Warning: Permanently added '[localhost]:51148' (ECDSA) to the list of known hosts.
2025/06/02 10:02:58 fuzzer started
2025/06/02 10:02:59 dialing manager at localhost:34361
syzkaller login: [  100.503423] cgroup: Unknown subsys name 'net'
[  100.651229] cgroup: Unknown subsys name 'cpuset'
[  100.706382] cgroup: Unknown subsys name 'rlimit'
2025/06/02 10:03:20 syscalls: 2214
2025/06/02 10:03:20 code coverage: enabled
2025/06/02 10:03:20 comparison tracing: enabled
2025/06/02 10:03:20 extra coverage: enabled
2025/06/02 10:03:20 setuid sandbox: enabled
2025/06/02 10:03:20 namespace sandbox: enabled
2025/06/02 10:03:20 Android sandbox: enabled
2025/06/02 10:03:20 fault injection: enabled
2025/06/02 10:03:20 leak checking: enabled
2025/06/02 10:03:20 net packet injection: enabled
2025/06/02 10:03:20 net device setup: enabled
2025/06/02 10:03:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/02 10:03:20 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/02 10:03:20 USB emulation: enabled
2025/06/02 10:03:20 hci packet injection: enabled
2025/06/02 10:03:20 wifi device emulation: enabled
2025/06/02 10:03:20 802.15.4 emulation: enabled
2025/06/02 10:03:20 fetching corpus: 0, signal 0/0 (executing program)
2025/06/02 10:03:23 starting 8 fuzzer processes
10:03:23 executing program 0:
getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={<r1=>0x0, @loopback, @multicast2}, &(0x7f0000000240)=0xc)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@empty, <r2=>0x0}, &(0x7f00000002c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', <r3=>0x0, 0x2f, 0x0, 0x80, 0x36, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x8, 0x10, 0x100, 0x40}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1c0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x200480c4)
prlimit64(0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x4}, &(0x7f0000000680))
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x55)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000900)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6gre0\x00', r4, 0x29, 0xff, 0x7, 0x3, 0x1c, @dev={0xfe, 0x80, '\x00', 0x42}, @loopback, 0x7800, 0x87, 0x6b, 0x594}})
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000b40)=[{}, {r6, 0x400}, {0xffffffffffffffff, 0x100}], 0x3, 0x5)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000b80)={{0x1, 0x1, 0x18, <r7=>r6, {0xffff}}, './file0\x00'})
sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, 0x15, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x30}}, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, <r8=>r7, {0x6}}, './file0\x00'})
connect$packet(r8, &(0x7f0000000d00)={0x11, 0xc, r3, 0x1, 0x8, 0x6, @local}, 0x14)
ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000000d40)={0x502, 0x1000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
fchown(r7, r5, 0xee00)
ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000008580)={'\x00', 0x7, 0x0, 0x8})
ioctl$HIDIOCGUSAGE(r8, 0xc018480b, &(0x7f0000008600)={0x1, 0x200, 0x3, 0x0, 0xfffffc00, 0x80000000})

10:03:23 executing program 1:
r0 = dup(0xffffffffffffffff)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x20)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x84}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8d3e}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff7fff}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x41)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x400}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffffa}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x101}]}, 0x4c}}, 0x800)
r2 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
fallocate(r2, 0x2, 0x80, 0x4000)
ioctl$KDSETLED(r1, 0x4b32, 0x2ac9)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000340)=0x2)
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}}, 0x81)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000480))
r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x20002, 0x0)
r5 = syz_open_dev$hidraw(&(0x7f0000000500), 0x1, 0x41c0c2)
sync_file_range(r5, 0x7, 0x100, 0x7)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000540)={0x8, "38bed7"}, 0x6)
pwrite64(r4, &(0x7f0000000580)="b749dc0da04502c59913fdeb3950198e00c8dff03a3e64212c70b9295443294913a8e502db4a3051826f77922ffb0bb7d7e887c74004dbc417f7211866b4f2ecf180651b908eab51d88b4e4e9bcdcb71505d1efc2c791e47a6044b22b7ae0b4a5c3a69aa9afd3cb7c92279b6c19c0357fa2d59f450ee4a9d3a394cffb0a69e3be1f5e53228", 0x85, 0x9)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x700, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40040)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000740)={0x3, 0x81, 0x5, 0x8, 0xf, "f24e75876a035335"})
ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000780)={'\x00', 0x5, 0x2, 0x1000})

10:03:23 executing program 2:
r0 = mq_open(&(0x7f0000000000)='}}---%]/$#--\x00', 0x80, 0x154, &(0x7f0000000040)={0x0, 0x400, 0x40, 0x1f})
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x54)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x7, 0x4)
poll(&(0x7f0000000140)=[{r0, 0x3040}, {r0, 0xb}, {r0, 0x2000}], 0x3, 0x3f0000)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0))
r1 = inotify_init1(0x80000)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x806)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000340)={0x3, 0x2, 0x3, 0x8b36, 0x2, 0x7fff})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000380)={<r3=>r1, 0x8, 0x8, 0x7fffffff})
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f00000003c0))
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000440)={0xd08, 0x20, 0x20, 0x6, 0x1, 0xa6, 0x7})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r3, {0x3}}, './file0\x00'})
fcntl$dupfd(r5, 0x406, r1)
r6 = openat$cgroup_ro(r4, &(0x7f00000004c0)='pids.current\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @void, @val={0xc, 0x99, {0x7fff, 0x54}}}}, ["", "", "", ""]}, 0x28}}, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffa0)

10:03:23 executing program 3:
readahead(0xffffffffffffffff, 0xd39, 0x5)
fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/17)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)={0x0, @local, 0x4e23, 0x2, 'dh\x00', 0x1, 0x80000001, 0x5b}, 0x2c)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x440000, 0x0)
fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x2, "9b6be9884cec7df459ae2e70dbb1ab4d5a1425"}, 0x14, 0x2)
r1 = mq_open(&(0x7f0000000140)='dh\x00', 0x80, 0x119, &(0x7f0000000180)={0x2, 0x7a3, 0xff, 0x8})
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00')
write$binfmt_misc(r2, &(0x7f0000000200)={'syz0', "5f94f8856052ccd7e20064474af6c0999e0434e28c3c9bf2d05535d4e3cbed0b4393ba1249d515d4c48597edf34fda64a73ebe604f0410c128a05e8239d1656d9efabdae6844f60a4a8d4b44247f93963d2dca394bcfcf1b9c9c8669bee654035a7b4b7feb5f22b8c7f8117e9536bae6b71de639cb1064f4be0f449be7ec45745e97492be23de821b4573fc628d85a2847bbe0c5697745af355224f949e650c0c1b9fea2646159fb798f52818f54b5af461e2daea318c62a1b818d4170cb14b3454fa2910ade06d200"}, 0xcd)
r3 = open(&(0x7f00000003c0)='./file0\x00', 0x202, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000400)={'\x00', 0x400, 0x2, 0x40})
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x200000, 0x0)
write$binfmt_elf32(r4, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x80, 0x4, 0x0, 0x3, 0x3, 0x1, 0x306, 0x38, 0xd5, 0x4, 0x7f, 0x20, 0x2, 0x4, 0x20, 0x2}, [{0x3, 0xffff, 0x2, 0xffff7fff, 0x3, 0xf40, 0xd66, 0x7fff}], "b3963ad05dff32cabf92d36619014e13fcd78015c13e86fbe115a6f2e10fca9690e2a993b55d8779caa7f67b37a0bc401bd1d324948aaea4775a26ecc92a28775362660d53b22d4c0f654ff6bf886c052bd9125d015f4dc261ec2bf293298b5e7e0d81bfd92dbcd7119f4edada3f0bb817", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6c9)
fcntl$notify(r1, 0x402, 0x8000001a)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000bc0)={0x0, 0x8000, 0x101})
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000fc0)="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")
ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f00000010c0))
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/4096})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000002180))

[  124.646671] audit: type=1400 audit(1748858603.376:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:03:23 executing program 4:
sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x881)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x7, 0x987a3e280000000, 0x8, 0x3})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x0, 0x1, 0x301, 0x0, 0x0, {0x1}, [@CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x8080)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa8, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x8c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc90}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x58)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1e8, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xdadc}, @CTA_EXPECT_NAT={0x1cc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x31}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010100}}}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x80}, 0x48d1)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x70, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000041)
syz_genetlink_get_family_id$nbd(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x50}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b00)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x24, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffd}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x20000000)
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d80), 0x40200, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9cb6cc52cc4c"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="61bcf224a45e"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c639e4f5d747"}]}, 0x50}}, 0x20010080)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x60, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x75}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4880}, 0x50)

10:03:23 executing program 5:
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x54}}, 0x20004001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x138, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x41}, 0x404008c)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x94, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1345}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0xc000}, 0x5)
r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x80800)
setsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f00000005c0)="9db7b708262711a04bc37434d110166b36a65480b32e8dd5e713ce09b2b1613e06695555ee05329bbbc5a70fbc47257ee013852faa9df665a0d54188882b38e2f7f9a31b09757bb31ef53e802bb4a140d76dbe168dffc7e05292f63f925ae4e6c71bf1e439a6350ba415ab9e3cc6293d6d4b1e07f14e32e98e95e6fa511d37a57aa0f6792431c9c81d673409d05eb319b7cf76c5693bdf075499e5fd46e9da13f75dc43567d2601c27b4f0b4071589eb32e2fa764a72e79fe5e672c28d8a261601cc51ae90270b5df6d33c1976b5cdf1c7ddb077", 0xd4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000006c0)={0x2, 'ip6erspan0\x00', {0x3ff}, 0x2})
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x42081)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000840), 0x40a000, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb4, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb09e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1c3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "ce0ddd45ee2e03988d04409d4023e31706a5530cb705c938840b61d9"}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r5 = syz_open_dev$vcsa(&(0x7f0000000a40), 0x1, 0x80100)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r3)
sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
r7 = open(&(0x7f0000000c00)='./file0\x00', 0x103040, 0x10)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80001}, 0x4000001)
prctl$PR_GET_THP_DISABLE(0x2a)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x400c800)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000e80))

10:03:23 executing program 6:
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=""/59, &(0x7f0000000040)=0x3b)
prctl$PR_SET_TSC(0x1a, 0x1)
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8100)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x440a0)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './file0\x00'})
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000280)={@local, @remote, <r3=>0x0}, &(0x7f00000002c0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x29, 0xb5, 0x9, 0x8, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7800, 0x40, 0x1, 0x6d8}})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x6f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
readlinkat(r2, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/132, 0x84)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000600)={0x33, 0x13, 0x0, 0x1b, 0x3, 0x5, 0x0, 0x1d, 0xffffffffffffffff})
ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xbc, r4, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x21}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b458a61f1fac9d41e64d4bfea9"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "df6e9a6358"}, @NL80211_KEY_SEQ={0x9, 0x4, "f7ed1bf09d"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8, 0x7, 0xcd66807d8cb9fc09}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5c1318415f721521b73b16d5ba"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40804}, 0x881)
getpeername$packet(r2, &(0x7f0000000800)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000840)=0x14)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000880)={r5, 0x1, 0x6, @multicast}, 0x10)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xad1, 0x37}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r6 = syz_mount_image$nfs(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x5, 0x4, &(0x7f0000000d80)=[{&(0x7f0000000a40)="94263e9ca9e075f25adfed77c97a947414aa7740f09ffd0c60c9ea116971f2d52e5747e5dc144e5b9ab107e25040140012b7cbcbabe5134d81d76d0e9dc26cfbb1b69d05c46362c7f08d643204efe83fe96acac8f634625bd327017845435820befea1da97490bd1185fee9e48c9e52c8943489fd205c7d7250207542ad881e5bf86af75232f45ef", 0x88}, {&(0x7f0000000b00)="398a4bbf94c49cbc876e6ea36c5fe5f75507887e08ebc63b7829cb6ed522f817803477614ecbfd6c9c0b1a27ae490cbf92a9c58042b3c3e1e2cf1a1a7a0ec43d78748319", 0x44}, {&(0x7f0000000b80)="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", 0xfc, 0x400}, {&(0x7f0000000c80)="57cf7cbba7556a413461f45a54f232829d4c2aede0a4d1e72c588242c1c10ef94127bd5584c9d4850f816e1fbe2c0163de2ead882338c6841f2c37fc6e7496c0480e08e5a6bd93df431cbefa70f5ee0c1b5fa071b24070fa3b6296cc5379d584c5de7bb7794eca05c256fb2e13dbfb39ac8da8bf19069154e91e63a4231d3ba7880549115d819136c5caf160d5634cfef9f4276af1b482317a4e525ef9402f00aeb4928d9929f1e20188b179e1f8421e6bdd49ff4ca7c9cc7a7aab966f9dfd5140eaac53c1d74709d87d", 0xca, 0x20}], 0x0, &(0x7f0000000e00)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x39, 0x36, 0x38, 0x66, 0x37, 0x35, 0x32], 0x2d, [0x55, 0x61, 0x38, 0x39], 0x2d, [0x30, 0x30, 0x39, 0x61], 0x2d, [0x36, 0x38, 0x39, 0x39], 0x2d, [0x35, 0x39, 0x62, 0x37, 0x33, 0x0, 0x30, 0x61]}}}]})
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000e40), &(0x7f0000000e80), 0x2, 0x1)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

10:03:23 executing program 7:
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000000))
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
r1 = io_uring_setup(0x71ec, &(0x7f0000000080)={0x0, 0x9d96, 0x8, 0x3, 0x2b3, 0x0, r0})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x84000, 0x62)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x1d, @loopback, 0x4e21, 0x4, 'wrr\x00', 0x4, 0x7, 0x64}, 0x2c)
r3 = signalfd(r2, &(0x7f0000000180)={[0x7fffffff]}, 0x8)
ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f00000001c0))
fsetxattr(r2, &(0x7f0000000200)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000240)='oom_adj\x00', 0x8, 0x2)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x200080, 0x0)
sendfile(r4, r0, &(0x7f00000002c0)=0x7, 0x4)
getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f0000000300)={0x7, 0x7, 0x4}, &(0x7f0000000340)=0x28)
openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000003c0)={0x0, 0x100, 0xffffffffffffff7f})
r5 = dup2(r3, r0)
execveat(r5, &(0x7f0000000400)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000440)='\x00', &(0x7f0000000480)='\'}]\x00', &(0x7f00000004c0)='trusted.overlay.metacopy\x00'], &(0x7f0000000700)=[&(0x7f0000000540)='r\x00', &(0x7f0000000580)='\'\x00', &(0x7f00000005c0)='wrr\x00', &(0x7f0000000600)='oom_adj\x00', &(0x7f0000000640)='\x83.\x00', &(0x7f0000000680)='/dev/zero\x00', &(0x7f00000006c0)='\x00'], 0x1000)
accept$inet(r0, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
write$P9_RREADDIR(r0, &(0x7f0000000a00)={0x49, 0x29, 0x2, {0xec0, [{{0x2, 0x2, 0x8}, 0x7, 0x2, 0x7, './file0'}, {{0x4}, 0x6fc, 0x3a, 0x7, './file0'}]}}, 0x49)

[  126.193652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.201041] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.207214] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.215540] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.219492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.222480] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.226305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.238491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.253250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  126.254793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.268089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.269783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  126.273452] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  126.295237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  126.304934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  126.423765] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.444631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.469976] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.486358] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.494427] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.494963] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.502131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.504983] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  126.529622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.541567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  126.564198] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  126.575197] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  126.580113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  126.587193] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  126.591161] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  126.598255] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  126.612100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  126.620549] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  126.634463] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  126.636609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  126.641033] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  126.654946] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  126.674650] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  126.698167] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  126.716423] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  128.269983] Bluetooth: hci1: command tx timeout
[  128.332830] Bluetooth: hci2: command tx timeout
[  128.333202] Bluetooth: hci0: command tx timeout
[  128.588897] Bluetooth: hci3: command tx timeout
[  128.653931] Bluetooth: hci4: command tx timeout
[  128.716873] Bluetooth: hci6: command tx timeout
[  128.717781] Bluetooth: hci5: command tx timeout
[  128.780798] Bluetooth: hci7: command tx timeout
[  130.317476] Bluetooth: hci1: command tx timeout
[  130.380818] Bluetooth: hci2: command tx timeout
[  130.382432] Bluetooth: hci0: command tx timeout
[  130.638717] Bluetooth: hci3: command tx timeout
[  130.701839] Bluetooth: hci4: command tx timeout
[  130.765785] Bluetooth: hci6: command tx timeout
[  130.768725] Bluetooth: hci5: command tx timeout
[  130.829327] Bluetooth: hci7: command tx timeout
[  132.364827] Bluetooth: hci1: command tx timeout
[  132.429762] Bluetooth: hci0: command tx timeout
[  132.430515] Bluetooth: hci2: command tx timeout
[  132.684804] Bluetooth: hci3: command tx timeout
[  132.749417] Bluetooth: hci4: command tx timeout
[  132.812983] Bluetooth: hci5: command tx timeout
[  132.813177] Bluetooth: hci6: command tx timeout
[  132.878798] Bluetooth: hci7: command tx timeout
[  134.412806] Bluetooth: hci1: command tx timeout
[  134.476990] Bluetooth: hci0: command tx timeout
[  134.477934] Bluetooth: hci2: command tx timeout
[  134.733122] Bluetooth: hci3: command tx timeout
[  134.798759] Bluetooth: hci4: command tx timeout
[  134.860880] Bluetooth: hci5: command tx timeout
[  134.861373] Bluetooth: hci6: command tx timeout
[  134.925151] Bluetooth: hci7: command tx timeout
[  188.456782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.464288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.468145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.478157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.482557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  188.515171] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  188.525101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  188.529852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  188.541889] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  188.547338] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  188.601399] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  188.608396] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  188.616254] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  188.635264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  188.652326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  188.659013] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  188.675274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  188.678466] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  188.691025] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  188.694790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  188.697522] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  188.703826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  188.705542] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  188.721152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  188.727332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  188.753789] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  188.761425] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  188.779635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  188.808082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  188.827261] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  188.922250] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  188.926982] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  188.931674] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  188.942466] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  188.951934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  188.997981] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  189.005526] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  189.019876] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  189.036576] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  189.057313] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  190.543736] Bluetooth: hci0: command tx timeout
[  190.604764] Bluetooth: hci1: command tx timeout
[  190.732973] Bluetooth: hci2: command tx timeout
[  190.797136] Bluetooth: hci3: command tx timeout
[  190.861169] Bluetooth: hci5: command tx timeout
[  190.924951] Bluetooth: hci4: command tx timeout
[  191.052767] Bluetooth: hci6: command tx timeout
[  191.180818] Bluetooth: hci7: command tx timeout
[  192.589947] Bluetooth: hci0: command tx timeout
[  192.653798] Bluetooth: hci1: command tx timeout
[  192.783859] Bluetooth: hci2: command tx timeout
[  192.844771] Bluetooth: hci3: command tx timeout
[  192.909744] Bluetooth: hci5: command tx timeout
[  192.972875] Bluetooth: hci4: command tx timeout
[  193.101765] Bluetooth: hci6: command tx timeout
[  193.229865] Bluetooth: hci7: command tx timeout
[  194.637934] Bluetooth: hci0: command tx timeout
[  194.702047] Bluetooth: hci1: command tx timeout
[  194.828951] Bluetooth: hci2: command tx timeout
[  194.894707] Bluetooth: hci3: command tx timeout
[  194.957773] Bluetooth: hci5: command tx timeout
[  195.020973] Bluetooth: hci4: command tx timeout
[  195.150332] Bluetooth: hci6: command tx timeout
[  195.277811] Bluetooth: hci7: command tx timeout
[  196.684763] Bluetooth: hci0: command tx timeout
[  196.748857] Bluetooth: hci1: command tx timeout
[  196.877084] Bluetooth: hci2: command tx timeout
[  196.941773] Bluetooth: hci3: command tx timeout
[  197.006718] Bluetooth: hci5: command tx timeout
[  197.069746] Bluetooth: hci4: command tx timeout
[  197.198749] Bluetooth: hci6: command tx timeout
[  197.325579] Bluetooth: hci7: command tx timeout
[  250.732606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  250.743289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  250.751999] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  250.765628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  250.775197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  250.970314] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  250.973267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  250.975789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  250.981259] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  250.984763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  251.004929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  251.013365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  251.027249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  251.044925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  251.050255] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  251.115254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  251.128770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.133401] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.139310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.145824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.156338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.174194] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.185298] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.197272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  251.203879] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  251.227271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.248002] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  251.256310] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  251.267488] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  251.274600] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  251.277667] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  251.281188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  251.309757] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  251.324218] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  251.328292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  251.371450] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  251.378385] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  251.389218] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  251.451410] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  251.483873] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  252.813171] Bluetooth: hci0: command tx timeout
[  253.004793] Bluetooth: hci1: command tx timeout
[  253.132788] Bluetooth: hci2: command tx timeout
[  253.325103] Bluetooth: hci3: command tx timeout
[  253.388867] Bluetooth: hci4: command tx timeout
[  253.517036] Bluetooth: hci5: command tx timeout
[  253.580797] Bluetooth: hci7: command tx timeout
[  253.644812] Bluetooth: hci6: command tx timeout
[  254.862321] Bluetooth: hci0: command tx timeout
[  255.055731] Bluetooth: hci1: command tx timeout
[  255.182721] Bluetooth: hci2: command tx timeout
[  255.375711] Bluetooth: hci3: command tx timeout
[  255.437791] Bluetooth: hci4: command tx timeout
[  255.564818] Bluetooth: hci5: command tx timeout
[  255.629954] Bluetooth: hci7: command tx timeout
[  255.694427] Bluetooth: hci6: command tx timeout
[  256.910796] Bluetooth: hci0: command tx timeout
[  257.101537] Bluetooth: hci1: command tx timeout
[  257.229555] Bluetooth: hci2: command tx timeout
[  257.422755] Bluetooth: hci3: command tx timeout
[  257.484799] Bluetooth: hci4: command tx timeout
[  257.613524] Bluetooth: hci5: command tx timeout
[  257.676808] Bluetooth: hci7: command tx timeout
[  257.740850] Bluetooth: hci6: command tx timeout
[  258.956829] Bluetooth: hci0: command tx timeout
[  259.149666] Bluetooth: hci1: command tx timeout
[  259.276814] Bluetooth: hci2: command tx timeout
[  259.469774] Bluetooth: hci3: command tx timeout
[  259.533248] Bluetooth: hci4: command tx timeout
[  259.661216] Bluetooth: hci5: command tx timeout
[  259.724837] Bluetooth: hci7: command tx timeout
[  259.788971] Bluetooth: hci6: command tx timeout
[  312.864651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  312.867582] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  312.878501] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  312.891340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  312.897299] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.005985] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  313.011506] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  313.014360] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  313.021805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  313.025646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  313.067146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  313.069433] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  313.075008] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  313.082016] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  313.089518] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  313.305081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  313.363638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  313.373146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  313.379384] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  313.385460] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  313.393328] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  313.402946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  313.415525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  313.423070] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  313.426337] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  313.428977] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  313.433205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  313.435667] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  313.442588] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  313.447380] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  313.454003] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  313.460279] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  313.467449] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  313.475396] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  313.485268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  313.485471] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  313.495736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  313.501571] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  313.505467] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  313.539533] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  314.956783] Bluetooth: hci0: command tx timeout
[  315.084848] Bluetooth: hci1: command tx timeout
[  315.149760] Bluetooth: hci2: command tx timeout
[  315.597065] Bluetooth: hci7: command tx timeout
[  315.597938] Bluetooth: hci4: command tx timeout
[  315.597982] Bluetooth: hci3: command tx timeout
[  315.660762] Bluetooth: hci6: command tx timeout
[  315.661803] Bluetooth: hci5: command tx timeout
[  317.006759] Bluetooth: hci0: command tx timeout
[  317.133018] Bluetooth: hci1: command tx timeout
[  317.198725] Bluetooth: hci2: command tx timeout
[  317.644932] Bluetooth: hci7: command tx timeout
[  317.645013] Bluetooth: hci3: command tx timeout
[  317.645411] Bluetooth: hci4: command tx timeout
[  317.710100] Bluetooth: hci5: command tx timeout
[  317.710560] Bluetooth: hci6: command tx timeout
[  319.053834] Bluetooth: hci0: command tx timeout
[  319.180933] Bluetooth: hci1: command tx timeout
[  319.246067] Bluetooth: hci2: command tx timeout
[  319.693922] Bluetooth: hci3: command tx timeout
[  319.693969] Bluetooth: hci7: command tx timeout
[  319.694415] Bluetooth: hci4: command tx timeout
[  319.757778] Bluetooth: hci5: command tx timeout
[  319.758239] Bluetooth: hci6: command tx timeout
[  321.101910] Bluetooth: hci0: command tx timeout
[  321.229758] Bluetooth: hci1: command tx timeout
[  321.292750] Bluetooth: hci2: command tx timeout
[  321.740868] Bluetooth: hci4: command tx timeout
[  321.741372] Bluetooth: hci7: command tx timeout
[  321.741854] Bluetooth: hci3: command tx timeout
[  321.804881] Bluetooth: hci6: command tx timeout
[  321.804960] Bluetooth: hci5: command tx timeout
[  375.968043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  375.972290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  375.974948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  375.984384] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  375.991324] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.229072] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.232956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.235750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.246310] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.253298] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  376.397281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  376.413274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  376.428407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  376.434307] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  376.458441] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  376.461662] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  376.475425] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  376.510194] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  376.533292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  376.569650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  376.580369] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  376.585712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  376.596512] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  376.602176] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  376.608165] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  376.624837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  376.638129] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  376.653963] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  376.664137] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  376.667980] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  376.674552] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  376.675357] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  376.686993] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  376.715223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  376.715404] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  376.720077] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  376.745793] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  376.755740] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  376.763208] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  376.796435] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  378.061952] Bluetooth: hci0: command tx timeout
[  378.316812] Bluetooth: hci1: command tx timeout
[  378.574778] Bluetooth: hci2: command tx timeout
[  378.700914] Bluetooth: hci3: command tx timeout
[  378.765405] Bluetooth: hci4: command tx timeout
[  378.828781] Bluetooth: hci7: command tx timeout
[  378.894695] Bluetooth: hci5: command tx timeout
[  378.895374] Bluetooth: hci6: command tx timeout
[  380.108754] Bluetooth: hci0: command tx timeout
[  380.365144] Bluetooth: hci1: command tx timeout
[  380.620900] Bluetooth: hci2: command tx timeout
[  380.748802] Bluetooth: hci3: command tx timeout
[  380.813703] Bluetooth: hci4: command tx timeout
[  380.876824] Bluetooth: hci7: command tx timeout
[  380.940821] Bluetooth: hci6: command tx timeout
[  380.941325] Bluetooth: hci5: command tx timeout
[  382.156874] Bluetooth: hci0: command tx timeout
[  382.412738] Bluetooth: hci1: command tx timeout
[  382.668853] Bluetooth: hci2: command tx timeout
[  382.796986] Bluetooth: hci3: command tx timeout
[  382.861056] Bluetooth: hci4: command tx timeout
[  382.925108] Bluetooth: hci7: command tx timeout
[  382.989959] Bluetooth: hci5: command tx timeout
[  382.990464] Bluetooth: hci6: command tx timeout
[  384.205132] Bluetooth: hci0: command tx timeout
[  384.460961] Bluetooth: hci1: command tx timeout
[  384.716977] Bluetooth: hci2: command tx timeout
[  384.844749] Bluetooth: hci3: command tx timeout
[  384.908748] Bluetooth: hci4: command tx timeout
[  384.973710] Bluetooth: hci7: command tx timeout
[  385.037134] Bluetooth: hci6: command tx timeout
[  385.037651] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
10:08:27  Registers:
info registers vcpu 0
RAX=0000000001420197 RBX=ffff88800dcef060 RCX=ffff888013484a10 RDX=0000000000003255
RSI=00000000272ffb4d RDI=ffffffff81000130 RBP=ffff888008c41780 RSP=ffff888025e9fb68
R8 =0000000059b2f4e1 R9 =ffff88806c3b9b70 R10=0000000000000001 R11=0000000000000000
R12=ffff88800dcef040 R13=0000000000002800 R14=0000000000000000 R15=ffff888032510a00
RIP=ffffffff81aec092 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe0e00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f62d497e008 CR3=00000000312f5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000b0dfa01 RBX=ffffffff81604940 RCX=ffff88800b0df90c RDX=0000000000000000
RSI=ffffffff85c1d1c0 RDI=ffff888028cfbafc RBP=ffff88800b0dfa50 RSP=ffff88800b0df9a8
R8 =0000000000000001 R9 =ffff88800b0df9f8 R10=000000000003b6bd R11=00000000000272a4
R12=ffff88800b0dfa80 R13=0000000000000000 R14=ffff888028cfb700 R15=0000000000000000
RIP=ffffffff84b66c40 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff7c81cff8 CR3=000000002b70c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000