Warning: Permanently added '[localhost]:45469' (ECDSA) to the list of known hosts.
2025/06/25 23:53:44 fuzzer started
2025/06/25 23:53:45 dialing manager at localhost:41253
syzkaller login: [  100.002592] cgroup: Unknown subsys name 'net'
[  100.144537] cgroup: Unknown subsys name 'cpuset'
[  100.189354] cgroup: Unknown subsys name 'rlimit'
2025/06/25 23:54:02 syscalls: 205
2025/06/25 23:54:02 code coverage: enabled
2025/06/25 23:54:02 comparison tracing: enabled
2025/06/25 23:54:02 extra coverage: enabled
2025/06/25 23:54:02 setuid sandbox: enabled
2025/06/25 23:54:02 namespace sandbox: enabled
2025/06/25 23:54:02 Android sandbox: enabled
2025/06/25 23:54:02 fault injection: enabled
2025/06/25 23:54:02 leak checking: enabled
2025/06/25 23:54:02 net packet injection: enabled
2025/06/25 23:54:02 net device setup: enabled
2025/06/25 23:54:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/25 23:54:02 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/25 23:54:02 USB emulation: enabled
2025/06/25 23:54:02 hci packet injection: enabled
2025/06/25 23:54:02 wifi device emulation: enabled
2025/06/25 23:54:02 802.15.4 emulation: enabled
2025/06/25 23:54:02 fetching corpus: 0, signal 0/0 (executing program)
2025/06/25 23:54:04 starting 8 fuzzer processes
23:54:04 executing program 0:
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x80000000, 0x4000)
openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000180)='\x00', &(0x7f00000001c0)='./file0\x00', r0)
mkdirat$cgroup(r1, &(0x7f0000000200)='syz0\x00', 0x1ff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)={0x0, <r2=>0x0})
clone3(&(0x7f0000000700)={0xc010400, &(0x7f0000000480), &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500), {0x5}, &(0x7f0000000540)=""/202, 0xca, &(0x7f0000000640)=""/76, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0xa, {r1}}, 0x58)
clone3(&(0x7f00000007c0)={0x13803200, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x3a}, &(0x7f0000000300)=""/181, 0xb5, &(0x7f00000003c0)=""/40, &(0x7f0000000780)=[r2, r3, 0xffffffffffffffff, 0x0, 0x0], 0x5, {r1}}, 0x58)
r4 = openat$cgroup_ro(r1, &(0x7f0000000840)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000880), 0x2, 0x0)
openat$cgroup_subtree(r1, &(0x7f00000008c0), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000980)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xffffffc0}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="eb875c325f64"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x5c}}, 0x4011)
openat$cgroup_subtree(r4, &(0x7f0000000ac0), 0x2, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000b00)='cgroup.threads\x00', 0x2, 0x0)

23:54:04 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x24041804)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x880)
r3 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x5, 0x40)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x34048800)
r4 = getegid()
setfsgid(r4)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x90, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/vcsa#\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008050}, 0x0)
getgroups(0x2, &(0x7f00000007c0)=[<r6=>r4, <r7=>r4])
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nbd\x00'}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/vcsa#\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0xc4)
getgroups(0x4, &(0x7f0000000980)=[<r9=>r7, r6, 0xee00, r6])
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000009c0)={{0x2, 0xffffffffffffffff, r4, 0xffffffffffffffff, r9, 0x48, 0x2}, 0x0, 0x0, 0x40, 0xfffffffffffff800, 0x81, 0x3, 0x8, 0x8, 0x3, 0x81, 0xffffffffffffffff, 0xffffffffffffffff})
r10 = openat$cgroup_ro(r3, &(0x7f0000000a40)='memory.swap.current\x00', 0x0, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r10, &(0x7f0000000e80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x41}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x98, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9df}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x98}, 0x1, 0x0, 0x0, 0x8080}, 0x1)

[  118.723309] audit: type=1400 audit(1750895644.347:7): avc:  denied  { execmem } for  pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:54:04 executing program 2:
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$9p(0xffffffffffffffff, &(0x7f0000000040)="18e4fd5664247f00d1beca25eebbb35a8e75fffe85ec8bfbf47bdcce3c7c8e6c2d8266f4ed3f5fa78bfd2efd8f28e8578cef9aa5b8500aa8791bab5155", 0x3d)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r0 = getegid()
r1 = getegid()
setfsgid(r1)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000200)={'ip_vti0\x00', <r4=>r3, 0x700, 0x7, 0x40, 0x5, {{0x34, 0x4, 0x3, 0x8, 0xd0, 0x65, 0x0, 0x46, 0x29, 0x0, @empty, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x3c, 0xa0, 0x1, 0x7, [{@local, 0x3}, {@rand_addr=0x64010100, 0xaf}, {@remote, 0x2}, {@private=0xa010101, 0x10000}, {@empty, 0x400}, {@multicast1, 0x5a1}, {@empty, 0x8}]}, @ssrr={0x89, 0x17, 0x12, [@dev={0xac, 0x14, 0x14, 0x29}, @loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0xc}]}, @end, @lsrr={0x83, 0x7, 0x74, [@multicast2]}, @rr={0x7, 0xf, 0x27, [@local, @broadcast, @private=0xa010102]}, @noop, @noop, @timestamp_addr={0x44, 0x3c, 0xb, 0x1, 0x5, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x9}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff7}, {@broadcast, 0x6}, {@broadcast, 0x9}]}, @timestamp_addr={0x44, 0x14, 0x1f, 0x1, 0x6, [{@private=0xa010102, 0x62}, {@multicast2, 0x8}]}]}}}}})
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000004)
getresgid(&(0x7f00000004c0), &(0x7f0000000500)=<r6=>0x0, &(0x7f0000000540))
setregid(r0, r6)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', <r8=>r4, 0x2f, 0x4, 0x0, 0x5, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x10, 0x1, 0xadbd, 0x4d}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000640)={'tunl0\x00', r8, 0x7, 0x8, 0x80000000, 0x9, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x64, 0x0, 0x4, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x12}, {[@end]}}}}})
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xac, 0x0, 0xd04, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), 0xffffffffffffffff)
setregid(r2, r2)

23:54:04 executing program 3:
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x380)
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x22000400)
r1 = fsmount(r0, 0x0, 0x3)
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, 0x0, 0x108, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x34}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_SSID={0x6, 0x34, @random="b6c6"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c2f872bd0aed"}]}, 0x7c}}, 0x48004)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000000)
getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'ip_vti0\x00', <r2=>0x0, 0x80, 0x10, 0x4, 0x9, {{0x21, 0x4, 0x1, 0x25, 0x84, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@cipso={0x86, 0x48, 0x2, [{0x6, 0xa, "6bcbae2eb982f74c"}, {0x6, 0x3, "8d"}, {0x6, 0x3, 'P'}, {0x5, 0xb, "149a75b518795630a2"}, {0x6, 0x2}, {0x1, 0x2}, {0x1, 0x4, '\r*'}, {0x6, 0x11, "31c84c967ceed47f9730b137f247c5"}, {0x1, 0xe, "249e932896b55b9d625d89e6"}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x4, [{@multicast1, 0x5c}, {@private=0xa010100, 0x1}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x5}]}, @end, @end]}}}}})
bind$packet(r1, &(0x7f0000000440)={0x11, 0xc, r2, 0x1, 0x80, 0x6, @remote}, 0x14)
connect$packet(r0, &(0x7f0000000480)={0x11, 0x1, 0x0, 0x1, 0x2}, 0x14)
mkdirat$cgroup(r0, &(0x7f00000004c0)='syz1\x00', 0x1ff)
r3 = syz_open_dev$vcsa(&(0x7f0000000500), 0x18e, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x803)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
timerfd_gettime(r3, &(0x7f0000000680))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'syztnl1\x00', <r6=>r2, 0x10, 0x20, 0x8, 0x8, {{0x1a, 0x4, 0x2, 0x2, 0x68, 0x64, 0x0, 0x4f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end, @timestamp_addr={0x44, 0x14, 0x21, 0x1, 0x9, [{@rand_addr=0x64010101, 0x4}, {@remote, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0xa7, 0x3, 0x0, [{@multicast1, 0x1}, {@loopback, 0xa29}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@private=0xa010102, 0xfffffff7}]}, @cipso={0x86, 0xf, 0x0, [{0x2, 0x9, "b71e4e563b340f"}]}, @generic={0x44, 0xa, "fe975f00e384fbb3"}]}}}}})
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FLAGS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000900)={0x0, 0x4, r3})

23:54:04 executing program 4:
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8001, 0x6}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x40000)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\\\'#&^!:\\}.!(-:{$\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '&*+\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x80000}, 0x40015)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'})
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf4, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "d819deec5d14b2b5928f9198503e19de4c2aa717b2f1393633c1"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "2feac5ed4da285c753cf0f14540b2e65e99d5299f51cc7ca94726e0593"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x60040000}, 0x4000100)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r2, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x401, 0x2c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004004}, 0x84)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000006c0)='devices.allow\x00', 0x2, 0x0)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000700)='ib\x00', &(0x7f0000000740)='./file0\x00', 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, r6, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000885}, 0x2000c0c0)
getsockname$packet(r0, &(0x7f0000000900)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000940)=0x14)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000980)={r7, 0x1, 0x6, @remote}, 0x10)

23:54:04 executing program 5:
r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x219, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x1f, 0x2, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x7cdc, 0x9, 0x1, {0x22, 0x30a}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x7, 0xfd}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x0, 0x0, 0x40, 0x20}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x3, 0x4}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc0a}}]})
syz_usb_ep_read(r0, 0xe0, 0xfd, &(0x7f0000000180)=""/253)
r1 = inotify_init()
inotify_rm_watch(r1, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
inotify_init()
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x85)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x268, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5de}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa2f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x35, 0x3, "1ced6e67e269e154fb6fb4ad6f4a1b4bb0c2cfeb5e0f7fd0705c1f07803070d937cd71024cb2e113e0c7d608edbe700d78"}, @TIPC_NLA_NODE_ID={0xd1, 0x3, "d622e7f28266bcfe28016edda5521e00a98f57bd07f5eae1edce21c4d2f12770c49827db7dfe961e93284a612a5fbdd3d41f9e610062767dc5feffb3e985d715faca398bef176d7ad786b738bf0e4dfaac4f30c87f69274ac17eba8361a2967e0bf8430c24ed7529a3e0a0855aae52a0763f415a8a7b7be38030aea42aaa159df636aa74e29aa4965ddf8b7396fc8726754d1a5d5abf8d06feedc84baf25f7edd58a5b09e2626202f552e90ac4717c4cc0db8a98ed0c431eae6939f9c762cf2637b241635bf045c7cd2a681cfb"}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x4040040)
syz_usb_connect$uac1(0x4, 0xdc, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x7, 0xf0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5}, [@mixer_unit={0xb, 0x24, 0x4, 0x3, 0x2, "b4bbf1101703"}, @selector_unit={0x6, 0x24, 0x5, 0x2, 0x1, 'x'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x94, 0x3, 'i'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x7}, @as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x1002}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x81, 0x3, 0x0, 0x80, "", "17"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3f, 0x4, 0x81, 0x81, "0f0a9b"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x4, 0x9, "77a434"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7f, 0x1, 0x7, {0x7, 0x25, 0x1, 0x81, 0x8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x4}, @as_header={0x7, 0x24, 0x1, 0x0, 0xd7, 0x5}, @as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x1}, @as_header={0x7, 0x24, 0x1, 0x3, 0xff}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x1f}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x80, 0xf1, {0x7, 0x25, 0x1, 0x81, 0x5, 0x7}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x200, 0x3f, 0x4, 0x0, 0x8, 0x5b}, 0x24, &(0x7f0000000880)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x0, 0x2, 0x8001, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "e8efc4fc85982646b50fd9e464fd6257"}]}})
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x810, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1f, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x1, 0x4, 0x36, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0xff2}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x40, 0x7, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0xc8, 0x9}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x311, 0x3, 0x7, 0x5, 0x8, 0x3}, 0x3b, &(0x7f0000000980)={0x5, 0xf, 0x3b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "aa9f056b7d16420b92b01d576992790d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x3, 0x8, 0x1, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x21, 0x8a, 0x1, 0x81, 0x98}, @ssp_cap={0xc, 0x10, 0xa, 0x3f, 0x0, 0x6, 0xf000, 0x1}]}, 0x4, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x23, &(0x7f0000000a00)=@string={0x23, 0x3, "f35777386a2f3aa0913d393efd0658b9e761f0707a93d555ef1476cbf901e90a12"}}, {0x16, &(0x7f0000000a40)=@string={0x16, 0x3, "f0c838d5a398ef7ef4329dc41b2f4c17922af2e3"}}, {0x60, &(0x7f0000000a80)=@string={0x60, 0x3, "45cae54553e2f14239557c311bc1b17eed763b5533a20da905bd3e7583b2a2254484828ed4c8666937640ba9787322beb2792ea2de59a58f9619a2db1fc77889d8ad9eea57a0cca7ac2f2994c181c4a0bdea66c22a59a22912b7d664352c"}}]})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup/syz0\x00', 0x200002, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000bc0), 0x7fff, 0xcc0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x4a}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfffa}, @NL80211_ATTR_IE={0x20, 0x2a, [@mesh_id={0x72, 0x6}, @tim={0x5, 0x12, {0x81, 0x9a, 0x60, "c442df5560553bec27bf8e5af465e5"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0xf, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000d40)='\x01\x01\x01\x01\x01\x01', &(0x7f0000000d80)='\x01\x01\x01\x01\x01\x01', 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x400}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000804}, 0x24000800)
ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f0000000f00))
socketpair(0xf, 0x5, 0x101, &(0x7f0000000f40)={<r4=>0xffffffffffffffff})
sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x90, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x13a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
fsmount(r3, 0x0, 0x4)

23:54:04 executing program 6:
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40, 0x2}, 0x3}}, 0x18)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, <r0=>0x0})
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r0, 0x12)
pipe2$9p(&(0x7f0000000100), 0x84000)
ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000140)={0x6, "d87e8a4ef58d3834ebf6f9f48ea1960ba26731792146397a9e5ae9ab1d29db4ee6bf0de4c0d3274727973205d9bfad7bbd05bd0bf9e88eba2f2416b5524a7aeb"})
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RLOPEN(r1, &(0x7f0000000200)={0x18, 0xd, 0x2, {{0x20, 0x4}, 0x400}}, 0x18)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x19c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "a49e207b640ead886f85681f41d37b607769aa954233a446d699128b"}}, @TIPC_NLA_NODE_ID={0x59, 0x3, "c40b2a6b2b360f57f619b6cd10c12f3450b679ecbf6e2cc46383bd8dfae6c9dbb225fa1848fb7b0f4d4b265d14881bf9fa61f0b77007acf348860ff4fa918c42b3fa9a7ffa7fb44e062b732b044d7ea9bf4048a027"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "c5f05425ae00bf587fbd2afd6fae07a74fb92b4a"}}, @TIPC_NLA_NODE_ID={0x90, 0x3, "a840f731932c3bf1c7df68ebb0acc43b72f1b25bd8b46d85f52372b33500f711112a375359953a337cafebe1b942e759a8e3f2ecbb8205b416bb3ead15ff1ea9419fe2ab06e97311653e62fbbc0a74fa0ae12e2914a3bb4a269b2f1c35fd2796de3910c429bac082dd65b475aeb03b6e7405cc0eee14a59c16834822e681d1a970a43ec63a545e06b939b7ca"}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={<r2=>0x0})
r3 = syz_open_procfs$userns(r0, &(0x7f0000000540))
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000580)={r2, 0x3, r3, 0x9})
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='net_prio.prioidx\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder0\x00', 0x802, 0x0)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000640)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000680))
r5 = openat$cgroup_ro(r4, &(0x7f00000006c0)='cpu.stat\x00', 0x0, 0x0)
write$9p(r5, &(0x7f0000000700)="f3292aa8e6764de042369d2110d23858fe90a759", 0x14)
socket$nl_generic(0x10, 0x3, 0x10)

23:54:04 executing program 7:
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x9, 0x20, 0x7}, 0x2f)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x2)
openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0)
openat$cgroup_freezer_state(r0, &(0x7f0000000100), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000180)={'gretap0\x00', r1, 0x20, 0x7800, 0x9, 0x70, {{0x8, 0x4, 0x2, 0x8, 0x20, 0x65, 0x0, 0x7d, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0x62}]}}}}})
r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x40000)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='batadv_slave_1\x00', 0x0, r2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00'})
write$P9_RREADDIR(r0, &(0x7f00000002c0)={0x141, 0x29, 0x1, {0x80, [{{0x4, 0x1, 0x6}, 0x1, 0x1, 0x7, './file0'}, {{0x13, 0x2}, 0xfffffffffffffffb, 0x4, 0x7, './file0'}, {{0x0, 0x1, 0x2}, 0x200, 0x5, 0x7, './file0'}, {{0x0, 0x3, 0x6}, 0x9, 0x14, 0x7, './file0'}, {{0x4, 0x3, 0x4}, 0x2, 0x6, 0x7, './file0'}, {{0x4, 0x0, 0x4}, 0x0, 0xc2, 0x7, './file0'}, {{0x2, 0x2, 0x2}, 0x1f, 0x7f, 0x7, './file0'}, {{0x10, 0x2, 0x3}, 0xfff, 0x0, 0x7, './file0'}, {{0x81, 0x3, 0x1}, 0x3f, 0x6b, 0x7, './file0'}, {{0x2, 0x2, 0x6}, 0x5, 0x1, 0x7, './file0'}]}}, 0x141)
getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000440)=""/102, &(0x7f00000004c0)=0x66)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x1, r0, 0x2d9})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'ip6_vti0\x00', r1, 0x4, 0x9, 0x1, 0x1f, 0x10, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7800, 0x0, 0x2}})
r3 = inotify_add_watch(r0, &(0x7f0000000600)='./file0\x00', 0x0)
inotify_rm_watch(0xffffffffffffffff, r3)
r4 = openat$cgroup_ro(r0, &(0x7f0000000640)='blkio.bfq.time\x00', 0x0, 0x0)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000680)=@req={0x200, 0x8001, 0xffff39dd, 0x3}, 0x10)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000006c0), 0x2, 0x0)

[  119.975797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.978081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.981188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.983770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.985779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  120.163772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  120.175229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.176228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  120.179363] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  120.182135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.183769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  120.184658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.187080] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.189233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.195129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  120.196156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.198990] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.201810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.212037] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.216399] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  120.266746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  120.269836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  120.270696] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  120.287725] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  120.298636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  120.303421] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  120.304287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  120.304332] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  120.320619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  120.322872] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  120.326585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  120.340230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  120.343807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.355731] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  120.367369] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  120.372388] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  120.381230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  120.389177] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  120.398313] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  120.411334] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  121.999031] Bluetooth: hci0: command tx timeout
[  122.253041] Bluetooth: hci2: command tx timeout
[  122.253598] Bluetooth: hci1: command tx timeout
[  122.254926] Bluetooth: hci3: command tx timeout
[  122.381069] Bluetooth: hci4: command tx timeout
[  122.445573] Bluetooth: hci6: command tx timeout
[  122.446212] Bluetooth: hci5: command tx timeout
[  122.510346] Bluetooth: hci7: command tx timeout
[  124.045741] Bluetooth: hci0: command tx timeout
[  124.301261] Bluetooth: hci3: command tx timeout
[  124.301755] Bluetooth: hci1: command tx timeout
[  124.303068] Bluetooth: hci2: command tx timeout
[  124.429476] Bluetooth: hci4: command tx timeout
[  124.494008] Bluetooth: hci6: command tx timeout
[  124.494444] Bluetooth: hci5: command tx timeout
[  124.557009] Bluetooth: hci7: command tx timeout
[  126.094202] Bluetooth: hci0: command tx timeout
[  126.349158] Bluetooth: hci3: command tx timeout
[  126.349626] Bluetooth: hci1: command tx timeout
[  126.351039] Bluetooth: hci2: command tx timeout
[  126.478977] Bluetooth: hci4: command tx timeout
[  126.541040] Bluetooth: hci5: command tx timeout
[  126.541474] Bluetooth: hci6: command tx timeout
[  126.605254] Bluetooth: hci7: command tx timeout
[  128.141260] Bluetooth: hci0: command tx timeout
[  128.398981] Bluetooth: hci1: command tx timeout
[  128.399437] Bluetooth: hci2: command tx timeout
[  128.399847] Bluetooth: hci3: command tx timeout
[  128.525170] Bluetooth: hci4: command tx timeout
[  128.589395] Bluetooth: hci6: command tx timeout
[  128.589827] Bluetooth: hci5: command tx timeout
[  128.653116] Bluetooth: hci7: command tx timeout
[  182.959666] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.962286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  182.976573] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.977320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  182.979234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.980546] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.995125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  183.002932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  183.008771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  183.015332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  183.125677] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  183.129256] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  183.131671] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  183.135645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  183.138634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  183.225586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  183.232458] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  183.236714] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  183.244556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  183.249413] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  183.295593] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  183.304144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  183.309885] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  183.319463] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  183.327550] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  183.421863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  183.431763] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  183.472638] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  183.488233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  183.492486] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  183.493492] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  183.505510] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  183.517011] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  183.520160] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  183.535350] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.558973] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  183.574186] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  183.581302] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  183.627418] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  183.645474] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  185.040062] Bluetooth: hci1: command tx timeout
[  185.101032] Bluetooth: hci0: command tx timeout
[  185.166055] Bluetooth: hci2: command tx timeout
[  185.293033] Bluetooth: hci3: command tx timeout
[  185.422126] Bluetooth: hci4: command tx timeout
[  185.677057] Bluetooth: hci7: command tx timeout
[  185.677135] Bluetooth: hci5: command tx timeout
[  185.741085] Bluetooth: hci6: command tx timeout
[  187.085023] Bluetooth: hci1: command tx timeout
[  187.149207] Bluetooth: hci0: command tx timeout
[  187.213128] Bluetooth: hci2: command tx timeout
[  187.341374] Bluetooth: hci3: command tx timeout
[  187.469055] Bluetooth: hci4: command tx timeout
[  187.725104] Bluetooth: hci7: command tx timeout
[  187.727089] Bluetooth: hci5: command tx timeout
[  187.790170] Bluetooth: hci6: command tx timeout
[  189.134023] Bluetooth: hci1: command tx timeout
[  189.197607] Bluetooth: hci0: command tx timeout
[  189.262125] Bluetooth: hci2: command tx timeout
[  189.390380] Bluetooth: hci3: command tx timeout
[  189.518017] Bluetooth: hci4: command tx timeout
[  189.773177] Bluetooth: hci5: command tx timeout
[  189.773460] Bluetooth: hci7: command tx timeout
[  189.838049] Bluetooth: hci6: command tx timeout
[  191.182046] Bluetooth: hci1: command tx timeout
[  191.247050] Bluetooth: hci0: command tx timeout
[  191.309185] Bluetooth: hci2: command tx timeout
[  191.437052] Bluetooth: hci3: command tx timeout
[  191.567003] Bluetooth: hci4: command tx timeout
[  191.822011] Bluetooth: hci5: command tx timeout
[  191.822112] Bluetooth: hci7: command tx timeout
[  191.885053] Bluetooth: hci6: command tx timeout
[  245.477775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  245.489291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.492359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.498625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  245.504707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  245.600064] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  245.607629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  245.613604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  245.638644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  245.646256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  245.707578] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  245.713847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  245.717495] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  245.725682] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  245.728161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  245.741600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  245.743252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  245.756914] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  245.769908] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  245.786010] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  245.788377] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  245.800770] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  245.807242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  245.852529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  245.877704] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  245.954472] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  245.965525] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  245.968412] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  245.983736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  245.989749] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  246.112011] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  246.135562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  246.148226] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  246.165810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  246.167351] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  246.201228] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  246.210282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  246.228017] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  246.238410] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  246.304128] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  247.565320] Bluetooth: hci0: command tx timeout
[  247.694060] Bluetooth: hci1: command tx timeout
[  247.821029] Bluetooth: hci2: command tx timeout
[  247.950340] Bluetooth: hci3: command tx timeout
[  248.013052] Bluetooth: hci6: command tx timeout
[  248.013664] Bluetooth: hci4: command tx timeout
[  248.397148] Bluetooth: hci7: command tx timeout
[  248.525128] Bluetooth: hci5: command tx timeout
[  249.613081] Bluetooth: hci0: command tx timeout
[  249.742186] Bluetooth: hci1: command tx timeout
[  249.870976] Bluetooth: hci2: command tx timeout
[  249.997010] Bluetooth: hci3: command tx timeout
[  250.061263] Bluetooth: hci4: command tx timeout
[  250.062111] Bluetooth: hci6: command tx timeout
[  250.445284] Bluetooth: hci7: command tx timeout
[  250.573188] Bluetooth: hci5: command tx timeout
[  251.661270] Bluetooth: hci0: command tx timeout
[  251.789010] Bluetooth: hci1: command tx timeout
[  251.917064] Bluetooth: hci2: command tx timeout
[  252.045996] Bluetooth: hci3: command tx timeout
[  252.109293] Bluetooth: hci6: command tx timeout
[  252.109375] Bluetooth: hci4: command tx timeout
[  252.493414] Bluetooth: hci7: command tx timeout
[  252.621261] Bluetooth: hci5: command tx timeout
[  253.710995] Bluetooth: hci0: command tx timeout
[  253.837722] Bluetooth: hci1: command tx timeout
[  253.965130] Bluetooth: hci2: command tx timeout
[  254.093032] Bluetooth: hci3: command tx timeout
[  254.159010] Bluetooth: hci6: command tx timeout
[  254.159538] Bluetooth: hci4: command tx timeout
[  254.542047] Bluetooth: hci7: command tx timeout
[  254.670021] Bluetooth: hci5: command tx timeout
[  307.614791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  307.625721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  307.629410] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  307.642368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  307.652653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  307.745175] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  307.750555] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  307.758849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  307.765903] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  307.769877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  307.960421] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  307.963880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  307.966922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  307.990534] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  308.005770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  308.090553] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  308.104648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  308.131174] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  308.135256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  308.159853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  308.161760] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  308.168654] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  308.173673] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  308.184669] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  308.193452] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  308.235673] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  308.243754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  308.245724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  308.252834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  308.265634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  308.269277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  308.283396] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  308.287185] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  308.297069] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  308.300617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  308.303368] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  308.308914] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  308.312196] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  308.362839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  308.368559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.711994] Bluetooth: hci0: command tx timeout
[  309.837023] Bluetooth: hci1: command tx timeout
[  310.029127] Bluetooth: hci2: command tx timeout
[  310.285627] Bluetooth: hci4: command tx timeout
[  310.349252] Bluetooth: hci6: command tx timeout
[  310.350022] Bluetooth: hci7: command tx timeout
[  310.413573] Bluetooth: hci3: command tx timeout
[  310.477236] Bluetooth: hci5: command tx timeout
[  311.758979] Bluetooth: hci0: command tx timeout
[  311.886014] Bluetooth: hci1: command tx timeout
[  312.078989] Bluetooth: hci2: command tx timeout
[  312.334628] Bluetooth: hci4: command tx timeout
[  312.397381] Bluetooth: hci6: command tx timeout
[  312.397861] Bluetooth: hci7: command tx timeout
[  312.462036] Bluetooth: hci3: command tx timeout
[  312.525049] Bluetooth: hci5: command tx timeout
[  313.806238] Bluetooth: hci0: command tx timeout
[  313.934972] Bluetooth: hci1: command tx timeout
[  314.125996] Bluetooth: hci2: command tx timeout
[  314.382217] Bluetooth: hci4: command tx timeout
[  314.446126] Bluetooth: hci6: command tx timeout
[  314.446568] Bluetooth: hci7: command tx timeout
[  314.510237] Bluetooth: hci3: command tx timeout
[  314.574015] Bluetooth: hci5: command tx timeout
[  315.854030] Bluetooth: hci0: command tx timeout
[  315.982027] Bluetooth: hci1: command tx timeout
[  316.173225] Bluetooth: hci2: command tx timeout
[  316.430115] Bluetooth: hci4: command tx timeout
[  316.493083] Bluetooth: hci7: command tx timeout
[  316.493553] Bluetooth: hci6: command tx timeout
[  316.557060] Bluetooth: hci3: command tx timeout
[  316.621299] Bluetooth: hci5: command tx timeout
[  369.898284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  369.908175] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  369.913674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  369.941513] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  369.958578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.961007] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.964446] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.978732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.991484] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.998209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  370.240470] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  370.249485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  370.253385] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  370.262782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  370.269450] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  370.280270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  370.301058] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  370.304720] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  370.309525] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  370.317313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  370.320519] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  370.326386] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  370.347684] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  370.352691] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  370.355215] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  370.359884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  370.361583] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  370.364145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  370.369763] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  370.373288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  370.383325] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  370.404480] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  370.417502] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  370.420724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  370.434320] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  370.439542] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  370.442204] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  370.448551] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  370.449878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  370.488771] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  372.045083] Bluetooth: hci1: command tx timeout
[  372.046315] Bluetooth: hci0: command tx timeout
[  372.365247] Bluetooth: hci3: command tx timeout
[  372.493315] Bluetooth: hci5: command tx timeout
[  372.558059] Bluetooth: hci7: command tx timeout
[  372.558695] Bluetooth: hci6: command tx timeout
[  372.559249] Bluetooth: hci2: command tx timeout
[  372.621043] Bluetooth: hci4: command tx timeout
[  374.093031] Bluetooth: hci0: command tx timeout
[  374.093519] Bluetooth: hci1: command tx timeout
[  374.413432] Bluetooth: hci3: command tx timeout
[  374.541023] Bluetooth: hci5: command tx timeout
[  374.605536] Bluetooth: hci2: command tx timeout
[  374.606203] Bluetooth: hci6: command tx timeout
[  374.606620] Bluetooth: hci7: command tx timeout
[  374.669984] Bluetooth: hci4: command tx timeout
[  376.141693] Bluetooth: hci0: command tx timeout
[  376.141738] Bluetooth: hci1: command tx timeout
[  376.461040] Bluetooth: hci3: command tx timeout
[  376.589272] Bluetooth: hci5: command tx timeout
[  376.655007] Bluetooth: hci7: command tx timeout
[  376.655039] Bluetooth: hci6: command tx timeout
[  376.655521] Bluetooth: hci2: command tx timeout
[  376.717255] Bluetooth: hci4: command tx timeout
[  378.189271] Bluetooth: hci1: command tx timeout
[  378.190980] Bluetooth: hci0: command tx timeout
[  378.509353] Bluetooth: hci3: command tx timeout
[  378.638149] Bluetooth: hci5: command tx timeout
[  378.701253] Bluetooth: hci6: command tx timeout
[  378.701676] Bluetooth: hci2: command tx timeout
[  378.702163] Bluetooth: hci7: command tx timeout
[  378.765021] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
23:59:13  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000092cc0 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff85c1cb80 RDI=ffff888036ad5c68 RBP=ffff888029d676f0 RSP=ffff888029d67690
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff888008c4b780 R13=0000000000092cc0 R14=00000000000000e8 R15=ffffffff81b2315f
RIP=ffffffff81a7ce25 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1d37eaa6f4 CR3=0000000024c0b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000000000ff00000000000000000000
XMM02=00ff0000000000000000ff0000000000 XMM03=ff00000000000000ff00000000000000
XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffffffff85a11200 RCX=ffffffff81613070 RDX=ffff888015fbb700
RSI=ffffffff816128db RDI=0000000000000005 RBP=ffff88806cf25b00 RSP=ffff88806cf08e00
R8 =0000000000000001 R9 =ffffed100d9e11dd R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=0000000000000001 R14=0000000000000002 R15=ffff88806cf25b00
RIP=ffffffff816128e2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f738c7801f0 CR3=000000002c1ee000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000