Warning: Permanently added '[localhost]:20349' (ECDSA) to the list of known hosts.
2025/05/25 20:33:43 fuzzer started
2025/05/25 20:33:43 dialing manager at localhost:46087
syzkaller login: [  118.086253] cgroup: Unknown subsys name 'net'
[  118.251162] cgroup: Unknown subsys name 'cpuset'
[  118.304695] cgroup: Unknown subsys name 'rlimit'
2025/05/25 20:34:05 syscalls: 2214
2025/05/25 20:34:05 code coverage: enabled
2025/05/25 20:34:05 comparison tracing: enabled
2025/05/25 20:34:05 extra coverage: enabled
2025/05/25 20:34:05 setuid sandbox: enabled
2025/05/25 20:34:05 namespace sandbox: enabled
2025/05/25 20:34:05 Android sandbox: enabled
2025/05/25 20:34:05 fault injection: enabled
2025/05/25 20:34:05 leak checking: enabled
2025/05/25 20:34:05 net packet injection: enabled
2025/05/25 20:34:05 net device setup: enabled
2025/05/25 20:34:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/25 20:34:05 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/25 20:34:05 USB emulation: enabled
2025/05/25 20:34:05 hci packet injection: enabled
2025/05/25 20:34:05 wifi device emulation: enabled
2025/05/25 20:34:05 802.15.4 emulation: enabled
2025/05/25 20:34:05 fetching corpus: 0, signal 0/0 (executing program)
2025/05/25 20:34:08 starting 8 fuzzer processes
20:34:08 executing program 0:
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xe0000)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000000))
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x83000000, 0x7a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x24000001}, 0x20008000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x50}, 0x1, 0x0, 0x0, 0x24044010}, 0x200400c0)
r1 = syz_open_dev$hiddev(&(0x7f0000000300), 0xffffffff, 0x840)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000340)=0x8)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xf1fe2c95d56c8a15}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x10)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x22003, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000500))
fcntl$setstatus(r2, 0x4, 0x800)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x90, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ebb4747}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4055}, 0x40000)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x94, r0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}}, 0x1)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000880)={{{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x3, 0x4e23, 0x39, 0xa, 0x80, 0x80, 0x3c, 0x0, 0xee01}, {0x32, 0x5, 0x80000000, 0x6, 0x1, 0x7, 0x4, 0x9f9}, {0x5f0bba99, 0x61, 0x7, 0x47}, 0x6, 0x6e6bb0, 0x1, 0x1, 0x1}, {{@in=@private=0xa010102, 0x4d2, 0x32}, 0x2, @in6=@empty, 0x3504, 0x1, 0x1, 0xd5, 0x40, 0xffffbb66, 0xa93}}, 0xe8)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5efb}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6c8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7db}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfffffffd}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x59}, @NFULA_CFG_MODE={0xa, 0x2, {0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000ac0))
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
fcntl$getownex(r4, 0x10, &(0x7f0000000b00))

20:34:08 executing program 1:
r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x4}, 0xbb2})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000000c0)={0x0, 'veth1_to_hsr\x00', {0x3}, 0x44b3})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r3=>0x0, <r4=>0x0})
timerfd_settime(r2, 0x1, &(0x7f0000000180)={{r3, r4+10000000}, {0x77359400}}, &(0x7f00000001c0))
r5 = signalfd(r2, &(0x7f0000000200)={[0x1]}, 0x8)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0)
syz_open_dev$rtc(&(0x7f0000000240), 0x7f, 0x10800)
openat$cgroup_pressure(r2, &(0x7f0000000280)='io.pressure\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg1\x00'})
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x81901)
write$cgroup_devices(r6, &(0x7f0000000340)={'a', ' *:* ', 'rm\x00'}, 0x9)
r7 = syz_open_dev$mouse(&(0x7f0000000380), 0x4c, 0x109000)
setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f00000003c0)=0x1, 0x4)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x1c880, 0x0)
fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f0000000440))
pipe(&(0x7f0000000480)={<r9=>0xffffffffffffffff})
ioctl$EVIOCGLED(r9, 0x80404519, &(0x7f00000004c0)=""/21)

20:34:08 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f00000001c0))
tee(r0, r0, 0x1, 0x6)
fadvise64(r1, 0x8000, 0x6, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0x8, 0x5, {0xfffffffffffffff8, @struct={0x7fffffff, 0x5}, 0x0, 0x968, 0x0, 0x8, 0x97a, 0x81, 0x60, @struct={0x3}, 0x6, 0x6, [0x36, 0x3, 0xbcba, 0x101, 0xffffffffffffff00, 0x8001]}, {0x2, @struct={0x1ff, 0x7fffffff}, 0x0, 0x6, 0x401, 0x7fffffff, 0x0, 0x1, 0x4, @struct={0x8}, 0x4, 0x8, [0x28b4, 0x2, 0x8, 0x664, 0x100, 0x80000000]}, {0x7fff, @struct={0x5, 0xf7a}, <r2=>0x0, 0x0, 0x0, 0x10000000000, 0xa5, 0x3ff, 0x0, @usage=0x1e08000, 0x1, 0x5, [0x226d, 0x1000, 0x7e, 0x8, 0x20, 0xffffffff80000000]}, {0x1, 0x8000, 0x100000000}})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000600)={0x5, 0x6, {0x3, @struct={0x5, 0x4a9}, r2, 0xfffffffffffffffd, 0x8f9, 0xfffffffeffffffff, 0x2, 0x6, 0x421, @usage=0x10000, 0x59854501, 0x4, [0x3b9e, 0xce, 0x2, 0x7, 0x2]}, {0x5, @struct={0x1ff, 0x2}, 0x0, 0x7, 0x9, 0x100000000, 0x9bf6, 0x6, 0xc1, @struct={0xe00, 0x9}, 0x6c3f, 0xfff, [0x7, 0x5, 0x400, 0x2, 0x20, 0x100]}, {0x8000, @usage=0x2, 0x0, 0x7ff, 0x200, 0x0, 0x30000000000, 0x3, 0x12, @struct={0x4, 0xfff}, 0xffffff20, 0xf988, [0x6, 0x5, 0x1, 0x1000000000000, 0x3, 0x9]}, {0x101, 0xfffffffffffffff7, 0xee}})
r3 = dup3(r1, r0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x400, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@fscache}, {@cache_mmap}, {@access_user}, {@afid={'afid', 0x3d, 0xfffffffffffffbe4}}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@debug={'debug', 0x3d, 0xff}}, {@cache_fscache}, {@dfltgid}], [{@appraise_type}, {@obj_user}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}})
r4 = syz_mount_image$nfs(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x0, 0x7, &(0x7f0000001180)=[{&(0x7f0000000c40)="dac8520c6d810a5385ca3c957d5eba35358d563f84e1b12c27630a789d1e2174cdef52a9106462b63411db22614b5afea179a9e53fee6778e4a34536014d9f79dbea92c80345dce193fbb4a61f5c35b417f70fdcc244ec244a08ffdbd31aed30115a1374fb9884bb2b8c4660d0bf0992a58509a7f444852b877cdf5b6f7bc9d849f6c6047f1a76685cc6fa808971b2fa3f6bcaefca64e77b9e96de0b3eab244cab1b43a9010e5a6660aa7ed40599953452c9283a07b76a3bc78144b2f88e82251e", 0xc1, 0x6}, {&(0x7f0000000d40)="a279c8d1391e9b7c4a7a0caade0ff4b24859adbd60d63cf1d28f8aade18e5f066ec570ead9a0ba1a08cfa4fff8394c7f24d5ccbd36cf0a9a8ca22b76153a374ee7c9452826e4d0385febe2cb3a279cc8f185b73089e960412f60167100e45e01507700ea863318f32cf3bd21e141dfca871e378b23a5fd276807bdb583e579ffb1a23878fdbd189cd261cd0832776d5697735334d4a96028609398cf043f691b775ddfedca950b7fd3c9b05e4b19b92690bbf242854644a177c927ff5b97aee3c376df30253f6e35228efaac849a76de104e33ef3d452f7c58ef2ebfa32ad6a230ec5c521ebdf7ce6240571baea72fc621bf", 0xf2, 0x100}, {&(0x7f0000000e40)="653189a176de6c722ca26d4b49890d2fc47f52063302cd6256e5a025bf9bb2989c7dd703288d4992351a39f2d0c68c8168c74a38449e324261bdc93a95a56caf26baf6542845737269f4b7ce3615a2d9ecfc20ba0735933218e3cd909f180b9c85d649523f73b777baee6c648bfbcc16788372113febc660bf12c6c9b875ab7019e282d8a1fa9a19331a2911b155d52fcc8896d499daeae36156ec7ff265246e3a893dcbf221d309d0928fdf95b5b7d31db0b56c907e81d57d0ceb09d86e2673c1c2aed0ee386bde548ddf44e61b21ae67edc210928709ade07ec4b84920b457fdf2617b", 0xe4, 0x8}, {&(0x7f0000000f40)="f9467368cbf0048f4e20ab2fc72f6d0bee082876b453b333625b53681fafe91c19d26e4858d9aab7b428f3bdc7e1a76b45943f5012aedff5bb63fafc4eebc7979b642a66a263006452a2be6c55d1e03f859eeb0936827622b199ee1d0647fb52fd8d5ecda6b6dd25311ba98a266af877dcec", 0x72, 0x80000000}, {&(0x7f0000000fc0)="fe656c367f4ada1925b57b95cafb9a982175d7902a5e371b8679f707e27980045bb13a5fcde0d1881aaa69522f01fd76c7574f0325c39e53814c4407c0e5bb621f130a452724dfdd47efa8612505bd78d90492baf2d00ff6cb29d3010fb7bc077f6c5bb024de35cb2c485403a179580d6ff701fa8b07adeed8d6324c67c2c134bf", 0x81, 0x4}, {&(0x7f0000001080)="edbd8a755fb8137d2df9c9fdab9a5ada0b37cf2f6daac57d8b1d92c5798ac2d2d9d4006c6d59f31646aaa5f62ebd919b9548b370589b779fd2eeed2115a168233afd974856d3cbb12eeb8b30f714f4545926458dd607828e1bbf738fd70ee8de4325e529a6e9d258cd4719ce283b3d3e4333d83f7e9c10881cb6c9d843c066fa5f652c70210e152ae3544a0c5b3ee58db2c1335298f289e42b568f1082fa24c39dee4142402618b246bd", 0xaa, 0x7}, {&(0x7f0000001140)="406560a7574771e8304c07d15cd9402c6d4865c1c81a4f9537f7d7d6c73cea7acdc5f2b3647974ef93f2ff1e7eccdb0d44ac46134fa283", 0x37, 0x7f}], 0x2021010, &(0x7f0000001240)={[{'!,%))'}, {}], [{@euid_gt={'euid>', 0xee01}}, {@dont_appraise}]})
[  142.106847] audit: type=1400 audit(1748205248.215:7): avc:  denied  { execmem } for  pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000001280)={0x66c, 0x100000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r5 = open_tree(r3, &(0x7f000000acc0)='./file0\x00', 0x1)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f000000ad40), r1)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f000000ae00)={&(0x7f000000ad00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f000000adc0)={&(0x7f000000ad80)={0x24, r6, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x800)
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f000000ae40)={{0x1, 0x1, 0x18, r4, {0xcb4c}}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f000000ae80)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f000000aec0)={@dev={0xac, 0x14, 0x14, 0xb}, @empty, r7}, 0xc)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff)

20:34:08 executing program 3:
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x401, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000100)=@generic={0x3, 0x2, 0x80000000})
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20044000)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x44084}, 0x8810)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x40080, 0x0)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x5, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000041}, 0x4000080)
clock_gettime(0x0, &(0x7f00000005c0)={<r1=>0x0, <r2=>0x0})
io_getevents(0x0, 0x0, 0x8, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000600)={r1, r2+10000000})
io_setup(0x7f, &(0x7f0000000640)=<r3=>0x0)
io_pgetevents(r3, 0x6a5af10d, 0x6, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000740), &(0x7f00000007c0)={&(0x7f0000000780)={[0x40]}, 0x8})
recvmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000800)=""/27, 0x1b}, {&(0x7f0000000840)=""/254, 0xfe}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000000a40)=""/137, 0x89}, {&(0x7f0000000b00)=""/234, 0xea}, {&(0x7f0000000c00)=""/146, 0x92}], 0x6, &(0x7f0000000d40)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @rights={{0x24, 0x1, 0x1, [<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff]}}], 0xe0}, 0x1)
ioprio_get$pid(0x3, r5)
write$P9_RFLUSH(r9, &(0x7f0000000e80)={0x7, 0x6d, 0x2}, 0x7)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), r8)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f00000011c0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000000f40)={0x21c, r12, 0x20, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000080}, 0x10)
sendmsg$NL80211_CMD_LEAVE_OCB(r10, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x840)
syz_emit_vhci(&(0x7f0000001300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x7, 0xa}, {0x200, 0x1, 0x8, 0x2, 0x3}}}}, 0x17)
sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xd0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffeffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x24}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x27}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x333f8f0d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x72}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x87}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2efa}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x200, &(0x7f0000001500)=""/248)
ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000001600))

20:34:08 executing program 4:
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x13)
socketpair(0x11, 0x801, 0x7, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/hibernate', 0x402100, 0xfe8567c8ee9aa26e)
r2 = gettid()
statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={r2, r3, 0xee01}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {<r4=>r1}}, './file0\x00'})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f00000002c0)={@desc={0x1, 0x0, @auto="7f4619f56b62ee48"}})
r5 = syz_io_uring_complete(0x0)
sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x92}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x40}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x11}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8e}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x40000080)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r4)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000700)={&(0x7f0000000440), 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1f0, r6, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @private2, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xba24, @loopback, 0x6}}}}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x8810}, 0x40)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r8, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r9, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000}, 0x8084)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r9)
sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r10, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x404c0)

20:34:08 executing program 5:
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0xff, 0xfffa, 0x3, 0x8, 0xb, "448ba1b6f20263a3"})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x200)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000000c0)={0x3, 0x52, 0x2, 0x18, 0x398})
getcwd(&(0x7f0000000100)=""/122, 0x7a)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x2)
pread64(r0, &(0x7f0000000200)=""/200, 0xc8, 0x5)
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000300))
sendmsg(r1, &(0x7f0000000580)={&(0x7f0000000340)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)="36c46270e4f964e420c64b85e77fe06b157d510260efe0f065ce93e313f95c8506985472c4c437af08712c5cbe33d9be65bb29abd9dcebdcad", 0x39}], 0x1, &(0x7f0000000440)=[{0x10, 0x118, 0x4}, {0x50, 0x118, 0x0, "0b3b5acec520ec0834a2ea0690933ede19ab02474a1768d035b05b311a2194bb627fe2f072cf057ffecc7e489248d3a7ad6bae9ac2271b1681a896"}, {0x18, 0x116, 0x7d1, "58fba356502524"}, {0x28, 0x113, 0x9, "cdf2d5f45388d6d97de252c424e2bcaab662bf6a7ca4e722"}, {0x88, 0x119, 0x1, "b45412ac7a6c3d6dcae34c7a23bcc9fafbfc3f0d0bb6008df04688ca4f6875a494cdb8cadabd270fdafec6728fe9bcab2d449f636d6c811dce1de9cac1af4c9986a009bcb042e13a99515ce796da7e1a012ce8390f884300d5b8b57832933dd244fd3ec54d34f8b11f2b9697d8aeb2dc62b35a"}], 0x128}, 0x40810)
syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r1)
r2 = syz_open_dev$mouse(&(0x7f0000000600), 0x2, 0x1)
ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000640))
r3 = syz_io_uring_complete(0x0)
ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000000740)={"9d17a9efc43d1e38bb968540", &(0x7f0000000680), 0x0, 0xb03, &(0x7f00000006c0)={0x4, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, "f44c6bfc", 0x8, "1e5bad77", 0x81, 0x2, 0x80, "19b16c", "f6fb5846e4e79a61bed97fd1396429072ad1bcc882e579eba13571a2e07bc24f215883d3fc95554b07a45ae22d5c"}, 0x2, 0x3ff, 0xfffff001, &(0x7f0000000700)})
r4 = dup2(r2, 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000780)={0x1})
ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000007c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x95, 0x0, 0x4, 0x400, 0x400, 0x100004})
write$sndseq(0xffffffffffffffff, &(0x7f0000000880)=[{0x9, 0x8f, 0x1, 0x4, @time={0x0, 0x2}, {0x5, 0xff}, {0x3f, 0x6}, @raw32={[0x63, 0x3, 0x527]}}, {0x5, 0x0, 0x6, 0x4, @tick=0xfffffffb, {0x5, 0x3}, {0x7, 0x8}, @result={0x3, 0x10000}}, {0x3f, 0x0, 0x6, 0x20, @tick, {0x1, 0x40}, {0x20, 0x3}, @addr={0x7, 0x3f}}, {0x0, 0x8, 0x8e, 0x61, @tick=0x4, {0x80, 0x9}, {0x6, 0x7}, @control={0x3f, 0xb7, 0x1}}], 0x70)

20:34:08 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/virtio_pci', 0x4000, 0x10)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="1d6189d62480902d227dc700c32a6731", 0x10)
socket$inet_icmp(0x2, 0x2, 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0xc0, 0xfff, 0x60, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x1, 0x7, 0xffff, 0x7}})
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0xc000)
ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000280))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82c082, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x50, r1, 0x5d268000)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x440, 0xc, 0x2}, 0x18)
getdents64(r2, &(0x7f0000000380)=""/128, 0x80)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000400)={0x9, 0x42})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000007c0)={0x80, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@fda={0x66646185, 0xa, 0x1, 0x16}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/137, 0x89, 0x2, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/15, 0xf, 0x0, 0x22}}, &(0x7f0000000600)={0x0, 0x20, 0x48}}}, @exit_looper, @request_death={0x400c630e, 0x2}, @request_death={0x400c630e, 0x3}, @increfs_done, @register_looper], 0xe1, 0x0, &(0x7f00000006c0)="9af1f836579532857314e85d850d9c6b4a85dd3a76a216e531b8ae0a91a5afeadf8d413b48be11560ca0b26a7ab0ad36dc38bb119f7bb56a3716b4a960e3887091d0ff5538847660f19917eb230ea27bff1a5c8c22ec9d8091819060c33bc6adde953f3399ce20c60dd9cbf53614c75d14f24b894d1a50708391a7cae0df2c47890e6938ab80327ae751d48e0363c86ead0f5be395697681ba855ea4ad5a936635d3c4f198ac51b125dedf59a1ad2a45592a9c1a054944a097d5897abe8487e965256fcebc4a39060717ddd9b5452e8fac8c6294c93fc4a81f3b262fbc239de3ba"})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000900)={<r4=>r1, 0x3, 0x1, 0x2})
r5 = openat(r4, &(0x7f0000000940)='./file0\x00', 0x4181, 0x50)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0)
r6 = open_tree(r2, &(0x7f0000000980)='./file0\x00', 0x81100)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xe54187d6403da68e}, 0x0)

20:34:08 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0xc10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0xc080)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x20000080)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x38d9bca1ff991099}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xc0, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70be6deb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cdd7732}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49025e17}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42cd8361}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x170e2c17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e1420d3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x246bb4ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x681f46ab}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x8804)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x44800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r4)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan3\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x814}, 0x0)
ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x7)
r6 = creat(&(0x7f00000006c0)='./file0\x00', 0x2)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r7, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x40094)
r8 = accept$inet6(0xffffffffffffffff, &(0x7f0000000840)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000880)=0x1c)
fcntl$dupfd(r6, 0x0, r8)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x60, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2a}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x4c080)

[  143.686193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  143.689279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  143.696447] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  143.707334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  143.716557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  143.820346] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  143.825405] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  143.828115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  143.833451] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  143.838943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  143.863177] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.869364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.892264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.902396] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  143.905182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  143.911410] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.916259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  143.932348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  143.934091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.940004] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  143.960206] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  143.962611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  143.986808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  143.994328] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  144.000317] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  144.002946] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  144.014250] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  144.020408] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  144.033158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  144.034902] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  144.044373] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  144.048310] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  144.052015] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  144.054296] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  144.058195] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  144.076250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  144.092641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  144.095868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  144.111253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  144.117521] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  145.770255] Bluetooth: hci0: command tx timeout
[  145.897939] Bluetooth: hci1: command tx timeout
[  146.024960] Bluetooth: hci2: command tx timeout
[  146.089040] Bluetooth: hci3: command tx timeout
[  146.152859] Bluetooth: hci5: command tx timeout
[  146.152961] Bluetooth: hci7: command tx timeout
[  146.217880] Bluetooth: hci6: command tx timeout
[  146.217898] Bluetooth: hci4: command tx timeout
[  147.818069] Bluetooth: hci0: command tx timeout
[  147.945801] Bluetooth: hci1: command tx timeout
[  148.072998] Bluetooth: hci2: command tx timeout
[  148.137044] Bluetooth: hci3: command tx timeout
[  148.202747] Bluetooth: hci5: command tx timeout
[  148.203176] Bluetooth: hci7: command tx timeout
[  148.265304] Bluetooth: hci6: command tx timeout
[  148.266114] Bluetooth: hci4: command tx timeout
[  149.864917] Bluetooth: hci0: command tx timeout
[  149.993766] Bluetooth: hci1: command tx timeout
[  150.121083] Bluetooth: hci2: command tx timeout
[  150.185285] Bluetooth: hci3: command tx timeout
[  150.248981] Bluetooth: hci7: command tx timeout
[  150.249013] Bluetooth: hci5: command tx timeout
[  150.312782] Bluetooth: hci4: command tx timeout
[  150.314511] Bluetooth: hci6: command tx timeout
[  151.913885] Bluetooth: hci0: command tx timeout
[  152.040796] Bluetooth: hci1: command tx timeout
[  152.169810] Bluetooth: hci2: command tx timeout
[  152.236397] Bluetooth: hci3: command tx timeout
[  152.297580] Bluetooth: hci5: command tx timeout
[  152.297858] Bluetooth: hci7: command tx timeout
[  152.361002] Bluetooth: hci6: command tx timeout
[  152.361080] Bluetooth: hci4: command tx timeout
[  206.146461] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  206.151355] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  206.154528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  206.161216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  206.167203] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  206.286018] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  206.292192] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  206.304034] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  206.323833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  206.343440] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  206.359475] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  206.366760] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  206.383325] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  206.395233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  206.405123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  206.511919] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  206.515332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  206.518046] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  206.536124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  206.545558] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  206.553006] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  206.564095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  206.568647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  206.577940] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  206.579859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  206.582235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  206.586862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  206.596389] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  206.598645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  206.603317] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  206.624843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  206.631528] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  206.639232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  206.651596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  206.659758] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  206.667403] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  206.672652] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  206.693354] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  206.748861] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  206.793408] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  208.233911] Bluetooth: hci0: command tx timeout
[  208.490098] Bluetooth: hci2: command tx timeout
[  208.490129] Bluetooth: hci1: command tx timeout
[  208.617850] Bluetooth: hci4: command tx timeout
[  208.681137] Bluetooth: hci3: command tx timeout
[  208.745816] Bluetooth: hci5: command tx timeout
[  208.810798] Bluetooth: hci6: command tx timeout
[  208.873013] Bluetooth: hci7: command tx timeout
[  210.283755] Bluetooth: hci0: command tx timeout
[  210.536980] Bluetooth: hci1: command tx timeout
[  210.540743] Bluetooth: hci2: command tx timeout
[  210.664851] Bluetooth: hci4: command tx timeout
[  210.729238] Bluetooth: hci3: command tx timeout
[  210.793855] Bluetooth: hci5: command tx timeout
[  210.857779] Bluetooth: hci6: command tx timeout
[  210.921001] Bluetooth: hci7: command tx timeout
[  212.328811] Bluetooth: hci0: command tx timeout
[  212.585590] Bluetooth: hci2: command tx timeout
[  212.586588] Bluetooth: hci1: command tx timeout
[  212.712829] Bluetooth: hci4: command tx timeout
[  212.777663] Bluetooth: hci3: command tx timeout
[  212.841607] Bluetooth: hci5: command tx timeout
[  212.905981] Bluetooth: hci6: command tx timeout
[  212.968919] Bluetooth: hci7: command tx timeout
[  214.377901] Bluetooth: hci0: command tx timeout
[  214.633798] Bluetooth: hci1: command tx timeout
[  214.634413] Bluetooth: hci2: command tx timeout
[  214.761000] Bluetooth: hci4: command tx timeout
[  214.824800] Bluetooth: hci3: command tx timeout
[  214.888887] Bluetooth: hci5: command tx timeout
[  214.952822] Bluetooth: hci6: command tx timeout
[  215.016798] Bluetooth: hci7: command tx timeout
[  268.350433] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  268.357091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  268.363883] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  268.369813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  268.376830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  268.548387] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  268.552290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  268.559236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  268.568678] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  268.577284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  268.629767] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  268.649094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  268.660236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  268.709294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  268.723686] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  268.733522] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  268.737094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  268.740924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  268.749981] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  268.754473] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  268.764670] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  268.770543] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  268.773994] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  268.798402] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  268.811568] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  268.843157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  268.849530] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  268.863253] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  268.919172] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  268.947159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  269.045735] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  269.074332] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  269.077483] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  269.099265] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  269.129741] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  269.228609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  269.258432] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  269.264364] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  269.296344] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  269.316443] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  270.441780] Bluetooth: hci0: command tx timeout
[  270.633229] Bluetooth: hci1: command tx timeout
[  270.825757] Bluetooth: hci4: command tx timeout
[  270.953020] Bluetooth: hci3: command tx timeout
[  271.144817] Bluetooth: hci2: command tx timeout
[  271.144825] Bluetooth: hci5: command tx timeout
[  271.209772] Bluetooth: hci6: command tx timeout
[  271.465054] Bluetooth: hci7: command tx timeout
[  272.490319] Bluetooth: hci0: command tx timeout
[  272.680934] Bluetooth: hci1: command tx timeout
[  272.872901] Bluetooth: hci4: command tx timeout
[  273.001354] Bluetooth: hci3: command tx timeout
[  273.194772] Bluetooth: hci2: command tx timeout
[  273.194815] Bluetooth: hci5: command tx timeout
[  273.257166] Bluetooth: hci6: command tx timeout
[  273.513097] Bluetooth: hci7: command tx timeout
[  274.538733] Bluetooth: hci0: command tx timeout
[  274.728993] Bluetooth: hci1: command tx timeout
[  274.920793] Bluetooth: hci4: command tx timeout
[  275.048965] Bluetooth: hci3: command tx timeout
[  275.240774] Bluetooth: hci5: command tx timeout
[  275.241159] Bluetooth: hci2: command tx timeout
[  275.305793] Bluetooth: hci6: command tx timeout
[  275.561118] Bluetooth: hci7: command tx timeout
[  276.585787] Bluetooth: hci0: command tx timeout
[  276.776820] Bluetooth: hci1: command tx timeout
[  276.971012] Bluetooth: hci4: command tx timeout
[  277.096774] Bluetooth: hci3: command tx timeout
[  277.289055] Bluetooth: hci5: command tx timeout
[  277.289552] Bluetooth: hci2: command tx timeout
[  277.352800] Bluetooth: hci6: command tx timeout
[  277.608763] Bluetooth: hci7: command tx timeout
[  331.003030] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  331.015045] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  331.019626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  331.034258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  331.040101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  331.094151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  331.098776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  331.103123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  331.110000] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  331.117197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  331.163262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  331.168349] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  331.182664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  331.190649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  331.200214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  331.270972] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  331.294381] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  331.298907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  331.305951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  331.331622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  331.339631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  331.343257] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  331.348225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  331.359069] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  331.379595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  331.389733] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  331.469629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  331.477197] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  331.487900] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  331.495511] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  331.510456] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  331.521202] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  331.528364] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  331.542270] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  331.557445] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  331.560070] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  331.582078] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  331.584773] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  331.629370] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  331.638682] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  333.096825] Bluetooth: hci0: command tx timeout
[  333.161379] Bluetooth: hci1: command tx timeout
[  333.290159] Bluetooth: hci2: command tx timeout
[  333.482034] Bluetooth: hci4: command tx timeout
[  333.482065] Bluetooth: hci3: command tx timeout
[  333.673807] Bluetooth: hci6: command tx timeout
[  333.673889] Bluetooth: hci5: command tx timeout
[  333.736858] Bluetooth: hci7: command tx timeout
[  335.145912] Bluetooth: hci0: command tx timeout
[  335.212768] Bluetooth: hci1: command tx timeout
[  335.338120] Bluetooth: hci2: command tx timeout
[  335.528833] Bluetooth: hci4: command tx timeout
[  335.528870] Bluetooth: hci3: command tx timeout
[  335.721313] Bluetooth: hci5: command tx timeout
[  335.722929] Bluetooth: hci6: command tx timeout
[  335.786055] Bluetooth: hci7: command tx timeout
[  337.193278] Bluetooth: hci0: command tx timeout
[  337.256816] Bluetooth: hci1: command tx timeout
[  337.385787] Bluetooth: hci2: command tx timeout
[  337.577086] Bluetooth: hci4: command tx timeout
[  337.577590] Bluetooth: hci3: command tx timeout
[  337.768879] Bluetooth: hci5: command tx timeout
[  337.768898] Bluetooth: hci6: command tx timeout
[  337.833788] Bluetooth: hci7: command tx timeout
[  339.243740] Bluetooth: hci0: command tx timeout
[  339.306042] Bluetooth: hci1: command tx timeout
[  339.432845] Bluetooth: hci2: command tx timeout
[  339.625402] Bluetooth: hci4: command tx timeout
[  339.625767] Bluetooth: hci3: command tx timeout
[  339.816968] Bluetooth: hci6: command tx timeout
[  339.819081] Bluetooth: hci5: command tx timeout
[  339.882040] Bluetooth: hci7: command tx timeout
[  393.406603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  393.411578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  393.418763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  393.428650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  393.436445] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  393.554419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  393.559623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  393.563258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  393.569550] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  393.574263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  393.641862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  393.655473] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  393.666405] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  393.673814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  393.681238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  393.698035] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  393.701000] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  393.705254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  393.711175] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  393.711476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  393.717271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  393.794583] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  393.795620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  393.799403] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  393.802404] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  393.805291] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  393.808157] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  393.811883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  393.818605] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  393.823219] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  393.827438] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  393.830984] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  393.831642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  393.845044] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  393.881370] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  393.890923] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  393.914007] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  393.947511] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  393.972674] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  393.979229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  395.497110] Bluetooth: hci0: command tx timeout
[  395.626383] Bluetooth: hci1: command tx timeout
[  395.817841] Bluetooth: hci2: command tx timeout
[  395.818983] Bluetooth: hci4: command tx timeout
[  395.880902] Bluetooth: hci7: command tx timeout
[  395.881917] Bluetooth: hci6: command tx timeout
[  395.945263] Bluetooth: hci3: command tx timeout
[  396.201300] Bluetooth: hci5: command tx timeout
[  397.544793] Bluetooth: hci0: command tx timeout
[  397.672823] Bluetooth: hci1: command tx timeout
[  397.865788] Bluetooth: hci4: command tx timeout
[  397.866294] Bluetooth: hci2: command tx timeout
[  397.929817] Bluetooth: hci7: command tx timeout
[  397.930308] Bluetooth: hci6: command tx timeout
[  397.992810] Bluetooth: hci3: command tx timeout
[  398.249875] Bluetooth: hci5: command tx timeout
[  399.593779] Bluetooth: hci0: command tx timeout
[  399.723932] Bluetooth: hci1: command tx timeout
[  399.914018] Bluetooth: hci4: command tx timeout
[  399.914522] Bluetooth: hci2: command tx timeout
[  399.978082] Bluetooth: hci6: command tx timeout
[  399.978576] Bluetooth: hci7: command tx timeout
[  400.041111] Bluetooth: hci3: command tx timeout
[  400.298054] Bluetooth: hci5: command tx timeout
[  401.642413] Bluetooth: hci0: command tx timeout
[  401.771027] Bluetooth: hci1: command tx timeout
[  401.961531] Bluetooth: hci2: command tx timeout
[  401.962516] Bluetooth: hci4: command tx timeout
[  402.024854] Bluetooth: hci7: command tx timeout
[  402.025817] Bluetooth: hci6: command tx timeout
[  402.089021] Bluetooth: hci3: command tx timeout
[  402.345595] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
20:39:12  Registers:
info registers vcpu 0
RAX=ffff888032d68000 RBX=ffff888038ed7750 RCX=ffffffff813560fe RDX=0000000000000001
RSI=0000000000000070 RDI=ffff888038ed76b8 RBP=ffff888032d68000 RSP=ffff888038ed7648
R8 =0000000000000005 R9 =0000000000000000 R10=ffff88800d6c5900 R11=0000000000000001
R12=0000000000000070 R13=0000000000000000 R14=ffff888032d68000 R15=ffff888038ed76b8
RIP=ffffffff81aef57c RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb93d5bc260 CR3=000000002907a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000080010000 RBX=ffff88806cf289d8 RCX=ffffffff816163f1 RDX=ffff8880390fd280
RSI=ffffffff816163fb RDI=0000000000000007 RBP=00000000000f4240 RSP=ffff88806cf08d90
R8 =0000000000000000 R9 =fffffbfff0f0a529 R10=00000067cc0c7540 R11=0000000000000001
R12=00000067cc0c7540 R13=7fffffffffffffff R14=0000000000000001 R15=00000067cbfd3300
RIP=ffffffff816163fb RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffed565cd90 CR3=0000000035fef000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000