Warning: Permanently added '[localhost]:22182' (ECDSA) to the list of known hosts.
2024/11/10 01:50:23 fuzzer started
2024/11/10 01:50:24 dialing manager at localhost:46317
syzkaller login: [   73.672124] cgroup: Unknown subsys name 'net'
[   73.792070] cgroup: Unknown subsys name 'cpuset'
[   73.809655] cgroup: Unknown subsys name 'rlimit'
2024/11/10 01:50:49 syscalls: 2217
2024/11/10 01:50:49 code coverage: enabled
2024/11/10 01:50:49 comparison tracing: enabled
2024/11/10 01:50:49 extra coverage: enabled
2024/11/10 01:50:49 setuid sandbox: enabled
2024/11/10 01:50:49 namespace sandbox: enabled
2024/11/10 01:50:49 Android sandbox: enabled
2024/11/10 01:50:49 fault injection: enabled
2024/11/10 01:50:49 leak checking: enabled
2024/11/10 01:50:49 net packet injection: enabled
2024/11/10 01:50:49 net device setup: enabled
2024/11/10 01:50:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/10 01:50:49 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/10 01:50:49 USB emulation: enabled
2024/11/10 01:50:49 hci packet injection: enabled
2024/11/10 01:50:49 wifi device emulation: enabled
2024/11/10 01:50:49 802.15.4 emulation: enabled
2024/11/10 01:50:49 fetching corpus: 50, signal 20607/22400 (executing program)
2024/11/10 01:50:49 fetching corpus: 100, signal 29883/33300 (executing program)
2024/11/10 01:50:49 fetching corpus: 150, signal 43414/48153 (executing program)
2024/11/10 01:50:50 fetching corpus: 200, signal 48221/54313 (executing program)
2024/11/10 01:50:50 fetching corpus: 250, signal 52228/59677 (executing program)
2024/11/10 01:50:50 fetching corpus: 300, signal 57400/65999 (executing program)
2024/11/10 01:50:50 fetching corpus: 350, signal 65123/74670 (executing program)
2024/11/10 01:50:51 fetching corpus: 400, signal 67648/78343 (executing program)
2024/11/10 01:50:51 fetching corpus: 450, signal 71324/82989 (executing program)
2024/11/10 01:50:51 fetching corpus: 500, signal 73524/86269 (executing program)
2024/11/10 01:50:51 fetching corpus: 550, signal 77302/90937 (executing program)
2024/11/10 01:50:52 fetching corpus: 600, signal 79570/94180 (executing program)
2024/11/10 01:50:52 fetching corpus: 650, signal 81403/96980 (executing program)
2024/11/10 01:50:52 fetching corpus: 700, signal 83450/99956 (executing program)
2024/11/10 01:50:53 fetching corpus: 750, signal 84979/102465 (executing program)
2024/11/10 01:50:53 fetching corpus: 800, signal 86534/104964 (executing program)
2024/11/10 01:50:53 fetching corpus: 850, signal 88144/107432 (executing program)
2024/11/10 01:50:53 fetching corpus: 900, signal 89837/109966 (executing program)
2024/11/10 01:50:54 fetching corpus: 950, signal 91242/112277 (executing program)
2024/11/10 01:50:54 fetching corpus: 1000, signal 93030/114811 (executing program)
2024/11/10 01:50:54 fetching corpus: 1050, signal 94890/117411 (executing program)
2024/11/10 01:50:55 fetching corpus: 1100, signal 96687/119886 (executing program)
2024/11/10 01:50:55 fetching corpus: 1150, signal 98240/122108 (executing program)
2024/11/10 01:50:55 fetching corpus: 1200, signal 100099/124520 (executing program)
2024/11/10 01:50:56 fetching corpus: 1250, signal 101102/126332 (executing program)
2024/11/10 01:50:56 fetching corpus: 1300, signal 102214/128141 (executing program)
2024/11/10 01:50:56 fetching corpus: 1350, signal 103128/129824 (executing program)
2024/11/10 01:50:56 fetching corpus: 1400, signal 104905/132093 (executing program)
2024/11/10 01:50:57 fetching corpus: 1450, signal 106473/134222 (executing program)
2024/11/10 01:50:57 fetching corpus: 1500, signal 107455/135880 (executing program)
2024/11/10 01:50:57 fetching corpus: 1550, signal 107950/137171 (executing program)
2024/11/10 01:50:57 fetching corpus: 1600, signal 109132/138911 (executing program)
2024/11/10 01:50:58 fetching corpus: 1650, signal 110384/140712 (executing program)
2024/11/10 01:50:58 fetching corpus: 1700, signal 111077/142111 (executing program)
2024/11/10 01:50:58 fetching corpus: 1750, signal 112151/143743 (executing program)
2024/11/10 01:50:59 fetching corpus: 1800, signal 114038/145831 (executing program)
2024/11/10 01:50:59 fetching corpus: 1850, signal 115845/147869 (executing program)
2024/11/10 01:51:00 fetching corpus: 1900, signal 117482/149769 (executing program)
2024/11/10 01:51:00 fetching corpus: 1950, signal 118295/151158 (executing program)
2024/11/10 01:51:00 fetching corpus: 2000, signal 119655/152814 (executing program)
2024/11/10 01:51:00 fetching corpus: 2050, signal 120633/154211 (executing program)
2024/11/10 01:51:00 fetching corpus: 2100, signal 121238/155379 (executing program)
2024/11/10 01:51:00 fetching corpus: 2150, signal 122184/156687 (executing program)
2024/11/10 01:51:01 fetching corpus: 2200, signal 123516/158277 (executing program)
2024/11/10 01:51:01 fetching corpus: 2250, signal 124547/159619 (executing program)
2024/11/10 01:51:01 fetching corpus: 2300, signal 125508/160924 (executing program)
2024/11/10 01:51:01 fetching corpus: 2350, signal 126491/162254 (executing program)
2024/11/10 01:51:01 fetching corpus: 2400, signal 127355/163410 (executing program)
2024/11/10 01:51:01 fetching corpus: 2450, signal 127831/164426 (executing program)
2024/11/10 01:51:01 fetching corpus: 2500, signal 128646/165580 (executing program)
2024/11/10 01:51:02 fetching corpus: 2550, signal 129429/166731 (executing program)
2024/11/10 01:51:02 fetching corpus: 2600, signal 130199/167840 (executing program)
2024/11/10 01:51:02 fetching corpus: 2650, signal 131530/169173 (executing program)
2024/11/10 01:51:02 fetching corpus: 2700, signal 132301/170147 (executing program)
2024/11/10 01:51:03 fetching corpus: 2750, signal 133003/171198 (executing program)
2024/11/10 01:51:03 fetching corpus: 2800, signal 133593/172107 (executing program)
2024/11/10 01:51:03 fetching corpus: 2850, signal 134865/173373 (executing program)
2024/11/10 01:51:04 fetching corpus: 2900, signal 135383/174316 (executing program)
2024/11/10 01:51:04 fetching corpus: 2950, signal 135816/175151 (executing program)
2024/11/10 01:51:04 fetching corpus: 3000, signal 136794/176176 (executing program)
2024/11/10 01:51:05 fetching corpus: 3050, signal 137489/177093 (executing program)
2024/11/10 01:51:05 fetching corpus: 3100, signal 138041/177944 (executing program)
2024/11/10 01:51:05 fetching corpus: 3150, signal 138627/178806 (executing program)
2024/11/10 01:51:06 fetching corpus: 3200, signal 139247/179681 (executing program)
2024/11/10 01:51:06 fetching corpus: 3250, signal 140012/180556 (executing program)
2024/11/10 01:51:07 fetching corpus: 3300, signal 141133/181544 (executing program)
2024/11/10 01:51:07 fetching corpus: 3350, signal 142028/182458 (executing program)
2024/11/10 01:51:08 fetching corpus: 3400, signal 142623/183276 (executing program)
2024/11/10 01:51:08 fetching corpus: 3450, signal 143389/184127 (executing program)
2024/11/10 01:51:08 fetching corpus: 3500, signal 144030/184908 (executing program)
2024/11/10 01:51:08 fetching corpus: 3550, signal 144491/185591 (executing program)
2024/11/10 01:51:09 fetching corpus: 3600, signal 145248/186385 (executing program)
2024/11/10 01:51:09 fetching corpus: 3650, signal 145739/187083 (executing program)
2024/11/10 01:51:09 fetching corpus: 3700, signal 146226/187754 (executing program)
2024/11/10 01:51:10 fetching corpus: 3750, signal 146603/188434 (executing program)
2024/11/10 01:51:10 fetching corpus: 3800, signal 147149/189134 (executing program)
2024/11/10 01:51:10 fetching corpus: 3850, signal 147623/189766 (executing program)
2024/11/10 01:51:10 fetching corpus: 3900, signal 148076/190406 (executing program)
2024/11/10 01:51:11 fetching corpus: 3950, signal 148555/191060 (executing program)
2024/11/10 01:51:11 fetching corpus: 4000, signal 149067/191695 (executing program)
2024/11/10 01:51:11 fetching corpus: 4050, signal 149750/192360 (executing program)
2024/11/10 01:51:12 fetching corpus: 4100, signal 150149/192967 (executing program)
2024/11/10 01:51:12 fetching corpus: 4150, signal 150536/193577 (executing program)
2024/11/10 01:51:12 fetching corpus: 4200, signal 151092/194151 (executing program)
2024/11/10 01:51:13 fetching corpus: 4250, signal 151332/194708 (executing program)
2024/11/10 01:51:13 fetching corpus: 4300, signal 151888/195301 (executing program)
2024/11/10 01:51:13 fetching corpus: 4350, signal 152332/195891 (executing program)
2024/11/10 01:51:14 fetching corpus: 4400, signal 152797/196453 (executing program)
2024/11/10 01:51:14 fetching corpus: 4450, signal 153227/197026 (executing program)
2024/11/10 01:51:14 fetching corpus: 4500, signal 153632/197600 (executing program)
2024/11/10 01:51:15 fetching corpus: 4550, signal 154166/198157 (executing program)
2024/11/10 01:51:15 fetching corpus: 4600, signal 154561/198668 (executing program)
2024/11/10 01:51:15 fetching corpus: 4650, signal 155175/199175 (executing program)
2024/11/10 01:51:15 fetching corpus: 4700, signal 155650/199658 (executing program)
2024/11/10 01:51:15 fetching corpus: 4750, signal 155986/200141 (executing program)
2024/11/10 01:51:16 fetching corpus: 4800, signal 156819/200655 (executing program)
2024/11/10 01:51:16 fetching corpus: 4850, signal 157489/201136 (executing program)
2024/11/10 01:51:16 fetching corpus: 4900, signal 157827/201593 (executing program)
2024/11/10 01:51:16 fetching corpus: 4950, signal 158250/202072 (executing program)
2024/11/10 01:51:16 fetching corpus: 5000, signal 158584/202542 (executing program)
2024/11/10 01:51:16 fetching corpus: 5050, signal 158942/202976 (executing program)
2024/11/10 01:51:16 fetching corpus: 5100, signal 159245/203221 (executing program)
2024/11/10 01:51:17 fetching corpus: 5150, signal 159618/203221 (executing program)
2024/11/10 01:51:17 fetching corpus: 5200, signal 159971/203221 (executing program)
2024/11/10 01:51:17 fetching corpus: 5250, signal 160283/203221 (executing program)
2024/11/10 01:51:17 fetching corpus: 5300, signal 160638/203221 (executing program)
2024/11/10 01:51:17 fetching corpus: 5350, signal 161214/203221 (executing program)
2024/11/10 01:51:17 fetching corpus: 5400, signal 161641/203221 (executing program)
2024/11/10 01:51:17 fetching corpus: 5450, signal 161949/203221 (executing program)
2024/11/10 01:51:18 fetching corpus: 5500, signal 162323/203221 (executing program)
2024/11/10 01:51:18 fetching corpus: 5550, signal 162693/203226 (executing program)
2024/11/10 01:51:18 fetching corpus: 5600, signal 163067/203226 (executing program)
2024/11/10 01:51:18 fetching corpus: 5650, signal 163603/203226 (executing program)
2024/11/10 01:51:18 fetching corpus: 5700, signal 163898/203226 (executing program)
2024/11/10 01:51:19 fetching corpus: 5750, signal 164608/203226 (executing program)
2024/11/10 01:51:19 fetching corpus: 5800, signal 164930/203226 (executing program)
2024/11/10 01:51:19 fetching corpus: 5850, signal 165103/203226 (executing program)
2024/11/10 01:51:19 fetching corpus: 5900, signal 165507/203234 (executing program)
2024/11/10 01:51:20 fetching corpus: 5950, signal 165744/203234 (executing program)
2024/11/10 01:51:20 fetching corpus: 6000, signal 166209/203234 (executing program)
2024/11/10 01:51:20 fetching corpus: 6050, signal 166575/203234 (executing program)
2024/11/10 01:51:21 fetching corpus: 6100, signal 166800/203234 (executing program)
2024/11/10 01:51:21 fetching corpus: 6150, signal 167048/203234 (executing program)
2024/11/10 01:51:21 fetching corpus: 6200, signal 167252/203234 (executing program)
2024/11/10 01:51:22 fetching corpus: 6250, signal 167481/203234 (executing program)
2024/11/10 01:51:22 fetching corpus: 6300, signal 167703/203234 (executing program)
2024/11/10 01:51:22 fetching corpus: 6350, signal 168044/203234 (executing program)
2024/11/10 01:51:23 fetching corpus: 6400, signal 168320/203234 (executing program)
2024/11/10 01:51:23 fetching corpus: 6450, signal 168660/203234 (executing program)
2024/11/10 01:51:23 fetching corpus: 6500, signal 168943/203234 (executing program)
2024/11/10 01:51:24 fetching corpus: 6550, signal 169297/203234 (executing program)
2024/11/10 01:51:24 fetching corpus: 6600, signal 169704/203234 (executing program)
2024/11/10 01:51:24 fetching corpus: 6650, signal 170093/203234 (executing program)
2024/11/10 01:51:25 fetching corpus: 6700, signal 170388/203234 (executing program)
2024/11/10 01:51:25 fetching corpus: 6750, signal 170867/203234 (executing program)
2024/11/10 01:51:25 fetching corpus: 6800, signal 171244/203234 (executing program)
2024/11/10 01:51:26 fetching corpus: 6850, signal 171817/203234 (executing program)
2024/11/10 01:51:26 fetching corpus: 6900, signal 172160/203234 (executing program)
2024/11/10 01:51:26 fetching corpus: 6950, signal 172422/203234 (executing program)
2024/11/10 01:51:26 fetching corpus: 7000, signal 172641/203234 (executing program)
2024/11/10 01:51:27 fetching corpus: 7050, signal 172948/203234 (executing program)
2024/11/10 01:51:27 fetching corpus: 7100, signal 173267/203234 (executing program)
2024/11/10 01:51:28 fetching corpus: 7150, signal 173558/203234 (executing program)
2024/11/10 01:51:28 fetching corpus: 7200, signal 174052/203234 (executing program)
2024/11/10 01:51:28 fetching corpus: 7250, signal 174262/203235 (executing program)
2024/11/10 01:51:28 fetching corpus: 7300, signal 174525/203235 (executing program)
2024/11/10 01:51:28 fetching corpus: 7350, signal 174717/203235 (executing program)
2024/11/10 01:51:28 fetching corpus: 7400, signal 174880/203235 (executing program)
2024/11/10 01:51:28 fetching corpus: 7450, signal 175096/203235 (executing program)
2024/11/10 01:51:28 fetching corpus: 7500, signal 175273/203235 (executing program)
2024/11/10 01:51:29 fetching corpus: 7550, signal 175517/203235 (executing program)
2024/11/10 01:51:29 fetching corpus: 7600, signal 175737/203235 (executing program)
2024/11/10 01:51:29 fetching corpus: 7650, signal 176071/203235 (executing program)
2024/11/10 01:51:29 fetching corpus: 7700, signal 176327/203235 (executing program)
2024/11/10 01:51:29 fetching corpus: 7750, signal 176591/203235 (executing program)
2024/11/10 01:51:29 fetching corpus: 7800, signal 176868/203235 (executing program)
2024/11/10 01:51:30 fetching corpus: 7850, signal 177095/203235 (executing program)
2024/11/10 01:51:30 fetching corpus: 7900, signal 177290/203235 (executing program)
2024/11/10 01:51:30 fetching corpus: 7950, signal 177634/203235 (executing program)
2024/11/10 01:51:30 fetching corpus: 8000, signal 177866/203235 (executing program)
2024/11/10 01:51:30 fetching corpus: 8050, signal 178055/203235 (executing program)
2024/11/10 01:51:31 fetching corpus: 8100, signal 178315/203235 (executing program)
2024/11/10 01:51:31 fetching corpus: 8150, signal 178576/203235 (executing program)
2024/11/10 01:51:31 fetching corpus: 8200, signal 178818/203235 (executing program)
2024/11/10 01:51:32 fetching corpus: 8250, signal 179028/203235 (executing program)
2024/11/10 01:51:32 fetching corpus: 8300, signal 179202/203235 (executing program)
2024/11/10 01:51:32 fetching corpus: 8350, signal 179419/203235 (executing program)
2024/11/10 01:51:33 fetching corpus: 8400, signal 179670/203235 (executing program)
2024/11/10 01:51:33 fetching corpus: 8450, signal 179932/203235 (executing program)
2024/11/10 01:51:33 fetching corpus: 8500, signal 180235/203235 (executing program)
2024/11/10 01:51:34 fetching corpus: 8550, signal 180441/203236 (executing program)
2024/11/10 01:51:34 fetching corpus: 8600, signal 180629/203239 (executing program)
2024/11/10 01:51:35 fetching corpus: 8650, signal 180907/203239 (executing program)
2024/11/10 01:51:35 fetching corpus: 8700, signal 181121/203239 (executing program)
2024/11/10 01:51:35 fetching corpus: 8750, signal 181385/203239 (executing program)
2024/11/10 01:51:35 fetching corpus: 8800, signal 181655/203239 (executing program)
2024/11/10 01:51:36 fetching corpus: 8850, signal 181957/203239 (executing program)
2024/11/10 01:51:36 fetching corpus: 8900, signal 182154/203239 (executing program)
2024/11/10 01:51:36 fetching corpus: 8950, signal 182404/203239 (executing program)
2024/11/10 01:51:36 fetching corpus: 9000, signal 182669/203239 (executing program)
2024/11/10 01:51:36 fetching corpus: 9050, signal 182869/203239 (executing program)
2024/11/10 01:51:37 fetching corpus: 9100, signal 183096/203239 (executing program)
2024/11/10 01:51:37 fetching corpus: 9150, signal 183383/203239 (executing program)
2024/11/10 01:51:38 fetching corpus: 9200, signal 183670/203239 (executing program)
2024/11/10 01:51:38 fetching corpus: 9250, signal 183992/203239 (executing program)
2024/11/10 01:51:38 fetching corpus: 9300, signal 184234/203239 (executing program)
2024/11/10 01:51:38 fetching corpus: 9350, signal 184377/203239 (executing program)
2024/11/10 01:51:39 fetching corpus: 9400, signal 184691/203239 (executing program)
2024/11/10 01:51:39 fetching corpus: 9450, signal 184886/203239 (executing program)
2024/11/10 01:51:39 fetching corpus: 9500, signal 185141/203243 (executing program)
2024/11/10 01:51:40 fetching corpus: 9550, signal 185362/203243 (executing program)
2024/11/10 01:51:40 fetching corpus: 9600, signal 185568/203243 (executing program)
2024/11/10 01:51:40 fetching corpus: 9650, signal 185850/203243 (executing program)
2024/11/10 01:51:41 fetching corpus: 9700, signal 186021/203243 (executing program)
2024/11/10 01:51:41 fetching corpus: 9750, signal 186183/203243 (executing program)
2024/11/10 01:51:41 fetching corpus: 9800, signal 186365/203243 (executing program)
2024/11/10 01:51:41 fetching corpus: 9850, signal 186743/203243 (executing program)
2024/11/10 01:51:42 fetching corpus: 9900, signal 186945/203243 (executing program)
2024/11/10 01:51:42 fetching corpus: 9950, signal 187117/203243 (executing program)
2024/11/10 01:51:42 fetching corpus: 10000, signal 187266/203243 (executing program)
2024/11/10 01:51:43 fetching corpus: 10050, signal 187473/203243 (executing program)
2024/11/10 01:51:43 fetching corpus: 10100, signal 187682/203243 (executing program)
2024/11/10 01:51:43 fetching corpus: 10150, signal 187812/203243 (executing program)
2024/11/10 01:51:43 fetching corpus: 10200, signal 187968/203243 (executing program)
2024/11/10 01:51:43 fetching corpus: 10250, signal 188266/203243 (executing program)
2024/11/10 01:51:44 fetching corpus: 10300, signal 188451/203243 (executing program)
2024/11/10 01:51:44 fetching corpus: 10350, signal 188648/203243 (executing program)
2024/11/10 01:51:44 fetching corpus: 10400, signal 189000/203243 (executing program)
2024/11/10 01:51:45 fetching corpus: 10450, signal 189184/203243 (executing program)
2024/11/10 01:51:45 fetching corpus: 10500, signal 189428/203243 (executing program)
2024/11/10 01:51:45 fetching corpus: 10550, signal 189615/203243 (executing program)
2024/11/10 01:51:46 fetching corpus: 10600, signal 189809/203243 (executing program)
2024/11/10 01:51:46 fetching corpus: 10650, signal 189959/203243 (executing program)
2024/11/10 01:51:46 fetching corpus: 10700, signal 190174/203243 (executing program)
2024/11/10 01:51:47 fetching corpus: 10750, signal 190353/203243 (executing program)
2024/11/10 01:51:47 fetching corpus: 10800, signal 190484/203243 (executing program)
2024/11/10 01:51:47 fetching corpus: 10850, signal 190724/203243 (executing program)
2024/11/10 01:51:47 fetching corpus: 10900, signal 190875/203243 (executing program)
2024/11/10 01:51:47 fetching corpus: 10930, signal 190964/203243 (executing program)
2024/11/10 01:51:47 fetching corpus: 10930, signal 190964/203243 (executing program)
2024/11/10 01:51:51 starting 8 fuzzer processes
01:51:51 executing program 0:
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2d, 0xfffffff8, 0x100, "686bb8b16c430ae554ecb906d9d0e684adab28382033388c56c18a74b9f55346c0f83e4e4825298faf97b921c1"})
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x328, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e157b3a6d60cb6fb2e566d33f851bc37de605be31937099d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c8eaf590a331ba43fc85375535269f783845d6b7dff11b99"}]]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x804)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000c0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000)
r2 = dup3(r1, r0, 0x80000)
r3 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000000340)={0x153, 0xa03, 0x2, 0x1800, 0x0, [0x4, 0xff, 0x1, 0xadcd]})
ioctl$LOOP_SET_FD(r2, 0x4c00, r0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x18c, r4, 0x500, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/dm_mirror', 0x60100, 0x40)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r1)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x42800180}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb8, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}]}, 0xb8}}, 0x44040)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r7=>r3, {0x0, 0xee00}}, './file0\x00'})
sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x5)
r8 = fcntl$dupfd(r1, 0x406, r0)
syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r8)
r9 = syz_open_dev$vcsa(&(0x7f0000000a00), 0xa82, 0x410000)
ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f0000000a40)={0x43, 0x9, 0x2, 0x7, 0x6})

01:51:51 executing program 1:
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)={0x81, {{0x2, 0x4e24, @broadcast}}}, 0x88)
r0 = memfd_secret(0x0)
fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x2, 0x2, 0x5, 0x401, 0xffffffffffffffff})
r1 = accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000140)=0x1c)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20040894)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x802, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xaa}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x11e}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
socketpair(0x26, 0x6, 0xfbad, &(0x7f00000004c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x20, 0x5}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_virt_wifi\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2850}, 0x1)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2040}, 0x800)
getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000700)={'nat\x00', 0x0, [0x7, 0x8, 0x9, 0xd6000, 0x6]}, &(0x7f0000000780)=0x54)
getsockname(r4, &(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000840)=0x80)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c1}, 0x0)
r6 = openat$cgroup_procs(r0, &(0x7f0000000980)='cgroup.threads\x00', 0x2, 0x0)
ioctl$FICLONE(r6, 0x40049409, r3)
sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4000001)
r7 = syz_open_procfs(0x0, &(0x7f0000000ac0)='attr/sockcreate\x00')
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f0000000bc0)={{}, 0x0, 0x0, @inherit={0x90, &(0x7f0000000b00)={0x0, 0x9, 0x6, 0xff, {0x2c, 0xc6, 0x3, 0x80, 0x4}, [0xab3, 0x1, 0x200, 0xf982, 0x2, 0x100000000, 0x8, 0xd, 0x7]}}, @devid})

01:51:51 executing program 2:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7ff}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1000}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44001}, 0x40000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x48080, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x174, 0x14, 0x7, 0x300, 0x70bd2d, 0x25dfdbfc, {0x5}, [@nested={0x28, 0x1b, 0x0, 0x1, [@typed={0x4, 0x51}, @typed={0x8, 0x3a, 0x0, 0x0, @pid}, @typed={0x4, 0x83}, @typed={0x8, 0x81, 0x0, 0x0, @fd=r2}, @typed={0xc, 0x2c, 0x0, 0x0, @str='&+/2()(\x00'}]}, @typed={0x4, 0x81}, @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x3}, @typed={0xe0, 0x39, 0x0, 0x0, @binary="ae4348601bc3c3fbd9b339a8e9d92de6f65bf563f94a4be4dcbb4782c60d4636ba53b16f7a1fb7afc1cf302a58effa63bd5fd0a2d5bdb1a3379dad7803872d9f9d9e2b1b46de29e03600ff7274c24c83ac53c5bcd275dd931144f5afbf0b31ed3ea2f0ca9973e30d940f2bbcfbbff6f21633881dc0cdd055db2f5cf80f93ee8772ad6f7df31324233a0a60c7634ea414d2c8c3f23cd998ca003c26a8c79eb6208db77c56da0c06f738576e7afa7b17fa9ab8159ca8ea661429cae0b08c0d04f77780fb7d06afcff28354661483eb6eab97028d867f4b14a636943278"}, @typed={0x47, 0x48, 0x0, 0x0, @binary="02de522c85bef3d7a73e9ee9b8aeb5692951a450b8af67df48bb03c067c0ca3ad1477b78527de83c145dcbf2588d540ed6c94261f1ddc55c601d76afb8b33c4d239967"}]}, 0x174}, 0x1, 0x0, 0x0, 0x44}, 0x4000010)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x170, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xdc, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x100d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc366}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x483af687}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57049ff7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5784cbc6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a1e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36da1298}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cc0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92c1}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2822}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf159}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x600d8e71}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x175b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x439b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ff6eca7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a7396cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf367}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ba0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b63f5cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbcd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4044699a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf19f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7ec}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4008865}, 0x48001)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r3)
sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
fcntl$getown(r1, 0x9)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000980)={0xffffffffffffffff, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}]}, 0x20}}, 0x4040000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000050)
accept$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000b80), 0x210c00)
clock_gettime(0x0, &(0x7f0000000c00)={<r8=>0x0, <r9=>0x0})
ppoll(&(0x7f0000000bc0)=[{r7, 0xc}], 0x1, &(0x7f0000000c40)={r8, r9+10000000}, &(0x7f0000000c80)={[0x7]}, 0x8)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000d00))

01:51:51 executing program 3:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x40, 0x2, 0x0, 0x8000, 0x2, "9f5e3fc35822e427a3de53485f7138a5a553b2", 0x4, 0x6})
r1 = syz_open_pts(r0, 0x10800)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2)
ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000004c0)={0x88, 0x1d, &(0x7f00000000c0)})
r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xf85)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000500)={0x9, 0x80, 0x1fc00000, 0xd366, 0x18, "4b41ab340bce5f4d8e353a0593b4c2cc7f7c1c"})
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000540)=0x3)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000580)=0x1)
writev(r1, &(0x7f0000000740)=[{&(0x7f00000005c0)="aa490e32124a44c90abcc7ec1a6b855630f1558ea04ee04c0de70b7466e127ea06988ea5ca5229b1bc382bec61f40c9118a2ce36c1d87ee6481daaf54b430ae984a45eab7c6673ad032ac65b54afc314a2735c60c725bb1a25962a915a08bdaad39a334f33dd9603d0af28cd68e63630b11d1d43ef05119aebdb6cbbd06287bb3ec8f96411cf1e74c37ed788eccc2a5ea21ea7b19f", 0x95}, {&(0x7f0000000680)="45fd1231bcbf8c", 0x7}, {&(0x7f00000006c0)="4a8fa2516cc42283a0f6d1cf7994904ef5f72855977ae50161778a5fa254356bea39f9cb475c01f8be8775eed7d0dc415786304d0eae1c15ef0324fd90f946c003fb916d77b0b2e0", 0x48}], 0x3)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000780))
clock_gettime(0x0, &(0x7f0000000d40)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000840), 0x6e, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/28, 0x1c}, {&(0x7f0000000900)=""/207, 0xcf}, {&(0x7f0000000a00)=""/198, 0xc6}, {&(0x7f0000000b00)=""/1, 0x1}, {&(0x7f0000000b40)=""/141, 0x8d}], 0x5, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}], 0x1, 0x0, &(0x7f0000000d80)={r3, r4+60000000})
perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x1, 0x60, 0xf5, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe8f, 0x4, @perf_config_ext={0x7f, 0x101}, 0x0, 0x8, 0x401, 0x6, 0x2031, 0x5, 0x9, 0x0, 0x5e6, 0x0, 0x4}, r5, 0x3, 0xffffffffffffffff, 0x9)
recvmmsg$unix(r6, &(0x7f0000001e40)=[{{&(0x7f0000000dc0), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000e40)=""/234, 0xea}, {&(0x7f0000000f40)=""/129, 0x81}, {&(0x7f0000001000)=""/130, 0x82}, {&(0x7f00000010c0)=""/197, 0xc5}, {&(0x7f00000011c0)=""/172, 0xac}, {&(0x7f0000001280)=""/94, 0x5e}, {&(0x7f0000001300)=""/137, 0x89}], 0x7, &(0x7f0000001440)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001500)=""/10, 0xa}, {&(0x7f0000001540)=""/203, 0xcb}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f0000001700)=""/220, 0xdc}, {&(0x7f0000001800)=""/121, 0x79}], 0x5, &(0x7f0000001900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001a00)=""/236, 0xec}, {&(0x7f0000001b00)=""/164, 0xa4}, {&(0x7f0000001bc0)=""/89, 0x59}, {&(0x7f0000001c40)=""/174, 0xae}], 0x4}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001dc0)=""/45, 0x2d}], 0x1}}], 0x4, 0x2042, &(0x7f0000001f40)={0x0, 0x3938700})
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000001f80))
readv(0xffffffffffffffff, &(0x7f0000002240)=[{&(0x7f0000001fc0)=""/219, 0xdb}, {&(0x7f00000020c0)=""/72, 0x48}, {&(0x7f0000002140)=""/247, 0xf7}], 0x3)
ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f0000002280))

[  160.640181] audit: type=1400 audit(1731203511.260:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
01:51:51 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = syz_io_uring_setup(0x5038, &(0x7f0000000080)={0x0, 0x22da, 0x10, 0x2, 0x38c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x7, 0x80000001, 0x0, 0x10000, 0x3}, 0x6)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200))
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000280)="bccffe91c82a6c504f9677c3134ab637c256c75a3174628c99f082a01aee303009ba6bd1504b8e521f4279f1be246ac62b2b3663aef6b69436540e9179d2c89f5439b3ac925a4e6abd12760fbbe026cf29eb5520b4887c0b0b6c2ab3221197591cc2abe79235d7c62a1383991f9057f0e6a707d96c1e0ff8b4da38ea1bf8bf")
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r4=>r1, {0xffff}}, './file0\x00'})
r5 = openat(r4, &(0x7f0000000380)='./file0/../file0\x00', 0x111065, 0x180)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x2, 0x10001, 0x0, 0x2, 0x5a, 0xfffffffffffffffa}, {0xffff0000, 0x3f, 0x2, 0xfffffffffffffff8, 0xa6, 0x1ff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
name_to_handle_at(r3, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@fuse_with_parent={0x18, 0x82, {{0x4410, 0x7e200, 0x4}, {0x750c, 0x1, 0x5}}}, &(0x7f00000006c0), 0x1600)
r6 = memfd_secret(0x80000)
statx(r6, &(0x7f0000000700)='./file0\x00', 0x2d060d3a83eac5a, 0x100, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
openat(r4, &(0x7f0000000840)='./file0\x00', 0x4002, 0x80)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r5)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r8, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x62}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000a00)=<r9=>0x0)
lchown(&(0x7f00000009c0)='./file0/../file0\x00', r9, r7)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000a40))
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4804}, 0x1)

01:51:51 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xfffffffa}}, './file0\x00'})
ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000040))
read$hidraw(r0, &(0x7f0000000080)=""/72, 0x48)
r1 = syz_open_dev$vcsu(&(0x7f0000000100), 0xbc4b, 0x10400)
read$hidraw(r1, &(0x7f0000000140)=""/33, 0x21)
pipe2(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0xc4000)
read$hidraw(r2, &(0x7f00000001c0)=""/230, 0xe6)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x4003, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x8)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0xa2040, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/dev/char', 0x20000, 0x0)
ioctl$FICLONE(r1, 0x40049409, r6)
r7 = open(&(0x7f0000000380)='./file0\x00', 0x2a0, 0x18)
ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r0)
r8 = openat$cgroup_pressure(r1, &(0x7f00000003c0)='io.pressure\x00', 0x2, 0x0)
fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f0000000400))
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0)

01:51:51 executing program 6:
io_pgetevents(0x0, 0x2329, 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f00000000c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/146, 0x92}, {&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000000240)=""/116, 0x74}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/160, 0xa0}], 0x5, &(0x7f00000004c0)=""/5, 0x5}, 0x8c}, {{&(0x7f0000000500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000580)=""/22, 0x16}, {&(0x7f00000005c0)=""/21, 0x15}, {&(0x7f0000000600)=""/99, 0x63}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f0000000840)=""/65, 0x41}, {&(0x7f00000008c0)=""/149, 0x95}, {&(0x7f0000000980)=""/110, 0x6e}], 0x8, &(0x7f0000000a80)=""/4096, 0x1000}, 0x4}], 0x2, 0x2022, &(0x7f0000001b00)={0x77359400})
clock_gettime(0x0, &(0x7f0000005100)={<r0=>0x0, <r1=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000004fc0)=[{{&(0x7f0000001b40)=@nfc, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001bc0)=""/57, 0x39}, {&(0x7f0000001c00)=""/41, 0x29}, {&(0x7f0000001c40)=""/208, 0xd0}], 0x3, &(0x7f0000001d80)=""/41, 0x29}, 0x6}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000001dc0)=""/3, 0x3}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/136, 0x88}, {&(0x7f0000002ec0)=""/160, 0xa0}, {&(0x7f0000002f80)=""/88, 0x58}, {&(0x7f0000003000)=""/162, 0xa2}, {&(0x7f00000030c0)=""/194, 0xc2}, {&(0x7f00000031c0)=""/97, 0x61}, {&(0x7f0000003240)=""/4096, 0x1000}], 0x9}, 0x80}, {{&(0x7f0000004300)=@qipcrtr, 0x80, &(0x7f0000004780)=[{&(0x7f0000004380)=""/234, 0xea}, {&(0x7f0000004480)=""/158, 0x9e}, {&(0x7f0000004540)=""/247, 0xf7}, {&(0x7f0000004640)=""/233, 0xe9}, {&(0x7f0000004740)=""/53, 0x35}], 0x5}, 0x4}, {{&(0x7f0000004800)=@rc, 0x80, &(0x7f0000004980)=[{&(0x7f0000004880)=""/244, 0xf4}], 0x1, &(0x7f00000049c0)=""/38, 0x26}, 0x5}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004a00)=""/3, 0x3}, {&(0x7f0000004a40)=""/82, 0x52}, {&(0x7f0000004ac0)=""/53, 0x35}, {&(0x7f0000004b00)=""/9, 0x9}, {&(0x7f0000004b40)=""/135, 0x87}, {&(0x7f0000004c00)=""/61, 0x3d}, {&(0x7f0000004c40)=""/250, 0xfa}, {&(0x7f0000004d40)=""/150, 0x96}, {&(0x7f0000004e00)=""/113, 0x71}, {&(0x7f0000004e80)=""/86, 0x56}], 0xa}, 0x44}], 0x5, 0x20, &(0x7f0000005140)={r0, r1+60000000})
r2 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000009800)={<r3=>0x0, <r4=>0x0})
recvmmsg(r2, &(0x7f0000009680)=[{{&(0x7f0000005180)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000007680)=[{&(0x7f0000005200)=""/93, 0x5d}, {&(0x7f0000005280)=""/230, 0xe6}, {&(0x7f0000005380)=""/100, 0x64}, {&(0x7f0000005400)=""/225, 0xe1}, {&(0x7f0000005500)=""/19, 0x13}, {&(0x7f0000005540)=""/207, 0xcf}, {&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000006640)=""/4096, 0x1000}, {&(0x7f0000007640)=""/31, 0x1f}], 0x9, &(0x7f0000007740)=""/136, 0x88}, 0x6}, {{&(0x7f0000007800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000007940)=[{&(0x7f0000007880)=""/5, 0x5}, {&(0x7f00000078c0)}, {&(0x7f0000007900)=""/6, 0x6}], 0x3, &(0x7f0000007980)=""/248, 0xf8}, 0x200}, {{&(0x7f0000007a80)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000007c80)=[{&(0x7f0000007b00)=""/243, 0xf3}, {&(0x7f0000007c00)=""/33, 0x21}, {&(0x7f0000007c40)=""/45, 0x2d}], 0x3, &(0x7f0000007cc0)=""/103, 0x67}, 0x7}, {{&(0x7f0000007d40)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000008ec0)=[{&(0x7f0000007dc0)=""/4096, 0x1000}, {&(0x7f0000008dc0)=""/211, 0xd3}], 0x2}, 0x9}, {{&(0x7f0000008f00)=@pppoe, 0x80, &(0x7f0000009080)=[{&(0x7f0000008f80)=""/250, 0xfa}], 0x1}, 0x10001}, {{&(0x7f00000090c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000009500)=[{&(0x7f0000009140)=""/2, 0x2}, {&(0x7f0000009180)}, {&(0x7f00000091c0)=""/207, 0xcf}, {&(0x7f00000092c0)=""/201, 0xc9}, {&(0x7f00000093c0)=""/28, 0x1c}, {&(0x7f0000009400)=""/99, 0x63}, {&(0x7f0000009480)=""/95, 0x5f}], 0x7, &(0x7f0000009580)=""/249, 0xf9}, 0x8}], 0x6, 0x10000, &(0x7f0000009840)={r3, r4+10000000})
r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000009a00), 0x2, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000009ac0), 0x800)
io_submit(0x0, 0x4, &(0x7f0000009c00)=[&(0x7f0000009900)={0x0, 0x0, 0x0, 0x7, 0x4, r2, &(0x7f0000009880)="9b52ea177323dd1ca87b633e7edb3ded51c7e581d731ec90dce5d9e5461a1915d2b93a7c7ac1dd02750ff7de842bb9b42537d1c7a55db2933610375b6f65ecaec36371fef0170b29f4040f5c0a371d7d24651cf2484cd81e4d5813b1b85c4af0e1de0b43001e60b13a8b4a8e8ea92e", 0x6f, 0xfffffffffffffff8, 0x0, 0x1}, &(0x7f00000099c0)={0x0, 0x0, 0x0, 0x2, 0x1, r2, &(0x7f0000009940)="27a7f2c800206d71a07a3787761eceb6833737ab84e395fa890bdfd57863eef2943c839b49d22e3dc0ecbc0faa33dba2c1609bacf81055765b0c21d999ed780438f62348c2ba372d25b9344ae0e2de107d1be21f0dd2100e06df906a5afcf165c10d32e17fc5154ab9ef2902", 0x6c, 0xfffffffffffffff8, 0x0, 0x3}, &(0x7f0000009a80)={0x0, 0x0, 0x0, 0x1, 0x5, r5, &(0x7f0000009a40), 0x0, 0x10000}, &(0x7f0000009bc0)={0x0, 0x0, 0x0, 0x1, 0x7fff, r6, &(0x7f0000009b00)="3a7bf3771f1e278064e2a9dddfdb71f6fc64ea9476a2dee19056539131f8a7626bafeaf433011ef73d24820997dbeed4af60b3d149e4a122bd32b264d09d681347fffa2f47cada8c542baa81cf80ab134ab47357e498d78aae565a50001ecfac5bf19e3d6fcd74f8ede6a0647cb18566f3a49b052b96dde940529bb5c8533a081ebeca8c0c4825d967510ba13a9e31dcd9dd557fceeb848802d8a003723f53d955d8e9b5daada69885393bd36f553fb3b33d", 0xb2, 0x3ff, 0x0, 0x1}])
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000009c40), &(0x7f0000009c80)=0x4)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = fcntl$dupfd(r6, 0x0, r2)
io_submit(0x0, 0x3, &(0x7f000000a000)=[&(0x7f0000009d80)={0x0, 0x0, 0x0, 0x0, 0x101, r7, &(0x7f0000009cc0)="3ca52f4f0df8b38daf96010392ac87836e4a49a19f8c43d9f8f74f141141c782c226f58a0cce1d2511f063bbe405664b6fb524601791e7bbbcd85fd18b7434ba650640db8373c325d039fbac4bb236c2c1dad585906c6517229017b3aaa183bd3288ddf5032b937f9ae4b7373ce8e2a5de8fc7fd2828b76bb1cd8b9894bc7509d8cc0f40c686dbc5c216c368223b1acf636f0fdcf6", 0x95, 0x7fffffff, 0x0, 0x0, r8}, &(0x7f0000009ec0)={0x0, 0x0, 0x0, 0x7, 0x1ff, r5, &(0x7f0000009dc0)="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", 0xfb, 0x401}, &(0x7f0000009fc0)={0x0, 0x0, 0x0, 0x2, 0x3, r5, &(0x7f0000009f00)="1872ef8799cc6b6b7b2142d3653c800f211514a71072d07efbe4919039fb34d8c31186c21f732c6d36e3f1a5ec08a6833b3a844e021d6931bc801d781d7c4d35cc1a3659e0c91bf3f512668cd719f521b2cf2d1f8b613f3bb517e5d8969183aa7e62c0febd3faef3ece10364610ea438f6b395b511ba44d4f00068784f0de5b296f0b2ba7c05fa41ab3ff0514d7ac62d9c435ddc7b855e22bd5dd641898e2d8ba87714d1fa8534", 0xa7, 0xffff}])
r9 = socket$inet6(0xa, 0x5, 0x3f)
recvmmsg(r9, &(0x7f000000a580)=[{{&(0x7f000000a040)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000a280)=[{&(0x7f000000a0c0)=""/136, 0x88}, {&(0x7f000000a180)=""/199, 0xc7}], 0x2, &(0x7f000000a2c0)=""/214, 0xd6}, 0x7f}, {{&(0x7f000000a3c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f000000a440), 0x0, &(0x7f000000a480)=""/209, 0xd1}, 0xb21a}], 0x2, 0x40000140, &(0x7f000000a600)={0x77359400})
io_setup(0x80000001, &(0x7f000000a640))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f000000a680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'})
setsockopt$inet6_group_source_req(r8, 0x29, 0x2f, &(0x7f000000a6c0)={0x80000000, {{0xa, 0x4e21, 0x9, @mcast2, 0x6}}, {{0xa, 0x4e20, 0x800, @mcast1, 0x88}}}, 0x108)

01:51:51 executing program 7:
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x288, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xa7}, {0x5}, {0x6, 0x11, 0x1ff}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x42b}, {0x6, 0x16, 0x1000}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x89}, {0x6, 0x16, 0xfffe}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x20}, {0x8, 0xb, 0x134}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x3f}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x400}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8f6}, {0x8, 0xb, 0x3fc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x80000001}}]}, 0x288}, 0x1, 0x0, 0x0, 0xd0}, 0xc001)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc080000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1d8, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xc9, 0xc5, "0c15a67a1a3729528f2321302a5f274c88ba38434e7ff9fe03d910d6b8d4675b87819d781d2d9cb428a4e5cf332aea58fa2ed5fdcd202c53e629d4b3a00f6849ae306593438069771172a0177af46d7eaea6e06a2c07e7f6a7e24dcfef6888f4a834a732bb04b189a06056b6765c5011f3fca1f73cdbfa11a6c5b5d7d740105f6404c876a38f5f1af55990a01824affa12419774a866ef35f3b4c9dddef6a221d9939fc2f5ffdc6a71f7a922a78db0977cf04c87f40386c85373f10906a9c9ab789b4f6623"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1400000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x16}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3e}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0xc6, 0xc5, "dbe9cedb48a0a616d862508d6e21252951d6e30ca7b5d7a3db2d9eb20471a659429d64d00ed737daf6ea3908cb79162c3ea8385bab4e0ca5c3f38ae05b5b58f1ae02d59e31f3af402d883b313aca8991cfeadc5f7b21481e032d1a9efce8a2575f887f6e978bfbbe5c79ba00745532eb7d0f1033188e73eea2b1124e7e3e3291d69ea67cd991a36b4d63ee424f5a59daed42691f1c4069a0d6cef50021f9f84b6cdc19070af5c1586e2c717835bd2dffa3e81bc6b64d03daf9b2f88a38bd2fccfda9"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x9c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x4d}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x400}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x59, 0x33, @action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xff}, @broadcast, @broadcast, @random="4a94225b1313", {0x8, 0x2}}, @tdls_setup_req={0xc, 0x0, "", 0x4, @void, @val={0x1, 0x8, [{0x9, 0x1}, {0x0, 0x1}, {0x48, 0x1}, {0x12}, {0xb}, {0xb, 0x1}, {0x1b, 0x1}, {0xb}]}, @val={0x2d, 0x1a, {0x1000, 0x0, 0x0, 0x0, {0x20e1, 0x3f, 0x0, 0x3ff, 0x0, 0x1, 0x1, 0x3}, 0x1, 0x4, 0x1}}, @val={0x65, 0x12, {@random="c19da8d94f80", @broadcast}}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x348}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x5)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x40001)
r3 = syz_open_dev$vcsn(&(0x7f0000000980), 0x40, 0x10300)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000c40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)={0x1fc, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x535, 0x24}}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x683}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x10000000, 0x7, 0x4, 0x401, 0x1, 0x3]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7e, 0x29]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0xff, 0x0]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6c38}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x74, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x7, 0xfffffffb, 0x7f, 0x5, 0x8, 0x4, 0x200, 0xc9f1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x40, 0x1f, 0xe4, 0x1a8c0000, 0x3384, 0x2, 0xffffffff]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x5, 0xeeb2, 0xffffffff, 0x1000, 0x3, 0x0]}]}, @NL80211_ATTR_CQM={0x84, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x4, 0x25, 0x7, 0x0, 0xc2, 0x1, 0x5bb, 0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x1, 0xc000000, 0x1, 0x4, 0x40]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x38a}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x40}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8f7, 0x1, 0x12500000]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000085}, 0x100)
sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000010)
recvmsg$unix(r3, &(0x7f0000002400)={&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000000e40)=""/51, 0x33}, {&(0x7f0000000e80)=""/236, 0xec}, {&(0x7f0000000f80)=""/190, 0xbe}, {&(0x7f0000001040)=""/190, 0xbe}, {&(0x7f0000001100)=""/227, 0xe3}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/131, 0x83}], 0x7, &(0x7f0000002340)=[@rights={{0x24, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x21)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x1c, 0x0, 0xa02, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40010)
sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x39}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMKID={0x14, 0x55, "02103f6c5a821e2098db6b8b9e243094"}, @NL80211_ATTR_PMK={0x14, 0xfe, "99796feac3dcb4bcef7768acb9717b1b"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040885}, 0x4000000)
ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000002680)={0x0, "a539a1fc3df42e6dfa3d92ec4760e535"})
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000036c0), 0x0, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003680), r8)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SET_MACPARAMS(r10, &(0x7f00000037c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x14, 0x0, 0x812, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000000)
vmsplice(r1, &(0x7f0000003a00)=[{&(0x7f0000003800)="32ea7d5addab98ab1e460bfa0500fa84d2e125a3bd54ba9bec8564d83ba537591d4ad5d29dcf510acf6a0d1d63e4f58ad527f201576f8174c1b4f7194bffa36c17f91ae8705e24d445960e6c59b35f2d6bfd590d9cf51c328fda917e13674b1e6ca9793f6a2d2d99ac7e5c60acf96df108d0ef565984c17de010d7c578651eb43c77827fdde0091b2f0f3b29a0390a344ccd07642b215bb4a65ed91691261262c899f19cb265c72a628b3875c90576098705a4f29c2f14ffeb4516a5d624920ecb282dafc44744a96c8d2e76fbd365c93866ce74bd7bc8d0e0ea480d34ed", 0xde}, {&(0x7f0000003900)="fd4860e2adcd303c612b86adf1c45fbf027cad7f1ed6a2775a79e435309181fc1dd61d0f70e7b2f9f51270b799cde0309a2d3ffa8434490c00642b16c12f3811e3813206716b15e9d27fab2d3bf2c8b5e4f8806a42dd3dff6ece79f1704d6f5dd0a78ba5dd2e95c052ea46b43df4024c83e81235d93d938afee07cc17c9916e000d44bbc8319ab75ebc745330f6e51853b4b147650c1d3bb96754105238cd5682c6c58e2f34a5f653a670ed207672ef3a8d2049efe79e586baad5f5a34147d59d63ec365c59bcb9e693a8dd3819e7b", 0xcf}], 0x2, 0x2)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x28, r9, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x80000)

[  161.986746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  161.991966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  161.993529] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  161.997149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  161.999490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  162.001697] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  162.103737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  162.106800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  162.111602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  162.119163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  162.124037] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  162.126174] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  162.131330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  162.136077] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  162.144327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  162.178907] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  162.208956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  162.214720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  162.217724] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  162.218796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  162.221157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  162.223142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  162.225225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  162.228726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  162.239492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  162.241079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  162.247983] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  162.252212] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  162.253912] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  162.254782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  162.260084] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  162.260261] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  162.263862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  162.268780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  162.284640] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  162.287872] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  162.289338] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  162.293637] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  162.294942] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  162.301664] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  162.310745] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  162.311214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  162.316725] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  162.319776] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  162.319905] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  162.321973] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  162.327583] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  162.330073] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  164.075464] Bluetooth: hci0: command tx timeout
[  164.203056] Bluetooth: hci1: command tx timeout
[  164.267501] Bluetooth: hci2: command tx timeout
[  164.331611] Bluetooth: hci3: command tx timeout
[  164.398779] Bluetooth: hci6: command tx timeout
[  164.398826] Bluetooth: hci4: command tx timeout
[  164.400482] Bluetooth: hci5: command tx timeout
[  164.402155] Bluetooth: hci7: command tx timeout
[  166.123903] Bluetooth: hci0: command tx timeout
[  166.251611] Bluetooth: hci1: command tx timeout
[  166.317594] Bluetooth: hci2: command tx timeout
[  166.378556] Bluetooth: hci3: command tx timeout
[  166.442748] Bluetooth: hci5: command tx timeout
[  166.443288] Bluetooth: hci4: command tx timeout
[  166.443354] Bluetooth: hci7: command tx timeout
[  166.443982] Bluetooth: hci6: command tx timeout
[  168.170629] Bluetooth: hci0: command tx timeout
[  168.298582] Bluetooth: hci1: command tx timeout
[  168.362534] Bluetooth: hci2: command tx timeout
[  168.437296] Bluetooth: hci3: command tx timeout
[  168.490571] Bluetooth: hci4: command tx timeout
[  168.491148] Bluetooth: hci5: command tx timeout
[  168.492527] Bluetooth: hci6: command tx timeout
[  168.493075] Bluetooth: hci7: command tx timeout
[  170.218577] Bluetooth: hci0: command tx timeout
[  170.346598] Bluetooth: hci1: command tx timeout
[  170.410589] Bluetooth: hci2: command tx timeout
[  170.474529] Bluetooth: hci3: command tx timeout
[  170.538785] Bluetooth: hci6: command tx timeout
[  170.539340] Bluetooth: hci7: command tx timeout
[  170.540629] Bluetooth: hci5: command tx timeout
[  170.541190] Bluetooth: hci4: command tx timeout
[  222.024135] syz-executor.7 (288) used greatest stack depth: 23664 bytes left
[  224.927189] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  224.934870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  224.936174] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  224.940298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  224.942818] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  224.944018] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  224.962887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  224.964677] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  224.967183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  224.985170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  224.991041] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  224.992479] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  225.083572] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  225.088687] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  225.090555] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  225.098156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  225.103678] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  225.107144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  225.161841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  225.174698] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  225.179907] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  225.189194] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  225.198825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  225.206186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  225.209832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  225.215225] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  225.217196] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  225.226587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  225.227372] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  225.232517] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  225.233911] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  225.241752] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  225.252378] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  225.254006] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  225.255153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  225.262718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  225.271006] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  225.293000] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  225.292999] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  225.296969] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  225.313390] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  225.330780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  225.332483] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  225.333336] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  225.342815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  225.387198] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  225.401670] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  225.408811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  226.986615] Bluetooth: hci0: command tx timeout
[  227.051737] Bluetooth: hci1: command tx timeout
[  227.179604] Bluetooth: hci2: command tx timeout
[  227.306580] Bluetooth: hci4: command tx timeout
[  227.370655] Bluetooth: hci5: command tx timeout
[  227.371804] Bluetooth: hci3: command tx timeout
[  227.690579] Bluetooth: hci7: command tx timeout
[  228.330532] Bluetooth: hci6: command tx timeout
[  229.034953] Bluetooth: hci0: command tx timeout
[  229.098573] Bluetooth: hci1: command tx timeout
[  229.226594] Bluetooth: hci2: command tx timeout
[  229.356813] Bluetooth: hci4: command tx timeout
[  229.418544] Bluetooth: hci5: command tx timeout
[  229.419123] Bluetooth: hci3: command tx timeout
[  229.738610] Bluetooth: hci7: command tx timeout
[  230.378551] Bluetooth: hci6: command tx timeout
[  231.082651] Bluetooth: hci0: command tx timeout
[  231.146557] Bluetooth: hci1: command tx timeout
[  231.274519] Bluetooth: hci2: command tx timeout
[  231.402568] Bluetooth: hci4: command tx timeout
[  231.467685] Bluetooth: hci3: command tx timeout
[  231.468262] Bluetooth: hci5: command tx timeout
[  231.787672] Bluetooth: hci7: command tx timeout
[  232.426484] Bluetooth: hci6: command tx timeout
[  233.130530] Bluetooth: hci0: command tx timeout
[  233.194964] Bluetooth: hci1: command tx timeout
[  233.322504] Bluetooth: hci2: command tx timeout
[  233.450507] Bluetooth: hci4: command tx timeout
[  233.515878] Bluetooth: hci5: command tx timeout
[  233.516556] Bluetooth: hci3: command tx timeout
[  233.834614] Bluetooth: hci7: command tx timeout
[  234.474545] Bluetooth: hci6: command tx timeout
[  287.492840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  287.500666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  287.501800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  287.509817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  287.512266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  287.513783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  287.809252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  287.813943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  287.815473] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  287.816535] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  287.821018] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  287.824636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  287.826923] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  287.828310] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  287.836179] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  287.859828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  287.861770] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  287.864735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  287.882494] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  287.900628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  287.906736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  287.911838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  287.916656] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  287.918792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  287.930629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  287.933176] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  287.934151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  287.937729] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  287.939060] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  287.942354] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  287.946844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  287.948612] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  287.950936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  287.957711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  287.960630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  287.962660] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  287.965453] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  287.966891] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  287.967955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  287.972511] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  287.975010] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  287.990059] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  288.010956] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  288.014500] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  288.015705] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  288.018174] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  288.019741] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  288.021015] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  289.578502] Bluetooth: hci0: command tx timeout
[  289.898752] Bluetooth: hci2: command tx timeout
[  289.898963] Bluetooth: hci1: command tx timeout
[  290.026680] Bluetooth: hci4: command tx timeout
[  290.026857] Bluetooth: hci3: command tx timeout
[  290.090805] Bluetooth: hci7: command tx timeout
[  290.090960] Bluetooth: hci5: command tx timeout
[  290.092747] Bluetooth: hci6: command tx timeout
[  291.626480] Bluetooth: hci0: command tx timeout
[  291.946549] Bluetooth: hci1: command tx timeout
[  291.948200] Bluetooth: hci2: command tx timeout
[  292.074556] Bluetooth: hci4: command tx timeout
[  292.076081] Bluetooth: hci3: command tx timeout
[  292.138568] Bluetooth: hci6: command tx timeout
[  292.139957] Bluetooth: hci7: command tx timeout
[  292.140017] Bluetooth: hci5: command tx timeout
[  293.674509] Bluetooth: hci0: command tx timeout
[  293.994500] Bluetooth: hci2: command tx timeout
[  293.995970] Bluetooth: hci1: command tx timeout
[  294.122549] Bluetooth: hci4: command tx timeout
[  294.122728] Bluetooth: hci3: command tx timeout
[  294.186499] Bluetooth: hci6: command tx timeout
[  294.187961] Bluetooth: hci7: command tx timeout
[  294.188527] Bluetooth: hci5: command tx timeout
[  295.723632] Bluetooth: hci0: command tx timeout
[  296.043017] Bluetooth: hci2: command tx timeout
[  296.044545] Bluetooth: hci1: command tx timeout
[  296.170539] Bluetooth: hci4: command tx timeout
[  296.170684] Bluetooth: hci3: command tx timeout
[  296.236683] Bluetooth: hci5: command tx timeout
[  296.237473] Bluetooth: hci7: command tx timeout
[  296.238123] Bluetooth: hci6: command tx timeout
[  350.203908] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  350.207659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  350.209878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  350.215469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  350.219508] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  350.223597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  350.517014] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  350.518694] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  350.519866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  350.525628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  350.533770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  350.537475] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  350.641086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  350.651909] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  350.653889] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  350.655437] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  350.656181] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  350.659873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  350.662287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  350.665657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  350.668405] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  350.681928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  350.686620] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  350.687724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  350.738162] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  350.740923] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  350.761518] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  350.769506] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  350.772635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  350.773680] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  350.776624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  350.781928] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  350.781980] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  350.785692] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  350.789665] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  350.794294] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  350.796587] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  350.798005] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  350.802637] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  350.803429] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  350.805160] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  350.811261] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  350.812681] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  350.814220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  350.817979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  350.828233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  350.835089] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  350.839865] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  352.298546] Bluetooth: hci0: command tx timeout
[  352.554950] Bluetooth: hci1: command tx timeout
[  352.747534] Bluetooth: hci2: command tx timeout
[  352.812560] Bluetooth: hci3: command tx timeout
[  352.874618] Bluetooth: hci5: command tx timeout
[  352.876252] Bluetooth: hci7: command tx timeout
[  352.876986] Bluetooth: hci4: command tx timeout
[  352.939605] Bluetooth: hci6: command tx timeout
[  354.346437] Bluetooth: hci0: command tx timeout
[  354.602451] Bluetooth: hci1: command tx timeout
[  354.794701] Bluetooth: hci2: command tx timeout
[  354.858735] Bluetooth: hci3: command tx timeout
[  354.923439] Bluetooth: hci7: command tx timeout
[  354.923961] Bluetooth: hci5: command tx timeout
[  354.924769] Bluetooth: hci4: command tx timeout
[  354.986505] Bluetooth: hci6: command tx timeout
[  356.394527] Bluetooth: hci0: command tx timeout
[  356.651440] Bluetooth: hci1: command tx timeout
[  356.844399] Bluetooth: hci2: command tx timeout
[  356.906443] Bluetooth: hci3: command tx timeout
[  356.970531] Bluetooth: hci7: command tx timeout
[  356.970813] Bluetooth: hci4: command tx timeout
[  356.971029] Bluetooth: hci5: command tx timeout
[  357.035400] Bluetooth: hci6: command tx timeout
[  358.442445] Bluetooth: hci0: command tx timeout
[  358.699430] Bluetooth: hci1: command tx timeout
[  358.890749] Bluetooth: hci2: command tx timeout
[  358.956528] Bluetooth: hci3: command tx timeout
[  359.020422] Bluetooth: hci4: command tx timeout
[  359.020920] Bluetooth: hci7: command tx timeout
[  359.021863] Bluetooth: hci5: command tx timeout
[  359.083531] Bluetooth: hci6: command tx timeout
[  402.757113] hrtimer: interrupt took 7553921 ns
[  412.984335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  412.986549] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  412.987591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  412.989819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  412.993572] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  412.995738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  413.298734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  413.300193] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  413.301641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  413.305972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  413.308189] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  413.311964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  413.391015] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  413.392891] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  413.393957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  413.402070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  413.407709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  413.412577] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  413.414126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  413.416989] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  413.418219] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  413.439059] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  413.442913] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  413.445141] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  413.447060] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  413.451953] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  413.457099] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  413.472610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  413.478628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  413.482992] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  413.486100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  413.488833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  413.492083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  413.494023] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  413.502150] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  413.506793] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  413.509891] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  413.514316] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  413.517873] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  413.518016] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  413.520011] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  413.523124] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  413.525486] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  413.528947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  413.546308] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  413.554117] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  413.561145] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  413.599818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  415.018543] Bluetooth: hci0: command tx timeout
[  415.339498] Bluetooth: hci1: command tx timeout
[  415.532450] Bluetooth: hci3: command tx timeout
[  415.594514] Bluetooth: hci5: command tx timeout
[  415.595516] Bluetooth: hci2: command tx timeout
[  415.660478] Bluetooth: hci6: command tx timeout
[  415.662674] Bluetooth: hci4: command tx timeout
[  415.664158] Bluetooth: hci7: command tx timeout
[  417.067469] Bluetooth: hci0: command tx timeout
[  417.386565] Bluetooth: hci1: command tx timeout
[  417.579471] Bluetooth: hci3: command tx timeout
[  417.643593] Bluetooth: hci5: command tx timeout
[  417.644143] Bluetooth: hci2: command tx timeout
[  417.707472] Bluetooth: hci7: command tx timeout
[  417.709129] Bluetooth: hci4: command tx timeout
[  417.710482] Bluetooth: hci6: command tx timeout
[  419.114769] Bluetooth: hci0: command tx timeout
[  419.435551] Bluetooth: hci1: command tx timeout
[  419.626435] Bluetooth: hci3: command tx timeout
[  419.691475] Bluetooth: hci5: command tx timeout
[  419.692029] Bluetooth: hci2: command tx timeout
[  419.756328] Bluetooth: hci7: command tx timeout
[  419.757905] Bluetooth: hci4: command tx timeout
[  419.758456] Bluetooth: hci6: command tx timeout
[  421.162497] Bluetooth: hci0: command tx timeout
[  421.482618] Bluetooth: hci1: command tx timeout
[  421.676402] Bluetooth: hci3: command tx timeout
[  421.738470] Bluetooth: hci5: command tx timeout
[  421.739026] Bluetooth: hci2: command tx timeout
[  421.802442] Bluetooth: hci7: command tx timeout
[  421.803677] Bluetooth: hci4: command tx timeout
[  421.804156] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
01:56:53  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff88800f625ce2 RCX=1ffffffff0fe1688 RDX=dffffc0000000000
RSI=0000000000000080 RDI=ffffffff87f0b440 RBP=ffff88800f625280 RSP=ffff88803ee2fb30
R8 =0000000000000000 R9 =fffffbfff0fdc5f0 R10=ffffffff87ee2f87 R11=0000000000000001
R12=ffff88803eef5220 R13=ffffffff87f0b3e0 R14=0000000000000004 R15=ffff88800f625cc0
RIP=ffffffff812fc43b RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f9d89eeb540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9d8a3c3000 CR3=000000003e3b0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=315f315f4c53534e45504f00315f315f XMM03=0000000000000063667100706d636e72
XMM04=5f4f495f00656d697466736377007476 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000004 RCX=1ffffffff0c7e7a9 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff818bc624 RBP=ffff8880165a4400 RSP=ffff888035117e48
R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff863f7797 R11=00000000000c33ea
R12=00000000fffffffe R13=00000000ffffff9c R14=ffff888035117eb8 R15=0000000000000000
RIP=ffffffff8151d954 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fece077c020 CR3=000000000ed9e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000ffffff000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000