Warning: Permanently added '[localhost]:41552' (ECDSA) to the list of known hosts.
2025/06/01 03:41:43 fuzzer started
2025/06/01 03:41:44 dialing manager at localhost:34361
syzkaller login: [   98.800589] cgroup: Unknown subsys name 'net'
[   98.955289] cgroup: Unknown subsys name 'cpuset'
[   98.987627] cgroup: Unknown subsys name 'rlimit'
2025/06/01 03:42:06 syscalls: 2214
2025/06/01 03:42:06 code coverage: enabled
2025/06/01 03:42:06 comparison tracing: enabled
2025/06/01 03:42:06 extra coverage: enabled
2025/06/01 03:42:06 setuid sandbox: enabled
2025/06/01 03:42:06 namespace sandbox: enabled
2025/06/01 03:42:06 Android sandbox: enabled
2025/06/01 03:42:06 fault injection: enabled
2025/06/01 03:42:06 leak checking: enabled
2025/06/01 03:42:06 net packet injection: enabled
2025/06/01 03:42:06 net device setup: enabled
2025/06/01 03:42:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/01 03:42:06 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/01 03:42:06 USB emulation: enabled
2025/06/01 03:42:06 hci packet injection: enabled
2025/06/01 03:42:06 wifi device emulation: enabled
2025/06/01 03:42:06 802.15.4 emulation: enabled
2025/06/01 03:42:06 fetching corpus: 0, signal 0/0 (executing program)
2025/06/01 03:42:08 starting 8 fuzzer processes
03:42:08 executing program 0:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4010)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x602, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4}}, './file0\x00'})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{0x9, 0x8, 0x2, 0x9}, {0x7fff, 0x1f, 0x40, 0x7fffffff}, {0x9, 0x9, 0x80, 0x7}, {0xe57, 0x1, 0x81, 0xb5}]}, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x5, 0x1000, 0x3f5, 0x2}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20048052}, 0x4000001)
getpeername(r1, &(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, &(0x7f0000000740)=0x80)
r3 = dup3(r2, r1, 0x80000)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x118, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000980)=0x3, 0x4)
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000c40)={&(0x7f00000009c0), 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)={0x1d4, 0x1, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFCTH_TUPLE={0xf4, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x94, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x570}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100000001}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001054)
r4 = pidfd_getfd(r1, r2, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4)
sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x30, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}}, 0x20000800)

03:42:08 executing program 3:
ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x2, 0xdb8f, 0x90a})
ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x9, 0x1, 0xfffffffb}, 0xffffff99, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x5, 0x6f, 0x1, 0x8})
sync_file_range(0xffffffffffffffff, 0x7, 0x2, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000140)=0x4280, &(0x7f0000000180)=0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, <r0=>0x0})
r1 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x81, 0x1f, 0x6, 0x0, 0x84, 0x1008, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8dec, 0x2, @perf_config_ext={0xffffffffffff0001, 0x5}, 0x10104, 0x0, 0x0, 0x0, 0x40, 0x80000000, 0x3, 0x0, 0x4, 0x0, 0x40}, r0, 0xb, 0xffffffffffffffff, 0xa)
fadvise64(r1, 0xffffffff7fffffff, 0x2, 0x1)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x2880, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x855}, 0x40)
flock(r2, 0x8)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000400))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x202080, 0x0)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
r4 = clone3(&(0x7f0000000780)={0x4000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0x19}, &(0x7f0000000600)=""/179, 0xb3, &(0x7f00000006c0)=""/84, &(0x7f0000000740)=[r0, r0, r0, r0], 0x4, {r2}}, 0x58)
r5 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x430240)
kcmp$KCMP_EPOLL_TFD(r0, r4, 0x7, r1, &(0x7f0000000840)={r3, r5, 0x401})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000880)={"b026a333dac7337f1143c983d7de5904", 0x0, 0x0, {0x6, 0x1}, {0x2ed, 0x3}, 0xc4f, [0xb0, 0x3f, 0x6, 0x0, 0x1, 0x8c33, 0x7, 0x7, 0x1, 0x9, 0x2b7a51c7, 0x0, 0x8, 0x8001, 0x0, 0x6]})

03:42:08 executing program 1:
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xffffff43)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1ac, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x33f5}]}, @CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x20}]}, @CTA_NAT_DST={0x50, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7f}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000001840)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001880)=0x14, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001900)={'gretap0\x00', &(0x7f00000018c0)={'syztnl1\x00', <r2=>r1, 0x7, 0xf831, 0x5, 0x2, {{0x8, 0x4, 0x0, 0x7, 0x20, 0x65, 0x0, 0x20, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@rr={0x7, 0xb, 0x3c, [@empty, @local]}]}}}}})
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0x94, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}]}]}, 0x94}}, 0x2404c400)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, <r4=>r3, {0x1}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b40), r0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000001c00)={'ip6_vti0\x00', &(0x7f0000001b80)={'syztnl0\x00', <r6=>r2, 0x4, 0x1a, 0x0, 0x2, 0x6, @local, @private1, 0x8000, 0x20, 0x9, 0xffff}})
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001d40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0x9c, r5, 0x800, 0x70bd29, 0xf8a7, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x8000}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x100}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x9c}}, 0x24000800)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001d80)='/proc/zoneinfo\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), r4)
sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x44, r8, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xf7}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x24e}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x1)
pipe2(&(0x7f0000001f40)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x800)
sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5d}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000023c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002380)={&(0x7f0000002100)={0x27c, 0x13, 0x1, 0x70bd27, 0x25dfdbff, {0x23, 0x4, 0x1f, 0x1, {0x4e24, 0x4e22, [0x42, 0x817, 0x5, 0x75e], [0x8, 0x5f3, 0xf324, 0xfffffffc], r1, [0x1, 0x1000]}, 0x20, 0xc0000000}, [@INET_DIAG_REQ_BYTECODE={0x34, 0x1, "698d25f7401a1c0c10e3b766bc9ba5cf5e9a21095c61538dd0b7a6d7202f96484e1476e8c8b01217e70e9adb465d8d34"}, @INET_DIAG_REQ_BYTECODE={0x62, 0x1, "4213c4157a3e3d0e969f1b9d292d363326ac735ed0bb87dc791aea4ca63ab1a3e5b9b4a223d62a0419d46c454ecc3f72e2626c76dd8515eb5bf8887bf2a7488822eda5f7cc895bb3dfa2e12e2c298898b57f78a9ccfa622ae9c1c13b85ad"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "c9cc5729ae36fea608d3ce96c85d7daa26abb15a70d48d5ab2b8db1976ba60a391a3b6c4ba725357cef4bb0e2d33f594d5c98f8f3e926eddfafde07ac7817e9aa60a45c487"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "6edc576dc19392d7519aa07b932866a1bf2c93325841904220ab857322e2642918d1f71a0fa72212b4dc0afb98536ee0daa365a33b8fbe35211752a944"}, @INET_DIAG_REQ_BYTECODE={0xb4, 0x1, "46120a06f5142a81ace03f6f757f2d692374290ba1b1fe27e930ccff17e3668ddedd1532b8969cf9d0fc4ebcfb0291e42ae0da4bd2ad65ed27d2ceb2910aee6ea712921860e731c1984b3ca90f7770e64aeb2661ba54ad5598eef497da4aa139fa71584097aa7c351547803bea467f5c5bda7a9b72f2a219c6c728549d00d6b3cb47e47bc81f40664fda91e139f54c3634613b5313e4cf65317b1e041df7971e26a9d8fa5637e0beaddf02050ac6697f"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "282b0289886fdfe39494b0868cf612d1339b5000f00427e63ac4db548b49e4e0ff787f8fc2b89a1ab2a2437c95e7d3510764"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "f9d63fb6ea356ea777781e14cffaa1812ad7fb0c9712"}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4891}, 0x20000801)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002400)={{{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x956, 0x4e21, 0x6, 0xa, 0x20, 0x0, 0x87, r2, 0xffffffffffffffff}, {0x1f, 0x3, 0x15dd000000000000, 0x9, 0x2, 0x100, 0x4e, 0x49f6}, {0x80000001, 0x4, 0x7, 0x5}, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4d2, 0x3c}, 0x5, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x2, 0x44, 0xffffffff, 0x8, 0xff}}, 0xe8)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r9, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0x8b}}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x20}, {0x8}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xb9}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40840)
syz_genetlink_get_family_id$mptcp(&(0x7f0000002640), 0xffffffffffffffff)

03:42:08 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r3=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x800)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r1, 0xc09, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xfffd}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}]}, 0x5c}}, 0x20040000)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x200, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74c17d1f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe895}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x475c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4877}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x781a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a78}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21132e08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4334a1ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3687ffe0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27d03c92}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21b5b5ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacb6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3897}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d563972}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x297d6f98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5df6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4afb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4889e0e8}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3497c5da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd7930fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67e4}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x3}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc8, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fb0983a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1251e95a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5acac581}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xedc0638}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53219f7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x586b5cd8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28d6eb5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25e1fda2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7616fc39}]}, {0x4}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ae02598}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x200}, 0x1, 0x0, 0x0, 0x40008}, 0x40)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x3f6, 0xa10, 0x70bd26, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x1)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x22}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000840)=""/106, &(0x7f00000008c0)=0x6a)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x78}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x224d1)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa8, r4, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x13, 0x24, [{0x36}, {0x8f}, {0xb}, {0x4, 0x1}, {0xc}, {0x30}, {0x4, 0x1}, {0x18}, {0x4}, {0x2}, {0x1b}, {0x16, 0x1}, {0x6c, 0x1}, {0x6c}, {0x29, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x3, 0x7, 0x0, {0x493, 0x5, 0x0, 0x6, 0x0, 0x1, 0x1, 0x3}, 0x8, 0x101, 0x2}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x0, 0x6, 0x0, {0x5, 0x3f, 0x0, 0x80, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x1f, 0x9}}, @NL80211_ATTR_BSS_BASIC_RATES={0xf, 0x24, [{0x4}, {0x5}, {}, {0x30, 0x1}, {0x48}, {0x48, 0x1}, {0xb, 0x1}, {0x76}, {0xc}, {0x48}, {0x12, 0x1}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x3, 0x1, 0x0, {0x4, 0x1, 0x0, 0x7, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x800, 0x7, 0x9}}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xa8}}, 0x40084)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x8c, r6, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffffffff, 0xf}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x20}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x9}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xf}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x8}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x2, 0x5, 0x0, {0x1, 0x4, 0x0, 0x1c7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x738}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, 0x0, 0x10, 0x70bd2d, 0x9, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000800)

03:42:08 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x6}}, './file0\x00'})
ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000040)={0x81, "7edd578ca7d80b132a5a6fca36a071009d327ac9bfb139f21de09cdb869ed970fe7ccbe8c7a6985d116adaec28df4f66c45b8b6c28bae3df409bae8c92e672aa"})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0)
write$rfkill(r1, &(0x7f0000000100)={0x1f, 0x1}, 0x8)
fchdir(r1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './file0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0)
fcntl$getflags(r2, 0x401)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{r0}, 0x1, &(0x7f00000001c0)=[0x5], 0x7, 0x0, [0x8c0e, 0x5, 0x62b1, 0xfffffffffffffffe]})
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000280)={0x1000, 0x1, 0xf345, 0x5, 0x11, "6459baad1e9be2a3ebd24d5bfc6c1bc9cd8eb3"})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2bba8f7, 0x1a}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e4}]]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008080)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000440)=0x6)
r4 = syz_open_dev$vcsa(&(0x7f0000000480), 0x7, 0x280000)
sendmsg$FOU_CMD_GET(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x25}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000600)={0x1f, 0x5, @none, 0x3, 0x2}, 0xe)
getsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000640)=""/106, &(0x7f00000006c0)=0x6a)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x4040, 0xc9)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40000)

03:42:08 executing program 5:
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000180)=""/223, 0xdf}, {&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000002c0)=""/250, 0xfa}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/254, 0xfe}, {&(0x7f0000000540)=""/107, 0x6b}], 0x9, &(0x7f0000000680)=[@rights={{0x1c, 0x1, 0x1, [<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r9=>0x0, <r10=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r11=>0x0, <r12=>0x0}}}], 0xd8}, 0x40000000)
fcntl$setpipe(r6, 0x407, 0x5)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x3f7, 0x200, 0x70bd26, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24048001}, 0x4008810)
ioctl$SNAPSHOT_FREE(r1, 0x3305)
r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000940)={0x6, &(0x7f0000000900)=[{0x1000, 0x7f, 0xfe, 0x5}, {0x7, 0x9, 0xe3, 0x3f}, {0x6, 0x31, 0x1, 0x3}, {0x9, 0x2, 0x9, 0x3}, {0x5, 0x40, 0x5, 0x8}, {0x6, 0xa9, 0x1, 0x3}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000980)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000008c0)="617e780fee1175eac63c36b1107518fcdcd787", 0x13, r13}, 0x68)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r14=>r7, {0x100}}, './file0\x00'})
r15 = getpgid(r3)
statx(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x2000, 0x4, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = fork()
r18 = timerfd_create(0x2, 0x800)
newfstatat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0}, 0x6000)
sendmmsg$unix(r14, &(0x7f0000001040)=[{{&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000ac0)}, {&(0x7f0000000b00)="b46c5e469eaa", 0x6}, {&(0x7f0000000b40)="09e2478c01968849a19fe8142c403a5434b5cac0c5e1670b439b57f5f862260eb1d7bcf6c4a08c031b0ed091f9919b69f73faf669ea730eca0494ca3f5bc2f27bb65a9250e39bb99acd1f553a4ad6b512f7207b041f037ea1924cf0ae74fb0c170236f", 0x63}, {&(0x7f0000000bc0)="95d37f213ba007a072f7eeebacdde156e8710e239ff5779c14702734338ed0a43f11b24c5e8f01dbd8fc6302f62cbe9ebdd74983b47570ef824538368d81fa2bb0f1569061743167d609d52c6e0ef9771ebed9a7b6178d55d726080710de57394aedb872eaf1592275012e35fe2ecb7d2a87d3e96246032ca7da418d858fa6415ddf69124aae35e0e5b82695e683a66b38621b265edc1bf3c892c1fd8aa81e5cd3fe3714c93b234859d6c26cc4b4874c8864f4941239de", 0xb7}, {&(0x7f0000000c80)="b7165615a39bcd38685364b5d7e0757f0e15a60a9fb94dc1ee8a32f7d9d806b690afc84af30cf71344b9af6b5eaf9c1a70c27c5c3c09caa3186b4008468b4314ad053aff9083f19f3da9466896fdce3fd9d9", 0x52}], 0x5, &(0x7f0000000f80)=[@cred={{0x1c, 0x1, 0x2, {r15, r16, r12}}}, @cred={{0x1c, 0x1, 0x2, {r17, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r18]}}, @cred={{0x1c, 0x1, 0x2, {r3, r11, r19}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, r4, r0]}}], 0x98, 0x20000040}}], 0x1, 0x0)
sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
r20 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000011c0), 0x80000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r8, 0x89f4, &(0x7f00000012c0)={'syztnl1\x00', &(0x7f0000001240)={'syztnl2\x00', <r21=>0x0, 0x29, 0x5, 0x40, 0x8cc, 0x0, @mcast2, @private0, 0x80, 0x8000, 0x1, 0x10000}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r20, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0xb0, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x90}, 0x4000885)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001440)={"bfdf6f1bf545779015c1115a44e24d8c", 0x0, 0x0, {0x100, 0xfff}, {0xdb, 0x1}, 0x1, [0xfb8d, 0x0, 0x8, 0x4, 0x1, 0x7fff, 0x7, 0x2, 0xfffffffffffffff7, 0x3f, 0x100000000, 0x401, 0x5, 0x80000001, 0x7f, 0x9]})
r22 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$F_GET_FILE_RW_HINT(r22, 0x40d, &(0x7f0000001540))

[  122.417656] audit: type=1400 audit(1748749328.125:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:42:08 executing program 6:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xef6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x9f}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7fffffff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4044800)
fcntl$setflags(r0, 0x2, 0x1)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x120, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x71e}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xaa4}}}}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x810)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000400)={0x0, 0x401, 0x50, 0x5, 0x100})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$CDROMSETSPINDOWN(r2, 0x531e, &(0x7f0000000480)=0xc)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/resume_offset', 0x10000, 0x28)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd2d, 0x200, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x200040c0)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000b80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000740)={0x3d8, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x36}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x364}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffb575}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x745}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc864}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbcb7}]}, @TIPC_NLA_LINK={0x194, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xafa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd760}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfbb7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x520b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23df}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x3d8}}, 0x4040010)
r5 = syz_open_dev$mouse(&(0x7f0000000bc0), 0x3ff, 0x44402)
ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000c00))
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x2, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x5)
r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000d80)=<r7=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000000dc0)=r7)

03:42:08 executing program 7:
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x7c, &(0x7f0000000000)=@generic={0x6, 0x2, 0x74, "d1f848a8", "381130c52b4eee2223de033d462740b34b3a79265a3ccaaebf7df48fc582c57dc398d62c6d2c6a35b1d6736905618cfd49f2d57f2addac1df4af0c0ce1d3842becebcca778a0f61943eae186305b06e5e42fe5d9a569d1a6192825dfb2f8e395d18c754b043b62fb5d39084955889d3361698edc"})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x8488)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x300, 0x8, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x400, 0x70bd2a, 0x1, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x1)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r1)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20004004)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40100102}, 0xc, &(0x7f00000018c0)={&(0x7f0000000680)={0x1210, 0x0, 0xc4b943301d3e651f, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x937}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x1158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "56313d138fe8fc6b98bc0949eb6939ec5706d8620529d873fa313d987c51e669a2c8431c"}}, @TIPC_NLA_NODE_ID={0x72, 0x3, "e5dba746565c47753f377c34ea28fa0f37da96457c6a8cfb5360ede2ccadda1e238bde5ef28dc93ccb121c87ef3f70f9a77443f5bac1641ff08842116fb99bfdba20ebaf3ea0b78c61f5667033c8ab05ecb95f7d209c98c1bc9d0ac10c0d3bb87113a0261881d089b17cec28c33b"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "8b16482782f359a93d5e63d3e212d37b5abbb5994213bacc6143ec5a02f68ee6c811ce76"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "2ddf9b0fa628602d682c69561ea510338ed35a1fa011"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x1210}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040010)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'NLBL_UNLBL\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x34}}, 0x20000000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x94, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040}, 0x60)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000001c40), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x3c, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x15)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001d80), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x90, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:unconfined_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x90}, 0x1, 0x0, 0x0, 0x400c851}, 0x4000800)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x38, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400a010}, 0x8000)
gettid()

[  123.813808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  123.816325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  123.820627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  123.823378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  123.825524] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  123.829111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  123.833548] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  123.840407] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  123.845152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  123.851378] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  123.897017] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  123.905280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  123.908407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  123.926676] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  123.930661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  123.936286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  123.937662] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  123.955247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  123.959055] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  123.967553] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  123.977654] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  123.982137] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  123.986318] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  123.987875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  123.991253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  123.992827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  124.002034] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  124.003981] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  124.010547] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  124.017028] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  124.018975] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  124.058795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  124.069626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  124.072303] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  124.075354] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  124.078063] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  124.086973] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  124.095637] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  124.132191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  124.165147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  125.944780] Bluetooth: hci0: command tx timeout
[  125.944791] Bluetooth: hci1: command tx timeout
[  126.069028] Bluetooth: hci2: command tx timeout
[  126.132796] Bluetooth: hci4: command tx timeout
[  126.132831] Bluetooth: hci6: command tx timeout
[  126.196988] Bluetooth: hci3: command tx timeout
[  126.197271] Bluetooth: hci7: command tx timeout
[  126.261788] Bluetooth: hci5: command tx timeout
[  127.989055] Bluetooth: hci1: command tx timeout
[  127.989139] Bluetooth: hci0: command tx timeout
[  128.117253] Bluetooth: hci2: command tx timeout
[  128.180837] Bluetooth: hci6: command tx timeout
[  128.181035] Bluetooth: hci4: command tx timeout
[  128.246559] Bluetooth: hci3: command tx timeout
[  128.246744] Bluetooth: hci7: command tx timeout
[  128.308933] Bluetooth: hci5: command tx timeout
[  130.037832] Bluetooth: hci0: command tx timeout
[  130.037995] Bluetooth: hci1: command tx timeout
[  130.164954] Bluetooth: hci2: command tx timeout
[  130.229501] Bluetooth: hci6: command tx timeout
[  130.229983] Bluetooth: hci4: command tx timeout
[  130.293447] Bluetooth: hci7: command tx timeout
[  130.293506] Bluetooth: hci3: command tx timeout
[  130.357869] Bluetooth: hci5: command tx timeout
[  132.084833] Bluetooth: hci1: command tx timeout
[  132.085949] Bluetooth: hci0: command tx timeout
[  132.214839] Bluetooth: hci2: command tx timeout
[  132.276817] Bluetooth: hci6: command tx timeout
[  132.277363] Bluetooth: hci4: command tx timeout
[  132.341774] Bluetooth: hci7: command tx timeout
[  132.341799] Bluetooth: hci3: command tx timeout
[  132.404785] Bluetooth: hci5: command tx timeout
[  183.976113] syz-executor.7 (286) used greatest stack depth: 24640 bytes left
[  185.996622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  186.006215] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  186.010799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  186.022677] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  186.028400] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  186.073797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  186.078099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  186.083149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  186.091634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  186.097470] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  186.341229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  186.355371] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  186.367211] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  186.369613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  186.377957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  186.386916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  186.389407] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  186.392557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  186.398405] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  186.398990] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  186.404256] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  186.435394] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  186.438212] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  186.440309] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  186.445191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  186.447033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  186.449254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  186.456195] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  186.472796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  186.485209] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  186.600253] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  186.604026] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  186.606426] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  186.667258] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  186.678363] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  186.972601] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  186.984228] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  187.056780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  187.136402] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  187.154906] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  188.086944] Bluetooth: hci0: command tx timeout
[  188.151160] Bluetooth: hci1: command tx timeout
[  188.533927] Bluetooth: hci2: command tx timeout
[  188.597134] Bluetooth: hci5: command tx timeout
[  188.598601] Bluetooth: hci3: command tx timeout
[  188.599149] Bluetooth: hci4: command tx timeout
[  188.724862] Bluetooth: hci7: command tx timeout
[  189.236965] Bluetooth: hci6: command tx timeout
[  190.132774] Bluetooth: hci0: command tx timeout
[  190.196933] Bluetooth: hci1: command tx timeout
[  190.581791] Bluetooth: hci2: command tx timeout
[  190.644779] Bluetooth: hci4: command tx timeout
[  190.645273] Bluetooth: hci3: command tx timeout
[  190.645310] Bluetooth: hci5: command tx timeout
[  190.772942] Bluetooth: hci7: command tx timeout
[  191.286920] Bluetooth: hci6: command tx timeout
[  192.180794] Bluetooth: hci0: command tx timeout
[  192.244899] Bluetooth: hci1: command tx timeout
[  192.630244] Bluetooth: hci2: command tx timeout
[  192.692951] Bluetooth: hci4: command tx timeout
[  192.693414] Bluetooth: hci3: command tx timeout
[  192.694401] Bluetooth: hci5: command tx timeout
[  192.821838] Bluetooth: hci7: command tx timeout
[  193.333744] Bluetooth: hci6: command tx timeout
[  194.229763] Bluetooth: hci0: command tx timeout
[  194.292792] Bluetooth: hci1: command tx timeout
[  194.676796] Bluetooth: hci2: command tx timeout
[  194.740885] Bluetooth: hci5: command tx timeout
[  194.740925] Bluetooth: hci3: command tx timeout
[  194.741327] Bluetooth: hci4: command tx timeout
[  194.869818] Bluetooth: hci7: command tx timeout
[  195.383127] Bluetooth: hci6: command tx timeout
[  248.394577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  248.403369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  248.407549] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  248.414124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  248.420460] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  248.517605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  248.536464] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  248.542007] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  248.557212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  248.568068] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  248.728296] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  248.730638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  248.742423] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  248.757396] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  248.775132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  248.849238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  248.865832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  248.871423] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  248.878084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  248.880221] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  248.893216] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  248.896025] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  248.907966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  248.947647] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  248.957196] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  248.959623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  248.968948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  248.995838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  249.009829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  249.012968] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  249.020416] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  249.026200] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  249.031467] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  249.033245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  249.037625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  249.050141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  249.094440] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  249.098163] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  249.134602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  249.149946] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  250.484765] Bluetooth: hci0: command tx timeout
[  250.612794] Bluetooth: hci1: command tx timeout
[  250.868913] Bluetooth: hci2: command tx timeout
[  250.996960] Bluetooth: hci5: command tx timeout
[  251.126080] Bluetooth: hci6: command tx timeout
[  251.126089] Bluetooth: hci3: command tx timeout
[  251.252972] Bluetooth: hci4: command tx timeout
[  251.252979] Bluetooth: hci7: command tx timeout
[  252.533778] Bluetooth: hci0: command tx timeout
[  252.662746] Bluetooth: hci1: command tx timeout
[  252.917990] Bluetooth: hci2: command tx timeout
[  253.045011] Bluetooth: hci5: command tx timeout
[  253.172870] Bluetooth: hci3: command tx timeout
[  253.172967] Bluetooth: hci6: command tx timeout
[  253.300776] Bluetooth: hci7: command tx timeout
[  253.300804] Bluetooth: hci4: command tx timeout
[  254.580754] Bluetooth: hci0: command tx timeout
[  254.709003] Bluetooth: hci1: command tx timeout
[  254.965176] Bluetooth: hci2: command tx timeout
[  255.093241] Bluetooth: hci5: command tx timeout
[  255.221106] Bluetooth: hci3: command tx timeout
[  255.221123] Bluetooth: hci6: command tx timeout
[  255.348882] Bluetooth: hci4: command tx timeout
[  255.350452] Bluetooth: hci7: command tx timeout
[  256.628931] Bluetooth: hci0: command tx timeout
[  256.758745] Bluetooth: hci1: command tx timeout
[  257.012954] Bluetooth: hci2: command tx timeout
[  257.140763] Bluetooth: hci5: command tx timeout
[  257.269764] Bluetooth: hci3: command tx timeout
[  257.269852] Bluetooth: hci6: command tx timeout
[  257.398717] Bluetooth: hci7: command tx timeout
[  257.398738] Bluetooth: hci4: command tx timeout
[  310.996669] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  311.008455] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  311.009165] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  311.013376] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  311.014111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  311.021498] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  311.028580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  311.031743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  311.039457] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  311.057560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  311.083454] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  311.098556] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  311.104365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  311.141416] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  311.149294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  311.253129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  311.261343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  311.267342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  311.270453] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  311.272874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  311.278848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  311.282256] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  311.292003] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.314416] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.318039] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  311.340469] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  311.346146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  311.363428] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  311.388634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  311.408199] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  311.484853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  311.492621] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  311.529193] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  311.537035] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  311.539812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  311.542075] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  311.569312] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  311.575290] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  311.579951] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  311.584033] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  313.077812] Bluetooth: hci0: command tx timeout
[  313.141089] Bluetooth: hci1: command tx timeout
[  313.205166] Bluetooth: hci2: command tx timeout
[  313.332869] Bluetooth: hci4: command tx timeout
[  313.460800] Bluetooth: hci5: command tx timeout
[  313.526512] Bluetooth: hci3: command tx timeout
[  313.717079] Bluetooth: hci6: command tx timeout
[  313.717279] Bluetooth: hci7: command tx timeout
[  315.124764] Bluetooth: hci0: command tx timeout
[  315.188891] Bluetooth: hci1: command tx timeout
[  315.252858] Bluetooth: hci2: command tx timeout
[  315.382742] Bluetooth: hci4: command tx timeout
[  315.509082] Bluetooth: hci5: command tx timeout
[  315.573002] Bluetooth: hci3: command tx timeout
[  315.766730] Bluetooth: hci7: command tx timeout
[  315.767178] Bluetooth: hci6: command tx timeout
[  317.173938] Bluetooth: hci0: command tx timeout
[  317.237011] Bluetooth: hci1: command tx timeout
[  317.300981] Bluetooth: hci2: command tx timeout
[  317.428742] Bluetooth: hci4: command tx timeout
[  317.556802] Bluetooth: hci5: command tx timeout
[  317.621774] Bluetooth: hci3: command tx timeout
[  317.813782] Bluetooth: hci6: command tx timeout
[  317.813816] Bluetooth: hci7: command tx timeout
[  319.222013] Bluetooth: hci0: command tx timeout
[  319.285756] Bluetooth: hci1: command tx timeout
[  319.351786] Bluetooth: hci2: command tx timeout
[  319.476851] Bluetooth: hci4: command tx timeout
[  319.606712] Bluetooth: hci5: command tx timeout
[  319.670745] Bluetooth: hci3: command tx timeout
[  319.861044] Bluetooth: hci7: command tx timeout
[  319.861908] Bluetooth: hci6: command tx timeout
[  373.318894] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  373.322353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  373.325102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  373.333057] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  373.341295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  373.447809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  373.450253] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  373.455345] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  373.455409] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  373.458212] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  373.461055] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  373.468109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  373.471192] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  373.472362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  373.476652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  373.548983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  373.568299] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  373.572248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  373.579180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  373.595159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  373.601217] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  373.605200] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  373.608273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  373.613962] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  373.619905] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  373.660324] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  373.673160] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  373.678303] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  373.683614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  373.687045] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  373.723503] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  373.736952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  373.763183] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  373.773292] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  373.776052] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  373.792206] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  373.795662] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  373.798434] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  373.872243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  373.941627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  375.413788] Bluetooth: hci0: command tx timeout
[  375.540922] Bluetooth: hci1: command tx timeout
[  375.542604] Bluetooth: hci2: command tx timeout
[  375.668823] Bluetooth: hci3: command tx timeout
[  375.732881] Bluetooth: hci4: command tx timeout
[  375.734562] Bluetooth: hci6: command tx timeout
[  375.925100] Bluetooth: hci7: command tx timeout
[  376.052940] Bluetooth: hci5: command tx timeout
[  377.460819] Bluetooth: hci0: command tx timeout
[  377.588797] Bluetooth: hci2: command tx timeout
[  377.589281] Bluetooth: hci1: command tx timeout
[  377.717149] Bluetooth: hci3: command tx timeout
[  377.781036] Bluetooth: hci6: command tx timeout
[  377.781510] Bluetooth: hci4: command tx timeout
[  377.973833] Bluetooth: hci7: command tx timeout
[  378.101808] Bluetooth: hci5: command tx timeout
[  379.510916] Bluetooth: hci0: command tx timeout
[  379.637031] Bluetooth: hci1: command tx timeout
[  379.637519] Bluetooth: hci2: command tx timeout
[  379.766783] Bluetooth: hci3: command tx timeout
[  379.830021] Bluetooth: hci4: command tx timeout
[  379.830439] Bluetooth: hci6: command tx timeout
[  380.022089] Bluetooth: hci7: command tx timeout
[  380.148937] Bluetooth: hci5: command tx timeout
[  381.557129] Bluetooth: hci0: command tx timeout
[  381.684932] Bluetooth: hci1: command tx timeout
[  381.686322] Bluetooth: hci2: command tx timeout
[  381.812832] Bluetooth: hci3: command tx timeout
[  381.877472] Bluetooth: hci6: command tx timeout
[  381.878847] Bluetooth: hci4: command tx timeout
[  382.069177] Bluetooth: hci7: command tx timeout
[  382.199145] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
03:47:12  Registers:
info registers vcpu 0
RAX=ffff8880374f8001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff8880374f7c01
RSI=ffff8880374f7ce8 RDI=ffff88806ce08a10 RBP=ffff88806ce08a58 RSP=ffff88806ce08990
R8 =ffffffff86864460 R9 =ffff88806ce08a40 R10=000000000003b6bd R11=0000000000021b1c
R12=ffff88806ce08a60 R13=ffff88806ce08a48 R14=ffff8880374f7cf0 R15=ffff88806ce08a00
RIP=ffffffff813548f8 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f4ba9d34540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4baa20e000 CR3=000000002e2c4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff
XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69
XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=4b952e4da9267483 RDX=ffffffff81353e09
RSI=000000005e406224 RDI=0000000000104185 RBP=ffff8880271a78f0 RSP=ffff8880271a7828
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=ffff8880271a78e0 R14=ffff888016839b80 R15=ffff8880271a7898
RIP=ffffffff81353e23 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f6b049a1540 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc2a5d7f98 CR3=0000000007270000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000