Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:24122' (ECDSA) to the list of known hosts.
2025/05/24 19:55:55 fuzzer started
2025/05/24 19:55:55 dialing manager at localhost:46087
syzkaller login: [   95.287445] cgroup: Unknown subsys name 'net'
[   95.440730] cgroup: Unknown subsys name 'cpuset'
[   95.491169] cgroup: Unknown subsys name 'rlimit'
2025/05/24 19:56:12 syscalls: 2214
2025/05/24 19:56:12 code coverage: enabled
2025/05/24 19:56:12 comparison tracing: enabled
2025/05/24 19:56:12 extra coverage: enabled
2025/05/24 19:56:12 setuid sandbox: enabled
2025/05/24 19:56:12 namespace sandbox: enabled
2025/05/24 19:56:12 Android sandbox: enabled
2025/05/24 19:56:12 fault injection: enabled
2025/05/24 19:56:12 leak checking: enabled
2025/05/24 19:56:12 net packet injection: enabled
2025/05/24 19:56:12 net device setup: enabled
2025/05/24 19:56:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/24 19:56:12 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/24 19:56:12 USB emulation: enabled
2025/05/24 19:56:12 hci packet injection: enabled
2025/05/24 19:56:12 wifi device emulation: enabled
2025/05/24 19:56:12 802.15.4 emulation: enabled
2025/05/24 19:56:12 fetching corpus: 0, signal 0/0 (executing program)
2025/05/24 19:56:14 starting 8 fuzzer processes
19:56:14 executing program 0:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x50}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x7b32e245f4c9bb5d}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1d4, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x130, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x7c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f3be83828af5a02944d95e2a18cc9beda33f2757cd83285ba740a99f5605f4b7"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5ebb331d74b38bc6271939e4c496efe3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0526133909518e38760754d58e6a9485"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e3ab9a88b42f96e482cf5f5de4817f8a9663dbe654f39e83ac219415f9cfdec0"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "55c46dcee4a98cd879dd7e722a6f1ebc"}]}, @NL802154_ATTR_SEC_KEY={0x3c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "148affe3e8503d3ae30acc8b9bba5a3b193fca885a93cc7dcb04418c917e633f"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1a081d42b4d8794cfd51ebfb36adc48e"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x24000801}, 0x0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000800)={'wpan0\x00'})
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000880)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000c40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f00000008c0)={0x318, r0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x110, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_ID={0xcc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x84b}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "32a070f9425889bb1622e4275737896cf008aaf52c59864935b6d53020871895"}]}, @NL802154_ATTR_SEC_KEY={0x54, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}]}, @NL802154_ATTR_SEC_KEY={0x18c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x8c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xbf2a}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x21}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb822}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "77ebde72a18258ebf0171c579de623d62d330fd266a6ba6c9869ee299fd39031"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "db3532275a4522fd6c710ba18342645b4ca8c957ad52d3c7ba27e28568003c39"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b5f92b0619834ac25fc11df73d090fba126e8522efd9ba8ac82a970c73ac5802"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6eb143e7fc23bbe83b22d3bdda949270"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a6f727e2a0e16c10d0443a4a03106229"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), r4)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r8, 0x300, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x11)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000f00), r9)
sendmsg$NL802154_CMD_GET_INTERFACE(r9, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x58, r8, 0x400, 0x3c31, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40011)

19:56:14 executing program 1:
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000000)=0x3, 0x4)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001800)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x44, 0x0, "ab5d8012844b4b667543ab258bd86550064b0c955d46b8308777f128249b71094186b549d783ec0b96a31bcf41c42e2baf41b15b45d8f1ac7d3ef0fe5c54c8d9b7a3447b25c8902562f7e0ea41481714"}, 0xd8)
ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000001900))
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001940)='vlan1\x00', 0x10)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001980)={{0x1, 0x1, 0x18, <r1=>r0, {0x8}}, './file0\x00'})
ioctl$VT_DISALLOCATE(r1, 0x5608)
r2 = creat(&(0x7f00000019c0)='./file0/file0\x00', 0x113)
ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000001a00)="efad19a82a707adb7b5f023364b7fe7d4e233987610ea9762ce4c80da457a6e129d97f0cae9c2e6b236f1f0a4d4f8ea750877ca8728cb340ece60667c25b29d2a5f1db33a468fce8aa90cccfb1e4e47c4fcba385884f2ea1f1085fff84ed51bf8eb13a973db647979b1d1db3c76c44a4ba8890be87f0677f8bd5408ca2cfbe5d1d413682a1041f35cb99ddf2cd6790befd829a5359f76ffd64b8f20630dcb1b35811c98c0023644f5172ce3c")
ioctl$VT_WAITACTIVE(r1, 0x5607)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000001ac0)={'virt_wifi0\x00', {0x2, 0x0, @loopback}})
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x80)
bind$bt_l2cap(r0, &(0x7f0000001c00)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x843, 0x2}, 0xe)
write$P9_RLOCK(r1, &(0x7f0000001c40)={0x8, 0x35, 0x2}, 0x8)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001c80), 0x20000, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x84, 0x0, 0x8, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x62}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x82}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000)
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000002240)={0x2, 0x0, 0x11, 0xe, 0x158, &(0x7f0000001e40)="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"})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x34, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000)

19:56:14 executing program 2:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x7f, 0x5, 0x2b0, 0x53, 0x7f, 0x7d, 0x9}, "de0d95414d92b67d2083712285bb740c516ebbb7546e021b07831724d4a7603fc184699fa6774486778db04758ad5e7c480dc27f65d0051b5aa907a4db75c19a1a2d776036dda7384837b9", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa6b)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a80)={0x0, 0x6, 0x0, [0x100, 0x7, 0x4, 0x5, 0xbb4], [0x811a, 0xfffffffffffff001, 0x6, 0x7, 0x400, 0x7, 0x3, 0x2, 0x5, 0x6d07, 0x7, 0x25, 0x7, 0x401, 0x8, 0x2, 0xff, 0x40, 0x40, 0x1, 0x64, 0x7f, 0x7, 0x2, 0x5, 0x1, 0x76, 0x49, 0x1, 0x0, 0x100000001, 0x0, 0x4, 0x2, 0x7, 0x109, 0x6, 0x7ff, 0x0, 0x9, 0x3, 0x40, 0x6, 0x10001, 0xab3, 0x10000, 0x7, 0x0, 0x800, 0x0, 0x8, 0x5, 0x200, 0x3ff, 0x524d, 0x7, 0x6, 0x1, 0x2, 0xff, 0x2, 0x3f, 0x1, 0x8, 0xffffffff, 0x2, 0x3, 0x3, 0x8, 0x801f, 0x800, 0x9, 0xf23, 0x5, 0x3, 0x4, 0x1, 0x54, 0xfffffffffffffffa, 0xffffffffffffffff, 0x5, 0x8, 0x0, 0x100000000, 0x3, 0x8000, 0x5, 0x0, 0x7fff, 0x7fffffff, 0x1, 0x8, 0x100000000, 0x7, 0x0, 0x2, 0xbe2b, 0x94, 0x5a19, 0x8, 0x10000, 0x1f, 0x7, 0x7d7f, 0x0, 0x80000000, 0x3, 0x8, 0x4, 0x4, 0x8, 0xfffffffffffffffa, 0x3cd1, 0xffffffffffffffc0, 0xfff, 0x3ff, 0x0, 0x5, 0x7fffffff, 0x2, 0x40]})
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x120, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000010c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'})
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001100)={0x1, 0x8, 0x7, 0x5, 0x2, [{0x6, 0xf56f, 0xdf, '\x00', 0x2400}, {0x7, 0x800, 0x5, '\x00', 0x2}]})
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xcc, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbf2}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6c6e}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4048011}, 0x40000)
getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000001380)=""/206, &(0x7f0000001480)=0xce)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000001500)={0x6, 0x8, '\x00', 0x1, &(0x7f00000014c0)=[0x0]})
ioctl$TCSBRKP(r0, 0x5425, 0x8)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001540)={0x0, r0, 0x7, 0x70c, 0x5c0, 0xfff})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000001580)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x8000}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), r0)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001640)={@remote, @loopback, <r3=>0x0}, &(0x7f0000001680)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001740)={'syztnl2\x00', &(0x7f00000016c0)={'syztnl0\x00', <r4=>0x0, 0x29, 0x80, 0xff, 0xfa1, 0x74, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0xe00, 0x700, 0x0, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001800)={'syztnl0\x00', &(0x7f0000001780)={'syztnl1\x00', <r5=>0x0, 0x2f, 0x1f, 0x84, 0x9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x7800, 0x40, 0xef, 0xffff0001}})
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001840)={@multicast2, @loopback, <r6=>0x0}, &(0x7f0000001880)=0xc)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000001ac0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a80)={&(0x7f00000018c0)={0x198, r2, 0x20, 0x3f, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000010}, 0x8)
r7 = socket(0x9, 0xa, 0x7fff)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001b00)={<r8=>0x0, @dev, @multicast2}, &(0x7f0000001b40)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000001c00)={'sit0\x00', &(0x7f0000001b80)={'syztnl0\x00', r8, 0x4, 0x3, 0x81, 0x3, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x20, 0x2, 0x1ff}})

[  113.618964] audit: type=1400 audit(1748116574.410:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
19:56:14 executing program 3:
sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8801)
getsockname$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x10)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$KDENABIO(r0, 0x4b36)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000300))
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000340)={0x4, 0x3f, 0x3})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0)
r2 = memfd_secret(0x80000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x48880)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000580)={0x6, 'veth1_vlan\x00', {0x7}, 0x9})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3a}, @void, @val={0xc, 0x99, {0x6, 0x75}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004010)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x40800, 0x0)
ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f0000000700)=0x4)
recvmmsg(r2, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)=""/151, 0x97}, {&(0x7f0000000800)=""/51, 0x33}, {&(0x7f0000000840)=""/5, 0x5}], 0x3, &(0x7f00000008c0)=""/199, 0xc7}, 0x3}, {{&(0x7f00000009c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000a40)=""/244, 0xf4}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/55, 0x37}, {&(0x7f0000001b80)=""/151, 0x97}, {&(0x7f0000001c40)=""/18, 0x12}, {&(0x7f0000001c80)=""/36, 0x24}, {&(0x7f0000001cc0)=""/68, 0x44}, {&(0x7f0000001d40)=""/26, 0x1a}, {&(0x7f0000001d80)=""/2, 0x2}], 0x9, &(0x7f0000001e80)=""/220, 0xdc}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000001f80)=""/142, 0x8e}, {&(0x7f0000002040)=""/198, 0xc6}, {&(0x7f0000002140)=""/141, 0x8d}, {&(0x7f0000002200)=""/120, 0x78}, {&(0x7f0000002280)=""/43, 0x2b}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x6, &(0x7f0000003340)=""/122, 0x7a}, 0x3}, {{&(0x7f00000033c0)=@nfc, 0x80, &(0x7f0000003500)=[{&(0x7f0000003440)=""/59, 0x3b}, {&(0x7f0000003480)=""/90, 0x5a}], 0x2, &(0x7f0000003540)=""/169, 0xa9}, 0x7ff}, {{&(0x7f0000003600)=@nfc_llcp, 0x80, &(0x7f0000003800)=[{&(0x7f0000003680)=""/176, 0xb0}, {&(0x7f0000003740)=""/191, 0xbf}], 0x2, &(0x7f0000003840)=""/182, 0xb6}, 0x2}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003900)=""/138, 0x8a}, {&(0x7f00000039c0)=""/63, 0x3f}, {&(0x7f0000003a00)=""/234, 0xea}, {&(0x7f0000003b00)=""/118, 0x76}, {&(0x7f0000003b80)=""/193, 0xc1}, {&(0x7f0000003c80)=""/13, 0xd}, {&(0x7f0000003cc0)=""/159, 0x9f}], 0x7, &(0x7f0000003e00)=""/170, 0xaa}, 0x80000000}], 0x6, 0x2040, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000004080)={0x6, 0x20, '\x00', 0x1, &(0x7f0000004040)=[0x0, 0x0, 0x0, 0x0]})

19:56:14 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7d6}}, './file0\x00'})
ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f0000000040)={0x9, 0xf, 0x7, 0x3, @msf={0x9, 0x1, 0x2}, 0x9})
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x1, 0x2)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x33}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040089}, 0x400001c)
r2 = memfd_secret(0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x160, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x160}, 0x1, 0x0, 0x0, 0xc001}, 0x800)
ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f00000004c0))
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000500))
r3 = syz_io_uring_complete(0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r2)
sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x72437d9eedfdcaed}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r5 = accept(r2, 0x0, &(0x7f0000000680))
setsockopt$packet_int(r5, 0x107, 0x10, &(0x7f00000006c0)=0x2, 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x80084)
r6 = syz_open_dev$vcsn(&(0x7f0000000800), 0xfffffffffffffffd, 0x200)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000880)={{r6}, 0x1, &(0x7f0000000840)=[0x1000], 0x40, 0xd, [0x413, 0x2, 0x7e83, 0x2]})

19:56:14 executing program 5:
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1800)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000080)={{r0}, 0x0, 0x3a, @unused=[0x0, 0x3, 0x7fff, 0x78f], @subvolid=0x101})
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000001080))
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000010c0), 0x4)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000001100)=0x5)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000001140)={{0x1f, 0x81}, 'port0\x00', 0x9d, 0x80000, 0x400, 0x7, 0x1, 0x40, 0x1ff, 0x0, 0x1, 0x2})
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000001200))
r1 = openat$incfs(r0, &(0x7f0000001280)='.log\x00', 0x202000, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000001240), r1)
r2 = mq_open(&(0x7f00000012c0)='tls\x00', 0x1, 0x100, &(0x7f0000001300)={0x1, 0x7fff, 0x7e, 0x80000000})
fstat(r2, &(0x7f0000001340))
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000013c0)={{0x3, 0x1, 0x40, 0x3, 0x6}})
r3 = fcntl$dupfd(r1, 0x0, r0)
io_uring_enter(r3, 0x3f5c, 0x1736, 0x2, &(0x7f0000001400)={[0x3]}, 0x8)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001440), 0x20000, 0x0)
fallocate(r4, 0x47, 0x1, 0x1)
openat$full(0xffffffffffffff9c, &(0x7f0000001480), 0x72081, 0x0)
keyctl$invalidate(0x15, 0x0)

19:56:14 executing program 6:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=0x10001, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7ff}}, './file0\x00'})
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000090)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x4, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x28}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4aee}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xbbaa}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0x4]}, 0x8, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000640), r0)
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc4, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x38}]}]}, @NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffc0}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xbf2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8091)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r5=>r0, {0xffffffffffffffff, 0xee01}}, './file0/file0\x00'})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xc0, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9356}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2204f4ecd205167a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="da12e76d82e3358c45ffc22707d6e0f33415ea1829a3dde96ef6c3c0cab8c0ca"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8f251ced99603b30"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf27}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="067aa9ebbc96333d26267cf031732fc7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x69}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "692460b6d23a99de"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="35489e41ff1e68ef6e2b5b75192b6fd4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="df5dd71c53460c5462b7d29bb7909778"}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24020800}, 0x8000)
ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000a40)={0x3, 0x1000, "793bb8", 0x80, 0x3d})
sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000e00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000ac0)={0x2f8, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x13c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'syz_tun\x00'}]}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x40091}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000e40)={{0x1, 0x1, 0x18, <r7=>r0, {0x15cc}}, './file0\x00'})
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ec0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r8, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'vcan0\x00'}}}, ["", ""]}, 0x2c}}, 0x804)

19:56:14 executing program 7:
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x188, 0x0, 0x110, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xd}, {0xc, 0x90, 0x100000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x22}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1000}, {0xc, 0x90, 0xe6000000000000}}]}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x20000880)
r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='ns\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x24008004)
fstat(r0, &(0x7f0000000840))
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000810)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4d}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1f}, @device_b, @device_a, @random="26b3be7a5abe", {0x4, 0x7}}, 0x36, @val={0x8c, 0x18, {0x8b0, "af2d2e81d3d0", @long="7b02fd3055c3408eee1a163709c68749"}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000880}, 0x8080)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000b80)={@loopback, @empty, <r4=>0x0}, &(0x7f0000000bc0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6_vti0\x00', r4, 0x4, 0x3f, 0x49, 0xa8, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x8, 0x0, 0x40}})
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000cc0)="d540de0223aba53dc77eac1cd6b91972af6232bd5736e819ed97c2842e57d9f6f4656c6bdb76aee7a3f72431343da4ef5f6f5f28ef1358816d07a10cae1aaa7f35d66908032972668c81d62af6d9040d9f82652c38f1aeb7fd68bde2", 0x5c)
ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000d40))
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000d80), &(0x7f0000000dc0)={0x0, 0xfb, 0x56, 0x7, 0x0, "094fc7073c595af8a1ad2ccfcbec5f90", "96b940b716761843cf05a5541abe278f712db543a84e1d1ac8161d8d9bad84d3b1e4efb977ef20bef12f79ea7e85024820e5d35303d763e1f20f529324b29509c9"}, 0x56, 0x2)
ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000e40)=""/106)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r1)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0x8c, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x54}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000001}, 0x10800)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[  115.031476] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  115.036174] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  115.042845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  115.045105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  115.048256] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  115.050523] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  115.058739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  115.064576] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  115.067354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  115.092353] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  115.108723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  115.115556] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  115.136585] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  115.136773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  115.145194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  115.157548] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.159582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  115.162930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  115.165130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  115.170894] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.175366] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  115.180825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.187411] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  115.189098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  115.205250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  115.208600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  115.222523] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.222609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  115.225981] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  115.235909] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.237622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.239848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  115.265020] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  115.298058] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  115.304146] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  115.313074] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  115.314589] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  115.322236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  115.329850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  115.345849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  117.102757] Bluetooth: hci0: command tx timeout
[  117.166934] Bluetooth: hci1: command tx timeout
[  117.232832] Bluetooth: hci2: command tx timeout
[  117.294513] Bluetooth: hci3: command tx timeout
[  117.358393] Bluetooth: hci5: command tx timeout
[  117.359008] Bluetooth: hci6: command tx timeout
[  117.422643] Bluetooth: hci7: command tx timeout
[  117.423228] Bluetooth: hci4: command tx timeout
[  119.150883] Bluetooth: hci0: command tx timeout
[  119.214412] Bluetooth: hci1: command tx timeout
[  119.280321] Bluetooth: hci2: command tx timeout
[  119.342376] Bluetooth: hci3: command tx timeout
[  119.406449] Bluetooth: hci6: command tx timeout
[  119.406913] Bluetooth: hci5: command tx timeout
[  119.471392] Bluetooth: hci4: command tx timeout
[  119.471868] Bluetooth: hci7: command tx timeout
[  121.198440] Bluetooth: hci0: command tx timeout
[  121.262460] Bluetooth: hci1: command tx timeout
[  121.326879] Bluetooth: hci2: command tx timeout
[  121.390433] Bluetooth: hci3: command tx timeout
[  121.456174] Bluetooth: hci6: command tx timeout
[  121.458563] Bluetooth: hci5: command tx timeout
[  121.518491] Bluetooth: hci7: command tx timeout
[  121.519475] Bluetooth: hci4: command tx timeout
[  123.247175] Bluetooth: hci0: command tx timeout
[  123.311616] Bluetooth: hci1: command tx timeout
[  123.375528] Bluetooth: hci2: command tx timeout
[  123.439395] Bluetooth: hci3: command tx timeout
[  123.503406] Bluetooth: hci6: command tx timeout
[  123.504225] Bluetooth: hci5: command tx timeout
[  123.566441] Bluetooth: hci4: command tx timeout
[  123.567278] Bluetooth: hci7: command tx timeout
[  177.617812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.623893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.626228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.638746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.645022] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  177.726613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  177.730992] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  177.733232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  177.756248] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  177.758835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  177.761031] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  177.764855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  177.769772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  177.770672] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  177.774630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  177.775403] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  177.781991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  177.784484] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  177.786036] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  177.794545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.869817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  177.877869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  177.888897] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  177.888957] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  177.893645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  177.895198] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  177.917077] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  177.924084] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  177.930899] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  177.939709] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  177.979640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  177.982727] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  177.983968] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  177.986081] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  177.987791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  177.989715] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  177.990968] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  177.993142] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  178.010055] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  178.015397] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  179.694692] Bluetooth: hci0: command tx timeout
[  179.822569] Bluetooth: hci1: command tx timeout
[  179.886430] Bluetooth: hci2: command tx timeout
[  179.887106] Bluetooth: hci3: command tx timeout
[  180.014542] Bluetooth: hci6: command tx timeout
[  180.015212] Bluetooth: hci5: command tx timeout
[  180.015958] Bluetooth: hci4: command tx timeout
[  180.078448] Bluetooth: hci7: command tx timeout
[  181.743343] Bluetooth: hci0: command tx timeout
[  181.872314] Bluetooth: hci1: command tx timeout
[  181.935506] Bluetooth: hci3: command tx timeout
[  181.935953] Bluetooth: hci2: command tx timeout
[  182.063724] Bluetooth: hci4: command tx timeout
[  182.064191] Bluetooth: hci5: command tx timeout
[  182.064251] Bluetooth: hci6: command tx timeout
[  182.126554] Bluetooth: hci7: command tx timeout
[  183.790380] Bluetooth: hci0: command tx timeout
[  183.918349] Bluetooth: hci1: command tx timeout
[  183.983508] Bluetooth: hci2: command tx timeout
[  183.983958] Bluetooth: hci3: command tx timeout
[  184.110447] Bluetooth: hci4: command tx timeout
[  184.110897] Bluetooth: hci6: command tx timeout
[  184.111373] Bluetooth: hci5: command tx timeout
[  184.174933] Bluetooth: hci7: command tx timeout
[  185.838482] Bluetooth: hci0: command tx timeout
[  185.967157] Bluetooth: hci1: command tx timeout
[  186.030411] Bluetooth: hci2: command tx timeout
[  186.030847] Bluetooth: hci3: command tx timeout
[  186.159605] Bluetooth: hci5: command tx timeout
[  186.160050] Bluetooth: hci6: command tx timeout
[  186.160742] Bluetooth: hci4: command tx timeout
[  186.222849] Bluetooth: hci7: command tx timeout
[  239.677156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  239.683147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  239.685656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  239.693956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  239.700720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  239.749739] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  239.753072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  239.760699] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  239.763716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  239.768103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  239.823754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  239.825947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  239.828204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  239.831417] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  239.833112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  239.934234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  239.959234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  239.988230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  239.997664] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  240.000459] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  240.002774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  240.025077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  240.025258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  240.031754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  240.068919] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  240.073726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  240.076543] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  240.084592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  240.084967] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  240.086753] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  240.090463] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  240.152042] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  240.163884] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  240.197786] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  240.265235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  240.283890] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  240.331224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  240.371074] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  240.440039] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  240.463812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  241.774394] Bluetooth: hci0: command tx timeout
[  241.838563] Bluetooth: hci1: command tx timeout
[  241.903417] Bluetooth: hci2: command tx timeout
[  242.094401] Bluetooth: hci3: command tx timeout
[  242.158807] Bluetooth: hci4: command tx timeout
[  242.222410] Bluetooth: hci5: command tx timeout
[  242.414391] Bluetooth: hci7: command tx timeout
[  242.542535] Bluetooth: hci6: command tx timeout
[  243.822595] Bluetooth: hci0: command tx timeout
[  243.886447] Bluetooth: hci1: command tx timeout
[  243.950436] Bluetooth: hci2: command tx timeout
[  244.142441] Bluetooth: hci3: command tx timeout
[  244.207672] Bluetooth: hci4: command tx timeout
[  244.270403] Bluetooth: hci5: command tx timeout
[  244.462578] Bluetooth: hci7: command tx timeout
[  244.590629] Bluetooth: hci6: command tx timeout
[  245.870367] Bluetooth: hci0: command tx timeout
[  245.935755] Bluetooth: hci1: command tx timeout
[  245.998712] Bluetooth: hci2: command tx timeout
[  246.190642] Bluetooth: hci3: command tx timeout
[  246.255362] Bluetooth: hci4: command tx timeout
[  246.318505] Bluetooth: hci5: command tx timeout
[  246.510925] Bluetooth: hci7: command tx timeout
[  246.638726] Bluetooth: hci6: command tx timeout
[  247.918658] Bluetooth: hci0: command tx timeout
[  247.982560] Bluetooth: hci1: command tx timeout
[  248.046401] Bluetooth: hci2: command tx timeout
[  248.239623] Bluetooth: hci3: command tx timeout
[  248.302614] Bluetooth: hci4: command tx timeout
[  248.366491] Bluetooth: hci5: command tx timeout
[  248.558389] Bluetooth: hci7: command tx timeout
[  248.686474] Bluetooth: hci6: command tx timeout
[  302.083174] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  302.090155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  302.093235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  302.100962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  302.105357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.337451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  302.344401] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  302.351390] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  302.368050] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  302.371182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  302.374644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  302.378069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  302.401945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  302.410919] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  302.413252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  302.423173] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  302.425094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  302.431739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  302.462859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  302.488859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  302.510754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  302.525056] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  302.542650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  302.566681] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  302.588848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  302.592104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  302.594842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  302.598444] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  302.603774] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  302.614094] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  302.714057] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  302.718830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  302.721022] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  302.726479] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  302.740607] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  302.898474] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  302.907788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  302.910021] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  302.972922] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  303.035650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  304.175384] Bluetooth: hci0: command tx timeout
[  304.430480] Bluetooth: hci1: command tx timeout
[  304.494689] Bluetooth: hci4: command tx timeout
[  304.622648] Bluetooth: hci2: command tx timeout
[  304.750373] Bluetooth: hci6: command tx timeout
[  304.815428] Bluetooth: hci3: command tx timeout
[  305.007431] Bluetooth: hci7: command tx timeout
[  305.199544] Bluetooth: hci5: command tx timeout
[  306.222907] Bluetooth: hci0: command tx timeout
[  306.480354] Bluetooth: hci1: command tx timeout
[  306.543362] Bluetooth: hci4: command tx timeout
[  306.671368] Bluetooth: hci2: command tx timeout
[  306.798352] Bluetooth: hci6: command tx timeout
[  306.862401] Bluetooth: hci3: command tx timeout
[  307.054428] Bluetooth: hci7: command tx timeout
[  307.246367] Bluetooth: hci5: command tx timeout
[  308.270490] Bluetooth: hci0: command tx timeout
[  308.526400] Bluetooth: hci1: command tx timeout
[  308.590395] Bluetooth: hci4: command tx timeout
[  308.718394] Bluetooth: hci2: command tx timeout
[  308.846384] Bluetooth: hci6: command tx timeout
[  308.910420] Bluetooth: hci3: command tx timeout
[  309.102496] Bluetooth: hci7: command tx timeout
[  309.294661] Bluetooth: hci5: command tx timeout
[  310.319093] Bluetooth: hci0: command tx timeout
[  310.574536] Bluetooth: hci1: command tx timeout
[  310.638369] Bluetooth: hci4: command tx timeout
[  310.767736] Bluetooth: hci2: command tx timeout
[  310.894370] Bluetooth: hci6: command tx timeout
[  310.958388] Bluetooth: hci3: command tx timeout
[  311.150680] Bluetooth: hci7: command tx timeout
[  311.342494] Bluetooth: hci5: command tx timeout
[  364.424181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  364.431539] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  364.433919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  364.441963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  364.448174] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  364.572610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  364.582234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  364.585200] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  364.598195] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  364.606819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  364.627023] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  364.631592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  364.636218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  364.643231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  364.647843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  364.757090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  364.761047] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  364.788962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  364.815894] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  364.825657] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  364.825730] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  364.831238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  364.843649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  364.870459] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  364.886402] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  364.947835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  364.980846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  364.984855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  364.993151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  365.009959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  365.052768] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  365.074820] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  365.113887] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  365.120115] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  365.122858] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  365.131150] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  365.142003] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  365.156159] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  365.158167] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  365.164727] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  366.510417] Bluetooth: hci0: command tx timeout
[  366.703584] Bluetooth: hci2: command tx timeout
[  366.703602] Bluetooth: hci1: command tx timeout
[  366.959458] Bluetooth: hci3: command tx timeout
[  367.022358] Bluetooth: hci4: command tx timeout
[  367.086385] Bluetooth: hci5: command tx timeout
[  367.278468] Bluetooth: hci7: command tx timeout
[  367.278481] Bluetooth: hci6: command tx timeout
[  368.559593] Bluetooth: hci0: command tx timeout
[  368.750481] Bluetooth: hci2: command tx timeout
[  368.751383] Bluetooth: hci1: command tx timeout
[  369.007195] Bluetooth: hci3: command tx timeout
[  369.070879] Bluetooth: hci4: command tx timeout
[  369.134445] Bluetooth: hci5: command tx timeout
[  369.326831] Bluetooth: hci6: command tx timeout
[  369.326950] Bluetooth: hci7: command tx timeout
[  370.607339] Bluetooth: hci0: command tx timeout
[  370.798759] Bluetooth: hci2: command tx timeout
[  370.799211] Bluetooth: hci1: command tx timeout
[  371.055362] Bluetooth: hci3: command tx timeout
[  371.119360] Bluetooth: hci4: command tx timeout
[  371.182383] Bluetooth: hci5: command tx timeout
[  371.374425] Bluetooth: hci6: command tx timeout
[  371.374880] Bluetooth: hci7: command tx timeout
[  372.654552] Bluetooth: hci0: command tx timeout
[  372.846357] Bluetooth: hci1: command tx timeout
[  372.847393] Bluetooth: hci2: command tx timeout
[  373.102519] Bluetooth: hci3: command tx timeout
[  373.166655] Bluetooth: hci4: command tx timeout
[  373.230368] Bluetooth: hci5: command tx timeout
[  373.422670] Bluetooth: hci7: command tx timeout
[  373.423093] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
20:01:24  Registers:
info registers vcpu 0
RAX=0000000000000005 RBX=0000000000000200 RCX=ffffffff87a5e978 RDX=0000000000000008
RSI=ffff888036c7a628 RDI=ffff888036c79b80 RBP=ffff888036c79b80 RSP=ffff88806ce08830
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=0000000000000009 R13=0000000000000002 R14=ffff888036c7a628 R15=0000000000000003
RIP=ffffffff8151829a RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff863ece438 CR3=0000000030ec4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e
XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249
XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffffffff85c75280 RCX=ffffffff8174075f RDX=0000000000000000
RSI=ffffffff81740865 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff88806cf08990
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=00007f2ecf69ac24 R13=0000000000000000 R14=ffff888015c69b80 R15=ffff88800da25500
RIP=ffffffff8174086c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f2ecf176540 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2ecf636000 CR3=0000000016d43000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000