Warning: Permanently added '[localhost]:24068' (ECDSA) to the list of known hosts.
2025/06/21 23:38:25 fuzzer started
2025/06/21 23:38:25 dialing manager at localhost:33119
syzkaller login: [   93.735419] cgroup: Unknown subsys name 'net'
[   93.875887] cgroup: Unknown subsys name 'cpuset'
[   93.923593] cgroup: Unknown subsys name 'rlimit'
2025/06/21 23:38:38 syscalls: 2214
2025/06/21 23:38:38 code coverage: enabled
2025/06/21 23:38:38 comparison tracing: enabled
2025/06/21 23:38:38 extra coverage: enabled
2025/06/21 23:38:38 setuid sandbox: enabled
2025/06/21 23:38:38 namespace sandbox: enabled
2025/06/21 23:38:38 Android sandbox: enabled
2025/06/21 23:38:38 fault injection: enabled
2025/06/21 23:38:38 leak checking: enabled
2025/06/21 23:38:38 net packet injection: enabled
2025/06/21 23:38:38 net device setup: enabled
2025/06/21 23:38:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/21 23:38:38 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/21 23:38:38 USB emulation: enabled
2025/06/21 23:38:38 hci packet injection: enabled
2025/06/21 23:38:38 wifi device emulation: enabled
2025/06/21 23:38:38 802.15.4 emulation: enabled
2025/06/21 23:38:38 fetching corpus: 0, signal 0/0 (executing program)
2025/06/21 23:38:40 starting 8 fuzzer processes
23:38:40 executing program 0:
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x8000)
r2 = signalfd(r1, &(0x7f0000000340)={[0xfffffffffffffffe]}, 0x8)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000380)=0x5, 0x4)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f00000003c0)=0x2, 0x4)
ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f0000000400)={0x2, 0x3f, 0xd, 0x3, 0x0, 0xff, @lba=0x9, @lba=0x1})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r3=>r1, {0x2}}, './file0\x00'})
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000480))
syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r2)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r4=>r3, @in_args={0x1}}, './file0\x00'})
setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000540)=0x5, 0x4)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000580)={0x3, 0x1f, 0x3, 0x0, 0x8})
pipe(&(0x7f00000005c0)={<r5=>0xffffffffffffffff})
setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000600)={0x7d9, {{0xa, 0x4e22, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xd4}}}, 0x88)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000008c0)={{r6}, 0x0, 0x10, @unused=[0x100020000000000, 0x9, 0xf958, 0x200], @devid})

23:38:40 executing program 1:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0x80, 0x800)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000140)={'team_slave_1\x00', {0x2, 0x0, @broadcast}})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x40, 0x1)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x7, 'syzkaller0\x00', {0x727}, 0x7})
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x401}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', <r2=>0x0, 0x29, 0x1, 0x1f, 0x6, 0x24, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x1, 0x7e7, 0x93}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000580)={&(0x7f0000000340), 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xbc, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0xbc}}, 0x20000000)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x210, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x43e3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x19c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a7700b3fff8810f1d248915914d151a6925f60790edb9038096467e9e84b0d9ea3d117f1"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0xf6, 0x3, "d70aeeb1947fffa7d655c625ab4cc614ee7617aa5c6c5f9fb6e909f2b28dd3f7ae3452eec8583060ee625637d09d472732fc2bb60fedb7f3d49e840ed190756fb3491c21cba99bcdc2e40435dae0a406e104723fe70f80809c99cd8c7cbcd18c4c734a96d2715ebbcfa45d09e0d15434d8802a034ae51c4ee9292764de496a7effff92f71b23e65b3a9a53dacd2e206b83112147d51054ebed29860ef3adf90ed30bed9600d4e90ce839b2a39dc21900a6da31ef8000b48c247d1ba1df9410fb667f4ee7b3008221d3b4c8dd9f399b54a5ff7b676ea98959c6efe3c9a27832bc85176cb5fff373e57165a89a5aab0d0aa597"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "bb0d455c0340246011232b1879c9269cfe489e893c2f95b6fd16d649bb1693ba"}}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x20000841}, 0x400c000)
r5 = dup2(r1, r1)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf66b}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000a80)={0xb, 0x4, {0x50ac, @usage=0x3, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x82, @struct={0xa14, 0x80000000}, 0x2, 0x9, [0x0, 0x1, 0x7, 0x8, 0x1, 0x7f]}, {0x5, @struct={0x7, 0xf9d7}, 0x0, 0x4, 0x800, 0x8, 0x6, 0x6, 0x2, @struct={0x3, 0x6}, 0x7, 0xf2, [0xffff, 0x1, 0x9, 0x74f, 0x64]}, {0x80000001, @usage=0xfffffffffffffffd, <r6=>0x0, 0x100, 0x10000, 0x3, 0x5, 0x7, 0x0, @struct={0x5, 0x6}, 0x6, 0x100, [0x6, 0x0, 0x9f, 0x52, 0x6, 0x1]}, {0x100000000, 0x3, 0xd}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000e80)={<r7=>0x0, 0xffffffffffffff9d, 0x2, 0x1})
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000001280)={0x10, 0x4, {0x0, @struct={0x9, 0x80000000}, r6, 0x6, 0x1, 0xffffffffffff3626, 0x80000001, 0xffff, 0x0, @usage=0x4, 0x3ff, 0xad, [0x9, 0x100000001, 0x800, 0x1, 0xfffffffffffffe00, 0x1]}, {0x101, @usage=0x4, 0x0, 0x3ff, 0x7, 0x80, 0x80000000000000, 0x4, 0x2, @usage=0x80000001, 0x3f60000, 0x2, [0x5, 0x3, 0x7, 0x2, 0x0, 0xcc78]}, {0x2a, @usage=0x6, r7, 0x0, 0x0, 0x10, 0x6, 0x8, 0xa, @usage=0x1, 0x2, 0x0, [0x80, 0x5, 0x8000, 0x3d000000000000, 0xfff, 0x1]}, {0x4, 0x7, 0x7}})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)={0xc0, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x10000, 0x26}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c9f9b5521f7df9f037048a808ce7e1653b623ce56100b093"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2646f7eaed2d913c24f42837661ba60f0cb6178e0889106c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040044)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001800), 0x2000, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x10000011)

23:38:40 executing program 2:
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1}}, './file0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=<r3=>0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3)
r4 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x100000001, 0x7, &(0x7f0000000580)=[{&(0x7f00000002c0)="e485143214e82166087670ebbf333fa62ec58dc90339a69246e1af7675", 0x1d, 0x7}, {&(0x7f0000000300)="0e6534e279bbdd808798d1ac820dd89553b5a0a6b6b27bc1165b23b145235de8e970aab761d0b47828b40090218be72cffcc0bc5517be5589608d76649144076f585d4b72c17525712675ac29e69b0fb41", 0x51, 0x100000001}, {&(0x7f0000000380), 0x0, 0x9}, {&(0x7f00000003c0)="02ef0a2b49ddf1bae6fee1e88f67051f68fe23ec1eef56cb9f9d2cae124180ce5e8eb60b699a7c613dd69e26a641947cc58a619f18787068f9e55c345c8635eb23827098ed111284bdf32c3546529a8d80ff6162c53bff19cf4304eede0617918fbecc91b0c8ab35", 0x68, 0xaf}, {&(0x7f0000000440)="5ac3dc1535ef1db89e7becb2c5c659fcbdb2efd589d0f4f50a70c7ccdf633ac706cae2c777585b3f53d723e9cab8a0b10bf71ba2da366a710ad6ce9a7d930f03782e3c5f5aceb740de770f7b8a7bdb8107449f35a9ff09fe6e1db8846dc1c1bf9c50d5ad1e71b5da2e245525248e6a34ad439dcca9380ff27d24aee2f20ceb5802b9bd024981b01fe28e8842c0a3ead6b6e99de108f0580dd8f928101e6b44c972616d61b2785f10f1d911992b", 0xad, 0xffffffffffffff8e}, {&(0x7f0000000500)="614bbef8c6517f4bfa55c9f1f717d38f1cfc", 0x12, 0x4}, {&(0x7f0000000540)="bce77998eb2e4c86ec2841ecd0e4ab0034f0be8ab0fc39ffab2bbb4f817bd1e8fc0eb9f3749cd0031b261c44c7f6c875dbe97a28bd", 0x35, 0x3}], 0x2000, &(0x7f0000000640)={[{@rodir}, {@rodir}, {@utf8}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '!'}}]})
ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000680)={0x2, 0x5a, "ce83eb9c9367d74ffa5a1c2ec3ab0be495f88593a88f6e65c235689ed85c8f3b3a7c0d970cd33c4c251aa424b2dd618b95c1586a131c53a2ccb781aae325a5c64598dda5f5815deae3ee27c810c6f4244d421e55be916911d934"})
setxattr$trusted_overlay_redirect(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x8, 0x6)
stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800))
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000880)=""/75)
shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x2000)
r5 = syz_open_dev$mouse(&(0x7f0000000900), 0x1, 0x24001)
sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, 0x0, 0x100, 0x70bd2c, 0x7ff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000a80)={0x2, {0x2, 0x8000, 0xfd1, 0x4, 0x5, 0x10}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000b80)={'ip6gre0\x00', &(0x7f0000000b00)={'ip6_vti0\x00', <r7=>0x0, 0x29, 0x4, 0x6, 0x1, 0x5, @private1, @mcast2, 0x1, 0x700, 0x9, 0xffffffff}})
sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x124, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_MODES_OURS={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x6b, 0x5, "1f45bb4e7eeefc9179375b554cee5ffcb17fb8338a15a74df63d2f035ed098131afc7075017d9308d7f0293b8784d01c9fa1d0ca5285dfed778f8317551fcefa2239f70b1c607a8ab057dc0146e5354601fbca016672c15cb1659d82c0390d3c435a0cf19eed1f"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x200}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x48080)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20004801}, 0x90)

[  108.289417] audit: type=1400 audit(1750549120.365:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:38:40 executing program 3:
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x24}}, 0x8010)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x28c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_NAT_DST={0x78, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff0000}, @CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TUPLE_ORIG={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1afa7730bbd7e38f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @CTA_TUPLE_MASTER={0x1c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf5211a504ec7d005}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4884}, 0x8080)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x200a00, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x300, 0x6, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x850)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
write(r2, &(0x7f0000000640)="ad75139afde493e76614a5483f9d8912d86678e64ea448b50a6f6659d1d68cc6c7ba6a08dc34d46d2d629fb1a08c8af2a5c09ea6388747600f0e497821875b6aac019aa5c697d265e46ee46fda434e7251220f633181c514ff76bf9e95f1d0e4f9e5bd67c46198518d54c814af1b3cc129270c273b314f2ed934c28b628e9e6b65534c7a53e0a5b463aa92ef304a5fb5955983140f980e7e4df41bea9d40a183ecf8a4fd1773ac5343307c1239c3ca337a53f3ddef48b22ac7de34fc67a7f7ef4571742f0743d08eeaeec1c38b89e594f53ffddace5a9f068fcdcd237d23ca79e62248decf838abda70ac38adb1a2542d5b1c570bf", 0xf5)
r3 = syz_io_uring_complete(0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000740))
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x34}}, 0x20042884)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4400)
r4 = memfd_secret(0x0)
fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000980), &(0x7f00000009c0), 0x2, 0x1)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x40040)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000b00)={'vxcan1\x00'})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b40), 0x3c0080, 0x0)
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000b80)={0x6, 0x7, 0x2, 0xd4e5, 0x4, "90f6cdca16641ca9d2e50ab49858d9942cf85f", 0x2, 0x8})
r6 = syz_open_dev$vcsu(&(0x7f0000000bc0), 0x7, 0x301)
ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000c80)={{r6}, 0x0, 0x16, @inherit={0x80, &(0x7f0000000c00)={0x1, 0x7, 0x4, 0x10000, {0x20, 0x7, 0x6, 0x5, 0x7}, [0xfffffffffffffffa, 0x3, 0xa7c, 0x400, 0x3, 0x7f, 0x3]}}, @subvolid=0xffffffffffffff7b})

23:38:40 executing program 4:
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0xfffffffffffffffe)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x14, 0xf3, &(0x7f0000000000)="f9b1baccfb18b1e88bbf57912e5af6278b5eafc9e382672560333d5a9fc7dd62f08954cb583b9370b4423fe76538f339e69afcedea2224af7d56f808d9f669ce84710b195b0be29d000e682545b7bfec2a658f1c1a8050e9b747c085ec35fb54f20a2c97412f1298bc4f3bcda46ef661f3d0e0f73b90fae1baeb905795c44b9300021af0b4188601ec46802c46cf428d0af6d878be5c1c96536ca176260193dee3582d6c440552903b41f1bf306929e4d07f34f8840edb41544d6f93925c6ccf507b28ecdb6bc3193abd54c34b2dda2d757377db55416abae1ab240000c2631333bcf503764cb244a1bc35db6c446d53aed1ae"})
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0))
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x448}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x260, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x30}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x83, 0x3, "fe1f993545c54daae9292f04c8fbc41d5da37b3838efe42f563a98e0c659754b9aa22ba8a8fd06a66ebf7b19e5e95b69a4fe27c314912480c044f1d7474d9fb771e523e282769202a07004dee6469237df26f5902fed7682a838fd30928bd457533ae8b051aa04dca110aa7159c5b01977665dc6e8ab8c2c2e6a51d47bb2eb"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80b2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x900000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e282ae8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6bc}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfda}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa7a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcc7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdbb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x71f4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x80}, 0x24040001)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x34, 0xbe, "f17a2e996155cc9b1a0b327c818d0c418c5cb37a3e787465cf749d21f0415cbb723ca8ef2d642ea1a26194e56243f42a"}]}, 0x5c}}, 0x4008000)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0)
ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000740))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
getsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000007c0), &(0x7f0000000800)=0x4)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x121340)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000880))
io_cancel(0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3, 0x1, r5, &(0x7f00000008c0)="c33eb51463f198263af008e2b66b3eece67f2a5a98df4ffe357007e00e3ffc1333440f9d70f589bb7d7af1018f82f4b5c1cc5568d8e55ca808aee8758770687278678be54deaad30919068bfbb772927d33a5068bbd2e079fddbbcd63658543a51dae1ee5bc5985db302a09e1e274140364bf56b13191dc0c8e97a5c5cbf442834ac990e4a30f374ea2126ec276fc63396ad6383bef39d218da26780c3004ca035d2fdbadee35016a8084806c64a4eeb27deec240d8c051f895f2ea7b251cd27a4732080f7aa1e3c2782fd5e6c162686dbd5b26c159bcf09765b86ab31d86474b491be1f1a6014bcf6eda2322f37ae44d2a1a532870cdcf9ba6c57de5e", 0xfd, 0xf6c, 0x0, 0x2, r3}, &(0x7f0000000a00))
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/rcu_normal', 0x800, 0x28)
sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xdc, r2, 0x902, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd6, 0x24}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x800)
ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000c40)={0x4b, ""/75})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, <r7=>r3, {0x3}}, './file0\x00'})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000d00)={0x6, 0x1, 0x5, 0x9, 0x200}, 0x14)

23:38:40 executing program 5:
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000040)=""/220, 0xdc)
r0 = syz_open_pts(0xffffffffffffffff, 0x40)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000640)={&(0x7f0000000540)=""/220, 0xdc})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x2000, 0x0)
write$cgroup_netprio_ifpriomap(r1, &(0x7f00000006c0)={'geneve0', 0x32, 0x36}, 0xa)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000700)={0x2, {0x2, 0xc00, 0xfff, 0x7, 0x4, 0x3}})
r2 = fsmount(r1, 0x1, 0x76)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000740)={0x4, 0x10, 0x0, 0x2, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @mcast2, @private0, @mcast1, @empty, @dev={0xfe, 0x80, '\x00', 0xe}]}, 0x88)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000800)=0x4)
r3 = memfd_secret(0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x204400, 0x80)
connect$inet6(r4, &(0x7f0000000880)={0xa, 0x4e21, 0x9, @private1, 0x3e}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'sit0\x00', <r5=>0x0, 0x2f, 0x0, 0x8, 0x6508, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x80, 0x7, 0x80000000}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000a80)={'tunl0\x00', &(0x7f00000009c0)={'ip_vti0\x00', <r6=>0x0, 0x7, 0x1, 0x8, 0x3, {{0x1e, 0x4, 0x2, 0x7, 0x78, 0x67, 0x0, 0x92, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x1c, 0x27, 0x3, 0x8, [{@remote, 0x3}, {@rand_addr=0x64010100, 0x9}, {@multicast1, 0x7ff}]}, @end, @noop, @timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0x5, [{@empty}, {@empty, 0x7}, {@remote, 0x1ff}, {@local, 0x7}]}, @ssrr={0x89, 0x1f, 0x7c, [@loopback, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102, @remote, @empty, @multicast1, @local]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000ac0)={'team0\x00', <r7=>0x0})
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000bc0)={<r8=>0x0, @empty, @private}, &(0x7f0000000c00)=0xc)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000f00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x260, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3c83fc1e30eb9e96}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000f40))

23:38:40 executing program 6:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x94)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1e4, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ID={0x51, 0x3, "0243254ffd895aa0bf8a868ac2f6f20fd3315f427c6e47df760d96e759dcd50fc8fc7418de09416608e336e2285fe98849d9771489f67a15b4fc3bd14bd79d40066f78542a165764be822cdc4f"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "1a2b7d3f3176b3994b565c0d1b305b67fe63fbda3476e3730b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x14fc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ID={0x25, 0x3, "a06e20977862820722d005d953627c7197d0828d5ba670319de9231fcfd02250d8"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "8b7383dbafd36bf80fd91222972a45ba2c547f63"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "53dc0fe6fbe2d18139f57a915022e65b2c7a133f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf1a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40800}, 0x40)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r1, 0xc02, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x1, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000800)
r2 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x9, 0x80)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'geneve0\x00'})
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48884}, 0x4000890)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3f}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x6000010}, 0xc004)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c805}, 0x4)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/module/xhci_pci', 0x480400, 0x10c)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xbc18}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0xc000)
r5 = openat$cgroup_ro(r4, &(0x7f0000000dc0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x10}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20040000)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000001000)={&(0x7f0000000f00), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x68, 0x13, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x68}}, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001140)={'broute\x00', 0x0, 0x4, 0x33, [0x8, 0x6b, 0x7f, 0x3ff, 0x47f, 0x3], 0x4, &(0x7f00000010c0)=[{}, {}, {}, {}], &(0x7f0000001100)=""/51}, &(0x7f00000011c0)=0x78)

23:38:40 executing program 7:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x401, 0x20080)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044005}, 0x404c800)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x121080, 0x0)
ioctl$TCGETS(r2, 0x5401, &(0x7f00000001c0))
r3 = syz_mount_image$nfs4(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x4, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000280)="025d8feb4eff92f83b6a3cec53e52897f0bf59d23e7843233f5fb1b38dc53b91cabb73528f161dd6cf9c6e", 0x2b, 0xf0f2}, {&(0x7f00000002c0)="34e056944c90045a562c00893d5b84", 0xf, 0x2}, {&(0x7f0000000300)="106786ebd8b7a77b79a6ae1bac4bd9bd6cc6e19cbe9bde2116a278f677ae089385abc6534c2ffa02b22a9e92432faeda1865a9cf927d582dd180ee9a8fc356a185597f44ee30ddef25a74b47d11635a07128a00b87ca8221833f71fec657c373d218cb58dca8178df96a7d1ff429a9ae94c1521d011758e84ec8cf76be21a7a0e641be42270cc90b2e1df490ea589ab364d9817b4d844e26cb997b7aada493e8fc65e7c9ed5a77ed9a396e51fa2b8d654f773304146439e193aa5d3932475d1cf7c6424869f32f3b4fcc7a8e956758044508fd81513cb0bf7727b61d8eb602810b0393cfcf4ddfabe4ed4e890c26a08330384f04", 0xf4, 0x4}, {&(0x7f0000000400)="4ae59d62f47893ae829e418b837c84e7c824bee8e74529d4bbcc1dca2b7df1bcd2585a9f2b701b758d30c900", 0x2c, 0x800}, {&(0x7f0000000440)="95d23a9b5cdae286f9713a717cbbf82d9cd21864cca60924bd49e3", 0x1b, 0x2917}, {&(0x7f0000000480)="0fd34cd42141b177ac07b98de5cd0cccf6367420ab709dff11686736f55170b602167ab3fce2", 0x26, 0x80000001}], 0x1, &(0x7f0000000580)={[{'/dev/full\x00'}, {}], [{@context={'context', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', 0xee00}}, {@fsmagic}, {@obj_type={'obj_type', 0x3d, '}]'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@obj_user}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x66, 0x63, 0xd586b4d945f50d9d, 0x38, 0x65, 0x61, 0x39], 0x2d, [0x39, 0x38, 0x72007ce6ca510dbe, 0x37], 0x2d, [0x32, 0x22, 0x31, 0x65], 0x2d, [0x56, 0x65, 0x64, 0x62], 0x2d, [0x33, 0x36, 0x35, 0x66, 0x31, 0x0, 0x32, 0x39]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, ')\x00'}}]})
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000680)={0x1})
lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
chown(&(0x7f00000006c0)='./file0\x00', 0xee00, r4)
ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000007c0))
futimesat(r0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840))
sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0xe, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_ID={0x8}]}, 0x1c}}, 0x2000cc11)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000a80)={@private0, @mcast2, @loopback, 0x4, 0x80, 0xfff, 0x100, 0x6, 0x10000})
r5 = fsmount(r0, 0x1, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xdea03a633b6d9679}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x20}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x100}, 0x0)
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000c40))
ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000c80)={@msf={0x3, 0x8c, 0x20}, 0x1, 0x1})
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40, 0x0)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x1f}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)

[  109.559299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  109.567160] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  109.572628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  109.574701] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  109.582280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  109.585634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  109.588173] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  109.593965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  109.600887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  109.603772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  109.769418] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  109.774793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  109.784490] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  109.786119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  109.798446] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  109.799734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  109.815260] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  109.823420] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  109.824123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  109.830120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  109.837617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  109.837685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  109.850494] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  109.859033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  109.894660] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  109.915421] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  109.932491] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  109.939557] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  109.967445] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  109.977223] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  109.989290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  110.024712] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  110.039335] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  110.060410] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  110.062734] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  110.066338] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  110.076135] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  110.079371] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  110.092638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  110.095706] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  111.636522] Bluetooth: hci0: command tx timeout
[  111.699150] Bluetooth: hci1: command tx timeout
[  111.955242] Bluetooth: hci3: command tx timeout
[  111.955335] Bluetooth: hci2: command tx timeout
[  112.019247] Bluetooth: hci4: command tx timeout
[  112.147222] Bluetooth: hci7: command tx timeout
[  112.147960] Bluetooth: hci5: command tx timeout
[  112.210914] Bluetooth: hci6: command tx timeout
[  113.683393] Bluetooth: hci0: command tx timeout
[  113.747148] Bluetooth: hci1: command tx timeout
[  114.003117] Bluetooth: hci3: command tx timeout
[  114.003607] Bluetooth: hci2: command tx timeout
[  114.068305] Bluetooth: hci4: command tx timeout
[  114.196149] Bluetooth: hci5: command tx timeout
[  114.196578] Bluetooth: hci7: command tx timeout
[  114.259965] Bluetooth: hci6: command tx timeout
[  115.732873] Bluetooth: hci0: command tx timeout
[  115.795110] Bluetooth: hci1: command tx timeout
[  116.052899] Bluetooth: hci2: command tx timeout
[  116.053353] Bluetooth: hci3: command tx timeout
[  116.115117] Bluetooth: hci4: command tx timeout
[  116.242907] Bluetooth: hci7: command tx timeout
[  116.242942] Bluetooth: hci5: command tx timeout
[  116.307004] Bluetooth: hci6: command tx timeout
[  117.778975] Bluetooth: hci0: command tx timeout
[  117.843020] Bluetooth: hci1: command tx timeout
[  118.100033] Bluetooth: hci3: command tx timeout
[  118.100263] Bluetooth: hci2: command tx timeout
[  118.163388] Bluetooth: hci4: command tx timeout
[  118.291072] Bluetooth: hci5: command tx timeout
[  118.291095] Bluetooth: hci7: command tx timeout
[  118.355525] Bluetooth: hci6: command tx timeout
[  172.009411] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  172.014405] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  172.017918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  172.024559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  172.029136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  172.080124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  172.083241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  172.089298] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  172.096284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  172.100431] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  172.135203] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  172.147754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  172.152249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  172.157501] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  172.162662] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  172.235178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  172.249524] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  172.256591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  172.279343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  172.294168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  172.306505] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  172.314256] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  172.317582] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  172.330339] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  172.342302] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  172.355153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  172.376901] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  172.382811] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  172.385449] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  172.388113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  172.423754] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  172.445740] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  172.447491] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  172.451672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  172.459810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  172.473170] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  172.480322] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  172.481622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  172.544222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  172.556908] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  174.099022] Bluetooth: hci0: command tx timeout
[  174.163491] Bluetooth: hci1: command tx timeout
[  174.227001] Bluetooth: hci2: command tx timeout
[  174.418972] Bluetooth: hci5: command tx timeout
[  174.420064] Bluetooth: hci3: command tx timeout
[  174.546989] Bluetooth: hci4: command tx timeout
[  174.610958] Bluetooth: hci6: command tx timeout
[  174.611687] Bluetooth: hci7: command tx timeout
[  176.147069] Bluetooth: hci0: command tx timeout
[  176.211363] Bluetooth: hci1: command tx timeout
[  176.277016] Bluetooth: hci2: command tx timeout
[  176.469132] Bluetooth: hci3: command tx timeout
[  176.469551] Bluetooth: hci5: command tx timeout
[  176.594916] Bluetooth: hci4: command tx timeout
[  176.660867] Bluetooth: hci7: command tx timeout
[  176.661365] Bluetooth: hci6: command tx timeout
[  178.195585] Bluetooth: hci0: command tx timeout
[  178.259108] Bluetooth: hci1: command tx timeout
[  178.322953] Bluetooth: hci2: command tx timeout
[  178.515209] Bluetooth: hci5: command tx timeout
[  178.516228] Bluetooth: hci3: command tx timeout
[  178.642988] Bluetooth: hci4: command tx timeout
[  178.706981] Bluetooth: hci6: command tx timeout
[  178.707371] Bluetooth: hci7: command tx timeout
[  180.244870] Bluetooth: hci0: command tx timeout
[  180.308199] Bluetooth: hci1: command tx timeout
[  180.371418] Bluetooth: hci2: command tx timeout
[  180.562917] Bluetooth: hci3: command tx timeout
[  180.562990] Bluetooth: hci5: command tx timeout
[  180.692880] Bluetooth: hci4: command tx timeout
[  180.755117] Bluetooth: hci6: command tx timeout
[  180.757048] Bluetooth: hci7: command tx timeout
[  235.105726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  235.109256] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  235.111678] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  235.118149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  235.124486] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  235.186455] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.188553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.190512] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.195865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.198473] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  235.311670] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.316574] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.333269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.338209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  235.345142] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  235.348942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  235.358869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  235.363761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  235.376189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  235.378248] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  235.379362] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  235.380278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  235.381795] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  235.382847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  235.387298] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  235.388319] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  235.391106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  235.391994] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  235.447730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  235.482705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  235.518514] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  235.551143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  235.565134] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  235.570512] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  235.571719] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  235.578142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  235.683804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  235.690859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  235.701469] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  235.727236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  237.202944] Bluetooth: hci0: command tx timeout
[  237.268212] Bluetooth: hci1: command tx timeout
[  237.396000] Bluetooth: hci2: command tx timeout
[  237.459635] Bluetooth: hci5: command tx timeout
[  237.459660] Bluetooth: hci4: command tx timeout
[  237.523078] Bluetooth: hci3: command tx timeout
[  237.844295] Bluetooth: hci6: command tx timeout
[  237.844332] Bluetooth: hci7: command tx timeout
[  239.251127] Bluetooth: hci0: command tx timeout
[  239.315890] Bluetooth: hci1: command tx timeout
[  239.442965] Bluetooth: hci2: command tx timeout
[  239.507182] Bluetooth: hci5: command tx timeout
[  239.507207] Bluetooth: hci4: command tx timeout
[  239.571123] Bluetooth: hci3: command tx timeout
[  239.891142] Bluetooth: hci7: command tx timeout
[  239.891312] Bluetooth: hci6: command tx timeout
[  241.298955] Bluetooth: hci0: command tx timeout
[  241.363468] Bluetooth: hci1: command tx timeout
[  241.492958] Bluetooth: hci2: command tx timeout
[  241.555620] Bluetooth: hci4: command tx timeout
[  241.555784] Bluetooth: hci5: command tx timeout
[  241.619039] Bluetooth: hci3: command tx timeout
[  241.939060] Bluetooth: hci7: command tx timeout
[  241.940018] Bluetooth: hci6: command tx timeout
[  243.347119] Bluetooth: hci0: command tx timeout
[  243.410949] Bluetooth: hci1: command tx timeout
[  243.539163] Bluetooth: hci2: command tx timeout
[  243.602910] Bluetooth: hci5: command tx timeout
[  243.603136] Bluetooth: hci4: command tx timeout
[  243.666934] Bluetooth: hci3: command tx timeout
[  243.986941] Bluetooth: hci6: command tx timeout
[  243.987219] Bluetooth: hci7: command tx timeout
[  297.706570] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  297.712982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  297.716585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  297.727405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  297.734456] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  297.795718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  297.799446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  297.802149] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  297.803505] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  297.807422] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  297.807482] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  297.818344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  297.820211] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  297.826226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  297.833990] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  297.840707] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  297.851065] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  297.862727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  297.872901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  297.901303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  297.919966] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  297.928687] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  297.932902] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  297.968659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  297.972506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  298.450371] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  298.463619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  298.472198] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  298.483397] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  298.522306] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  299.042589] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.090559] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.107565] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.127271] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.154512] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  299.417698] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  299.440464] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  299.459310] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  299.503310] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  299.524246] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  299.795011] Bluetooth: hci0: command tx timeout
[  299.860275] Bluetooth: hci2: command tx timeout
[  299.987000] Bluetooth: hci1: command tx timeout
[  300.051154] Bluetooth: hci4: command tx timeout
[  300.242988] Bluetooth: hci3: command tx timeout
[  301.075095] Bluetooth: hci5: command tx timeout
[  301.396129] Bluetooth: hci6: command tx timeout
[  301.652863] Bluetooth: hci7: command tx timeout
[  301.843885] Bluetooth: hci0: command tx timeout
[  301.907877] Bluetooth: hci2: command tx timeout
[  302.037859] Bluetooth: hci1: command tx timeout
[  302.100183] Bluetooth: hci4: command tx timeout
[  302.291877] Bluetooth: hci3: command tx timeout
[  303.123024] Bluetooth: hci5: command tx timeout
[  303.444493] Bluetooth: hci6: command tx timeout
[  303.700225] Bluetooth: hci7: command tx timeout
[  303.892031] Bluetooth: hci0: command tx timeout
[  303.954933] Bluetooth: hci2: command tx timeout
[  304.083966] Bluetooth: hci1: command tx timeout
[  304.147061] Bluetooth: hci4: command tx timeout
[  304.340843] Bluetooth: hci3: command tx timeout
[  305.171882] Bluetooth: hci5: command tx timeout
[  305.492208] Bluetooth: hci6: command tx timeout
[  305.747895] Bluetooth: hci7: command tx timeout
[  305.938875] Bluetooth: hci0: command tx timeout
[  306.003974] Bluetooth: hci2: command tx timeout
[  306.131927] Bluetooth: hci1: command tx timeout
[  306.196122] Bluetooth: hci4: command tx timeout
[  306.389050] Bluetooth: hci3: command tx timeout
[  307.219861] Bluetooth: hci5: command tx timeout
[  307.540585] Bluetooth: hci6: command tx timeout
[  307.796255] Bluetooth: hci7: command tx timeout
[  360.038986] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  360.048531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  360.051254] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  360.061439] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  360.069744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  360.226969] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  360.229594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  360.234140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  360.240379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  360.244575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  360.373794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  360.392359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  360.407053] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  360.424237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  360.427257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  360.430623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  360.432162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  360.433347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  360.437685] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  360.440183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  360.443773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  360.468101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  360.472278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  360.481599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  360.494069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  360.505138] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  360.509271] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  360.511427] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  360.517682] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  360.522643] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  360.528143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  360.542545] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  360.549879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  360.556370] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  360.586432] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  360.594438] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  360.614770] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  360.620566] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  360.621247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  360.642906] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  362.132049] Bluetooth: hci0: command tx timeout
[  362.323897] Bluetooth: hci1: command tx timeout
[  362.515936] Bluetooth: hci2: command tx timeout
[  362.642920] Bluetooth: hci6: command tx timeout
[  362.643524] Bluetooth: hci3: command tx timeout
[  362.644290] Bluetooth: hci4: command tx timeout
[  362.706898] Bluetooth: hci7: command tx timeout
[  362.770950] Bluetooth: hci5: command tx timeout
[  364.178909] Bluetooth: hci0: command tx timeout
[  364.371145] Bluetooth: hci1: command tx timeout
[  364.563186] Bluetooth: hci2: command tx timeout
[  364.690994] Bluetooth: hci6: command tx timeout
[  364.691870] Bluetooth: hci3: command tx timeout
[  364.692123] Bluetooth: hci4: command tx timeout
[  364.755349] Bluetooth: hci7: command tx timeout
[  364.819082] Bluetooth: hci5: command tx timeout
[  366.230034] Bluetooth: hci0: command tx timeout
[  366.419184] Bluetooth: hci1: command tx timeout
[  366.610970] Bluetooth: hci2: command tx timeout
[  366.739915] Bluetooth: hci4: command tx timeout
[  366.739951] Bluetooth: hci3: command tx timeout
[  366.740361] Bluetooth: hci6: command tx timeout
[  366.803091] Bluetooth: hci7: command tx timeout
[  366.867094] Bluetooth: hci5: command tx timeout
[  368.274913] Bluetooth: hci0: command tx timeout
[  368.466936] Bluetooth: hci1: command tx timeout
[  368.659209] Bluetooth: hci2: command tx timeout
[  368.788864] Bluetooth: hci4: command tx timeout
[  368.789121] Bluetooth: hci6: command tx timeout
[  368.789320] Bluetooth: hci3: command tx timeout
[  368.851141] Bluetooth: hci7: command tx timeout
[  368.914885] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
23:43:43  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffffea0001b3e280 RCX=ffffffff819c4018 RDX=ffff88801a7f1b80
RSI=ffffffff819c4022 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff88802ce77878
R8 =0000000000000000 R9 =fffff94000367c50 R10=0000000000000000 R11=0000000000000001
R12=800000006cf8a025 R13=00007f3ad01cc000 R14=ffff88802ce77ce0 R15=0000000000000000
RIP=ffffffff81738d98 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe2c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3ad04726f4 CR3=000000001374d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f3ad048147000007f3ad0480f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff87a49a40 RBX=ffff88800a4c0000 RCX=0000000000000200 RDX=0000000000000008
RSI=ffff88800a4c0af8 RDI=ffff88800a4c0ad0 RBP=ffff88800a4c0a58 RSP=ffff88806cf08858
R8 =0000000000000004 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff88800a4c0af8 R13=b503ba001073dead R14=0000000000000000 R15=0000000000000004
RIP=ffffffff8151974f RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056142427f4c8 CR3=000000002ed39000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff00000000000000000000000000ff00
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000