Warning: Permanently added '[localhost]:65489' (ECDSA) to the list of known hosts.
2025/06/12 05:25:30 fuzzer started
2025/06/12 05:25:31 dialing manager at localhost:45945
syzkaller login: [   98.175802] cgroup: Unknown subsys name 'net'
[   98.304925] cgroup: Unknown subsys name 'cpuset'
[   98.352079] cgroup: Unknown subsys name 'rlimit'
2025/06/12 05:25:48 syscalls: 2214
2025/06/12 05:25:48 code coverage: enabled
2025/06/12 05:25:48 comparison tracing: enabled
2025/06/12 05:25:48 extra coverage: enabled
2025/06/12 05:25:48 setuid sandbox: enabled
2025/06/12 05:25:48 namespace sandbox: enabled
2025/06/12 05:25:48 Android sandbox: enabled
2025/06/12 05:25:48 fault injection: enabled
2025/06/12 05:25:48 leak checking: enabled
2025/06/12 05:25:48 net packet injection: enabled
2025/06/12 05:25:48 net device setup: enabled
2025/06/12 05:25:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/12 05:25:48 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/12 05:25:48 USB emulation: enabled
2025/06/12 05:25:48 hci packet injection: enabled
2025/06/12 05:25:48 wifi device emulation: enabled
2025/06/12 05:25:48 802.15.4 emulation: enabled
2025/06/12 05:25:48 fetching corpus: 0, signal 0/0 (executing program)
2025/06/12 05:25:50 starting 8 fuzzer processes
05:25:50 executing program 0:
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0xffff, 0x80, 0x0, 0x1000, 0x17, "979e54d43abd319cb983b6ad85802f3294d398"})
r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2000, 0x0, 0x15}, 0x18)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x8, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000090)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'veth1\x00', {0x2, 0x0, @empty}})
prctl$PR_GET_KEEPCAPS(0x7)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x24102, 0x82, 0x6}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x2, 0x8, 0x0, 'queue0\x00', 0xffffffff})
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000380)=0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000400)={0x8, 0x1, 0x6})
ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000440)="d8351d439b18288c30fce2e36a8dec4c2e2131b50a2fa13199444c0727")
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r4=>r0}, './file0\x00'})
ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f00000004c0))
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000500)={0x27, 0x2, 0x7})
getpeername$netlink(r0, &(0x7f0000000540), &(0x7f0000000580)=0xc)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x30}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x368}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}}, 0x400)

05:25:50 executing program 1:
ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000))
fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='com.apple.system.Security\x00')
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r0=>0x0, <r1=>0x0, <r2=>0x0}, &(0x7f00000000c0)=0xc)
capget(&(0x7f0000000100)={0x19980330, r0}, &(0x7f0000000140)={0x80000000, 0x8, 0x4, 0x0, 0x1000, 0x4})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f00000001c0)={0x6, 'rose0\x00', {0x1ff}, 0xfffb})
getgroups(0x5, &(0x7f0000002540)=[r2, <r4=>r2, r2, r2, <r5=>0xffffffffffffffff])
fsetxattr$system_posix_acl(r3, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000002580)={{}, {0x1, 0x5}, [{0x2, 0x5, r1}], {0x4, 0x1}, [{0x8, 0x1, r4}], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x3)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000025c0)={{0x1, 0x1, 0x18, <r6=>r3, {r1, r5}}, '.\x00'})
ioctl$CDROMPLAYBLK(r6, 0x5317, &(0x7f0000002600)={0x4, 0x3f})
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r6)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000027c0)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002780)={&(0x7f00000026c0)={0x8c, r7, 0x300, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7d0}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x10000}, {0xc, 0x90, 0x4}}]}, 0x8c}}, 0x40090)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000002800)=[{0x701, 0x80, 0x0, 0x858d}]}, 0x10)
sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'bridge0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040000}, 0x1)
shutdown(r6, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000002980)={{0x1, 0x1, 0x18, <r8=>r3, {0x1000}}, './file0\x00'})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f00000029c0)=@v1={0x0, @aes256, 0x4, @desc4})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x4c, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xb8}, {0x6, 0x11, 0xfffb}}]}, 0x4c}}, 0x24)
r9 = openat$cgroup(r6, &(0x7f0000002b40)='syz1\x00', 0x200002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000002b80)={{0x1, 0x1, 0x18, r9, {r3}}, './file0\x00'})

05:25:50 executing program 2:
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x1, 0x20a3, 0x9, 0x8, 0x80, 0x2000})
fsetxattr$security_evm(r0, &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "031a545fa4bcc8691beb7ad3ddefcc30"}, 0x11, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, &(0x7f0000000180))
execve(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000300)=[&(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)='security.evm\x00', &(0x7f00000002c0)='security.evm\x00'], &(0x7f0000000400)=[&(0x7f0000000340)='security.evm\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f00000003c0)='security.evm\x00'])
mount$9p_xen(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0xc1010, &(0x7f0000000500)={'trans=xen,', {[{@version_9p2000}, {@cachetag={'cachetag', 0x3d, 'security.evm\x00'}}, {@version_9p2000}, {@version_u}], [{@fsmagic={'fsmagic', 0x3d, 0x100000000}}, {@subj_type={'subj_type', 0x3d, 'security.evm\x00'}}, {@fsname={'fsname', 0x3d, ':\xc8*/!.-\x18[/m/'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x37, 0x62, 0x3c, 0x39, 0x35, 0x63, 0x63], 0x2d, [0x61, 0x64, 0x66, 0x65], 0x2d, [0x35, 0x61, 0x32, 0x33], 0x2d, [0x0, 0x34, 0x33, 0x62], 0x2d, [0x34, 0x35, 0x62, 0x0, 0x66, 0x38, 0x37, 0x35]}}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@measure}]}})
setxattr$trusted_overlay_nlink(&(0x7f0000000600)='./file1\x00', &(0x7f0000000640), &(0x7f0000000680)={'L-', 0x8001}, 0x16, 0x3)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000007c0)={'veth1_to_bridge\x00', &(0x7f00000006c0)=@ethtool_drvinfo={0x3, "2d33f64e463ad0f7c4e76cc932ff08834c10cc8cc3e9dd45652e33c018ce6a2d", "144bf31235b1e41400f08eba15d4a6a6b54e82aa42ba98fb50067ebe62737ac3", "52fd3ce35df47045e5c12599eeaa2c3d6c5f7bb311b3b332af73168adb7c8278", "1c7e91741a0cb37acc7ebc19386b96ffa434ce85de81c1828294b14c341a1d5b", "48f0416680e4b4fc784867083360e60cab1acc00c6b4f021993b1bbe93cbd9c2", "bd5421690166d0f8a8dcbb43", 0x2, 0xfffffff9, 0x7e8, 0x4e, 0x4f}})
ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000800)="1419ebe7afabd30f203311d5e508c41a53e7a015bf4a016f065e5c58147d69ef40eeb8bf040ff5e5b0701300ce4b471110349a1fe80dafc0ae66bfa7413d152713c3abc18398c50fd05dbeb0c37e7d863620dc337f4d76b2e8eb6045a18b1a871259fd3bd00cfda9444bebe52797b07be9efd5f83c46c11896e006c24143b27c9953681e07fe7f696c8907275bcb6f2db3b17ae80962754c213f848b42f484aedb6d602d160fc5d49b69cbe60f52905f18b851787be3b2b86ee44174e56eca5fb6b38a96e304e2e019e1582a9111aa75efd1ed93f32a2177abf04dd1f5544484e7dbfa8f5e552e108ff0dda9ccc13a81ddd5")
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0xb, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x800)
mount$cgroup2(0x0, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40), 0x20, &(0x7f0000000a80)={[{}, {@memory_localevents}, {@memory_recursiveprot}, {@memory_localevents}], [{@subj_role={'subj_role', 0x3d, 'unconfined_u'}}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, '$'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x0, 0x32, 0x30, 0x63, 0x62, 0x37, 0x37], 0x2d, [0x65, 0x33, 0x30, 0x33], 0x2d, [0x39, 0x63, 0x66, 0x34], 0x2d, [0x34, 0x38, 0x63, 0x37], 0x2d, [0x61, 0x63, 0x38, 0x38, 0x64, 0x65, 0x37, 0x30]}}}, {@subj_user={'subj_user', 0x3d, '*)@\'\x15'}}]})
r1 = creat(&(0x7f0000000b40)='./file0\x00', 0x156)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000b80)=0x6)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'gre0\x00', &(0x7f0000000bc0)={'syztnl2\x00', 0x0, 0x8, 0x80, 0x8000, 0x9, {{0x19, 0x4, 0x0, 0x3, 0x64, 0x67, 0x0, 0x7f, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp={0x44, 0x14, 0x55, 0x0, 0x6, [0x6, 0x4, 0x1, 0xfffffff9]}, @timestamp_prespec={0x44, 0x1c, 0x3c, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x1}, {@private=0xa010102}, {@multicast2, 0x100}]}, @ssrr={0x89, 0x1f, 0x3b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}})
r2 = signalfd4(r1, &(0x7f0000000cc0)={[0x2]}, 0x8, 0x80800)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000d00)={0x0, 0x8000, 0x0, 0x1})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001100)={'wlan1\x00'})

[  117.183192] audit: type=1400 audit(1749705950.678:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:25:50 executing program 3:
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r0 = semget$private(0x0, 0x0, 0x0)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/4096)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001100)=[0x1])
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x20004001)
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000001240)=""/4096)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002240)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xffffffff}}, './file0\x00'})
write$P9_RUNLINKAT(r1, &(0x7f0000002280)={0x7, 0x4d, 0x1}, 0x7)
r2 = shmget(0x1, 0x4000, 0x78000020, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r2, 0xe, &(0x7f00000022c0)=""/111)
semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f0000002340)=""/238)
r3 = syz_open_dev$vcsa(&(0x7f0000002440), 0x800, 0xc00)
sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000002540)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x28, 0xa, 0x6, 0x401, 0x0, 0x0, {0xa}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x20000001)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000002580)={{}, 'port1\x00', 0x0, 0x91c41, 0xfffffff9, 0x400, 0x8, 0x5, 0x6, 0x0, 0x0, 0x4})
shmctl$SHM_UNLOCK(r2, 0xc)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002680), r1)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000002840)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002800)={&(0x7f00000026c0)={0x120, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x50}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x39}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf339}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x30}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008040)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000002900)={'syztnl1\x00', &(0x7f0000002880)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x2, 0x1800, 0x1, @mcast2, @private0, 0x0, 0x80, 0x1, 0x5}})
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002980)={0x148, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x3d}}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xff, 0x3c, 0x3f}}]}, @NL80211_ATTR_IE={0x103, 0x2a, [@fast_bss_trans={0x37, 0xc0, {0x7, 0x4, "fdc2857353924b88f9a472cd78773aa9", "92f20c761da25461a7d4ad024ce34876269afa22cec0c7c81a6f7c1c48f0f908", "0c87a161739261990a3446a14f131107ec29f5ad1e5e7f2495434c6b37351363", [{0x1, 0x3, "fd6c7b"}, {0x4, 0x28, "26c002829d20c81f80b2c62a88c94a2f69457b54fcc27d41fe89e06ed5bd98b4e6398969bb166952"}, {0x2, 0x1a, "3587b4449bcf1b2c8d4fcd9cf972b3d1f6e16dc620b9c031f769"}, {0x4, 0x21, "6bfe0824652e778e0ad104ba24aa9602ada0998c3e5ee1c36ad013280d4be4bd70"}]}}, @perr={0x84, 0x15, {0x3f, 0x1, [@ext={{}, @device_a, 0x1, @device_a, 0x3}]}}, @supported_rates={0x1, 0x5, [{0x24, 0x1}, {0x36}, {0x2, 0x1}, {0x1b}, {0x12, 0x1}]}, @rann={0x7e, 0x15, {{0x1, 0x78}, 0x40, 0x7, @device_a, 0x800, 0x3, 0xfba9}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0xf, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @challenge={0x10, 0x1, 0xb0}, @channel_switch={0x25, 0x3, {0x1, 0x95, 0xf9}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x54000}, 0x40)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002cc0)={'syztnl1\x00', &(0x7f0000002c40)={'sit0\x00', 0x0, 0x0, 0xd4, 0x1, 0x5, 0x40, @remote, @private2, 0x1, 0x20, 0x80000001}})

05:25:50 executing program 4:
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000000))
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000040)=0x8)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x28}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10040000}, 0x4000000)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4083}, 0x4c040)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000300))
ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x28}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x10000000)
r1 = memfd_secret(0x80000)
sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xc0, r0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x65}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x198, 0x1, 0x2, 0x3, 0x0, 0x0, {0x5}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0xdc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, @CTA_EXPECT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0x28, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffffff00}]}, 0x198}, 0x1, 0x0, 0x0, 0x800}, 0x4040045)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r2, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x29}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800)
r3 = fsmount(r1, 0x1, 0x0)
read(r3, &(0x7f0000000ac0)=""/186, 0xba)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000b80), 0x101180)
ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000bc0)={0x7, 0x4})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r1)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r5, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x800)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000d40))

05:25:50 executing program 5:
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000))
r0 = dup(0xffffffffffffffff)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x73, 0x5, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0x3, [0x100, 0x1, 0x2, 0x7de]}}, @enc_lim={0x4, 0x1, 0x81}]}, 0x38)
r1 = dup3(r0, r0, 0x80000)
read(r1, &(0x7f0000000080)=""/237, 0xed)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180))
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1dc}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc080}, 0x4004000)
getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000380), &(0x7f00000003c0)=0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x400000, 0x0)
io_cancel(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0xffff, r0, &(0x7f0000000400)="f39aae5b91a76a42299d3d78c08b83d1212d36c5e7992459be93bafc8b3ba132bc9a518d4d15d3a29a3d2c14d55405d5d17882949efc71c07cf86368cecaaa279674ca2a760f3bd45fa73298636e3389602f4f85472f6918a5aacb624bd66dec3f5644624ef8840c251e6495fa4a7fa009f6", 0x72, 0x3, 0x0, 0x0, r3}, &(0x7f0000000500))
r4 = syz_io_uring_complete(0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000640)={0x629, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000009a40)=<r5=>0x0)
r6 = openat$incfs(r2, &(0x7f0000009a80)='.pending_reads\x00', 0x2c0002, 0x102)
r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000009ac0), 0x254002, 0x0)
kcmp$KCMP_EPOLL_TFD(r5, 0xffffffffffffffff, 0x7, r2, &(0x7f0000009b00)={r6, r7, 0x7d})
finit_module(r2, &(0x7f0000009b40)='syz1\x00', 0x3)

05:25:50 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xffffffffffffffff}}, './file0\x00'})
ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000040)={r1})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1, {0x6}}, './file0\x00'})
fcntl$setlease(r2, 0x400, 0x2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x4}}, './file0\x00'})
getpeername$unix(r3, &(0x7f0000000100), &(0x7f0000000180)=0x6e)
ioctl$FITHAW(r2, 0xc0045878)
ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000001c0))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x14}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="2912bbba7e02"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5f9fdbce619a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0)
r5 = getpgrp(0x0)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000380)=r5)
r6 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x1, 0x181040)
ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000)
mmap(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x0, 0x4010, r6, 0x407c2000)
r7 = memfd_secret(0x80000)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5d7a440a, 0x4c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000)
r8 = socket(0x22, 0xa, 0x9e)
getsockname$unix(r8, &(0x7f0000000600), &(0x7f0000000680)=0x6e)

05:25:50 executing program 7:
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x3, 0x7, {{0xf, 0x4, 0x0, 0x9, 0x3c, 0x66, 0x0, 0x81, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, {[@lsrr={0x83, 0x7, 0xff, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x20, 0x52, 0x0, 0x7, [0xfffffffc, 0x8001, 0x2, 0x6, 0xff, 0x3, 0x3]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r0=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x29, 0x0, 0x8, 0x7, 0x8, @dev={0xfe, 0x80, '\x00', 0x19}, @mcast2, 0x80, 0x20, 0x0, 0x6}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x86}]}, 0x24}}, 0xc0044)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x2001, 0x0)
fcntl$addseals(r1, 0x409, 0x5)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r0, 0x2f, 0x7, 0x4, 0x200, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x20, 0x8, 0x9, 0x243}})
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000004c0)={@rand_addr, @broadcast, <r3=>0x0}, &(0x7f0000000500)=0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', r3, 0x2f, 0x81, 0xff, 0x3, 0x47d2e92aa807896d, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x7800, 0x700, 0x3, 0x7}})
perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x7, 0xff, 0x2, 0x6, 0x0, 0xfff, 0x200, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x1, 0xad}, 0x1, 0x3f, 0x7fff, 0x5, 0x6, 0x1a1, 0x40, 0x0, 0x2, 0x0, 0x8}, r1, 0x2, 0xffffffffffffffff, 0x8)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r4=>r2, {0x9, 0x8}}, './file0\x00'})
recvfrom(r4, &(0x7f00000006c0)=""/66, 0x42, 0x2000, &(0x7f0000000740)=@l2tp={0x2, 0x0, @private=0xa010102, 0x1}, 0x80)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x6c, 0x453, 0x100, 0x70bd2a, 0x25dfdbfd, "926e6abed2f2c28e68c8da8440539982f3d5d1b0c2db1e6e5869c5a6a88a545e06d7daca675dd23543417f918a1d79053e277b5efc5f31be3bc0525cc2e76dcb610bdf999fb007f51a4546f31375e2a70c8e2185e5ea6be5f199", ["", "", ""]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x44}}, 0x800)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, 0x1, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x81}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000b80)=0x6, &(0x7f0000000bc0)=0x2)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'syztnl1\x00', <r5=>0x0, 0x2f, 0x81, 0x0, 0x0, 0x40, @mcast2, @empty, 0x7800, 0x8, 0x0, 0x5}})
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000)

[  118.752688] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  118.756892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  118.759453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  118.767172] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  118.771182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.807955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.816179] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.825947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.829142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  118.835227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  118.837860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  118.844725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.846481] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  118.854167] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  118.856076] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  118.862095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  118.888179] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  118.891943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  118.907140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  118.929777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  119.012385] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  119.015076] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  119.018942] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  119.030803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  119.035811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  119.045758] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.069585] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.081369] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.083785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.089751] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  119.095100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  119.103609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  119.111042] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  119.125887] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  119.146250] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  119.159858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  119.161816] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  119.177848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  119.224533] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  119.245858] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  120.825840] Bluetooth: hci0: command tx timeout
[  120.952464] Bluetooth: hci2: command tx timeout
[  120.953666] Bluetooth: hci1: command tx timeout
[  121.017396] Bluetooth: hci3: command tx timeout
[  121.208568] Bluetooth: hci5: command tx timeout
[  121.208733] Bluetooth: hci4: command tx timeout
[  121.272423] Bluetooth: hci6: command tx timeout
[  121.337881] Bluetooth: hci7: command tx timeout
[  122.875389] Bluetooth: hci0: command tx timeout
[  123.001589] Bluetooth: hci1: command tx timeout
[  123.001711] Bluetooth: hci2: command tx timeout
[  123.064515] Bluetooth: hci3: command tx timeout
[  123.256865] Bluetooth: hci5: command tx timeout
[  123.257427] Bluetooth: hci4: command tx timeout
[  123.320572] Bluetooth: hci6: command tx timeout
[  123.384388] Bluetooth: hci7: command tx timeout
[  124.922555] Bluetooth: hci0: command tx timeout
[  125.048499] Bluetooth: hci2: command tx timeout
[  125.048524] Bluetooth: hci1: command tx timeout
[  125.112401] Bluetooth: hci3: command tx timeout
[  125.304544] Bluetooth: hci4: command tx timeout
[  125.305022] Bluetooth: hci5: command tx timeout
[  125.368574] Bluetooth: hci6: command tx timeout
[  125.433351] Bluetooth: hci7: command tx timeout
[  126.968494] Bluetooth: hci0: command tx timeout
[  127.096666] Bluetooth: hci1: command tx timeout
[  127.096813] Bluetooth: hci2: command tx timeout
[  127.160391] Bluetooth: hci3: command tx timeout
[  127.352650] Bluetooth: hci5: command tx timeout
[  127.352789] Bluetooth: hci4: command tx timeout
[  127.417591] Bluetooth: hci6: command tx timeout
[  127.481562] Bluetooth: hci7: command tx timeout
[  181.012266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.015235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.019006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.032623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.040037] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.135842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  181.146133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  181.150248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  181.165038] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  181.167734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  181.173198] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  181.177605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  181.177899] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  181.192782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  181.196190] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  181.296963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  181.312092] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  181.342392] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  181.344782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  181.354716] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  181.354957] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  181.360139] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  181.362696] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  181.372843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.378081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  181.386226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  181.386264] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  181.390029] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  181.398928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.414867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  181.419047] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  181.426106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.430194] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  181.460013] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.476997] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  181.489230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  181.492133] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  181.494294] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  181.499832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  181.503260] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  183.096681] Bluetooth: hci0: command tx timeout
[  183.225423] Bluetooth: hci2: command tx timeout
[  183.227197] Bluetooth: hci1: command tx timeout
[  183.544492] Bluetooth: hci5: command tx timeout
[  183.609104] Bluetooth: hci4: command tx timeout
[  183.610280] Bluetooth: hci7: command tx timeout
[  183.736664] Bluetooth: hci6: command tx timeout
[  183.800422] Bluetooth: hci3: command tx timeout
[  185.144379] Bluetooth: hci0: command tx timeout
[  185.272665] Bluetooth: hci1: command tx timeout
[  185.273110] Bluetooth: hci2: command tx timeout
[  185.592443] Bluetooth: hci5: command tx timeout
[  185.656724] Bluetooth: hci4: command tx timeout
[  185.657159] Bluetooth: hci7: command tx timeout
[  185.784432] Bluetooth: hci6: command tx timeout
[  185.849146] Bluetooth: hci3: command tx timeout
[  187.192682] Bluetooth: hci0: command tx timeout
[  187.320450] Bluetooth: hci1: command tx timeout
[  187.320899] Bluetooth: hci2: command tx timeout
[  187.640742] Bluetooth: hci5: command tx timeout
[  187.705553] Bluetooth: hci7: command tx timeout
[  187.705960] Bluetooth: hci4: command tx timeout
[  187.833577] Bluetooth: hci6: command tx timeout
[  187.896585] Bluetooth: hci3: command tx timeout
[  189.240737] Bluetooth: hci0: command tx timeout
[  189.368907] Bluetooth: hci2: command tx timeout
[  189.369370] Bluetooth: hci1: command tx timeout
[  189.689346] Bluetooth: hci5: command tx timeout
[  189.752468] Bluetooth: hci4: command tx timeout
[  189.752898] Bluetooth: hci7: command tx timeout
[  189.880433] Bluetooth: hci6: command tx timeout
[  189.946353] Bluetooth: hci3: command tx timeout
[  243.148671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  243.160186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  243.162555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  243.167653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  243.170922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  243.209266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  243.212900] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  243.215518] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  243.220213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  243.223821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  243.293528] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  243.303012] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  243.305198] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  243.320147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  243.333273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  243.399987] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  243.408059] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  243.411919] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  243.421463] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  243.434842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  243.436044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  243.442894] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  243.458264] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  243.462886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  243.470589] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  243.612376] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  243.624872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  243.629430] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  243.647831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  243.668946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  243.924019] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  243.926786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  243.935013] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  243.935087] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  243.953652] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  243.954979] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  243.993660] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  244.021536] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  244.029432] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  244.044003] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  245.240901] Bluetooth: hci1: command tx timeout
[  245.241074] Bluetooth: hci0: command tx timeout
[  245.434886] Bluetooth: hci2: command tx timeout
[  245.560572] Bluetooth: hci3: command tx timeout
[  245.816423] Bluetooth: hci4: command tx timeout
[  245.817143] Bluetooth: hci5: command tx timeout
[  246.200568] Bluetooth: hci6: command tx timeout
[  246.202614] Bluetooth: hci7: command tx timeout
[  247.288450] Bluetooth: hci1: command tx timeout
[  247.288943] Bluetooth: hci0: command tx timeout
[  247.482645] Bluetooth: hci2: command tx timeout
[  247.609610] Bluetooth: hci3: command tx timeout
[  247.864410] Bluetooth: hci5: command tx timeout
[  247.864895] Bluetooth: hci4: command tx timeout
[  248.248743] Bluetooth: hci7: command tx timeout
[  248.249224] Bluetooth: hci6: command tx timeout
[  249.336934] Bluetooth: hci0: command tx timeout
[  249.337901] Bluetooth: hci1: command tx timeout
[  249.528505] Bluetooth: hci2: command tx timeout
[  249.656432] Bluetooth: hci3: command tx timeout
[  249.912594] Bluetooth: hci4: command tx timeout
[  249.913463] Bluetooth: hci5: command tx timeout
[  250.296517] Bluetooth: hci6: command tx timeout
[  250.297623] Bluetooth: hci7: command tx timeout
[  251.384638] Bluetooth: hci0: command tx timeout
[  251.385101] Bluetooth: hci1: command tx timeout
[  251.576411] Bluetooth: hci2: command tx timeout
[  251.705521] Bluetooth: hci3: command tx timeout
[  251.961451] Bluetooth: hci5: command tx timeout
[  251.961948] Bluetooth: hci4: command tx timeout
[  252.345753] Bluetooth: hci7: command tx timeout
[  252.346244] Bluetooth: hci6: command tx timeout
[  305.807785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  305.814122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  305.818183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  305.831886] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  305.843666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  306.003792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  306.011923] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  306.014563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  306.014574] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  306.021615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  306.025829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  306.032012] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  306.037368] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  306.057194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  306.066677] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  306.112037] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  306.126567] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  306.136515] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  306.143206] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  306.147022] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  306.149992] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  306.155896] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  306.158181] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  306.161445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  306.167006] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  306.171272] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  306.173101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  306.176803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  306.180048] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  306.182765] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  306.185122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  306.187091] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  306.204136] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  306.210822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  306.242883] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  306.259724] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  306.265531] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  306.292938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  306.292958] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  306.304659] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.897635] Bluetooth: hci0: command tx timeout
[  308.088415] Bluetooth: hci1: command tx timeout
[  308.152471] Bluetooth: hci2: command tx timeout
[  308.280524] Bluetooth: hci5: command tx timeout
[  308.281393] Bluetooth: hci4: command tx timeout
[  308.344447] Bluetooth: hci6: command tx timeout
[  308.408462] Bluetooth: hci3: command tx timeout
[  308.409271] Bluetooth: hci7: command tx timeout
[  309.944536] Bluetooth: hci0: command tx timeout
[  310.137244] Bluetooth: hci1: command tx timeout
[  310.200852] Bluetooth: hci2: command tx timeout
[  310.328660] Bluetooth: hci4: command tx timeout
[  310.329158] Bluetooth: hci5: command tx timeout
[  310.392471] Bluetooth: hci6: command tx timeout
[  310.456651] Bluetooth: hci3: command tx timeout
[  310.457114] Bluetooth: hci7: command tx timeout
[  311.992449] Bluetooth: hci0: command tx timeout
[  312.184830] Bluetooth: hci1: command tx timeout
[  312.249082] Bluetooth: hci2: command tx timeout
[  312.376510] Bluetooth: hci5: command tx timeout
[  312.377411] Bluetooth: hci4: command tx timeout
[  312.441404] Bluetooth: hci6: command tx timeout
[  312.504836] Bluetooth: hci7: command tx timeout
[  312.505680] Bluetooth: hci3: command tx timeout
[  314.040819] Bluetooth: hci0: command tx timeout
[  314.233248] Bluetooth: hci1: command tx timeout
[  314.296518] Bluetooth: hci2: command tx timeout
[  314.425626] Bluetooth: hci4: command tx timeout
[  314.426754] Bluetooth: hci5: command tx timeout
[  314.488418] Bluetooth: hci6: command tx timeout
[  314.553602] Bluetooth: hci7: command tx timeout
[  314.555449] Bluetooth: hci3: command tx timeout
[  367.887942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  367.896312] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  367.901648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  367.911911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  367.917652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  368.138366] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  368.145107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  368.148491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  368.157022] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  368.165889] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  368.217269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  368.224777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  368.244637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  368.265390] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  368.269783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  368.275904] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  368.278916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  368.283264] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  368.289021] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  368.294045] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  368.360734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  368.385544] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  368.399797] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  368.405244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  368.417275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  368.427730] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  368.431128] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  368.433813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  368.438046] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  368.438544] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  368.455776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  368.462239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  368.464569] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  368.492824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  368.496896] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  368.500602] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  368.507132] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  368.516557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  368.521247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  368.523242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  369.977379] Bluetooth: hci0: command tx timeout
[  370.232418] Bluetooth: hci1: command tx timeout
[  370.360463] Bluetooth: hci3: command tx timeout
[  370.361263] Bluetooth: hci2: command tx timeout
[  370.552618] Bluetooth: hci4: command tx timeout
[  370.617437] Bluetooth: hci5: command tx timeout
[  370.618034] Bluetooth: hci7: command tx timeout
[  370.681592] Bluetooth: hci6: command tx timeout
[  372.025609] Bluetooth: hci0: command tx timeout
[  372.281402] Bluetooth: hci1: command tx timeout
[  372.410358] Bluetooth: hci2: command tx timeout
[  372.410828] Bluetooth: hci3: command tx timeout
[  372.600614] Bluetooth: hci4: command tx timeout
[  372.665245] Bluetooth: hci7: command tx timeout
[  372.665706] Bluetooth: hci5: command tx timeout
[  372.729618] Bluetooth: hci6: command tx timeout
[  374.073614] Bluetooth: hci0: command tx timeout
[  374.328779] Bluetooth: hci1: command tx timeout
[  374.458473] Bluetooth: hci3: command tx timeout
[  374.459266] Bluetooth: hci2: command tx timeout
[  374.649492] Bluetooth: hci4: command tx timeout
[  374.712984] Bluetooth: hci5: command tx timeout
[  374.713464] Bluetooth: hci7: command tx timeout
[  374.776457] Bluetooth: hci6: command tx timeout
[  376.121961] Bluetooth: hci0: command tx timeout
[  376.378676] Bluetooth: hci1: command tx timeout
[  376.505741] Bluetooth: hci2: command tx timeout
[  376.505863] Bluetooth: hci3: command tx timeout
[  376.696681] Bluetooth: hci4: command tx timeout
[  376.760449] Bluetooth: hci5: command tx timeout
[  376.760477] Bluetooth: hci7: command tx timeout
[  376.825407] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
05:30:59  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffffff8100148a RCX=ffff88806ce08954 RDX=1ffff1100d9c114b
RSI=ffffffff85c1cbc0 RDI=ffffffff8100148a RBP=ffff88806ce08a58 RSP=ffff88806ce089d8
R8 =0000000000000001 R9 =ffff88806ce08a40 R10=000000000003b4bd R11=00000000000c4640
R12=ffff88806ce08ac8 R13=0000000000000000 R14=ffff88802a070000 R15=ffff88800b57f500
RIP=ffffffff8142fb2f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055556373d400 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff63c48c1f0 CR3=000000002b90a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff000000000000ff0000000000000000
XMM02=ff0000000000000000ff000000000000 XMM03=00ff000000000000ff00000000000000
XMM04=0000000000ff00000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=000000000000001c RCX=ffffffff81909fe1 RDX=ffff8880328ed280
RSI=ffffffff81909fee RDI=0000000000000004 RBP=000000000000001f RSP=ffff888030177800
R8 =0000000000000001 R9 =fffff9400003b86e R10=000000000000001c R11=0000000000000001
R12=ffff8880301779a0 R13=ffff8880301779d0 R14=dffffc0000000000 R15=ffff888030177ab8
RIP=ffffffff81738aa8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc5aea70000 CR3=000000003826a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000000000000000000000797063
XMM04=6567007465737a74006d726678736377 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000