Warning: Permanently added '[localhost]:5944' (ECDSA) to the list of known hosts.
2025/06/09 15:34:08 fuzzer started
2025/06/09 15:34:09 dialing manager at localhost:40003
syzkaller login: [  109.923728] cgroup: Unknown subsys name 'net'
[  110.067854] cgroup: Unknown subsys name 'cpuset'
[  110.110678] cgroup: Unknown subsys name 'rlimit'
2025/06/09 15:34:34 syscalls: 2214
2025/06/09 15:34:34 code coverage: enabled
2025/06/09 15:34:34 comparison tracing: enabled
2025/06/09 15:34:34 extra coverage: enabled
2025/06/09 15:34:34 setuid sandbox: enabled
2025/06/09 15:34:34 namespace sandbox: enabled
2025/06/09 15:34:34 Android sandbox: enabled
2025/06/09 15:34:34 fault injection: enabled
2025/06/09 15:34:34 leak checking: enabled
2025/06/09 15:34:34 net packet injection: enabled
2025/06/09 15:34:34 net device setup: enabled
2025/06/09 15:34:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/09 15:34:34 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/09 15:34:34 USB emulation: enabled
2025/06/09 15:34:34 hci packet injection: enabled
2025/06/09 15:34:34 wifi device emulation: enabled
2025/06/09 15:34:34 802.15.4 emulation: enabled
2025/06/09 15:34:34 fetching corpus: 0, signal 0/0 (executing program)
2025/06/09 15:34:36 starting 8 fuzzer processes
15:34:36 executing program 1:
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x4e20, @private=0xa010102}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x2, {0x2, 0x4e24, @private=0xa010102}, 'netdevsim0\x00'})
utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xfffffffffffffffe})
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x72}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x81)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x1e}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000094)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg0\x00', <r1=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000440), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x41}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file1\x00'})
fcntl$lock(r3, 0x5, &(0x7f0000000840)={0x0, 0x3, 0xffffffffffff0000, 0xffffffff, 0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x845)
sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r0, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "8a0d426a80e9e545d90d2786214c021e"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000b00)={r2, @multicast1, @remote}, 0xc)
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x9c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x55}, 0x44)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000cc0))
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000d80)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/28, 0x1c, 0x1, &(0x7f0000000d40)}, &(0x7f0000000dc0)=0x40)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000e40), r3)
sendmsg$FOU_CMD_GET(r3, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044800}, 0x40800)

15:34:36 executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'tunl0\x00', <r1=>0x0, 0x7, 0x7800, 0x0, 0x6, {{0xc, 0x4, 0x1, 0x18, 0x30, 0x68, 0x0, 0x7f, 0x4, 0x0, @local, @loopback, {[@ssrr={0x89, 0x7, 0x61, [@empty]}, @timestamp={0x44, 0x14, 0xfc, 0x0, 0x5, [0x1, 0x7, 0x0, 0x7]}]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xfc, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40004}, 0x40054)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x7ff}}, './file0\x00'})
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa34}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaaa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf5c1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x443c3f60}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x487}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private0, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x4040447)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x123140, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000840}, 0x404c880)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x327}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40)
r5 = syz_open_dev$vcsn(&(0x7f0000000780), 0x0, 0x581001)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000f00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000800)={0x6b4, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x56}}}}, [@NL80211_ATTR_TID_CONFIG={0x2d4, 0x11d, 0x0, 0x1, [{0x27c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x55}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x22c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x5, 0x8}, {0x1, 0x5}, {0x5, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x5, 0x5}, {0x2, 0x8}]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x800, 0x963, 0x8000, 0x5, 0x4, 0x0, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x6}, {0x3, 0x1}, {}, {0x0, 0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x6, 0x4}, {0x7, 0x9}, {0x0, 0x7}, {0x1, 0x5}, {0x6}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x30, 0x48, 0xb, 0x4, 0xc, 0xb, 0x36, 0x60, 0x3, 0x4, 0x4, 0x18, 0x48, 0x3c, 0x1b]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0xa}, {0x7, 0x2}, {0x7, 0x9}, {0x3, 0x9}, {0x4, 0x4}, {0x2, 0x9}, {0x3, 0x8}, {0x3, 0x1}, {0x6, 0xa}, {0x6, 0x4}, {0x3, 0x2}, {0x2, 0x9}, {0x7, 0x6}, {0x1, 0x8}, {}, {0x6, 0x9}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0xd8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x7}, {0x5, 0x3}, {0x4, 0x6}, {0x1, 0x7}, {0x3, 0x8}, {0x1, 0x6}, {0x5, 0xa}, {0x7, 0xa}, {0x7, 0x3}, {0x7, 0x9}, {0x0, 0x8}, {0x0, 0x9}, {0x4, 0x6}, {0x0, 0x9}, {0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x4}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x5}, {0x1, 0x7}, {0x1, 0x6}, {0x5, 0x1}, {0x6, 0x6}, {0x4, 0x7}, {0x1, 0x9}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x8}, {0x3, 0x8}, {0x2, 0x3}, {0x7, 0x2}, {0x5, 0x1}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x5, 0x3}, {0x2, 0x9}, {0x0, 0xa}, {0x3, 0x6}, {0x1, 0x9}, {0x6, 0x2}, {0x1, 0x1}, {0x7, 0x8}, {0x6, 0x6}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0xb, 0x7f, 0x2, 0x60, 0x6c, 0x2, 0x6, 0x2, 0x18, 0x7, 0x12, 0x24, 0x6c, 0x3, 0x36, 0x1b, 0x24, 0x9, 0xb, 0x48, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x1}, {0x5, 0x2}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x6}, {0x2, 0x7}, {0x6, 0xa}, {0x1, 0x5}, {0x2, 0x7}, {0x5}, {0x2, 0x6}, {0x2, 0x4}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x6, 0x1}, {0x5, 0xa}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x8}, {0x2, 0x7}, {0x2, 0x5}, {0x4}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0xa}, {0x1, 0x8}, {0x3, 0x7}, {0x7, 0x6}, {0x5, 0x6}, {0x6, 0x9}, {0x3, 0x7}, {0x3}, {0x3, 0x6}, {0x2, 0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0x1}, {0x4, 0x3}, {0x2, 0x3}, {0x0, 0x1}, {0x7, 0x6}, {0x2}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x5, 0x2}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x5, 0x9}, {0x7}, {0x0, 0x5}, {0x5, 0x9}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0xa}, {0x6, 0x8}, {0x3, 0x8}, {0x4, 0x7}, {0x3, 0x5}, {0x3, 0x2}, {0x2, 0x5}, {0x1, 0x3}, {0x4, 0x3}, {0x0, 0x7}, {0x6, 0x3}, {0x3, 0x5}, {0x0, 0x9}, {0x2, 0x1}, {0x3, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x3, 0x9}, {0x3, 0x3}, {0x4, 0xa}, {0x5, 0x9}, {0x1}, {0x1, 0x7}, {0x1}, {0x1, 0x5}, {0x1}, {0x5, 0x9}, {0x6, 0x8}, {0x1, 0x1}, {0x0, 0x5}, {}, {0x4, 0x1}, {0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x3, 0x4}, {0x6, 0x9}]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x1b, 0x16, 0xc, 0x36, 0x4, 0x4, 0xb, 0x18, 0x60, 0x18, 0x6, 0x24, 0x36, 0x1b, 0x60, 0x5, 0x24, 0x9, 0x4, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x6f, 0x7, 0x0, 0xbf, 0x1000, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0xc, 0xf, 0x5, 0x1b, 0xb, 0x0, 0x36, 0x16, 0xc, 0x6c, 0x16, 0x48, 0x12, 0x60, 0x24, 0x48, 0x36, 0x6, 0x48, 0x39, 0x256397aa3323c98d]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x1}, {0x4, 0x7}, {0x4, 0x5}, {0x5, 0x1}, {0x1, 0x5}, {0x4, 0x9}, {0x6, 0x6}, {0x1, 0x7}, {0x7, 0x5}, {0x0, 0x3}, {0x4, 0x3}, {0x5, 0x6}, {0x2, 0x6}, {0x0, 0x6}, {0x5, 0xa}, {0x1, 0x9}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x9}, {0x6, 0x5}, {}, {0x5, 0x6}, {0x6, 0x1}, {0x0, 0xa}, {0x1, 0x2}, {0x3, 0x8}, {0x4, 0x9}, {0x4, 0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x9, 0xb9, 0x7ff, 0x72, 0x81, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x0, 0x5, 0x40, 0x0, 0x101, 0x401]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0xef95, 0x8aa, 0x9, 0x4, 0x1, 0x3f]}}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xdb6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd10}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x1d0, 0x11d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xae}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x1, 0x1f, 0x400, 0x677, 0x200, 0x5, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x266, 0x1f, 0x9, 0x3, 0xff, 0x3ff, 0xaa, 0xabdf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x800, 0x800, 0x3, 0x8001, 0x7782, 0x2, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf5df, 0x7fff, 0x0, 0x8, 0x4a63, 0x1000, 0x7d4, 0x7ff0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x4, 0x9, 0x1f, 0x690, 0x2905, 0x8001]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x1}, {0x0, 0x3}, {0x4, 0x5}, {0x4, 0x4}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0x7}, {0x5, 0x4}, {0x0, 0x2}, {0x3, 0x4}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x8}, {0x7}, {0x7, 0x5}, {0x7, 0x2}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x7}, {0x5, 0x3}, {0x3, 0x4}, {0x6}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x7, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x6, 0x7}, {0x0, 0x1}, {0x0, 0xa}, {}, {0x1, 0x8}, {0x1, 0x9}, {0x2, 0x4}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x3, 0x60]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x0, 0x9, 0x12, 0x18, 0x60, 0xc, 0x30, 0x3]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x9, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x71}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x92}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe61}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x25}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6c}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc6}]}]}, @NL80211_ATTR_TID_CONFIG={0x13c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x75}]}, {0x118, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x104, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xec, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x6c, 0xb, 0x48, 0x2, 0x2, 0x1, 0x6, 0x1, 0x9, 0x1b, 0x30, 0x3, 0x1b, 0x12, 0x3, 0x60, 0x48, 0x16, 0x1b, 0x1, 0x36, 0x9, 0x60, 0x12, 0x0, 0x1b, 0xb, 0xc, 0x24, 0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0xa}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x9}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x8}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x7}, {0x2, 0xa}, {0x1, 0x5}, {0x4, 0x3}, {0x7, 0x4}, {0x2, 0x7}, {0x7}, {0x6, 0x1}, {0x7, 0x5}, {0x1, 0x5}, {0x4, 0x8}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0xa}, {}, {0x3, 0x1e}, {0x2, 0x4}, {0x7, 0x4}, {0x3}, {0x3, 0x1}, {0x5, 0x3}, {0x6, 0x6}, {0x3, 0x2}, {0x4, 0x8}, {0x6, 0x8}, {0x7, 0xa}, {0x7, 0xa}, {0x2, 0x5}, {0x6, 0x4}, {0x3, 0x2}, {0x0, 0x4}, {0x4, 0x6}, {0x3, 0xa}, {0x4, 0xa}, {}, {0x6, 0x6}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x4, 0x6, 0x16, 0x2, 0x3, 0x18, 0x12, 0x18, 0x18, 0x24, 0x2, 0x36, 0x4, 0x1b, 0x56, 0x30, 0x9, 0x18, 0x18, 0x48, 0x36, 0x6c, 0x6, 0x1b, 0x7, 0x18, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x363, 0x5, 0x3, 0x2, 0x0, 0x92db, 0xffff]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x0, 0x9, 0x48, 0x12, 0x3, 0x3, 0x3, 0x2, 0xc, 0x60]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x36, 0x5, 0x3, 0xc, 0xa, 0x4, 0x60, 0x36, 0x9, 0x6c, 0x2, 0x36]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x18, 0x5, 0x16, 0x5, 0xb, 0x4, 0x1, 0x6, 0x18, 0xc, 0x48, 0x9, 0x6c, 0x4, 0x2, 0x12, 0x3a]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x3, 0x4, 0xc, 0x48, 0x16, 0x60]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc9}]}]}, @NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x64}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x10}, 0x804)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f80), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000fc0)={'batadv0\x00', <r7=>0x0})
sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x3c, r6, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4)
r8 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x68, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0xc050)
sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x40, 0x15, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004844)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001340), r0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x61fa3fb7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x5)
getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000001480)={'NETMAP\x00'}, &(0x7f00000014c0)=0x1e)

15:34:36 executing program 2:
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @broadcast}, {0x306, @broadcast}, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, 'veth1_to_hsr\x00'})
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x80000000}, 0xc)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'veth0_to_bridge\x00'})
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000100)=0x40, 0x4)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x800, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40044}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000280)={0x0, @multicast2, 0x4e20, 0x3, 'ovf\x00', 0x24, 0x3, 0x4b}, 0x2c)
r2 = open_tree(r1, &(0x7f00000002c0)='./file0\x00', 0x8900)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40011)
pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000400)="c492f55e0ba803cd17a5ba45fade70f3332fa87e837cb16906c6f008ac863f104c1022860f46ee7c7be8a490b1b2e8ab8920b4538d014ad63eb72ed9e9ff5a49c0f598cb52c35c506248f3d67e1dcdd3953e67e19cac2c090afed78b07062e877fb53886fbdcdf1f7b9e16227269719df95d33324afb3eb192a290528ae19003fa23648d027d4fc63f881a6aa08cac05adebbde2c0ea4afe319f53e6ffd67753a11fd1504dbf8384fad88da9b8463fb855b3fefcbe99515f423dbe0043121026eec589815b2dd3b2402d19d7b1009c12eb3f9abb7e7ca2711882c4685743bb993b1923e5120298c7df55cfda4efc36", 0xef}, {&(0x7f0000000500)="0dc2cc84be0936f0", 0x8}, {&(0x7f0000000540)="c0d513f4e3e9050651254d3c3f2ff6f6bc1b334b4e5b748eb33c0341dedaa69bf466fa21605b3f5a93f25390ace2ce5919142b2edbf0c06c47edfe6dce820bfed469ad7d9abf6fbb63179231e4838f4f767effac7af9f9ecc443d65775d9f46d59c388f25ecf0d55e5b5919826709781ebb2bac64132669b9446b1da7a9dda1356d5875b1605925fdd770896a74d85245bfe95e9fca67d24698e76c2ae7e98914cb58e68d103d69c443b0334141fee64", 0xb0}], 0x3, 0x609f, 0x1, 0x4)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000640))
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000680)={0x99b, {{0xa, 0x4e21, 0x7fff, @mcast2, 0xfff}}}, 0x88)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780)=0x4)
ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000007c0)=""/35)
ioctl$int_in(r3, 0x5452, &(0x7f0000000800)=0x8001)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000840)={0x0, 0x0, 0x0, [0x1, 0x8, 0x10000, 0x401, 0x8000], [0x8a, 0x3, 0x1, 0x0, 0x1, 0x8a2, 0x5, 0x9, 0x6, 0x2, 0x1, 0x3, 0x4, 0x81, 0x3a2, 0x6aa, 0x1, 0x6c, 0x3, 0x7ff, 0xffffffff80000001, 0x10, 0x6a470fb4, 0x1, 0x3ff, 0x9, 0xd6, 0x8001, 0x80000001, 0x400, 0xfff, 0x4, 0x8, 0xff, 0x1000000000, 0x7ff, 0x9, 0x3, 0x5, 0xfff, 0x4, 0x100, 0x850c, 0x6, 0x543, 0x7, 0x7, 0x3, 0x5, 0x0, 0x9, 0x67, 0x6, 0x5, 0x400, 0xffffffffffffffe1, 0x9, 0x5, 0x6, 0xfb4e, 0x3, 0x6, 0xcd2, 0x9, 0x3ff, 0x3f, 0x1f, 0x4, 0x1f, 0x30, 0x7, 0x5, 0x80000001, 0x9, 0xfffffffffffeffff, 0x3, 0x2, 0xf56, 0x6, 0x5c5e48d4, 0x100, 0x9, 0x4, 0x2, 0x7ff, 0x2f9, 0x20, 0x5, 0xac32, 0x500000000000, 0x8, 0x8001, 0xfffffffffffffffe, 0x1, 0xc48, 0x66, 0x9, 0x7, 0x7, 0x7, 0x4, 0x80000001, 0x4, 0x6, 0x7f, 0x9, 0xe52c, 0x7f, 0xfdb1, 0xffff, 0xf3, 0x4fa6, 0xffffffff, 0x400, 0x9, 0x0, 0x0, 0x0, 0xfff, 0x400, 0xfffffffffffffff7]})
r4 = memfd_secret(0x80000)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048011)

15:34:36 executing program 3:
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x2, 'rose0\x00', {0x8}, 0x9})
r0 = dup(0xffffffffffffffff)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080))
sendmsg$nl_netfilter(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x294, 0xf, 0x4, 0x201, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x9}, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x7c, 0x92, 0x0, 0x0, @binary="b65d79a550888b8d6b35a04bf6c773d03ba5843554f1aa6f838e7e4a111176c35756792a861878df5847065ba7ca1acbbd1cd31f531355e21a05d68b5d5d2295318b9f1185c26a4cb400871a665a1570ed0c26ee9bf26e40a384ff9a10197b7866965bd0fc0739feb8b8e2dc3e47734c64fa08b6ad23dd40"}, @generic="aaaac5ed80948d1c05da83dc87e27a9e9d57c949fb8493b54fb854e50431983cad97cd11790d84601f6be8d7641c592d8baa20bed95f441ec6966c915e6eee51aa0cb563ac590b3aca1975125fd82c202a70cdb5e8f1864dccf68f266cf3f65edc8ba99bddbdbfdd137e8f7d8692b5cd8cdc8f16ff6bede5997c72ea633fd27178e3370138b1416c28083bb58466949635dd3ec09d604edb51", @typed={0xe4, 0x32, 0x0, 0x0, @binary="e8254ebed5516e6b000f740a1902d3c835ab4effb32e55da4d8a83953c9c475ba0a1ca92b1051198228299e7343bd230d420e5c70b2c0c4bc5856a536c0473f0c55bdde9ac1aa14f0683089e7c64a664395f212ac3ac7da9b945399a89bf93ebd24fee779aae6d75acd0a28c9a8d64ae9ae632430c7ab33733c4aba969715f770ceb992b5a212e0682439cd6261aaf78d7429c96026e01f81a128f8db8242729d8ef345594fc1cba1ae10365e48d0ba9d552340bb95b09d5049e34f6ed137174cdaf00833de73d3b9c20930f5241cb90fafaca91ddc5126a04f89345fe140118"}, @typed={0xc, 0x4b, 0x0, 0x0, @u64=0x400}, @generic="0dda1ab897568815dca3d0859eee238304048f80fd6a5fc05802e2429e99202e3e2eaf68b416b02b7390f044fc9e966fb9b7781e9474ff83f5772fba17b3eed23ed8d915119e92b478805dac733240cd57428cf83b8e1288a844b7054d6c3a98ec6118f9"]}, 0x294}}, 0x805)
r2 = syz_open_dev$vcsn(&(0x7f0000000500), 0x0, 0x40c0)
ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000940)={0x3, 0x0, 0xd, 0x7, 0xa8, &(0x7f0000000540)})
mount_setattr(r2, &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f00000009c0)={0x71, 0x1000be, 0x1c0000, {r2}}, 0x20)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000a00)={0x0, @aes128, 0x0, @desc2})
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000000a40)={0x66, 0x5, 0x1, 0x81, 0x0, 0x5})
syz_genetlink_get_family_id$team(&(0x7f00000014c0), r0)
ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000001500)={0x9304, 0xffffffe1, 0xfff80000, 0x78e9, 0x6, 0x19})
write$binfmt_aout(r3, &(0x7f0000001540)={{0xcc, 0x4d, 0xf3, 0x134, 0x3a2, 0x0, 0x17d, 0x29}, "093f47cc630a236ffc109b859eff2cc5736622083f0e87fa40263c907fa7876a35648941cd15affa4ca6fd20ae1ae1a2af59db06296db270aff4458ddd921cb0f21ca47bad434253bf3b628de5c650916302f9cb4b4f37076b75eb545642dc7fae6738216cd1dc6ff1323bd6803eb76375da636b502d968d72bf4e73973778e371d3864181abb987413a5846469f3fc8b88996579dad95", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9b7)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000040)
r4 = openat2(r2, &(0x7f0000002000)='./file0\x00', &(0x7f0000002040)={0x8900, 0x68, 0xa}, 0x18)
sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x80)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
fsync(r5)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000002340)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002300)={&(0x7f00000021c0)={0x10c, 0x0, 0x5774f36d6cb8487d, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x355}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x92}, {0xc, 0x90, 0x80000001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x1}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

15:34:36 executing program 4:
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d2e8ac395bca032103d1ba601e98eae"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x58}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc4, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r3, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x69}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000006c0), 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000700)={0x0, @adiantum, 0x0, @desc4})
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000740))
r5 = syz_open_dev$sg(&(0x7f0000000780), 0x8, 0x200002)
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000007c0)={0x6, 0x3, 0x3})
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r6=>r4, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
r7 = dup2(r0, r0)
r8 = accept4$bt_l2cap(r0, &(0x7f0000000940)={0x1f, 0x0, @fixed}, &(0x7f0000000980)=0xe, 0x80800)
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000a00)=[r5, r7, r8, r4, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4], 0x8)

[  136.643845] audit: type=1400 audit(1749483276.225:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:34:36 executing program 5:
setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'L-', 0xcc}, 0x16, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f00000000c0)=0x1, 0x0, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x1, 0x7, 0x40, @dev={0xfe, 0x80, '\x00', 0x3f}, @loopback, 0x80, 0x8000, 0x1, 0x401}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f00000001c0), 0x0, 0x4)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x1)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000240)={0x3c, @private=0xa010100, 0x4e20, 0x3, 'sh\x00', 0x25, 0x401, 0x79}, 0x2c)
r2 = fcntl$dupfd(r1, 0x406, r1)
ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x66)
r3 = open(&(0x7f0000000280)='./file0\x00', 0x28400, 0x3a)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r4=>r2, {0x4}}, './file0\x00'})
ioctl$CDROMEJECT_SW(r4, 0x530f, 0x0)
ioctl$CDROM_LOCKDOOR(r2, 0x5329, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000300)={0xda1, "2eddeb"}, 0x6)
lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400)={0x0, <r6=>0x0}, &(0x7f0000000440)=0xc)
clock_gettime(0x0, &(0x7f0000003680)={<r7=>0x0, <r8=>0x0})
recvmmsg$unix(r0, &(0x7f0000003480)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000500)=""/182, 0xb6}, {&(0x7f00000005c0)=""/112, 0x70}], 0x2, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000800)=""/204, 0xcc}, {&(0x7f0000000900)=""/244, 0xf4}, {&(0x7f0000000a00)=""/160, 0xa0}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/68, 0x44}], 0x5, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r9=>0x0}}}], 0x40}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000000d40)=""/207, 0xcf}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/195, 0xc3}], 0x3}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002000)=""/61, 0x3d}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f00000020c0)=""/19, 0x13}, {&(0x7f0000002100)=""/255, 0xff}, {&(0x7f0000002200)=""/226, 0xe2}, {&(0x7f0000002300)=""/73, 0x49}, {&(0x7f0000002380)=""/101, 0x65}, {&(0x7f0000002400)=""/179, 0xb3}, {&(0x7f00000024c0)=""/87, 0x57}], 0x9}}, {{&(0x7f0000002600), 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002680)=""/139, 0x8b}, {&(0x7f0000002740)=""/43, 0x2b}, {&(0x7f0000002780)=""/1, 0x1}, {&(0x7f00000027c0)=""/230, 0xe6}, {&(0x7f00000028c0)=""/32, 0x20}, {&(0x7f0000002900)=""/229, 0xe5}, {&(0x7f0000002a00)=""/252, 0xfc}, {&(0x7f0000002b00)=""/219, 0xdb}], 0x8, &(0x7f0000002c80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002cc0)=""/60, 0x3c}, {&(0x7f0000002d00)=""/120, 0x78}, {&(0x7f0000002d80)=""/238, 0xee}, {&(0x7f0000002e80)=""/35, 0x23}, {&(0x7f0000002ec0)=""/165, 0xa5}], 0x5}}, {{&(0x7f0000003000), 0x6e, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/42, 0x2a}], 0x1, &(0x7f0000003100)=[@rights={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000003140)=""/162, 0xa2}, {&(0x7f0000003200)=""/141, 0x8d}, {&(0x7f00000032c0)=""/93, 0x5d}], 0x3, &(0x7f0000003380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x8, 0x40, &(0x7f00000036c0)={r7, r8+60000000})
setresuid(r5, r6, r9)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x10200050}, 0xc, &(0x7f00000037c0)={&(0x7f0000003740)={0x74, 0x3, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1c034bcf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_BYTES={0xc}, @NFACCT_BYTES={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x24040004)

15:34:36 executing program 6:
r0 = syz_open_pts(0xffffffffffffffff, 0x10000)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=<r2=>0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x4, 0x5, 0x7, 0x100, 0x3, "e291c9c6e65b3330"})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
ioctl$KDMKTONE(r5, 0x4b30, 0x8)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x2)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000}, 0x488c1)
setsockopt$packet_buf(r5, 0x107, 0x1, &(0x7f0000000280)="cbcf6e5737c2e51d0855c4029b9284e4d0ad11fdac0d1de7c7c107d2a0a5a7a3ef02c4795a358e031a623dd783e1e095e63e90c142a51bb87d11ae9fa90abb82a075a62e83c801281d67d1261ec8e51c45", 0x51)
mknodat$null(r3, &(0x7f0000000300)='./file0\x00', 0x8000, 0x103)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x42280, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r6)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x82, 0x0)
preadv2(r7, &(0x7f0000001440)=[{&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, 0x9, 0x80, 0x4)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000001480)={0x2, 0x8, 0x3})
ioctl$CDROMCLOSETRAY(r1, 0x5319)
r8 = syz_open_procfs(r2, &(0x7f00000014c0)='net/dev_mcast\x00')
renameat(r8, &(0x7f0000001500)='./file0\x00', r1, &(0x7f0000001540)='./file1\x00')

15:34:36 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x0, 0x4}, 0x2)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040))
r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x10005)
sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000002c0)={'bridge_slave_0\x00'})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300)='syzkaller0\x00', 0x10)
flistxattr(r1, &(0x7f0000000340)=""/8, 0x8)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000380))
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000400)={0x0, @aes128, 0x0, @desc2})
r2 = accept(r0, 0x0, &(0x7f0000000440))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000480)=0x5, &(0x7f00000004c0)=0x2)
r3 = syz_open_dev$vcsu(&(0x7f0000000500), 0xffffffffffffffff, 0x900)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x7)
ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000540)=""/249)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0)
r4 = pidfd_getfd(r1, r3, 0x0)
ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000640)={'dummy0\x00', 0x5})
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000680)={{r0}, 0x0, 0x4, @unused=[0x800, 0x1ff, 0x1000, 0x7a6], @devid})

[  138.175451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  138.178592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  138.185186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  138.198560] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  138.204536] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  138.226552] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  138.237307] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  138.241542] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  138.259784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  138.265519] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  138.327874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  138.331384] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  138.338284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  138.347503] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  138.353443] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  138.379485] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  138.400091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  138.415068] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  138.450700] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  138.460436] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  138.462716] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  138.478261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  138.479621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  138.493676] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  138.499358] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  138.510181] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  138.527263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  138.553207] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  138.556386] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  138.563607] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  138.567484] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  138.587422] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  138.619189] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  138.619200] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  138.626457] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  138.627207] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  138.639375] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  138.643565] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  138.647177] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  138.661604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  140.258575] Bluetooth: hci0: command tx timeout
[  140.323162] Bluetooth: hci1: command tx timeout
[  140.387195] Bluetooth: hci2: command tx timeout
[  140.577039] Bluetooth: hci3: command tx timeout
[  140.642036] Bluetooth: hci4: command tx timeout
[  140.705006] Bluetooth: hci5: command tx timeout
[  140.705120] Bluetooth: hci7: command tx timeout
[  140.769049] Bluetooth: hci6: command tx timeout
[  142.305045] Bluetooth: hci0: command tx timeout
[  142.369664] Bluetooth: hci1: command tx timeout
[  142.433116] Bluetooth: hci2: command tx timeout
[  142.626083] Bluetooth: hci3: command tx timeout
[  142.689025] Bluetooth: hci4: command tx timeout
[  142.753222] Bluetooth: hci7: command tx timeout
[  142.755005] Bluetooth: hci5: command tx timeout
[  142.817556] Bluetooth: hci6: command tx timeout
[  144.354359] Bluetooth: hci0: command tx timeout
[  144.420334] Bluetooth: hci1: command tx timeout
[  144.481302] Bluetooth: hci2: command tx timeout
[  144.674098] Bluetooth: hci3: command tx timeout
[  144.737100] Bluetooth: hci4: command tx timeout
[  144.801049] Bluetooth: hci5: command tx timeout
[  144.801116] Bluetooth: hci7: command tx timeout
[  144.867986] Bluetooth: hci6: command tx timeout
[  146.401202] Bluetooth: hci0: command tx timeout
[  146.465037] Bluetooth: hci1: command tx timeout
[  146.529001] Bluetooth: hci2: command tx timeout
[  146.721000] Bluetooth: hci3: command tx timeout
[  146.785149] Bluetooth: hci4: command tx timeout
[  146.849973] Bluetooth: hci7: command tx timeout
[  146.850096] Bluetooth: hci5: command tx timeout
[  146.913007] Bluetooth: hci6: command tx timeout
[  200.770388] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  200.772857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  200.781698] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  200.784996] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  200.789218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  200.790898] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  200.807247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  200.809604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  200.821144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  200.824485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  200.850659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  200.854710] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  200.877397] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  200.897813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  200.903077] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  200.907114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  200.919550] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  200.923756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  200.946341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  200.955605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  201.332581] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  201.351277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  201.364260] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  201.368839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  201.371182] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  201.376699] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  201.385970] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  201.407589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  201.410440] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  201.415726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  201.419836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  201.433711] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  201.450835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  201.470030] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  201.485474] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  201.569407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  201.617902] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  201.629471] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  201.671711] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  201.685563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  202.913127] Bluetooth: hci1: command tx timeout
[  202.913850] Bluetooth: hci0: command tx timeout
[  202.977010] Bluetooth: hci2: command tx timeout
[  203.041248] Bluetooth: hci3: command tx timeout
[  203.553086] Bluetooth: hci4: command tx timeout
[  203.617560] Bluetooth: hci7: command tx timeout
[  203.681015] Bluetooth: hci6: command tx timeout
[  203.809197] Bluetooth: hci5: command tx timeout
[  204.961384] Bluetooth: hci0: command tx timeout
[  204.961842] Bluetooth: hci1: command tx timeout
[  205.024986] Bluetooth: hci2: command tx timeout
[  205.089049] Bluetooth: hci3: command tx timeout
[  205.601327] Bluetooth: hci4: command tx timeout
[  205.667960] Bluetooth: hci7: command tx timeout
[  205.729298] Bluetooth: hci6: command tx timeout
[  205.857013] Bluetooth: hci5: command tx timeout
[  207.009207] Bluetooth: hci1: command tx timeout
[  207.009848] Bluetooth: hci0: command tx timeout
[  207.074955] Bluetooth: hci2: command tx timeout
[  207.137015] Bluetooth: hci3: command tx timeout
[  207.649150] Bluetooth: hci4: command tx timeout
[  207.713153] Bluetooth: hci7: command tx timeout
[  207.777009] Bluetooth: hci6: command tx timeout
[  207.905082] Bluetooth: hci5: command tx timeout
[  209.057033] Bluetooth: hci0: command tx timeout
[  209.057515] Bluetooth: hci1: command tx timeout
[  209.121197] Bluetooth: hci2: command tx timeout
[  209.185948] Bluetooth: hci3: command tx timeout
[  209.697154] Bluetooth: hci4: command tx timeout
[  209.762816] Bluetooth: hci7: command tx timeout
[  209.825180] Bluetooth: hci6: command tx timeout
[  209.954115] Bluetooth: hci5: command tx timeout
[  262.775319] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  262.780559] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  262.784799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  262.796597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  262.804105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  262.982305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  262.987551] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  262.989885] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  262.990112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  262.995655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  263.000952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  263.001532] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  263.009135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  263.040689] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  263.054424] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  263.058503] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  263.061399] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  263.063716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  263.069875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  263.074126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  263.177345] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  263.192502] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  263.222507] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  263.225540] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  263.229710] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  263.236615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  263.246458] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  263.249219] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  263.274166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  263.282742] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  263.289523] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  263.292650] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  263.293448] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  263.301447] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  263.306836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  263.337828] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  263.341870] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  263.346429] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  263.359269] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  263.364577] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  264.865169] Bluetooth: hci0: command tx timeout
[  265.058024] Bluetooth: hci1: command tx timeout
[  265.122057] Bluetooth: hci2: command tx timeout
[  265.185795] Bluetooth: hci3: command tx timeout
[  265.377555] Bluetooth: hci4: command tx timeout
[  265.377594] Bluetooth: hci5: command tx timeout
[  265.441168] Bluetooth: hci6: command tx timeout
[  265.441996] Bluetooth: hci7: command tx timeout
[  266.914952] Bluetooth: hci0: command tx timeout
[  267.105201] Bluetooth: hci1: command tx timeout
[  267.169478] Bluetooth: hci2: command tx timeout
[  267.233085] Bluetooth: hci3: command tx timeout
[  267.425325] Bluetooth: hci5: command tx timeout
[  267.425345] Bluetooth: hci4: command tx timeout
[  267.491975] Bluetooth: hci7: command tx timeout
[  267.492028] Bluetooth: hci6: command tx timeout
[  268.964077] Bluetooth: hci0: command tx timeout
[  269.154451] Bluetooth: hci1: command tx timeout
[  269.217008] Bluetooth: hci2: command tx timeout
[  269.280991] Bluetooth: hci3: command tx timeout
[  269.473167] Bluetooth: hci5: command tx timeout
[  269.473316] Bluetooth: hci4: command tx timeout
[  269.538205] Bluetooth: hci6: command tx timeout
[  269.538382] Bluetooth: hci7: command tx timeout
[  271.010066] Bluetooth: hci0: command tx timeout
[  271.201174] Bluetooth: hci1: command tx timeout
[  271.266965] Bluetooth: hci2: command tx timeout
[  271.330023] Bluetooth: hci3: command tx timeout
[  271.521175] Bluetooth: hci4: command tx timeout
[  271.523133] Bluetooth: hci5: command tx timeout
[  271.585295] Bluetooth: hci6: command tx timeout
[  271.585350] Bluetooth: hci7: command tx timeout
[  325.307202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  325.312888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  325.317190] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  325.327722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  325.336132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  325.492549] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  325.504473] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  325.511154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  325.515173] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  325.521580] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  325.529687] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  325.529741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  325.541848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  325.544418] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  325.552314] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  325.629979] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  325.634823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  325.637698] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  325.654246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  325.659451] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  325.702487] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  325.707216] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  325.725418] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  325.743870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  325.745516] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  325.749650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  325.760240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  325.766032] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  325.787956] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  325.792078] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  325.795494] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  325.798508] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  325.803701] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  325.807695] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  325.812460] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  325.820107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  325.862510] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  325.909952] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  325.952666] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  325.975284] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  327.393526] Bluetooth: hci0: command tx timeout
[  327.585002] Bluetooth: hci2: command tx timeout
[  327.649039] Bluetooth: hci1: command tx timeout
[  327.778695] Bluetooth: hci3: command tx timeout
[  327.905094] Bluetooth: hci4: command tx timeout
[  327.905817] Bluetooth: hci6: command tx timeout
[  327.969042] Bluetooth: hci5: command tx timeout
[  328.033554] Bluetooth: hci7: command tx timeout
[  329.441379] Bluetooth: hci0: command tx timeout
[  329.633058] Bluetooth: hci2: command tx timeout
[  329.698952] Bluetooth: hci1: command tx timeout
[  329.825116] Bluetooth: hci3: command tx timeout
[  329.953171] Bluetooth: hci6: command tx timeout
[  329.955138] Bluetooth: hci4: command tx timeout
[  330.017010] Bluetooth: hci5: command tx timeout
[  330.081144] Bluetooth: hci7: command tx timeout
[  331.489376] Bluetooth: hci0: command tx timeout
[  331.681211] Bluetooth: hci2: command tx timeout
[  331.744987] Bluetooth: hci1: command tx timeout
[  331.873963] Bluetooth: hci3: command tx timeout
[  332.001111] Bluetooth: hci4: command tx timeout
[  332.001136] Bluetooth: hci6: command tx timeout
[  332.065544] Bluetooth: hci5: command tx timeout
[  332.128983] Bluetooth: hci7: command tx timeout
[  333.538963] Bluetooth: hci0: command tx timeout
[  333.729187] Bluetooth: hci2: command tx timeout
[  333.793142] Bluetooth: hci1: command tx timeout
[  333.921180] Bluetooth: hci3: command tx timeout
[  334.049141] Bluetooth: hci4: command tx timeout
[  334.050159] Bluetooth: hci6: command tx timeout
[  334.114170] Bluetooth: hci5: command tx timeout
[  334.177290] Bluetooth: hci7: command tx timeout
[  387.509107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  387.515476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  387.518757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  387.530528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  387.538558] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  387.761053] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  387.767816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  387.774419] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  387.790665] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  387.795793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  387.920633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  387.926662] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  387.932209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  387.952401] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  387.973487] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  387.977980] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  387.982410] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  387.990470] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  388.019397] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  388.036406] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  388.072678] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  388.075757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  388.077985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  388.082693] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  388.088387] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  388.135999] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  388.175553] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  388.180267] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  388.182343] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  388.192513] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  388.194591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  388.201212] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  388.250816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  388.268204] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  388.272183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  388.298117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  388.309249] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  388.365560] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  388.379335] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  388.440057] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  389.601105] Bluetooth: hci0: command tx timeout
[  389.857716] Bluetooth: hci1: command tx timeout
[  390.049153] Bluetooth: hci2: command tx timeout
[  390.113992] Bluetooth: hci4: command tx timeout
[  390.177330] Bluetooth: hci3: command tx timeout
[  390.305660] Bluetooth: hci6: command tx timeout
[  390.369045] Bluetooth: hci5: command tx timeout
[  390.561265] Bluetooth: hci7: command tx timeout
[  391.649970] Bluetooth: hci0: command tx timeout
[  391.905006] Bluetooth: hci1: command tx timeout
[  392.097096] Bluetooth: hci2: command tx timeout
[  392.163311] Bluetooth: hci4: command tx timeout
[  392.225958] Bluetooth: hci3: command tx timeout
[  392.352984] Bluetooth: hci6: command tx timeout
[  392.416988] Bluetooth: hci5: command tx timeout
[  392.609982] Bluetooth: hci7: command tx timeout
[  393.697375] Bluetooth: hci0: command tx timeout
[  393.954360] Bluetooth: hci1: command tx timeout
[  394.147313] Bluetooth: hci2: command tx timeout
[  394.211274] Bluetooth: hci4: command tx timeout
[  394.273994] Bluetooth: hci3: command tx timeout
[  394.401794] Bluetooth: hci6: command tx timeout
[  394.466042] Bluetooth: hci5: command tx timeout
[  394.658119] Bluetooth: hci7: command tx timeout
[  395.745136] Bluetooth: hci0: command tx timeout
[  396.002074] Bluetooth: hci1: command tx timeout
[  396.194202] Bluetooth: hci2: command tx timeout
[  396.256980] Bluetooth: hci4: command tx timeout
[  396.321966] Bluetooth: hci3: command tx timeout
[  396.450054] Bluetooth: hci6: command tx timeout
[  396.513241] Bluetooth: hci5: command tx timeout
[  396.706040] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
15:39:37  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff888032704470 RCX=ffffffff81996f81 RDX=ffff888017de0000
RSI=ffffffff81996f8f RDI=0000000000000006 RBP=dffffc0000000000 RSP=ffff88802c5ff7d8
R8 =0000000000000001 R9 =ffffed1001270326 R10=0000000000000001 R11=0000000000000001
R12=0000000000000002 R13=0000000000000001 R14=ffff888031653000 R15=ffff888032704478
RIP=ffffffff81996f93 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd00fd918e0 CR3=000000001cb95000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806cf37d40 RCX=0000000000000001 RDX=0000000000000000
RSI=0000000000000008 RDI=ffff8880165d8000 RBP=ffff8880165d8000 RSP=ffff888029437ba0
R8 =0000000000000000 R9 =ffffffff8641fc44 R10=ffffffff8641f057 R11=0000000000000000
R12=ffff8880165d8000 R13=ffff88806cf37d51 R14=ffff8880165d8000 R15=ffff8880372367f0
RIP=ffffffff815c39b2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f51e235c8e0 CR3=00000000331fa000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000