Warning: Permanently added '[localhost]:30855' (ECDSA) to the list of known hosts.
2025/06/14 21:40:21 fuzzer started
2025/06/14 21:40:21 dialing manager at localhost:42061
syzkaller login: [  103.835952] cgroup: Unknown subsys name 'net'
[  103.976128] cgroup: Unknown subsys name 'cpuset'
[  104.018999] cgroup: Unknown subsys name 'rlimit'
2025/06/14 21:40:38 syscalls: 2214
2025/06/14 21:40:38 code coverage: enabled
2025/06/14 21:40:38 comparison tracing: enabled
2025/06/14 21:40:38 extra coverage: enabled
2025/06/14 21:40:38 setuid sandbox: enabled
2025/06/14 21:40:38 namespace sandbox: enabled
2025/06/14 21:40:38 Android sandbox: enabled
2025/06/14 21:40:38 fault injection: enabled
2025/06/14 21:40:38 leak checking: enabled
2025/06/14 21:40:38 net packet injection: enabled
2025/06/14 21:40:38 net device setup: enabled
2025/06/14 21:40:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/14 21:40:38 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/14 21:40:38 USB emulation: enabled
2025/06/14 21:40:38 hci packet injection: enabled
2025/06/14 21:40:38 wifi device emulation: enabled
2025/06/14 21:40:38 802.15.4 emulation: enabled
2025/06/14 21:40:38 fetching corpus: 0, signal 0/0 (executing program)
2025/06/14 21:40:41 starting 8 fuzzer processes
21:40:41 executing program 0:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x150, r1, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x55}, {0x6, 0x16, 0x40}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xffff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x3f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc8}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xa206}, {0x5}}]}, 0x150}, 0x1, 0x0, 0x0, 0x48010}, 0x440c5)
r2 = accept(r0, &(0x7f00000002c0)=@can, &(0x7f0000000340)=0x80)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0x2, 0xd0c})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2004, @fd_index=0x1, 0x4}, 0x7)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xe59c8240b7ba0d13}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x401, 0x4e}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x80}, @NL80211_ATTR_IE={0x18, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x40, 0x21}}, @channel_switch={0x25, 0x3, {0x1, 0xa1, 0x9}}, @chsw_timing={0x68, 0x4, {0x5, 0x4}}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x94}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004880}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8004086)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000006c0)=0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r3=>r2, {0x7}}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x90c, 0x200, 0xfffe]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x536}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x41080}, 0x8810)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r3)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r5, 0x2, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x44001)
ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000b00)={'bridge_slave_1\x00', {0x2, 0x0, @initdev}})
r6 = fsopen(&(0x7f0000000b40)='configfs\x00', 0x0)
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000b80)={{r0}, 0x9, 0x6, 0x9})
syz_genetlink_get_family_id$smc(&(0x7f0000000bc0), r3)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2e}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xc000}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000040)

21:40:41 executing program 1:
lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000080)='\'C$/\x00', 0x5, 0x2)
r0 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e)
sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x402, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x4008000)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x17c, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x11}, 0x20008044)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000810}, 0x4000010)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc4, 0x2, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3129871c}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfff}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd97}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xf30}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x800}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe00000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffff08f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x837}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000001}, 0x22008040)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:hald_sonypic_exec_t:s0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x8880)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe4f}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1182}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1258}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x20}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x800}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x24000080)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c00)={'wg2\x00'})
r3 = pidfd_open(0x0, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000c40))
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r2, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0xc000)
setxattr$trusted_overlay_origin(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), &(0x7f0000000e40), 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x73}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

21:40:41 executing program 2:
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x101000)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f0000000040)=[{r0, 0xc000}, {0xffffffffffffffff, 0xb803}, {0xffffffffffffffff, 0x1100}], 0x3, &(0x7f00000000c0)={r1, r2+60000000}, &(0x7f0000000100)={[0x3]}, 0x8)
fcntl$setpipe(r0, 0x407, 0x2)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000180)=""/96)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x10000)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000240))
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000280)={{0x2, 0x4e23, @private=0xa010100}, {0x1, @local}, 0x74, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'nr0\x00'})
r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000300)={{r4}, {@void, @actul_num={@void, 0x2, 0x74}}})
syz_genetlink_get_family_id$fou(&(0x7f0000000340), r0)
r5 = openat$incfs(r0, &(0x7f0000000380)='.pending_reads\x00', 0x4002c0, 0x12)
ioctl$RTC_AIE_OFF(r5, 0x7002)
futex(&(0x7f00000003c0)=0x2, 0x2, 0x0, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000440)=0x1, 0x2)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000480)=0x1000, 0x4)
ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f00000004c0)=0xb9a)
pselect6(0x40, &(0x7f0000000500)={0x7, 0x8, 0x6, 0x3ff, 0x7fffffff, 0x80, 0x1000, 0x5}, &(0x7f0000000540)={0x20000000, 0x7fff, 0x1ff, 0x6, 0x7, 0x1, 0x75ca5911, 0xfffffffffffffffc}, &(0x7f0000000580)={0xe9f, 0x6, 0xf69, 0x1, 0x3, 0xff, 0xfffffffffffffffd}, &(0x7f00000005c0), &(0x7f0000000640)={&(0x7f0000000600)={[0x8]}, 0x8})
pselect6(0x40, &(0x7f0000000680)={0x8970, 0x0, 0x6, 0x8, 0x8, 0x2, 0x1, 0x6}, &(0x7f00000006c0)={0x6, 0x1, 0x6, 0x7f, 0x200, 0x81, 0x9, 0x7ff}, &(0x7f0000000700)={0x9, 0x4, 0x3, 0x5, 0xfffffffffffffff8, 0x2, 0x1, 0x6261}, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f00000007c0)={&(0x7f0000000780), 0x8})

[  122.941659] audit: type=1400 audit(1749937241.292:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
21:40:41 executing program 3:
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'gre0\x00', <r0=>0x0, 0x700, 0x700, 0x100, 0x8, {{0x2a, 0x4, 0x2, 0x8, 0xa8, 0x67, 0x0, 0x7, 0x4, 0x0, @loopback, @loopback, {[@generic={0x44, 0xc, "10910a38125d665b7886"}, @generic={0x88, 0xf, "40ea14c6983a44772892c88314"}, @timestamp_addr={0x44, 0x1c, 0x30, 0x1, 0xf, [{@private=0xa010101, 0x5}, {@private=0xa010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0xed, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x274}, {@remote, 0x6f}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x1}, {@multicast1, 0xff}]}, @cipso={0x86, 0x15, 0x3, [{0x5, 0x8, "25d19fd210e0"}, {0x0, 0x7, "3b0f6ad734"}]}, @generic={0x89, 0xf, "fa1e143627ba54aa0432419d96"}, @end, @timestamp_prespec={0x44, 0xc, 0x53, 0x3, 0x9, [{@private=0xa010100, 0x9}]}]}}}}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xc0, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x72}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x11}, 0x844)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x54}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x40)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x2001, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x98, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x70}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}]}, 0x98}}, 0x4000010)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x28}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r5 = gettid()
ptrace$setsig(0x4203, r5, 0x1, &(0x7f0000000840)={0x1c, 0x2, 0xff})
syz_open_pts(r1, 0x2400)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000008c0))
r6 = gettid()
ptrace$getregset(0x4204, r6, 0x201, &(0x7f0000000940)={&(0x7f0000000900)=""/44, 0x2c})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000a00)={'ip_vti0\x00', &(0x7f0000000980)={'erspan0\x00', <r7=>0x0, 0x80, 0x700, 0x8001, 0x6e54, {{0x9, 0x4, 0x2, 0x12, 0x24, 0x64, 0x0, 0xc8, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1, {[@end, @noop, @timestamp={0x44, 0xc, 0xd4, 0x0, 0x3, [0x4, 0x5]}, @end]}}}}})
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r2)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'ip6gre0\x00', <r9=>r0, 0x29, 0x3, 0xaf, 0x7ff, 0x2, @private0, @remote, 0x8000, 0x8000, 0x3, 0x1}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000001100)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f00)={0x198, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)

21:40:41 executing program 4:
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x2153)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x1f, 0x7, 0x26})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000004c0)={0x3, 0x0, 0x1b, 0x10, 0x1ee, &(0x7f00000000c0)})
ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000900)={0x170, 0x0, &(0x7f0000000500)="c58f121c12a6d2f523604c66c6443ddcd2f89082ead49a6bf0d8a3122f2b9a1019db52d88f9009ca76f76e921e4d9b5cf76a2f09792d4a245b99c73a8da82788b7ad6c17f403a40d03d58b45e6797217b3a97d26f45d53f34fd6a5b1357484b09ad5948c419e8bf87e152ee6fb9cec4442290fa2494d079fd848599eac47180bfc2dd85fbee0dc2d2da7bf74e2ce17f1130fcdc5fd26550af496047c2f8324f1e9c1eec8a51375d8db226ad6e7844fa3e9ebff1e868843ae07bd9378039930efdeb6a2343cb4feb57c9f38f8fce9c6cd122509534c73ee50b1dd4c386d61db77157435500d6de68384c1041fa249bb84a1647f9e572a0501bde62f7a79b5b248b3894b081104d48746363d9bfa174219569823bbec43be8549ae01081a73942a0ac90815056d5a2f6209ff70e6a892b886a602bc408d3f14539f9942e6fe1c34fd05f3d3dd935e94b9ccfea2e0f355f96ae57f521eb2cba9f593780b945c4116002b31b92265205c56fec67a9b1c661ef438546f893c8af983d7a5eee9c728360e0b43546dd112d2356e737b62fd37f030a9d9635efa72999224045e75ec3eff55aa4f3b0ae4f596f1562b16a7158b59464f66baaab9d02502fdf2d76d6fd8b56a4d0d7e08034d799ca874f42443abee3586f454a15428627c52eae4bcdfc770c1b086d1aba2cca63a0d7bc4c403dd97af903d82ba4ab1bd63dc2b0649ec094d0e93ee9013b93b88b0871b7484d50307afb0f60b9d327449a72cadb0d2f0d4712dd5d87d0002aff9e79f9609bd59416e00a38f4544443512dc2038ccb7e790e4738feb6f8ed15e7bd56d9f6bc9746a28afa782ffa5685c1fa8cd80d2b370d71a887c0192f9f0a7ef0a41fa3f50d139140f90ae1c8dbdd01034fa10f6a6362d80f94711e3ff930700f0f269c33b852320a03e15bd82b8f66d6cfca900238985ee9e9cc0cd670207756e1d69ebd7e804f2a8d2d143985ed7456c9608618a2cc6262edadca75836b14e3a30e4ed745ab41bdf79ef57cb10a226c1f546213c3c4ea81b0de6b3347d8156093cc7ccb3d4d0da7f8f7684f700acc03c3e8aaa47e9f4c6599d59e29630228cdfcdb2138a9890f3380eb275195767434643ff1e0db5c5e1bd51e533c09ce8f0e8e024a99999bee697372924f1ee5260d734d7036b99d056e335f39cb22ac7b9d3e040da16726c3248f32e439a93d31b6104e718207bbc1eb1faaf930479efa355e5697aeaf68a2eb2ac38edd6b776f19d0c4a14b2e4fc43dd17a5b389e8ed331a336af79e38eeb326fc0452713ea85b9f8a354fc158b921259311f350e04caf3a6a9e8af37983f0d31defdf8033abfd08e729fd4719ff041dda8cf4a9b9ba2e433211a37df14bbb5e824966e4e32f3525e01fcdb49d90c22722ce5c28dde2d7943571a81e732d7e51f47144ada617137a0e9a3db9f2d326"})
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x8010, 0xffffffffffffffff, 0x0)
r2 = epoll_create1(0x80000)
fcntl$setpipe(r2, 0x407, 0x7f)
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000940)=0x8)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000980)={0x800, 0x92})
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000dc0)={0x1, 0x0, 0x2, 0x3, 0x103, &(0x7f00000009c0)})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000e00)={{0x1, 0x1, 0x18, <r3=>r1, {<r4=>r1}}, './file0\x00'})
ioctl$TIOCCONS(r4, 0x541d)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000e40)={{0x3, 0x3, 0x401, 0x1, 0x4}, 0x2, 0x4, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0x4, 0x8, 0x1d})
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f80), r3)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000013c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f0000000fc0)={0x38c, r5, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x92b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5847}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d88}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6ad}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x355}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd144}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x335}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x117}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc5}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000)
statfs(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)=""/4096)
sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x70}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)

21:40:41 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x6}}, './file0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x21}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c014}, 0x44040)
r2 = dup2(r0, r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x200, 0x32}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x4000814)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7fffffff, 0x7}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x40000)
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x60)
getpeername$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @initdev}, &(0x7f0000000500)=0x10)
r4 = creat(&(0x7f0000000540)='.\x00', 0xe0)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x170, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6fa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x15}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa06}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x51019569}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x228}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdc1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5de1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x18cf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x45b2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xed4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb62e}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}]}]}, 0x170}}, 0x20040800)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000007c0)={0x80e, 0xfff, 0x2, 0x4, 0x6a2e}, 0x14)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, 0xe, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x40400d4)
lseek(r4, 0x6, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x44}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008012}, 0x40)
lsetxattr$security_ima(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), &(0x7f0000000ac0)=@v1={0x2, "6ac2d1b3e87a9c0b4dbe"}, 0xb, 0x2)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000b00))
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b80)={0x144, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x7, 0x3}, {0x0, 0x7}, {0x0, 0x2}, {0xa, 0x4}, {0x6, 0x1}, {0x9, 0x2}, {0x0, 0x6}, {0x7, 0x4}, {0x5, 0x6}, {0x1, 0x2}, {0x60, 0x7}, {0x9, 0x7}, {0x3, 0x4}, {0x0, 0x5}], "98a6a4becb28c859"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8a, 0x2}, {0x9, 0x5}, {0x4}, {0x10, 0x2}, {0x6, 0x7}, {0x4, 0x7}, {0x80, 0x4}, {0x7, 0x2}, {0xd6, 0x5}, {0x3f}, {0x80, 0x4}, {0x6, 0x4}, {0x5, 0x5}, {0x40, 0x2}, {0x6, 0x7}, {0x1, 0x2}, {0x2, 0x5}], "7bbbf7a80a10b639"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x3f, 0x4}, {0x81, 0x7}, {0x9, 0x1}, {0x2, 0x5}, {0x4, 0x6}, {}, {0x8, 0x2}, {0x7, 0x4}, {0x3e, 0x2}, {0x2, 0x6}, {0x21, 0x1}, {0x2}, {0xc0, 0x5}, {0x3e, 0x4}, {0x4, 0x4}, {0x23, 0x3}, {0x5, 0x3}, {0x3f, 0x3}], "6bcd5a529778ebdb"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x5, 0x5}, {0x81, 0x3}, {0x42, 0x5}, {0x99}, {0x3, 0x2}, {0x6, 0x5}, {0xff, 0x2}, {0x1, 0x6}, {0x59, 0x4}, {0xd2, 0x7}, {0x1, 0x2}, {0x1, 0x6}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0x5}, {0x8, 0x3}, {0x5, 0x2}], "e07931114e4d76a7"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x80, 0x4}, {0xe0, 0x1}, {0x5, 0x3}, {0x43, 0x7}, {0x3, 0x7}, {0x9, 0x4}, {0x2a}, {0xc0, 0x3}, {0x0, 0x1}, {0x4, 0x3}, {0x2c}, {0x4, 0x3}, {0x1, 0x6}, {0x3, 0x3}], "1818c1dbb0a22b1b"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x7, 0x4}, {0xb8}, {0x82, 0x7}, {0x1, 0x1}, {0x6, 0x4}, {0x7f, 0x6}, {0x0, 0x7}, {0x6}, {0x40, 0x7}, {0x5, 0x5}, {0x3f, 0x3}, {0x6, 0x6}, {0x0, 0x5}], "51105ab6f967dcb1"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x20, 0x5}, {0x7f, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x8, 0x4}, {0x1, 0x2}, {0x45, 0x2}, {0x9, 0x2}, {0xfd}, {0x7, 0x7}, {0xff, 0x5}, {0x5, 0x6}, {0x2, 0x1}, {0x0, 0x7}], "070be6bc000fa4a7"}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004}, 0x4000800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000dc0)={'vcan0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xfc, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20040001}, 0x800)

21:40:41 executing program 6:
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r0=>0x0})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
kcmp(r0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000804}, 0x820)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x48051}, 0x20000011)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/cgroup\x00')
ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000440)={0x8000, 0x4, 0x6, 0x4, 0x45, 0x7})
ioctl$EXT4_IOC_GETSTATE(r8, 0x40046629, &(0x7f0000000480))
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f00000004c0)={<r9=>0x0, 0xfffffffffffffffc, 0x8, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000008c0)={r9, "fa52e3b09bc22a2c9a1ca888374c6e83"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001900)={<r10=>0xffffffffffffffff})
r11 = accept(r1, &(0x7f0000001940)=@in={0x2, 0x0, @remote}, &(0x7f00000019c0)=0x80)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000001b40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x98, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x793}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x23}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}]}, 0x98}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x40001)

21:40:41 executing program 7:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x7, 0x1, 0x9})
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
fadvise64(r1, 0x20, 0x9, 0x1)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000f00)={{0x1, 0x1, 0x18, <r2=>r1, {<r3=>r0}}, './file0\x00'})
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000f40))
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000f80)={0x2, 0x100, 0x2000400, 0xffffffff, 0x1ff})
fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000fc0)='nolazytime\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x48, r4, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x58e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8094}, 0x40040)
setxattr$security_ima(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), &(0x7f0000001200)=@v1={0x2, "b6aee75372194ba0c38a6a902559ee86cade84"}, 0x14, 0x1)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000035c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r5=>r2}}, './file0\x00'})
setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000003600)=@gcm_256={{0x7}, "6aeec9245a62bbd8", "41ec0e2d19d29fb8bb44890ab823a3c1c23c19b3983160271c717fa3a984c53c", '{l:q', "865e4f27b6f4eb0e"}, 0x38)
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000003780)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x10000081}, 0xc, &(0x7f0000003740)={&(0x7f0000003680)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x5af73ab161649a0e}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x88}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
pipe(&(0x7f00000037c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x100)
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000003a00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x8210000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x78, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x7dd212723d6a0e2d}, 0x48814)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000003ac0)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003a80)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000814)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000003c00)={0x0, 0x400})

[  124.095357] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.097133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.098714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  124.103690] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  124.107853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  124.327295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  124.332804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  124.336228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  124.340252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  124.348069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  124.357614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  124.363951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  124.377455] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  124.391118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  124.394564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  124.396129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  124.397838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  124.402924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  124.404580] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  124.410947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  124.419791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  124.444941] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  124.448075] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  124.454980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  124.462052] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  124.463750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  124.468824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  124.471782] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  124.475614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  124.479986] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  124.484534] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  124.486896] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  124.488621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  124.495165] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  124.497322] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  124.614837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  124.642905] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  124.645144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  124.663033] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  124.667232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  126.164908] Bluetooth: hci0: command tx timeout
[  126.484562] Bluetooth: hci1: command tx timeout
[  126.484905] Bluetooth: hci2: command tx timeout
[  126.485501] Bluetooth: hci5: command tx timeout
[  126.548617] Bluetooth: hci4: command tx timeout
[  126.549456] Bluetooth: hci7: command tx timeout
[  126.613446] Bluetooth: hci3: command tx timeout
[  126.740667] Bluetooth: hci6: command tx timeout
[  128.213549] Bluetooth: hci0: command tx timeout
[  128.534446] Bluetooth: hci2: command tx timeout
[  128.534532] Bluetooth: hci5: command tx timeout
[  128.534928] Bluetooth: hci1: command tx timeout
[  128.598430] Bluetooth: hci7: command tx timeout
[  128.598568] Bluetooth: hci4: command tx timeout
[  128.661958] Bluetooth: hci3: command tx timeout
[  128.789884] Bluetooth: hci6: command tx timeout
[  130.261845] Bluetooth: hci0: command tx timeout
[  130.580661] Bluetooth: hci5: command tx timeout
[  130.581614] Bluetooth: hci2: command tx timeout
[  130.581722] Bluetooth: hci1: command tx timeout
[  130.644835] Bluetooth: hci7: command tx timeout
[  130.645987] Bluetooth: hci4: command tx timeout
[  130.709418] Bluetooth: hci3: command tx timeout
[  130.836556] Bluetooth: hci6: command tx timeout
[  132.309502] Bluetooth: hci0: command tx timeout
[  132.628644] Bluetooth: hci2: command tx timeout
[  132.628850] Bluetooth: hci5: command tx timeout
[  132.629857] Bluetooth: hci1: command tx timeout
[  132.692559] Bluetooth: hci4: command tx timeout
[  132.692578] Bluetooth: hci7: command tx timeout
[  132.757600] Bluetooth: hci3: command tx timeout
[  132.886408] Bluetooth: hci6: command tx timeout
[  186.851021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  186.857276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  186.865500] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  186.870214] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  186.873249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  186.998811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  187.004665] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  187.006543] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  187.012335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  187.018713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  187.022553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  187.023581] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  187.027690] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  187.030028] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  187.037348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  187.043205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  187.043697] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  187.053590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  187.058677] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  187.061970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  187.119118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  187.124559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  187.148590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  187.156902] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  187.164058] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  187.241714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  187.253160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  187.275870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  187.313992] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  187.338428] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  187.409313] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  187.412878] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  187.414587] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  187.435951] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  187.475522] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  187.489789] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  187.489912] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  187.501120] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  187.502934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  187.548149] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  188.949577] Bluetooth: hci0: command tx timeout
[  189.141593] Bluetooth: hci1: command tx timeout
[  189.142418] Bluetooth: hci3: command tx timeout
[  189.204715] Bluetooth: hci2: command tx timeout
[  189.276207] Bluetooth: hci5: command tx timeout
[  189.526006] Bluetooth: hci4: command tx timeout
[  189.652648] Bluetooth: hci6: command tx timeout
[  189.653549] Bluetooth: hci7: command tx timeout
[  190.998458] Bluetooth: hci0: command tx timeout
[  191.188798] Bluetooth: hci3: command tx timeout
[  191.189086] Bluetooth: hci1: command tx timeout
[  191.253549] Bluetooth: hci2: command tx timeout
[  191.317115] Bluetooth: hci5: command tx timeout
[  191.572955] Bluetooth: hci4: command tx timeout
[  191.700503] Bluetooth: hci6: command tx timeout
[  191.701316] Bluetooth: hci7: command tx timeout
[  193.044683] Bluetooth: hci0: command tx timeout
[  193.236449] Bluetooth: hci1: command tx timeout
[  193.238412] Bluetooth: hci3: command tx timeout
[  193.302331] Bluetooth: hci2: command tx timeout
[  193.364618] Bluetooth: hci5: command tx timeout
[  193.620709] Bluetooth: hci4: command tx timeout
[  193.748670] Bluetooth: hci7: command tx timeout
[  193.748695] Bluetooth: hci6: command tx timeout
[  195.094420] Bluetooth: hci0: command tx timeout
[  195.284670] Bluetooth: hci3: command tx timeout
[  195.284900] Bluetooth: hci1: command tx timeout
[  195.348835] Bluetooth: hci2: command tx timeout
[  195.413754] Bluetooth: hci5: command tx timeout
[  195.670361] Bluetooth: hci4: command tx timeout
[  195.796462] Bluetooth: hci7: command tx timeout
[  195.796503] Bluetooth: hci6: command tx timeout
[  249.131097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  249.136177] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  249.142298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  249.159693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  249.168909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  249.265748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  249.276877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  249.280208] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  249.287154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  249.300282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  249.359247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  249.365256] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  249.371949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  249.385809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  249.394426] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  249.500300] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  249.511964] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  249.518129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  249.532779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  249.534337] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  249.558914] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  249.563278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  249.572995] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  249.581103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  249.584964] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  249.602241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  249.606635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  249.606688] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  249.648898] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  249.653322] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  249.657255] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  249.658756] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  249.660194] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  249.662499] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  249.664783] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  249.672554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  249.703058] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  249.742091] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  249.745482] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  249.766699] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  251.220675] Bluetooth: hci0: command tx timeout
[  251.349564] Bluetooth: hci1: command tx timeout
[  251.477585] Bluetooth: hci2: command tx timeout
[  251.668486] Bluetooth: hci3: command tx timeout
[  251.732491] Bluetooth: hci4: command tx timeout
[  251.797107] Bluetooth: hci5: command tx timeout
[  251.988711] Bluetooth: hci7: command tx timeout
[  251.989544] Bluetooth: hci6: command tx timeout
[  253.268488] Bluetooth: hci0: command tx timeout
[  253.396618] Bluetooth: hci1: command tx timeout
[  253.524471] Bluetooth: hci2: command tx timeout
[  253.716498] Bluetooth: hci3: command tx timeout
[  253.781493] Bluetooth: hci4: command tx timeout
[  253.845409] Bluetooth: hci5: command tx timeout
[  254.036585] Bluetooth: hci7: command tx timeout
[  254.037084] Bluetooth: hci6: command tx timeout
[  255.316551] Bluetooth: hci0: command tx timeout
[  255.444897] Bluetooth: hci1: command tx timeout
[  255.573630] Bluetooth: hci2: command tx timeout
[  255.764461] Bluetooth: hci3: command tx timeout
[  255.828459] Bluetooth: hci4: command tx timeout
[  255.892479] Bluetooth: hci5: command tx timeout
[  256.084526] Bluetooth: hci7: command tx timeout
[  256.085018] Bluetooth: hci6: command tx timeout
[  257.364564] Bluetooth: hci0: command tx timeout
[  257.493754] Bluetooth: hci1: command tx timeout
[  257.620454] Bluetooth: hci2: command tx timeout
[  257.812533] Bluetooth: hci3: command tx timeout
[  257.878413] Bluetooth: hci4: command tx timeout
[  257.940616] Bluetooth: hci5: command tx timeout
[  258.132706] Bluetooth: hci6: command tx timeout
[  258.133199] Bluetooth: hci7: command tx timeout
[  311.600962] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  311.606936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  311.612286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  311.620480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  311.627064] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  311.726079] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  311.729976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  311.738672] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  311.747950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  311.752634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  311.899008] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  311.906305] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  311.929984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  311.944901] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  311.948486] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  311.960690] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  311.981256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.981457] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  311.993777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  312.002841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  312.094243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  312.102920] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  312.110190] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  312.130842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  312.158690] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  312.533831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  312.557215] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  312.559311] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  312.591504] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  312.604177] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  312.620328] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  312.629833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  312.632231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  312.640827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  312.657997] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  312.735929] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  312.764798] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  312.772052] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  312.834704] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  312.839204] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  313.685675] Bluetooth: hci0: command tx timeout
[  313.812514] Bluetooth: hci1: command tx timeout
[  314.068545] Bluetooth: hci3: command tx timeout
[  314.069930] Bluetooth: hci2: command tx timeout
[  314.388603] Bluetooth: hci4: command tx timeout
[  314.836936] Bluetooth: hci7: command tx timeout
[  315.029810] Bluetooth: hci6: command tx timeout
[  315.094588] Bluetooth: hci5: command tx timeout
[  315.732669] Bluetooth: hci0: command tx timeout
[  315.861548] Bluetooth: hci1: command tx timeout
[  316.116535] Bluetooth: hci2: command tx timeout
[  316.119409] Bluetooth: hci3: command tx timeout
[  316.436449] Bluetooth: hci4: command tx timeout
[  316.884645] Bluetooth: hci7: command tx timeout
[  317.076485] Bluetooth: hci6: command tx timeout
[  317.140448] Bluetooth: hci5: command tx timeout
[  317.780451] Bluetooth: hci0: command tx timeout
[  317.908814] Bluetooth: hci1: command tx timeout
[  318.164683] Bluetooth: hci3: command tx timeout
[  318.164713] Bluetooth: hci2: command tx timeout
[  318.486014] Bluetooth: hci4: command tx timeout
[  318.932766] Bluetooth: hci7: command tx timeout
[  319.124708] Bluetooth: hci6: command tx timeout
[  319.190471] Bluetooth: hci5: command tx timeout
[  319.828539] Bluetooth: hci0: command tx timeout
[  319.956585] Bluetooth: hci1: command tx timeout
[  320.214413] Bluetooth: hci3: command tx timeout
[  320.214447] Bluetooth: hci2: command tx timeout
[  320.533536] Bluetooth: hci4: command tx timeout
[  320.981788] Bluetooth: hci7: command tx timeout
[  321.173432] Bluetooth: hci6: command tx timeout
[  321.237556] Bluetooth: hci5: command tx timeout
[  373.990767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  373.994084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  373.996925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  374.008977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  374.016321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  374.179972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  374.183121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  374.185101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  374.189836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  374.194248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  374.386584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  374.394203] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  374.401751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  374.408974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  374.412516] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  374.473118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  374.477889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  374.480810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  374.487818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  374.493146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  374.520213] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  374.524801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  374.526978] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  374.529068] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  374.531232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  374.537617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  374.542317] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  374.547152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  374.547628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  374.552555] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  374.610650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  374.647091] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  374.651334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  374.707148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  374.710153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  374.722963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  374.725677] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  374.739711] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  374.785895] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  374.791895] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  376.084464] Bluetooth: hci0: command tx timeout
[  376.276463] Bluetooth: hci1: command tx timeout
[  376.468511] Bluetooth: hci2: command tx timeout
[  376.597679] Bluetooth: hci5: command tx timeout
[  376.660529] Bluetooth: hci3: command tx timeout
[  376.660579] Bluetooth: hci6: command tx timeout
[  376.852583] Bluetooth: hci4: command tx timeout
[  376.916786] Bluetooth: hci7: command tx timeout
[  378.134657] Bluetooth: hci0: command tx timeout
[  378.324647] Bluetooth: hci1: command tx timeout
[  378.517808] Bluetooth: hci2: command tx timeout
[  378.644629] Bluetooth: hci5: command tx timeout
[  378.709208] Bluetooth: hci6: command tx timeout
[  378.710027] Bluetooth: hci3: command tx timeout
[  378.901168] Bluetooth: hci4: command tx timeout
[  378.964467] Bluetooth: hci7: command tx timeout
[  380.180451] Bluetooth: hci0: command tx timeout
[  380.372691] Bluetooth: hci1: command tx timeout
[  380.564447] Bluetooth: hci2: command tx timeout
[  380.692502] Bluetooth: hci5: command tx timeout
[  380.756766] Bluetooth: hci3: command tx timeout
[  380.757053] Bluetooth: hci6: command tx timeout
[  380.948952] Bluetooth: hci4: command tx timeout
[  381.012465] Bluetooth: hci7: command tx timeout
[  382.228458] Bluetooth: hci0: command tx timeout
[  382.420522] Bluetooth: hci1: command tx timeout
[  382.612621] Bluetooth: hci2: command tx timeout
[  382.741308] Bluetooth: hci5: command tx timeout
[  382.804782] Bluetooth: hci3: command tx timeout
[  382.806180] Bluetooth: hci6: command tx timeout
[  382.996542] Bluetooth: hci4: command tx timeout
[  383.060457] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
21:45:50  Registers:
info registers vcpu 0
RAX=0000000000000002 RBX=ffff888016ca9b80 RCX=0000000000000020 RDX=0000000000000001
RSI=0000000000000020 RDI=0000000000000003 RBP=ffff888016caa5d8 RSP=ffff88806ce088e0
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=ffff888016caa650 R13=0000000000000002 R14=0000000000000000 R15=0000000000000003
RIP=ffffffff81518efe RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055557f3aa400 00000000 00000000
GS =0000 ffff8880e562f000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcb1473eea0 CR3=0000000025f93000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000000000ff00000000000000000000
XMM02=00ff0000000000000000ff0000000000 XMM03=ff00000000000000ff00000000000000
XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff8880371d1b80 RCX=ffff88806cf08b38 RDX=0000000000000000
RSI=ffffffff85c1cc40 RDI=ffff8880371d1f7c RBP=ffff8880371d1b80 RSP=ffff88806cf089c0
R8 =0000000000000001 R9 =ffff88806cf08ad8 R10=000000000003b4ed R11=0000000000006bd3
R12=0000000000000000 R13=ffff88806cf08ae0 R14=ffff88806cf08ae0 R15=ffff88806cf08a98
RIP=ffffffff815abe67 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e572f000 00000000 00000000
LDT=0000 fffffe7400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f84b12bc8e0 CR3=0000000029e2e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000