Warning: Permanently added '[localhost]:34130' (ECDSA) to the list of known hosts.
2025/06/15 13:48:57 fuzzer started
2025/06/15 13:48:58 dialing manager at localhost:42061
syzkaller login: [   95.303661] cgroup: Unknown subsys name 'net'
[   95.460798] cgroup: Unknown subsys name 'cpuset'
[   95.501454] cgroup: Unknown subsys name 'rlimit'
2025/06/15 13:49:15 syscalls: 2214
2025/06/15 13:49:15 code coverage: enabled
2025/06/15 13:49:15 comparison tracing: enabled
2025/06/15 13:49:15 extra coverage: enabled
2025/06/15 13:49:15 setuid sandbox: enabled
2025/06/15 13:49:15 namespace sandbox: enabled
2025/06/15 13:49:15 Android sandbox: enabled
2025/06/15 13:49:15 fault injection: enabled
2025/06/15 13:49:15 leak checking: enabled
2025/06/15 13:49:15 net packet injection: enabled
2025/06/15 13:49:15 net device setup: enabled
2025/06/15 13:49:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/15 13:49:15 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/15 13:49:15 USB emulation: enabled
2025/06/15 13:49:15 hci packet injection: enabled
2025/06/15 13:49:15 wifi device emulation: enabled
2025/06/15 13:49:15 802.15.4 emulation: enabled
2025/06/15 13:49:15 fetching corpus: 0, signal 0/0 (executing program)
2025/06/15 13:49:17 starting 8 fuzzer processes
13:49:17 executing program 0:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/pid\x00')
fstat(r1, &(0x7f00000000c0))
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r3=>0x0, 0x29, 0x5, 0x1, 0x800, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x43}, 0x8, 0x20, 0x6, 0x24b2}})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@private1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x248, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xdc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd7, 0x4, "19187889dca9b42fec9e3114397a9eac06a048eb6690acfd49eea78611d69bb9a29fd93f00039d82588e3149e9fc23b3195b83102c42f0feace1399c2715f8ee9453eb39b6a972d4b783732a28d114ba993864dfb271bbfd9e446272cf5218a2eb5b548c1deaf865c1b22ee5c85429d712ee754155f487790295d0330cefb6f323ca9796fa332246791bfad8a1f3accbaa9946da908a8872b924434540130002ab6c01e66f50f25f1a2f8de936d990e7fb023b803f676ae4df0db29b05a335449cdbdec9ed57088f28209c3e93fd57ba253f74"}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000040}, 0x84)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x98, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x8001}, 0xc0)
syslog(0x9, &(0x7f0000000840)=""/101, 0x65)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000008c0)={0x1, 0x0, 0x9, 'V'})
r5 = syz_open_dev$vcsu(&(0x7f0000000900), 0x1, 0x28001)
fchdir(r5)
r6 = openat$incfs(r5, &(0x7f0000000940)='.pending_reads\x00', 0x2, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008840}, 0x0)
ioctl$IOC_PR_RESERVE(r6, 0x401070c9, &(0x7f0000000a80)={0xfffffffffffff3f7, 0x7fff, 0x1})
openat$sr(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000b00)={0x1, 0x8001}, 0x8)
r8 = socket$inet6(0xa, 0x1, 0xaa46)
ioctl$sock_SIOCDELDLCI(r8, 0x8981, &(0x7f0000000b40)={'vlan0\x00', 0x7f})

13:49:17 executing program 1:
setpriority(0x0, 0x0, 0x74675eba)
r0 = gettid()
ioprio_get$pid(0x1, r0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
rt_sigqueueinfo(r1, 0x38, &(0x7f0000000040)={0x29, 0x5, 0x8})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @ethernet={0x6, @random="56eccfc88127"}, @vsock={0x28, 0x0, 0xffffffff, @hyper}, @can={0x1d, <r3=>0x0}, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)='caif0\x00', 0x4, 0xffffffffffffff8f})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x16c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={<r4=>0xffffffffffffffff, 0x8, 0x4, 0x46})
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000540)={@rand_addr=0x64010101, @private=0xa010102, r3}, 0xc)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000580))
r5 = syz_open_dev$mouse(&(0x7f00000005c0), 0x9, 0x20100)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000600))
fremovexattr(r5, &(0x7f0000000640)=@known='security.selinux\x00')
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000680))
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000, 0x0)
sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44890}, 0x40000)
connect$802154_dgram(r5, &(0x7f0000000840)={0x24, @long={0x3, 0xffff}}, 0x14)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r6, 0xf50f, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x1ff, 0x7ff, 0x1, 0x5]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000)

13:49:17 executing program 2:
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x94, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x69d}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="b62b970fc540"}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x40c0}, 0x4040000)
socketpair(0x18, 0x2, 0x7, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x50340082}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x71)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1d8, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xcd, 0x3, "462cd1079ff939f2fd8b7905a9809a3a8fbd4d66e45f2dd7b51bafc5f03f8f98292c65060240e27e1a13fdf2f1c0f3d1a986a4d662a0ef929b717d5158149710c5a2e221fa9aaade09098c7c814c56300a8c71ef5b8de341cc159c75a858ec94796ab28090dc734e497a9628a967586ffd02060576de458ba28accff1b434d86f9ad714f80110b104149b4afc726d309d2162e6e570824d25d31362db43f72e4b665f8f8ce2ea3ac1b1d2830e962da5f93c7489fd26ca6a0033dd2bc0514a39b7e34c377cfbf7b2fb4"}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x59f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd8}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x237}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x61}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000)
pipe2(&(0x7f0000000740)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x88000)
ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000000780)=""/9)
write$P9_RREADDIR(r3, &(0x7f00000007c0)={0x49, 0x29, 0x1, {0x7f, [{{0x4, 0x2, 0x6}, 0x8, 0xfc, 0x7, './file0'}, {{0x40, 0x4}, 0x200, 0xa4, 0x7, './file0'}]}}, 0x49)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6d6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x80)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1bc, r7, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x51}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_REG_RULES={0xf0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xbb}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x25c}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6a}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc4e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x393e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x470}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc4d}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x98, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xce}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xbc}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4}, 0x44081)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000c80)={{0x1, 0x1, 0x18, <r8=>r3}, './file0\x00'})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r8)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x9a4fb0bbc5187455}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x600, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40804}, 0x4800)
ioctl$sock_proto_private(r3, 0x89ea, &(0x7f0000000dc0)="d53c6ed64493a9d1f8300d4704af66bb356050237cf426e35b781e1ded074da8303168e43c5032727badd429643ec371cba07ac50b853c7923a7e5b3c53490b3a6be5b8c725c191b51f1a5670a5a524e25d37cf50a63e141fec2079b770d926d929fffa753351db0eaf5055e46fbd534887ab5fd0f554015b5a9422c9db3e51fb5b19b05b2af1dd7568d3cfe1bd434dbf32d76d02f29fce0c87eb22be6b771687586a51d6c4b4456c2dda2af082f32c1bcc6f6a3ece39bab44ab89f35034bad01bc209f5b3cf1db7aa5c30ea525c")
openat$cgroup_ro(r3, &(0x7f0000000ec0)='cpuacct.usage_user\x00', 0x0, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x14}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x40}}, 0x4)

13:49:17 executing program 3:
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000100))
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x3ac, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_BSS_BASIC_RATES={0x13, 0x24, [{0xb, 0x1}, {0xc, 0x1}, {0x24}, {0x24, 0x1}, {0x1b}, {0x12}, {0x9, 0x1}, {0x36}, {0x16, 0x1}, {0x24, 0x1}, {0x30, 0x1}, {0xb}, {0x7}, {0x5}, {0xc, 0x1}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x31c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xcc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0xffff, 0x101, 0x6, 0x1f, 0x2a, 0x7]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x6}, {0x4, 0xa}, {0x4}, {0x0, 0x3}, {0x5, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x9}, {0x4, 0x9}, {0x2, 0x4}, {0x1, 0xa}, {0x6, 0x3}, {0x7, 0x6}, {0x4, 0x6}, {0x7, 0x2}, {0x6, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0x9}, {0x2, 0x7}, {0x5, 0x6}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0x1}, {0x6, 0xa}, {0x4}, {0x5, 0x11}, {0x2, 0x5}, {0x3, 0x9}, {0x5, 0x1}, {0x6}, {0x7, 0x6}, {0x7, 0x3}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x7}, {0x5, 0x7}, {0x2, 0x5}, {0x4, 0x1}, {0x1, 0x8}, {0x5, 0x5}, {0x3, 0x2}, {0x2, 0x4}, {0x2, 0x3}, {0x1, 0x4}, {0x4}, {0x7, 0x4}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x0, 0x2}, {0x2}, {0x7, 0x1}, {0x2, 0xa}, {0x6, 0x5}, {0x7, 0x8}, {0x3, 0x5}, {0x0, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x9}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x1, 0x5, 0x9, 0x5, 0x18, 0x24, 0x16, 0x2, 0xa, 0x2, 0x16, 0x16, 0x60, 0x1, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x2, 0x9, 0x8, 0x2, 0x4, 0x46, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x1, 0x24, 0x1b, 0xb, 0x60, 0x6c, 0x30, 0x1b, 0x12, 0x2, 0x3f, 0x2, 0x48, 0x9, 0x5, 0x60, 0x6, 0x36, 0x3, 0x4, 0x1, 0x1, 0xb, 0x6, 0x9, 0xb, 0x2, 0x6, 0x16, 0x6c, 0x1]}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x2}, {0x0, 0x1}, {0x2, 0x6}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x1}, {0x6}, {0x6, 0x2}, {0x6, 0xa}, {0x1, 0x1}, {0x4, 0x6}, {0x1, 0x4}, {0x2, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x7b, 0x6c, 0xb, 0x60, 0x36, 0x0, 0x7e, 0xb, 0x6, 0x9, 0x6, 0x18, 0x2, 0x18, 0x2, 0x60, 0x6c, 0x1, 0x1b, 0x3, 0xb, 0x24, 0x5, 0x1b, 0x24, 0x1b, 0x18, 0x30, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x4}, {0x1, 0x9}, {0x2, 0x1}, {0x7, 0xa}, {0x5, 0xa}, {0x1, 0x7}, {0x7, 0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x5}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x4}, {0x5, 0x5}, {0x4}, {0x6, 0xa}, {0x0, 0x6}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x6}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x3, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0xa}, {0x2, 0x3}, {0x2, 0x2}, {0x3, 0x9}, {0x3, 0xa}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x8}, {0x6, 0x1}, {0x2, 0x2}, {0x7, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x6, 0x9, 0x2, 0x0, 0x79db, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x7, 0x9, 0x7, 0x3ff, 0x47d, 0x588, 0x9]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x10, 0x3, 0x1, 0x200, 0x0, 0xf6d1, 0x81]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0xa}, {0x3, 0x7}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x4, 0x0, 0x60, 0x24, 0x12, 0x0, 0x24, 0x33, 0x1, 0x48, 0x0, 0x3, 0x0, 0x5, 0x2, 0xc, 0x30, 0xc, 0x3, 0x3]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x52c9, 0x6, 0xfff, 0xa11, 0xffff, 0xfffe, 0xe8b, 0x7]}}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x1f, 0x4000, 0x7, 0x0, 0x1, 0x7f, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1a, 0x1b, 0x12, 0xb, 0x6c, 0x18, 0x2, 0x30, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x7, 0x4, 0x1, 0x38, 0x9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x4, 0x3d7d2ea55b2256c5, 0xc, 0xc, 0x5, 0x1b, 0xb, 0x0, 0x48, 0x9, 0xb, 0x3, 0x9, 0x12, 0x6c, 0x48, 0x24, 0x36, 0x1, 0x48, 0x6, 0x30, 0x48, 0x2]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x6, 0x2}, {0x5, 0x9}, {0x3, 0x5}, {0x6, 0xa}, {0x4, 0x2}, {0x7}, {0x2, 0x4}, {0x5, 0xa}, {0x1, 0x3}, {0x3, 0x9}, {0x2}, {0x1, 0x8}, {0x6, 0x3}, {0x4, 0xa}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x2, 0x1}, {0x3, 0x4}, {0x7, 0x3}, {0x5, 0x4}, {0x5}, {0x6, 0x3}, {0x7}, {0x4, 0x6}, {0x1, 0xa}, {0x6, 0x2}, {0x1, 0x1}, {0x1, 0x7}, {0x3, 0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x6, 0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x3, 0x3}, {0x1, 0xa}, {0x2, 0x3}, {0x6, 0x2}, {0x1, 0x5}, {0x7, 0x2}, {0x5, 0x8}, {0x0, 0x7}, {0x2, 0x6}, {0x5, 0x6}, {0x2, 0x2}, {0x3, 0x6}, {0x2, 0x9}, {0x7, 0x3}, {0x1, 0x7}, {0x1, 0x7}]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x80, 0x7, 0x2, 0x800, 0x9, 0xdd9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0xc, 0xc, 0xc, 0x1b, 0x9, 0x18, 0x5e, 0x18, 0xc, 0x6c, 0x60, 0x18, 0x6c, 0x1b, 0x36, 0x2, 0x60, 0x6, 0x18]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x6, 0x12, 0x60, 0x12, 0x3, 0x3, 0x12, 0x15, 0x18, 0x4, 0x1b, 0x60]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x7}, {0x0, 0x4}, {0x6, 0x7}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x9}, {0x3, 0x8}, {0x5, 0x2}, {0x0, 0xa}, {0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0xa}, {0x6}, {0x0, 0x6}, {0x6, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x1, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x6}, {0x1, 0x8}, {0x4, 0x3}, {0x5, 0x2}, {0x1, 0x2}, {0x1}, {0x1, 0x4}, {0x7, 0x9}, {0x5, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x7}, {0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x4}, {0x2, 0x9}, {0x2, 0x1}, {0x5, 0x2}, {0x3, 0x9}, {0x5, 0x5}, {0x4, 0x5}, {0x7, 0x6}, {0x3, 0x5}, {0x4, 0x5}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x7}, {0x3, 0x5}, {0x1, 0x9}, {0x2, 0x7}, {0x5, 0x8}, {0x5, 0x6}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x9}, {0x1, 0x5}, {0x3, 0x9}, {0x2, 0x5}, {0x7, 0x6}, {0x1, 0x4}, {0x7, 0x2}, {0x1}, {0x6, 0x4}, {0x1, 0x6}, {}, {0x5, 0x2}, {0x5, 0x6}, {0x7, 0x1}, {0x7, 0x5}, {0x7}, {0x6, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc2c1, 0x0, 0x443, 0x3f81, 0x1ff, 0x0, 0x20, 0xac9]}}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x8010}, 0x44010)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x40)
r1 = semget$private(0x0, 0x0, 0x408)
semctl$IPC_INFO(r1, 0x4, 0x3, &(0x7f0000000700)=""/86)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x198, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x15c, 0x8, 0x0, 0x1, [{0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d494b2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fd68d0}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfdf6891}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a07a746}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a71fa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bd1f9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d8cd9f4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1567241d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75d6100b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bc2a413}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f255608}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcf60890}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78f7182d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2da9e3ab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f83be64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e8e0f34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x153516cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50e3b223}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76f0f159}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x612baccc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52bfabb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x198}, 0x1, 0x0, 0x0, 0x810}, 0x840)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000a40)={0xfffffff8, 0x3, 'client1\x00', 0x2, "7af3f6e8af0b2fcc", "989410c32c105996683d4aca594c25495ba22e1b182ab781731324ad3c09dbc0", 0x0, 0x100})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000b00)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close_range(r5, r3, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x40000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000000bc0)={0x7fff, 0x3, 0x0, 'queue1\x00', 0x9})
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r7, 0xc038943b, &(0x7f0000000d00)={0xffffffffffffffff, 0x18, '\x00', 0x0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0]})
ioctl$EXT4_IOC_MIGRATE(r4, 0x6609)

[  114.128102] audit: type=1400 audit(1749995357.433:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:49:17 executing program 4:
pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil)
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xdcde}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xf55}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r1=>r0, {0x7ff}}, './file0\x00'})
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, 0x0, 0x621, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x658}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$inet(r1, &(0x7f0000000a00)={&(0x7f0000000540)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000580)="c1859c61ac3cdb314f", 0x9}, {&(0x7f00000005c0)="1541569412e2715deefdf2cc0ffc93a3497d74ce04aeb0cf87aeef32ac7ebe9527866b4d283a2a704b244525bd0f5d0ea6b0393f0d8e85e7d6ab27a223eb4e563a9fee8331197d720426983b6002dce9fa64c81c3a0ef8d0ad648261cdaab1b5e4f5a3dfc2651aa72414f5cbf3bd9eeadb655debd791d227a9ed02dc90142972a197c5cbfd8ad066ad8d2174f6052820634a442ca66777f422b35c77837c0aed65665eeeed6de89a2724328ec842b88a4aa1db602347e48e5ba3720b8e00a93d0b2e88e8bec8bd06a8cdeab1ca7bc7432fd59a89c02f7d01c04826aaf2648ee40ed18dbbe4ef582ced1a125ca4c01e1994bfc768c73ad7f0381b89e00c45", 0xfe}, {&(0x7f00000006c0)="bbc96e57abc3c351a7", 0x9}, {&(0x7f0000000700)="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", 0xfc}, {&(0x7f0000000800)="fb06ed4958b4032bfc9f623d70420845c75d07201f5742e45f24345a3cf2d678e2ff7cca9938d477005e48c74fddbd1e0613de3b38d12447da8d4f93fdf990806a1efd37093620d8dd0632b8fa1c8af0150e6cd8f7ea937891b32e7fe1e274623408173fb608663d81f685f4b3ffe1fb198efd94cbae3ed832fee3c4f55ba6620bac879583cf8a16b0dbf8f7b06f38cd89d4f50526f3ecc8cf13309d7bee1a11bece8d30961f856904d44cc788ea1f5d839c043cb488e462d6f5f10781b89b5edae29a555ebe92ed127ecb34cab601fc03e0af0e4fa1a9c7a788f98c940cad50a7f2249cb9a65ff8847e4b5959781d7eadc8aec33d0e282d83dfb1", 0xfb}], 0x5, &(0x7f0000000980)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0x48}, 0x45)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/220, 0xdc}, {&(0x7f0000001bc0)=""/139, 0x8b}, {&(0x7f0000001c80)=""/244, 0xf4}, {&(0x7f0000001d80)=""/89, 0x59}, {&(0x7f0000001e00)=""/225, 0xe1}, {&(0x7f0000001f00)=""/97, 0x61}], 0x7, &(0x7f0000002000)=[@rights={{0x20, 0x1, 0x1, [<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}], 0x20}, 0x40000002)
readv(r3, &(0x7f00000024c0)=[{&(0x7f0000002080)=""/7, 0x7}, {&(0x7f00000020c0)=""/165, 0xa5}, {&(0x7f0000002180)=""/161, 0xa1}, {&(0x7f0000002240)=""/96, 0x60}, {&(0x7f00000022c0)=""/135, 0x87}, {&(0x7f0000002380)=""/98, 0x62}, {&(0x7f0000002400)=""/178, 0xb2}], 0x7)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), r4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000025c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000002700)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000026c0)={&(0x7f0000002600)={0xb0, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ead7c9b52fa067e0e8fe328213c97355889bce67b577e557"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c89ff5dd247b05e89c3b749ea1b217e95008cd068693c9de"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x61}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40850}, 0x80)
r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0xc0, 0x0)
fcntl$addseals(r7, 0x409, 0x8)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_BALANCE(r8, 0x5000940c, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}}, 0x4010)

13:49:17 executing program 5:
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x3, 0xffffffffffffffff, r0, 0x0, 0xffffffffffffffff, 0x4}, 0x4b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2})
msgget$private(0x0, 0x20)
mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x30}}, {@sq={'sq', 0x3d, 0xfffffffffffff0f4}}, {@sq={'sq', 0x3d, 0x4}}, {@timeout={'timeout', 0x3d, 0x20}}], [{@appraise_type}, {@smackfsroot}, {@fsname={'fsname', 0x3d, '-'}}]}})
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x2)
r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x40000)
copy_file_range(r1, &(0x7f0000000240), r2, &(0x7f00000002c0)=0x34, 0x5, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x1, 0x9}, 0x100, './file0\x00'})
renameat2(r1, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000480)='./file0\x00', 0x1)
r3 = dup2(r2, r2)
r4 = syz_open_procfs(0x0, &(0x7f0000000540)='net/mcfilter6\x00')
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f00000004c0)='}!\'(-@+\x00', &(0x7f0000000500)='./file0\x00', r4)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x4, 0x3f, 0x80, 0x4, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, 0x40, 0x700, 0x80000000, 0x97}})
pipe(&(0x7f0000000640)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000680))
ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000006c0))
syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$FIOCLEX(r5, 0x5451)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
io_cancel(0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0xff, r6, &(0x7f0000000700)="80a00ca2a7a009d21945925530901f9c0dba094f76b02d8e7affbc1d55406f8581ae2011271091ef5ffa837f201e3ea667ebd7eb86ed6376f90f9f4a08698ca0f5779355fb34d5e6527beff3f01f7b030588883ca2a3bab871570354b0a3f2031fa467bad660cb108fa31773377cd41e477a686c868b01d22b6a1f6809c212387dc8f2297bf49763c81095b7bfea3f554f66fc5c0dc8", 0x96, 0x8, 0x0, 0x1}, &(0x7f0000000800))

13:49:17 executing program 6:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x40)
r1 = socket$netlink(0x10, 0x3, 0xe)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x31060040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffc, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x120, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7ff}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x26e}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffffe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xc7, 0xa8, @random="20eb26ee0271d11405ec0672e577a92f86da091f8f1fbd3b7b60f119a36f1aa4536431bd22e497847125a9bb7553128cc441cbcafaf4b2e02381964ffcae56f23cbc341982b8ec8a8d7bca76fdc604255f656d43346332e29c3805f9aad5f7dfd5b3d5cabbd68cd8fdd950be20d8f577396bf616135ff3d079a694faf74ae9f306c2a0200cdab22f861f35cf53694b2a4fc407e7e5316c19b45a4d98181944f6134777ed68189fb96c3a3df7a2c0602763f017a8b11f757c431cf4624cb9febf578d89"}]}, 0x120}, 0x1, 0x0, 0x0, 0x4080001}, 0x44004)
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x80101)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x902000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f00000006c0)=""/230)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000800), 0x20200, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r6)
setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000840)=0x934, 0x4)
link(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0/file0\x00')
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)
syz_open_dev$mouse(&(0x7f0000000900), 0x7, 0x4000)
sendmsg$inet6(r4, &(0x7f0000000cc0)={&(0x7f0000000940)={0xa, 0x4e23, 0x8001, @remote, 0x3ff}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000980)="fff344dc9ad02ed00e5431ffcd334c3c0e612528845701235265eefdce626d9a03e84a3506d6868255d7ab6603e9ae25c26efa1ac9c2af7a1a47697961ad6dfaff87d2b01dff63045fd04233cf6fb19ab420c7c2c6c8df4dec5984", 0x5b}, {&(0x7f0000000a00)="5c5bdcf0e2858676be352c705b3c2611dbcdc3fcb24df8d7db95dbe770a5d4e0fd8dd84c879c8a29a80c41573564966dfefba3e282dd67af73a7d5e51151c8e2c328d2aac3bf581503bdff2577745bdb52dc36ca806e9bf2df1e37fa8a708e489c05ef", 0x63}, {&(0x7f0000000a80)="a057519be5cf0167f6b6fbf722b65683c038a27bf0ad9849ca82e805790a9b1b54d48a6a02e404b450dcb3f26fe777f4990f3be335925c12b5bfd993acfeb7cef20bd2e4", 0x44}, {&(0x7f0000000b00)="77fa74c03756f63d2dd0a093cef01b2ee32f5452810b61cb7153d41c080a37975a1782bdba331b028e2c191dfd6fbeef4a206f24ec1c642f5a422db2c722cb66def5a4c9", 0x44}], 0x4, &(0x7f0000000bc0)=[@dstopts_2292={{0x80, 0x29, 0x4, {0x0, 0xd, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0xbc, 0x4, [0xffffffff00000001]}}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x43, "1a801ee7e6e0a6e232eb2f6042965d28fec3669a99ce04255f49455982be90033889548f42e6f87a5f5350c429989ea9465ae795c3e7280b9f205f085406e83fecb0b1"}, @enc_lim={0x4, 0x1, 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x0, 0x7, 0x0, [@empty, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1]}}}], 0x100}, 0xc000)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r1)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x160, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x60000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6f5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffff9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fff}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000004}, 0x80)

13:49:17 executing program 7:
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r0=>0x0, @private, @initdev}, &(0x7f0000000040)=0xc)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000080)={@local, @initdev, @dev}, &(0x7f00000000c0)=0xc)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@private0, <r2=>0x0}, &(0x7f00000001c0)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x190, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000040}, 0x8d0)
flock(0xffffffffffffffff, 0xb)
syz_genetlink_get_family_id$smc(&(0x7f0000000600), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6tnl0\x00', <r6=>r3, 0x29, 0x7, 0x1, 0x81, 0x51, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000, 0x700, 0x7, 0x8}})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640), 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xc0, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000900)={0x0, 'veth0_to_bond\x00'}, 0x18)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000940))
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000800)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x42, 0x83)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xc8, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "d3c4724391bbeb8e3bd9ed14d928a0247160a267b18ec3692c5c0db0e9f6f2c0c656dd"}}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff8001}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000040}, 0x60800)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x40106614, &(0x7f0000000e00))

[  115.488781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  115.492137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  115.494039] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  115.497539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  115.499404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  115.549215] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  115.551622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  115.562786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  115.565428] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  115.566963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  115.568565] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  115.572496] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  115.574430] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  115.576291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  115.589967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  115.648471] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  115.669556] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  115.673267] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  115.675501] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  115.681946] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  115.684138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  115.686067] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  115.688497] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  115.696915] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  115.699977] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  115.700593] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.703149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.704429] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  115.705758] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  115.706567] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  115.711257] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.715298] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  115.719425] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  115.726098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  115.727934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  115.737306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.742593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.758051] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  115.786528] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  115.789522] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  117.515532] Bluetooth: hci0: command tx timeout
[  117.643002] Bluetooth: hci1: command tx timeout
[  117.643076] Bluetooth: hci2: command tx timeout
[  117.770975] Bluetooth: hci7: command tx timeout
[  117.834956] Bluetooth: hci3: command tx timeout
[  117.834995] Bluetooth: hci5: command tx timeout
[  117.898948] Bluetooth: hci4: command tx timeout
[  117.898953] Bluetooth: hci6: command tx timeout
[  119.564597] Bluetooth: hci0: command tx timeout
[  119.691901] Bluetooth: hci2: command tx timeout
[  119.692352] Bluetooth: hci1: command tx timeout
[  119.820964] Bluetooth: hci7: command tx timeout
[  119.883466] Bluetooth: hci3: command tx timeout
[  119.883916] Bluetooth: hci5: command tx timeout
[  119.946978] Bluetooth: hci6: command tx timeout
[  119.949867] Bluetooth: hci4: command tx timeout
[  121.612519] Bluetooth: hci0: command tx timeout
[  121.740014] Bluetooth: hci1: command tx timeout
[  121.740213] Bluetooth: hci2: command tx timeout
[  121.866931] Bluetooth: hci7: command tx timeout
[  121.931032] Bluetooth: hci3: command tx timeout
[  121.931918] Bluetooth: hci5: command tx timeout
[  121.995915] Bluetooth: hci4: command tx timeout
[  121.996174] Bluetooth: hci6: command tx timeout
[  123.659025] Bluetooth: hci0: command tx timeout
[  123.787155] Bluetooth: hci1: command tx timeout
[  123.787229] Bluetooth: hci2: command tx timeout
[  123.914915] Bluetooth: hci7: command tx timeout
[  123.978954] Bluetooth: hci5: command tx timeout
[  123.979374] Bluetooth: hci3: command tx timeout
[  124.042998] Bluetooth: hci4: command tx timeout
[  124.045095] Bluetooth: hci6: command tx timeout
[  177.890655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.893556] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.894963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.903622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.912583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  177.947281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  177.950514] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  177.951732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  177.959125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  177.961131] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  178.021135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  178.027062] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  178.033770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  178.039499] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  178.044034] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  178.051556] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  178.052231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  178.054468] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  178.057331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  178.061094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  178.062983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  178.074583] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  178.075453] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  178.079635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  178.091230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  178.094924] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  178.096772] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  178.113507] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  178.141905] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  178.172230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  178.278030] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  178.281485] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  178.287521] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  178.292565] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  178.298089] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  178.476930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  178.504624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  178.515333] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  178.553429] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  178.573577] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  179.978918] Bluetooth: hci1: command tx timeout
[  179.978949] Bluetooth: hci0: command tx timeout
[  180.107006] Bluetooth: hci3: command tx timeout
[  180.107030] Bluetooth: hci2: command tx timeout
[  180.172868] Bluetooth: hci4: command tx timeout
[  180.235249] Bluetooth: hci5: command tx timeout
[  180.426992] Bluetooth: hci6: command tx timeout
[  180.747030] Bluetooth: hci7: command tx timeout
[  182.026976] Bluetooth: hci0: command tx timeout
[  182.027021] Bluetooth: hci1: command tx timeout
[  182.155263] Bluetooth: hci3: command tx timeout
[  182.155689] Bluetooth: hci2: command tx timeout
[  182.218987] Bluetooth: hci4: command tx timeout
[  182.283051] Bluetooth: hci5: command tx timeout
[  182.474946] Bluetooth: hci6: command tx timeout
[  182.796871] Bluetooth: hci7: command tx timeout
[  184.076101] Bluetooth: hci0: command tx timeout
[  184.076233] Bluetooth: hci1: command tx timeout
[  184.204991] Bluetooth: hci2: command tx timeout
[  184.205421] Bluetooth: hci3: command tx timeout
[  184.266925] Bluetooth: hci4: command tx timeout
[  184.331207] Bluetooth: hci5: command tx timeout
[  184.523857] Bluetooth: hci6: command tx timeout
[  184.843073] Bluetooth: hci7: command tx timeout
[  186.122956] Bluetooth: hci0: command tx timeout
[  186.123908] Bluetooth: hci1: command tx timeout
[  186.251910] Bluetooth: hci3: command tx timeout
[  186.251970] Bluetooth: hci2: command tx timeout
[  186.315067] Bluetooth: hci4: command tx timeout
[  186.379082] Bluetooth: hci5: command tx timeout
[  186.570906] Bluetooth: hci6: command tx timeout
[  186.891111] Bluetooth: hci7: command tx timeout
[  239.916072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  239.920194] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  239.929600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  239.936445] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  239.941353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  240.033796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  240.039488] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  240.053403] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  240.064763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  240.078366] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  240.111247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  240.115312] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  240.122320] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  240.127615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  240.136428] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  240.140045] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  240.143191] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  240.154410] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  240.186716] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  240.198447] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  240.275251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  240.286542] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  240.297187] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  240.307394] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  240.310531] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  240.322713] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  240.337586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  240.347415] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  240.352715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  240.362043] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  240.365213] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  240.367341] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  240.375895] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  240.378177] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  240.383187] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  240.387281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  240.390681] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  240.413743] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  240.466448] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  240.504754] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  241.995939] Bluetooth: hci0: command tx timeout
[  242.186929] Bluetooth: hci1: command tx timeout
[  242.188512] Bluetooth: hci2: command tx timeout
[  242.315110] Bluetooth: hci3: command tx timeout
[  242.444078] Bluetooth: hci5: command tx timeout
[  242.506952] Bluetooth: hci4: command tx timeout
[  242.507549] Bluetooth: hci6: command tx timeout
[  243.082918] Bluetooth: hci7: command tx timeout
[  244.043295] Bluetooth: hci0: command tx timeout
[  244.234951] Bluetooth: hci2: command tx timeout
[  244.235434] Bluetooth: hci1: command tx timeout
[  244.363067] Bluetooth: hci3: command tx timeout
[  244.491199] Bluetooth: hci5: command tx timeout
[  244.555547] Bluetooth: hci4: command tx timeout
[  244.556364] Bluetooth: hci6: command tx timeout
[  245.132212] Bluetooth: hci7: command tx timeout
[  246.090897] Bluetooth: hci0: command tx timeout
[  246.283254] Bluetooth: hci1: command tx timeout
[  246.283747] Bluetooth: hci2: command tx timeout
[  246.411117] Bluetooth: hci3: command tx timeout
[  246.539952] Bluetooth: hci5: command tx timeout
[  246.603112] Bluetooth: hci6: command tx timeout
[  246.603606] Bluetooth: hci4: command tx timeout
[  247.178926] Bluetooth: hci7: command tx timeout
[  248.139148] Bluetooth: hci0: command tx timeout
[  248.331163] Bluetooth: hci2: command tx timeout
[  248.331604] Bluetooth: hci1: command tx timeout
[  248.458970] Bluetooth: hci3: command tx timeout
[  248.587892] Bluetooth: hci5: command tx timeout
[  248.650978] Bluetooth: hci4: command tx timeout
[  248.651411] Bluetooth: hci6: command tx timeout
[  249.226929] Bluetooth: hci7: command tx timeout
[  302.562095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  302.569460] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  302.572550] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  302.580518] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  302.590492] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.695762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  302.703709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  302.709498] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  302.727346] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  302.736257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  302.782360] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  302.792715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  302.801189] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  302.834084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  302.836326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  302.845684] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  302.855593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  302.871931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  302.888496] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  302.898379] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  302.926505] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  302.935548] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  302.941286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  302.959712] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  302.966376] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  303.044347] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  303.050448] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  303.085494] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  303.094155] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  303.100641] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  303.103458] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  303.119597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  303.149559] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  303.173632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  303.198347] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  303.325487] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  303.379082] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  303.386357] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  303.415176] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  303.422155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  304.652395] Bluetooth: hci0: command tx timeout
[  304.779972] Bluetooth: hci1: command tx timeout
[  304.907549] Bluetooth: hci2: command tx timeout
[  305.227059] Bluetooth: hci6: command tx timeout
[  305.228027] Bluetooth: hci3: command tx timeout
[  305.228401] Bluetooth: hci4: command tx timeout
[  305.354934] Bluetooth: hci5: command tx timeout
[  305.547936] Bluetooth: hci7: command tx timeout
[  306.701420] Bluetooth: hci0: command tx timeout
[  306.828895] Bluetooth: hci1: command tx timeout
[  306.956881] Bluetooth: hci2: command tx timeout
[  307.274925] Bluetooth: hci4: command tx timeout
[  307.276387] Bluetooth: hci6: command tx timeout
[  307.277217] Bluetooth: hci3: command tx timeout
[  307.403026] Bluetooth: hci5: command tx timeout
[  307.596216] Bluetooth: hci7: command tx timeout
[  308.746887] Bluetooth: hci0: command tx timeout
[  308.875062] Bluetooth: hci1: command tx timeout
[  309.003127] Bluetooth: hci2: command tx timeout
[  309.323146] Bluetooth: hci6: command tx timeout
[  309.323172] Bluetooth: hci4: command tx timeout
[  309.324175] Bluetooth: hci3: command tx timeout
[  309.451053] Bluetooth: hci5: command tx timeout
[  309.642913] Bluetooth: hci7: command tx timeout
[  310.794940] Bluetooth: hci0: command tx timeout
[  310.923992] Bluetooth: hci1: command tx timeout
[  311.051596] Bluetooth: hci2: command tx timeout
[  311.370964] Bluetooth: hci3: command tx timeout
[  311.371468] Bluetooth: hci6: command tx timeout
[  311.371935] Bluetooth: hci4: command tx timeout
[  311.499041] Bluetooth: hci5: command tx timeout
[  311.692175] Bluetooth: hci7: command tx timeout
[  365.153267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  365.161592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  365.165524] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  365.178445] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  365.187912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  365.232365] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  365.237338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  365.242471] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  365.248374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  365.252791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  365.344277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  365.349238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  365.352482] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  365.372303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  365.383580] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  365.521224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  365.524634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  365.530504] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  365.536476] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  365.550109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  365.565583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  365.568102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  365.573525] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  365.590421] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  365.604026] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  365.604627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  365.618508] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  365.623542] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  365.637112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  365.642962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  365.645013] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  365.656135] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  365.658485] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  365.659438] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  365.664748] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  365.701064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  365.709289] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  365.715279] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  365.719292] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  365.726872] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  367.243001] Bluetooth: hci0: command tx timeout
[  367.307305] Bluetooth: hci1: command tx timeout
[  367.498956] Bluetooth: hci2: command tx timeout
[  367.755959] Bluetooth: hci5: command tx timeout
[  367.756781] Bluetooth: hci4: command tx timeout
[  367.819022] Bluetooth: hci3: command tx timeout
[  367.819081] Bluetooth: hci7: command tx timeout
[  367.884192] Bluetooth: hci6: command tx timeout
[  369.291000] Bluetooth: hci0: command tx timeout
[  369.356027] Bluetooth: hci1: command tx timeout
[  369.546984] Bluetooth: hci2: command tx timeout
[  369.802977] Bluetooth: hci4: command tx timeout
[  369.803888] Bluetooth: hci5: command tx timeout
[  369.867593] Bluetooth: hci3: command tx timeout
[  369.867731] Bluetooth: hci7: command tx timeout
[  369.931039] Bluetooth: hci6: command tx timeout
[  371.339165] Bluetooth: hci0: command tx timeout
[  371.405849] Bluetooth: hci1: command tx timeout
[  371.596060] Bluetooth: hci2: command tx timeout
[  371.850933] Bluetooth: hci5: command tx timeout
[  371.851376] Bluetooth: hci4: command tx timeout
[  371.914962] Bluetooth: hci3: command tx timeout
[  371.915452] Bluetooth: hci7: command tx timeout
[  371.978903] Bluetooth: hci6: command tx timeout
[  373.387106] Bluetooth: hci0: command tx timeout
[  373.450888] Bluetooth: hci1: command tx timeout
[  373.642919] Bluetooth: hci2: command tx timeout
[  373.900487] Bluetooth: hci4: command tx timeout
[  373.900627] Bluetooth: hci5: command tx timeout
[  373.962959] Bluetooth: hci7: command tx timeout
[  373.964252] Bluetooth: hci3: command tx timeout
[  374.027124] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
13:54:26  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff88802ce3d280 RCX=0000000000000200 RDX=0000000000000008
RSI=ffff88802ce3dd28 RDI=ffff88802ce3d280 RBP=ffff88802ce3dcd8 RSP=ffff88806ce088d0
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=ffff88802ce3dd28 R13=0000000000000002 R14=0000000000000000 R15=0000000000000003
RIP=ffffffff81519024 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e562f000 00000000 00000000
LDT=0000 fffffe2c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055de4e8a14c8 CR3=000000003487d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff81353d2d RDI=fffffbfff0b83988 RBP=ffffffff85c1cc40 RSP=ffff88806cf08918
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b4ed R11=00000000000c5097
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf08a00
RIP=ffffffff8151afe2 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0ca6fd0540 00000000 00000000
GS =0000 ffff8880e572f000 00000000 00000000
LDT=0000 fffffe2c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055801b400fa8 CR3=000000000b371000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000