Warning: Permanently added '[localhost]:39866' (ECDSA) to the list of known hosts.
2025/05/26 05:38:51 fuzzer started
2025/05/26 05:38:51 dialing manager at localhost:46087
syzkaller login: [   93.120781] cgroup: Unknown subsys name 'net'
[   93.258058] cgroup: Unknown subsys name 'cpuset'
[   93.296705] cgroup: Unknown subsys name 'rlimit'
2025/05/26 05:39:09 syscalls: 206
2025/05/26 05:39:09 code coverage: enabled
2025/05/26 05:39:09 comparison tracing: enabled
2025/05/26 05:39:09 extra coverage: enabled
2025/05/26 05:39:09 setuid sandbox: enabled
2025/05/26 05:39:09 namespace sandbox: enabled
2025/05/26 05:39:09 Android sandbox: enabled
2025/05/26 05:39:09 fault injection: enabled
2025/05/26 05:39:09 leak checking: enabled
2025/05/26 05:39:09 net packet injection: enabled
2025/05/26 05:39:09 net device setup: enabled
2025/05/26 05:39:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/26 05:39:09 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/26 05:39:09 USB emulation: enabled
2025/05/26 05:39:09 hci packet injection: enabled
2025/05/26 05:39:09 wifi device emulation: enabled
2025/05/26 05:39:09 802.15.4 emulation: enabled
2025/05/26 05:39:09 fetching corpus: 0, signal 0/0 (executing program)
2025/05/26 05:39:11 starting 8 fuzzer processes
05:39:11 executing program 0:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x300)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x1, 0xc371, 0x10001, 0x7, 0x2}, 0x14)
socketpair(0x27, 0x2, 0x4b, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0x4)
getresuid(&(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0), &(0x7f0000000200))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'ip6tnl0\x00', <r4=>0x0, 0x2f, 0x81, 0x3, 0x6, 0x6, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x40, 0x0, 0xffff}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001a80)={'ip6gre0\x00', &(0x7f0000001a00)={'sit0\x00', <r5=>r4, 0x4, 0x1, 0x6, 0x5, 0x8, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x8000, 0x3, 0x10001}})
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001ac0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x4e20, 0xf800, 0x4e24, 0x0, 0xa, 0x20, 0x40, 0x2c, r5, r3}, {0x5, 0x0, 0x1f, 0xfd0, 0xff, 0x4, 0x4, 0x9}, {0x800, 0x0, 0x2, 0x10000}, 0x8, 0x0, 0x1, 0x1, 0x1, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d2, 0xff}, 0x921e75f67b04ec71, @in=@multicast1, 0x0, 0x4, 0x2, 0x9, 0xb9, 0xc21}}, 0xe8)
getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001c00)={@private, @loopback, <r6=>0x0}, &(0x7f0000001c40)=0xc)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x6c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
socketpair(0x2, 0x800, 0x8, &(0x7f0000001d80)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001e40)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x3c, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x68}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x5)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r10, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x14, r11, 0x100, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8841)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r12, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x44010)

05:39:11 executing program 1:
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x8084)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x26}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xde}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x91b9}]}]}, 0x9c}}, 0x804)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x42002, 0x0)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x18c, r0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5e2e8785}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x17}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3c14}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdf}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x38fd6ff1}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xdc000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc1bb}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "dd03b76e05751ca7257b2b9aacd8d6c51212dd16a108c31395a6c3ef6b"}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000004}, 0xc1)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x400, 0xd9, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:random_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x40001)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r1)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r2, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x4)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4810}, 0x4)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xc8, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x37}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x44044)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r1)
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x6c, r3, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xa8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x45a}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4004)
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xb0, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x75, 0xac, "4ad4e4832fc5a7fbbb95c0758fb9309b00acf6468a09ce4a01a07b894df461482e585fa4ac65b0a88e8dc2785ca06611c031eb84adf28acca56387325530f25e26596090c54a4a5378eaa7e886e1028b6047a9330d537a6c96eb5df7596bf6657b5ae35968e517fbdfdb3e348161345401"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000041}, 0x480c4)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x44094}, 0x20081804)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000001100)={'sit0\x00', &(0x7f0000001080)={'sit0\x00', <r4=>0x0, 0x29, 0x1, 0x4, 0x2, 0x20, @empty, @private0, 0x0, 0x40, 0x7, 0x7}})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0xac, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3800000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xefd1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8a3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x781}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r1)
sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x68, r5, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x4800)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffff0001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x88}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1c318d9c}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4090)

05:39:11 executing program 2:
r0 = syz_io_uring_setup(0x530d, &(0x7f0000000000)={0x0, 0x31f2, 0x0, 0x0, 0x3ba}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
r1 = syz_io_uring_setup(0x772b, &(0x7f0000000100)={0x0, 0x4179, 0x20, 0x3, 0x319, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
waitid(0x0, 0xffffffffffffffff, &(0x7f0000000200), 0x2, &(0x7f0000000280))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000d, 0x8010, r0, 0x10000000)
r2 = gettid()
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x7f, 0x1, 0x7f, 0x0, 0x40, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x6, 0x2}, 0x2c2, 0x10000, 0x80, 0x0, 0x3, 0x1, 0x2581, 0x0, 0x7, 0x0, 0x6}, r2, 0x2, 0xffffffffffffffff, 0x1)
waitid(0x1, r2, &(0x7f00000003c0), 0x2, &(0x7f0000000440))
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000c, 0x4000010, r1, 0x0)
r3 = syz_io_uring_setup(0xaa4, &(0x7f0000000500)={0x0, 0xbea0, 0x1, 0x3, 0x1f3, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xe63503ac956a6908}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8000}, @NL80211_ATTR_USER_PRIO={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_logger_exec_t:s0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004000}, 0x20008000)
mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r0, 0x10000000)
prctl$PR_MCE_KILL_GET(0x22)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4, 0x50, r3, 0x6000)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000940)={@rand_addr, @loopback, <r5=>0x0}, &(0x7f0000000980)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', r5, 0x29, 0xe0, 0x8, 0x6, 0x18, @private2, @empty, 0x20, 0x7800, 0x8}})
sched_getattr(r2, &(0x7f0000000a80)={0x38}, 0x38, 0x0)
syz_io_uring_setup(0x2d70, &(0x7f0000000ac0)={0x0, 0xef4e, 0x4, 0x2, 0xcb, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b40), &(0x7f0000000b80))
waitid(0x0, r2, &(0x7f0000000bc0), 0x4, &(0x7f0000000c40))

05:39:11 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x2)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000040)={0x1000, {{0x2, 0x4e21, @rand_addr=0x64010101}}, {{0x2, 0x4e22, @local}}}, 0x108)
r0 = socket$inet6(0xa, 0x37a2180399b402b, 0x7)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="e86011485bb1e6af1331e990cc98ebc0", 0x10)
name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@xfs_parent={0x1c, 0x82, {0x9, 0xbee, 0x800, 0x7}}, &(0x7f0000000240), 0x400)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000280))
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x0, 0x0, 0x2c, 0x0, "bf36710c6bb3b8f9fa236fd78d80b0f47e317de0aecb621204d459ce6ae02ea50d60fefb63ff023d3dc787cae7db1d99b0ea59c4040cf170202c792138e8c167a7df0a220bc8c415c6c7dc6e09b353f7"}, 0xd8)
capset(&(0x7f00000003c0)={0x19980330}, 0xfffffffffffffffe)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000400)='.pending_reads\x00', 0x200000, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440)=[@timestamp, @timestamp, @window={0x3, 0x59f, 0x400}, @timestamp, @timestamp, @mss={0x2, 0xb7}, @mss={0x2, 0xfffffff7}], 0x7)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1)
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000814}, 0x8000)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000005c0))
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000600)=0x4, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd8, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x32}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1c}, @NL80211_ATTR_IE={0x89, 0x2a, [@dsss={0x3, 0x1, 0x74}, @measure_req={0x26, 0x53, {0x9, 0x7f, 0x3, "6bbce80f773d3072e879febfbb1f65e2a51f1327a9900f659162239cc19ddf90538adf478791e3069ac6fc63b37a7f2b29806c1a35322eba954e6cf56b1d1473f37d8937997704855897f64f7dc5a788"}}, @cf={0x4, 0x6, {0x7f, 0x9, 0x0, 0x2000}}, @supported_rates={0x1, 0x4, [{0x60}, {0x24, 0x1}, {0x16, 0x1}, {0x0, 0x1}]}, @cf={0x4, 0x6, {0x1, 0x6, 0x4, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x5f, 0x40, @device_a, 0xdc4b, 0x7ff, 0xebe}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_IE={0x9, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x30, 0x8}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x4000040)
mknodat$null(r1, &(0x7f0000000840)='./file0\x00', 0x1, 0x103)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000880)=@ccm_128={{0x304}, "ed706d7e6f45b61b", "a4b3760aa908eabfdfcbbecf6b13a830", "0a16ee92", "092f2697ff113055"}, 0x28)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000008c0)="eaad3e22a53262691752d0340ff4cc99", 0x10)

[  112.532183] audit: type=1400 audit(1748237951.311:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:39:11 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x50}]}, 0x58}, 0x1, 0x0, 0x0, 0x4055}, 0x24040848)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x80)
sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc0220400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x60004004)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x401, 0x40}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x2044805)
sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x63}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40044}, 0x40)
sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, r0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x44}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x20044090}, 0x2014)
r3 = fsmount(r1, 0x0, 0x38)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000d40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000740)={0x5a0, r0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x1}}}}, [@NL80211_ATTR_TID_CONFIG={0x57c, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x27}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x3d4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x26}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3a0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x2, 0x10, 0x8, 0x2, 0x3, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0xdb4, 0x3, 0x6, 0xff, 0x70, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x44, 0x2d, 0x2eb, 0xc2ef, 0x2, 0x200, 0xff, 0x8]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x1b, 0xb, 0x60, 0xc, 0x3, 0x9, 0x48, 0x4, 0xc, 0x5, 0x36, 0x2, 0x6c, 0x30, 0xb, 0x60, 0x1, 0xc, 0x5, 0x60]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x4}, {0x5, 0x6}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0xa}, {0x1, 0x3}, {0x4, 0x1}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x4}, {0x2, 0x5}, {0x7}, {0x2, 0x7}, {0x3, 0x2}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x8}, {0x5}, {0x1, 0x9}, {0x2, 0x3}, {0x5, 0x7}, {0x7, 0x2}, {0x6, 0x4}, {0x3, 0x6}, {0x5, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x4}, {0x1, 0x1}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0xa}, {0x2}, {0x7, 0x9}, {0x1, 0x6}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x8, 0x9, 0x9, 0x6, 0x81, 0x7f, 0x93ca]}}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x18, 0x77, 0x5, 0x5, 0x60, 0x6c, 0x36, 0x4]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x2}, {0x1, 0x9}, {0x6, 0x8}, {0x3, 0x9}, {0x3, 0x1}, {0x7, 0x5}, {0x6, 0x5}, {0x4}, {0x5, 0x5}, {0x6, 0xa}, {0x4, 0x5}, {0x6, 0x8}, {0x4, 0x1}, {0x4, 0x7}, {}, {0x5, 0x3}, {0x6, 0x1}, {0x2, 0x3}, {0x0, 0x2}, {0x7, 0x1}, {0x1}, {0x3, 0x8}, {0x2, 0x7}, {0x1, 0x3}, {0x6, 0x4}, {0x0, 0x4}, {0x2}, {0x5, 0x6}, {0x1, 0x5}, {0x4, 0x9}, {0x3, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x6}, {0x1, 0x9}, {0x4, 0xa}, {0x1, 0x7}, {0x4, 0x6}, {0x3, 0x3}, {0x4, 0xa}, {0x7, 0x6}, {0x6, 0x1}, {0x2, 0x3}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0x3}, {0x4, 0x5}, {0x6, 0x5}, {0x2, 0x7}, {0x7, 0x7}, {0x4, 0x1}, {0x2, 0x7}, {0x6}, {0x0, 0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x2, 0x1}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x6c, 0x1, 0x16, 0x4, 0x5, 0x9, 0xc, 0x4, 0x18, 0x30, 0x9, 0xb, 0x9, 0x2, 0x16, 0x17, 0x30, 0x9, 0xc, 0x12, 0x18, 0x36, 0x4, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8000, 0x0, 0x3b4, 0x7, 0x609, 0x5, 0x1ff]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x6, 0x5}, {0x4, 0x8}, {0x0, 0x6}, {}, {0x7, 0x3}, {0x3, 0x4}, {0x2, 0x7}, {0x6, 0x9}, {0x7, 0x8}, {0x4, 0x2}, {0x1}, {0x0, 0x3}, {0x2, 0x4}, {0x5, 0xa}, {0x2, 0x7}, {0x0, 0x5}, {0x4, 0x9}, {0x2, 0xa}, {0x7, 0x8}, {0x0, 0xa}, {0x3, 0x5}, {0x1, 0x8}, {0x2, 0x5}, {0x0, 0x6}, {}, {0x3}, {0x1, 0x4}, {0x7, 0x1}, {0x5, 0x5}, {0x5, 0x5}, {0x3, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x14, 0x3, 0x5, 0x9, 0x2d, 0x12, 0x1b, 0x9, 0xc, 0xcc7f1cd684c67378]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0xfffa, 0x6, 0x80, 0x2, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x2}, {0x7, 0x1}, {0x6, 0x5}, {0x4, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x1, 0x61, 0x30, 0x48, 0x60, 0x3, 0x5, 0x36, 0x1, 0x2, 0x4, 0x12, 0x36, 0xa, 0x24, 0xb, 0x4c897e4bba25934b, 0xb, 0x1, 0x30, 0x12, 0x60, 0xc, 0x48, 0x0, 0x16]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x12, 0x6c, 0x2, 0x60, 0x60, 0x3d, 0x1c, 0x1, 0x16, 0x1, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf800, 0x0, 0x9, 0x2, 0x362e, 0x0, 0x0, 0x700]}}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xf5b1, 0x6, 0x5, 0x1f, 0x4, 0x1ff, 0x3]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x8218ece6261869d0, 0x0, 0x9, 0x9, 0x24, 0x12, 0x5, 0xc, 0x6c, 0x60, 0x16, 0xc, 0x48, 0x48, 0x4, 0x2c, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x401, 0x9, 0x4, 0x200, 0x8000, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x34, 0x2, 0x48, 0x48, 0x1b, 0x4]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x9, 0x48, 0xc, 0x12, 0x18, 0x3, 0x1, 0x18, 0x18, 0x9, 0x3, 0x1d, 0x6c, 0x12, 0x6c, 0x48, 0x36, 0x48, 0x24, 0xc, 0x9, 0xb, 0x12, 0x3, 0x4, 0x6f, 0x48, 0x24, 0x1b, 0x48, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x8}, {0x1, 0x4}, {0x4, 0x8}, {0x3}, {0x0, 0x2}, {0x7, 0x5}, {0x3, 0x6}, {0x0, 0x2}, {0x6}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0x2}, {0x7, 0x4}, {0x1, 0x8}, {0x2, 0x8}, {0x0, 0xa}, {0x3, 0x6}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x5}, {0x4, 0x4}, {0x0, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2c2d, 0xea, 0x8000, 0x8001, 0xffff, 0xe4, 0x6, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xf4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3f, 0xb9, 0x100, 0x0, 0xd624, 0x5, 0xb7a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x7, 0x8, 0x7, 0x3ff, 0xa25, 0x6]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0xc, 0x4]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x1}, {0x4, 0x3}, {0x0, 0x4}, {0x3}, {0x1, 0x7}, {0x1}, {0x4, 0x7}, {0x3, 0x7}, {0x2, 0x2}, {0x2, 0x2}, {0x5, 0xa}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x2, 0x6}, {0x5, 0x6}, {0x7, 0x6}, {0x6, 0xa}, {0x4, 0x1}, {0x3, 0x6}, {0x2, 0x9}, {0x5, 0x6}, {0x1}, {0x5, 0x4}, {0x6, 0x6}, {0x1, 0x1}, {0x3}, {0x3, 0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0xa}, {0x2, 0x1}, {0x7, 0x6}, {0x4, 0x2}, {0x6, 0x9}, {0x2, 0x7}, {}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0xa}, {0x0, 0x7}, {0x3, 0x4}, {0x3, 0x6}, {0x6, 0x6}, {0x7, 0x7}, {0x1, 0x6}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x3, 0x5}, {0x7, 0x8}, {0x7, 0x2}, {}, {0x2, 0x1}, {0x5, 0x8}, {0x4}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0xa}, {0x1, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x6, 0x3, 0x6, 0x2, 0x24, 0x12, 0xc, 0x6, 0x16, 0x6c, 0x48, 0x4, 0x16, 0x1b, 0x9, 0x0, 0x6, 0xc]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x12, 0x5, 0x48, 0x30, 0x9, 0xc, 0x3, 0x60, 0x30, 0x1, 0x12, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x6f, 0x6c, 0x1f, 0x5]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0x9}, {0x2, 0x1}, {0x3, 0x3}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0xa}, {}, {0x0, 0x1}, {0x4, 0x7}, {0x2}, {0x7, 0x7}, {0x7, 0x3}, {0x5}, {0x5}, {}, {0x0, 0x5}, {0x4, 0x5}, {0x6, 0x1}, {0x7, 0x9}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x5, 0x6}, {0x3, 0x8}, {0x6}, {0x0, 0x5}, {0x0, 0x9}, {0x3, 0x8}, {0x2, 0x6}, {0x5, 0x1}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x9}, {0x6, 0x7}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x2}, {0x4, 0x9}, {0x5}, {0x0, 0x2}, {0x0, 0x6}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0x9}, {0x1, 0x5}, {0x6, 0x5}, {}, {0x7, 0x2}, {0x2, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x50}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0xa}, {0x2, 0x3}, {0x2, 0x2}, {0x6, 0x9}, {0x5, 0x1}, {0x4, 0x3}, {0x1, 0xa}, {0x4, 0x5}, {0x2, 0x1}, {0x5, 0x4}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x1}, {0x5, 0x7}, {0x1, 0x1}, {0x6, 0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x1}, {0x2}, {0x1, 0x9}, {0x5, 0xa}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0x5}, {0x1, 0x3}, {0x4, 0x7}, {0x6, 0xa}, {0x1, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x5, 0x8}, {0x4, 0x3}, {0x2, 0x4}, {0x0, 0x2}, {0x0, 0x3}, {0x4}, {0x0, 0x4}, {0x1, 0x9}, {0x3, 0xa}, {0x4, 0x1}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x9}, {0x5, 0x5}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x4}, {0x2, 0x9}, {0x3, 0x3}, {0x4, 0x7}, {0x0, 0x3}, {0x3, 0x1}, {0x5, 0x7}, {0x6, 0x6}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x9, 0x5, 0x2, 0x3, 0x0]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x24, 0x16, 0x24, 0x2, 0x12, 0x5, 0x36, 0x9, 0x12, 0x24, 0x12, 0x6c, 0x48, 0x16, 0x36, 0xc, 0x6, 0x6a, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3aff, 0x7ff, 0x9828, 0x8, 0x3, 0x200, 0x6, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd26, 0xed, 0x8, 0x0, 0x4a18, 0x3, 0x5, 0x401]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x24, 0x24, 0x24, 0x18, 0x18, 0x0, 0x3, 0x5, 0x18, 0x3, 0x16, 0x48, 0x1, 0x24, 0x6c, 0x60, 0x12, 0x1, 0xc, 0x48, 0x9, 0x40, 0x9, 0x16, 0x24, 0x4, 0x12, 0x3, 0x2, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x53d83eb2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2d}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x14}, 0x44080)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x78, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x39, 0x33, @mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80}, @device_a, @broadcast, @random="2a04a5c02d1b", {0x2, 0x1}}, @ver_80211n={0x0, 0x7f, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @void, @void, @val={0x7e, 0x15, {{0x0, 0x43}, 0x2, 0x4, @device_b, 0x40, 0x4, 0x20}}}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x18}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f8}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c010}, 0x8811)
sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r3)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xac, r5, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x84, 0x2a, [@random_vendor={0xdd, 0x52, "fddb57d876bc887f77bde7229d0b14df01de7ecf5f0aaceb72d120d32d2f2fe776dd2a8d7f44914bc76e616a7c9f3165523acfb6c344c6d1878293811fdb623d2745a47599ae32e98678281e30d962a2b290"}, @ssid={0x0, 0x11, @random="5cdddc49e7e0e80ffbfbb87998d407c6af"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9e, 0x9d, 0x1f}}, @challenge={0x10, 0x1, 0xbe}, @supported_rates={0x1, 0x5, [{0x4}, {0x4, 0x1}, {0x30, 0x1}, {0x1, 0x1}, {0x18}]}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x2, 0x4, 0x41}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x67}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000c01)
sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r2, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x48040)
r6 = fsmount(r3, 0x1, 0xc)
sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002680)={&(0x7f00000025c0)={0x9c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x9c}}, 0x4080080)
pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff)

05:39:11 executing program 5:
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffbff)
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x84440, 0x21)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@register_looper, @increfs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/203, 0xcb, 0x1, 0x3f}, @fda={0x66646185, 0x1, 0x0, 0x16}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x40}, @acquire={0x40046305, 0x2}], 0x3a, 0x0, &(0x7f0000000280)="bb53ffb765f84c8932e084d1c4c1fdfee72998cfab653f0bfcd1465dfd23ec5c20f3276d67dfdce31a90d021b0a8a1bacc6290fb4340be391cb1"})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', <r2=>0x0, 0x2f, 0x4a, 0x8c, 0x8001, 0x0, @loopback, @loopback, 0x0, 0x10, 0x2, 0x8}})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x88}}, 0x40050)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000580)="3040ffb8d3b32f78b7e8ab7a69a57083", 0x10)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000005c0), 0x4)
r3 = openat$incfs(r0, &(0x7f0000000600)='.log\x00', 0x10100, 0x181)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r4, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000780)='ethtool\x00', 0x0, r0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000007c0)=@gcm_128={{0x303}, "00fa0f000335b3d8", "9c66b3f1b8db98793643386fe72be9b7", "a252c014", "08f341ffdbd14721"}, 0x28)
r6 = socket$packet(0x11, 0x66dd508caa232ba5, 0x300)
recvfrom$packet(r6, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000840)={0x11, 0x18, r2, 0x1, 0x9, 0x6, @remote}, 0x14)
socketpair(0x2, 0x5, 0x2, &(0x7f0000000880)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x40}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffffffd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x40044)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x18c, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x11c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'geneve0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ',]\\/#/\xa4\x17\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']@\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5, 0x4, "ee"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8008}, 0x20001)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000c40)={@id={0x2, 0x0, @a}})

05:39:11 executing program 6:
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000))
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:inetd_exec_t:s0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48040}, 0x4)
syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0)
r1 = socket$inet6(0xa, 0x800, 0xe9)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000280)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x1}, @window={0x3, 0x5, 0x9}, @mss, @mss={0x2, 0x8}], 0x6)
sendmsg$802154_raw(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000380)={&(0x7f0000000300)="89f0d470eb8894ede9770eecad98cdce7d0f9ef08d283bb96cbb16f9d5af4d353fb2fa6d7b6fe192614102943804aec3f557d18d965e9ccefdffd966a7d2c42aefb0b8667781a2650c85af97af17849fb94d20bc38d7943a442cded77108398aa31f4b", 0x63}, 0x1, 0x0, 0x0, 0x4c051}, 0x20)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa2}, 0x40004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r4)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x154, r5, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x42}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x219}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x35d1}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000800)='.log\x00', 0x101000, 0x62)
sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xe79}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0xc800)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r6)
sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000414}, 0x4000000)

05:39:11 executing program 7:
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xd}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb8f6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x82002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800)
socketpair(0x28, 0x800, 0x1, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x48, 0x3}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x701080, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2006008}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7400000, 0x4d}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r6, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008085}, 0xc840)
sendto(r1, &(0x7f00000006c0)="1cce6a6e09ed5a9466d91a513f8e20c487dd4dc6d21a95d2fc3e4d4f79d4e6df8cc683d745bb0cc6232efa21b6a81a0ac4aaece0f4598fb57a46fd25f92f2dfe6d2c9ba527e21f0d5f81ac4d99bde82bcab9176de20817229783edca4041f307a69797037127ee3724dd782e1c4128222d78e607c57897f2b74287d809917ddcd534b3fc89f0b7585db2e0e736b56ba7018b", 0x92, 0x24040001, 0x0, 0x0)
r7 = fsmount(r4, 0x1, 0xf9)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000001380)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f0000000800)={0xb0c, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x401, 0x16}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x805}, @NL80211_ATTR_FRAME={0x2b2, 0x33, @data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @broadcast, @broadcast, {0x5, 0x6}, @device_b}, {0xf, 0x0, 0x3, 0x0, 0x81}}, {@type10={{0x0, 0x2, 0xb}, {0x7899}, @from_mac=@device_b, @device_a, @from_mac=@broadcast, {0x0, 0x8b2}}, {0x3, 0x1, 0x2, 0x1, 0x7f}}}, @a_msdu=[{@device_b, @device_a, 0xd3, "2e8366d1fd3c60deb52233799613dde1d090e3e8a6e9b3a4c59b6e5f21c9480ea21dd9c452f0bfc14e501c429704e1824c6fa8ee201baa2680fd6eade81e48e45cb7f80c7076a16e962f90a362eb1d052af5191a9cd1cfd734abd7bc3c1586acb491a03af5fa80a01090f0432a9f38cfbb646858d727e9ddeb7cb6abdd13e104c962c79037d300e671a53925ddfe16b896cae4213e0e483b8576c9101034285b89ac3691e72cf5139b8fe8f62d190db82d8c49ce20c8b44c4d5462ad5037db1293e0f2de00d8923b83718c651f094acecfb5a8"}, {@device_b, @device_b, 0xf4, "7ecacf4890251d886603805f8c6b189f663b8e78a8e98d9ae3fbb4ac6952042133e55b18b583b222be6a2a1a91fbec31d7f07bea233af269b020c7414efcc8f6774b982a4a9c2d96cbac11d1d7f04c814aa836c35c9646a7c13dbf5f02e78069a5c913c8b4344f47695b560125caf54f5d230aed250646d129cc926d63b372011b9393a62c2861b8057c080d72ecfaecccb8bfbe6ebb7596ea9af6d499fb41a3d1d8c1865cf9c188d8ab4e9e8bb7f0523245a6966c900c7ce09ab86af59b0e4468c5d55877aab1b40d0f205c456e496fb1d291f2cb6b1ef64c4e03e6b0bab4d74bdaea6e9088575bb5d5c5c45b883878d1716056"}, {@device_b, @device_b, 0x7b, "8bad27736fd8f1554cc072b0d5e5e184361100205c0023b75e53c2e4d2a661e1f7b124d1de9157cb2c640fec4759487059ae30b08bb55f3ff370b3c5bd969e6039a2e398d654cb019976fb068d94ee70e0ca247d8d652eccf3a646eb4a95b5e19d56529d5db0d3b0ca0844592dc87f1fa5c68c079e792e85d064ee"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {}, @broadcast, @broadcast}}, @NL80211_ATTR_FRAME={0x33, 0x33, @mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1}, {0x81}, @device_a, @device_b, @initial, {0xc, 0xc0}}, @tdls_disc_req={0xc, 0xa, {0x38, {0x65, 0x12, {@from_mac=@broadcast, @device_b, @device_b}}}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x7d0, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {0x3, 0x80}, @device_b}, {0x7, 0x1, 0x3, 0x0, 0x1}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @random="b90a876a67bb", @random="66009ee6f7fe", {0x5, 0xa57}}, {0x1, 0x0, 0x0, 0x1, 0x1f}}}, @ver_80211n={0x0, 0x2f15, 0x3}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x890d}]}, 0xb0c}}, 0x10)
r9 = io_uring_setup(0x59fa, &(0x7f00000013c0)={0x0, 0x3d3d, 0x4, 0x1, 0x3d7, 0x0, r7})
syz_io_uring_setup(0x1395, &(0x7f0000001440)={0x0, 0x3c10, 0x2, 0x3, 0x206, 0x0, r9}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000014c0), &(0x7f0000001500))
r10 = fsmount(r7, 0x0, 0x86)
waitid$P_PIDFD(0x3, r10, &(0x7f0000001540), 0x2, &(0x7f00000015c0))
sched_rr_get_interval(0x0, &(0x7f0000001680))

[  114.076896] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  114.080135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  114.082637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  114.084708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  114.086579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  114.087254] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  114.090634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  114.093825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  114.096910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  114.098398] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  114.099873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  114.100162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.112130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.113365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.120989] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.142285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  114.160160] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  114.161801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  114.164814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  114.170227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  114.210346] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  114.215536] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  114.219940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  114.224133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  114.224308] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.229317] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.232067] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.233871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  114.241179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  114.254800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  114.258558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.260106] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  114.261614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  114.273983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  114.277152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  114.293008] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  114.293155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  114.297591] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  114.316876] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  114.333297] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  116.158074] Bluetooth: hci2: command tx timeout
[  116.159307] Bluetooth: hci1: command tx timeout
[  116.221223] Bluetooth: hci3: command tx timeout
[  116.222078] Bluetooth: hci0: command tx timeout
[  116.284977] Bluetooth: hci5: command tx timeout
[  116.349580] Bluetooth: hci6: command tx timeout
[  116.350230] Bluetooth: hci4: command tx timeout
[  116.476489] Bluetooth: hci7: command tx timeout
[  118.204702] Bluetooth: hci2: command tx timeout
[  118.205178] Bluetooth: hci1: command tx timeout
[  118.269459] Bluetooth: hci0: command tx timeout
[  118.269941] Bluetooth: hci3: command tx timeout
[  118.332683] Bluetooth: hci5: command tx timeout
[  118.396511] Bluetooth: hci4: command tx timeout
[  118.396981] Bluetooth: hci6: command tx timeout
[  118.524740] Bluetooth: hci7: command tx timeout
[  120.252814] Bluetooth: hci1: command tx timeout
[  120.253358] Bluetooth: hci2: command tx timeout
[  120.316505] Bluetooth: hci3: command tx timeout
[  120.316954] Bluetooth: hci0: command tx timeout
[  120.380535] Bluetooth: hci5: command tx timeout
[  120.446470] Bluetooth: hci6: command tx timeout
[  120.446950] Bluetooth: hci4: command tx timeout
[  120.572843] Bluetooth: hci7: command tx timeout
[  122.300638] Bluetooth: hci2: command tx timeout
[  122.301592] Bluetooth: hci1: command tx timeout
[  122.364971] Bluetooth: hci3: command tx timeout
[  122.366496] Bluetooth: hci0: command tx timeout
[  122.428583] Bluetooth: hci5: command tx timeout
[  122.492876] Bluetooth: hci4: command tx timeout
[  122.493752] Bluetooth: hci6: command tx timeout
[  122.622488] Bluetooth: hci7: command tx timeout
[  176.536937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  176.541979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  176.544710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  176.551744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  176.556144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  176.672024] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.678379] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.686772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.694195] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.705966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.806502] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.816003] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.830913] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.850777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.854119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.856595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.862399] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.866098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.869010] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  176.905161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.997010] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  177.026253] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  177.030890] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  177.047400] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  177.057250] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  177.060085] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  177.063018] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  177.064929] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  177.082308] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  177.095923] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  177.100170] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  177.108153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  177.117252] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  177.119672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  177.127906] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  177.134528] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  177.153130] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  177.167685] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  177.170971] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  177.189961] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  178.620572] Bluetooth: hci0: command tx timeout
[  178.812573] Bluetooth: hci1: command tx timeout
[  178.940602] Bluetooth: hci3: command tx timeout
[  179.069522] Bluetooth: hci2: command tx timeout
[  179.260524] Bluetooth: hci6: command tx timeout
[  179.261196] Bluetooth: hci4: command tx timeout
[  179.325469] Bluetooth: hci7: command tx timeout
[  179.326145] Bluetooth: hci5: command tx timeout
[  180.669058] Bluetooth: hci0: command tx timeout
[  180.860551] Bluetooth: hci1: command tx timeout
[  180.989573] Bluetooth: hci3: command tx timeout
[  181.116753] Bluetooth: hci2: command tx timeout
[  181.308869] Bluetooth: hci6: command tx timeout
[  181.310067] Bluetooth: hci4: command tx timeout
[  181.373890] Bluetooth: hci5: command tx timeout
[  181.375025] Bluetooth: hci7: command tx timeout
[  182.716598] Bluetooth: hci0: command tx timeout
[  182.910030] Bluetooth: hci1: command tx timeout
[  183.036537] Bluetooth: hci3: command tx timeout
[  183.165115] Bluetooth: hci2: command tx timeout
[  183.356964] Bluetooth: hci4: command tx timeout
[  183.358079] Bluetooth: hci6: command tx timeout
[  183.420593] Bluetooth: hci5: command tx timeout
[  183.421517] Bluetooth: hci7: command tx timeout
[  184.765544] Bluetooth: hci0: command tx timeout
[  184.957635] Bluetooth: hci1: command tx timeout
[  185.085899] Bluetooth: hci3: command tx timeout
[  185.213519] Bluetooth: hci2: command tx timeout
[  185.405641] Bluetooth: hci6: command tx timeout
[  185.406147] Bluetooth: hci4: command tx timeout
[  185.469656] Bluetooth: hci7: command tx timeout
[  185.470147] Bluetooth: hci5: command tx timeout
[  238.731890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  238.733944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  238.735820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  238.742963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  238.745308] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  238.885864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  238.889067] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  238.890895] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.896045] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  238.898906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  238.986691] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.988364] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.991678] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.996683] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  239.000265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  239.072966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  239.076580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  239.077881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  239.084720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  239.092014] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  239.158282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  239.170659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  239.173196] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  239.188749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  239.207720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  239.352294] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  239.353505] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  239.356670] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  239.369863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  239.372853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  239.379947] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  239.402599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  239.416036] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  239.429065] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  239.443654] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  239.453159] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  239.454331] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  239.481626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  239.487283] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  239.498957] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  240.828507] Bluetooth: hci0: command tx timeout
[  240.956529] Bluetooth: hci1: command tx timeout
[  241.085536] Bluetooth: hci2: command tx timeout
[  241.149489] Bluetooth: hci3: command tx timeout
[  241.276606] Bluetooth: hci4: command tx timeout
[  241.532712] Bluetooth: hci6: command tx timeout
[  241.597140] Bluetooth: hci7: command tx timeout
[  241.597768] Bluetooth: hci5: command tx timeout
[  242.876739] Bluetooth: hci0: command tx timeout
[  243.004696] Bluetooth: hci1: command tx timeout
[  243.133445] Bluetooth: hci2: command tx timeout
[  243.196563] Bluetooth: hci3: command tx timeout
[  243.324528] Bluetooth: hci4: command tx timeout
[  243.582441] Bluetooth: hci6: command tx timeout
[  243.644571] Bluetooth: hci7: command tx timeout
[  243.645011] Bluetooth: hci5: command tx timeout
[  244.924819] Bluetooth: hci0: command tx timeout
[  245.054438] Bluetooth: hci1: command tx timeout
[  245.180699] Bluetooth: hci2: command tx timeout
[  245.244760] Bluetooth: hci3: command tx timeout
[  245.372561] Bluetooth: hci4: command tx timeout
[  245.628494] Bluetooth: hci6: command tx timeout
[  245.693446] Bluetooth: hci5: command tx timeout
[  245.693952] Bluetooth: hci7: command tx timeout
[  246.972516] Bluetooth: hci0: command tx timeout
[  247.100645] Bluetooth: hci1: command tx timeout
[  247.228749] Bluetooth: hci2: command tx timeout
[  247.292766] Bluetooth: hci3: command tx timeout
[  247.420686] Bluetooth: hci4: command tx timeout
[  247.677889] Bluetooth: hci6: command tx timeout
[  247.740539] Bluetooth: hci7: command tx timeout
[  247.741041] Bluetooth: hci5: command tx timeout
[  301.006273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  301.013062] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  301.016803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  301.025826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  301.032366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  301.146535] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  301.158937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  301.169053] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  301.195324] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  301.201022] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  301.229005] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.248168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.257956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.269038] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.277613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  301.378448] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  301.382228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  301.384471] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  301.392967] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  301.399855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  301.465567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  301.473672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  301.477713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  301.517145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  301.526803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  301.825886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  301.846779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.895133] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.910622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.919983] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.930786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  301.932048] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  301.944034] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  301.944350] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  301.974843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  301.976188] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  302.152368] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  302.155217] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  302.167919] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  302.174910] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  303.101747] Bluetooth: hci0: command tx timeout
[  303.295209] Bluetooth: hci1: command tx timeout
[  303.356493] Bluetooth: hci2: command tx timeout
[  303.676501] Bluetooth: hci3: command tx timeout
[  303.677500] Bluetooth: hci4: command tx timeout
[  304.124489] Bluetooth: hci5: command tx timeout
[  304.252470] Bluetooth: hci7: command tx timeout
[  304.380938] Bluetooth: hci6: command tx timeout
[  305.149094] Bluetooth: hci0: command tx timeout
[  305.340560] Bluetooth: hci1: command tx timeout
[  305.404636] Bluetooth: hci2: command tx timeout
[  305.724985] Bluetooth: hci4: command tx timeout
[  305.724996] Bluetooth: hci3: command tx timeout
[  306.172543] Bluetooth: hci5: command tx timeout
[  306.300898] Bluetooth: hci7: command tx timeout
[  306.428554] Bluetooth: hci6: command tx timeout
[  307.198746] Bluetooth: hci0: command tx timeout
[  307.390450] Bluetooth: hci1: command tx timeout
[  307.452671] Bluetooth: hci2: command tx timeout
[  307.772536] Bluetooth: hci3: command tx timeout
[  307.772556] Bluetooth: hci4: command tx timeout
[  308.221492] Bluetooth: hci5: command tx timeout
[  308.348484] Bluetooth: hci7: command tx timeout
[  308.477498] Bluetooth: hci6: command tx timeout
[  309.246473] Bluetooth: hci0: command tx timeout
[  309.437817] Bluetooth: hci1: command tx timeout
[  309.500536] Bluetooth: hci2: command tx timeout
[  309.820509] Bluetooth: hci4: command tx timeout
[  309.820547] Bluetooth: hci3: command tx timeout
[  310.268706] Bluetooth: hci5: command tx timeout
[  310.396485] Bluetooth: hci7: command tx timeout
[  310.524739] Bluetooth: hci6: command tx timeout
[  363.601332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  363.604558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  363.608253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  363.614555] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  363.621551] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  363.915872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  363.920063] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  363.922606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.928975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.934689] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  364.006915] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  364.015607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  364.019978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  364.024278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  364.025941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  364.036104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  364.042068] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  364.052596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  364.083704] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  364.092295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  364.117202] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  364.123992] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  364.134747] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  364.153852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  364.165876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  364.178998] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  364.191497] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  364.202977] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  364.212802] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  364.217016] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  364.222337] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  364.230289] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  364.236906] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  364.238974] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  364.254132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  364.268677] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  364.323766] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  364.326660] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  364.331976] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  364.337869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  365.692515] Bluetooth: hci0: command tx timeout
[  366.012536] Bluetooth: hci1: command tx timeout
[  366.140692] Bluetooth: hci3: command tx timeout
[  366.206556] Bluetooth: hci2: command tx timeout
[  366.332498] Bluetooth: hci7: command tx timeout
[  366.333541] Bluetooth: hci5: command tx timeout
[  366.334065] Bluetooth: hci4: command tx timeout
[  366.396503] Bluetooth: hci6: command tx timeout
[  367.740898] Bluetooth: hci0: command tx timeout
[  368.060573] Bluetooth: hci1: command tx timeout
[  368.188731] Bluetooth: hci3: command tx timeout
[  368.252592] Bluetooth: hci2: command tx timeout
[  368.382674] Bluetooth: hci5: command tx timeout
[  368.383590] Bluetooth: hci4: command tx timeout
[  368.384391] Bluetooth: hci7: command tx timeout
[  368.445018] Bluetooth: hci6: command tx timeout
[  369.788667] Bluetooth: hci0: command tx timeout
[  370.109102] Bluetooth: hci1: command tx timeout
[  370.236656] Bluetooth: hci3: command tx timeout
[  370.300638] Bluetooth: hci2: command tx timeout
[  370.428555] Bluetooth: hci7: command tx timeout
[  370.429058] Bluetooth: hci5: command tx timeout
[  370.430160] Bluetooth: hci4: command tx timeout
[  370.492587] Bluetooth: hci6: command tx timeout
[  371.836549] Bluetooth: hci0: command tx timeout
[  372.157729] Bluetooth: hci1: command tx timeout
[  372.284591] Bluetooth: hci3: command tx timeout
[  372.348558] Bluetooth: hci2: command tx timeout
[  372.477654] Bluetooth: hci4: command tx timeout
[  372.478530] Bluetooth: hci5: command tx timeout
[  372.479279] Bluetooth: hci7: command tx timeout
[  372.540533] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
05:44:19  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000007789025 RCX=ffffffff819c3b06 RDX=ffff888028f81b80
RSI=ffffffff819c3b10 RDI=0000000000000000 RBP=1ffff11004d73efc RSP=ffff888026b9f7d8
R8 =0000000000000000 R9 =fffff9400003bc56 R10=0000000007789025 R11=0000000000000001
R12=ffff88800d396780 R13=00007f6bca444000 R14=0000000007789025 R15=0000000007789025
RIP=ffffffff819c3b18 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6bca4466f4 CR3=000000002cb88000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f6bca45547000007f6bca454f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=828a7dc2b759b861 RDX=0000000000000000
RSI=0000000032ff91ed RDI=ffff88806cf31850 RBP=ffff888015817600 RSP=ffff888015817538
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=ffff8880158175f0 R14=ffff8880169cb700 R15=ffff8880158175a8
RIP=ffffffff81354617 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f56460b8008 CR3=0000000027da3000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000