 0x1, 0x6}, [{0x70000000, 0x0, 0x6, 0x7ff, 0x1, 0x7fffffff, 0x2, 0x3f}], "035ebc5339d479750aeafec0a661d80981029f951ce66e6c37d430a5831a3ec4cf9c6791546d831cf8c7478cb12637c1f403a13a6598871ee92628fcd6f0c51568ee4eb985861a4ec587a7f53abba1657c4150785778491042fab28db0455cf0764feb26ad393a2aea87d9aa59142e90e71720219fba61790b729b57a7a530586d1aca", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db)
r5 = socket(0x18, 0x2, 0xfffffe00)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r0)
sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x6c, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7747c8e703de515136f9abbd88"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000040)
r7 = syz_open_dev$usbmon(&(0x7f0000001ec0), 0xa1d, 0x82001)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000001f00)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'})
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x14, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40810)

10:26:07 executing program 5:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', <r0=>0x0, 0x0, 0x6, 0x1f, 0xcb59, 0x20, @mcast1, @local, 0x7800, 0x7800, 0x8001, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', <r1=>0x0, 0x0, 0x5d, 0xff, 0x5d, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x40, 0x8a3, 0xf7b}})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xbc, 0x0, 0xa, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000480))
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd4, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
r4 = fcntl$dupfd(r3, 0x406, r3)
ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000680)=0x59)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000840)={<r5=>0x0, @loopback, @multicast2}, &(0x7f0000000880)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000a00)={'erspan0\x00', &(0x7f00000008c0)={'erspan0\x00', <r6=>0x0, 0x1, 0x20, 0x9, 0x6, {{0x39, 0x4, 0x2, 0x1, 0xe4, 0x65, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp={0x44, 0x14, 0x32, 0x0, 0x7, [0xae1, 0x5, 0x0, 0xfff]}, @cipso={0x86, 0x42, 0x0, [{0x6, 0x8, "4ae8eb09927e"}, {0x7, 0x10, "cde3916b406177dee490de057479"}, {0x0, 0xa, "341ce716b219ac0c"}, {0x0, 0x9, "964f3e6e7da464"}, {0x5, 0x11, "fca4382a2b4e40a12c22852f7f3891"}]}, @timestamp={0x44, 0x14, 0x5, 0x0, 0x8, [0x8, 0x6, 0x0, 0xabe7]}, @cipso={0x86, 0x48, 0x3, [{0x7, 0x6, "0049f47d"}, {0x7, 0x10, "e25793dea627d6422e929a6c4068"}, {0x5, 0x12, "6cfe12d112f86b33f4140a57f3493b1d"}, {0x2, 0xe, "4de7a90abab71426df075b55"}, {0x7, 0xc, "d99a1f1fa7c99b606701"}]}, @timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x7, [{@multicast2, 0x7}, {@broadcast, 0x401}, {@local, 0x3}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000c40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x198, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044040)
pread64(r4, &(0x7f0000000c80), 0x0, 0x6)
ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000cc0)=""/187)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x144, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0xc090}, 0x20008000)
semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000fc0)=""/9)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8800)
ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x8)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x68, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x40000)
setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000001240)=0x27, 0x4)

10:26:07 executing program 7:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0xc0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}}, 0x81)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x52}, 0x40080)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0xc1)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000005c0))
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x40004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r3)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x1)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8001)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r1)
sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r6, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x24044091)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000ac0)=""/44, &(0x7f0000000b00)=0x2c)

[  129.090045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  129.092911] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  129.097033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  129.098844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  129.103811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  129.106258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  129.118255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  129.126754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  129.131042] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  129.133984] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  129.157947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  129.178284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  129.182038] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  129.211229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  129.218253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  129.219848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  129.230880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  129.245213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  129.255317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  129.263929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  129.270239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  129.276239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  129.301758] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  129.310418] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  129.327833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  129.346216] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  129.347827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  129.349725] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  129.352690] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  129.354752] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  129.355218] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  129.360639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  129.361603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  129.362183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  129.369818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  129.373152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  129.377982] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  129.382929] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  129.391590] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  129.397875] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  131.219425] Bluetooth: hci0: command tx timeout
[  131.220098] Bluetooth: hci1: command tx timeout
[  131.345892] Bluetooth: hci3: command tx timeout
[  131.347199] Bluetooth: hci2: command tx timeout
[  131.409585] Bluetooth: hci4: command tx timeout
[  131.473483] Bluetooth: hci7: command tx timeout
[  131.474134] Bluetooth: hci5: command tx timeout
[  131.474762] Bluetooth: hci6: command tx timeout
[  133.266659] Bluetooth: hci1: command tx timeout
[  133.267143] Bluetooth: hci0: command tx timeout
[  133.395375] Bluetooth: hci2: command tx timeout
[  133.395813] Bluetooth: hci3: command tx timeout
[  133.457485] Bluetooth: hci4: command tx timeout
[  133.522322] Bluetooth: hci7: command tx timeout
[  133.524102] Bluetooth: hci5: command tx timeout
[  133.524558] Bluetooth: hci6: command tx timeout
[  135.313616] Bluetooth: hci0: command tx timeout
[  135.313642] Bluetooth: hci1: command tx timeout
[  135.441464] Bluetooth: hci3: command tx timeout
[  135.441483] Bluetooth: hci2: command tx timeout
[  135.505592] Bluetooth: hci4: command tx timeout
[  135.569464] Bluetooth: hci5: command tx timeout
[  135.569950] Bluetooth: hci6: command tx timeout
[  135.570832] Bluetooth: hci7: command tx timeout
[  137.361653] Bluetooth: hci1: command tx timeout
[  137.361692] Bluetooth: hci0: command tx timeout
[  137.489447] Bluetooth: hci3: command tx timeout
[  137.489497] Bluetooth: hci2: command tx timeout
[  137.553508] Bluetooth: hci4: command tx timeout
[  137.617912] Bluetooth: hci7: command tx timeout
[  137.618903] Bluetooth: hci5: command tx timeout
[  137.619705] Bluetooth: hci6: command tx timeout
[  191.589242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.597879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.602026] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  191.617055] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  191.622013] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  191.790171] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  191.796715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  191.804648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  191.816091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  191.825781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  191.830443] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  191.849886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  191.856548] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  191.863927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  191.872845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  191.875198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  191.881191] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.882891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  191.892678] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  191.904795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  191.906773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.917918] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  191.921212] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  191.928708] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  191.930167] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  191.939497] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.943965] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  191.956900] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  191.967969] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  191.985053] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  191.985211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.992119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  192.001937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  192.005152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  192.010211] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  192.010388] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  192.020420] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  192.025226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  192.029307] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  192.031461] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  193.683389] Bluetooth: hci0: command tx timeout
[  193.937657] Bluetooth: hci1: command tx timeout
[  194.001718] Bluetooth: hci2: command tx timeout
[  194.065673] Bluetooth: hci7: command tx timeout
[  194.129532] Bluetooth: hci6: command tx timeout
[  194.129595] Bluetooth: hci3: command tx timeout
[  194.130697] Bluetooth: hci4: command tx timeout
[  194.131509] Bluetooth: hci5: command tx timeout
[  195.729443] Bluetooth: hci0: command tx timeout
[  195.986412] Bluetooth: hci1: command tx timeout
[  196.049703] Bluetooth: hci2: command tx timeout
[  196.113598] Bluetooth: hci7: command tx timeout
[  196.177552] Bluetooth: hci5: command tx timeout
[  196.178014] Bluetooth: hci6: command tx timeout
[  196.178467] Bluetooth: hci4: command tx timeout
[  196.178861] Bluetooth: hci3: command tx timeout
[  197.777415] Bluetooth: hci0: command tx timeout
[  198.033433] Bluetooth: hci1: command tx timeout
[  198.097404] Bluetooth: hci2: command tx timeout
[  198.161579] Bluetooth: hci7: command tx timeout
[  198.226677] Bluetooth: hci4: command tx timeout
[  198.227109] Bluetooth: hci6: command tx timeout
[  198.227252] Bluetooth: hci3: command tx timeout
[  198.227850] Bluetooth: hci5: command tx timeout
[  199.825671] Bluetooth: hci0: command tx timeout
[  200.081401] Bluetooth: hci1: command tx timeout
[  200.146554] Bluetooth: hci2: command tx timeout
[  200.209408] Bluetooth: hci7: command tx timeout
[  200.274383] Bluetooth: hci5: command tx timeout
[  200.274947] Bluetooth: hci4: command tx timeout
[  200.275477] Bluetooth: hci3: command tx timeout
[  200.275954] Bluetooth: hci6: command tx timeout
[  251.696895] syz-executor.3 (2742) used greatest stack depth: 24480 bytes left
[  253.876445] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  253.882072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  253.887474] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  253.898772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  253.906469] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  253.906557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  253.911231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  253.920819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  253.921478] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  253.927529] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  253.995894] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  254.000737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  254.005921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  254.017199] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  254.021900] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  254.132011] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  254.147154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  254.155640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  254.174571] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  254.182773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  254.244854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  254.250962] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  254.256955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  254.283999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  254.291587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  254.367747] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  254.373933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  254.387783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  254.432971] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  254.438283] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  254.443073] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  254.455081] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  254.459138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  254.499721] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  254.519828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  254.598955] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  254.602141] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  254.637077] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  254.675666] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  254.778445] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  255.953721] Bluetooth: hci0: command tx timeout
[  256.018989] Bluetooth: hci1: command tx timeout
[  256.081598] Bluetooth: hci2: command tx timeout
[  256.338405] Bluetooth: hci4: command tx timeout
[  256.338463] Bluetooth: hci3: command tx timeout
[  256.593982] Bluetooth: hci5: command tx timeout
[  256.594041] Bluetooth: hci6: command tx timeout
[  256.849470] Bluetooth: hci7: command tx timeout
[  258.001627] Bluetooth: hci0: command tx timeout
[  258.065408] Bluetooth: hci1: command tx timeout
[  258.130191] Bluetooth: hci2: command tx timeout
[  258.387380] Bluetooth: hci3: command tx timeout
[  258.387414] Bluetooth: hci4: command tx timeout
[  258.641410] Bluetooth: hci5: command tx timeout
[  258.641438] Bluetooth: hci6: command tx timeout
[  258.897428] Bluetooth: hci7: command tx timeout
[  260.050744] Bluetooth: hci0: command tx timeout
[  260.113757] Bluetooth: hci1: command tx timeout
[  260.178435] Bluetooth: hci2: command tx timeout
[  260.433497] Bluetooth: hci3: command tx timeout
[  260.433528] Bluetooth: hci4: command tx timeout
[  260.689413] Bluetooth: hci5: command tx timeout
[  260.689440] Bluetooth: hci6: command tx timeout
[  260.945711] Bluetooth: hci7: command tx timeout
[  262.098573] Bluetooth: hci0: command tx timeout
[  262.163366] Bluetooth: hci1: command tx timeout
[  262.225513] Bluetooth: hci2: command tx timeout
[  262.481610] Bluetooth: hci4: command tx timeout
[  262.481935] Bluetooth: hci3: command tx timeout
[  262.737826] Bluetooth: hci5: command tx timeout
[  262.737850] Bluetooth: hci6: command tx timeout
[  262.995435] Bluetooth: hci7: command tx timeout
[  316.202038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  316.206945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  316.209300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  316.225276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  316.238818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  316.291315] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  316.300642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  316.303959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  316.313859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  316.318813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  316.338874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  316.344992] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  316.365817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  316.373105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  316.382270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  316.553975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  316.560840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  316.564818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  316.576031] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  316.579743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  316.583242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  316.604815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  316.611626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  316.615853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  316.618780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  316.628839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  316.631717] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  316.642656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  316.659081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  316.678298] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  316.687727] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  316.708240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  316.743785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  316.760505] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  316.808000] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  317.514550] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  317.558401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  317.621093] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  317.661573] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  317.684034] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  318.289662] Bluetooth: hci0: command tx timeout
[  318.417479] Bluetooth: hci2: command tx timeout
[  318.417753] Bluetooth: hci1: command tx timeout
[  318.609442] Bluetooth: hci3: command tx timeout
[  318.801447] Bluetooth: hci6: command tx timeout
[  318.801483] Bluetooth: hci4: command tx timeout
[  318.865590] Bluetooth: hci5: command tx timeout
[  319.826432] Bluetooth: hci7: command tx timeout
[  320.337425] Bluetooth: hci0: command tx timeout
[  320.466276] Bluetooth: hci2: command tx timeout
[  320.466299] Bluetooth: hci1: command tx timeout
[  320.657448] Bluetooth: hci3: command tx timeout
[  320.851405] Bluetooth: hci6: command tx timeout
[  320.851449] Bluetooth: hci4: command tx timeout
[  320.913398] Bluetooth: hci5: command tx timeout
[  321.874392] Bluetooth: hci7: command tx timeout
[  322.385410] Bluetooth: hci0: command tx timeout
[  322.513427] Bluetooth: hci2: command tx timeout
[  322.514528] Bluetooth: hci1: command tx timeout
[  322.705427] Bluetooth: hci3: command tx timeout
[  322.899429] Bluetooth: hci6: command tx timeout
[  322.899453] Bluetooth: hci4: command tx timeout
[  322.961472] Bluetooth: hci5: command tx timeout
[  323.921867] Bluetooth: hci7: command tx timeout
[  324.433870] Bluetooth: hci0: command tx timeout
[  324.561648] Bluetooth: hci2: command tx timeout
[  324.561766] Bluetooth: hci1: command tx timeout
[  324.755400] Bluetooth: hci3: command tx timeout
[  324.946395] Bluetooth: hci4: command tx timeout
[  324.946417] Bluetooth: hci6: command tx timeout
[  325.010766] Bluetooth: hci5: command tx timeout
[  325.969579] Bluetooth: hci7: command tx timeout
[  378.537475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  378.541406] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  378.545476] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  378.554630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  378.559459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  378.919541] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  378.923185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  378.926008] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  378.932147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  378.937208] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  378.998759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  379.006093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  379.010105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  379.013862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  379.026039] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  379.031865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  379.031963] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  379.039938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  379.039955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  379.047270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  379.056947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  379.058991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  379.070842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  379.082017] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  379.116039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  379.166162] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  379.169577] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  379.179515] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  379.183902] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  379.186737] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  379.206585] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  379.209089] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  379.223892] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  379.223904] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  379.245221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  379.434841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  379.450804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  379.454857] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  379.554979] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  379.584138] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  380.626531] Bluetooth: hci0: command tx timeout
[  381.009636] Bluetooth: hci1: command tx timeout
[  381.138651] Bluetooth: hci3: command tx timeout
[  381.201424] Bluetooth: hci4: command tx timeout
[  381.202118] Bluetooth: hci2: command tx timeout
[  381.329401] Bluetooth: hci6: command tx timeout
[  381.394450] Bluetooth: hci5: command tx timeout
[  381.779465] Bluetooth: hci7: command tx timeout
[  382.673465] Bluetooth: hci0: command tx timeout
[  383.057470] Bluetooth: hci1: command tx timeout
[  383.187391] Bluetooth: hci3: command tx timeout
[  383.249653] Bluetooth: hci4: command tx timeout
[  383.250205] Bluetooth: hci2: command tx timeout
[  383.378445] Bluetooth: hci6: command tx timeout
[  383.441681] Bluetooth: hci5: command tx timeout
[  383.826373] Bluetooth: hci7: command tx timeout
[  384.721513] Bluetooth: hci0: command tx timeout
[  385.106511] Bluetooth: hci1: command tx timeout
[  385.234997] Bluetooth: hci3: command tx timeout
[  385.297448] Bluetooth: hci2: command tx timeout
[  385.297998] Bluetooth: hci4: command tx timeout
[  385.425750] Bluetooth: hci6: command tx timeout
[  385.491364] Bluetooth: hci5: command tx timeout
[  385.875730] Bluetooth: hci7: command tx timeout
[  386.769623] Bluetooth: hci0: command tx timeout
[  387.154398] Bluetooth: hci1: command tx timeout
[  387.282710] Bluetooth: hci3: command tx timeout
[  387.345408] Bluetooth: hci4: command tx timeout
[  387.345907] Bluetooth: hci2: command tx timeout
[  387.473647] Bluetooth: hci6: command tx timeout
[  387.537489] Bluetooth: hci5: command tx timeout
[  387.922592] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
10:31:08  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff888038efd340 RCX=b30f96e79d24f230 RDX=0000000019d6cd52
RSI=000000002e6343c6 RDI=00000000483a1118 RBP=0000000000000000 RSP=ffff888028c87678
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000024821
R12=ffff888038efddc0 R13=0000000000000001 R14=b30f96e79d24f230 R15=ffff888038efdd98
RIP=ffffffff8151635f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5648000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f15d6d428e0 CR3=000000002eddd000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000069364dc5 RBX=ffff888038efb780 RCX=0000000069364dc5 RDX=0000000059c4dcb9
RSI=000000004834dfcd RDI=000000004834dfcd RBP=0000000000000000 RSP=ffff888016a7f9d8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=ffff888038efc200 R13=0000000000000000 R14=0000000000000001 R15=ffff888038efc1d8
RIP=ffffffff815168b7 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5748000 00000000 00000000
LDT=0000 fffffe6a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4e610116f4 CR3=000000002d357000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f4e6102047000007f4e6101ff20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000