Warning: Permanently added '[localhost]:46651' (ECDSA) to the list of known hosts.
2025/06/27 12:53:14 fuzzer started
2025/06/27 12:53:15 dialing manager at localhost:45637
syzkaller login: [  118.028337] cgroup: Unknown subsys name 'net'
[  118.197794] cgroup: Unknown subsys name 'cpuset'
[  118.233431] cgroup: Unknown subsys name 'rlimit'
2025/06/27 12:53:36 syscalls: 2214
2025/06/27 12:53:36 code coverage: enabled
2025/06/27 12:53:36 comparison tracing: enabled
2025/06/27 12:53:36 extra coverage: enabled
2025/06/27 12:53:36 setuid sandbox: enabled
2025/06/27 12:53:36 namespace sandbox: enabled
2025/06/27 12:53:36 Android sandbox: enabled
2025/06/27 12:53:36 fault injection: enabled
2025/06/27 12:53:36 leak checking: enabled
2025/06/27 12:53:36 net packet injection: enabled
2025/06/27 12:53:36 net device setup: enabled
2025/06/27 12:53:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/27 12:53:36 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/27 12:53:36 USB emulation: enabled
2025/06/27 12:53:36 hci packet injection: enabled
2025/06/27 12:53:36 wifi device emulation: enabled
2025/06/27 12:53:36 802.15.4 emulation: enabled
2025/06/27 12:53:36 fetching corpus: 0, signal 0/0 (executing program)
2025/06/27 12:53:38 starting 8 fuzzer processes
12:53:38 executing program 0:
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x2100, 0x18a)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8)
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000200))
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x15c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x522}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb617}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3b}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d75}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x96c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf5}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x90}, 0x24000090)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r2=>r1, {<r3=>r1}}, './file0\x00'})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000840), r2)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x2000, 0x0)
bind$unix(r4, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000980), 0x644143, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl0\x00', <r6=>0x0, 0x4, 0x4, 0x3, 0x6, 0x86, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x8, 0x700, 0x0, 0x7}})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000bc0)=0xe8)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000d40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xd0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040880}, 0x40040)
sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="196313d1737a"}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = accept4(r4, &(0x7f0000000e80)=@nfc, &(0x7f0000000f00)=0x80, 0x80800)
getsockopt$inet6_udp_int(r8, 0x11, 0x1, &(0x7f0000000f40), &(0x7f0000000f80)=0x4)
syz_open_dev$vcsu(&(0x7f0000000fc0), 0x8000, 0xc200)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000001000), &(0x7f0000001040)=0x14)
mq_open(&(0x7f0000001080)='eth\x00', 0x80, 0x10, &(0x7f00000010c0)={0x8000, 0x20, 0x8, 0x5})
open_by_handle_at(r1, &(0x7f0000001100)=@reiserfs_3={0xc, 0x3, {0x2, 0x40, 0x2}}, 0x0)

12:53:38 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000040))
mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000140)={'trans=virtio,', {[{@version_u}, {@access_uid={'access', 0x3d, 0xee00}}], [{@subj_type={'subj_type', 0x3d, ','}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}})
setxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={'L-', 0x9}, 0x16, 0x2)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, <r1=>0x0}, &(0x7f00000002c0)=0xc)
write$P9_RGETATTR(r0, &(0x7f0000000300)={0xa0, 0x19, 0x2, {0x42f0, {0x1, 0x4, 0x5}, 0xd, r1, 0xee01, 0x7f, 0x2, 0x9, 0x7, 0x8, 0x765, 0xac, 0x3, 0x69b0f609, 0x100000000, 0x200, 0x3, 0xfffffffffffffffb, 0x10001, 0x8}}, 0xa0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000400)={0x9, 0x5fe, 0x0, 0x4}, 0x14)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind(r4, &(0x7f0000000440)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x2}}, 0x80)
r5 = socket$inet(0x2, 0x800, 0x6)
setsockopt$inet_buf(r5, 0x0, 0x28, &(0x7f00000004c0)="a402275f6f535d4326498ad27ab2737d8ce40dd4105453cb8afbeafaa82f832e2096dea5518733b81d42c25d489d059d86125371659180c683f14573f6e3cfb64001d0eb42ec63d7ea9468af78da29b98b7fb9b86139ad27b08052b9f97cdb9a51026547d0de5ec8410c47ddcb538da59f41848d293794c0bd3028e862a5df64d5550961f1d61487fa3d761b", 0x8c)
getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000580)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f00000005c0)=0x28)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000600))
ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'})
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1e8, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x12, 0x3, "71dfb33e09fb6b33a783dda8b78d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "9eadd36f6558775ada4a6b19cc85e1732c881f73c7efbb1a36f9f2c6febe"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @empty, 0x10000}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd096}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "37812168d8f641cf8e359af4f874f342d09d86e9474faaa55b333821d425899d3d"}}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4044010}, 0x0)
r6 = dup(r0)
setsockopt$inet_tcp_int(r6, 0x6, 0x1, &(0x7f0000000940), 0x4)
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001980)={0x0, 0x7, 0x8001, 0x1})

12:53:38 executing program 2:
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x2, 0x1])
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x80000000, 0x0, 0x40, 0x5, 0x8})
r0 = dup(0xffffffffffffffff)
pwritev2(r0, &(0x7f0000000080), 0x0, 0x3500, 0x5, 0x18)
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f00000000c0)=0x7)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1a89}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFULA_CFG_MODE={0xa, 0x2, {0xeb, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffd}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
alarm(0x1)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000004c0)={0x0, 0x8000})
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000500)={@mcast2, 0x4, 0x2, 0x2, 0xc, 0x7f}, &(0x7f0000000540)=0x20)
r1 = accept4(r0, &(0x7f0000000580)=@x25={0x9, @remote}, &(0x7f0000000600)=0x80, 0x0)
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x20048000}, 0x40000)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40fd}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000)
pipe2(&(0x7f00000007c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x8c800)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000800))
sendmsg$inet(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)="3b4fbd7077c916a43d6b9b827b8670ba7bf466850abdfcd3e8cc813085666281dfa56d823e3563b274", 0x29}, {&(0x7f0000000880)="df0c346cdff31e6894fe5cf364606a60a95b7532c5b0767ec8de743b53cbdc882595483676e2d4877e826660fa216dbd204bedeee0f5e3544de7cc046e39d94165c48763fecfbe00f604589d5791edf76e4c11edbd8090342e8f392b0265b39e2ec19ca0c93948fc57b742919ffbf87d47144be68cdb8c8783c93e3b61f67593a53a92a886c820f1b261bc0409f7d1042b122805781c2755837e36eca3b16d4c8fa18920c70ffc8481036c8fc754b14a462820443d9f2df256157961bb918022e6e7ad277753d42e63cd2b5bb0cfa9e543db084377598b47b05d2c3a27", 0xdd}], 0x2, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x798}}], 0x18}, 0x24008000)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x3c}}, 0x4004000)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x6)

12:53:38 executing program 3:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x110, r0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x92b8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c28}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1ff, @mcast2, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x2000c040}, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x20008801)
r2 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x41)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r1)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', <r4=>0x0, 0x29, 0x1, 0x4d, 0x7f, 0x8, @dev={0xfe, 0x80, '\x00', 0x7}, @mcast1, 0x40, 0xff81, 0x7, 0x100}})
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x5697d9e51c03c122}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r3, 0x500, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c800}, 0x4004c084)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000640)={<r5=>r1, 0x800, 0x0, 0x8001})
sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000c40)={&(0x7f0000000680), 0xc, &(0x7f0000000c00)={&(0x7f00000006c0)={0x538, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_IE={0xc5, 0x2a, [@tim={0x5, 0xa5, {0x0, 0xc3, 0x5, "590e2af8b025d8ea0791b0d0d9d7e9c377e5b85d038ed2e60988736e7f557c68336ab62d7091e3f174e45d5a41b6dc0137dd6b1783cb955321e5d8d69222ead98d6a78d7052183932249cf53472c45e1ee17ad800210d6709009d0bbd87b38ad0bcf4c39a4da086198e580a49d6dba365e45479b7c6473b42021ff48978169261103cc6367e1da42dbd371c1a89ddcbd06973fe9751e299dca68cf6d88afe07b705e"}}, @mic={0x8c, 0x18, {0xd68, "63b1f8c83e9d", @long="052e4dec34dcd7a5c8f2de7d97cdf240"}}]}, @NL80211_ATTR_BEACON_HEAD={0x1a0, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_a, @broadcast, @initial, {0x8, 0x5}}, 0x8, @default, 0x10, @void, @val={0x1, 0x7, [{0x48, 0x1}, {0x36, 0x1}, {0x6c, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xc}, {0xc}]}, @val={0x3, 0x1, 0x7}, @void, @void, @val={0x5, 0xa7, {0x4, 0xff, 0x40, "7e46ff3b2d08e9769728a82f31fbec86e217909e46152b177bc3e1565ea50d6e6344b45f640ea13cc95525e30acd5df4d09c1f2cc8dcf71db0dd82e9cca7f76cc17db78d821c96a07d14adbd0ef9bc69c5da480e6a34f4a0a7b9c08b3e5de6d9e830caf5cc12f5b432528bcfd0a2dce5c9201279a5556b589682d2da0ec06e821ef6ad67d38c6d444e8f0c434213a4fa852b9d18fe2270e439194ec2ce83e1be62812cc0"}}, @val={0x25, 0x3, {0x0, 0x0, 0x20}}, @void, @val={0x3c, 0x4, {0x0, 0xa7, 0x9d, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x16}}, @val={0x76, 0x6, {0x7f, 0xff, 0x24, 0x3}}, [{0xdd, 0x9d, "e4177d25976466a3b352a9748fbaf98971bd79bd5895827886e7104ab386f379125b780fbc9837d6cbd5bda2c0eb25c770f709c8cbbbbea4ecc48d8dfe1225675b5690e56a1ac908a36ab550700219744444267bc29ca22d7464953daaed34f5fcc9d3f5f6e1a6a9493001edbc8028dd193f1fae981558ae6b9314d6059ef43db1d73fedbfb27285eda093d4e7886904789ccb468b0d217152d74032ef"}]}}, @NL80211_ATTR_BEACON_TAIL={0x2af, 0xf, [@channel_switch={0x25, 0x3, {0x1, 0xb0, 0x1}}, @chsw_timing={0x68, 0x4, {0x4, 0xe73}}, @tim={0x5, 0x69, {0x80, 0x5d, 0x1, "b4f47a1a83438b8d43ae7ee079350812f8a28b89acea68dc735f37879b6457d87a9ec9972fd94f98d371c9e1fce59f8f7343c250e2b4e2d15f9b4f83f1fbd0feb2dd8b99a9797b0a81ff8c7fa800bfdbfc38dadc1dec2ebdef0d8dcbae828692f70dce808b5e"}}, @fast_bss_trans={0x37, 0x91, {0xf8, 0x3, "39bbc7bdb02b173debebffba95e789bd", "c1e156a1ab1f3308fc659c199538259a8420cf0b067229c4fa4b4b29fe4a22ad", "d67645695ccac9b39ed8ba9c28ec558f811a2c232196f29c3e72525f944ee77c", [{0x2}, {0x4, 0x1c, "e4c0e976a9d69d744eda5f25a33abadec95fe288cb1a41ac7f28d734"}, {0x2, 0x1d, "c75af7a63b23fa9f2ffdff76f68577c3fefc42a60cba046c47cfbb632f"}]}}, @perr={0x84, 0x11b, {0x3f, 0x11, [@not_ext={{}, @device_a, 0x3ff, "", 0x31}, @ext={{}, @device_a, 0x81, @device_a, 0x39}, @not_ext={{}, @device_a, 0x4, "", 0x33}, @ext={{}, @device_a, 0x0, @device_a, 0x13}, @ext={{}, @broadcast, 0xffffffff, @device_a, 0x28}, @ext={{}, @broadcast, 0x10000, @broadcast, 0x9}, @ext={{}, @broadcast, 0x100, @device_a, 0x2}, @not_ext={{}, @broadcast, 0x40, "", 0x2f}, @ext={{}, @broadcast, 0xfffffffd, @broadcast, 0x3e}, @not_ext={{}, @broadcast, 0xffffff01, "", 0x23}, @ext={{}, @broadcast, 0x7fff, @device_a, 0x3e}, @not_ext={{}, @device_a, 0x7, "", 0x25}, @not_ext={{}, @device_b, 0x4, "", 0x3}, @not_ext={{}, @device_a, 0x6, "", 0x2a}, @ext={{}, @device_b, 0x2, @broadcast, 0x15}, @ext={{}, @device_a, 0x8, @broadcast, 0xa}, @ext={{}, @broadcast, 0x5, @device_b, 0x17}]}}, @channel_switch={0x25, 0x3, {0x1, 0xab, 0x1c}}, @link_id={0x65, 0x12, {@random="cd563c907b48", @device_a, @broadcast}}, @preq={0x82, 0x62, @ext={{0x1}, 0x1, 0x6, 0x10000, @device_a, 0x5, @device_b, 0xffffffff, 0x9, 0x6, [{{0x0, 0x0, 0x1}, @device_b, 0x9}, {{0x1}, @device_a, 0x7f}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @broadcast, 0x7f}, {{}, @broadcast, 0x2}, {{}, @device_a, 0x4}]}}, @mesh_id={0x72, 0x6}]}]}, 0x538}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000c80), 0x70082, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000000cc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x10c, r0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xda, 0x3, "9903b6752d4b3852cd008e778b1a0b8b7b4093f368fb15708e68612a032853baba86d62f100203b721c1bc67c69d011a4183592aa11d13d4c46a0d30675a24901d6da8a6aa8e3f588278c93708d2e9d21931b70483d52b323171116d673c679366db9da895202d4343b611b37af3b435df7be60126bcf138b9f26b94649112de1600656d4ba1aba1c86ac96e4f5e5a6d9b43c84be0a50b3b76e3827902433a94faaab3e48761d3e712ca9e5b49f7dc409908a84a25e8b0257b3e3be47545fd1367ad89d771bfeea26bcfb467849f1354a015cd2410bc"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x10c}}, 0x8000)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000001140))
write$rfkill(r1, &(0x7f0000001180)={0x1, 0x8, 0x1, 0x0, 0x1}, 0x8)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000011c0))
getsockname$packet(r1, &(0x7f0000001240)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001280)=0x14)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x48000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x39}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}}, 0x1)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001640)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001600)={&(0x7f00000013c0)={0x204, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0xf8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0xb93}, {0x8, 0x13, 0x9}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0xffffffa1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x37d}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x80000001}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfc}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x1000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0xfbff}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x80000000}, {0x5}}]}, 0x204}, 0x1, 0x0, 0x0, 0x1}, 0x40840)

[  141.255035] audit: type=1400 audit(1751028818.968:7): avc:  denied  { execmem } for  pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:53:38 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf82}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x91}, 0x8004)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1e9fca9e9303ae2700d613ece7e51291dae6830181a67fee"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x95}, 0x20000800)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040850}, 0x40)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000700)={&(0x7f0000000400), 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x214, r4, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x468c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7784779f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5157}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa6cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69beda28}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc51f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d1fc3dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdaec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x629b8c2a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe45f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e33d713}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ebd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdeb5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37323ec3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3aeb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x804e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8030}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc167}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3356}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x118ed119}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e995b9c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b8ee4ee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73cbe289}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2db3b6c2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f4aa9dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3024}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd45cfd1}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30c2bd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd6b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe702}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6428181f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2562939d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0xac, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11d00285}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x672f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74ca64b0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12a2ee41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x207a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x96ba}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55af3ad9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b21}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ac2ebda}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x159051e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3114}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c3c32f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ec7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf74b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb227}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cf6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8db1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9293747}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000740)='caif0\x00', 0x10)
r5 = signalfd(0xffffffffffffffff, &(0x7f0000000780)={[0x5]}, 0x8)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7b3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x35}]}, 0x44}, 0x1, 0x0, 0x0, 0x48814}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f00000009c0)={'sit0\x00', &(0x7f0000000940)={'syztnl2\x00', <r7=>0x0, 0x4, 0x0, 0x1, 0x4, 0x43, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0xc0, 0x1f, 0xfffffff9}})
sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000b00), 0x181480, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x2977d02f005ba602)
pipe(&(0x7f0000000c40)={<r9=>0xffffffffffffffff})
setsockopt$inet_int(r9, 0x0, 0xa, &(0x7f0000000c80)=0x1ff, 0x4)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x4c, r6, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffd}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x605}]}, 0x4c}}, 0x880)

12:53:39 executing program 6:
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x400, 0x70bd26, 0x25dfdbff, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400d800}, 0x26000001)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x6c}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x10008000)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="f537b596bbe33fedf6ea46d2f95c13b282319302b0e4ab63"}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20008008)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x68}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac06}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0x5f058643aa2def2a, 0xfac10, 0xfac04]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xdada}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x80}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x4004)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000580)={<r1=>r0, 0x9, 0x6, 0x3})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40080d0)
r3 = signalfd4(r1, &(0x7f0000000740)={[0x6]}, 0x8, 0x80800)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000780)='\x00', &(0x7f00000007c0)='\x01\x01\x01\x01\x01\x01', 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
ioctl$CDROMREADALL(r4, 0x5318, &(0x7f0000000940))
r5 = openat$cgroup_int(r1, &(0x7f00000013c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0)
write$binfmt_aout(r5, &(0x7f0000001400)={{0x10b, 0x7, 0x5, 0x139, 0x384, 0x101, 0x250, 0x5}, "0c0681396e34163442e7bb2b07c20220b6875679e64b04e42464ff410165990da2accdbff21399dde58eac102ff288d305e54a794018243b243d2787ef1a69a803f4fd1891b6b18f293f861e2b102d392c3e7cc53aee0dbfbd7eec74aa0a2145abca881be53a387e16149a45ed385a2d039ba5591b5da40bf1aaa098810e10f4525aede49312b43424223e4c992d5cfb59a27e26cccb08c12366f0fba06e909abe13a37b1b534bd8aeef33df63e762bd08d69c72e94f72c80d3a9d79c03f5e2cff0583277a787b38778f5f5d7eb1c3223e224919faa206aa752bd505b5a492cf5c0599676df3aea4f9b3473847c1f0539d3a5ba1c3927d01cc"}, 0x119)
shmget(0x1, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001540)='net/llc/core\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001580)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000001600)={r7, 0x3})

12:53:39 executing program 5:
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004850}, 0x8800)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4080)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan4\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x3bc, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xac8b}, @NL80211_ATTR_IE={0xe8, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb4}}, @cf={0x4, 0x6, {0x40, 0x20, 0x6e31, 0x9}}, @measure_req={0x26, 0x19, {0x8, 0x1f, 0x80, "c2d1a0d529cbdd7a5eeaa7d4411c9ccf4b9616e2b4ce"}}, @mic={0x8c, 0x10, {0xa3e, "c35b6abb8a3b", @short="0601c887027a4780"}}, @perr={0x84, 0xf, {0x95, 0x1, [@not_ext={{}, @device_a, 0x37134fdb, "", 0x3}]}}, @dsss={0x3, 0x1, 0xb0}, @tim={0x5, 0x8c, {0x8, 0xdb, 0x5d, "e9970fc27549502f186ad603b86b8e30dbe95b326a779655d296807e64ae4b8aba24d9d7350d7e7cf0b545d07cb759b0d87b61022e792cfe5dc47a061cd465c84c50cce07c418bde79ffc47ec1690dc14581628076a6b9b85b797bc6667b6df76a68e6b94c9dfbff73994a32193b1a168f0361af3184dacaed4a11a6ae848b0114098e8d781a1598c2"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfdc0}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_IE={0x298, 0x2a, [@perr={0x84, 0x11a, {0x3, 0x10, [@not_ext={{}, @device_a, 0x20, "", 0x5}, @ext={{}, @broadcast, 0x24, @device_a, 0x23}, @ext={{}, @broadcast, 0x6, @device_a, 0xb}, @ext={{}, @device_b, 0x1f, @device_a, 0x2}, @not_ext={{}, @device_a, 0x2, "", 0x1d}, @ext={{}, @broadcast, 0x9, @device_b, 0x1f}, @not_ext={{}, @device_a, 0x8, "", 0x2}, @ext={{}, @device_a, 0x9, @broadcast, 0x1b}, @not_ext={{}, @device_b, 0x2, "", 0x2e}, @ext={{}, @device_b, 0xf3e, @device_b, 0x5}, @ext={{}, @broadcast, 0x800, @device_a, 0xc}, @ext={{}, @broadcast, 0x7, @broadcast, 0x2e}, @ext={{}, @device_b, 0xfffffffc, @device_a, 0xf}, @ext={{}, @device_a, 0x4, @broadcast, 0x1e}, @ext={{}, @device_b, 0x9, @broadcast, 0x3c}, @ext={{}, @device_b, 0xc493, @broadcast, 0x28}]}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3f, 0x69}}, @measure_req={0x26, 0x3b, {0x8, 0x8e, 0x9, "73248ecec7e4425f238b4755ce14faa33b7ef19ee924da42fb571fbf12d72ba8643178065ba9981a6218712ef785638b910dd30299ba7bfd"}}, @supported_rates={0x1, 0x6, [{0x1, 0x1}, {0x2}, {0x16, 0x1}, {0x6}, {0x2}, {0x6, 0x1}]}, @perr={0x84, 0x8e, {0x6, 0x8, [@not_ext={{}, @device_a, 0x7, "", 0xe}, @ext={{}, @broadcast, 0x9, @device_a, 0x30}, @ext={{}, @broadcast, 0x5, @device_a, 0x9}, @ext={{}, @device_b, 0x4, @broadcast, 0x18}, @ext={{}, @broadcast, 0x8, @broadcast, 0xe}, @not_ext={{}, @broadcast, 0x3b0e, "", 0x32}, @ext={{}, @device_b, 0x1, @device_b, 0x20}, @ext={{}, @device_b, 0x10000, @device_a, 0x24}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @fast_bss_trans={0x37, 0x76, {0x56, 0x1, "a3529d6440f7e99c800392e8229e32b2", "d3b259a45cd1ec3946056ee1e86ac315bc981391b8d055bc2bfa93949e0d4d10", "8d3f760cd21d08e68afb236c5a404d31275bd57d37d870efb10fbb0e95933416", [{0x4, 0x22, "dfbcad7f7dd2dbb040c73dfc28171da8f5ae33c674c8e91c1db47d6473809f755e55"}]}}, @rann={0x7e, 0x15, {{0x1, 0x12}, 0x3, 0xff, @broadcast, 0x9, 0x1000, 0x8}}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4c000}, 0x4)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)="169d45a3da3b5d44d7ab5ffcf1a80a0c0599240b164ca6bb237dd4d736e1ec15567fc44b774a18336e741fb93cd04da6316d45c0fe81f87064e62ec08ff13595649533918ca9f9bc62d15543e6ea7cdd4b2cdf523f861e7d0bdda4cdf0d8e30f723e7f01ccf1", 0x66}, {&(0x7f0000000880)="1e807e4d5bdf7ece1cf80c9d35a0c21fc5bec6095e4a1484d2ff8d699b271d02960a7a548720dff7842e84495a2a556e560ea20c804041997662a4971b6a2564d7f5d4f7c03e3380662fb4fda9aa14dff3fe", 0x52}, {&(0x7f0000000900)="a0accf8807ee063a7313a0649ab9034f58275586a910ac32fe3768e1022d5a534da4d57943d4c1151454ae9ceb07695cf03fd3051ec1b7338604490cd5fa65fcb3ee43903e26556d8f5f949b7f79e4cba84a3a9ba73d39f9ce90f81604cbc4794233dc5cc447dc01328e", 0x6a}], 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan3\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000c80)={&(0x7f0000000b80)="184052018c64a7c1043234821a049102baffbffdd5c33816601acb1d4a0b448d7976b0cfd6fa3136e9d8ea2f264e868af7dc8e19c26dbf9561893e7a87d44e124a5c5e933c31a654bc0a29b4fcec142d2f3b9fe10c9ed6f68d6f271b1fb278cfd418b703c5399a47da9e99fecbb20dc0f3ea9f7cf37d71b763cbb2b8f54ab89ed0b254a6a176d3486dd6de6675555b665339646e544ed923d5a78bebbecaff1e0f2d04f58fcf8ffbe363b65d176ba9dd5d266949b51307f41fc43afe414124f2cbaa694d33c9ef21057f9882a2f8633471f4", 0xd2}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001)
ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000d00))
syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000d80)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x100}}, './file0\x00'})
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000e80)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x0, 0x40a, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000080)
r5 = add_key$keyring(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
r6 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000f80)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$unlink(0x9, r5, r6)
keyctl$join(0x1, &(0x7f0000000fc0)={'syz', 0x2})
pause()

12:53:39 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}]}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x401}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x20044008)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x280100, 0x0)
r5 = accept4(0xffffffffffffffff, &(0x7f0000000400)=@isdn, &(0x7f0000000480)=0x80, 0x80000)
r6 = open(&(0x7f00000004c0)='./file0\x00', 0x400140, 0x45)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa0, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa0}, 0x1, 0x0, 0x0, 0x7edf83784607a8f7}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r7=>r5, {0x10000}}, './file0\x00'})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000680)={{r7}, 0x0, 0x14, @unused=[0x2, 0x1, 0x1, 0x7], @devid})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4004001)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000001780)={{0x1, 0x1, 0x18, <r9=>r4, {0x9}}, './file0\x00'})
accept4$packet(r9, &(0x7f00000017c0), &(0x7f0000001800)=0x14, 0x80800)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001880), r0)
sendmsg$NL802154_CMD_GET_SEC_KEY(r10, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x38, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x50, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8010)

[  142.618265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  142.624614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  142.631504] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  142.635179] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  142.638983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  142.749027] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  142.751489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  142.756666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  142.762310] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  142.765570] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  142.767527] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  142.770143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  142.771486] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  142.774054] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  142.777282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  142.779462] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  142.790157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  142.795531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  142.797029] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  142.798597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  142.807002] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  142.809169] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  142.842642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  142.861652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  142.865704] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  142.870106] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  142.879220] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  142.883361] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  142.884076] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  142.886801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  142.887397] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  142.889683] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  142.891609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  142.910199] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  142.918563] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  142.928139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  142.928392] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  142.932733] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  142.939867] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  142.941747] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  144.705966] Bluetooth: hci0: command tx timeout
[  144.833181] Bluetooth: hci1: command tx timeout
[  144.833645] Bluetooth: hci4: command tx timeout
[  144.896133] Bluetooth: hci5: command tx timeout
[  144.960957] Bluetooth: hci6: command tx timeout
[  144.960985] Bluetooth: hci2: command tx timeout
[  145.024470] Bluetooth: hci3: command tx timeout
[  145.025141] Bluetooth: hci7: command tx timeout
[  146.752936] Bluetooth: hci0: command tx timeout
[  146.880346] Bluetooth: hci1: command tx timeout
[  146.880364] Bluetooth: hci4: command tx timeout
[  146.944246] Bluetooth: hci5: command tx timeout
[  147.008032] Bluetooth: hci6: command tx timeout
[  147.008571] Bluetooth: hci2: command tx timeout
[  147.071929] Bluetooth: hci7: command tx timeout
[  147.072136] Bluetooth: hci3: command tx timeout
[  148.800125] Bluetooth: hci0: command tx timeout
[  148.928026] Bluetooth: hci1: command tx timeout
[  148.928568] Bluetooth: hci4: command tx timeout
[  148.992196] Bluetooth: hci5: command tx timeout
[  149.056972] Bluetooth: hci2: command tx timeout
[  149.057050] Bluetooth: hci6: command tx timeout
[  149.120327] Bluetooth: hci3: command tx timeout
[  149.121086] Bluetooth: hci7: command tx timeout
[  150.849246] Bluetooth: hci0: command tx timeout
[  150.975974] Bluetooth: hci4: command tx timeout
[  150.976510] Bluetooth: hci1: command tx timeout
[  151.041118] Bluetooth: hci5: command tx timeout
[  151.104142] Bluetooth: hci2: command tx timeout
[  151.104526] Bluetooth: hci6: command tx timeout
[  151.168927] Bluetooth: hci3: command tx timeout
[  151.169452] Bluetooth: hci7: command tx timeout
[  205.659363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  205.665246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  205.668421] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  205.672258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  205.682253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  205.683153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  205.689727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  205.692095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  205.709175] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  205.714156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  205.718378] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  205.721434] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  205.724016] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  205.725066] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  205.727239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  205.740448] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  205.752728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  205.753719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  205.753793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  205.755914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  205.755928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  205.762675] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  205.764766] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  205.769756] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  205.773674] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  205.776498] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  205.777982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  205.781705] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  205.784440] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  205.787070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  205.861429] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  205.879025] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  205.897562] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  205.919244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  205.920413] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  205.923669] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  205.944528] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  205.946963] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  205.965322] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  205.975155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  207.744794] Bluetooth: hci2: command tx timeout
[  207.745532] Bluetooth: hci0: command tx timeout
[  207.808097] Bluetooth: hci3: command tx timeout
[  207.808679] Bluetooth: hci1: command tx timeout
[  207.812999] Bluetooth: hci4: command tx timeout
[  207.872102] Bluetooth: hci5: command tx timeout
[  207.999922] Bluetooth: hci6: command tx timeout
[  208.064053] Bluetooth: hci7: command tx timeout
[  209.792447] Bluetooth: hci0: command tx timeout
[  209.793190] Bluetooth: hci2: command tx timeout
[  209.857139] Bluetooth: hci4: command tx timeout
[  209.857624] Bluetooth: hci1: command tx timeout
[  209.858133] Bluetooth: hci3: command tx timeout
[  209.921885] Bluetooth: hci5: command tx timeout
[  210.047991] Bluetooth: hci6: command tx timeout
[  210.112231] Bluetooth: hci7: command tx timeout
[  211.839967] Bluetooth: hci2: command tx timeout
[  211.840509] Bluetooth: hci0: command tx timeout
[  211.905373] Bluetooth: hci3: command tx timeout
[  211.906111] Bluetooth: hci1: command tx timeout
[  211.906575] Bluetooth: hci4: command tx timeout
[  211.968911] Bluetooth: hci5: command tx timeout
[  212.095920] Bluetooth: hci6: command tx timeout
[  212.161008] Bluetooth: hci7: command tx timeout
[  213.888931] Bluetooth: hci0: command tx timeout
[  213.889466] Bluetooth: hci2: command tx timeout
[  213.951965] Bluetooth: hci3: command tx timeout
[  213.952452] Bluetooth: hci4: command tx timeout
[  213.952953] Bluetooth: hci1: command tx timeout
[  214.016882] Bluetooth: hci5: command tx timeout
[  214.144116] Bluetooth: hci6: command tx timeout
[  214.208927] Bluetooth: hci7: command tx timeout
[  268.314596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  268.317533] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  268.321536] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  268.324065] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  268.326546] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  268.333485] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  268.336969] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  268.343776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  268.343867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  268.347178] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  268.551322] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  268.559679] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  268.563117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  268.575368] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  268.578181] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  268.581494] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  268.589188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  268.595187] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  268.598459] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  268.615328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  268.627421] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  268.629724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  268.633773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  268.648870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  268.652077] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  268.661384] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  268.664415] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  268.679740] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  268.703518] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  268.706757] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  268.951093] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  268.957301] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  268.961239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  268.974245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  268.991181] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  269.032371] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  269.040443] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  269.046499] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  269.130012] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  269.141567] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  270.400007] Bluetooth: hci0: command tx timeout
[  270.400369] Bluetooth: hci1: command tx timeout
[  270.784262] Bluetooth: hci4: command tx timeout
[  270.784387] Bluetooth: hci3: command tx timeout
[  270.786287] Bluetooth: hci2: command tx timeout
[  270.849509] Bluetooth: hci5: command tx timeout
[  271.040362] Bluetooth: hci6: command tx timeout
[  271.297009] Bluetooth: hci7: command tx timeout
[  272.448174] Bluetooth: hci0: command tx timeout
[  272.449316] Bluetooth: hci1: command tx timeout
[  272.832505] Bluetooth: hci2: command tx timeout
[  272.833897] Bluetooth: hci3: command tx timeout
[  272.833921] Bluetooth: hci4: command tx timeout
[  272.896546] Bluetooth: hci5: command tx timeout
[  273.089928] Bluetooth: hci6: command tx timeout
[  273.345197] Bluetooth: hci7: command tx timeout
[  274.496959] Bluetooth: hci1: command tx timeout
[  274.496979] Bluetooth: hci0: command tx timeout
[  274.879996] Bluetooth: hci3: command tx timeout
[  274.880060] Bluetooth: hci2: command tx timeout
[  274.881481] Bluetooth: hci4: command tx timeout
[  274.945943] Bluetooth: hci5: command tx timeout
[  275.136937] Bluetooth: hci6: command tx timeout
[  275.391983] Bluetooth: hci7: command tx timeout
[  276.543930] Bluetooth: hci0: command tx timeout
[  276.544924] Bluetooth: hci1: command tx timeout
[  276.928126] Bluetooth: hci4: command tx timeout
[  276.928668] Bluetooth: hci2: command tx timeout
[  276.929749] Bluetooth: hci3: command tx timeout
[  276.992409] Bluetooth: hci5: command tx timeout
[  277.184673] Bluetooth: hci6: command tx timeout
[  277.440895] Bluetooth: hci7: command tx timeout
[  330.867175] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  330.873226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  330.877219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  330.888211] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  330.890545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  331.021171] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  331.025911] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  331.028451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  331.032456] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  331.044056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  331.158607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  331.166363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  331.170248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  331.180477] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  331.183275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  331.234123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  331.236655] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  331.240155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  331.255478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  331.260364] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  331.265343] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  331.266193] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  331.272242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  331.279357] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  331.292360] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  331.300444] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  331.301773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  331.307220] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  331.308994] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  331.311511] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  331.321243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  331.329778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  331.337087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  331.373526] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  331.400436] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  331.407465] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  331.410150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  331.414409] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  331.456012] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  331.476227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  332.927970] Bluetooth: hci0: command tx timeout
[  333.057270] Bluetooth: hci1: command tx timeout
[  333.269368] Bluetooth: hci2: command tx timeout
[  333.377316] Bluetooth: hci5: command tx timeout
[  333.439975] Bluetooth: hci4: command tx timeout
[  333.440597] Bluetooth: hci3: command tx timeout
[  333.503972] Bluetooth: hci6: command tx timeout
[  333.567913] Bluetooth: hci7: command tx timeout
[  334.976280] Bluetooth: hci0: command tx timeout
[  335.104192] Bluetooth: hci1: command tx timeout
[  335.296733] Bluetooth: hci2: command tx timeout
[  335.424562] Bluetooth: hci5: command tx timeout
[  335.488027] Bluetooth: hci4: command tx timeout
[  335.488537] Bluetooth: hci3: command tx timeout
[  335.552173] Bluetooth: hci6: command tx timeout
[  335.616270] Bluetooth: hci7: command tx timeout
[  337.024104] Bluetooth: hci0: command tx timeout
[  337.151960] Bluetooth: hci1: command tx timeout
[  337.344080] Bluetooth: hci2: command tx timeout
[  337.472766] Bluetooth: hci5: command tx timeout
[  337.536380] Bluetooth: hci3: command tx timeout
[  337.537221] Bluetooth: hci4: command tx timeout
[  337.600188] Bluetooth: hci6: command tx timeout
[  337.664933] Bluetooth: hci7: command tx timeout
[  339.072300] Bluetooth: hci0: command tx timeout
[  339.199950] Bluetooth: hci1: command tx timeout
[  339.393423] Bluetooth: hci2: command tx timeout
[  339.521169] Bluetooth: hci5: command tx timeout
[  339.584066] Bluetooth: hci4: command tx timeout
[  339.585592] Bluetooth: hci3: command tx timeout
[  339.648121] Bluetooth: hci6: command tx timeout
[  339.712380] Bluetooth: hci7: command tx timeout
[  393.631705] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  393.633234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  393.634986] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  393.636630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  393.642377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  393.644873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  393.646270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  393.658128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  393.665246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  393.670318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  393.689802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  393.716029] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  393.724332] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  393.727980] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  393.730281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  393.773604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  393.796874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  393.800665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  393.803722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  393.805369] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  393.809256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  393.813107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  393.815728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  393.836381] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  393.841083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  393.878247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  393.887033] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  393.894298] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  393.896284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  393.897749] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  393.901491] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  393.905133] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  393.906934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  393.934729] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  393.939227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  393.941366] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  393.946700] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  393.950301] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  393.956038] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  393.977416] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  395.712002] Bluetooth: hci0: command tx timeout
[  395.712948] Bluetooth: hci1: command tx timeout
[  395.777895] Bluetooth: hci2: command tx timeout
[  395.840912] Bluetooth: hci3: command tx timeout
[  395.904193] Bluetooth: hci4: command tx timeout
[  395.968034] Bluetooth: hci5: command tx timeout
[  395.968062] Bluetooth: hci7: command tx timeout
[  396.031928] Bluetooth: hci6: command tx timeout
[  397.760244] Bluetooth: hci1: command tx timeout
[  397.760441] Bluetooth: hci0: command tx timeout
[  397.823953] Bluetooth: hci2: command tx timeout
[  397.888022] Bluetooth: hci3: command tx timeout
[  397.951986] Bluetooth: hci4: command tx timeout
[  398.016023] Bluetooth: hci7: command tx timeout
[  398.016541] Bluetooth: hci5: command tx timeout
[  398.082905] Bluetooth: hci6: command tx timeout
[  399.808002] Bluetooth: hci1: command tx timeout
[  399.808347] Bluetooth: hci0: command tx timeout
[  399.872276] Bluetooth: hci2: command tx timeout
[  399.937379] Bluetooth: hci3: command tx timeout
[  399.999988] Bluetooth: hci4: command tx timeout
[  400.064316] Bluetooth: hci7: command tx timeout
[  400.064340] Bluetooth: hci5: command tx timeout
[  400.129237] Bluetooth: hci6: command tx timeout
[  401.856062] Bluetooth: hci1: command tx timeout
[  401.856146] Bluetooth: hci0: command tx timeout
[  401.920125] Bluetooth: hci2: command tx timeout
[  401.984234] Bluetooth: hci3: command tx timeout
[  402.047920] Bluetooth: hci4: command tx timeout
[  402.111957] Bluetooth: hci7: command tx timeout
[  402.113139] Bluetooth: hci5: command tx timeout
[  402.175958] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
12:58:44  Registers:
info registers vcpu 0
RAX=ffff888038211b80 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff81353d2d RDI=fffffbfff0b83978 RBP=ffffffff85c1cbc0 RSP=ffff8880297df040
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b9fd R11=00000000000c510f
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff8151b172 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55f6000 00000000 00000000
LDT=0000 fffffe3300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1207539020 CR3=0000000038d0a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff81a7b38f RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888009747c01
RSI=ffff888009747c68 RDI=ffff8880097478d0 RBP=ffff8880097478d0 RSP=ffff888009747808
R8 =ffffffff86885668 R9 =ffff8880097478b8 R10=000000000003b9fd R11=00000000000230d8
R12=ffff8880097478d8 R13=ffff8880097478c0 R14=ffff888009747c70 R15=ffff888009747878
RIP=ffffffff81354820 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56f6000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e7de246080 CR3=000000001b3e5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fbb6a85947000007fbb6a858f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000