syzkaller login: [   90.669979] hrtimer: interrupt took 2803496 ns
Warning: Permanently added '[localhost]:28916' (ECDSA) to the list of known hosts.
2025/05/28 12:07:18 fuzzer started
2025/05/28 12:07:19 dialing manager at localhost:36005
[   99.225464] cgroup: Unknown subsys name 'net'
[   99.353926] cgroup: Unknown subsys name 'cpuset'
[   99.393465] cgroup: Unknown subsys name 'rlimit'
2025/05/28 12:07:40 syscalls: 2214
2025/05/28 12:07:40 code coverage: enabled
2025/05/28 12:07:40 comparison tracing: enabled
2025/05/28 12:07:40 extra coverage: enabled
2025/05/28 12:07:40 setuid sandbox: enabled
2025/05/28 12:07:40 namespace sandbox: enabled
2025/05/28 12:07:40 Android sandbox: enabled
2025/05/28 12:07:40 fault injection: enabled
2025/05/28 12:07:40 leak checking: enabled
2025/05/28 12:07:40 net packet injection: enabled
2025/05/28 12:07:40 net device setup: enabled
2025/05/28 12:07:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/28 12:07:40 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/28 12:07:40 USB emulation: enabled
2025/05/28 12:07:40 hci packet injection: enabled
2025/05/28 12:07:40 wifi device emulation: enabled
2025/05/28 12:07:40 802.15.4 emulation: enabled
2025/05/28 12:07:40 fetching corpus: 0, signal 0/0 (executing program)
2025/05/28 12:07:42 starting 8 fuzzer processes
12:07:42 executing program 0:
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'wg2\x00', {0x800}, 0x8})
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000040))
setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080), 0x4)
r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x40}, @ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @xdp={0x2c, 0x9, <r2=>r1, 0x3a}, 0xffff, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)='bond_slave_1\x00', 0x1ff, 0x2, 0x800})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in6=@private2}}, &(0x7f00000005c0)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl1\x00', <r5=>r1, 0x2f, 0x8, 0x3, 0x9, 0x58, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8000, 0x81, 0x10001}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl0\x00', &(0x7f00000006c0)={'ip_vti0\x00', <r6=>r2, 0x40, 0x7, 0x1, 0x9, {{0x3b, 0x4, 0x1, 0x1, 0xec, 0x68, 0x0, 0x6, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x1c, 0xcc, 0x1, 0xb, [{@empty, 0x80000000}, {@private=0xa010102, 0x5}, {@loopback, 0x9}]}, @timestamp={0x44, 0xc, 0x9c, 0x0, 0x4, [0x7ff, 0x8]}, @cipso={0x86, 0x62, 0xffffffffffffffff, [{0x0, 0xf, "c7055c4e358dfdffdcfc393294"}, {0x1, 0x12, "12493671e4cf04f711d95c70afe6f93e"}, {0x6, 0xc, "c9de09aad98a6f13a53d"}, {0x7, 0x4, "c368"}, {0x5, 0x9, "151d028c69f3c3"}, {0x6, 0x10, "438c5d6fbf4bacf3319e7e9b05a2"}, {0x0, 0x6, "e511bd3e"}, {0x6, 0xc, "fa2b4cbbe9ef3aff9815"}]}, @rr={0x7, 0xb, 0xc1, [@multicast1, @broadcast]}, @ssrr={0x89, 0xf, 0x71, [@private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x2c, 0xb2, 0x1, 0x6, [{@remote, 0x40}, {@private=0xa010100, 0x2}, {@multicast1, 0x7fffffff}, {@broadcast, 0x4}, {@broadcast, 0x2}]}, @noop, @timestamp={0x44, 0x4, 0xc0, 0x0, 0x8}]}}}}})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendto(r0, &(0x7f0000000940)="bef3e571eb1c7dc8cb314c73d1421b2dc1dd8996e0de3fc51def8efc89ee716503c946371fe6cbe950ece6a7c087845f69949e461829db5429051cd975b9f6913e64b9e66cba7052497562ac58e383e1494f94efe9638609f19d6b19fb5a65f32474fda05a764eefac849390211f58a403a53b3ac039dcaf40217cd1ac911353f5", 0x81, 0x8840, &(0x7f0000000a00)=@in6={0xa, 0x4e24, 0x6, @remote, 0xfff}, 0x80)
r7 = syz_open_dev$vcsn(&(0x7f0000000a80), 0x80, 0xc8040)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/consoles\x00', 0x0, 0x0)
ioctl$RTC_IRQP_READ(r8, 0x8008700b, &(0x7f0000000b00))
ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f0000000b40))
r9 = epoll_create(0x9)
lstat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
fsetxattr$system_posix_acl(r9, &(0x7f0000000b80)='system.posix_acl_default\x00', &(0x7f0000000e00)={{}, {}, [{0x2, 0x4, r10}], {0x4, 0x7}, [{0x8, 0x5}, {0x8, 0x7}], {0x10, 0x7}, {0x20, 0x5}}, 0x3c, 0x1)

12:07:42 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x36}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x2, 0x3, 0x0, {0x912d, 0x158a, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x41e5, 0x2}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x1000, 0x0, 0x3, 0x0, {0x7, 0xabe, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x4, 0xfb}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x3, 0x6, 0x0, {0x80, 0x9, 0x0, 0x3f, 0x0, 0x1, 0x1, 0x3}, 0x6, 0x2, 0x81}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004805}, 0x24000090)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={<r1=>0xffffffffffffffff, 0x9f, 0xffffffff, 0x2})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb0, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff10f3, 0x10}}}}, [@NL80211_ATTR_FRAME={0x8e, 0x33, @ctrl_frame=@bar={{}, {0x1}, @broadcast, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0xa}, [{0x0, 0x0, {0x3, 0x3f}, "830014fc71f27423"}, {0x0, 0x4, {0x0, 0x8}, "6be8c5b03fa603b1"}, {0x0, 0x0, {0x1, 0x3}, "c64161772b55595f"}, {0x0, 0x4, {0x5, 0x80f}, "8b92309e5cbf25b1"}, {0x0, 0xf, {0x0, 0x40}, "0245475c2a8797b2"}, {0x0, 0x7, {0x5, 0x7f}, "970cd70e3a24d7c3"}, {0x0, 0xc, {0x5, 0x1}, "46d1f288da08bed5"}, {0x0, 0x8, {0xb, 0x1}, "23b7828170103687"}, {0x0, 0x9, {0x3, 0x273}, "54fdc2b6ae9d3236"}, {0x0, 0x9, {0x4, 0x4}, "d63cf2b9495567ad"}]}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x400c000)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000004c0)={0x400, 0x10, '\x00', 0x0, &(0x7f0000000480)=[0x0, 0x0]})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x2200, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x60a}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x23, 0xbe, "4230979b8e95aedd0d00414e28f33893b00eb38d572094d64d8dbcc983ee28"}]}, 0x40}}, 0x80c4)
r5 = openat$cgroup_ro(r3, &(0x7f0000000680)='cgroup.controllers\x00', 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f00000008c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x11c, r6, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}, @NL80211_ATTR_IE={0x97, 0x2a, [@mesh_chsw={0x76, 0x6, {0x0, 0x7, 0x1c}}, @tim={0x5, 0x37, {0x0, 0xf9, 0x81, "50e3209f5cd38c964dd2873fbc48ab99d3b79b18dd490ce9220e9f5f7e0ccd80a91d25c3010e1cd091fe0c916c19a8b95db93443"}}, @perr={0x84, 0x2, {0x40}}, @mesh_chsw={0x76, 0x6, {0xf4, 0x9, 0x2a, 0x3}}, @dsss={0x3, 0x1, 0x40}, @mic={0x8c, 0x18, {0x58a, "ab46a00cfc04", @long="9445834fe437987dba79f4283a09e6b6"}}, @prep={0x83, 0x1f, @not_ext={{}, 0xd1, 0x7, @device_a, 0x7, "", 0x401, 0x100, @device_a, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE={0x5a, 0x2a, [@dsss={0x3, 0x1, 0x8c}, @prep={0x83, 0x25, @ext={{}, 0x81, 0x7, @device_a, 0x1, @device_b, 0x1, 0x6, @broadcast, 0x3b9}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x81, @device_a, 0x6, @device_b, 0x6, 0x69, @device_b, 0x8001}}, @channel_switch={0x25, 0x3, {0x0, 0x5, 0x8}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20048081}, 0x44041)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000900)={<r7=>r3, 0x1, 0x9, 0x5dd})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'ip6_vti0\x00', <r8=>0x0, 0x0, 0xf8, 0xac, 0x205, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x10, 0x6, 0x8000}})
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40018)
r9 = socket(0x6, 0x5, 0x80000001)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r9, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x6030)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}}, 0x4000000)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x60, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x28}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x79}, @broadcast}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x600}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8008080)

12:07:42 executing program 2:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x39c0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@empty, <r1=>0x0}, &(0x7f0000000200)=0x14)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x800}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x44004}, 0x40000000)
bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0xd, r1, 0x1, 0xda, 0x6, @random="e4fce12ec5db"}, 0x14)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x20}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000580)={0x1, 0x73, @status={[0x7fff, 0x7fffffff, 0x0, 0x9, 0x7ff, 0x5]}, [0x3, 0x9, 0x6, 0x100000000, 0xea, 0xfffffffffffffff8, 0x6, 0x7, 0x88, 0x800, 0x9, 0x5, 0x401, 0x5, 0x9, 0x7e1b, 0xffffffff, 0x0, 0x0, 0x7fff, 0x2, 0x6, 0x80, 0x81, 0x0, 0x9, 0x4, 0xa1, 0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1, 0x100000000, 0x4, 0x5514, 0x10001, 0x0, 0x9, 0x2815, 0x6, 0x1, 0xffffffffffffff80, 0x5, 0x9, 0x3, 0x2, 0x2, 0x20, 0x7fff, 0x8001, 0x1, 0x2, 0x3ff, 0x7f99, 0x2, 0xb7a, 0x76c, 0x1f, 0x3, 0x81, 0x7, 0x665, 0x6, 0x1ca]})
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000fc0)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x1, 0x4e20, 0x3ff, 0xa, 0x20, 0x80, 0x0, r1, 0xffffffffffffffff}, {0x2, 0x526, 0x1, 0x2, 0xfd0e, 0x3ff, 0x8, 0x3}, {0x624a, 0x401, 0x6, 0x2}, 0x8, 0x6e6bbe, 0x0, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d4, 0x3c}, 0x2, @in6=@mcast1, 0x3505, 0x1, 0x3, 0x8, 0x0, 0x8, 0x2}}, 0xe8)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008800}, 0x20004041)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x44000)
fsetxattr$security_capability(r2, &(0x7f00000011c0), &(0x7f0000001200)=@v2={0x2000000, [{0xffffcdb3, 0x4}, {0xffffffff, 0x9}]}, 0x14, 0x3)
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000001240)={0x0, 0x8, 0x81})
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4851}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001380)={{0x1, 0x1, 0x18, <r3=>r2}, '\x00'})
sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040}, 0x24000001)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000001500)=0x5a24a9ee, 0x12)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x7f}}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xc, 0x0, @random="b0a945225cc68b90"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x54, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x27}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "fee2c715d0f8434cd577b7721922a82c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e1cadfddee3a7e833d0c5a1e74bb695f"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004041}, 0x8085)

12:07:42 executing program 3:
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7143}, {0x6, 0x11, 0xda}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x46}, {0x6, 0x11, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x500a}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40005}, 0x20000010)
r0 = fsmount(0xffffffffffffffff, 0x1, 0x70)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3d0}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe81}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x206}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x268, 0x1, 0x5, 0x5, 0x0, 0x0, {0x3}, [{{0x254, 0x1, {{0x2, 0x9}, 0x1, 0x5, 0x4, 0xfff, 0xa, 'syz1\x00', "b94e60f3a8fd95e87cb81bd07929f5b57bff976f94e63f4413f1adaf28b29f2e", "60e0be00f4ddebedcadb80f73704b7410b8d141ee51dd0cae2d49922b9a1a99c", [{0x401, 0xfffa, {0x3, 0x7}}, {0x8, 0x8001, {0x1, 0x679f6d4c}}, {0x7aad, 0x3, {0x1, 0x7}}, {0x5, 0x2, {0x1, 0xf5}}, {0x0, 0x7b, {0x1, 0x2}}, {0xffff, 0x6, {0x0, 0x8}}, {0x11, 0x3, {0x0, 0x9ec1}}, {0x4229, 0x0, {0x2, 0x80000000}}, {0x1f, 0x9, {0x2, 0x32f}}, {0x980f, 0x7, {0x3, 0x9b13}}, {0x0, 0x200, {0x1, 0x2}}, {0x2, 0x4, {0x3, 0xb87}}, {0x9, 0x101, {0x2, 0xff}}, {0xfff, 0x3, {0x3, 0x5}}, {0x8000, 0x4c6, {0x2}}, {0xb, 0x8001, {0x2}}, {0xd800, 0x0, {0x2, 0x3}}, {0x4, 0x200, {0x2, 0x1}}, {0x7fff, 0x6, {0x2, 0x100}}, {0xfc, 0x9, {0x2, 0x40}}, {0x2, 0x3, {0x2}}, {0x40, 0xd8ea, {0x0, 0x401}}, {0x7f, 0x77d, {0x0, 0x71}}, {0x0, 0x6, {0x0, 0x8}}, {0xfa43, 0xf001, {0x0, 0x7}}, {0x3ff, 0x72e, {0x2, 0x6}}, {0x6, 0x101, {0x3, 0xfffff800}}, {0x3ff, 0x0, {0x3, 0x6}}, {0x0, 0x6, {0x0, 0xe21d}}, {0x0, 0xb6c, {0x3, 0x4}}, {0x400, 0x8d, {0x1, 0x8fb}}, {0x400, 0x6, {0x2, 0x9}}, {0xff, 0xbe7, {0x2, 0x15b3}}, {0x57b1, 0x80, {0x0, 0x6}}, {0x7, 0x5, {0x2, 0x80000000}}, {0x4, 0x44, {0x1, 0x8}}, {0x7, 0x3, {0x3, 0x20cc}}, {0x4, 0x6, {0x0, 0x80000000}}, {0x0, 0x5, {0x1, 0x4}}, {0x8, 0x1, {0x3, 0x200000}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40850}, 0x400c000)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}}, 0x44)
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x11, 0x13, [{0x9, 0x1}, {0xb}, {0x48, 0x1}, {0x5, 0x1}, {0x30, 0x1}, {0x18, 0x1}, {0x9, 0x1}, {0x1b}, {0xb}, {0x1b, 0x1}, {0x1b}, {0x9, 0x1}, {0x2}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0x471}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5d1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0x1ff}}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x2}, 0x880)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x210000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000940)={{0x8, 0x1f}, 'port0\x00', 0x1, 0x84c, 0x0, 0x0, 0x5, 0x7fff, 0x6eee, 0x0, 0x7})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a00), 0x40240, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000a40)={{0x2f, @loopback, 0x4e24, 0x0, 'ovf\x00', 0x5, 0x4, 0xfff}, {@empty, 0x4e20, 0x4, 0xff, 0x9, 0x6}}, 0x44)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000ac0)={'\x00', 0x8, 0x200, 0x6, 0x0, 0x17e, 0xffffffffffffffff})
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000b40)=""/3)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r3, 0x6, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5e}, @void, @val={0xc, 0x99, {0x20, 0x16}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0x3f}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000811)
socketpair(0x9, 0x2, 0x40, &(0x7f0000000dc0)={<r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r5, 0xb02, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001200)={'sit0\x00', &(0x7f0000001180)={'ip6tnl0\x00', 0x0, 0x4, 0x39, 0x20, 0x0, 0x13, @remote, @private1, 0x7800, 0x1, 0x7, 0x309}})

12:07:42 executing program 4:
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
r0 = socket$inet(0x2, 0x3, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x1, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88)
pwrite64(0xffffffffffffffff, &(0x7f0000000180)="bf", 0x1, 0x3d5e)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$int_out(r1, 0x5460, &(0x7f00000001c0))
fadvise64(r1, 0x7f, 0x573d, 0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000200)=0x6, &(0x7f0000000240)=0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
getsockname$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000380)=0x1c)
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f00000003c0)={0x1, @remote, 0x4e20, 0x3, 'nq\x00', 0x2, 0x3f, 0xe}, 0x2c)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000440)={'tunl0\x00', <r3=>0x0, 0x80, 0x1, 0x1, 0x918, {{0x19, 0x4, 0x2, 0x8, 0x64, 0x68, 0x0, 0x80, 0x4, 0x0, @remote, @remote, {[@end, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0xa7, [@multicast2, @rand_addr=0x64010100, @rand_addr=0x64010102, @local]}, @noop, @generic={0x89, 0xb, "0e50ea04b6134dbaad"}, @lsrr={0x83, 0xb, 0x77, [@local, @multicast2]}, @ssrr={0x89, 0x1f, 0x66, [@empty, @multicast2, @local, @local, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, @remote]}]}}}}})
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000002}, 0x80)
getrlimit(0xa03f6c3649ee3c23, &(0x7f0000000600))
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000640))
listen(r1, 0x5)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x9)

[  122.319336] audit: type=1400 audit(1748434062.788:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:07:42 executing program 5:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x200, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="2ce97cad2f8fdd4fb29488fd29e36c03cd63a6466af12eacc13ff310494615def9d2701915a64b13c36ae8474bd76ef436daa87ee855bf4e390162861eb1ce88ab7ccdfb09aee339780baed4925b7e245accf86e3bd3bafcefaf130d743d8d1639bfe8f8ddce8a78ada0eb60c7d85e4648580e065c78df5fbe14c3ea35f63b733ec96f103750965f83fec066ebe6941a84cd5242e158435cc8c60d6055b560f9494664ef3f89ae678e8cba51e627b02d364bad4efd6b6d040a2723e82e52d1564a68154039cd364233dbeb19084d5d981d7edebb89f506627f4ddd0fcb517473a14eadb61d", 0xe5, 0x10000}], 0x100020, &(0x7f00000001c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x48}}, {@norecovery}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@errors_remount}, {@delalloc}, {@noauto_da_alloc}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@uid_lt={'uid<', 0xee01}}, {@fowner_gt={'fowner>', 0xee01}}]})
unlinkat(r0, &(0x7f00000002c0)='./file0\x00', 0x200)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0)
tee(r1, r0, 0x5, 0x6)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@private1}}, &(0x7f0000000440)=0xe8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'gre0\x00', <r3=>r2, 0x700, 0x20, 0x7ff, 0x3ff, {{0x13, 0x4, 0x0, 0x6, 0x4c, 0x66, 0x0, 0xe3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, {[@timestamp={0x44, 0x14, 0xcc, 0x0, 0x5, [0x1ff, 0x22, 0x3e, 0x8000]}, @timestamp={0x44, 0x18, 0x3f, 0x0, 0x2, [0x18, 0x0, 0x1, 0x5, 0x3]}, @noop, @lsrr={0x83, 0xb, 0x74, [@rand_addr=0x64010101, @empty]}]}}}}})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r4=>r0}, '.\x00'})
write$eventfd(r4, &(0x7f0000000580)=0xd1, 0x8)
mkdir(&(0x7f00000005c0)='./file0\x00', 0x101)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r5=>r1, {0x9}}, './file0\x00'})
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
r6 = openat$cgroup_int(r1, &(0x7f0000000640)='cpuset.sched_load_balance\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r7=>r6, {0x5227}}, './file0\x00'})
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r7)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x22c, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xd0}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_OURS={0x1c0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x1a0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'user_u'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x1e, 0x2, 'cpuset.sched_load_balance\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'fscontext'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/nvram\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'fowner>'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'user_u'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'fscontext'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '/.\\\x1c+--\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40000}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&@\\&}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x180}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'delalloc'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^}\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&{/$\\)\x00'}]}]}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4}, 0x40001)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/tcp_cubic', 0x80000, 0x0)
clock_gettime(0x0, &(0x7f0000000a80)={<r10=>0x0, <r11=>0x0})
futimesat(r9, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000ac0)={{r10, r11/1000+60000}, {0x77359400}})
rt_sigtimedwait(&(0x7f0000000b00)={[0x1f]}, &(0x7f0000000b40), &(0x7f0000000bc0)={0x77359400}, 0x8)
fcntl$setpipe(r9, 0x407, 0x10000)

12:07:42 executing program 6:
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x800, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x2)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc880}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000240)={0x0, 'syzkaller1\x00', {0x3}, 0x6})
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x3e9, 0x20, 0x70bd29, 0x25dfdbfb, {0xbc, 0x0, 0x0, 0x0, 0x60c, 0x9, 0x7, 0x7fff, 0x0, 0xac}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r2=>r0, {0xee00, 0xee01}}, './file0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x6, r3, r2)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xcc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x51ee5b17301be115}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x58}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x18000000}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x33}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4041}, 0x103481952a7e3628)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x8}]}, 0x24}}, 0x4)
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000d80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000780)={0x5bc, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x61d3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbb3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20da}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x96}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff81}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "7c0472d90edcc198b9cb4dc21da1ddf856f545172d6cab"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x18c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1f}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0xfffffffa}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x98e}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @loopback, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6dc137a9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x762}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x198, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "58f518d87f46736e4c220865e6231bbcd038be3e6a2dcb"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "488946b9880fb8ae4ad93d6292666a547037e0ec542d464ae2118e8c39250cca936698de"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xca}, @TIPC_NLA_NODE_ID={0x38, 0x3, "16afd4895638b3624dded34a4675934ede11fe32fb25136cb20a2933eb75ac298c924534ddf9c3b636700543cc1e3c8733164617"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x6b, 0x3, "16973e64aecce6d11c61fd7c431a6187bbf1186a6a7c6e89846d8eb32a222b41728180254fe22c23c7ff4dba3ef65d70ebc2acd715ab91755a925d2f67530e53e2178e5c5a52d0a4f95854d02c2593b6d6c71a0f682fd89923d9743ced46542f6a0c96a610fbe0"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101000}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "ce328a4575aa8bd5bc1e0fddf9fd21320756c946a0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x31}]}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x4800}, 0x38aef51f613607e1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, <r5=>r3, @in_args={0x1}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), r2)
sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r6, 0x300, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x19)
getsockopt$inet_tcp_buf(r5, 0x6, 0xb, &(0x7f0000000f40)=""/220, &(0x7f0000001040)=0xdc)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001080))
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1f}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8441}, 0x4080)

12:07:42 executing program 7:
recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}, 0x2041)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000200))
syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2)
getpeername$unix(r0, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e)
ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000300)=@physical={0x0, 0x0, [{0x5, 0x3, 0xd, 0x7, 0x2, 0x1, 0x0, 0x7, 0x5, 0x1, 0x1, 0x2, 0x7}, {0x2, 0x5, 0x6, 0x9, 0x5, 0x0, 0x1, 0x3, 0xc, 0x1, 0x7, 0x3, 0x7}, {0x0, 0x0, 0x9, 0x4, 0x2, 0x1, 0x3, 0x2, 0x0, 0x1, 0x7f, 0x5}, {0xe, 0x3, 0x7, 0x9, 0x5, 0x0, 0x2, 0xb, 0x0, 0x1, 0x0, 0x8001, 0x800}]})
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000b40))
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000f80)={0x1af, 0x18, &(0x7f0000000b80)})
ioctl$CDROM_SEND_PACKET(r3, 0x5393, &(0x7f0000001100)={"63b6e4be74694576fc68fcb3", &(0x7f0000000fc0)="5e852540dde7e48f5f9540facf2d19fceb13e8976faf981f668d44e8a988f21428778734ef3165af3d12ef3d261416cf86e63db2cefc66ea9b1e45fd1f55e276003ae45cba4350d481965867a5195fcac657c7eedef8a3b675fe1d568a4acb9ae3b9ed001c2070a13d5f67cf3ce27c6303e7d05d832cf221ff5cc502e242a0277f79a71df1a46397b8cb3b2cd26ec2677f56e67da2b3816cd0eeeb6158373d003eca9a55fff78ba87651b5ff1bb191024e612c3ab6436f9b60dd", 0xba, 0x10000000, &(0x7f0000001080)={0x0, 0x0, 0x34, 0x8, 0x0, 0x1, 0x0, "62cc86e5", 0x9, "b8fd5db6", 0x8, 0x80, 0xdd, "d0c56a", "d006b1df01c75da60390b7efeb49f56348f9c6d951998a3209556b5eaa07ad2959eff3939aa50d594d75da51440c"}, 0x2, 0x9, 0x8, &(0x7f00000010c0)})
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000001140)={{0x3, 0x0, 0x3, 0x2}, 0x8, 0x8, 'id0\x00', 'timer0\x00', 0x0, 0x9, 0x2, 0x6, 0x80000001})
r5 = openat$incfs(r4, &(0x7f0000001240)='.pending_reads\x00', 0x21000, 0x102)
ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f0000001280)={0x80, 0x101})
getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f00000012c0), &(0x7f0000001300)=0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001380)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001340)="d255100a9ab9d4ea0cc9f7d11178f4b74107e7ec74e73fe58a0da21b99dee79022c3dda4d38774e135e5c77db86a288e1a", 0x31, r4}, 0x68)
ioctl$CDROMRESUME(r0, 0x5302)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000001400)=0xa2e)
open(&(0x7f0000001440)='./file0\x00', 0x101a40, 0x10)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000001480)={0x40, 0x12, 0x254, 0x8, "5c08f8bc672172e240d886cff718729839a95206bd92b16828562e76fa67cdf2"})
syz_open_dev$vcsn(&(0x7f00000014c0), 0xa7b, 0x80400)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x40, 0x3, 0x6, 0xd163633916fedf43, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc851}, 0x20008060)

[  123.840242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  123.844390] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  123.845628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  123.847501] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  123.849378] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  123.850385] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  123.851858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  123.855217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  123.856148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  123.857255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  123.858519] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  123.861694] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  123.866924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  123.867743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  123.869061] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  123.870369] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  123.872736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  123.878420] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  123.881724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  123.892002] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  123.897295] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  123.910005] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  123.910869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  123.913785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  123.922638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  123.924126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  123.926597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  123.931286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  123.935307] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  123.947640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  123.959323] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  123.964033] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  123.973548] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  123.984296] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  123.986739] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  123.999167] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  124.002787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  124.007250] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  124.036006] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  124.057478] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  125.881360] Bluetooth: hci3: command tx timeout
[  125.945198] Bluetooth: hci4: command tx timeout
[  126.013889] Bluetooth: hci2: command tx timeout
[  126.015398] Bluetooth: hci0: command tx timeout
[  126.016879] Bluetooth: hci1: command tx timeout
[  126.073037] Bluetooth: hci6: command tx timeout
[  126.074753] Bluetooth: hci5: command tx timeout
[  126.136991] Bluetooth: hci7: command tx timeout
[  127.930914] Bluetooth: hci3: command tx timeout
[  127.993920] Bluetooth: hci4: command tx timeout
[  128.056940] Bluetooth: hci2: command tx timeout
[  128.058638] Bluetooth: hci1: command tx timeout
[  128.059930] Bluetooth: hci0: command tx timeout
[  128.121137] Bluetooth: hci6: command tx timeout
[  128.122427] Bluetooth: hci5: command tx timeout
[  128.185015] Bluetooth: hci7: command tx timeout
[  129.976981] Bluetooth: hci3: command tx timeout
[  130.040930] Bluetooth: hci4: command tx timeout
[  130.105097] Bluetooth: hci1: command tx timeout
[  130.106451] Bluetooth: hci0: command tx timeout
[  130.106478] Bluetooth: hci2: command tx timeout
[  130.169216] Bluetooth: hci5: command tx timeout
[  130.169356] Bluetooth: hci6: command tx timeout
[  130.233536] Bluetooth: hci7: command tx timeout
[  132.024968] Bluetooth: hci3: command tx timeout
[  132.088862] Bluetooth: hci4: command tx timeout
[  132.154842] Bluetooth: hci2: command tx timeout
[  132.156143] Bluetooth: hci1: command tx timeout
[  132.156926] Bluetooth: hci0: command tx timeout
[  132.217021] Bluetooth: hci6: command tx timeout
[  132.218385] Bluetooth: hci5: command tx timeout
[  132.282167] Bluetooth: hci7: command tx timeout
[  186.434726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  186.436120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  186.438753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  186.441706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  186.452447] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  186.453917] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  186.456508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  186.460985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  186.467057] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  186.470893] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  186.499712] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  186.506959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  186.510521] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  186.522062] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  186.525188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  186.542910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  186.544728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  186.548127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  186.566124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  186.576969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  186.614507] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  186.624688] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  186.629126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  186.663062] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  186.669091] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  186.673613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  186.678958] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  186.683515] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  186.692181] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  186.696627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  186.741575] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  186.745960] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  186.759154] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  186.760020] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  186.770102] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  186.801078] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  186.818122] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  186.839417] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  186.877102] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  186.924160] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  188.537207] Bluetooth: hci0: command tx timeout
[  188.537916] Bluetooth: hci1: command tx timeout
[  188.600884] Bluetooth: hci2: command tx timeout
[  188.664875] Bluetooth: hci3: command tx timeout
[  188.728889] Bluetooth: hci5: command tx timeout
[  188.793332] Bluetooth: hci4: command tx timeout
[  188.985893] Bluetooth: hci6: command tx timeout
[  189.177164] Bluetooth: hci7: command tx timeout
[  190.584884] Bluetooth: hci0: command tx timeout
[  190.585412] Bluetooth: hci1: command tx timeout
[  190.649253] Bluetooth: hci2: command tx timeout
[  190.714874] Bluetooth: hci3: command tx timeout
[  190.776940] Bluetooth: hci5: command tx timeout
[  190.841904] Bluetooth: hci4: command tx timeout
[  191.034149] Bluetooth: hci6: command tx timeout
[  191.225956] Bluetooth: hci7: command tx timeout
[  192.633480] Bluetooth: hci0: command tx timeout
[  192.635054] Bluetooth: hci1: command tx timeout
[  192.697870] Bluetooth: hci2: command tx timeout
[  192.760895] Bluetooth: hci3: command tx timeout
[  192.825992] Bluetooth: hci5: command tx timeout
[  192.889220] Bluetooth: hci4: command tx timeout
[  193.082832] Bluetooth: hci6: command tx timeout
[  193.274288] Bluetooth: hci7: command tx timeout
[  194.683016] Bluetooth: hci1: command tx timeout
[  194.683165] Bluetooth: hci0: command tx timeout
[  194.745913] Bluetooth: hci2: command tx timeout
[  194.809108] Bluetooth: hci3: command tx timeout
[  194.874973] Bluetooth: hci5: command tx timeout
[  194.938885] Bluetooth: hci4: command tx timeout
[  195.130227] Bluetooth: hci6: command tx timeout
[  195.323077] Bluetooth: hci7: command tx timeout
[  248.978289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  248.985290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  248.991547] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  249.004576] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  249.012654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  249.165533] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  249.169099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  249.173666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  249.179710] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  249.184215] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  249.296119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  249.298981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  249.303297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  249.315492] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  249.319899] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  249.379575] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  249.386257] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  249.388954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  249.419202] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  249.438487] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  249.443320] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  249.447067] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  249.452110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  249.471139] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  249.487545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  249.504590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  249.518307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  249.523387] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  249.540109] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  249.565117] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  249.568459] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  249.570725] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  249.579619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  249.593339] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  249.603648] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  249.609367] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  249.626740] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  249.641123] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  249.747572] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  249.818935] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  251.065074] Bluetooth: hci0: command tx timeout
[  251.256937] Bluetooth: hci1: command tx timeout
[  251.385918] Bluetooth: hci2: command tx timeout
[  251.515116] Bluetooth: hci3: command tx timeout
[  251.642226] Bluetooth: hci4: command tx timeout
[  251.705144] Bluetooth: hci5: command tx timeout
[  251.771183] Bluetooth: hci6: command tx timeout
[  251.963306] Bluetooth: hci7: command tx timeout
[  253.114091] Bluetooth: hci0: command tx timeout
[  253.306102] Bluetooth: hci1: command tx timeout
[  253.433872] Bluetooth: hci2: command tx timeout
[  253.562123] Bluetooth: hci3: command tx timeout
[  253.690305] Bluetooth: hci4: command tx timeout
[  253.752898] Bluetooth: hci5: command tx timeout
[  253.816952] Bluetooth: hci6: command tx timeout
[  254.010167] Bluetooth: hci7: command tx timeout
[  255.161176] Bluetooth: hci0: command tx timeout
[  255.355032] Bluetooth: hci1: command tx timeout
[  255.481830] Bluetooth: hci2: command tx timeout
[  255.609930] Bluetooth: hci3: command tx timeout
[  255.738272] Bluetooth: hci4: command tx timeout
[  255.801018] Bluetooth: hci5: command tx timeout
[  255.864921] Bluetooth: hci6: command tx timeout
[  256.056881] Bluetooth: hci7: command tx timeout
[  257.208934] Bluetooth: hci0: command tx timeout
[  257.401090] Bluetooth: hci1: command tx timeout
[  257.529170] Bluetooth: hci2: command tx timeout
[  257.657610] Bluetooth: hci3: command tx timeout
[  257.784899] Bluetooth: hci4: command tx timeout
[  257.848931] Bluetooth: hci5: command tx timeout
[  257.914327] Bluetooth: hci6: command tx timeout
[  258.106822] Bluetooth: hci7: command tx timeout
[  311.784850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  311.787608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  311.791562] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  311.795687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  311.799135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  312.014421] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  312.019146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  312.019541] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  312.027169] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  312.027387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  312.031696] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  312.035123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  312.039202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  312.042188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  312.044411] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  312.090607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  312.094163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  312.097107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  312.101268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  312.104176] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  312.151986] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  312.156072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  312.157468] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  312.160601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  312.162531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  312.203745] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  312.211916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  312.219841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  312.248134] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  312.250732] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  312.262136] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  312.266962] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  312.270517] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  312.275951] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  312.282138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  312.285411] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  312.300323] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  312.309443] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  312.333462] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  312.333688] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  313.849882] Bluetooth: hci0: command tx timeout
[  314.105854] Bluetooth: hci2: command tx timeout
[  314.107603] Bluetooth: hci1: command tx timeout
[  314.168902] Bluetooth: hci3: command tx timeout
[  314.232956] Bluetooth: hci5: command tx timeout
[  314.363195] Bluetooth: hci4: command tx timeout
[  314.488901] Bluetooth: hci7: command tx timeout
[  314.680898] Bluetooth: hci6: command tx timeout
[  315.897317] Bluetooth: hci0: command tx timeout
[  316.152946] Bluetooth: hci2: command tx timeout
[  316.153443] Bluetooth: hci1: command tx timeout
[  316.217119] Bluetooth: hci3: command tx timeout
[  316.280869] Bluetooth: hci5: command tx timeout
[  316.409960] Bluetooth: hci4: command tx timeout
[  316.536931] Bluetooth: hci7: command tx timeout
[  316.728870] Bluetooth: hci6: command tx timeout
[  317.945128] Bluetooth: hci0: command tx timeout
[  318.202126] Bluetooth: hci1: command tx timeout
[  318.202619] Bluetooth: hci2: command tx timeout
[  318.265476] Bluetooth: hci3: command tx timeout
[  318.328865] Bluetooth: hci5: command tx timeout
[  318.457179] Bluetooth: hci4: command tx timeout
[  318.585831] Bluetooth: hci7: command tx timeout
[  318.777104] Bluetooth: hci6: command tx timeout
[  319.993046] Bluetooth: hci0: command tx timeout
[  320.249209] Bluetooth: hci2: command tx timeout
[  320.249762] Bluetooth: hci1: command tx timeout
[  320.312942] Bluetooth: hci3: command tx timeout
[  320.379048] Bluetooth: hci5: command tx timeout
[  320.505164] Bluetooth: hci4: command tx timeout
[  320.633095] Bluetooth: hci7: command tx timeout
[  320.825087] Bluetooth: hci6: command tx timeout
[  374.288021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  374.298422] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  374.301533] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  374.319265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  374.328157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  374.346984] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  374.351831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  374.362327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  374.369497] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  374.374633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  374.516604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  374.520010] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  374.527390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  374.538025] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  374.542340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  374.694255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  374.698394] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  374.711464] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  374.730299] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  374.757590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  374.759715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  374.778394] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  374.795260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  374.834248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  374.841404] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  374.848215] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  374.852281] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  374.862010] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  374.866491] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  374.872234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  374.892416] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  374.896718] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  374.898509] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  374.903575] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  374.973597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  374.976338] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  374.987199] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  374.989643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  375.026298] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  375.026455] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  376.376883] Bluetooth: hci0: command tx timeout
[  376.441047] Bluetooth: hci1: command tx timeout
[  376.568880] Bluetooth: hci2: command tx timeout
[  376.953092] Bluetooth: hci3: command tx timeout
[  377.081252] Bluetooth: hci5: command tx timeout
[  377.081929] Bluetooth: hci7: command tx timeout
[  377.145934] Bluetooth: hci4: command tx timeout
[  377.208908] Bluetooth: hci6: command tx timeout
[  378.425887] Bluetooth: hci0: command tx timeout
[  378.488925] Bluetooth: hci1: command tx timeout
[  378.617310] Bluetooth: hci2: command tx timeout
[  379.000919] Bluetooth: hci3: command tx timeout
[  379.129840] Bluetooth: hci7: command tx timeout
[  379.129862] Bluetooth: hci5: command tx timeout
[  379.192931] Bluetooth: hci4: command tx timeout
[  379.258044] Bluetooth: hci6: command tx timeout
[  380.472851] Bluetooth: hci0: command tx timeout
[  380.537003] Bluetooth: hci1: command tx timeout
[  380.665809] Bluetooth: hci2: command tx timeout
[  381.050124] Bluetooth: hci3: command tx timeout
[  381.176965] Bluetooth: hci7: command tx timeout
[  381.178121] Bluetooth: hci5: command tx timeout
[  381.241899] Bluetooth: hci4: command tx timeout
[  381.305851] Bluetooth: hci6: command tx timeout
[  382.521207] Bluetooth: hci0: command tx timeout
[  382.585254] Bluetooth: hci1: command tx timeout
[  382.712916] Bluetooth: hci2: command tx timeout
[  383.097114] Bluetooth: hci3: command tx timeout
[  383.224936] Bluetooth: hci5: command tx timeout
[  383.224952] Bluetooth: hci7: command tx timeout
[  383.290090] Bluetooth: hci4: command tx timeout
[  383.353295] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
12:12:48  Registers:
info registers vcpu 0
RAX=ffffffff87a55508 RBX=ffff888016243700 RCX=0000000000000200 RDX=0000000000000008
RSI=ffff888016244180 RDI=ffff888016244180 RBP=ffff888016244158 RSP=ffff88803398f310
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff888016244180 R13=109ee7de2aae2f44 R14=0000000000000000 R15=0000000000000001
RIP=ffffffff815192a3 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8744be7028 CR3=000000000db06000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff88800b594000 RBX=ffff88800b594000 RCX=ffff88808b594000 RDX=ffffea00002d6500
RSI=ffff888008c4b780 RDI=ffff88800cfc0000 RBP=0000000000000000 RSP=ffff88802d2dfc60
R8 =0000000000000000 R9 =ffffffff81af0600 R10=ffff888008c4b780 R11=0000000000000001
R12=0000000000000000 R13=ffff88802d2dfc98 R14=ffff88800cfc0000 R15=ffff88800cfc0000
RIP=ffffffff81af06f6 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f480cfcc540 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005559afa1cfa8 CR3=0000000029b1e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000