Warning: Permanently added '[localhost]:3644' (ECDSA) to the list of known hosts.
2025/06/02 17:16:17 fuzzer started
2025/06/02 17:16:17 dialing manager at localhost:34361
syzkaller login: [  101.607184] cgroup: Unknown subsys name 'net'
[  101.773954] cgroup: Unknown subsys name 'cpuset'
[  101.813765] cgroup: Unknown subsys name 'rlimit'
2025/06/02 17:16:41 syscalls: 2214
2025/06/02 17:16:41 code coverage: enabled
2025/06/02 17:16:41 comparison tracing: enabled
2025/06/02 17:16:41 extra coverage: enabled
2025/06/02 17:16:41 setuid sandbox: enabled
2025/06/02 17:16:41 namespace sandbox: enabled
2025/06/02 17:16:41 Android sandbox: enabled
2025/06/02 17:16:41 fault injection: enabled
2025/06/02 17:16:41 leak checking: enabled
2025/06/02 17:16:41 net packet injection: enabled
2025/06/02 17:16:41 net device setup: enabled
2025/06/02 17:16:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/02 17:16:41 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/02 17:16:41 USB emulation: enabled
2025/06/02 17:16:41 hci packet injection: enabled
2025/06/02 17:16:41 wifi device emulation: enabled
2025/06/02 17:16:41 802.15.4 emulation: enabled
2025/06/02 17:16:41 fetching corpus: 0, signal 0/0 (executing program)
2025/06/02 17:16:43 starting 8 fuzzer processes
17:16:43 executing program 0:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x80, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x18c, r1, 0x300, 0x3ff, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x74}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6007}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x23, 0x33, @mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {0x80}, @device_b, @broadcast, @from_mac=@device_b, {0xf, 0x1}}, @ver_80211n={0x0, 0x7, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @smps={0x7, 0x1, {0x1}}}}, @NL80211_ATTR_FRAME={0x126, 0x33, @mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_a, @broadcast, @initial, {0x7, 0x2}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x1, 0x1}, {0x30, 0x1}, {0x16, 0x1}, {0x48, 0x1}, {0x4}, {}]}, @val={0x3, 0x1, 0xb}, @void, @void, [{0xdd, 0xf, "fa931118aab67bca2d276ca1e5a7ae"}, {0xdd, 0xc6, "9ac7bcdd4d62ab0e7eeb6984d69c9f9053042c25adbdf109aa759f2aefbf8aee5041f0aa624c15d45c347dc3f0577cd4d70288199fc58bd83cfecd27f8caffab97541726913328c0048551ee604d2eb78409bafd2837802ae5192f4f0267df0f694e6843d0648e3f00ae811de8efe2aaf27c61a1c36f79002f41bc2ce6c76b891606635cac2084d3f89b9641cf1a1716b38f8f4481eee70b050104be9c9321347f0c98958109529230c56b4014df5bfdf0632d7aef2ec2385ad66a09f1274fbfbfdbedd331a4"}, {0xdd, 0x1c, "d239c01ffa4992f11e378643caaf22e6219b3a1964e547851246b5fa"}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000}, 0x20010001)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x300, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000440)={0x3c0, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @mcast1, 0x80000001}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @remote, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e7c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8c, 0x3, "538b2ed8d65a211070d5917ceffae98e2e317392925e6379053140711ee382c2f388dbeaae3c7581fc4fc1fb067e0cc701aaaaf03f432facdcb2dc0914d62d33454b482f821225c501912d7942599cf955a012b73e6a9ab000e0986dee5aaf235ed5d27fac3db48195506bff6f1215e5d83344acc4d09ae0a6eea18d72dde8e623ff63690342dc10"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e6c617ff6503fc1da4effdca6c18559683ee18d6ffe87df2f9"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "11cd03b2dd20f65d81d61c7cef951131695ac5a57787ecf6d3ba8bbd0f9a39c743"}}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "f546896ab74e967e2ed280f9cb17e4ba3ff024d356ec"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ID={0x91, 0x3, "8650a112ab9ecd4f5f5d853d7841ed2dc3d32dbfde12b9594356e12a1ec4a1b783e798834aee90a239097e7a8ce83fb542cdc8bfd1ec238738d56c1b58b3db5810517b6451faa98793d76302655a972fa8c6c9e7954510cd89b847e7b70052b82f2352e519350d8d4e2a9bf3281419a6a8d4bfe147559fec8e025b404e61b44a2d2303ed97558fc65dba57373b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x20048084}, 0x20000000)
r4 = openat$cgroup_type(r2, &(0x7f0000000880), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f00000008c0), 0x9)
ioctl$FIOCLEX(r4, 0x5451)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000900))
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r5=>r0, @in_args={0x2}}, './file0\x00'})
getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000980)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x100, 0x7, 0x3, 0x4, 0x2f]}, &(0x7f0000000a00)=0x78)
ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000a40)={{0x1, 0x1, 0x18, <r6=>r2}, './file0\x00'})
ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000a80)={0x1, 0x2})
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b00), 0x18000, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000ac0), r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
statx(r2, &(0x7f0000000b80)='./file0/../file0\x00', 0x0, 0x800, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000cc0)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000dc0)=0xe8)
fsetxattr$system_posix_acl(r8, &(0x7f0000000b40)='system.posix_acl_default\x00', &(0x7f00000020c0)={{}, {}, [{0x2, 0x4, r9}, {0x2, 0x4, r10}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0xffffffffffffffff}], {}, [{0x8, 0x4}, {0x8, 0x1, 0xee00}, {0x8, 0x1, 0xffffffffffffffff}, {}], {}, {0x20, 0x2}}, 0x64, 0x1)

17:16:43 executing program 1:
setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "193adf8ea99df9df02f8f7"}, 0xc, 0x2)
setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2)
utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {0x0, 0xea60}})
removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'trusted.', '#\x00'})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x110, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048011}, 0x0)
stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0))
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x42ae2545d3dec75c, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008081)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x8, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "5f3561351d7d1c9930b2eac6cf4bc00de108c1119a988796a3756c3286d94e51"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x890)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000700))
r1 = open$dir(&(0x7f0000000740)='./file0\x00', 0x400000, 0x2)
clock_gettime(0x0, &(0x7f00000007c0)={<r2=>0x0, <r3=>0x0})
utimensat(r1, &(0x7f0000000780)='./file0\x00', &(0x7f0000000800)={{0x77359400}, {r2, r3/1000+10000}}, 0x0)
r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4c101000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, 0x464, 0x203, 0x70bd29, 0x25dfdbfd, "0ec001aa6a2fc70f75128301ae36b1f3ac9ecf5419aba70e9359faa27eed589c6c11b84e25a8e76cca671a6497f2dd6b0e947cb1618cbba7e5119e45129fc560f39d5ad705b0e6acfc6ad971e776aef5db26f76e9ef2", ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040094}, 0x80)
recvmmsg(r4, &(0x7f0000000f40)=[{{&(0x7f0000000a40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000ac0)=""/205, 0xcd}, {&(0x7f0000000bc0)=""/126, 0x7e}, {&(0x7f0000000c40)=""/35, 0x23}, {&(0x7f0000000c80)=""/14, 0xe}, {&(0x7f0000000cc0)=""/17, 0x11}, {&(0x7f0000000d00)=""/79, 0x4f}, {&(0x7f0000000d80)=""/176, 0xb0}], 0x7, &(0x7f0000000ec0)=""/128, 0x80}, 0x9}], 0x1, 0x2041, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000fc0)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000010c0)=0xe8)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000012c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001280)={&(0x7f0000001100)={0x144, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x48044}, 0x10)

17:16:43 executing program 2:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xe16, 0xd00)
r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x4e20, @loopback}}}, 0x88)
write$P9_RLOPEN(r0, &(0x7f0000000180)={0x18, 0xd, 0x1, {{0x0, 0x3, 0x7}, 0xde}}, 0x18)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x308, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x919}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x70}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x86}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @mcast1, 0x80000001}}}}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf04}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9c16}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}]}, @TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "aebe01cf866dc65e95195004f32a2e45e783166b9d4aa1dea532e1df3e90"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "922c06fa20e9512d6cfc484eb312d448d9b48ef46f"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "f21a37805bd56b3d3b28b9fe94cbdd30ce0a27bb623a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8c}]}]}, 0x308}}, 0x24001811)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000600)={{0xcd, 0xff}, 'port0\x00', 0x82, 0x10, 0x10001, 0x8, 0xffffff81, 0x800, 0x9, 0x0, 0x4})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000006c0)='.request_key_auth\x00', &(0x7f0000000700)=@chain)
r4 = openat(r0, &(0x7f0000000740)='./file0\x00', 0x600, 0xc4)
write$P9_RSTATu(r4, &(0x7f0000000780)={0x7f, 0x7d, 0x1, {{0x0, 0x68, 0x40, 0x8, {0x0, 0x1, 0x7}, 0x60800000, 0x2, 0x3, 0x8, 0x6, 'port0\x00', 0x1a, ',{][}*\x91&:@((%!+!(:!]\\%\xea:&}', 0x8, '(*-[)@:-', 0xd, ':#&&+@)^$..*&'}, 0x2, '::', 0xee00, 0x0, 0xee01}}, 0x7f)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0xc}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x4040000)
waitid$P_PIDFD(0x3, r4, &(0x7f0000000940), 0x8, &(0x7f00000009c0))
r6 = syz_open_pts(0xffffffffffffffff, 0x40000)
write$binfmt_script(r6, &(0x7f0000000a80)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '::'}, {0x20, '(*-[)@:-'}, {0x20, 'port0\x00'}, {}, {0x20, '-].]$'}, {}], 0xa, "d097b9fa8df6fe225c10aeb5bd6889687cc7a18036710ab46bfd3ffeb607fcf4431e9b3dd1092b5d45f6a39412971dad9f66dd71e25116b64c46dc987ccbb67890326e476fa1632adc3dc504c3afc1005b60d42b3794406aba9d628a6243335fbb9cce3a43"}, 0x8d)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0xf, 0x4e9d, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0xb5557e5d0c751c9b)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r1, {0xfffffffffffffffb}}, './file0\x00'})
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)

17:16:43 executing program 3:
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7)
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x20, 0x0, 0x3}}, 0x14)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="4d48b7bf85faf5c93c61a43bc59b8fa774a5b09dcb4b64e252dd1bbb6eeac744c4bfc60b6650febae090247c02cf75312edc715326d7040a18edf7d37c27f8da80bee3774e5606644b82cfb71b4159df475e307e8e0d73f8e27d99daf6e0120fe7f728ecb5f3dfd5ea3d37b175f898dfe1dfab76a97a7cffa641255a98d81fa3c6fa9dfb60bd48de3f0b4ac331c11794dc89a5a97186fbda992afe7e53a5f10907950b2c07f1f8d20b6bfec4f8647adb9fcc0a1a0e120df67c8431a29b6c029990fa78855e690b262a4d3012624fd222a6f3389e9791bdccc6b31fa4e2c154f26cb561aaddf649adeee888c9184ce33d3f8b2335341b9d")
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x3}, {0x9, 0x2}, {0xff, 0x1}, {0x3}, {0x3f, 0x1}, {0x1}, {0x7f, 0x1}, {0x9, 0x5}, {0x40, 0x2}, {0x0, 0x7}, {0x7, 0x1}], "926cad731238fafc"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x3, 0x5}, {0x4, 0x5}, {0x2, 0x7}, {0xf9, 0x4}, {0x3f, 0x6}, {0x6, 0x5}, {0x2e, 0x4}, {0x20, 0x2}, {0x1f, 0x2}, {0x9, 0x7}, {0x35, 0x2}, {0x0, 0x3}, {0x24, 0x5}, {0xff}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x8a, 0x2}], "6a724297b04ae96f"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x4, 0x4}, {0x2}, {0x3f, 0x3}, {0x80, 0x1}, {0x1f, 0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x7}, {0x32, 0x1}, {0x40, 0x1}, {0x40, 0x6}, {0xce, 0x5}, {0x81, 0x2}, {0x20, 0x6}, {0x6, 0x4}, {0x8}, {0x9, 0x5}], "e63036b88d8fc5d8"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x5, 0x5}, {0x6, 0x3}, {0x6, 0x3}, {0x6, 0x4}, {0x2, 0x5}, {0x10, 0x2}, {0xe2, 0x1}, {0x0, 0x5}, {0x6, 0x7}, {0x6}, {}, {0xfd, 0x4}, {0xbd, 0x4}, {0x8, 0x3}, {0x8, 0x6}, {0x0, 0x3}, {0x40, 0x2}], "b162c9597d08fcbe"}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40094}, 0x4000)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r1 = syz_io_uring_complete(0x0)
getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000340)=""/9, &(0x7f0000000380)=0x9)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4820000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x198, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x14}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x678bdcb7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa85c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000840}, 0x40008d4)
connect$bt_l2cap(r1, &(0x7f0000000680)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xe)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r3, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc044000}, 0x40400c0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x2}}, './file0\x00'})
ioctl$RTC_PIE_ON(r4, 0x7005)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000840)={0x0, 0x2, 0x5, 0x101, 0x5})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setstatus(r5, 0x4, 0x4c800)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000008c0), &(0x7f0000000900)={'U-', 0x2}, 0x16, 0x2)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000940)=""/8)

[  127.394076] audit: type=1400 audit(1748884603.922:7): avc:  denied  { execmem } for  pid=280 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
17:16:43 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x5)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="0b77c6c8edd64f34aa2c903f0a605223", 0x10}, {&(0x7f00000001c0)="e5960d8a1b8b795f50e177a83840c3c99a5578fa54b2f218eb5590f896ba6dcbffa711932a3bdb28b4", 0x29}, {&(0x7f0000000200)="53baedb4a44d42a85684f93cbcae021acc2a877dd16d8d167eec39", 0x1b}, {&(0x7f0000000240)="301332998f5eca4258ee4f95ef93c2e1ffa6fd205d4265ba9222f4061d8edf24b780ad4bf33d5da612eb70cceb887a91cc8f3b4336adb414dccc676fa25b0d6298b0fa45f9728d9b3e", 0x49}, {&(0x7f00000002c0)="0f8b85c8883f6762e49a5aa0222c38e4e20eb7696c568adf23924ba007a61c932a25f63e6056f5d3ae3663ab88fe5e849e1ec0b5ca823c", 0x37}, {&(0x7f0000000300)="291329e192dfeb9ee3a49fcfac6d70b9b11aae5c8717a1f1594e267460eacf9cfbcd59eb9bc42b17d03481aee4622ddf9cff5a98d34132e77da4bf2b147ec2a73fbb419d2587a23942da383ea6f3f76e53be0e8127119087b6e24e0f3a2dd323e03a8972b8a4dc14d5174f85820efa277179eed2d1f16d177a8afb397d846cb4f315447f0010e41a8d64cc47db33b8faf82fc1df", 0x94}], 0x6, &(0x7f0000000440)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @dstopts={{0x30, 0x29, 0x37, {0x50, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x39}}, @enc_lim={0x4, 0x1, 0xb0}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2f, 0xa, 0x2, 0xfc, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00']}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}], 0x100}, 0x11)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x24}}, 0x4180)
r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000680))
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000bc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000840)={0x334, r2, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x2e8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x2a4, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x64, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "c7e1f2583ea08a8c3fb9cfed246ec3f52395f0d0b0c827da6ad035ea06f46a2b63be9289152f9bfead7a6d4f3c793354bcd3d271fe7faa0cf56b0c990ae5b8c5a2736278ca1d54729de1d9f355a08fe7fb127c15aa380a269b167da663ee84d1773344fe0ee04c60bec39a81ba4d9830cd611b551bdd801d9199d5da2c644ab01bce2ba7aa65fc84ecc0d0218bb805401b8e737b90641dcf9b6a09e96cac4dfae3a45ae9b759d4512288af1e6ca3f1309decaeeec447ef0ac3fb12f0de12b5a96c834a7f04555ab29b229eaa01cc1b16b6b2f448c277232ca32fd21902a1616fb6cc1a01497b6d74afcd27e5cbf57e5933bec9e67ce92ab9d5c7428a44bf5d"}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0x30, 0xb, "c5a61b865d5da5e36b6e32931d43ed6137aa59f4b7ad09dfc17363b45219e5fad709cfae8a3faa20efd744f7"}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x48815}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
read(r3, &(0x7f0000000c00)=""/254, 0xfe)
pause()
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000d00), &(0x7f0000000d40)=0x4)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x0, 0x920, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000001180)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000ec0)={0x25c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd4a6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x1, 0xd94, @dev={0xfe, 0x80, '\x00', 0x18}, 0x8ba}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @private2, 0xff}}}}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8040894}, 0x400c000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001300)={'sit0\x00', &(0x7f0000001280)={'syztnl1\x00', <r4=>0x0, 0x29, 0x0, 0xfd, 0x6, 0x48, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x80, 0x2, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000013c0)={'syztnl2\x00', &(0x7f0000001340)={'ip6tnl0\x00', <r5=>0x0, 0x8415230d42533bf5, 0xaa, 0x5, 0x4, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x1, 0x10, 0x6, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001540)={'syztnl2\x00', &(0x7f00000014c0)={'ip6gre0\x00', <r6=>0x0, 0x29, 0x5, 0x7, 0x400, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x1, 0x1, 0x0, 0x200}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001700)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000001580)={0x124, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040090}, 0x4002000)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001740)='/proc/diskstats\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000001840)={&(0x7f0000001780), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x28, r2, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xea, 0x7c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x20040804)

17:16:43 executing program 5:
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x13, r0, 0x10000000)
mlock2(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040))
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000080))
ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000480)={0x7fffffff})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, <r2=>0x0}, &(0x7f0000000500)=0xc)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@empty, @in6=@loopback, 0x4e20, 0xfffb, 0x4e22, 0x84, 0xa, 0x0, 0x20, 0x88, 0x0, r2}, {0x6, 0xfffffffffffffffc, 0x6, 0x81, 0x6, 0x101, 0x5, 0xbb8}, {0x20, 0x0, 0x0, 0x3}, 0x10001, 0x6e6bb2, 0x1, 0x3, 0x2, 0x1}, {{@in6=@mcast1, 0x4d2, 0x58aebc522765805f}, 0xa, @in=@multicast2, 0x3502, 0x3, 0x1, 0x5, 0x5, 0x9, 0x3}}, 0xe8)
r3 = timerfd_create(0x6, 0x800)
fcntl$getflags(r3, 0x401)
r4 = syz_open_dev$vcsn(&(0x7f0000000640), 0x20, 0x1)
ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000680)="354f07f0b23d0504992e45f23941d56a7d3426b8d55c552e8810339001c004ab17604a848f58c6865c098a6103")
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000006c0)='wg1\x00', 0x4)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
r5 = syz_open_dev$vcsa(&(0x7f0000000700), 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000740)={{0x2, 0x4e22, @multicast1}, {0x6, @remote}, 0x52, {0x2, 0x4e21, @remote}, 'gre0\x00'})
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f00000007c0)={0x2, 0x5774feb659c1ecc2, 0x2, 0x3, 0x8})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/nf_conntrack_sip', 0x404000, 0x128)
ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000000840))

17:16:44 executing program 6:
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000000)="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")
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x4]}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0)
fcntl$addseals(r1, 0x409, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r3 = openat$cgroup(r0, &(0x7f0000001540)='syz0\x00', 0x200002, 0x0)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000001580)={{r3}, 0x7, 0x2})
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000015c0), 0x2a80c0, 0x0)
process_mrelease(r4, 0x0)
r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001600), 0x80001, 0x0)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000001640)={0x401, 0x5, 0x22, 0x9, 0x5, "de8d802ddc9bac16"})
ioctl$CDROMPLAYMSF(r4, 0x5303, &(0x7f0000001680)={0x0, 0x20, 0x1, 0x82, 0x20})
pipe2$9p(&(0x7f00000016c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80800)
write$P9_RAUTH(r6, &(0x7f0000001700)={0x14, 0x67, 0x2, {0x0, 0x4, 0x3}}, 0x14)
r7 = openat2(0xffffffffffffffff, &(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x400600, 0x22, 0x11}, 0x18)
sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x50, 0x8, 0x6, 0x801, 0x0, 0x0, {0xe, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4)
getdents(r5, &(0x7f0000001900)=""/19, 0x13)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000001940))
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000019c0)={'macsec0\x00', &(0x7f0000001980)=@ethtool_wolinfo={0x5, 0x8, 0x2, "e22f61679736"}})

17:16:44 executing program 7:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x801)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000180)=""/170)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', <r3=>r1, 0x29, 0x2, 0x9, 0x100, 0x41, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7800, 0x475a, 0x2}})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r0, {<r5=>0xffffffffffffffff, 0xee00}}, './file0\x00'})
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@local, @in6=@local, 0x4e21, 0x0, 0x4e22, 0xfff7, 0xa, 0x1a0, 0x80, 0x16, r3, r5}, {0xced9, 0x875d, 0x2, 0x0, 0x3, 0x7, 0x5, 0x7}, {0x100000000, 0x19000000000, 0xdcc2, 0x81}, 0x5, 0x6e6bb2, 0x2, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d4, 0x2b}, 0x7, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x0, 0x4, 0x2, 0x0, 0x5, 0x7ff, 0x1}}, 0xe8)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r6, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7f}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x93}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4046080}, 0x40814)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x84)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000840)=0x3, 0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000880))
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xc0, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x49, 0x7f, [@tim={0x5, 0x43, {0x4, 0xb6, 0x3f, "a99fea9233b4beaae0755b54c4e181ffafec65b83b431d4aa73c76906c9ed6cc39d8958e565d737279533f10e62a0638cc8d78176bfb7cc9f8884c1a1240eafa"}}]}, @NL80211_ATTR_IE={0x60, 0x2a, [@preq={0x82, 0x57, @ext={{0x0, 0x0, 0x1}, 0x3, 0x8, 0x6, @broadcast, 0x1caf3b5b, @device_b, 0xffffff54, 0x1d30, 0x5, [{{0x0, 0x0, 0x1}, @device_b, 0x3}, {{0x1}, @device_b, 0x9}, {{0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, @broadcast}, {{0x1, 0x0, 0x1}, @device_a, 0xb6c}]}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x4008101)
setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000a40), 0x10)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000a80)={0x4dd58db0, 0x1, 'client1\x00', 0xffffffff80000000, "d82b14f427f23435", "7f6457e57211881f363fbe2e4b21cc9973286c64b883e4e4b2da074595b80db1", 0x5, 0x4})
r8 = accept4$inet6(r0, &(0x7f0000000b40)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000b80)=0x1c, 0x140000)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000c00)={0x8, 0x0, &(0x7f0000000bc0)=[r8, r0, 0xffffffffffffffff, r4]}, 0x4)

[  128.869366] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  128.871644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  128.875984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  128.882237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  128.885089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  128.890016] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  128.898429] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  128.907532] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  128.913029] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.916132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  128.933864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  128.946746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  128.972166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  128.976570] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  128.981357] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  128.984651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  128.987055] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  128.998590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  129.000377] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  129.013498] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  129.015864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  129.017876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  129.021809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  129.024509] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  129.034744] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  129.036061] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  129.048145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  129.055861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  129.057573] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  129.066803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  129.105406] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  129.117778] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  129.131623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  129.135818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  129.151690] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  129.153337] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  129.163695] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  129.165287] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  129.190425] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  129.211879] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  131.004903] Bluetooth: hci0: command tx timeout
[  131.005770] Bluetooth: hci1: command tx timeout
[  131.134272] Bluetooth: hci4: command tx timeout
[  131.134783] Bluetooth: hci3: command tx timeout
[  131.135663] Bluetooth: hci2: command tx timeout
[  131.196734] Bluetooth: hci6: command tx timeout
[  131.197325] Bluetooth: hci5: command tx timeout
[  131.260297] Bluetooth: hci7: command tx timeout
[  133.053274] Bluetooth: hci0: command tx timeout
[  133.053452] Bluetooth: hci1: command tx timeout
[  133.180324] Bluetooth: hci2: command tx timeout
[  133.183586] Bluetooth: hci3: command tx timeout
[  133.183667] Bluetooth: hci4: command tx timeout
[  133.246270] Bluetooth: hci5: command tx timeout
[  133.246553] Bluetooth: hci6: command tx timeout
[  133.308271] Bluetooth: hci7: command tx timeout
[  135.100378] Bluetooth: hci0: command tx timeout
[  135.101293] Bluetooth: hci1: command tx timeout
[  135.231308] Bluetooth: hci4: command tx timeout
[  135.231357] Bluetooth: hci3: command tx timeout
[  135.232141] Bluetooth: hci2: command tx timeout
[  135.292469] Bluetooth: hci5: command tx timeout
[  135.293324] Bluetooth: hci6: command tx timeout
[  135.356669] Bluetooth: hci7: command tx timeout
[  137.150132] Bluetooth: hci1: command tx timeout
[  137.151785] Bluetooth: hci0: command tx timeout
[  137.276504] Bluetooth: hci3: command tx timeout
[  137.277386] Bluetooth: hci4: command tx timeout
[  137.278171] Bluetooth: hci2: command tx timeout
[  137.340684] Bluetooth: hci5: command tx timeout
[  137.341550] Bluetooth: hci6: command tx timeout
[  137.404627] Bluetooth: hci7: command tx timeout
[  191.056790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.061865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.065105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  191.076142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  191.084976] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  191.123395] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  191.128612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  191.132509] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  191.146982] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  191.149662] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  191.152137] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  191.154153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  191.157460] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  191.172968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  191.192040] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  191.194108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  191.201179] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  191.221698] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  191.244778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  191.259458] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  191.280667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.292831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.296508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.321515] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  191.324512] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  191.327619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  191.333019] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.335761] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  191.343985] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  191.348030] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  191.349348] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  191.355768] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  191.357999] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  191.374745] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  191.378019] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  191.386747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  191.395826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  191.407832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  191.447753] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  191.476760] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  193.150433] Bluetooth: hci0: command tx timeout
[  193.212635] Bluetooth: hci1: command tx timeout
[  193.276483] Bluetooth: hci2: command tx timeout
[  193.340288] Bluetooth: hci3: command tx timeout
[  193.404292] Bluetooth: hci7: command tx timeout
[  193.532428] Bluetooth: hci4: command tx timeout
[  193.533317] Bluetooth: hci6: command tx timeout
[  193.596314] Bluetooth: hci5: command tx timeout
[  195.196575] Bluetooth: hci0: command tx timeout
[  195.260338] Bluetooth: hci1: command tx timeout
[  195.324318] Bluetooth: hci2: command tx timeout
[  195.388299] Bluetooth: hci3: command tx timeout
[  195.452259] Bluetooth: hci7: command tx timeout
[  195.580442] Bluetooth: hci4: command tx timeout
[  195.580913] Bluetooth: hci6: command tx timeout
[  195.644319] Bluetooth: hci5: command tx timeout
[  197.246228] Bluetooth: hci0: command tx timeout
[  197.308294] Bluetooth: hci1: command tx timeout
[  197.372451] Bluetooth: hci2: command tx timeout
[  197.437285] Bluetooth: hci3: command tx timeout
[  197.500265] Bluetooth: hci7: command tx timeout
[  197.628319] Bluetooth: hci4: command tx timeout
[  197.628876] Bluetooth: hci6: command tx timeout
[  197.692273] Bluetooth: hci5: command tx timeout
[  199.292688] Bluetooth: hci0: command tx timeout
[  199.356462] Bluetooth: hci1: command tx timeout
[  199.420279] Bluetooth: hci2: command tx timeout
[  199.484250] Bluetooth: hci3: command tx timeout
[  199.548289] Bluetooth: hci7: command tx timeout
[  199.676602] Bluetooth: hci6: command tx timeout
[  199.677056] Bluetooth: hci4: command tx timeout
[  199.740256] Bluetooth: hci5: command tx timeout
[  251.041861] syz-executor.5 (2717) used greatest stack depth: 24336 bytes left
[  253.261795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  253.267537] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  253.272041] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  253.290671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  253.297753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  253.395981] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  253.398629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  253.402589] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  253.410053] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  253.417654] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  253.425892] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  253.426984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  253.437406] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  253.448570] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  253.452491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  253.519817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  253.528070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  253.533968] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  253.538712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  253.541702] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  253.543419] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  253.545432] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  253.552784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  253.564098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  253.566277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  253.571856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.573362] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  253.615018] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  253.661174] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  253.662078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  253.671997] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  253.683731] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  253.684338] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  253.692723] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  253.693319] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  253.700915] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  253.718871] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  253.720289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  253.733394] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  253.733423] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  255.356281] Bluetooth: hci0: command tx timeout
[  255.484404] Bluetooth: hci2: command tx timeout
[  255.484444] Bluetooth: hci1: command tx timeout
[  255.612401] Bluetooth: hci3: command tx timeout
[  255.676281] Bluetooth: hci5: command tx timeout
[  255.804316] Bluetooth: hci6: command tx timeout
[  255.804818] Bluetooth: hci7: command tx timeout
[  255.804938] Bluetooth: hci4: command tx timeout
[  257.407234] Bluetooth: hci0: command tx timeout
[  257.532304] Bluetooth: hci2: command tx timeout
[  257.532793] Bluetooth: hci1: command tx timeout
[  257.660852] Bluetooth: hci3: command tx timeout
[  257.724301] Bluetooth: hci5: command tx timeout
[  257.852347] Bluetooth: hci7: command tx timeout
[  257.852668] Bluetooth: hci6: command tx timeout
[  257.852831] Bluetooth: hci4: command tx timeout
[  259.453576] Bluetooth: hci0: command tx timeout
[  259.580308] Bluetooth: hci1: command tx timeout
[  259.580781] Bluetooth: hci2: command tx timeout
[  259.708491] Bluetooth: hci3: command tx timeout
[  259.772704] Bluetooth: hci5: command tx timeout
[  259.900291] Bluetooth: hci7: command tx timeout
[  259.900444] Bluetooth: hci6: command tx timeout
[  259.900770] Bluetooth: hci4: command tx timeout
[  261.500356] Bluetooth: hci0: command tx timeout
[  261.628282] Bluetooth: hci2: command tx timeout
[  261.628772] Bluetooth: hci1: command tx timeout
[  261.756264] Bluetooth: hci3: command tx timeout
[  261.821562] Bluetooth: hci5: command tx timeout
[  261.948509] Bluetooth: hci6: command tx timeout
[  261.948994] Bluetooth: hci7: command tx timeout
[  261.949523] Bluetooth: hci4: command tx timeout
[  315.927721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  315.936767] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  315.940582] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  315.954144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  315.963148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  316.272411] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  316.276604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  316.279816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  316.297907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  316.303913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  316.307485] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  316.309555] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  316.315046] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  316.319736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  316.320157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  316.406496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  316.426344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  316.438829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  316.456828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  316.458303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  316.480049] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  316.487520] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  316.490149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  316.499807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  316.503952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  316.509487] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  316.516642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  316.522042] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  316.524570] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  316.534816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  316.549592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  316.553869] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  316.558729] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  316.580740] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  316.593559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  316.619068] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  316.630695] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  316.639870] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  316.653731] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  316.658831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  318.012346] Bluetooth: hci0: command tx timeout
[  318.397488] Bluetooth: hci1: command tx timeout
[  318.398433] Bluetooth: hci2: command tx timeout
[  318.589249] Bluetooth: hci5: command tx timeout
[  318.844293] Bluetooth: hci3: command tx timeout
[  318.908314] Bluetooth: hci6: command tx timeout
[  319.036275] Bluetooth: hci4: command tx timeout
[  319.100292] Bluetooth: hci7: command tx timeout
[  320.060273] Bluetooth: hci0: command tx timeout
[  320.444501] Bluetooth: hci2: command tx timeout
[  320.444530] Bluetooth: hci1: command tx timeout
[  320.636302] Bluetooth: hci5: command tx timeout
[  320.892538] Bluetooth: hci3: command tx timeout
[  320.956462] Bluetooth: hci6: command tx timeout
[  321.086366] Bluetooth: hci4: command tx timeout
[  321.148263] Bluetooth: hci7: command tx timeout
[  322.110039] Bluetooth: hci0: command tx timeout
[  322.492233] Bluetooth: hci1: command tx timeout
[  322.492521] Bluetooth: hci2: command tx timeout
[  322.685409] Bluetooth: hci5: command tx timeout
[  322.940324] Bluetooth: hci3: command tx timeout
[  323.007247] Bluetooth: hci6: command tx timeout
[  323.133267] Bluetooth: hci4: command tx timeout
[  323.196288] Bluetooth: hci7: command tx timeout
[  324.157296] Bluetooth: hci0: command tx timeout
[  324.540488] Bluetooth: hci2: command tx timeout
[  324.540984] Bluetooth: hci1: command tx timeout
[  324.732484] Bluetooth: hci5: command tx timeout
[  324.988270] Bluetooth: hci3: command tx timeout
[  325.052433] Bluetooth: hci6: command tx timeout
[  325.182236] Bluetooth: hci4: command tx timeout
[  325.244635] Bluetooth: hci7: command tx timeout
[  378.204694] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  378.210603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  378.218030] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  378.229672] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  378.234360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  378.277644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  378.282712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  378.285052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  378.290907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  378.296642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  378.445487] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  378.450139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  378.452670] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  378.458143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  378.466477] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  378.570608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  378.573157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  378.575308] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  378.579777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  378.583007] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  378.648027] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  378.675708] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  378.678945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  378.681414] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  378.696030] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  378.711561] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  378.733337] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  378.733466] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  378.741121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  378.747938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  378.755030] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  378.759861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  378.771866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  378.835853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  378.855687] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  378.951641] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  379.019543] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  379.029458] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  379.094115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  379.147681] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  380.286246] Bluetooth: hci0: command tx timeout
[  380.349251] Bluetooth: hci1: command tx timeout
[  380.541265] Bluetooth: hci2: command tx timeout
[  380.669269] Bluetooth: hci3: command tx timeout
[  380.924284] Bluetooth: hci6: command tx timeout
[  381.116296] Bluetooth: hci5: command tx timeout
[  381.180301] Bluetooth: hci4: command tx timeout
[  381.308405] Bluetooth: hci7: command tx timeout
[  382.334251] Bluetooth: hci0: command tx timeout
[  382.397749] Bluetooth: hci1: command tx timeout
[  382.588302] Bluetooth: hci2: command tx timeout
[  382.717605] Bluetooth: hci3: command tx timeout
[  382.973253] Bluetooth: hci6: command tx timeout
[  383.164318] Bluetooth: hci5: command tx timeout
[  383.229321] Bluetooth: hci4: command tx timeout
[  383.357521] Bluetooth: hci7: command tx timeout
[  384.380703] Bluetooth: hci0: command tx timeout
[  384.445228] Bluetooth: hci1: command tx timeout
[  384.637265] Bluetooth: hci2: command tx timeout
[  384.765230] Bluetooth: hci3: command tx timeout
[  385.021257] Bluetooth: hci6: command tx timeout
[  385.213529] Bluetooth: hci5: command tx timeout
[  385.277301] Bluetooth: hci4: command tx timeout
[  385.404418] Bluetooth: hci7: command tx timeout
[  386.428238] Bluetooth: hci0: command tx timeout
[  386.493671] Bluetooth: hci1: command tx timeout
[  386.685240] Bluetooth: hci2: command tx timeout
[  386.813444] Bluetooth: hci3: command tx timeout
[  387.068551] Bluetooth: hci6: command tx timeout
[  387.261278] Bluetooth: hci5: command tx timeout
[  387.325247] Bluetooth: hci4: command tx timeout
[  387.454781] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
17:21:46  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=00000000000003b1 RCX=0000000000000001 RDX=0000000000000001
RSI=0000000000000000 RDI=ffff88806ce37008 RBP=ffff888036239c00 RSP=ffff88806ce08c48
R8 =0000000000000001 R9 =1ffff1100d9c6e01 R10=00000000000003b1 R11=0000000000000001
R12=00000063fdd31800 R13=ffff888036239cdc R14=ffff888036239c01 R15=ffff88806ce37138
RIP=ffffffff814cfd83 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056104dcf2008 CR3=000000000da44000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150
XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff88800bd9f100 RBX=ffff888009b78068 RCX=ffff88800bd9f6b8 RDX=ffff888009bf9638
RSI=ffff88800bd9f600 RDI=0000000000000000 RBP=ffff88800722dcb8 RSP=ffff888031b27e10
R8 =0000000000000000 R9 =ffffed1006364fb3 R10=0000000000000003 R11=0000000000000001
R12=ffff88800bd9f600 R13=00000000000000b8 R14=0000000000000001 R15=0000000000000286
RIP=ffffffff81b22ab1 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f596d1956f4 CR3=00000000357ff000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f596d1a447000007f596d1a3f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000