Warning: Permanently added '[localhost]:36588' (ECDSA) to the list of known hosts.
2025/06/08 04:59:36 fuzzer started
2025/06/08 04:59:36 dialing manager at localhost:40003
syzkaller login: [   94.797685] cgroup: Unknown subsys name 'net'
[   94.932980] cgroup: Unknown subsys name 'cpuset'
[   94.986020] cgroup: Unknown subsys name 'rlimit'
2025/06/08 04:59:52 syscalls: 2214
2025/06/08 04:59:52 code coverage: enabled
2025/06/08 04:59:52 comparison tracing: enabled
2025/06/08 04:59:52 extra coverage: enabled
2025/06/08 04:59:52 setuid sandbox: enabled
2025/06/08 04:59:52 namespace sandbox: enabled
2025/06/08 04:59:52 Android sandbox: enabled
2025/06/08 04:59:52 fault injection: enabled
2025/06/08 04:59:52 leak checking: enabled
2025/06/08 04:59:52 net packet injection: enabled
2025/06/08 04:59:52 net device setup: enabled
2025/06/08 04:59:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/08 04:59:52 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/08 04:59:52 USB emulation: enabled
2025/06/08 04:59:52 hci packet injection: enabled
2025/06/08 04:59:52 wifi device emulation: enabled
2025/06/08 04:59:52 802.15.4 emulation: enabled
2025/06/08 04:59:52 fetching corpus: 0, signal 0/0 (executing program)
2025/06/08 04:59:54 starting 8 fuzzer processes
04:59:54 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048010}, 0x800)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24a00020}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4e}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4050}, 0x0)
r3 = syz_mount_image$ext4(&(0x7f0000000480)='ext3\x00', &(0x7f00000004c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000540)=[{&(0x7f0000000500)="69e58c247b3991ad21171539ff8579dab4b0d14bda767940d55c3d16de63f3a9b82d1af1f9be346043c10f7356a292d6df8cadb880fa374bc45a", 0x3a}], 0x20000, &(0x7f0000000580)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xffffffff00000001}}, {@acl}, {@data_journal}, {@journal_async_commit}, {@sysvgroups}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x39, 0x63, 0x35, 0x32, 0x61, 0x31, 0x39], 0x2d, [0x34, 0x36, 0x61, 0x62], 0x2d, [0x32, 0x37, 0x51, 0x63], 0x2d, [0x66, 0x31, 0x39, 0x61], 0x2d, [0x31, 0x39, 0x62, 0x30, 0x65, 0x63, 0x64, 0x66]}}}, {@measure}]})
ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000c80)={0x8, &(0x7f0000000b80)=[{0x2, 0x55, &(0x7f0000000640)="4c7e44408f39f7dbc8b2fa3e45b55e25f5e95eaf0e7a7af0743390bbe9171cf6d573b420375f0bf221c76f220f6b7e99cdf674233a33892e9314017f01a9f3ecb858408671deba09955883cfb30702c66f9ee832ec", 0x1, 0x1}, {0x8, 0xaa, &(0x7f00000006c0)="c63ccef569b955f2c5ae681f8bf3bae7810c6f840a8d1f49f03b7d34a021305b127270457e9b7b037b30a86a563befede60122de42b40395799e4068a046bf265f524da35754014ede460992ed125450bf6c8f6a1fd6f6acc9fa3679c2a5831ba20bc6ac8fc4710cb30daaab5ec1feea02fe2e011a01e55bb66d483fe6991f5f2f6531eaab3dfe2adf6031a66c1a42d233c4966503b08b4768deca3431b3d8075abbb8b3994c672c4ac6"}, {0x1, 0x92, &(0x7f0000000780)="09f8452125a33c4dc90a490fa87c8f657869ba7d93017fd83d65569e0c84d16c638ad7b3e70fbb181dc13bb830ccac2020047dd6f94a872c72f2c423c651c46f817f1d624123b4ccafe56124c5c461f8c77d1006da7245c1db76cd7be29409a397f9429604338f44bf224ee8fe36d7760a2d76f2d581731d21e6c7e810715a9028e828648e87b44804960e3be615aed7db25", 0x1, 0x1}, {0x4, 0xac, &(0x7f0000000840)="c68e164ca741723472358e9da14758f2a12de59e0a41c0d88c2c62a14f4ee7ce94e2fa90e206f29cc3858715767d8e84e330b1018839319f89d122b6471c64bf222ab1eca21a5e27230c21bdff109d4079a9e56315a30394b969e3cb1d43e817ba5eb85ef5f85e5d2dad97835a29bcf60b233fb53f97d1ff11c81508ca5ab5b184229e1d7a5753f6934a655b8f919d7982aecdd22291556bb14a0572fe6e9ba77651fc1b3adac1234dba771e", 0x0, 0x1}, {0x10001, 0x80, &(0x7f0000000900)="ae7815be5284bafba9a4cdce9894ea05a3742130c7390a286dc3cdedb662e97d38816af7e5ce335cf351d72b7b206ce0256193ef57c64dc074c5ba27e59933f950076ca76eb9f0ca8fed7bffa28dff4d79097fcb5181d034294de2b87dc3aee79183d526424e15fa1cb3311e0ac8dda5ca7e8f38eb1de97ec807147b05398aaa", 0x1, 0x1}, {0xf7, 0x26, &(0x7f0000000980)="636e51103c053c6187ed9242e21769c80bd3b93b4f697fb7aec940482e55d7d15192c21820b7", 0x3}, {0x9, 0xbb, &(0x7f00000009c0)="e657f03ce1efae1ce95b97faf1a2f87067aeb461a5da7c4d0e1f4b966d9e4935fa2da5b7b0ac16fec6d90ae85af096a07214c999a9fd3efb3991af021144e626e2cf3be68539d3e70a246ca419bb7107fff9e3af49c6418b8409a6e62e959e5986e7cddf18ba8865439c4e41713050a6e1b05199ea018d23ab1b4cab5d95f118857dae482c358b6b63497a852108f01003c26156b45f78e87031a07bfa865e9cb14c1918d089183e99f9061b393835f366b89c7aa59dc6cd9d23b6", 0x0, 0x1}, {0xfffffffd, 0xed, &(0x7f0000000a80)="3bd97f1cd229fc675ce346af96fa2320e0835fc1bbad009eda59aa40903af6a3e97da3bf9fe674bca903be3a94ba11e55e25fa6d967a35e7f34598450e86d40b734e319768de1109dcdefc4dd63ff67d54f9014038e91194177648dd1106780216b3b18660ef59e603ada90a732b73708d4384ad8dac96547ed841ce3e0d01a7b8cc6cf998aa046d5861dd8dca7a5489c834ab58eb89adc6b6d1db1bac3dce0e18e59d3146cfd8e4e919f27cacb2fe146c4508aa1e4e55b712891c30d5c305b1012b0b0e06d6d8016844d5da5839fbdd658bc57d1240cafb6c7e222246d626938af93208c893961a4c75c3daef", 0x1, 0x1}]})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e40)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001080)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001040)={&(0x7f0000000e80)={0x194, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0xd4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x98, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1aae1b77}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9bcf}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x194}}, 0x40000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='net/ip_tables_targets\x00')
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x174, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x160, 0x5, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2eb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6b6c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x953}]}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x84011}, 0x844)
getsockname(r5, &(0x7f0000001340)=@ethernet={0x0, @local}, &(0x7f00000013c0)=0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r5)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x16}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x880)
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001540), 0x400, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000001580)=0x1, 0x4)

04:59:54 executing program 1:
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x0, 0x9, 0x6, 0x6})
r0 = syz_open_pts(0xffffffffffffffff, 0x4001)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/205)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000140)=""/113)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
name_to_handle_at(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@nfs={0x90, 0x24, {0x80, 0x9677, 0x1, 0x80, "72fb2775c326c80225467540d8b21b9183024fb9560fab651cb1d8fc42eea14b1a2f4d465b127b5b86125d118e4406b0d1917d2930bbef2cf3b0e42ac943751c7c5ec728a98711ae9c9ce1a71316b7dc73fb5cda585f9dd5ca0f32240a22997b34ef6b6233a9411582b163f588168d26ebc9be42db50d22fba35b1e45945820d"}}, &(0x7f0000000340), 0x1000)
sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x43553732}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4011)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000004c0)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @broadcast}, 0x42, {0x2, 0x4e22, @multicast1}, 'batadv_slave_1\x00'})
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000940)={0x33, 0x1d, &(0x7f0000000540)})
ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000980)={'\x00', 0x8, 0x3, 0x2})
r3 = perf_event_open$cgroup(&(0x7f0000000a40)={0x2, 0x80, 0x4, 0x81, 0x1, 0x4, 0x0, 0x3, 0x80400, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000a00), 0x3}, 0x100, 0xffffffffffffffff, 0x7, 0x7, 0x0, 0x6, 0x6, 0x0, 0x6}, r1, 0x10, r2, 0x8)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000ac0)=[r2, r3], 0x2)
sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2917, 0x4f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000c40))
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c80), 0x210002, 0x0)
ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000cc0))
listxattr(&(0x7f0000000d00)='./file0/file0\x00', &(0x7f0000000d40)=""/239, 0xef)
openat$incfs(0xffffffffffffffff, &(0x7f0000000e80)='.log\x00', 0x6563724584a9ab1c, 0x1c8)

04:59:54 executing program 2:
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, @in_args={0x4}}, './file0\x00'})
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1e0, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf0, 0x1b}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5c}, @NL80211_ATTR_IE={0x57, 0x2a, [@cf={0x4, 0x6, {0x80, 0x1f, 0x3ff, 0x8}}, @random={0x40, 0x22, "62df7712fe326ecd8c0068dcd65253a2f287c8da43eed3ede469791313edcff2c1d3"}, @prep={0x83, 0x25, @ext={{}, 0xff, 0x5, @device_b, 0xfffff000, @device_b, 0xffff, 0x7, @device_b, 0x7f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x64}, @NL80211_ATTR_IE={0x145, 0x2a, [@preq={0x82, 0x41, @ext={{0x0, 0x1, 0x1}, 0x0, 0xc7, 0x8000, @device_a, 0x8, @broadcast, 0x3, 0xffffd2ef, 0x3, [{{0x1, 0x0, 0x1}, @device_b, 0x7cb}, {{0x0, 0x0, 0x1}, @device_a, 0x48}, {{0x0, 0x0, 0x1}, @device_a, 0x101}]}}, @perr={0x84, 0x62, {0x21, 0x6, [@ext={{}, @broadcast, 0x80000000, @device_a, 0x3}, @not_ext={{}, @device_b, 0x1, "", 0x7}, @ext={{}, @broadcast, 0x9, @device_b, 0x41}, @not_ext={{}, @device_b, 0x7, "", 0x3a}, @not_ext={{}, @device_b, 0xffffffff, "", 0x9}, @ext={{}, @device_b, 0x6, @device_b, 0x2a}]}}, @perr={0x84, 0x75, {0x28, 0x7, [@ext={{}, @broadcast, 0x80, @broadcast, 0x2d}, @ext={{}, @broadcast, 0x1000, @device_a, 0x2c}, @not_ext={{}, @device_a, 0x80000001, "", 0x3f}, @not_ext={{}, @device_a, 0x7, "", 0x25}, @not_ext={{}, @broadcast, 0x8, "", 0x3}, @ext={{}, @device_b, 0x5, @device_a, 0x34}, @ext={{}, @device_a, 0x100, @device_b, 0x3b}]}}, @peer_mgmt={0x75, 0x6, {0x0, 0x3f, @val=0x400, @void, @void}}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x3, 0x8, @broadcast, 0x3, 0x20, 0x6}}, @ibss={0x6, 0x2, 0x4}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x24004050}, 0x8040)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r2=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000640))
ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000680)=0x1)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000006c0)={0x2, 0xf1ed, 0x2})
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000700)=0x1, 0x4)
fcntl$setown(r1, 0x8, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000740), 0x10000, 0x0)
ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000780)="cf1fed5a231236a1f54c46e292648eb2abdf55f35cf7c493bf84566b88135f8fb9c977fbaa978a528d63338cd57d45d63d787e6e06ac324db915c6c654859fa29a50eb716dba8256e1bb37f6b3f5c02109605b102c72777a8fe82c4b13cfccb723717dc4e99473703a212e30f5c742d34a4d57f0ba967306a97fbda1b5ab76f3b65f6ad5c55d11c4cca9d8637e1024afccf3cca02a1c5d7b191d198f4f153eb9b193c0e866ac78e52a9ff20918e7b5407b00cdbf17ef74beee9f06f214fe289333")
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000880)=0x2, 0x4)
socketpair(0x38, 0xa, 0x9, &(0x7f00000008c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvfrom(r4, &(0x7f0000000900)=""/201, 0xc9, 0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000a00))
ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000a40)={{0x1, 0x1, 0x18, <r6=>r0, {0x10001}}, './file0\x00'})
sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3c}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x40801)

[  112.417657] audit: type=1400 audit(1749358794.818:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:59:54 executing program 3:
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x40)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180)={{0x84, @local, 0x4e23, 0x1, 'dh\x00', 0x1, 0x4, 0x5}, {@private=0xa010100, 0x4e20, 0x0, 0xfff9, 0x56, 0xfffffffe}}, 0x44)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40800)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x80000001, 0xfffff800}}, './file0\x00'})
write$P9_RREMOVE(r2, &(0x7f0000000380)={0x7, 0x7b, 0x2}, 0x7)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x160, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x80}, 0x80004)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3f, 0x71}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x90, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x850}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x44040}, 0x20000000)
fadvise64(r2, 0x20, 0x5, 0x5)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000980), 0x20000, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0)
sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1c3a3d6a, 0x1d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40081)
syz_emit_vhci(&(0x7f0000000c00)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000d40), 0xc, &(0x7f0000001340)={&(0x7f0000000e00)={0x510, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x4c4, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x4c2d}, @device_b, @device_b, @device_a, {0x6}, @broadcast}, {0xe, 0x1, 0x1, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {}, @device_a, @random="a22ce101930e", @random="16dc281ebb79", {0x7, 0x2}}, {0x2, 0x0, 0x2, 0x1, 0xc0}}}, @ver_80211n={0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, @random="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"}}, @NL80211_ATTR_FRAME={0x2e, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @multi={{0x1, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x6, {0x8, 0xd20}, "d6985310663a1524"}], {0x0, 0x1, {0xc, 0x9}, "e74e58b8930e585d"}}}}]}, 0x510}, 0x1, 0x0, 0x0, 0x48000}, 0x84)

04:59:54 executing program 4:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x9, 0x8, 0x100})
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x5]}, 0x8)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x44001)
openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x40c00, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000300))
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000380)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000400))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x3b}}}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "1230442675bcfb80"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xe4, 0x7}, {0x8, 0x2}, {0x1, 0x7}, {0x7, 0x1}, {0x0, 0x1}, {0x0, 0x4}, {0x1f, 0x2}, {0x4, 0x4}, {0x1f, 0x7}, {0xa, 0x1}], "3646660138a332b7"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x80, 0x7}, {0x20, 0x1}, {0x4, 0x5}, {0x6, 0x2}, {0x7f}, {0x0, 0x5}, {0x5, 0x5}, {0x1, 0x1}, {0x80, 0x6}, {0x4, 0x2}, {0x0, 0x1}, {0x0, 0x7}, {0xfb, 0x3}, {0x2}, {0x7, 0x40}, {0x6}, {0x1, 0x7}, {0x1, 0x5}, {0x3f, 0x6}], "ae7f8e432ef4fcae"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x1f, 0x1}, {0x7, 0x7}, {0x6, 0x6}, {0x45, 0x7}, {0xc5, 0x3}, {0x6, 0x6}, {0x6, 0x3}, {0xf9}, {0x9, 0x4}, {0xe1, 0x3}, {0xff, 0x6}, {0xe7, 0x5}, {0xff, 0x3}, {0x8, 0x4}], "660dae035114297f"}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24040850}, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r2)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048088}, 0x4010)
ioctl$CDROMGETSPINDOWN(r2, 0x531d, &(0x7f0000000780))
ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000007c0)={0x2, 0x46, 0x5})
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000800)=0x2)

04:59:54 executing program 5:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', <r1=>0x0, 0x2f, 0x7, 0x3f, 0x80, 0x4, @empty, @mcast2, 0x8, 0x8, 0x53d, 0x2000}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x208, r0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x184, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff6}, @ETHTOOL_A_BITSET_BITS={0x174, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[#,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+-*$,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x70}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&{%}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&*#&.^\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}%*:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^-\'{*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-+*{{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x404c840}, 0x40000)
ioctl$CDROM_DEBUG(0xffffffffffffffff, 0x5330, 0x1)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"2ccd2bc19357ff3aa9256d5bc0e0213d", 0x0, <r2=>0x0, {0x1000, 0x7}, {0xa3, 0x7}, 0x6, [0x1, 0x80, 0x0, 0xffffffffffffc634, 0x1ff, 0x80000001, 0x8, 0x7fff, 0x100000001, 0x3, 0xf1, 0xfffffffffffffffd, 0x1ff, 0x3, 0x3f, 0x2]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000580)={"74ad90e47ff08c22326c51f3d60cead3", 0x0, r2, {}, {0x4, 0x6d06}, 0x1, [0x1, 0x3, 0x3, 0x1, 0x0, 0x6, 0x3, 0x1, 0x7, 0x1, 0x7, 0x3892, 0x86b, 0x6, 0x6b2, 0x2]})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x80}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x43f0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x840}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x8000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000840)={0x40, 0x0, {0x3, 0x0, 0x1, 0x2, 0x53}, 0x9})
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40880)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl2\x00', <r5=>r1, 0x2f, 0xea, 0x1, 0x10000, 0x11, @mcast2, @remote, 0x7, 0x50, 0x0, 0xffffa0f3}})
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000b40)={&(0x7f00000009c0), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r3)
sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80)
getsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000cc0), &(0x7f0000000d00))
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000d40)={0x3a, @loopback, 0x4e21, 0x0, 'lblcr\x00', 0x20, 0xfff, 0x26}, 0x2c)
ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000d80)={0x2, 0x33, 0xd, 0x2, 0x9, 0x6, 0x6, 0x136})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r3)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0x100, r7, 0x3c8d2e923eb9b9f4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xec, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x81, 0x8, 0xfffa, 0x0, 0x2, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x2, 0x36, 0x3, 0x50, 0x48, 0x2, 0x3, 0x12, 0x9, 0x0, 0x2, 0xc, 0x9, 0x2, 0x5, 0x18]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6, 0x4}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x4}, {0x1, 0x7}, {0x5, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x2, 0x2}, {0x4, 0x9}, {0x3, 0xa}, {0x5}, {0x1, 0x3}, {0x6}, {0x0, 0x7}, {}, {0x0, 0x8}, {0x7, 0x6}, {0x4, 0x7}, {0x5, 0x8}, {}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0x6c]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x5}, {0x2, 0x7}, {0x6, 0x4}, {0x0, 0x5}, {0x4, 0x4}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x4}, {0x3, 0x4}, {0x6, 0x7}, {0x2, 0x6}, {0x7, 0xa}, {0x3, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x3, 0xa}, {0x6, 0x6}, {0x4}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x5}, {0x0, 0x15}, {0x6, 0x5}, {0x3, 0x1}, {0x7, 0x4}, {0x1, 0x1}, {0x6, 0x2}, {0x2, 0x4}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xff00, 0x9, 0xffff, 0x2, 0x4, 0x2, 0xaf1f]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x16, 0x60, 0x30, 0xb, 0xb, 0x18, 0x9, 0x36, 0x60, 0x6, 0x30, 0x48, 0x4, 0x60, 0x5, 0x18, 0x18, 0xb, 0x4, 0xc, 0x0, 0x30, 0x6, 0x60, 0x18, 0x4, 0x6, 0x6, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2490, 0xfc13, 0x0, 0x10, 0x9, 0x800, 0x401, 0x2]}}]}]}]}, 0x100}}, 0x20000000)

04:59:54 executing program 6:
r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80800)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0))
r1 = fsmount(0xffffffffffffffff, 0x1, 0x72)
write$P9_RFLUSH(r1, &(0x7f0000000500)={0x7, 0x6d, 0x1}, 0x7)
ioctl(r0, 0x6, &(0x7f0000000540)="7845e73935bd153fd1be9f2814ddd99dca4578882f202c06b1d3a0ff7b632a5b8c105b2293a71e6e209cd56f70fc7ce8aea9b6c409eb1769dd954b802bd9665792e86d55bc5bfc6f7dd941194796c7ea4e5c1a2a650537ac78289eab6c09aaa9af3fdecdddbcca967b69f79a73d8547aa34e4243f854b29b75f2af4d0b681a2df4b9f32df5b2582a453231fffddbc06ea6732729c0979f13ad931b6d32c2cc7c5f577546e8756f0178cdc0231ff1fbd2262833f38d06b03140020d63981dbd8d05fd46a5cbd1240fdfe4c0a851e7df")
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x688000, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, r3, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xbe}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3d}]}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4004011)
signalfd4(0xffffffffffffffff, &(0x7f0000000840)={[0xffffffffffff6b59]}, 0x8, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r5=>r2}, './file0\x00'})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/crypto\x00', 0x0, 0x0)
ioctl$CDROMEJECT_SW(r6, 0x530f, 0x0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xaff, 0x64}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, 0x38}}, 0x40)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000a80)={0x9, &(0x7f0000000a00)=[{0x4, 0xf7, 0x1f, 0x7}, {0x5, 0x7f, 0x1, 0x200}, {0x1, 0x2, 0x6, 0x4}, {0x3f, 0xa0, 0x7, 0x4}, {0x5, 0x80, 0x7}, {0x0, 0x1, 0x4, 0x276}, {0xff7f, 0xb9, 0x2, 0x6}, {0x400, 0x5, 0x81, 0x7fff}, {0x22e, 0x0, 0xfd, 0x6}]})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x6, 0x6, 0x20, @private2, @mcast2, 0x1, 0x20, 0x6, 0x1}})
unlinkat(r5, &(0x7f0000000b80)='./file0\x00', 0x200)
write$char_usb(r6, &(0x7f0000000bc0)="3942349261cf483a41bb41063227f96159f10f2f92d6082182ed5c341f3b96479f04cbe35b050affea4db6c42cc4d9e0ef6b53ae19b76bbdc2308cac904c303dcc25688dd965e29adb8ed2405cacfbfa31c66f63ea3680f1b55f9aac4a6e74737912e72805580e5ca258f9bdb600183cd5487ab79ac6ebd3db5a74c4cfb78bb0865355bf1ad0ca108b06bf3a744fb9340f855d9e99e0c467514c00af7492295102b74bc8091c4be98e40d0eff1ce7262ef3374f5fa11e2ccfe322733e01e78478a", 0xc1)
init_module(&(0x7f0000000cc0)='/proc/crypto\x00', 0xd, &(0x7f0000000d00)='{(\x00')
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

04:59:54 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffff}}, './file0\x00'})
r1 = eventfd(0x1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x4, 0xdc, 0x5c, 0xf291})
r2 = dup3(r0, r1, 0x80000)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000000c0)={{0x0, 0x6, 0xb3, 0xfffffffffffffffc, 0xed, 0x9, 0xd1a, 0x9, 0x2, 0x7, 0x3b3, 0x4, 0x6, 0x5, 0x1b1}})
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000010c0)={0x3f, 0x7, 0x5, 0x1, 0x5})
r5 = dup(r0)
mount$9p_fd(0x0, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140), 0x8802, &(0x7f0000001180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@noextend}, {@version_9p2000}, {@cache_loose}, {@loose}, {@noextend}, {@cache_mmap}], [{@dont_appraise}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@obj_user={'obj_user', 0x3d, '@\\'}}, {@euid_gt={'euid>', 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@euid_eq}]}})
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000012c0)={0x6, {{0xa, 0x4e22, 0x6c22, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80}}}, 0x88)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001380)={{0x1, 0x1, 0x18, <r7=>r1}, './file0\x00'})
getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f00000013c0)={'ipvs\x00'}, &(0x7f0000001400)=0x1e)
recvmsg$unix(r2, &(0x7f0000002740)={&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000002640)=[{&(0x7f00000014c0)=""/131, 0x83}, {&(0x7f0000001580)=""/174, 0xae}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x3, &(0x7f0000002680)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r8=>0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x2)
sendto$inet6(r8, &(0x7f0000002780)="92aa6069021195417c0fcabf36e18348c8f89359d96179a552a4cadaea9e8bc600db2448b1eb11a6dd81fa232c17859b75ebde30da9ff9aaeb082482fbe2d137bdfb0cec9790db025ceb2800a0cd20c8bc6d0cc36a17add6a231cbac1fdf8e71802c2ce9797f57e5d41ab1944930", 0x6e, 0x4010, &(0x7f0000002800)={0xa, 0x4e21, 0x5, @mcast2, 0x21d}, 0x1c)
r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002840), 0x410000, 0x0)
ioctl$CDROMREADCOOKED(r10, 0x5315, &(0x7f0000002880))
ioctl$EVIOCGNAME(r7, 0x80404506, &(0x7f0000003300)=""/104)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000003380)={'team0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r9, 0x89f7, &(0x7f0000003440)={'syztnl0\x00', &(0x7f00000033c0)={'syztnl2\x00', r11, 0x4, 0x3, 0x3e, 0x3, 0x10, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x7, 0xffffd46c, 0x80000000}})

[  113.919116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.922274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  113.930143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.930431] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  113.934462] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.939629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  113.949566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.951940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.958771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  113.963348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.985277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  113.993672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  113.996400] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.003312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  114.019952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  114.026025] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.029634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.063705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  114.090472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  114.094855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  114.123360] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  114.138380] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  114.143268] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  114.153411] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  114.168665] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  114.172513] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  114.183443] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  114.190125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  114.193372] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  114.206035] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.206346] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  114.208331] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  114.213305] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  114.216160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.221249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.227107] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  114.232561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.244343] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.252514] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  114.259064] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  116.054162] Bluetooth: hci0: command tx timeout
[  116.054197] Bluetooth: hci2: command tx timeout
[  116.056075] Bluetooth: hci1: command tx timeout
[  116.182913] Bluetooth: hci3: command tx timeout
[  116.309565] Bluetooth: hci4: command tx timeout
[  116.372939] Bluetooth: hci7: command tx timeout
[  116.373677] Bluetooth: hci6: command tx timeout
[  116.373728] Bluetooth: hci5: command tx timeout
[  118.101564] Bluetooth: hci1: command tx timeout
[  118.101650] Bluetooth: hci2: command tx timeout
[  118.102587] Bluetooth: hci0: command tx timeout
[  118.229841] Bluetooth: hci3: command tx timeout
[  118.356987] Bluetooth: hci4: command tx timeout
[  118.420971] Bluetooth: hci7: command tx timeout
[  118.421454] Bluetooth: hci6: command tx timeout
[  118.421999] Bluetooth: hci5: command tx timeout
[  120.148944] Bluetooth: hci0: command tx timeout
[  120.149432] Bluetooth: hci2: command tx timeout
[  120.149975] Bluetooth: hci1: command tx timeout
[  120.276941] Bluetooth: hci3: command tx timeout
[  120.405030] Bluetooth: hci4: command tx timeout
[  120.468927] Bluetooth: hci5: command tx timeout
[  120.469407] Bluetooth: hci6: command tx timeout
[  120.469915] Bluetooth: hci7: command tx timeout
[  122.198000] Bluetooth: hci1: command tx timeout
[  122.198182] Bluetooth: hci2: command tx timeout
[  122.198657] Bluetooth: hci0: command tx timeout
[  122.325030] Bluetooth: hci3: command tx timeout
[  122.452885] Bluetooth: hci4: command tx timeout
[  122.517115] Bluetooth: hci6: command tx timeout
[  122.517554] Bluetooth: hci7: command tx timeout
[  122.518269] Bluetooth: hci5: command tx timeout
[  173.955229] syz-executor.0 (287) used greatest stack depth: 24912 bytes left
[  174.006983] syz-executor.6 (286) used greatest stack depth: 24640 bytes left
[  176.229578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  176.232958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  176.235610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  176.243090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  176.248497] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  176.317288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.320578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.323044] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.336533] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.349286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.351730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.367700] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.369061] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.375400] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.381743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.382677] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  176.384536] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.387648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  176.396158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  176.400401] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  176.408359] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  176.412283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  176.420637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.421605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  176.424084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  176.425531] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.430515] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  176.434462] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.438555] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  176.442616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  176.491675] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  176.494225] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  176.495792] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  176.505306] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  176.527006] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  176.602681] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  176.611509] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  176.617121] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  176.632444] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  176.639275] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  178.326168] Bluetooth: hci0: command tx timeout
[  178.454239] Bluetooth: hci2: command tx timeout
[  178.455977] Bluetooth: hci1: command tx timeout
[  178.518546] Bluetooth: hci5: command tx timeout
[  178.580922] Bluetooth: hci4: command tx timeout
[  178.581462] Bluetooth: hci3: command tx timeout
[  178.644872] Bluetooth: hci6: command tx timeout
[  178.710697] Bluetooth: hci7: command tx timeout
[  180.374950] Bluetooth: hci0: command tx timeout
[  180.501004] Bluetooth: hci2: command tx timeout
[  180.501455] Bluetooth: hci1: command tx timeout
[  180.566132] Bluetooth: hci5: command tx timeout
[  180.628898] Bluetooth: hci3: command tx timeout
[  180.629338] Bluetooth: hci4: command tx timeout
[  180.692906] Bluetooth: hci6: command tx timeout
[  180.756903] Bluetooth: hci7: command tx timeout
[  182.422081] Bluetooth: hci0: command tx timeout
[  182.548990] Bluetooth: hci1: command tx timeout
[  182.549495] Bluetooth: hci2: command tx timeout
[  182.612958] Bluetooth: hci5: command tx timeout
[  182.676912] Bluetooth: hci4: command tx timeout
[  182.677403] Bluetooth: hci3: command tx timeout
[  182.742087] Bluetooth: hci6: command tx timeout
[  182.805092] Bluetooth: hci7: command tx timeout
[  184.468919] Bluetooth: hci0: command tx timeout
[  184.598693] Bluetooth: hci2: command tx timeout
[  184.599201] Bluetooth: hci1: command tx timeout
[  184.662109] Bluetooth: hci5: command tx timeout
[  184.725226] Bluetooth: hci3: command tx timeout
[  184.725719] Bluetooth: hci4: command tx timeout
[  184.788941] Bluetooth: hci6: command tx timeout
[  184.854978] Bluetooth: hci7: command tx timeout
[  238.435479] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  238.438308] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  238.440737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  238.451515] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  238.456550] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  238.505664] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  238.509374] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  238.518581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.527608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  238.536592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  238.592912] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  238.595716] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  238.597880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  238.603129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  238.606504] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  238.716111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.725973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  238.728368] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.752273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.756475] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  238.760099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  238.766242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  238.773235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  238.778023] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  238.790233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.795423] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  238.811071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.812188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  238.823746] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  238.833083] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  238.834529] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  238.839849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.850515] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.852590] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  238.855428] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.877382] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.884238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  238.891535] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.899482] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  238.936689] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  240.533109] Bluetooth: hci0: command tx timeout
[  240.597216] Bluetooth: hci1: command tx timeout
[  240.788899] Bluetooth: hci3: command tx timeout
[  240.917248] Bluetooth: hci5: command tx timeout
[  240.917281] Bluetooth: hci4: command tx timeout
[  240.918130] Bluetooth: hci2: command tx timeout
[  240.981196] Bluetooth: hci7: command tx timeout
[  240.981868] Bluetooth: hci6: command tx timeout
[  242.581012] Bluetooth: hci0: command tx timeout
[  242.645323] Bluetooth: hci1: command tx timeout
[  242.836873] Bluetooth: hci3: command tx timeout
[  242.964997] Bluetooth: hci4: command tx timeout
[  242.965511] Bluetooth: hci5: command tx timeout
[  242.965998] Bluetooth: hci2: command tx timeout
[  243.029172] Bluetooth: hci7: command tx timeout
[  243.030636] Bluetooth: hci6: command tx timeout
[  244.629909] Bluetooth: hci0: command tx timeout
[  244.694862] Bluetooth: hci1: command tx timeout
[  244.885876] Bluetooth: hci3: command tx timeout
[  245.012990] Bluetooth: hci4: command tx timeout
[  245.013153] Bluetooth: hci2: command tx timeout
[  245.013458] Bluetooth: hci5: command tx timeout
[  245.076911] Bluetooth: hci7: command tx timeout
[  245.078135] Bluetooth: hci6: command tx timeout
[  246.678135] Bluetooth: hci0: command tx timeout
[  246.742715] Bluetooth: hci1: command tx timeout
[  246.932905] Bluetooth: hci3: command tx timeout
[  247.061220] Bluetooth: hci2: command tx timeout
[  247.061286] Bluetooth: hci4: command tx timeout
[  247.061904] Bluetooth: hci5: command tx timeout
[  247.125024] Bluetooth: hci6: command tx timeout
[  247.125112] Bluetooth: hci7: command tx timeout
[  300.973176] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.977104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.980888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.988533] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.993327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  301.040763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  301.044371] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  301.050270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  301.057432] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  301.061612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  301.118170] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.120632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.127280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.155062] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.161478] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  301.254987] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  301.257989] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  301.266760] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  301.271305] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  301.275413] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  301.287962] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  301.291514] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  301.296088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  301.313688] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  301.318456] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  301.334196] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  301.340072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.354735] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.403375] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.409265] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.518916] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  301.534866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  301.587089] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  301.590106] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  301.634508] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  301.647736] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  301.652288] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  301.654620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  301.699289] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  301.703276] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  303.062881] Bluetooth: hci0: command tx timeout
[  303.127716] Bluetooth: hci1: command tx timeout
[  303.253103] Bluetooth: hci2: command tx timeout
[  303.380967] Bluetooth: hci4: command tx timeout
[  303.509720] Bluetooth: hci5: command tx timeout
[  303.510665] Bluetooth: hci3: command tx timeout
[  303.764893] Bluetooth: hci6: command tx timeout
[  303.830101] Bluetooth: hci7: command tx timeout
[  305.110830] Bluetooth: hci0: command tx timeout
[  305.173886] Bluetooth: hci1: command tx timeout
[  305.301878] Bluetooth: hci2: command tx timeout
[  305.428933] Bluetooth: hci4: command tx timeout
[  305.556918] Bluetooth: hci3: command tx timeout
[  305.557397] Bluetooth: hci5: command tx timeout
[  305.813153] Bluetooth: hci6: command tx timeout
[  305.878092] Bluetooth: hci7: command tx timeout
[  307.158316] Bluetooth: hci0: command tx timeout
[  307.222093] Bluetooth: hci1: command tx timeout
[  307.349208] Bluetooth: hci2: command tx timeout
[  307.476866] Bluetooth: hci4: command tx timeout
[  307.605189] Bluetooth: hci5: command tx timeout
[  307.605700] Bluetooth: hci3: command tx timeout
[  307.863057] Bluetooth: hci6: command tx timeout
[  307.926352] Bluetooth: hci7: command tx timeout
[  309.204951] Bluetooth: hci0: command tx timeout
[  309.270147] Bluetooth: hci1: command tx timeout
[  309.396882] Bluetooth: hci2: command tx timeout
[  309.524925] Bluetooth: hci4: command tx timeout
[  309.652896] Bluetooth: hci5: command tx timeout
[  309.653400] Bluetooth: hci3: command tx timeout
[  309.909095] Bluetooth: hci6: command tx timeout
[  309.972904] Bluetooth: hci7: command tx timeout
[  363.499665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  363.502718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  363.510775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  363.518482] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  363.526177] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  363.689770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  363.692891] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  363.695136] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.703082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.709026] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  363.777026] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  363.782261] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  363.784967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  363.792105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  363.796140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  363.906615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.909033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.912444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.914784] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.920490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  363.921257] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.924584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.931002] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.936739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  363.937287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.942097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.948914] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.951426] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  363.965573] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  363.976617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  364.016026] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  364.026119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  364.047971] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  364.068454] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  364.074358] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  364.128976] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  364.132350] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  364.153577] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  364.167457] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  364.183082] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  365.589474] Bluetooth: hci0: command tx timeout
[  365.781902] Bluetooth: hci1: command tx timeout
[  365.845201] Bluetooth: hci2: command tx timeout
[  366.037339] Bluetooth: hci3: command tx timeout
[  366.037430] Bluetooth: hci5: command tx timeout
[  366.100869] Bluetooth: hci4: command tx timeout
[  366.164920] Bluetooth: hci6: command tx timeout
[  366.292905] Bluetooth: hci7: command tx timeout
[  367.638011] Bluetooth: hci0: command tx timeout
[  367.829954] Bluetooth: hci1: command tx timeout
[  367.894937] Bluetooth: hci2: command tx timeout
[  368.085226] Bluetooth: hci3: command tx timeout
[  368.085695] Bluetooth: hci5: command tx timeout
[  368.149421] Bluetooth: hci4: command tx timeout
[  368.213093] Bluetooth: hci6: command tx timeout
[  368.340861] Bluetooth: hci7: command tx timeout
[  369.685190] Bluetooth: hci0: command tx timeout
[  369.877869] Bluetooth: hci1: command tx timeout
[  369.940861] Bluetooth: hci2: command tx timeout
[  370.132918] Bluetooth: hci3: command tx timeout
[  370.133205] Bluetooth: hci5: command tx timeout
[  370.196899] Bluetooth: hci4: command tx timeout
[  370.260934] Bluetooth: hci6: command tx timeout
[  370.389230] Bluetooth: hci7: command tx timeout
[  371.733072] Bluetooth: hci0: command tx timeout
[  371.924988] Bluetooth: hci1: command tx timeout
[  371.988964] Bluetooth: hci2: command tx timeout
[  372.180971] Bluetooth: hci3: command tx timeout
[  372.181463] Bluetooth: hci5: command tx timeout
[  372.246237] Bluetooth: hci4: command tx timeout
[  372.309066] Bluetooth: hci6: command tx timeout
[  372.436897] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
05:04:55  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffffffff81604870 RCX=ffff88802d6a712c RDX=1ffff11005ad4e46
RSI=ffffffff8195679c RDI=ffff88802d6a72a0 RBP=ffff88802d6a7270 RSP=ffff88802d6a71c8
R8 =0000000000000001 R9 =ffff88802d6a7218 R10=000000000003b6cd R11=0000000000021891
R12=ffff88802d6a72a0 R13=0000000000000000 R14=ffff88801598d280 R15=0000000000000cc0
RIP=ffffffff8160487f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe4cd7b81f0 CR3=000000001a2d7000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000007 RCX=ffffffff84af02e8 RDX=ffff888013f95280
RSI=ffffffff84af0354 RDI=0000000000000000 RBP=ffff888016426c40 RSP=ffff888031697710
R8 =0000000000000001 R9 =ffffed1006f40288 R10=0000000000000007 R11=0000000000000001
R12=000000000000000c R13=0000000000000300 R14=ffffed10062d2f1c R15=ffff8880316978d0
RIP=ffffffff84af0358 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f06ee1bf790 CR3=0000000017616000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000