Warning: Permanently added '[localhost]:46366' (ECDSA) to the list of known hosts.
2025/05/25 15:47:55 fuzzer started
2025/05/25 15:47:55 dialing manager at localhost:46087
syzkaller login: [  103.221071] cgroup: Unknown subsys name 'net'
[  103.355317] cgroup: Unknown subsys name 'cpuset'
[  103.401025] cgroup: Unknown subsys name 'rlimit'
2025/05/25 15:48:18 syscalls: 2214
2025/05/25 15:48:18 code coverage: enabled
2025/05/25 15:48:18 comparison tracing: enabled
2025/05/25 15:48:18 extra coverage: enabled
2025/05/25 15:48:18 setuid sandbox: enabled
2025/05/25 15:48:18 namespace sandbox: enabled
2025/05/25 15:48:18 Android sandbox: enabled
2025/05/25 15:48:18 fault injection: enabled
2025/05/25 15:48:18 leak checking: enabled
2025/05/25 15:48:18 net packet injection: enabled
2025/05/25 15:48:18 net device setup: enabled
2025/05/25 15:48:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/25 15:48:18 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/25 15:48:18 USB emulation: enabled
2025/05/25 15:48:18 hci packet injection: enabled
2025/05/25 15:48:18 wifi device emulation: enabled
2025/05/25 15:48:18 802.15.4 emulation: enabled
2025/05/25 15:48:18 fetching corpus: 0, signal 0/0 (executing program)
2025/05/25 15:48:21 starting 8 fuzzer processes
15:48:21 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x90)
connect$bt_sco(r0, &(0x7f0000000040), 0x8)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000080)=""/2, 0x2})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x200000)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0x3, 0x0, 'client1\x00', 0x4, "fe905b65521a54c5", "0c66d7781b3dbb97d5ec7193c7f38e0c5a1029961ed6b1b37c04eef9063c4fa3", 0x7, 0x3})
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0xb, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
mount_setattr(r0, &(0x7f0000000300)='./file0\x00', 0x8800, &(0x7f0000000380)={0x80, 0x74, 0x180000, {r2}}, 0x20)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x8, 0x2)
r3 = epoll_create1(0x0)
r4 = syz_mount_image$nfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x1, 0x3, &(0x7f0000000640)=[{&(0x7f00000004c0)="ac8c4683252c0afd713ab885ead781b76cc435622547eadf17cf499c63d42a4f655238e945d29ef6ca07be44791ff90a5336f04c34b33b96046840b88afdf182ddd0142e85d64dfc1faf01d3375673c3ec02e8facd63bb2fedfe5dcfdec2d1a60309091188653cf3af3f0f5fe79313beb984e5c362c72e801d9d0d447988192a5d73489a455db9c1efa0a6", 0x8b, 0xfff}, {&(0x7f0000000580)="1876c19e44fb22888b2b788fdc535b90f13066cb46cb4d6bcf4fe9421871685251be4ad37aeb0b8136664f7468595f098320f74e6fb07049c7a97a16b0259aa2f6f6232c", 0x44, 0x8}, {&(0x7f0000000600)="7b77dcbcdd9fd425cc90182fa88bd69713bc08799020a769593f241f4e939712ed3ff980882680b3b70edab5f40107be9d917420837c", 0x36, 0x4}], 0x1803000, &(0x7f00000006c0)={[{'/dev/snd/seq\x00'}], [{@fsname={'fsname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x29, 0x80, 0x18, 0x0, 0x14, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x20, 0x40, 0x3}})
r5 = dup3(r1, r2, 0x80000)
ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000800))
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000001840)={0x2, 0x1, 0x1000, &(0x7f0000000840)=""/4096})
mkdirat(r4, &(0x7f0000001880)='./file0\x00', 0x80)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000018c0)={{0x1, 0x1, 0x18, <r6=>r4, {0x4}}, './file0\x00'})
ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000001900)=""/165)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000001bc0))

15:48:21 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000809}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x35}]}, 0x38}, 0x1, 0x0, 0x0, 0xc32e112cb5880771}, 0x4c001)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0xcc}, 0x4044010)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x88100)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040810}, 0x4800)
sendmsg$sock(r1, &(0x7f0000000880)={&(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x0, 0x2, 0x0, 0x4, {0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000640)="ca79243f23dbe70bba5923f1c77e3da420d3dd801cbe87b7", 0x18}, {&(0x7f0000000680)="017ce065411532a3360680266f79aed7e3ab03e693e2519b56ee3557461958b80d22ea23780a2eb287077a24a2fad9ee81a777140e55fc99d9c7070656af2835a0d53dcdfe253af729c178740d6fe7a4503250027266e16d02aae684e64dc0ea0fb925282eb1a00705a7154b84f91bfffb2855bc64a9e4a46a74f163fa2ca69bd6361dc5175471af68d550975fe445e7dc313e400874b8e755729894b9f296d96dcc4d0f9c17775a827b95ef4b20732e3740431105f0766d5d6bf46b85ec3a1eaf03ebfcaacfdfb955bedea0904b491e2c2659c0488c89da919ead4f59b97d5262fca06a6ce534e8d1744773c1aebe0942d8", 0xf2}], 0x2, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x101}}], 0x90}, 0x80)
syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r1)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa8, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xca9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x800}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8001}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f0000000a80), 0xfffffffffffffff7, 0x200100)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000b00), r1)
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r8, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c8}, 0x20000000)
setsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f0000000c40)={@multicast2, @private=0xa010100}, 0x8)
r9 = syz_open_dev$vcsa(&(0x7f0000000c80), 0x8001, 0x80000)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000cc0)=0x5, 0x4)

15:48:21 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x4e}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20008840)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x28000080)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x8}}, './file0\x00'})
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x13c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x661}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x40c0)
r3 = syz_open_dev$mouse(&(0x7f0000000480), 0x3d6f, 0x2000)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x8c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFCTH_TUPLE={0x34, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1000}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x8c}}, 0x4014)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xee1d95e17d57457f}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040)
r4 = dup3(r2, r1, 0x80000)
ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000740)={0xffffffffffffffff, 0x488, "8f3981", 0x5})
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000780))
r5 = openat$cgroup_devices(r4, &(0x7f00000007c0)='devices.deny\x00', 0x2, 0x0)
fremovexattr(r5, &(0x7f0000000800)=@random={'user.', '\x00'})
sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000a00)={&(0x7f0000000840), 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x140, r0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000)
fallocate(r1, 0xc0, 0x3, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x1, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040000)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r3)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x440088d4)
setxattr(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)=@known='trusted.syz\x00', &(0x7f0000000d40)='\x00', 0x1, 0x3)

15:48:21 executing program 3:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x480402, 0x8)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r1, 0x310, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @local, 0x7101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x4010)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd8, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004}, 0x20000080)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = open(&(0x7f00000003c0)='./file0\x00', 0x282002, 0x40)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000400))
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xc4, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x229c4f00}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68f88ca3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1594529e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75085cdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000e0}, 0x48010)
r4 = syz_open_dev$vcsn(&(0x7f0000000600), 0x1d8800000, 0x2400)
sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x9c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa3c}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x9c}}, 0x4c010)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r5=>r2, {0xee01}}, './file0\x00'})
fremovexattr(r5, &(0x7f0000000800)=@random={'btrfs.', '\\][:({\x00'})
sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1060380}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x14)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8010)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r6=>r3, {0x6}}, './file0/file0\x00'})
ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000000980))
fsetxattr(r0, &(0x7f00000009c0)=@known='system.posix_acl_access\x00', &(0x7f0000000a00)='/}}/Z\\/)\'#\x00', 0xb, 0x1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x208, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe0, 0x2, 0x0, 0x1, [{0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/asound/timers\x00', 0x0, 0x0)
fchdir(r7)

[  128.426921] audit: type=1400 audit(1748188101.185:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:48:21 executing program 4:
close(0xffffffffffffffff)
pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)="3d0d810d939fb86eb257ad9f38f02352269edab995e67cced630f17aaf4b8f422aced18b737bebdf0e08bbba16d0e5ecea48931c098b68f1b0c992a10c746220f8d68657658656a1551f59263c6dea2b6a0199faa740fc9dcb4e861e589b", 0x5e}, {&(0x7f0000000080)="e7ef9d5258409a81a9e85159013c550e5e13bcbf2557da2cf758b627feabea4755b66c4c7c2d25cdaa78babc91c9a07535063cda79919b138eabc5ab1f4f70d9db01345803b48e223dd9551942b84bef9bbf62b52156", 0x56}, {&(0x7f0000000100)="e72369557f8da18d36a2f93c5a752418b48eaad1b46e28733a2b3cfeba7d82af26f86a7e326272cf5fb342a680faa286f5831554997bbedf3c9c085a2c066099f8e15c6cb739920fada245b3ff9471365fdffd854437d9e6120cb60f0c2a2b7d04b19b98802cd680aeb847471acb05", 0x6f}, {&(0x7f0000000180)="ae54dd93c32dde63551733b1e31a80c103591c3481aa81ba7828d21d22945162fd5a1636fa373c89961fb6b93c6cc3b09c77106a585d2f374826116748cf2a4d68c06e309fd13c6af5f88d92f0a58e2b3af1520d281fa8136d3602b8692698f2b68d997837610da40a1258847e80060342bd9c56249d9cf796f8700859", 0x7d}, {&(0x7f0000000200)="08a0d186590c233bd2079678ce7b6473cf3899924be36c96f969616f65e9c113708bc54dd7febf91a8d2ef6355a0fc7c96eb86b8e871563ca7f8b2a84087042964901a3123bb7901407835f813230465867bfc228b341dfac4456fb9d145702efcbb50dd5f344f29bf265abb1630eda6f88fea6f84463f5cd453558f1c14c470d5490ae2ffb8573874f0ee407153daa4349a9c502bd990f72dc78ca15113410ed3f24a250c347cd6f6bdd6241da7c2350db1b854447c44cf284f8d6811e90bfca1c0ca36083216c41ec5f4e8983a4ada99f70299ff705dafe6e1d79c", 0xdc}, {&(0x7f0000000300)="a4fb20de3c56bb3cb19fd527b381fcc7a46619ad924fbeb9722b60b3aea3d7a742712ce80757bd98443892953c56df3b0078e06c286d48a9769313a11821b7cdbe740c8da8f05fa02bbb51438d67be9fe9111c750ca28e6b0c0dd5f8bd0dcd", 0x5f}, {&(0x7f0000000380)="5f8cfbeeefad31b53993c537eb4c", 0xe}, {&(0x7f00000003c0)="00f30c25f0d204f4065736ed791ea83ec7ebbd4b96d31b1afc4a29b869da837c49f16a96d649661a9c7fd4cbbe9877acfd13e2be727c5b8fd1d83e420c2fee07ac7cb25e6b9adff4ea91c667d6eff8cd155a30677599515aceec3a49f49e7a8b2bdc35bad6c28af652485b7c86c0bb52e8923b5789fbde357ab9e6159ba79421eda0b7b6eb5d0b3891faa526b8f92e768bc6c6ded4b2c71a92bbb61b6d62fd17545fe7d876b5da71f34948d25ec5fe7d50a8ca8c", 0xb4}, {&(0x7f0000000480)="e119ef1a678843ba8196406587f5e16a49fade0b812da3c0e6110bfaaab39f6e21a592beb0e207b0c71ab5c899720d61be09adb4ffb05676ab95ad6eb033751e6659763e14d19d76aab6b1998be644292641ede3dfc755501b3a59ff3060c3d99b6dd4d39a60495642d113cf29e1903d7c896234ebcbd96548c921ef2a287f1b567df21fd0485584fe65e68439fa1a740d", 0x91}, {&(0x7f0000000540)="436c71bf0839cf372b60ac1214edfdb5cbcd5d6bf5f0a08f4e6139dec1149f32ab77f15aca688b1084e496e8e5b1697849227f4fa6c16cd97bb35d4f34c496cdab8570f09e04ec590fef5f4dfa78024d7fcbec93cac7b69f57d5027954bbe4", 0x5f}], 0xa, 0x8, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000680))
pipe(&(0x7f0000000700)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$CDROM_DEBUG(r1, 0x5330, 0x1)
ioctl$CDROMSEEK(r1, 0x5316, &(0x7f0000000740)={0x12, 0xff, 0xa7, 0x3f, 0x1f, 0x7})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={<r2=>0xffffffffffffffff})
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0)
getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f00000007c0)=""/94, &(0x7f0000000840)=0x5e)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
sendmsg$nl_xfrm(r3, &(0x7f0000000d40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f00000009c0)=@flushpolicy={0x31c, 0x1d, 0x2, 0x70bd2d, 0x25dfdbff, "", [@user_kmaddress={0x2c, 0x13, {@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x2}}, @tfcpad={0x8, 0x16, 0x1}, @tfcpad={0x8, 0x16, 0xff}, @tmpl={0x144, 0x5, [{{@in6=@mcast1, 0x4d5, 0x6c}, 0xa, @in6=@remote, 0x0, 0x3, 0x1, 0xcd, 0x2, 0x2, 0x3}, {{@in=@local, 0x4d4, 0x33}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3505, 0x1, 0x3, 0x2, 0x7, 0xfffffe00, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x3c}, 0xa, @in=@local, 0x3500, 0x4, 0x0, 0x1, 0x1, 0x1, 0x97f6}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x6c}, 0xa, @in6=@loopback, 0x3502, 0x3, 0x3, 0x8, 0x101, 0x3, 0x5}, {{@in=@remote, 0x4d2, 0x6c}, 0xa, @in6=@private0, 0x3505, 0x2, 0x2, 0x8, 0x7, 0x7, 0x3f}]}, @XFRMA_SET_MARK={0x8, 0x1d, 0xcdf4}, @tmpl={0x184, 0x5, [{{@in=@local, 0x4d2, 0x33}, 0xa, @in=@empty, 0x34ff, 0x5, 0x2, 0x84, 0x8, 0x41, 0x8}, {{@in6=@local, 0x4d3, 0x5e}, 0xa, @in=@multicast2, 0x3505, 0x4, 0x2, 0x6, 0x80000001, 0x3, 0x20}, {{@in=@remote, 0x4d3, 0x1}, 0x2, @in=@multicast2, 0x3502, 0x3, 0x1, 0x3f, 0xfffffff9, 0x401, 0x2}, {{@in6=@mcast2, 0x4d4, 0xff}, 0x2, @in=@empty, 0x3504, 0x2, 0x0, 0x0, 0x4, 0x2, 0x20000000}, {{@in6=@private2, 0x4d3, 0xff}, 0xa, @in=@remote, 0x3502, 0x4, 0x2, 0x3, 0xff, 0x9}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x2b}, 0x0, @in=@rand_addr=0x64010101, 0x3502, 0x4, 0x0, 0x2, 0x8, 0x0, 0x76}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8844)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d80), 0xd0041, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000ec0))
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000f00)={0x1, 0x2, 0x20, 0x4, 0x10000, 0x7f})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000f40)={{0x1, 0x1, 0x18, <r5=>r2, {0x0, 0x1}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001000)={0x168, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x12c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x207d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x720}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xbe}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1000}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_WIPHY={0x8}]}, 0x168}, 0x1, 0x0, 0x0, 0x44}, 0x40004)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001400)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELRULE={0x58, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0xf}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x170}, 0x1, 0x0, 0x0, 0x4040810}, 0x4000000)

15:48:21 executing program 5:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000))
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x3)
r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1ff, 0x10281)
ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0xc7f, 0x5, 0x1000, 0x800, 0x15, "19f1a3e7c801e280"})
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000100)={'ip6erspan0\x00', {0x2, 0x0, @local}})
r2 = socket$inet(0x2, 0xa, 0x5)
getsockname(r2, &(0x7f0000000140)=@in6, &(0x7f00000001c0)=0x80)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000240))
syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000280)={0x2, 0x0, 0x0, 'queue0\x00', 0x80000000})
pipe2(&(0x7f0000000340)={<r4=>0xffffffffffffffff}, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r5=>r2}, './file0\x00'})
getpeername$inet(r5, &(0x7f00000003c0)={0x2, 0x0, @remote}, &(0x7f0000000400)=0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r6=>r1, {0x8}}, './file0\x00'})
sendmsg$NFT_BATCH(r6, &(0x7f0000000c00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELRULE={0x134, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xd7, 0x7, 0x1, 0x0, "7b5f8f7d4e481a567334484e729cbe78e20fab313d0b3d48ad488ab008c042e7183cc142aa76a88667506c7ad2ed074c6e890d26625f3ea49337eada1e74360c4c25b69db3a8bdf41d6b1c08e363213ea06d92e816c9b6a19e3fc65c6ff3779ef89dd88384c0106a52aec8bfa671c8509490a0699e961603b93e76552355ce48bd05a421045076b30f7b6a04309ba140bcce029c2e8a673ad4a44a033ad2b62d0bfffe6432c3a0728265f07a43646e91492b0facb12c7299211d0fdc57824782c784d41ce28645350494f64497ee8f48cd93f9"}, @NFTA_RULE_USERDATA={0x32, 0x7, 0x1, 0x0, "ef67a11fc128c5d6265c1a965c99bc8fd9873125002fdf08a8ea94264f38f9cedd3f1c5673d71893109fc3d21369"}]}, @NFT_MSG_DELCHAIN={0xf0, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6cfd1f58}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2042dabe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfd20fbb}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x701c3381}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7a}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x5b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x2a654f0d82420d74, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0xd7, 0x7, 0x1, 0x0, "8bed283932190ad4b8bb5b1e762f2ef0cc8daafdbd93bd3f5d69da6240ba74756ccfa9702ee1091eec964f4ec7adbb91da344c6e6e67b378f0c9dd0247752a4df11ef6b692a62145dbc75c9bccd0e30226bd52fcbc3e2501026cee4a5d94ffb07f7bd579917d5a8b5da5ec9eee3b2bad0f23df76ee2c725446816da53e70df143b312525260b125187d116d20a4c4a682f1e86b9001474111d3970c7832928f6349eadcf4054abe7acfa48ca0f6b09069d2517006d02115edee914aece350898ab13940b827a058711366d577dc3953bc48455"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x170, 0x4, 0x0, 0x1, [{0xb0, 0x1, 0x0, 0x1, [@xfrm={{0x9}, @void}, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'queue0\x00'}]}}, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_DREG={0x8}]}}, @socket={{0xb}, @void}, @redir={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x33}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}]}}, @dup_ipv4={{0x8}, @void}]}, {0xbc, 0x1, 0x0, 0x1, [@dup={{0x8}, @void}, @limit={{0xa}, @void}, @redir={{0xa}, @void}, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0xe3031b507cfbfda1}]}}, @queue={{0xa}, @void}, @rt={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}]}}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x7c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x7c, 0x5, 0xa, 0x83, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14}}, 0x6ec}, 0x1, 0x0, 0x0, 0xd4}, 0x8040)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x20000, 0x108)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'})
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000dc0)=@fragment={0x84, 0x0, 0x81, 0x1, 0x0, 0x6, 0x68}, 0x8)

15:48:21 executing program 6:
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x3, 0x3, 0x401, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x10001}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x76}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x8}}]}, 0x60}}, 0x4000000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1200002}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x20000880)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x1)
ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x101)
rt_sigaction(0xa, &(0x7f0000000400)={&(0x7f0000000380)="c4628d0014d6f3f2dbe046f65e00c421f311f2f2420f78c1eecc660f382be08fa860ee4bd95f8f8910010c712646def6f3470f5d54e8f3", 0x2, &(0x7f00000003c0)="65dbe1c4e17811cc47dab4c9e7000000c483d16b03e2c462cdbec3f30f5b2bc4a249ba3636c126a8c4617c280b440f12f0", {[0xe09]}}, &(0x7f0000000500)={&(0x7f0000000440)="47db0cf9c483557889c800000000f04480b2b5000000f48fc9d801938b00000065d9f2c4a3556ff40033753266f20f1ed83666f347a7d010", 0x0, &(0x7f0000000480)="c4017de74e540f2a9ce7c0a60000f2476cc46239aa19c48140c60100c4833902476abbc40175db3b3647c0610eff8fc878c03d8fc100004765440f14b3b9c30000"}, 0x8, &(0x7f0000000540))
writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000580)="74c41e589e1a1b33d080691a2d7ccb67c579accffc39b5b1c5c1a89e99226beaf955158c8968ab717d36e7eb2f98cef25d108cc626e6df602ca988833156619b7423eb5dccf9c9299b3ac6d8c2e156d98a40c661b5a0b5c7503fb057918b4b364ac4b6bf9811f11c8c426fc568e816393b690fe90204fb9b3af12a0940459a35a670453864ddbc0443c77b", 0x8b}, {&(0x7f0000000640)="d6ddfec4cd7f4344a2a257f7a02c4c01a8687ba658bdf1a7e8a4fc48d7100c11f38743d8fca6760c49d55c9e2e4ae658b118336c46d470805cb3d0ac69b12365c3a5d2c1796d5c33a50c2a671e0b15c15244b5da3271f0c1782fce1c67851990db5a7a234c", 0x65}, {&(0x7f00000006c0)="65acb820a5863353340f31fc", 0xc}, {&(0x7f0000000700)="64df378ab8fd610eb0d256c81ea9d6ebe09b08a1986cc52ad16f2340bdb2f866bbb29d1698159e2073df5e0c3222948b95e22aea7c27c6012c30fb2c9a37ac86eaa69bc24fe1bf556e5c72171af628290a5ef2fa3e21a4236511296e6527df8c4fed88b130bc7aa21b3c92ff0d5d61", 0x6f}, {&(0x7f0000000780)="4cfa40688499d31acbe26e0304563c5212a195add0283c6c2e3731dcfeca588e856902386bd4ebf72e3756bb5a8b55435d5ded37df77de177e3eaef0be143cbef22090f879ff7ae5e1352430ecce87f862d44336958b66b8e9f36d1a96289670bfc012f6dc4df741c22593ca0c4e31784452c7201319b0820aa8c0c31c6b83f43dd9aec58f3e4b6dae63", 0x8a}, {&(0x7f0000000840)="468b8928d5ab", 0x6}, {&(0x7f0000000880)="939ac37a2d765e7b041358976fee4b1b17efdf0d239d5e527a95dbf5c2088b4a16e2cf5c6dbb209bf36ca2e686376238b0d979e0fa679bb113daae456ee25d9adee69f2c352033d7d69d724c70c5abe399f9d13735739542443e2f7263584e20eeccd7a31a3524184200b2495ace569d0d0536e81599e7c9e8890783e22b971c68c577dc6f352aea359c7ebc2919de278ad8e052228fa8f893822ac030dbfb4c2bc4816efeb771fa411c939c0e45c86bc3156242f46d88d005584b358f55616115b4214b440d32f1c9233353fe4c77db269c5e5a38a57e74e59bb3863be79c4224d43f87f2120e51f0d4d03bf2f36d15c119feb0017eb4", 0xf7}, {&(0x7f0000000980)="f085b0bfd1a132d2b187600b6e129061e6c603f66c24a8acce2fc102e6dfd8b8e404002012b0de", 0x27}], 0x8)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a40), 0x200000, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40080)
ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000b80)=0x4)
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000c00)={@local, @remote, <r2=>0x0}, &(0x7f0000000c40)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000d80)={'ip_vti0\x00', &(0x7f0000000c80)={'gre0\x00', <r3=>0x0, 0x8, 0x700, 0x3adc4b1e, 0x5, {{0x29, 0x4, 0x0, 0x1, 0xa4, 0x65, 0x0, 0x9f, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@cipso={0x86, 0x45, 0x3, [{0x3, 0xe, "eceb4b95fde58d3f5eda0bb9"}, {0x2, 0x2}, {0x0, 0x9, "a3f74c0cd0a65c"}, {0x4, 0xf, "09475534246fdd8efdf186f9e0"}, {0x0, 0x2}, {0x7, 0xb, "132992af26f5e9de3d"}, {0x1, 0xa, "d535b7353058faf4"}]}, @timestamp_prespec={0x44, 0x3c, 0x8c, 0x3, 0x0, [{@local, 0x7}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x2}, {@private=0xa010101, 0x3}, {@multicast2, 0x7}]}, @lsrr={0x83, 0xf, 0x76, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101]}]}}}}})
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xf0, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044040}, 0x40000)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000f80), 0xe00, 0x0)
splice(r1, &(0x7f0000000f40)=0x3b, r4, &(0x7f0000000fc0)=0x1f, 0x9, 0x3)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001000)={{0x1, 0x1, 0x18, <r5=>r1, {r0}}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000001040)={0x7fffffff, 0x9, 0x0, 'queue0\x00', 0x2b})
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='memory.events.local\x00', 0x0, 0x0)

15:48:21 executing program 7:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'ip_vti0\x00', <r0=>0x0, 0x20, 0x8000, 0x5, 0x7, {{0x26, 0x4, 0x1, 0x8, 0x98, 0x65, 0x0, 0x9, 0x4, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x2a, 0x1, [{0x1, 0xf, "cdcbb3b221f70259c5ef0f788c"}, {0x6, 0x6, "6cecb548"}, {0x6, 0xb, "2e86d32de7451395b5"}, {0x5, 0x4, "dd76"}]}, @end, @generic={0x44, 0x4, "b6cf"}, @lsrr={0x83, 0x7, 0x9b, [@local]}, @timestamp={0x44, 0x10, 0x6b, 0x0, 0xc, [0xc19, 0x10000, 0x80000001]}, @ssrr={0x89, 0x2b, 0x27, [@broadcast, @empty, @local, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x35}]}, @generic={0x82, 0xd, "ebde45d4a539b353d8c071"}, @ra={0x94, 0x4}, @noop]}}}}})
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @in={0x2, 0x4e21, @empty}, @phonet={0x23, 0x4, 0x8, 0x20}, @xdp={0x2c, 0xa, <r1=>0x0, 0x25}, 0x7, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)='tunl0\x00', 0x0, 0x7fffffff, 0x5779})
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)={0x3e0, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd4, 0x4, "b2ec649c17a5e597c7cf28366de229e4f7c0f6631c430faf9cec825d66a538a5013e8f9ce94b3bb42d6442d57bf8674495b816503a34ea359b70abd8cbe237243f77a306e3c8eac1cbc4af68c3ea0d8548c395d79dc38a0c7b85c88b6a416b5e13b4e15f9ef879a5ded7d15b9d4a073af5975d7de1891401da14d72df22bc5305e206a2f040e48c63c2b3653e21935887ef5e4d1bce723c307288f6e15074e9111d0ba8314f724f17377da12e73064aa777c385aa773465bbdf9b37cbb05af317fd4b8b8f827412bd8c69b2a41eba56e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}, @ETHTOOL_A_WOL_MODES={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}, @ETHTOOL_A_BITSET_MASK={0x58, 0x5, "8a5e04a0cee254ee1f914c29acf6280f71d66aac1ae44e0e0228960c01334ebb087cbc8fa726e9fd8f53988dba04e01ecfe87edd6660ad63d4a3e522eb5c03df943b0fe37c16843dae22ddfda86e3d3b58fb3da4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "81decf685904a88815f2fbe7cb47b32dbe8d21027101baaf7b4d1389f749adfcb6d88bb6578622926019896beabe2c247468f8804fa594aa0b3a17391af1f9280f10aa6e92369755cf02854c8d8c892296e62d7e3a549bf5d0a0162443c6ad4dcb7eb2fbc9053be2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*:}\'+)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}]}, @ETHTOOL_A_BITSET_MASK={0x7a, 0x5, "491aedf8d85326c284675a0b90b73466a55c50043d05e033e8c48de0dbeed7b3855564c4b514de0d1a898f72ddbc023f82848a797e2723e260c00da9c52733a1d09b43f4f230510606d63c2e8d80d6e85e040e5763caab0f7e68173a5fb1badcb0734384622a1b1a603250ed6627192fd9a51fa962bf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x3e0}}, 0x48010)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=""/135)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0xbb22}}, './file0\x00'})
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x804)
ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000980))
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a80)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x94, r4, 0x200, 0x7ff, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x40800}, 0x800)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r3)
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, r6, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x40000)
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000d40)={'veth0_to_batadv\x00', {0x2, 0x0, @loopback}})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/diskstats\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 'queue0\x00', 0x6})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000e80))
r8 = pidfd_getfd(r2, r7, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r7)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r8, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, r9, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x2f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x1000}, 0x8000)

[  130.043536] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  130.048040] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  130.051658] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  130.059913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  130.068915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  130.135789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.143705] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.148610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.150454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.153786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.160006] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.162996] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.167302] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  130.174761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.176706] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.188750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.220969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  130.229162] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  130.262978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  130.264963] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  130.267998] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  130.272905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  130.275179] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  130.281868] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  130.284239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  130.285730] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  130.286038] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  130.289808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  130.295029] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  130.311934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  130.319117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  130.322103] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  130.324371] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  130.333835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  130.340925] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  130.343170] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  130.362798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  130.365447] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  130.382627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  130.412171] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  132.127921] Bluetooth: hci0: command tx timeout
[  132.252737] Bluetooth: hci1: command tx timeout
[  132.253851] Bluetooth: hci2: command tx timeout
[  132.382458] Bluetooth: hci3: command tx timeout
[  132.445056] Bluetooth: hci5: command tx timeout
[  132.446865] Bluetooth: hci6: command tx timeout
[  132.509063] Bluetooth: hci4: command tx timeout
[  132.572575] Bluetooth: hci7: command tx timeout
[  134.173634] Bluetooth: hci0: command tx timeout
[  134.301077] Bluetooth: hci2: command tx timeout
[  134.302709] Bluetooth: hci1: command tx timeout
[  134.429587] Bluetooth: hci3: command tx timeout
[  134.492677] Bluetooth: hci5: command tx timeout
[  134.493584] Bluetooth: hci6: command tx timeout
[  134.557263] Bluetooth: hci4: command tx timeout
[  134.620604] Bluetooth: hci7: command tx timeout
[  136.220503] Bluetooth: hci0: command tx timeout
[  136.350267] Bluetooth: hci2: command tx timeout
[  136.351264] Bluetooth: hci1: command tx timeout
[  136.477432] Bluetooth: hci3: command tx timeout
[  136.540543] Bluetooth: hci5: command tx timeout
[  136.541208] Bluetooth: hci6: command tx timeout
[  136.604665] Bluetooth: hci4: command tx timeout
[  136.668941] Bluetooth: hci7: command tx timeout
[  138.268641] Bluetooth: hci0: command tx timeout
[  138.397056] Bluetooth: hci1: command tx timeout
[  138.397595] Bluetooth: hci2: command tx timeout
[  138.524481] Bluetooth: hci3: command tx timeout
[  138.588821] Bluetooth: hci6: command tx timeout
[  138.589318] Bluetooth: hci5: command tx timeout
[  138.654642] Bluetooth: hci4: command tx timeout
[  138.716469] Bluetooth: hci7: command tx timeout
[  192.304714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  192.310916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  192.314787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  192.327045] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  192.332459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  192.373582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  192.382207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  192.387933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  192.396555] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  192.402588] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  192.438899] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  192.454088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  192.456692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  192.458944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  192.465073] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  192.469247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  192.475915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  192.495066] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  192.497011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  192.506947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  192.526104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  192.542750] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  192.545692] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  192.548651] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  192.550854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  192.560798] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  192.565557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  192.604348] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  192.615622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  192.618443] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  192.620199] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  192.635635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  192.641969] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  192.645876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  192.648423] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  192.662056] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  192.668102] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  192.699946] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  192.725951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  192.789702] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.396487] Bluetooth: hci0: command tx timeout
[  194.462490] Bluetooth: hci1: command tx timeout
[  194.652803] Bluetooth: hci6: command tx timeout
[  194.652841] Bluetooth: hci3: command tx timeout
[  194.654275] Bluetooth: hci2: command tx timeout
[  194.716580] Bluetooth: hci5: command tx timeout
[  194.780715] Bluetooth: hci7: command tx timeout
[  194.908512] Bluetooth: hci4: command tx timeout
[  196.444498] Bluetooth: hci0: command tx timeout
[  196.509501] Bluetooth: hci1: command tx timeout
[  196.700734] Bluetooth: hci6: command tx timeout
[  196.700821] Bluetooth: hci3: command tx timeout
[  196.701254] Bluetooth: hci2: command tx timeout
[  196.764493] Bluetooth: hci5: command tx timeout
[  196.828587] Bluetooth: hci7: command tx timeout
[  196.956677] Bluetooth: hci4: command tx timeout
[  198.492472] Bluetooth: hci0: command tx timeout
[  198.556450] Bluetooth: hci1: command tx timeout
[  198.750635] Bluetooth: hci3: command tx timeout
[  198.750715] Bluetooth: hci2: command tx timeout
[  198.751106] Bluetooth: hci6: command tx timeout
[  198.812504] Bluetooth: hci5: command tx timeout
[  198.876444] Bluetooth: hci7: command tx timeout
[  199.004689] Bluetooth: hci4: command tx timeout
[  200.540770] Bluetooth: hci0: command tx timeout
[  200.604529] Bluetooth: hci1: command tx timeout
[  200.796742] Bluetooth: hci2: command tx timeout
[  200.797005] Bluetooth: hci6: command tx timeout
[  200.797222] Bluetooth: hci3: command tx timeout
[  200.860599] Bluetooth: hci5: command tx timeout
[  200.924563] Bluetooth: hci7: command tx timeout
[  201.052448] Bluetooth: hci4: command tx timeout
[  254.763248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  254.769781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  254.773668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  254.779038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  254.781635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  254.846285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  254.848986] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  254.851870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  254.857845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  254.865841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  254.981341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  254.986650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  254.989979] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  255.005835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  255.016778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  255.037144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  255.040605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  255.049636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  255.055567] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  255.074672] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  255.145542] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  255.154020] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  255.156640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  255.166662] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  255.169154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  255.202301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  255.245187] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  255.251950] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  255.262668] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  255.270100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  255.273757] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  255.276519] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  255.282132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  255.289087] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  255.299839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  255.307032] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  255.312640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  255.324131] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  255.337609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  255.371193] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  256.862614] Bluetooth: hci0: command tx timeout
[  256.924660] Bluetooth: hci1: command tx timeout
[  257.116606] Bluetooth: hci2: command tx timeout
[  257.180473] Bluetooth: hci3: command tx timeout
[  257.244631] Bluetooth: hci4: command tx timeout
[  257.372970] Bluetooth: hci5: command tx timeout
[  257.436635] Bluetooth: hci6: command tx timeout
[  257.500850] Bluetooth: hci7: command tx timeout
[  258.908475] Bluetooth: hci0: command tx timeout
[  258.974407] Bluetooth: hci1: command tx timeout
[  259.164647] Bluetooth: hci2: command tx timeout
[  259.230641] Bluetooth: hci3: command tx timeout
[  259.292545] Bluetooth: hci4: command tx timeout
[  259.420503] Bluetooth: hci5: command tx timeout
[  259.484643] Bluetooth: hci6: command tx timeout
[  259.548461] Bluetooth: hci7: command tx timeout
[  260.957629] Bluetooth: hci0: command tx timeout
[  261.020467] Bluetooth: hci1: command tx timeout
[  261.212448] Bluetooth: hci2: command tx timeout
[  261.276807] Bluetooth: hci3: command tx timeout
[  261.340450] Bluetooth: hci4: command tx timeout
[  261.468454] Bluetooth: hci5: command tx timeout
[  261.532489] Bluetooth: hci6: command tx timeout
[  261.596532] Bluetooth: hci7: command tx timeout
[  263.005410] Bluetooth: hci0: command tx timeout
[  263.068474] Bluetooth: hci1: command tx timeout
[  263.260708] Bluetooth: hci2: command tx timeout
[  263.324434] Bluetooth: hci3: command tx timeout
[  263.388682] Bluetooth: hci4: command tx timeout
[  263.516596] Bluetooth: hci5: command tx timeout
[  263.580775] Bluetooth: hci6: command tx timeout
[  263.644811] Bluetooth: hci7: command tx timeout
[  318.070939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  318.077918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  318.083750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  318.097074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  318.104024] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  318.257226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  318.263967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  318.266674] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  318.278917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  318.289154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  318.356327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  318.362213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  318.373910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  318.385608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  318.402925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  318.549949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  318.557873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  318.563817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  318.577297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  318.595761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  318.643001] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  318.647860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  318.653998] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  318.661055] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  318.672711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  318.677512] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  318.684987] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  318.688199] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  318.698934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  318.703903] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  318.711684] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  318.719258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  318.723940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  318.731614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  318.767551] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  319.029573] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  319.054933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  319.108913] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  319.158231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  319.166216] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  320.156965] Bluetooth: hci0: command tx timeout
[  320.349456] Bluetooth: hci1: command tx timeout
[  320.476648] Bluetooth: hci2: command tx timeout
[  320.796864] Bluetooth: hci5: command tx timeout
[  320.796891] Bluetooth: hci4: command tx timeout
[  320.860470] Bluetooth: hci6: command tx timeout
[  320.989024] Bluetooth: hci3: command tx timeout
[  321.309526] Bluetooth: hci7: command tx timeout
[  322.205677] Bluetooth: hci0: command tx timeout
[  322.397924] Bluetooth: hci1: command tx timeout
[  322.525488] Bluetooth: hci2: command tx timeout
[  322.844528] Bluetooth: hci4: command tx timeout
[  322.845598] Bluetooth: hci5: command tx timeout
[  322.909873] Bluetooth: hci6: command tx timeout
[  323.038455] Bluetooth: hci3: command tx timeout
[  323.357282] Bluetooth: hci7: command tx timeout
[  324.252628] Bluetooth: hci0: command tx timeout
[  324.444864] Bluetooth: hci1: command tx timeout
[  324.573670] Bluetooth: hci2: command tx timeout
[  324.894923] Bluetooth: hci4: command tx timeout
[  324.896650] Bluetooth: hci5: command tx timeout
[  324.958086] Bluetooth: hci6: command tx timeout
[  325.084513] Bluetooth: hci3: command tx timeout
[  325.404546] Bluetooth: hci7: command tx timeout
[  326.300875] Bluetooth: hci0: command tx timeout
[  326.492477] Bluetooth: hci1: command tx timeout
[  326.620760] Bluetooth: hci2: command tx timeout
[  326.940643] Bluetooth: hci4: command tx timeout
[  326.941142] Bluetooth: hci5: command tx timeout
[  327.004482] Bluetooth: hci6: command tx timeout
[  327.132466] Bluetooth: hci3: command tx timeout
[  327.453024] Bluetooth: hci7: command tx timeout
[  380.404572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  380.408943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  380.411564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  380.418096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  380.423193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  380.550135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  380.555907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  380.559865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  380.568221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  380.577691] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  380.646428] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  380.651594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  380.653760] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  380.665793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  380.672220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  380.733316] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  380.750854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  380.754875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  380.777798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  380.785271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  380.796784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  380.803972] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  380.812331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  380.821286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  380.826050] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  380.828685] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  380.848170] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  380.850009] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  380.855737] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  380.866962] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  380.868340] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  380.873506] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  380.879671] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  380.904622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  380.920918] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  381.090832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  381.109160] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  381.112914] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  381.130896] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  381.144810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  382.493050] Bluetooth: hci0: command tx timeout
[  382.620446] Bluetooth: hci1: command tx timeout
[  382.748811] Bluetooth: hci2: command tx timeout
[  382.876485] Bluetooth: hci3: command tx timeout
[  382.940565] Bluetooth: hci4: command tx timeout
[  383.068486] Bluetooth: hci6: command tx timeout
[  383.132694] Bluetooth: hci5: command tx timeout
[  383.196472] Bluetooth: hci7: command tx timeout
[  384.542459] Bluetooth: hci0: command tx timeout
[  384.669711] Bluetooth: hci1: command tx timeout
[  384.797472] Bluetooth: hci2: command tx timeout
[  384.926706] Bluetooth: hci3: command tx timeout
[  384.989603] Bluetooth: hci4: command tx timeout
[  385.116456] Bluetooth: hci6: command tx timeout
[  385.180448] Bluetooth: hci5: command tx timeout
[  385.244668] Bluetooth: hci7: command tx timeout
[  386.590405] Bluetooth: hci0: command tx timeout
[  386.718766] Bluetooth: hci1: command tx timeout
[  386.845809] Bluetooth: hci2: command tx timeout
[  386.972621] Bluetooth: hci3: command tx timeout
[  387.037526] Bluetooth: hci4: command tx timeout
[  387.165763] Bluetooth: hci6: command tx timeout
[  387.229578] Bluetooth: hci5: command tx timeout
[  387.295462] Bluetooth: hci7: command tx timeout
[  388.636630] Bluetooth: hci0: command tx timeout
[  388.764444] Bluetooth: hci1: command tx timeout
[  388.892448] Bluetooth: hci2: command tx timeout
[  389.022642] Bluetooth: hci3: command tx timeout
[  389.084433] Bluetooth: hci4: command tx timeout
[  389.213534] Bluetooth: hci6: command tx timeout
[  389.277542] Bluetooth: hci5: command tx timeout
[  389.340593] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
15:53:23  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=00007ffd16342528 RCX=ffffffff86799a1a RDX=ffff8880321b0000
RSI=0000000000000001 RDI=ffff8880321af8f8 RBP=ffff8880321a8000 RSP=ffff8880321af870
R8 =ffffffff86799a1e R9 =0000000000000000 R10=000000000003b67d R11=0000000000000003
R12=0000000000000001 R13=ffff8880321af930 R14=ffff8880321aff58 R15=ffff8880321af8e8
RIP=ffffffff84b3c9e6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f04fb8d72f0 CR3=0000000026b00000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff8687bdf4 RBX=0000000000000001 RCX=ffffffff8687bdf4 RDX=0000000000000000
RSI=ffffffff8687bdf4 RDI=ffffffff864f560c RBP=ffff888016bef2e0 RSP=ffff888016bef218
R8 =ffffffff8687bdf4 R9 =0000000000000000 R10=000000000003b67d R11=0000000000025b52
R12=ffff888016bef2e8 R13=ffff888016bef2d0 R14=ffff888016bef2c9 R15=ffff888016bef288
RIP=ffffffff81353f86 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f25451661f0 CR3=0000000036a60000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000