Warning: Permanently added '[localhost]:55871' (ECDSA) to the list of known hosts.
2025/05/24 09:19:43 fuzzer started
2025/05/24 09:19:44 dialing manager at localhost:46087
syzkaller login: [   93.769503] cgroup: Unknown subsys name 'net'
[   93.926175] cgroup: Unknown subsys name 'cpuset'
[   93.984387] cgroup: Unknown subsys name 'rlimit'
2025/05/24 09:19:59 syscalls: 212
2025/05/24 09:19:59 code coverage: enabled
2025/05/24 09:19:59 comparison tracing: enabled
2025/05/24 09:19:59 extra coverage: enabled
2025/05/24 09:19:59 setuid sandbox: enabled
2025/05/24 09:19:59 namespace sandbox: enabled
2025/05/24 09:19:59 Android sandbox: enabled
2025/05/24 09:19:59 fault injection: enabled
2025/05/24 09:19:59 leak checking: enabled
2025/05/24 09:19:59 net packet injection: enabled
2025/05/24 09:19:59 net device setup: enabled
2025/05/24 09:19:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/24 09:19:59 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/24 09:19:59 USB emulation: enabled
2025/05/24 09:19:59 hci packet injection: enabled
2025/05/24 09:19:59 wifi device emulation: enabled
2025/05/24 09:19:59 802.15.4 emulation: enabled
2025/05/24 09:19:59 fetching corpus: 0, signal 0/0 (executing program)
2025/05/24 09:20:01 starting 8 fuzzer processes
09:20:01 executing program 0:
r0 = socket(0x0, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x36}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x801}, 0x14)
socketpair(0x28, 0x3, 0x9ae, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc123}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000800}, 0x80)
r3 = socket(0x5, 0x6, 0x1ff)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r2)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, r4, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x70}, 0x1, 0x0, 0x0, 0x4011}, 0x40040)
socketpair(0x1f, 0x5, 0x8, &(0x7f0000000b80)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000bc0)='./binderfs2/custom0\x00', 0x800, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c00)={0x0, <r7=>0x0})
ioctl$BINDER_FREEZE(r6, 0x400c620e, &(0x7f0000000c80)={r7, 0x1, 0xbb6e})
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, r4, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x38}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x200000b1)
sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x69}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
socket(0x18, 0x800, 0x1)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x40010, 0xffffffffffffffff, 0x10000000)
r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000fc0), 0x101000, 0x0)
syz_io_uring_submit(0x0, r8, &(0x7f0000001040)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r9, 0x0, &(0x7f0000001000)='./file0\x00', 0x100, 0x410880, 0x23456}, 0x2)
ioctl$BINDER_GET_FROZEN_INFO(r9, 0xc00c620f, &(0x7f0000001080)={r7})

09:20:01 executing program 1:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r0=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x401}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040}, 0x404c804)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x800)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44001)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x20000000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x802, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/custom0\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000500)=0x6417)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:hwdata_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x68}, 0x1, 0x0, 0x0, 0x2400c080}, 0xc00c0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x5)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800)
sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x19}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004090}, 0x8000)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000ac0), 0x22200, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r1)
sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x128, r6, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x30}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x400}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x128}, 0x1, 0x0, 0x0, 0xfb6e5f51ee82890f}, 0x8040)

09:20:01 executing program 2:
socketpair(0x26, 0x2, 0x1f, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x7, 0x3, 0x1f, 0x2}, 0x14)
getsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x40)
recvmmsg(r1, &(0x7f0000003f80)=[{{&(0x7f0000000280)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000480)=""/190, 0xbe}, {&(0x7f0000000540)=""/34, 0x22}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000640)=""/157, 0x9d}, {&(0x7f0000000700)=""/112, 0x70}, {&(0x7f0000000780)=""/70, 0x46}], 0x8, &(0x7f0000000880)=""/123, 0x7b}, 0xa0}, {{&(0x7f0000000900)=@qipcrtr, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000980)=""/10, 0xa}, {&(0x7f00000009c0)=""/96, 0x60}, {&(0x7f0000000a40)=""/226, 0xe2}, {&(0x7f0000000b40)=""/7, 0x7}], 0x4}, 0x279596c2}, {{&(0x7f0000000bc0)=@hci, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c40)=""/214, 0xd6}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/241, 0xf1}, {&(0x7f0000001e40)=""/222, 0xde}], 0x4, &(0x7f0000001f80)=""/253, 0xfd}, 0x3}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002080)=""/153, 0x99}, {&(0x7f0000002140)=""/195, 0xc3}, {&(0x7f0000002240)=""/119, 0x77}, {&(0x7f00000022c0)=""/195, 0xc3}, {&(0x7f00000023c0)=""/6, 0x6}, {&(0x7f0000002400)}, {&(0x7f0000002440)=""/57, 0x39}, {&(0x7f0000002480)=""/198, 0xc6}, {&(0x7f0000002580)=""/65, 0x41}], 0x9, &(0x7f00000026c0)=""/4096, 0x1000}, 0x6}, {{&(0x7f00000036c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003740)=""/152, 0x98}, {&(0x7f0000003800)=""/92, 0x5c}, {&(0x7f0000003880)=""/62, 0x3e}], 0x3, &(0x7f0000003900)=""/79, 0x4f}, 0x25da}, {{&(0x7f0000003980)=@caif=@rfm, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003a00)=""/156, 0x9c}, {&(0x7f0000003ac0)=""/144, 0x90}, {&(0x7f0000003b80)=""/198, 0xc6}, {&(0x7f0000003c80)=""/89, 0x59}, {&(0x7f0000003d00)=""/193, 0xc1}, {&(0x7f0000003e00)=""/80, 0x50}], 0x6, &(0x7f0000003f00)=""/107, 0x6b}, 0x1}], 0x6, 0x2141, &(0x7f0000004100)={0x0, 0x3938700})
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000004140)=0xca3f, 0x4)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000004180))
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000041c0))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000004200)='dctcp\x00', 0x6)
ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000004240))
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000004280), 0x40, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000042c0), 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000004300)=[@mss={0x2, 0x1}, @mss={0x2, 0x10000}], 0x2)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000004340), 0x200, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000004380)={0x1, 0x8000, 0x0, 0x7fff, 0x9}, 0x14)
sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000043c0))
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000004400)=0x1f, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000044c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r5, &(0x7f0000004440)={0x260240, 0xc, 0x8}, &(0x7f0000004480)='./file0\x00', 0x18, 0x0, 0x23456}, 0xfff)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0x0, 0x0)

09:20:01 executing program 3:
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x5, 0x4)
socketpair(0x26, 0x4, 0x40, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/33, 0x21, 0x1, &(0x7f0000000100)=""/222, 0xde}, &(0x7f0000000240)=0x40)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000280))
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x80)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
r3 = socket(0x8, 0x6, 0x5)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000004cc0), 0x4)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000004d00)={0xffffffffffffffff, 0x102e, "97fb53", 0x9, 0x8})
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000004e00)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004d80)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x43}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x894)
recvmmsg(r0, &(0x7f0000006ac0)=[{{&(0x7f0000004e40)=@isdn, 0x80, &(0x7f0000005040)=[{&(0x7f0000004ec0)=""/89, 0x59}, {&(0x7f0000004f40)=""/222, 0xde}], 0x2, &(0x7f0000005080)=""/83, 0x53}, 0x5}, {{&(0x7f0000005100)=@nfc_llcp, 0x80, &(0x7f0000005440)=[{&(0x7f0000005180)=""/20, 0x14}, {&(0x7f00000051c0)=""/140, 0x8c}, {&(0x7f0000005280)=""/28, 0x1c}, {&(0x7f00000052c0)=""/24, 0x18}, {&(0x7f0000005300)=""/163, 0xa3}, {&(0x7f00000053c0)}, {&(0x7f0000005400)=""/9, 0x9}], 0x7}, 0x81}, {{&(0x7f00000054c0)=@pppol2tpv3={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005540)=""/42, 0x2a}], 0x1, &(0x7f00000055c0)=""/78, 0x4e}, 0x3}, {{&(0x7f0000005640)=@caif=@util, 0x80, &(0x7f0000006940)=[{&(0x7f00000056c0)}, {&(0x7f0000005700)=""/12, 0xc}, {&(0x7f0000005740)=""/206, 0xce}, {&(0x7f0000005840)=""/254, 0xfe}, {&(0x7f0000005940)=""/4096, 0x1000}], 0x5, &(0x7f00000069c0)=""/252, 0xfc}, 0x59ac}], 0x4, 0x43, &(0x7f0000006bc0))
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000006c00), &(0x7f0000006c40)=0x14)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000006c80), &(0x7f0000006cc0)=0x14)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xd0, &(0x7f0000006d00)=@generic={0x6, 0x2, 0xc8, "6113084a", "9ac803de5f934466ee52fa2894b6061be571b9e22df6b021a2415978fe12296f15e1ec17c8a4a0f6071c3ab139ba6560a522f4ace73b8640ea3896c3d6cc1138f783830bb3a10d2be6565c2689f434f841c61840947ab9fe07112d780c5fed5396aad2cd2363ef5be6fd22a9348fea5414fe855ed4c64a96cb0a888b230e49c33c787ab92b17c8f3e17e156d2f754351136653bbea93ba6ca91e04f40a820b780c2815ff45dbf4e237d65ca97bd15af6cdffe7be36b555cf804810ce2be71962b1bdd9108aae498b"})
socketpair(0x18, 0x4, 0x0, &(0x7f0000006e00)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$bt_hci(r5, &(0x7f0000006e40)={0x1, @add_sco={{0x407, 0x4}, {0xc9, 0xff9}}}, 0x8)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000006f80)={&(0x7f0000006e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006f40)={&(0x7f0000006ec0)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x37, 0x5b, "55909513b08c6fe7ff872ef3b8c28325da255649938f756ef0ce4f264d21f6dbdc8131aad30ddd3c1e4893c022561225a6574b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf801}]}, 0x5c}, 0x1, 0x0, 0x0, 0x3}, 0x4001001)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000007100)={&(0x7f0000006fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000070c0)={&(0x7f0000007000)={0x9c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffd}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x80)

[  110.779385] audit: type=1400 audit(1748078401.365:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:20:01 executing program 5:
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={0x0, 0x6b, 0x55}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'crct10dif\x00'}}, &(0x7f00000000c0)="71b6f27c82357d7b983a733d1fca806b0fc395cabd486294605350a631e7cb04331809dc819689a219a85c676464b0ab8db35be0ee30d42b23072262640eaab33829bfe2f8703db95ab16e8476126448a91ca1d15ad4e5b65db6eec6187cdbeec69d4c7792b183947dad12", &(0x7f0000000140)=""/85)
keyctl$read(0xb, 0x0, &(0x7f00000001c0)=""/84, 0x54)
keyctl$describe(0x6, 0x0, &(0x7f0000000240)=""/88, 0x58)
keyctl$search(0xa, 0x0, &(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x1}, 0xfffffffffffffff9)
r0 = add_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="7631482e02b2f25cbc083351c7f9b18a0daafc200ae0c8f928f23db3e21e3114badb9c274c7467589abab94e0dd2ad1ebb46e0e4fae67def525ccb56c304135cb86dcc8c3260b56cdcc07d0ff875d369041b7bb5ea1a5f439d17634f567c619da47651bfecea4e56964f1824e953f909b114a8037b8d0325e68f9729b3f0a2facdd10c59b113305503a5eef62e7805c5c20583565778f1e72c9bf75c15e4db93f46dda12c96e9f9cb0429403b4c6bd0ea8f40a0cb0c10311738c383bbfcfa7fd4fc480ba01afb48725d45c9707d38dad599a96f3e97281a400308f8c14d9306361f6aa1442938ec6cf7dcc1aa7241c1d224574ce", 0xf4, 0xfffffffffffffffe)
keyctl$unlink(0x9, r0, 0xfffffffffffffff9)
keyctl$describe(0x6, r0, &(0x7f00000004c0)=""/99, 0x63)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000540)='rxrpc\x00', &(0x7f0000000580)=@keyring={'key_or_keyring:', r0})
r1 = request_key(&(0x7f00000006c0)='asymmetric\x00', &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)=')$\x00', r0)
r2 = add_key(&(0x7f00000005c0)='id_legacy\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)="bb06fb31528afca8bce9e6e2382daa4020ad53059f2332e4e3069098ba27b1e04050c01e41132e05aeb64a259eebe14e4c6f5d468de0178591bae1d8f4d34ba4a3af7e3357de7e750a4371d02c7f5d7bc921b9a1e24ec1ff87a7c60892bd3b5c9d2e5809eb859f69c5257b5394dc1e1fa0e4", 0x72, r1)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000780)='cifs.idmap\x00', &(0x7f00000007c0)=@chain={'key_or_keyring:', r0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x84490086}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x400}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)
r4 = add_key(&(0x7f0000000900)='user\x00', &(0x7f0000000940)={'syz', 0x3}, &(0x7f0000000980)="e4f3cfda5c753da583dfb71201c1466eebc806f2dbca256aca235c926213967b710f38e99d20b8e381da897fe0f6a0c4b95efc500671b3be269002413a3818f06d2e093ae87cb9d5b499b6b179813d82283e87dbd8fb341ce98066f1948beb2d17cb9f6daaf80abb855e5677c5afbd74dd7e44ead62dd69650d1f9e0c283f13316ab07c2fd904f933888baba7164221d268a8c58dd0f24357a9c1ad968f974b9", 0xa0, r1)
keyctl$chown(0x4, r4, 0xee01, 0xffffffffffffffff)
r5 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x0}, 0x0, 0x0, r2)
keyctl$describe(0x6, r5, &(0x7f0000000ac0), 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000b00)={<r6=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000b80)=r6)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000bc0)='key_or_keyring:', &(0x7f0000000c00))

09:20:01 executing program 4:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xff, 0x5e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004002}, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xccf47e80ec37fc19}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x20, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002c00)={0x6, 0x4, 0x20, 0x80000001}, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x74, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x12}}}}, [@NL80211_ATTR_PROBE_RESP={0x51, 0x91, "ada19a036ef3da151d673d4a014f94aecc32943db7db7f62ae3ac80d616acc23e3ae7e36dbbf2db7ab48cb47168d04d48fc40e3b6bbedde02d8438480042cb24f4420073c04763c7780a0b5e82"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c840)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)={0x6c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76b6d979}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d38cd8b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45ac5245}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfb4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x742fd1cd}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa711}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17beec29}]}, {0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f00), r2)
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x810)
socketpair(0x2c, 0x4, 0x3ff, &(0x7f0000003000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000003040)={0x8, 0x6, 0xfffffffb, 0x0, 0x6}, 0x14)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000003080)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000030c0)={'custom1\x00'})
ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000003240)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x2}, @ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @rc={0x1f, @none, 0x2c}, 0x8, 0x0, 0x0, 0x0, 0x9, &(0x7f0000003200)='wlan0\x00', 0x754, 0x4, 0x200})
syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), r5)
read$rfkill(0xffffffffffffffff, &(0x7f0000003300), 0x8)

09:20:01 executing program 6:
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x1000001, &(0x7f0000000080))
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000180)='system_u:object_r:var_lib_t:s0\x00', 0x1f)
r1 = socket(0x28, 0x80000, 0xd3e6)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004090}, 0x4000000)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040011)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000004c0))
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/162, 0xa2, 0x0, &(0x7f00000005c0)}, &(0x7f0000000640)=0x40)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r1)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x134, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x49}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdd5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2ce3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ecf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "da38e6e4765fba60a23b74268e6ef1ea6715133ef5f0acf0a3d3e540517513bc"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x815}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4800}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x48080}, 0x4040)
sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000e40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a40)={0x3bc, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x85, 0x3, "5082cb97d486b2955b598023996e10f6f186a613b606212b15e4bd93d49f77b258af61f07737b7e91d032274cd488b86911ddc9240511cc4bba466b352a562360666eecbee13078ef890f3af7f434f5ac8f8c2345812edafab91e009edd3cd27c25c3cfc03ddafaa1788d04a03f6724276ad22a8b9cc77142ef33aa6e0ea679189"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "737cb1293632b31feefdc0b9051d05b5357529026043fc34c1434caeb2936dc0a79b59f7395c4d21996b61aabc2ca2c9d89ae4578389c09d237e1278bd84b734285f91f4f56d0a8c487024f68dd9b67e4562436528c9cb95fe22bfb4d44427e3d41fc37716695d0f46dce0a772948a694bf556cb7a1a19d3276550ef11b505e03313782310f7d2c8e719feecd89d1aa98ab6751cd9fafe1a74a360633d90523202e55532920ca8aefa1b35aa6c2cfb1b097ad7a7e42dea306faa8d22982763d6c48e8dd6729093db1e82195da92cc20524b26f7f9fdaa4a4d61d0cc1dec12b00818c"}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc45}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa5e8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6245}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "4ccfb306d8b5742fdd0d625c538ca255f7520a3afe54261a"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x45)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0), r2)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, r5, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'wpan4\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000fc0), 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xd0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x8c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfdd}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e5292fe66ae825dcb17e8a6a8238ba6f6221b4fb4b4d4ff5ea7c5859582ed899"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x810}, 0x2317b66ce9d14ab1)

09:20:01 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x75}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008091)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x34}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc8f}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
socketpair(0x8, 0x1, 0x1, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0xff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x880)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x114, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7eb, 0x4e}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfac}, @NL80211_ATTR_FRAME_MATCH={0x90, 0x5b, "0e6704e80f368818175dd33b921671443fc9f02d3fb562bbb67bfa2224685a9866928e6b84ec5c39602e8081f72bf3a40ab4f9cf72f488874012ef3c1741f78169f523562aa2c4a691002ab0e037723a92a94de9d2187c7473fd36034cafbc631fe9257231e0441d2021d4d17ee80138d5e0ab1b82f83a78ffacb6c29d467585c7a9a29886091d090bfb8c9e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xc95}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x881d}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0x3a, 0x5b, "7b7bbb5f12f5c5ef60202cf27271d43da8ddb78fa34e83483141bf7adff408712251101c7218615f317be6775d3e7aa4ca362356ed82"}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x5c)
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24000}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000041}, 0xc0000)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x61}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x20048000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)={0x94, r1, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044}, 0x80)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x78, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3e}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xac}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3e}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x20010801}, 0x4000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x20, r4, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x66}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000}, 0x4008000)
socketpair(0x5, 0x5, 0x5, &(0x7f0000002580)={<r5=>0xffffffffffffffff})
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002600)={0x8c, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3e}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080)
socketpair(0x6, 0x6, 0x8001, &(0x7f0000002740)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x58, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x58}}, 0x8000801)
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x34, 0x0, 0x86ba5e76dfbd5549, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff81}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048040}, 0x4)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000002c00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x1a4, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x164, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "30ecb004286c728c07a1c6523ba1de372bff50b82383f007681d38fd"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "7a3ad1848c80f47277832945bcd56e181a2e2837da50e3685a27ec"}}, @TIPC_NLA_NODE_ID={0xb4, 0x3, "5a6cc00ccbc72810c689de78b29ce3e37469c56e10378d94199132cb646b9add4ee1b489c50a60dac96bcea73514c3b7ddda5f65da4654513d99160ca6e65c4bd65d05ef159d48907c60703bccdf908312e5ea03ec227af8e900f12d9e1b5be840a0d09071c6800a29878c2153cd3a6274b439db00bba077743475b43a0d641a7f05c2930bbeac1af60d281d4c607366e074443f28bd28042da2d02cd8a4a9f3b4ae50e9f192496c8ca60f8ff086face"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf8d}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)

[  112.114074] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.126978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.129870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.134319] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.136994] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.155039] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.156671] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.165115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.169949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.181934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.186799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.190466] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.193307] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.200352] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.221238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.286510] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.291429] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.294913] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.301111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.303202] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.308182] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.310735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.323352] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.346580] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.353476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  112.378276] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.386772] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.389239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.391079] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.404737] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.408039] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.432377] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.432741] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  112.437887] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  112.440013] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  112.446869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  112.446891] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.450675] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  112.455773] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  112.468809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  114.254418] Bluetooth: hci0: command tx timeout
[  114.256784] Bluetooth: hci1: command tx timeout
[  114.318662] Bluetooth: hci2: command tx timeout
[  114.381884] Bluetooth: hci3: command tx timeout
[  114.445953] Bluetooth: hci4: command tx timeout
[  114.573689] Bluetooth: hci6: command tx timeout
[  114.574452] Bluetooth: hci7: command tx timeout
[  114.575766] Bluetooth: hci5: command tx timeout
[  116.302686] Bluetooth: hci0: command tx timeout
[  116.303132] Bluetooth: hci1: command tx timeout
[  116.367193] Bluetooth: hci2: command tx timeout
[  116.430590] Bluetooth: hci3: command tx timeout
[  116.493700] Bluetooth: hci4: command tx timeout
[  116.621854] Bluetooth: hci7: command tx timeout
[  116.621946] Bluetooth: hci5: command tx timeout
[  116.622354] Bluetooth: hci6: command tx timeout
[  118.349820] Bluetooth: hci0: command tx timeout
[  118.350935] Bluetooth: hci1: command tx timeout
[  118.413810] Bluetooth: hci2: command tx timeout
[  118.477915] Bluetooth: hci3: command tx timeout
[  118.543565] Bluetooth: hci4: command tx timeout
[  118.669672] Bluetooth: hci6: command tx timeout
[  118.670197] Bluetooth: hci7: command tx timeout
[  118.671075] Bluetooth: hci5: command tx timeout
[  120.398843] Bluetooth: hci0: command tx timeout
[  120.398861] Bluetooth: hci1: command tx timeout
[  120.462762] Bluetooth: hci2: command tx timeout
[  120.526837] Bluetooth: hci3: command tx timeout
[  120.590833] Bluetooth: hci4: command tx timeout
[  120.717691] Bluetooth: hci5: command tx timeout
[  120.717777] Bluetooth: hci6: command tx timeout
[  120.718161] Bluetooth: hci7: command tx timeout
[  174.426074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  174.429970] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  174.435659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  174.443173] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  174.445671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  174.486348] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  174.487852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  174.490117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  174.495873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.499108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.632244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  174.635100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  174.638827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  174.640803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  174.643046] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  174.647413] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  174.650056] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  174.651125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  174.652394] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  174.660843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  174.677613] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  174.679883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  174.683011] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  174.731745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  174.750665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  174.825127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  174.838350] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  174.843775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  174.847892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  174.851308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  174.861102] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  174.876715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  174.888970] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  174.932803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  174.948816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  175.120110] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  175.155006] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  175.172867] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  175.231274] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  175.234851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.461681] Bluetooth: hci0: command tx timeout
[  176.525689] Bluetooth: hci1: command tx timeout
[  176.781814] Bluetooth: hci3: command tx timeout
[  176.782451] Bluetooth: hci6: command tx timeout
[  176.973625] Bluetooth: hci4: command tx timeout
[  177.101653] Bluetooth: hci5: command tx timeout
[  177.102608] Bluetooth: hci2: command tx timeout
[  177.294356] Bluetooth: hci7: command tx timeout
[  178.509640] Bluetooth: hci0: command tx timeout
[  178.574049] Bluetooth: hci1: command tx timeout
[  178.829986] Bluetooth: hci6: command tx timeout
[  178.830430] Bluetooth: hci3: command tx timeout
[  179.022088] Bluetooth: hci4: command tx timeout
[  179.150884] Bluetooth: hci2: command tx timeout
[  179.151329] Bluetooth: hci5: command tx timeout
[  179.341681] Bluetooth: hci7: command tx timeout
[  180.557877] Bluetooth: hci0: command tx timeout
[  180.621574] Bluetooth: hci1: command tx timeout
[  180.877616] Bluetooth: hci3: command tx timeout
[  180.878070] Bluetooth: hci6: command tx timeout
[  181.070269] Bluetooth: hci4: command tx timeout
[  181.197696] Bluetooth: hci5: command tx timeout
[  181.198143] Bluetooth: hci2: command tx timeout
[  181.389814] Bluetooth: hci7: command tx timeout
[  182.605827] Bluetooth: hci0: command tx timeout
[  182.670125] Bluetooth: hci1: command tx timeout
[  182.926667] Bluetooth: hci6: command tx timeout
[  182.926681] Bluetooth: hci3: command tx timeout
[  183.119120] Bluetooth: hci4: command tx timeout
[  183.246110] Bluetooth: hci2: command tx timeout
[  183.247506] Bluetooth: hci5: command tx timeout
[  183.438775] Bluetooth: hci7: command tx timeout
[  236.660822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  236.662840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  236.664038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  236.666320] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  236.668073] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  236.672073] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  236.674703] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  236.675437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  236.694072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  236.696242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  236.776729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  236.792103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  236.799335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  236.808335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.815995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  236.839450] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  236.852007] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  236.854331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.863251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.868211] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  236.964437] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  236.975413] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  236.998154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  237.003916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  237.009066] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  237.012841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  237.015901] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  237.017889] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  237.024386] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  237.026551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  237.167324] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  237.176333] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  237.188302] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  237.190331] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  237.229204] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  237.230827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  237.239200] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  237.243387] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  237.250243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  237.283037] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  238.734621] Bluetooth: hci0: command tx timeout
[  238.735380] Bluetooth: hci1: command tx timeout
[  238.861632] Bluetooth: hci2: command tx timeout
[  238.925592] Bluetooth: hci3: command tx timeout
[  239.117609] Bluetooth: hci5: command tx timeout
[  239.182659] Bluetooth: hci4: command tx timeout
[  239.373640] Bluetooth: hci6: command tx timeout
[  239.374265] Bluetooth: hci7: command tx timeout
[  240.782574] Bluetooth: hci0: command tx timeout
[  240.783037] Bluetooth: hci1: command tx timeout
[  240.910122] Bluetooth: hci2: command tx timeout
[  240.974569] Bluetooth: hci3: command tx timeout
[  241.165587] Bluetooth: hci5: command tx timeout
[  241.229739] Bluetooth: hci4: command tx timeout
[  241.421923] Bluetooth: hci6: command tx timeout
[  241.422361] Bluetooth: hci7: command tx timeout
[  242.829827] Bluetooth: hci0: command tx timeout
[  242.830771] Bluetooth: hci1: command tx timeout
[  242.957883] Bluetooth: hci2: command tx timeout
[  243.021698] Bluetooth: hci3: command tx timeout
[  243.213702] Bluetooth: hci5: command tx timeout
[  243.277755] Bluetooth: hci4: command tx timeout
[  243.470584] Bluetooth: hci7: command tx timeout
[  243.471474] Bluetooth: hci6: command tx timeout
[  244.878413] Bluetooth: hci1: command tx timeout
[  244.879040] Bluetooth: hci0: command tx timeout
[  245.005576] Bluetooth: hci2: command tx timeout
[  245.069757] Bluetooth: hci3: command tx timeout
[  245.262589] Bluetooth: hci5: command tx timeout
[  245.325718] Bluetooth: hci4: command tx timeout
[  245.517800] Bluetooth: hci6: command tx timeout
[  245.518288] Bluetooth: hci7: command tx timeout
[  298.977416] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  298.981865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  298.986224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.002468] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.010976] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.055249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  299.060996] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  299.063846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  299.071855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  299.075725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  299.129093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  299.141241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  299.144291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  299.155118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  299.165873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  299.252492] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  299.262930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  299.268132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  299.276502] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  299.284337] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  299.290462] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  299.294115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  299.298394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  299.325170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  299.362751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  299.390076] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.394364] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.421223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.439199] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.452428] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  299.455135] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  299.475455] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  299.485918] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  299.498340] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  299.520918] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  299.536193] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  299.537833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  299.540795] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  299.549198] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  299.558469] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  301.070600] Bluetooth: hci0: command tx timeout
[  301.134749] Bluetooth: hci1: command tx timeout
[  301.198687] Bluetooth: hci2: command tx timeout
[  301.389611] Bluetooth: hci3: command tx timeout
[  301.453799] Bluetooth: hci4: command tx timeout
[  301.517615] Bluetooth: hci6: command tx timeout
[  301.646694] Bluetooth: hci7: command tx timeout
[  301.647321] Bluetooth: hci5: command tx timeout
[  303.117747] Bluetooth: hci0: command tx timeout
[  303.181688] Bluetooth: hci1: command tx timeout
[  303.245978] Bluetooth: hci2: command tx timeout
[  303.437823] Bluetooth: hci3: command tx timeout
[  303.501813] Bluetooth: hci4: command tx timeout
[  303.566275] Bluetooth: hci6: command tx timeout
[  303.693855] Bluetooth: hci5: command tx timeout
[  303.694814] Bluetooth: hci7: command tx timeout
[  305.166084] Bluetooth: hci0: command tx timeout
[  305.231573] Bluetooth: hci1: command tx timeout
[  305.293720] Bluetooth: hci2: command tx timeout
[  305.488651] Bluetooth: hci3: command tx timeout
[  305.549807] Bluetooth: hci4: command tx timeout
[  305.614259] Bluetooth: hci6: command tx timeout
[  305.742179] Bluetooth: hci7: command tx timeout
[  305.743130] Bluetooth: hci5: command tx timeout
[  307.214742] Bluetooth: hci0: command tx timeout
[  307.277696] Bluetooth: hci1: command tx timeout
[  307.343207] Bluetooth: hci2: command tx timeout
[  307.533624] Bluetooth: hci3: command tx timeout
[  307.597626] Bluetooth: hci4: command tx timeout
[  307.661695] Bluetooth: hci6: command tx timeout
[  307.789711] Bluetooth: hci7: command tx timeout
[  307.790304] Bluetooth: hci5: command tx timeout
[  361.248329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  361.251995] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  361.255086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  361.268160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  361.274257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  361.333788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  361.338977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  361.344358] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  361.350585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  361.356768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  361.418816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  361.429499] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  361.432111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  361.439317] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  361.443264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  361.480790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  361.487984] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  361.500898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  361.525383] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  361.531847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  361.571818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  361.583054] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  361.602560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.608072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  361.611185] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  361.617986] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  361.619490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  361.630022] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.632353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  361.639218] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  361.650991] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  361.659800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  361.665154] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  361.667800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.677063] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  361.687612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  361.721861] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  361.725162] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  361.742240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  361.748456] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  363.341806] Bluetooth: hci0: command tx timeout
[  363.406595] Bluetooth: hci1: command tx timeout
[  363.533762] Bluetooth: hci2: command tx timeout
[  363.597581] Bluetooth: hci3: command tx timeout
[  363.726718] Bluetooth: hci4: command tx timeout
[  363.789613] Bluetooth: hci5: command tx timeout
[  363.789641] Bluetooth: hci6: command tx timeout
[  363.853612] Bluetooth: hci7: command tx timeout
[  365.391638] Bluetooth: hci0: command tx timeout
[  365.453593] Bluetooth: hci1: command tx timeout
[  365.584563] Bluetooth: hci2: command tx timeout
[  365.646628] Bluetooth: hci3: command tx timeout
[  365.776125] Bluetooth: hci4: command tx timeout
[  365.837612] Bluetooth: hci6: command tx timeout
[  365.838800] Bluetooth: hci5: command tx timeout
[  365.902537] Bluetooth: hci7: command tx timeout
[  367.438022] Bluetooth: hci0: command tx timeout
[  367.501972] Bluetooth: hci1: command tx timeout
[  367.631884] Bluetooth: hci2: command tx timeout
[  367.693832] Bluetooth: hci3: command tx timeout
[  367.821648] Bluetooth: hci4: command tx timeout
[  367.885843] Bluetooth: hci5: command tx timeout
[  367.885870] Bluetooth: hci6: command tx timeout
[  367.949654] Bluetooth: hci7: command tx timeout
[  369.485823] Bluetooth: hci0: command tx timeout
[  369.549803] Bluetooth: hci1: command tx timeout
[  369.678611] Bluetooth: hci2: command tx timeout
[  369.741608] Bluetooth: hci3: command tx timeout
[  369.869715] Bluetooth: hci4: command tx timeout
[  369.933693] Bluetooth: hci5: command tx timeout
[  369.934742] Bluetooth: hci6: command tx timeout
[  369.997690] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
09:25:02  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff888015e6b700 RCX=ffff88806ce089cc RDX=0000000000000000
RSI=ffffffff85c1d1c0 RDI=ffff888015e6bafc RBP=ffff888015e6b700 RSP=ffff88806ce089d8
R8 =ffffffff8687590c R9 =ffff88806ce08ab8 R10=000000000003b67d R11=0000000000024a79
R12=ffff888015e6b700 R13=ffff88806ce08ac0 R14=ffff88806ce08dc8 R15=ffff88806ce08a78
RIP=ffffffff815baeaa RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb588096540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe2400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb588546010 CR3=0000000035ab5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffffffff81604230 RCX=ffff88801902f83c RDX=1ffff11003205f4b
RSI=ffffffff81205856 RDI=ffff88801902f9bc RBP=ffff88801902f980 RSP=ffff88801902f8e8
R8 =0000000000000001 R9 =ffff88801902f928 R10=000000000003b67d R11=00000000000083fd
R12=ffff88801902f9b0 R13=0000000000000000 R14=ffff888016178000 R15=0000000000000000
RIP=ffffffff812d99f8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbb4e9e88e0 CR3=0000000028a77000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000