Warning: Permanently added '[localhost]:22361' (ECDSA) to the list of known hosts.
2025/06/22 04:35:03 fuzzer started
2025/06/22 04:35:04 dialing manager at localhost:33119
syzkaller login: [   93.356539] cgroup: Unknown subsys name 'net'
[   93.480572] cgroup: Unknown subsys name 'cpuset'
[   93.519932] cgroup: Unknown subsys name 'rlimit'
2025/06/22 04:35:19 syscalls: 2214
2025/06/22 04:35:19 code coverage: enabled
2025/06/22 04:35:19 comparison tracing: enabled
2025/06/22 04:35:19 extra coverage: enabled
2025/06/22 04:35:19 setuid sandbox: enabled
2025/06/22 04:35:19 namespace sandbox: enabled
2025/06/22 04:35:19 Android sandbox: enabled
2025/06/22 04:35:19 fault injection: enabled
2025/06/22 04:35:19 leak checking: enabled
2025/06/22 04:35:19 net packet injection: enabled
2025/06/22 04:35:19 net device setup: enabled
2025/06/22 04:35:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/22 04:35:19 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/22 04:35:19 USB emulation: enabled
2025/06/22 04:35:19 hci packet injection: enabled
2025/06/22 04:35:19 wifi device emulation: enabled
2025/06/22 04:35:19 802.15.4 emulation: enabled
2025/06/22 04:35:19 fetching corpus: 0, signal 0/0 (executing program)
2025/06/22 04:35:21 starting 8 fuzzer processes
04:35:21 executing program 0:
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x4000010, 0xffffffffffffffff, 0x84)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000040)=0x2c)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fallocate(r0, 0x26, 0xc00, 0x0)
mmap$perf(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x200000c, 0x10, r0, 0x6)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x7a}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
getsockopt(r0, 0x5, 0x1ff, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000)
sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40040)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001340)={'\x00', 0x40, 0xff, 0x0, 0x0, 0x5})
semget$private(0x0, 0x2, 0x43e)
r1 = syz_open_procfs(0x0, &(0x7f00000013c0)='attr/sockcreate\x00')
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000001400)="eed89afd5b8b32c34a7166b01a75701d", 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001480), r0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x68, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000015c0))
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'wpan3\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x3c, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040841)

04:35:21 executing program 1:
r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0xaa, 0x60200)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10410002}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xed}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4)
fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x6, 0x2, &(0x7f0000000440)=[{&(0x7f0000000280)="9f9cf95e4ea62288a0bc198348172a99afd1e7ee89fa14e3756cc90d3e23ab06201055e797ddb7eae27fee9f869fb3485a63c85f04c042501d34fbe3c081100708ee30fdaa4b2ebf13429573ef09a405c8d078a2036cb3ecab651c3b40ceb8728e4e555f8dd15acfa7bcf4c7c545a2239dcace7755238d2baae621b7c0c7e5f9e26d885a022731f08a9303dbcfa76e7bd943d548fde0326e60420833a8fafc19d12d38b4871fa74407649c4acc04d33f642d71c353de2087911554f0677028a56ed5cf12feb5a81102d115849832313c3eca281b1827e334", 0xd8, 0x6000000}, {&(0x7f0000000380)="dc24008e7feecf66693e242aa3ac002acc0d870e0e247ed48ffa5f63a111de20cc30f57480c300405d31fed825cc81f311d511e0e1f5dd35f7a6536c7f2cc7ca44e526d2a659c0a0ac0525d4b7e9a2ac8ac146dda0ea7e595833079066d07d289948d41c96eaa0f299b882153bcd066dc19798fe16f8286978febdbff0d86b443522c30e50f1", 0x86, 0x6}], 0x0, &(0x7f0000000500)={[{@dots}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '+.'}}, {@audit}, {@hash}, {@uid_eq={'uid', 0x3d, r3}}, {@euid_eq={'euid', 0x3d, 0xee00}}]})
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f8, 0x1, 0x70bd2d, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x4014)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1)
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r5, 0x1b0f4f8e3ed36f21, 0x70bd25, 0x8, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20000, 0x43}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3d}, @NL80211_ATTR_PMKID={0x14, 0x55, "ab68b100a96837c1e6bf1fb7e139e329"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x10}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x34}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x88801)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x900, 0x0)
fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000840))
r7 = openat$incfs(r4, &(0x7f00000009c0)='.log\x00', 0x101100, 0x20)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000e40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a40)={0x3a0, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x384, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0xa}, {0x6, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x7, 0x3}, {0x0, 0x4}, {0x6, 0x6}, {0x0, 0xa}, {0x0, 0x5}, {0x3, 0x9}, {0x0, 0x5}, {0x2, 0x2}, {0x7}, {0x7, 0x7}, {0x2, 0x8}, {0x6, 0x4}, {0x6}, {0x6}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9185, 0x0, 0x81, 0x7, 0x6, 0x3, 0x9129, 0x101]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x2, 0x40, 0x77, 0x30, 0xc, 0x1, 0x2, 0xc, 0x48, 0x24, 0x36, 0xb, 0x6d, 0x1, 0x24, 0xb, 0x12, 0x16, 0x2, 0x36, 0x2, 0x18, 0xc]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x3, 0x24, 0x13, 0x1f]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0x6}, {0x4, 0xa}, {0x1, 0x6}, {0x1, 0x7}, {0x1, 0x9}, {}, {0x1}, {0x6, 0x6}, {0x4, 0x5}, {0x6, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x5}, {0x4, 0x5}, {0x4, 0x3}, {0x2, 0x4}, {0x4, 0x9}, {0x4, 0x3}, {0x3, 0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x3, 0x5}, {0x1, 0x2}, {0x0, 0x3}, {0x1}, {0x6, 0x8}, {0x7, 0x2}, {0x4, 0x6}, {0x2, 0x9}]}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd8c2, 0xb3, 0x40, 0x8, 0x2, 0x5ec1, 0x7, 0x3838]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x30, 0x2, 0x3, 0x2, 0x24, 0x2, 0x36, 0x6c, 0x24, 0x1a, 0xb, 0x30, 0x18, 0x48, 0x16, 0xc, 0x1b, 0x48, 0x30, 0xb, 0xc, 0x48, 0x3, 0x12, 0x60, 0x1b, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6a8, 0x7f, 0x7, 0x89, 0x1f, 0xffff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0x60]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x6c, 0x2, 0xb, 0x6, 0x12, 0x36, 0xc, 0x2, 0x18, 0x12]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4, 0xa}, {0x3, 0x1}, {0x4, 0x9}, {0x6}, {0x1, 0x9}, {0x3, 0x5}, {0x7, 0x7}, {0x1}, {0x6, 0x4}, {0x1, 0x5}, {0x3, 0x6}, {0x6, 0x6}, {0x2, 0x9}, {0x6, 0x5}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x9}, {0x4, 0x8}, {0x0, 0x4}, {0x5, 0x4}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x4}, {0x0, 0x4}, {0x6, 0x5}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0x3}, {0x1, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x6, 0x8}, {0x3, 0x9}, {0x3}, {0x2}, {0x6}, {0x5}, {0x3, 0x5}, {0x5}, {0x7, 0xa}, {0x0, 0xa}, {0x3, 0x6}, {0x4, 0x5}, {0x6, 0x4}, {0x7, 0x1}, {0x1, 0x5}, {0x6, 0x1}, {0x6, 0x9}, {0x0, 0x2}, {0x7, 0x7}, {0x2, 0x4}, {0x5, 0x2}, {0x1, 0x4}, {0x2}, {0x7, 0x9}, {0x1, 0x6}, {0x1}, {0x6, 0x3}, {0x1, 0xa}, {0x5, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x3, 0x1ff, 0x0, 0x49, 0x4, 0x40e9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x2, 0x2, 0x48]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff, 0x8, 0x1f, 0xfff8, 0x8, 0x1000, 0x9]}}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a6, 0x0, 0x3, 0xffff, 0x0, 0x1, 0x6, 0x9142]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x24, 0xb, 0x1b, 0x1d, 0x5, 0x5, 0x60, 0x48, 0x6, 0x4, 0x12, 0x18, 0x1, 0x19, 0xb, 0x1, 0x1b, 0x0, 0x3, 0x3e, 0x60, 0x5, 0x16, 0x60]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x18, 0x36, 0x36, 0x2, 0x6, 0x1, 0x12, 0x3, 0x6, 0x24, 0xb, 0x6c, 0x12, 0x12, 0x16, 0x1, 0x6c, 0x3]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x4}, {0x2}, {0x3, 0x8}, {}, {}, {0x1, 0x9}, {0x5}, {0x6, 0x5}, {}, {0x3, 0x5}, {0x1, 0x4}, {0x4, 0x5}, {0x6, 0x2}, {0x4, 0xa}, {0x5, 0x3}, {0x5, 0x7}, {0x6, 0x1}, {0x4, 0xa}, {0x1, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x1}, {0x3, 0x6}, {0x1, 0x8}, {0x5, 0x6}, {}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0x9}, {0x3, 0xa}, {0x3, 0x1}, {0x6, 0x4}, {0x7, 0x3}, {0x6}, {0x2, 0x3}, {0x7, 0x6}, {0x0, 0x6}, {0x7, 0x4}, {0x4, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x3}, {0x5, 0x3}, {0x6, 0x7}, {0x0, 0x9}, {0x5, 0x4}, {0x1, 0x7}, {0x5, 0xa}, {0x6, 0x4}, {0x0, 0x9}, {0x2, 0x1}, {0x4}, {0x6}, {0x4}, {0x0, 0x7}, {0x3, 0x4}, {0x2, 0x4}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x2, 0x0, 0x400, 0x8, 0x3, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x2c, 0x47, 0x9054, 0x40, 0x7ff, 0x3]}}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1f, 0x400, 0x100, 0x8001, 0x2, 0x9, 0x1]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x0, 0xa}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xfff7, 0x0, 0xb92b, 0x100, 0x200, 0x5, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x3ff, 0x4, 0x8000, 0x3, 0x5, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x3, 0x6d, 0x8, 0x3f, 0x7f00]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x1}, {0x3, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x1}, {0x1, 0x1d}, {0x3}, {0x2, 0x5}, {0x7, 0x7}, {0x4, 0x8}, {0x3, 0x4}, {0x6, 0xa}, {0x5, 0x6}, {0x1, 0x9}, {0x5, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x1}, {0x3, 0xa}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0xa}, {0x5, 0x3}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x6, 0x9}, {0x7, 0x8}, {0x0, 0x2}, {0x6, 0x2}, {0x0, 0x6}, {0x3, 0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x2, 0x8}, {0x7, 0x8}, {0x1, 0x4}, {0x5, 0x7}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0xa}, {0x0, 0x6}, {0x6, 0x4}, {0x6, 0xa}, {0x1, 0x7}, {0x5, 0xa}, {0x7, 0x5}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0xa}, {0x3, 0x8}, {0x1, 0x3}, {0x5, 0x1}, {0x2, 0x9}, {0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x4, 0x9}, {0x2, 0xa}, {0x2, 0x9}, {0x4, 0x4}, {0x4, 0x6}, {0x2, 0x2}, {0x0, 0x6}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4267, 0x9, 0x7a9, 0xe504, 0xfeff, 0x3, 0x0, 0xffff]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x3}, {0x3, 0x1}, {0x3, 0x2}, {0x3, 0x8}, {0x2, 0x4}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x4}, {0x5, 0x6}, {0x5, 0x7}, {0x4, 0x2}, {0x1, 0x7}, {0x5, 0x8}, {0x0, 0x7}, {0x7, 0x6}, {0x7, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x6, 0x4}, {0x3, 0x3}, {0x7, 0x4}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x9}, {}, {0x5, 0x9}, {0x5}, {0x4, 0x5}, {0x2, 0x7}, {0x7, 0x9}, {0x2, 0x6}, {0x7, 0x19}, {0x2, 0x7}, {0x2, 0x5}, {0x4, 0x7}, {0x2, 0x9}, {0x6, 0x8}, {0x3, 0x1}, {0x3, 0xa}, {0x2, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x3, 0x3}, {0x1, 0x2}, {0x6}, {}, {0x0, 0x8}, {0x4, 0xa}]}]}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x5d}, 0x44818)
r8 = syz_io_uring_complete(0x0)
faccessat2(r8, &(0x7f0000000e80)='./file0\x00', 0x10e, 0x200)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000f40)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x50, r9, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9b2, 0x26}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x20}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8050}, 0x4040801)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000001140)={&(0x7f0000001080), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x40, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x80}}]}, 0x40}}, 0x20000000)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3)

04:35:21 executing program 2:
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@generic={0x3, 0x8000, 0x3})
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000040))
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000140)={0x0, 0x2710}, 0x10)
r0 = open(&(0x7f0000000180)='./file0\x00', 0x40200, 0x3c0e2022f916a1d6)
io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}]}, 0x5)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x100]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffe0}, @SEG6_ATTR_SECRET={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000300)={0xa252, 0xe4})
r1 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0xfff, 0x6, &(0x7f00000007c0)=[{&(0x7f00000003c0)="488d6ed2e42dfa28f546d22854029d6c217483483f38d08ef9d73b535e817e65fed44d2322d00b5eb102ab679e342dc8651f11434ca9755bd91e2e36c1fb7e168fbecfb633433e8073f84de0c1fe7c251df45dfae2623431e34ac7cefcd1aaca5e671c215460212ebdc62ba278f47ad3e569469983ae05d737cdfbadfcdfe36fa6b9b4c8fb590343c64d893c603ff37f6b7b2f287cafb30df71eaf86ffd1378d7ed9cedd006e17e545442f08ff3756030a40aec95c8e0803034fce866ecf68c8", 0xc0, 0x9}, {&(0x7f0000000480)="9f42bbde03c42eaec0155fe7308a56c55b183082725d09753787adf6a28da18f0c795e644230359d", 0x28, 0x81}, {&(0x7f00000004c0)="9e4b5b4a0c584db634b17507f7d93456623572a0ece67b3abd16f9217a0ca09a50301ac4fc63129bf31d6213ff344adde75f557af184eeeed8156ec1f351ea75665505d5969cf9605f9096317dd618402f98449245a0a22fd56157a9f4cc384a115d8a351cefef06847e4847486160c336e04d9bd71faf1314ed00c6dfa26c9718d8aeb0e11e307c32d5ad4c7b4bd815ceb7f470318ec6c85471fed2377730a1e0bc06edc451f4699864dbc4d001edaf289085298c11e3f7105c18", 0xbb, 0xffffffffffffffff}, {&(0x7f0000000580)="c9ab06442a4c76d6a49b0134e39c51a1868d654c43034e8e0b92abd01858736db097cfdc7041bede6b6de5aeed7e5692379dbb8133ca21af330ac4f365c9ba6208e9efd9f2f58c90279d887c612a922ce926080a036924f7133a5eba8e72a94a7287aac338f913c36eb187c864510d0e4ce743b5f3ad15abda2561d88e6c7f96f16f57152da207241c0828918cfde1bcf96ee2555417a3af59ff7faf20f5951f6c589e60eabc44343cd6eef52e91e386df37b95b117a08c6888019ef599b7133ab1d5585ade762102396ea001d9ac33f4de50fe6969c4418faf6f1a6b234fceeb56bafa456872327321675f7a4992e9dc8eb4077125df65ebd", 0xf9, 0x6e2f}, {&(0x7f0000000680)="425f2d7e6cb646dd81b2414271be26da2a93930f5952a1d86cb098fe9e6571d4f3fcb7178a6496ee9766e2afceef8b4e48ec71e65b1b21f2a50b2edc9209d449000c98ffb0a122a939a9f9c3614040f2e333a356edb6a58b80b1f8199ab88ed0688b87d795db62fefd4a50ad0ea0356bd898e1434dc576e2e194d4806c565c7a3da0a3b7387bb56e52edd0c1c7270db214042140f3c3d8e330d8592cc852bc988a058daba73334d6125567360b53d4d81d01b666af487789455faba782434a554f2edc1cc5bccaf6d7b8f0eb25300c445dc35623037481606773a099", 0xdc}, {&(0x7f0000000780)="7596d00f31d64a798e33550edf7ab7decd1bfe4ec008022463b9b7db47fc90a63da71f87c868b0478c36a2a94bf1305ff35d0e", 0x33}], 0x8000, &(0x7f0000000880)={[{@fat=@check_strict}, {@dots}, {@fat=@dos1xfloppy}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_role={'obj_role', 0x3d, '$'}}, {@dont_appraise}, {@hash}]})
r2 = socket$netlink(0x10, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x8c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xbfb, 0x2f}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x2e}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x81}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x824}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x86}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
ioctl$int_out(r1, 0x2, &(0x7f0000000ac0))
setsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000b00)="a3125974e0d182c14d8c2da0c4f839d2fdf135bbb496f652dd0b855cbb8ed8ca0b941451a1802f2b87da91a56b3de8bf011b14819543affdd269639a93c75738c0d0f1e417d4f8ce8ccfa4f6002f43e0392086f1d02dc4931e7ed268d3251a6f8f13b915f270d89cdd5e0079e4a6a8c331d0b119eba8e4344bf782ff8307c1eb06dc9efbe1a2c44b8985937b4804ea0d9969af7af321efa6b37412ea8e19f170afd4d94fec4036dea61c1332f695e7463318170969305a3e08a6db35040f36e6b674f8ecc451c93814957dbfa9ec92858ea27538bcaad4fa52259a631b9439dcfd930b47e6c8621b9e201d", 0xeb)
mq_timedreceive(r0, &(0x7f0000000c00)=""/133, 0x85, 0x7ff, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000001080)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000d00)={0x31c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1516}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x50000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x21, 0x3, "f9eaf9c7c94884547836b57b83ad6c354e2668602b4fc97c05bf773cd1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "447fe0193de936218869f0b7eb04fba470fd1906c0e3b25b2ad8e92ba880ff3cc68b16d3"}}, @TIPC_NLA_NODE_ID={0x69, 0x3, "7b5c0b25babeb21f6dd6ecc4fbfd1eff83be97df26d872b3c5e8d16e044157de531fc6a00e0480b009c2eedcceca721bf578a1c97a896f53a335138e373de1f092134ae9f8b7e39ec50bfc8883c5493dcc17f27be0b1f0bd4a6f4ce515391dde31eb511053"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "76d45d4e53baa7a12e7c394245f06330699b73f98202"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "ed05ef69fa6b79610a3c51d0e572011862f430f7c4b7"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5e372a24d689f5a96c0dd0defec931c3879779ce"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x9815}, 0x800)
recvmmsg$unix(r0, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/202, 0xca}, {&(0x7f00000021c0)=""/185, 0xb9}, {&(0x7f0000002280)=""/165, 0xa5}], 0x4, &(0x7f0000002380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002540)=""/20, 0x14}, {&(0x7f0000002580)=""/105, 0x69}, {&(0x7f0000002600)=""/39, 0x27}], 0x3, &(0x7f0000002680)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000026c0)=""/134, 0x86}], 0x1}}, {{&(0x7f00000027c0), 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000002840)}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/193, 0xc1}, {&(0x7f0000003980)=""/142, 0x8e}, {&(0x7f0000003a40)=""/84, 0x54}], 0x5}}, {{&(0x7f0000003b40), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003bc0)=""/24, 0x18}, {&(0x7f0000003c00)=""/167, 0xa7}], 0x2, &(0x7f0000003d00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003dc0)=""/232, 0xe8}], 0x1, &(0x7f0000003f00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f0000007180)=[{&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/232, 0xe8}, {&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/210, 0xd2}, {&(0x7f0000007140)=""/62, 0x3e}], 0x6, &(0x7f0000007200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x7, 0x10061, &(0x7f0000007440)={0x77359400})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000007600)={&(0x7f0000007480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000075c0)={&(0x7f00000074c0)={0xe0, 0x4, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffff00}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfd19}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5a}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000007680)={'wlan1\x00', <r9=>0x0})
ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000076c0)=<r10=>0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000077c0)={&(0x7f0000007640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000007780)={&(0x7f0000007700)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r10}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0)

04:35:21 executing program 3:
syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7f, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x42040, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0xa5, @any, 0x30b}, 0xe)
preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/40, 0x28}], 0x1, 0x0, 0x9, 0x11)
r2 = getpgrp(0xffffffffffffffff)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x20003, 0xc0, 0x1c}, 0x18)
kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r1, &(0x7f0000000440)={r1, r3, 0x1})
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r1)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={0x0, <r5=>0x0}, &(0x7f0000000600)=0xc)
r6 = getgid()
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x1, r5, r6, 0x0, 0x0, 0x1, 0x800}, 0x0, 0x0, 0x5, 0xffffffff00000001, 0x633, 0x4, 0x3, 0x1, 0x8, 0x1, 0x0, r2})
wait4(r2, &(0x7f00000006c0), 0x2, &(0x7f0000000700))
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000007c0), 0x8600, 0x0)
ioctl$TIOCGSERIAL(r7, 0x541e, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/45})
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r1)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r7, &(0x7f0000000d40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b00)={0x1fc, r8, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x10}, 0x40800)

[  110.305960] audit: type=1400 audit(1750566921.400:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:35:21 executing program 4:
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{}, {r0, r1/1000+10000}})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x10100, 0x0)
r3 = semget$private(0x0, 0x3, 0x42)
semtimedop(r3, &(0x7f0000000100)=[{0x0, 0x130a, 0x800}], 0x1, &(0x7f0000000140)={0x77359400})
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc040}, 0x40800)
r4 = dup3(r2, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r5=>r4, {0xe9e}}, './file0/file0\x00'})
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000016}, 0x40)
sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x602, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x48040)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r7=>r2}, './file0/file0\x00'})
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0xf96)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r8, 0x8008f512, &(0x7f0000000680))
rt_sigtimedwait(&(0x7f00000006c0)={[0x8]}, &(0x7f0000000700), &(0x7f0000000780)={0x0, 0x989680}, 0x8)
getcwd(&(0x7f00000007c0)=""/24, 0x18)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000800)={{0xc2, 0xb7}, {0x74, 0x80}, 0xc0000000, 0x0, 0x2b})
splice(r7, &(0x7f0000000880)=0x49c5, r6, &(0x7f00000008c0)=0x5, 0x1, 0xb)
signalfd4(r2, &(0x7f0000000900)={[0x5]}, 0x8, 0x0)

04:35:21 executing program 5:
r0 = fsmount(0xffffffffffffffff, 0x1, 0x72)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1102000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4805}, 0x4)
pread64(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x6830)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r0)
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x7c, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x5b}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "bb1fdc487ec55a445a19c7379b7bde76"}, @NL80211_ATTR_PMK={0x14, 0xfe, "91422cc28e4bce8234ffdad4b3050e51"}, @NL80211_ATTR_PMK={0x14, 0xfe, "c6f6e5d0f416b83a4c2956f1abca787e"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2e6bbf409f16577295f7bb2f05cc81ec"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10000}, 0x4)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4000)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x113}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xaacf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x61000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}]}]}, 0x28}}, 0x24000040)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000015c0)={@empty, @multicast2}, 0x8)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001640), r0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000001bc0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f0000001680)={0x4e4, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x268, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3a, 0x4, "db11cbfdf09f7df244f8d9ef108e2dbbe2053d58f7bd521b330f464e50c01022f1d9af1a2a0a74d0601e2764880ff59ce25ece594c5d"}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "de658e79fa80636cb59c7435d2ddf1bff5537a89aed132af0e06b324b5de873c2adc4be2d81eadc186e134ebadcf3b0556cbb40ddde15a70c865f6af7b2f9528955552d9d93a9082e9a66ba5d8a7aab9993e7d231f2a44dcb569ed80f9f05c369b11794fcc270d979dfdfbdaa9de4a24e0d110cee839f15873db64a3594b03192778ceddd3bbea714e75758d12ac8281140cccd6020f5814322657fda3b71018079cd526b80ce788a9774bb61f4441445436b2"}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "f304fa579057d9005dccca780e2eebb17d0aff49f200345a261ba3fae1fb02f12851d4ede0cc06895434da0d68d05d4b6de7033de7164b770eb612bf8baa6a48360d1219b2868a10c54fae5845fa3bdbe2d5f6a4ed13bde07d5dfbf996c113a057a86b8eae88db44796f02ad83f1adc116feac6f48604b4982649c09155ee5ff135f1ad99552a46fab0e931113b6b34a2e421ba1f3596f84c761fa"}, @ETHTOOL_A_BITSET_VALUE={0xc6, 0x4, "f962cb856666260975ae262dfd5b9b2572bd51a4a259fef4bc4051dcee03b5ef90164cc27b988c78f0fe140604835622bf8c1d23b1844800218cdc6a8d4521b6aa6118effd4239dee79d01178d2687d4a83902fa6da72153d8ba078e1b99b601ed2a276f710d46d1c56812bea90d1378576a2e7ca1176e920730c33e932be23f3c7e70d1138697a0389efcdfa762194fb5b17270f0adacaa3fbed598781bf46f9d48a5b48cec4c89c30fbd62541f1f8602a2b41177dee0d4239ebe4c968347e48796"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0xdf, 0x4, "e96a133131bcb596b00b5aa55675b83089ef73e3c03801f9dab36448f1f1e06d0210f265a2a96ca638d413405b7aab1835bf4ef8cc40bc455bb9a192237f59dd0c614f49289cd9e1cd3649d6945efe9e74e5eada3ee587c7d1644185cde06e77cde94cd13abcb34c47da9ad9fac76ced76eb8d5b8209c3a89781b60107c846f3438f7454a12a5f3008b89ba2a5e21425b996b1dc9608719351df569faea204171de9771bb1b53195c98f3c6fdbebaeb0e2a057cd4e2af352279364773aad55f4da89704d58688289f74a82d0f7cabd2121924026bd8ce6f9e022ff"}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ad}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\':+:.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "22db33f33d96f49abc23a4be4d9782d12ac6363f42fec1a03a0eea9d6cdfc3a1d2edcd6f632e6c7c0ca36d964d786a6a1bff84ee71d7d6541eef196103fb0b7bab2b835b71b25491b76e07ad3085f4f15b99da46d4106b053db6cd12e0"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}]}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008c00)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000001c00), 0x4000, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, 0x0, 0x10, 0x4, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xde4}]}, 0x40}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000001d40)={{0x1, 0x1, 0x18, <r5=>r0, {r4}}, './file0\x00'})
copy_file_range(r5, 0x0, r4, &(0x7f0000001d80)=0x1, 0xfff, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001e40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2011011}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e80)={0xb4, r6, 0x317, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x260, 0x3f}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d7bdcd42ca3739e5dc57d1e136e67ecc44ee6f9c218410d6"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d848fa29c5501bd631d2b560ada630b68f61d4e70e22aa1a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4aef0487481450276ff6c9e01aa3eb044bb0c5c2a68aabbc"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48d9}, 0x1)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0)

04:35:21 executing program 6:
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "4f22565f5aef6734444958d9c133bdb64558632593c823c0d10d95404a8f63638d189982343ca1d9b74b9652164f77197cd03c4fdc011ff226121b4d99f6cb9b59ed8d0a72e9d333350224f37b0ba9f3303209c5be0c6827dc92c99453531c89368fff0a2a1ad123f9bda8fbbdd4936ff3e6e73796895d777aff0c3fa97ffd24f77db43e459e533c42e9bb0d52e20576125e7c09b16cc014ab4f8d2a50bf77cde401c14100e30d4bd3bd568d830f11ce9586c1e656c3c7a47a220091862730d90e70de85179949ac9ace"}, 0xce)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x40, 0x4000)
ioctl$sock_proto_private(r0, 0x89ea, &(0x7f0000000140)="59828c4e1bd8a8548f2006a0abc87029855d5fb3e4c2dad1c6828ab2df06fd25f1951a67ac9fdfa7d428ac90619987b66eb8b8e44f68b3b2bbeb708ad8cfa4c592b7c6aa8c")
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x9}}, './file0\x00'})
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000200)=0x1f, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x1, 0x0, r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, &(0x7f0000000400)='./file0\x00', 0x100, 0x6000, 0x1}, 0x1)
mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@dfltuid={'dfltuid', 0x3d, r2}}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}]}})
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000500))
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x89284306}, 0xc, &(0x7f00000009c0)={&(0x7f0000000580)={0x430, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "ab6c11202d34e5bc6e92e8dbd21a7bae80658812"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "ec5e0912a9b487bc028df0939095d935bc69a4ed06786a8d480de8dea1b0"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "057d130aef547ab9327edbe31b3db0bbf8da2d01"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x25, 0x3, "5a405e1a7829a4c1ae8e174e6a4492b151f8dc3fd3a40ad55edfa512c8a92e4c98"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x446}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "a4a99ffab80bddd2ad14a4d1f55c4690e56adf9784f3e3a9c8a14f"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "f83420e862feb2eef0a204641d13a7fcb5d175a87fc3731fa6c0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0x6a, 0x3, "2d848fc858e4badcf0a545ce2e680961288c3b3025460b6851414492b4cc8faf7cd78934d30ca416b312478062c0f047165310b92d574cd1ec1a9729c187f5407d12d13046e553456ea45314ad275ce01a445ba866399c877eea7bd3167fac523bb77fb51441"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "aa961971f4b529f975c7c6c666e05eda7efae6e5567e7e03bd11a4bcc280b6a56123ddec"}}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x824}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff05d1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6492}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x430}, 0x1, 0x0, 0x0, 0x408c1}, 0x4000)
ppoll(&(0x7f0000000a40)=[{r0, 0x28}, {r0, 0x2000}], 0x2, &(0x7f0000000a80)={0x0, 0x3938700}, &(0x7f0000000ac0)={[0x5]}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000b00)={{0x1, 0x1, 0x18, <r3=>r1, {0x5}}, './file0\x00'})
r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000b40)='./binderfs/binder-control\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000b80)={{0x1, 0x1, 0x18, <r5=>r4, {0x4}}, '\x00'})
r6 = accept4$packet(r3, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c00)=0x14, 0x80000)
ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000c40)={{r5}, {@void, @max}})
r7 = syz_open_dev$vcsu(&(0x7f0000000c80), 0xf5b, 0x4800)
sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x31d}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6cdf5879}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x44050)

04:35:21 executing program 7:
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000000)=""/220)
recvmmsg(0xffffffffffffffff, &(0x7f0000006f40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000180)=""/53, 0x35}, {&(0x7f00000001c0)=""/203, 0xcb}], 0x3, &(0x7f0000000300)=""/249, 0xf9}}, {{&(0x7f0000000400)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000480)=""/89, 0x59}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000540)=""/104, 0x68}, {&(0x7f00000005c0)=""/153, 0x99}, {&(0x7f0000000680)=""/5, 0x5}], 0x5, &(0x7f0000000740)=""/189, 0xbd}, 0x8001}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000800)=""/65, 0x41}, {&(0x7f0000000880)=""/73, 0x49}, {&(0x7f0000000900)=""/179, 0xb3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/71, 0x47}], 0x6, &(0x7f0000002ac0)=""/11, 0xb}, 0x7fff}, {{&(0x7f0000002b00)=@hci, 0x80, &(0x7f0000002b80), 0x0, &(0x7f0000002bc0)=""/250, 0xfa}, 0xd0}, {{&(0x7f0000002cc0)=@nfc, 0x80, &(0x7f0000003e80)=[{&(0x7f0000002d40)=""/127, 0x7f}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/172, 0xac}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000003ec0)=""/15, 0xf}, {&(0x7f0000003f00)=""/141, 0x8d}, {&(0x7f0000003fc0)=""/20, 0x14}, {&(0x7f0000004000)=""/236, 0xec}, {&(0x7f0000004100)=""/181, 0xb5}, {&(0x7f00000041c0)=""/236, 0xec}], 0x6, &(0x7f0000004340)=""/229, 0xe5}, 0x50000000}, {{&(0x7f0000004440)=@pppol2tpin6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000005ac0)=[{&(0x7f00000044c0)}, {&(0x7f0000004500)=""/203, 0xcb}, {&(0x7f0000004600)=""/220, 0xdc}, {&(0x7f0000004700)=""/229, 0xe5}, {&(0x7f0000004800)=""/210, 0xd2}, {&(0x7f0000004900)=""/198, 0xc6}, {&(0x7f0000004a00)=""/98, 0x62}, {&(0x7f0000004a80)=""/48, 0x30}, {&(0x7f0000004ac0)=""/4096, 0x1000}], 0x9, &(0x7f0000005b80)=""/224, 0xe0}, 0x2}, {{&(0x7f0000005c80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000006e80)=[{&(0x7f0000005d00)=""/52, 0x34}, {&(0x7f0000005d40)=""/60, 0x3c}, {&(0x7f0000005d80)=""/152, 0x98}, {&(0x7f0000005e40)=""/4096, 0x1000}, {&(0x7f0000006e40)=""/46, 0x2e}], 0x5, &(0x7f0000006f00)=""/50, 0x32}, 0x3}], 0x8, 0x2, &(0x7f0000007140)={0x77359400})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000007180)={'icmp6\x00'}, &(0x7f00000071c0)=0x1e)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000007200)='./file0\x00', &(0x7f0000007240)={0x40c000, 0x10, 0x8}, 0x18)
ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000007280)=""/72)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000007300)={@desc={0x1, 0x0, @desc4}})
getdents64(r1, &(0x7f0000007380)=""/92, 0x5c)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x1010, r1, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f0000007440)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000007400)={0x0, 0x989680}}, 0x4)
ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000007480)=""/218)
sendmsg$netlink(r1, &(0x7f0000007640)={0x0, 0x0, &(0x7f00000075c0)=[{&(0x7f0000007580)={0x14, 0x34, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x4, 0x31}]}, 0x14}], 0x1, &(0x7f0000007600)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000}, 0x800)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$addseals(r0, 0x409, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000007680), 0x0, 0x0)
sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000007b80)={&(0x7f00000076c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000007b40)={&(0x7f0000007700)={0x430, 0x3f3, 0x300, 0x70bd29, 0x25dfdbfe, {0x2, 0x1, 0x29, [0x5, 0x1ff80, 0x0, 0xa8, 0x4, 0x8, 0xa0000000, 0x1, 0x4, 0xffff, 0x0, 0x2, 0xffffff7f, 0x0, 0x1000, 0x5, 0x9, 0x7fffffff, 0x80000000, 0x21, 0x2, 0x2, 0x20, 0x401, 0x80, 0x80000000, 0x9b6, 0x3, 0x5, 0x0, 0x3, 0x7fffffff, 0xc, 0x101, 0x0, 0x7, 0x8, 0x7, 0x20, 0x7f, 0x4, 0x2, 0x2180000, 0x0, 0x41, 0x4, 0x80000001, 0x800, 0x7, 0x2, 0x72dc, 0x1ff, 0xfffffff8, 0x7, 0x1f, 0x1f, 0x48000, 0x1, 0x3f, 0xb771, 0x1, 0x81, 0x8, 0x5], [0x7, 0x7fff, 0x40, 0x9, 0x4, 0x9, 0x4, 0xffffffff, 0x9, 0x8, 0x2, 0x20, 0x0, 0x6, 0x8000, 0x0, 0x697d30f1, 0x30d8, 0x401, 0x6, 0x6, 0x10000, 0x0, 0xdf2e, 0x40, 0x14dd, 0x1, 0x7, 0x800, 0x7, 0xffff7ef0, 0x6, 0x0, 0x400, 0x6e, 0x0, 0x3, 0x7fffffff, 0xfc, 0xffffff7f, 0x2, 0x401, 0xe2, 0x0, 0x6, 0x7, 0x9, 0x5, 0x3, 0x21, 0xce3, 0x7, 0x4, 0x35e, 0x84, 0x9, 0xef9, 0x2, 0x3, 0x22f37c87, 0x40, 0x0, 0xffffffec, 0x100], [0x1, 0x556, 0x352, 0x6, 0x0, 0xe4d, 0x3, 0x81, 0x101, 0x4f8, 0x8, 0x401, 0x5, 0x6, 0x80, 0x10001, 0x1f, 0x380, 0x1, 0x9, 0x32fd0902, 0x400, 0x100, 0xffffffff, 0x5, 0x2, 0x0, 0x2, 0x7, 0x90, 0x2, 0x80000001, 0x6, 0x0, 0x2853, 0x1f, 0x2, 0x9, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x7fffffff, 0x0, 0x80000000, 0x3, 0xfffffd1c, 0x0, 0xff, 0x1, 0xffff, 0x101, 0x81, 0x200, 0x2, 0x80000000, 0x7, 0x80, 0x5, 0x200, 0x2, 0x4], [0x7ff, 0x6, 0x7f, 0x8c, 0x4, 0x1, 0x1f, 0x0, 0x5, 0x40, 0x9, 0x2, 0x8, 0x82f3, 0xffffffe1, 0xfffffc00, 0x1, 0x7, 0xffffffff, 0x1, 0x6, 0x2, 0x3, 0x401, 0x56776e3c, 0x7fffffff, 0x8, 0x3, 0x100, 0x7, 0x4, 0x8, 0x600000, 0x7, 0x1, 0x1000, 0x100, 0x6, 0x2d6, 0x9, 0x7, 0x7, 0x1f, 0xbcf4, 0x615c, 0x3f, 0x401, 0x3, 0x3, 0xffffffff, 0x10001, 0x9, 0x1f, 0x8000, 0x80000001, 0x8, 0x7649, 0x873, 0x1, 0x0, 0x400, 0x2c11e753, 0x40, 0x81], 0xd, ['icmp6\x00', '\x00', 'icmp6\x00']}, ["", "", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x4090}, 0x4000801)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000007bc0), 0x0, 0x0)
statx(r4, &(0x7f0000007c00)='./file0\x00', 0x0, 0x4, &(0x7f0000007c40))
r5 = syz_mount_image$tmpfs(&(0x7f0000007dc0), &(0x7f0000007e00)='./file0\x00', 0x0, 0x3, &(0x7f0000007fc0)=[{&(0x7f0000007e40)="a1980a7e6ce11915f3966fb7a0bad388f57ecb", 0x13, 0xffff}, {&(0x7f0000007e80)="6f3c45ab2712a526d9e367ab601003cef7ddf0a19be3b3258d9c8d7f0be2ba8edf9bf1e3c541f7ed40e99558b442a2df637e31430ff04c10de10edbb5c750c0d783b7b50de849e8da0043ab8fcd9f55cae475afb6566dc60d5ddb03334986c59dabea5e32cd2603c2f7da3816e305832978b61abcbf2", 0x76, 0x91}, {&(0x7f0000007f00)="d39724f85304cc2ae33a81e11018dae6392b6bbd2dc875e51e052328d12b112f85891f8f05e53f6e3162b29a018c17dc1587fe0195c53507bb7108663f4f1002d5cea0c775c10931163865729bb7cfd815a478a899453c64b4879e03ddb21bd466c050303f1cfa38e1a25fef37433f699d698a8a5243b88f97063f6de83a59a42e7a6ecad5d48450ebf6d7a55005c6f0bb62473d5701048765e46bcd8d1431a9ff475b9db39860b70c4fe804c3ef46294a757e487d306fc5be868bd9bc50556d", 0xc0}], 0x80000, &(0x7f0000008040)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x2f, 0x2c, 0x3a, 0x35, 0x33, 0x2d, 0x30]}}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}], [{@obj_user={'obj_user', 0x3d, '\x85\xba\xa1t\xf0\xcb\x11B'}}, {@permit_directio}, {@audit}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, 'icmp6\x00'}}, {@pcr={'pcr', 0x3d, 0x33}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000008100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000007d40)="15f2463301927aebcd0db24bc109e71fb572290aa86e63d309342e04c9ae31ca849db113f48e6a163fbe4c1a25851857cfa4024d5557494cd4e8ab9fd845290bb546841bef74196999cf030dae30ff505c1118f02ddec0c446bba7f945a7", 0x5e, r5}, 0x68)
ioctl$int_in(r3, 0x5452, &(0x7f0000008180)=0x5)

[  111.692349] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  111.696856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  111.702132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  111.712672] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  111.717113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  111.898206] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  111.903045] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  111.905548] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  111.910963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  111.916067] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.919084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  111.934950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  111.942166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.973036] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.010261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.024844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  112.029140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  112.032535] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  112.035795] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.045715] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  112.049534] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  112.057375] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.073068] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.077970] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.094719] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.106276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.117729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.129851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.148897] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  112.151187] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.154929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.162635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.176119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.178934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.187987] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.203480] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.212900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.241979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.271915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.288361] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  113.775728] Bluetooth: hci0: command tx timeout
[  113.968311] Bluetooth: hci1: command tx timeout
[  114.159160] Bluetooth: hci7: command tx timeout
[  114.159192] Bluetooth: hci2: command tx timeout
[  114.286714] Bluetooth: hci6: command tx timeout
[  114.287346] Bluetooth: hci3: command tx timeout
[  114.350491] Bluetooth: hci5: command tx timeout
[  114.351511] Bluetooth: hci4: command tx timeout
[  115.822697] Bluetooth: hci0: command tx timeout
[  116.015151] Bluetooth: hci1: command tx timeout
[  116.207495] Bluetooth: hci7: command tx timeout
[  116.207549] Bluetooth: hci2: command tx timeout
[  116.335552] Bluetooth: hci3: command tx timeout
[  116.335594] Bluetooth: hci6: command tx timeout
[  116.398892] Bluetooth: hci4: command tx timeout
[  116.398925] Bluetooth: hci5: command tx timeout
[  117.870899] Bluetooth: hci0: command tx timeout
[  118.062548] Bluetooth: hci1: command tx timeout
[  118.256591] Bluetooth: hci7: command tx timeout
[  118.256968] Bluetooth: hci2: command tx timeout
[  118.382972] Bluetooth: hci6: command tx timeout
[  118.383476] Bluetooth: hci3: command tx timeout
[  118.447107] Bluetooth: hci5: command tx timeout
[  118.447127] Bluetooth: hci4: command tx timeout
[  119.919497] Bluetooth: hci0: command tx timeout
[  120.112467] Bluetooth: hci1: command tx timeout
[  120.302532] Bluetooth: hci7: command tx timeout
[  120.302994] Bluetooth: hci2: command tx timeout
[  120.430707] Bluetooth: hci6: command tx timeout
[  120.430807] Bluetooth: hci3: command tx timeout
[  120.495564] Bluetooth: hci5: command tx timeout
[  120.495636] Bluetooth: hci4: command tx timeout
[  174.563104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  174.570089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  174.572762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  174.593197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  174.597538] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  174.802648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  174.803734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  174.810317] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  174.818256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  174.819809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  174.827674] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  174.835965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.837241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  174.839875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  174.839894] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.845810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  174.848307] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  174.850088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  174.853223] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  174.864917] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  174.930383] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  174.934011] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  174.936213] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  174.941943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  174.949924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  175.041539] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  175.048311] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  175.051358] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  175.059941] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  175.064036] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  175.109918] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  175.146113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  175.146967] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  175.154938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  175.172515] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  175.174122] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  175.181483] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  175.188815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  175.195673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  175.206872] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.686571] Bluetooth: hci0: command tx timeout
[  176.879954] Bluetooth: hci2: command tx timeout
[  176.942738] Bluetooth: hci3: command tx timeout
[  176.943949] Bluetooth: hci1: command tx timeout
[  177.006666] Bluetooth: hci4: command tx timeout
[  177.134694] Bluetooth: hci6: command tx timeout
[  177.264573] Bluetooth: hci7: command tx timeout
[  177.326590] Bluetooth: hci5: command tx timeout
[  178.734732] Bluetooth: hci0: command tx timeout
[  178.926918] Bluetooth: hci2: command tx timeout
[  178.990569] Bluetooth: hci1: command tx timeout
[  178.991143] Bluetooth: hci3: command tx timeout
[  179.055856] Bluetooth: hci4: command tx timeout
[  179.183639] Bluetooth: hci6: command tx timeout
[  179.311656] Bluetooth: hci7: command tx timeout
[  179.374516] Bluetooth: hci5: command tx timeout
[  180.783476] Bluetooth: hci0: command tx timeout
[  180.975519] Bluetooth: hci2: command tx timeout
[  181.039702] Bluetooth: hci3: command tx timeout
[  181.040183] Bluetooth: hci1: command tx timeout
[  181.103851] Bluetooth: hci4: command tx timeout
[  181.232253] Bluetooth: hci6: command tx timeout
[  181.360881] Bluetooth: hci7: command tx timeout
[  181.423719] Bluetooth: hci5: command tx timeout
[  182.831702] Bluetooth: hci0: command tx timeout
[  183.022595] Bluetooth: hci2: command tx timeout
[  183.086843] Bluetooth: hci1: command tx timeout
[  183.087320] Bluetooth: hci3: command tx timeout
[  183.151526] Bluetooth: hci4: command tx timeout
[  183.279773] Bluetooth: hci6: command tx timeout
[  183.407891] Bluetooth: hci7: command tx timeout
[  183.470504] Bluetooth: hci5: command tx timeout
[  236.930117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  236.935643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  236.936930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  236.940752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  236.942386] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.064323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  237.087328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  237.090870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  237.114790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  237.138934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  237.149103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  237.153336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  237.157967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  237.167563] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  237.176634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  237.267388] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  237.277702] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  237.310893] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  237.313240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  237.315566] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  237.358031] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  237.361147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  237.380914] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  237.386264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  237.398908] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  237.430265] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  237.448776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  237.454320] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  237.464954] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  237.472649] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  237.480265] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  237.508007] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  237.508824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  237.513585] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  237.557029] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  237.689141] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  237.728652] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  237.742057] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  237.760633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  237.779894] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  238.958617] Bluetooth: hci0: command tx timeout
[  239.215668] Bluetooth: hci1: command tx timeout
[  239.280448] Bluetooth: hci2: command tx timeout
[  239.470506] Bluetooth: hci3: command tx timeout
[  239.598600] Bluetooth: hci4: command tx timeout
[  239.598655] Bluetooth: hci6: command tx timeout
[  239.662521] Bluetooth: hci5: command tx timeout
[  239.919613] Bluetooth: hci7: command tx timeout
[  241.007461] Bluetooth: hci0: command tx timeout
[  241.263616] Bluetooth: hci1: command tx timeout
[  241.328103] Bluetooth: hci2: command tx timeout
[  241.520450] Bluetooth: hci3: command tx timeout
[  241.646652] Bluetooth: hci4: command tx timeout
[  241.646702] Bluetooth: hci6: command tx timeout
[  241.711853] Bluetooth: hci5: command tx timeout
[  241.966488] Bluetooth: hci7: command tx timeout
[  243.056433] Bluetooth: hci0: command tx timeout
[  243.310797] Bluetooth: hci1: command tx timeout
[  243.374834] Bluetooth: hci2: command tx timeout
[  243.568475] Bluetooth: hci3: command tx timeout
[  243.694522] Bluetooth: hci6: command tx timeout
[  243.694665] Bluetooth: hci4: command tx timeout
[  243.759446] Bluetooth: hci5: command tx timeout
[  244.014633] Bluetooth: hci7: command tx timeout
[  245.102815] Bluetooth: hci0: command tx timeout
[  245.358523] Bluetooth: hci1: command tx timeout
[  245.422498] Bluetooth: hci2: command tx timeout
[  245.614792] Bluetooth: hci3: command tx timeout
[  245.742900] Bluetooth: hci4: command tx timeout
[  245.743503] Bluetooth: hci6: command tx timeout
[  245.806529] Bluetooth: hci5: command tx timeout
[  246.062468] Bluetooth: hci7: command tx timeout
[  299.711360] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  299.716625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  299.720101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.728589] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.732824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.863717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  299.866949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  299.875013] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  299.883905] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  299.890933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  299.957467] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  299.967002] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  299.984095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  299.991301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  299.995767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  300.061067] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  300.063667] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  300.073872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  300.079099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  300.082899] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.175584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  300.196289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  300.210275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  300.251993] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  300.287281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  300.292191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  300.310558] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  300.311809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  300.325895] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  300.360731] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  300.361153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  300.410073] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  300.412270] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  300.415911] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  300.418010] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  300.420462] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  300.425167] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  300.428237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  300.507364] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  300.552963] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  301.807115] Bluetooth: hci0: command tx timeout
[  301.934510] Bluetooth: hci1: command tx timeout
[  302.062533] Bluetooth: hci2: command tx timeout
[  302.127516] Bluetooth: hci3: command tx timeout
[  302.382498] Bluetooth: hci4: command tx timeout
[  302.447087] Bluetooth: hci5: command tx timeout
[  302.510764] Bluetooth: hci6: command tx timeout
[  302.638509] Bluetooth: hci7: command tx timeout
[  303.856504] Bluetooth: hci0: command tx timeout
[  303.984462] Bluetooth: hci1: command tx timeout
[  304.110605] Bluetooth: hci2: command tx timeout
[  304.174508] Bluetooth: hci3: command tx timeout
[  304.430674] Bluetooth: hci4: command tx timeout
[  304.494489] Bluetooth: hci5: command tx timeout
[  304.558611] Bluetooth: hci6: command tx timeout
[  304.686676] Bluetooth: hci7: command tx timeout
[  305.903767] Bluetooth: hci0: command tx timeout
[  306.031519] Bluetooth: hci1: command tx timeout
[  306.159982] Bluetooth: hci2: command tx timeout
[  306.223640] Bluetooth: hci3: command tx timeout
[  306.479520] Bluetooth: hci4: command tx timeout
[  306.543649] Bluetooth: hci5: command tx timeout
[  306.608166] Bluetooth: hci6: command tx timeout
[  306.735609] Bluetooth: hci7: command tx timeout
[  307.950986] Bluetooth: hci0: command tx timeout
[  308.078517] Bluetooth: hci1: command tx timeout
[  308.208443] Bluetooth: hci2: command tx timeout
[  308.270478] Bluetooth: hci3: command tx timeout
[  308.526869] Bluetooth: hci4: command tx timeout
[  308.591492] Bluetooth: hci5: command tx timeout
[  308.654716] Bluetooth: hci6: command tx timeout
[  308.785040] Bluetooth: hci7: command tx timeout
[  362.311546] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  362.317252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  362.320101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  362.328228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  362.332882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  362.502292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.508348] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.517115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  362.528055] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  362.532929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.599325] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.606963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.612144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.618914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.626915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.664049] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.675754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.701132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.705007] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  362.728733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.737882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  362.758464] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  362.761844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  362.766031] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.767901] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  362.784986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.787814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  362.792720] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  362.796337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.799881] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  362.805990] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  362.808358] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  362.823882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  362.832989] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  362.836163] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  362.840180] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  362.856747] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  362.858970] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  362.872844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  362.887261] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  364.398671] Bluetooth: hci0: command tx timeout
[  364.590492] Bluetooth: hci1: command tx timeout
[  364.718489] Bluetooth: hci2: command tx timeout
[  364.848491] Bluetooth: hci3: command tx timeout
[  364.911554] Bluetooth: hci4: command tx timeout
[  364.912096] Bluetooth: hci5: command tx timeout
[  364.975827] Bluetooth: hci6: command tx timeout
[  365.038592] Bluetooth: hci7: command tx timeout
[  366.446723] Bluetooth: hci0: command tx timeout
[  366.639585] Bluetooth: hci1: command tx timeout
[  366.767579] Bluetooth: hci2: command tx timeout
[  366.895442] Bluetooth: hci3: command tx timeout
[  366.958519] Bluetooth: hci4: command tx timeout
[  366.958929] Bluetooth: hci5: command tx timeout
[  367.022508] Bluetooth: hci6: command tx timeout
[  367.087448] Bluetooth: hci7: command tx timeout
[  368.494516] Bluetooth: hci0: command tx timeout
[  368.687774] Bluetooth: hci1: command tx timeout
[  368.814484] Bluetooth: hci2: command tx timeout
[  368.942452] Bluetooth: hci3: command tx timeout
[  369.006816] Bluetooth: hci5: command tx timeout
[  369.007241] Bluetooth: hci4: command tx timeout
[  369.071797] Bluetooth: hci6: command tx timeout
[  369.135629] Bluetooth: hci7: command tx timeout
[  370.542684] Bluetooth: hci0: command tx timeout
[  370.734482] Bluetooth: hci1: command tx timeout
[  370.862457] Bluetooth: hci2: command tx timeout
[  370.990636] Bluetooth: hci3: command tx timeout
[  371.055673] Bluetooth: hci4: command tx timeout
[  371.056129] Bluetooth: hci5: command tx timeout
[  371.119529] Bluetooth: hci6: command tx timeout
[  371.183441] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
04:40:22  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81a15ad4 RDX=ffff88802dd4d280
RSI=ffffffff81a15ae1 RDI=ffffea0000227408 RBP=ffffea0000227400 RSP=ffff88802f837aa0
R8 =00007fc067a56000 R9 =fffff94000044e80 R10=0000000000000001 R11=0000000000000001
R12=ffffea0000227400 R13=00000000000089d0 R14=0000000000007817 R15=ffffea0000227418
RIP=ffffffff81a15ae6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fc0677e2540 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc067a56000 CR3=0000000034a57000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f
XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff88806cf36f00 RCX=ffffffff81829a3e RDX=1ffffffff0b0458d
RSI=ffffffff81615f11 RDI=ffffffff85822c68 RBP=ffff88806cf08d98 RSP=ffff88806cf08d50
R8 =0000000000000000 R9 =fffffbfff0c828ca R10=0000000000000000 R11=000000000009374d
R12=ffff88806cf36f00 R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff812e9484 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0b1c2a8540 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0b1c379710 CR3=00000000323cc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff
XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f
XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000