Warning: Permanently added '[localhost]:48535' (ECDSA) to the list of known hosts.
2025/01/23 01:17:43 fuzzer started
2025/01/23 01:17:44 dialing manager at localhost:38529
syzkaller login: [   69.200501] cgroup: Unknown subsys name 'net'
[   69.334219] cgroup: Unknown subsys name 'cpuset'
[   69.384923] cgroup: Unknown subsys name 'rlimit'
[   74.178544] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/23 01:18:00 syscalls: 2217
2025/01/23 01:18:00 code coverage: enabled
2025/01/23 01:18:00 comparison tracing: enabled
2025/01/23 01:18:00 extra coverage: enabled
2025/01/23 01:18:00 setuid sandbox: enabled
2025/01/23 01:18:00 namespace sandbox: enabled
2025/01/23 01:18:00 Android sandbox: enabled
2025/01/23 01:18:00 fault injection: enabled
2025/01/23 01:18:00 leak checking: enabled
2025/01/23 01:18:00 net packet injection: enabled
2025/01/23 01:18:00 net device setup: enabled
2025/01/23 01:18:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/23 01:18:00 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/23 01:18:00 USB emulation: enabled
2025/01/23 01:18:00 hci packet injection: enabled
2025/01/23 01:18:00 wifi device emulation: enabled
2025/01/23 01:18:00 802.15.4 emulation: enabled
2025/01/23 01:18:00 fetching corpus: 0, signal 0/2000 (executing program)
2025/01/23 01:18:00 fetching corpus: 0, signal 0/4000 (executing program)
2025/01/23 01:18:00 fetching corpus: 0, signal 0/6000 (executing program)
2025/01/23 01:18:00 fetching corpus: 0, signal 0/6463 (executing program)
2025/01/23 01:18:00 fetching corpus: 0, signal 0/6463 (executing program)
2025/01/23 01:18:02 starting 8 fuzzer processes
01:18:02 executing program 0:
r0 = epoll_create(0x5)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001400)={{0x1, 0x1, 0x18, <r1=>r0, {0x6}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001480), r1)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xac, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x80000000}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100000000}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000004)
syz_genetlink_get_family_id$gtp(&(0x7f0000001600), 0xffffffffffffffff)
ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000001640)={'\x00', 0x2, 0x1})
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000016c0), 0x464840, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0x94, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEYS={0x58, 0x51, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f1249780b3"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x6, 0x1}, {0x12, 0x1}, {0x1}, {0x3d}, {0x6c, 0x1}, {0x60}, {0x48}, {0x36, 0x1}, {0x30, 0x1}, {0x16}, {0x3, 0x1}, {0x6}, {0xc, 0x1}, {0x60}, {0x6c}, {0x36, 0x1}, {0x16}, {0x9, 0x1}, {0x6, 0x1}, {0x24}, {0x18, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xc0}, 0x4000090)
r4 = dup2(r0, r0)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001880))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r4, &(0x7f00000018c0)={0x2004})
r5 = socket(0x22, 0x2, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000001900), r5)
getsockname(r4, &(0x7f0000001940)=@pppol2tpin6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000019c0)=0x80)
sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000020)
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000001b00)={'veth1_to_team\x00', 0x9})
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b80), r1)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x30, r7, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1c4a, 0xfffffffb, 0x400, 0xffffffe0}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004040)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001c80)={{0x1, 0x1, 0x18, <r8=>r4}, './file0\x00'})
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000001cc0), 0x4)

01:18:02 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x0, 0x40}}, './file0\x00'})
ioctl$TCSBRK(r0, 0x5409, 0x240000000)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000040)={{0x0, 0xbb, 0x200, 0x43a1, 0x7f, 0x3, 0x8, 0x3, 0x41, 0x3, 0x9, 0x4fd9eebd, 0xffffffffffffffff, 0x43d, 0x9}})
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000001040)={0x0, 0x0, 0xfffd, 0xfff})
ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000001080))
fallocate(r0, 0x8, 0x1, 0x7b1)
ioctl$TCGETA(r0, 0x5405, &(0x7f00000010c0))
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000001100))
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001140)={<r2=>r0, 0x4, 0x4, 0x100000001})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f00000012c0))
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001300)={0x4, 0x7}, 0x4)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000001340)={0x9, 0xffb9, 0x1, 0x20, 0x10, "5670ee9d5448fa85"})
r4 = memfd_secret(0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000001380))
r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000013c0), 0x470000, 0x0)
shutdown(r5, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001440)=0x1, 0x4)

01:18:02 executing program 2:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r0=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x20000000)
r3 = dup(0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x86b592c42bd9cb1c}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x22, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000340)=@add_del={0x2, &(0x7f0000000300)='veth1\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20040000)
sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x3d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x10000080}, 0x24000000)
ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000680))
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x54}}, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x5163bbfd62096041}]}, 0x20}, 0x1, 0x0, 0x0, 0x4088010}, 0x4035)
sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0xa3e, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x43}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20008000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan3\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan4\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4080)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x50, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044804}, 0x20008004)

01:18:02 executing program 3:
io_setup(0x800, &(0x7f0000000000)=<r0=>0x0)
io_pgetevents(r0, 0x7, 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f0000000100)={0x77359400}, 0x0)
io_setup(0x6, &(0x7f0000000140)=<r1=>0x0)
io_destroy(r1)
sched_rr_get_interval(0x0, &(0x7f0000000180))
r2 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8001, 0x5, &(0x7f0000000440)=[{&(0x7f0000000240)="714b9c1f36e67cbbdac5c41f273a1075cacbc1ea092e1419b5d9e8f0f9af55df1e1381366a531f7b26737df86ed87eaeaca5de255389a346035a334ba13add64f691", 0x42, 0xff}, {&(0x7f00000002c0)="cef8513010e0fd2d74490ea1afccf763afd48cfdd62d93884ffd4e59a4d2244802f5d0b2717a565a0998ba04e856e087f63b8e0d8c20b7fcefb414dd987848cde3a6ef92a5992b94afbfba525c34d413b2cbd5b52b20", 0x56, 0x1}, {&(0x7f0000000340), 0x0, 0x5d}, {&(0x7f0000000380)="4987b7e257e5e83cdfa62d9afb73a8fc8dc4931a40e008b9debe0f7b30f8ddec1bc471750da6acbb91c9caf8bef91bf5f9df12d923fa8d45d2b10b689b32096966df9de47d4109bc82438e8ae4ac6d0168a7f1edbbe01db04ade75d2a7a10f9948ea9024c02580c794b067fff8906f38095c6dccff7eb2b05a00555dca557aea", 0x80, 0x2}, {&(0x7f0000000400)="fd254ba0761d5a829bcf629fa59c9bc828b032261a646046f1e01aaf54b79a4bb07644b89dbd01a387e645f2fd7902e0da38b7ed6eed44", 0x37, 0x400}], 0x1488, &(0x7f00000004c0)={[{@uid}, {@sbsector={'sbsector', 0x3d, 0x200}}, {@sbsector={'sbsector', 0x3d, 0x2}}, {@overriderock}, {@session={'session', 0x3d, 0x56}}], [{@fowner_gt={'fowner>', 0xee00}}, {@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@appraise}]})
fremovexattr(r2, &(0x7f00000005c0)=@random={'os2.', '-#!\x00'})
clock_nanosleep(0x6559c31319e2fc32, 0x0, &(0x7f0000000600), 0x0)
r3 = accept(0xffffffffffffffff, &(0x7f0000000640)=@xdp, &(0x7f00000006c0)=0x80)
r4 = accept$inet6(r3, 0x0, &(0x7f0000000700))
ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000740)='netdevsim0\x00')
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, 0x0, 0x100, 0x70bd2b, 0xffffff8a, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x16}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xe5b1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x50}, 0x1, 0x0, 0x0, 0xd5}, 0x24000040)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000008c0))
futex(&(0x7f0000000900)=0x1, 0xb, 0x1, &(0x7f0000000940), &(0x7f0000000980)=0x2, 0x0)
accept4$packet(r3, &(0x7f0000000a00)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14, 0x800)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4c004)
ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000b40))
pipe2(&(0x7f0000000b80)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000bc0)='&\xae/\'\x00', &(0x7f0000000c00)='./file0/file0\x00', 0xffffffffffffff9c)
eventfd2(0xffffffff, 0x800)

01:18:02 executing program 6:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x92e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x6f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x400}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8880}, 0x24008000)
sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x301200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4001)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0x4, 0x9, 0x8, 0x9}, {0x3, 0x6, 0x3, 0x6}, {0x401, 0x81, 0x5, 0x1}, {0x559, 0x80}, {0x9, 0x5, 0x3, 0x1}, {0x0, 0x3, 0x2, 0x800}, {0x6d9, 0x1, 0x4, 0x3}, {0x1, 0x0, 0x3, 0x1}, {0x800, 0xde, 0x7f, 0x3}]}, 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x20000, 0x4d)
r4 = creat(&(0x7f0000000540)='./file0\x00', 0x38)
getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000580)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0x1, 0x4, 0x0, 0x2, 0x9]}, &(0x7f0000000600)=0x78)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000640)={0x100, 0x1000, 0x18000, 0x1, 0x3})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x5}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x800}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x245386c2}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r5=>r1, {0x2}}, './file0\x00'})
getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000007c0)={'ipvs\x00'}, &(0x7f0000000800)=0x1e)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000880)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40011}, 0x2004c880)
sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x46}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, <r7=>r0, {0x1}}, './file0\x00'})
sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000001000)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0xfcc7d14176d6d0da}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000b40)={0x448, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x41c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'PPPPPP'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!}!!{\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[]-!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '-::{)**\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x190, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffeffff}]}, {0x4}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ipvs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^\\\xc8$#&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9223}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ipvs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '{,-.\x95-*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(-+\xe8\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#-(z##\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x11*/:!\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'PPPPPP'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xdc, 0x5, "dc583344e454fb0ecaca899db8e9e18a7fb6953c7a3aabc27bca6091cbdb899a4f3ea0a49085f854366251042596c185fd0029c85e295b5c747d70b996d090c145527180ff9281d0927516fcca098eb90926beed94ba70d992fc923433b5f8bbecd361c2123e9c3b122566467653089603b9df1d79e3bc9415ec335c1880968626d26d5e57327b3851085b3731f33f9967c8e787427fdcbdb7be5a5a9bd526496ddf8b194271561710fca8f0e1ac55f0c75ef1fa8a385fc01726d7c2c70be483fb3f379279f74a47544af58808c3134cee05518ea75207ef"}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x4}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '!]}){+.{:}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ipvs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x416}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '@**)&:$])+-\\.\'{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffa0f7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}]}]}, 0x448}, 0x1, 0x0, 0x0, 0xc0}, 0x20000040)
getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000001040)={'filter\x00', 0xfb, "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"}, &(0x7f0000001180)=0x11f)

[   87.286100] audit: type=1400 audit(1737595082.708:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
01:18:02 executing program 5:
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x22, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x2b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x900, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x81}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xeb}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1ff}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0x78b7e979b1372f59}, 0x4000000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan4\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x30100801}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x16}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40880}, 0x48004)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x19c, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x1}, 0x80)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x87a01}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0xc814}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r6, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_CCA_MODE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xd0}, 0x7ce4b4e4ae3fffd)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r8, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2800c000}, 0x40000)
accept4(0xffffffffffffffff, &(0x7f0000000c80)=@l2, &(0x7f0000000d00)=0x80, 0x81000)

01:18:02 executing program 4:
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x45055400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xddc, 0x4f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x1)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x24}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c885}, 0x4000014)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x98, 0x0, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1b}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}]}, 0x98}}, 0x24008044)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000004c0)=0x8c23, 0x4)
ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000500))
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x44}}, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x88, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x10f, 0x64}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0xc1}, 0x801)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x80)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xb67d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0xc0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4008044)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @link='syz0\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000804)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x10)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000e00)='.log\x00', 0x80080, 0x164)
sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x10, 0x3f8, 0x10, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x70, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000061)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r2)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000001180)={&(0x7f0000001080), 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4041)

01:18:02 executing program 7:
syncfs(0xffffffffffffffff)
fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/227)
r0 = dup(0xffffffffffffffff)
r1 = syz_open_dev$rtc(&(0x7f0000000340), 0xfffffffffffffff9, 0x24a000)
splice(r0, &(0x7f0000000100)=0x6, r1, &(0x7f0000000380)=0x8, 0x200, 0x2)
pread64(r1, &(0x7f00000003c0)=""/51, 0x33, 0x7ff)
ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000400)={{0x3}, {0x69, 0x3}, 0x7, 0x1})
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000440)={0x4, 0x6, 0x1, 0x1000}, 0x10)
utimensat(r0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={{0x77359400}, {0x0, 0x2710}}, 0x100)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x134, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_IE={0x24, 0x2a, [@chsw_timing={0x68, 0x4, {0x8, 0x3}}, @peer_mgmt={0x75, 0x14, {0x1, 0x5, @void, @void, @val="afb445b940de7f17651f10939c7e198c"}}, @ibss={0x6, 0x2, 0x4df}]}, @NL80211_ATTR_IE={0xd3, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0x0, 0x3}}, @mic={0x8c, 0x10, {0xcf3, "7b3efa3d417c", @short="6b7d7d36adb3dd7f"}}, @random_vendor={0xdd, 0xaa, "3868e846fca5c60a53270d232d70f91d48d74fc80722696952eb465e9af7cabff69deac95050bb46b6864c93a577f9bb1b9417b195b9ff8f266d7d372c0865c2344a9dcdd0819eb8d918301a37f95087b40ca112af622a9868478e7fabac1541af89dd34095afa4abaeb86b4374b906713fde58812583fb4c6b79ef3e9e98026687ece216bb346d873f7cbdb998083136459bd048a0b777087ec61fa8c6072ccfa1e3389787c34bfc9f8"}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}]}, 0x134}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/custom0\x00', 0x800, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000740))
pipe(&(0x7f0000000780)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000007c0)={0x3})
fcntl$getownex(r1, 0x10, &(0x7f0000000800))
fsync(r1)
lgetxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=@known='system.posix_acl_default\x00', &(0x7f00000008c0)=""/1, 0x1)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x10, 0x3e24, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x130}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10ef}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12b2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xccc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20048012)
llistxattr(&(0x7f0000000a40)='./file1\x00', &(0x7f0000000a80)=""/193, 0xc1)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000b80)={'veth0_to_hsr\x00', 0x9})

[   88.640696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.644449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.647739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.654172] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.658045] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   88.660592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.693864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.702833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.705527] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.713932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.717550] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.720013] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.722777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.723437] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.723904] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.727952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.728979] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   88.731140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.731696] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.739536] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   88.742471] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.742765] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.755323] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   88.762308] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.763565] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.770024] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.784355] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.792563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.800845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   88.803107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.825750] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   88.835099] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   88.838797] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   88.841448] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   88.845827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   88.849013] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   88.851716] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   88.854782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   88.856583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   88.872519] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   88.891711] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   88.895100] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   88.927372] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   88.946786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   88.966029] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   89.020185] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   89.030463] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   89.043941] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   90.727964] Bluetooth: hci0: command tx timeout
[   90.791698] Bluetooth: hci2: command tx timeout
[   90.792170] Bluetooth: hci1: command tx timeout
[   90.855773] Bluetooth: hci3: command tx timeout
[   90.856665] Bluetooth: hci4: command tx timeout
[   90.983430] Bluetooth: hci5: command tx timeout
[   90.983887] Bluetooth: hci6: command tx timeout
[   91.111460] Bluetooth: hci7: command tx timeout
[   92.776373] Bluetooth: hci0: command tx timeout
[   92.840303] Bluetooth: hci1: command tx timeout
[   92.840390] Bluetooth: hci2: command tx timeout
[   92.904367] Bluetooth: hci4: command tx timeout
[   92.904456] Bluetooth: hci3: command tx timeout
[   93.032328] Bluetooth: hci6: command tx timeout
[   93.032463] Bluetooth: hci5: command tx timeout
[   93.159544] Bluetooth: hci7: command tx timeout
[   94.823375] Bluetooth: hci0: command tx timeout
[   94.887627] Bluetooth: hci2: command tx timeout
[   94.887979] Bluetooth: hci1: command tx timeout
[   94.951567] Bluetooth: hci3: command tx timeout
[   94.951799] Bluetooth: hci4: command tx timeout
[   95.079460] Bluetooth: hci5: command tx timeout
[   95.079577] Bluetooth: hci6: command tx timeout
[   95.208298] Bluetooth: hci7: command tx timeout
[   96.871763] Bluetooth: hci0: command tx timeout
[   96.938148] Bluetooth: hci2: command tx timeout
[   96.938475] Bluetooth: hci1: command tx timeout
[   96.999437] Bluetooth: hci3: command tx timeout
[   96.999609] Bluetooth: hci4: command tx timeout
[   97.127659] Bluetooth: hci5: command tx timeout
[   97.127813] Bluetooth: hci6: command tx timeout
[   97.255383] Bluetooth: hci7: command tx timeout
[  150.901717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  150.905980] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  150.908055] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.912041] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.917487] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  150.918481] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  151.038139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  151.040736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  151.041748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  151.047566] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  151.050322] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  151.051341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  151.137739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  151.141637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  151.143925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  151.148953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  151.149959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  151.154889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  151.164946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  151.166183] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  151.174401] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  151.177740] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  151.177897] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  151.178450] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  151.178521] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  151.182558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  151.182705] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  151.187334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  151.187700] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  151.188040] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  151.189675] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  151.189927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  151.192488] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  151.200745] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  151.203200] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  151.203488] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  151.204760] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  151.207797] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  151.208564] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  151.226345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  151.227160] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  151.235384] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  151.235726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  151.239358] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  151.247106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  151.254526] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  151.261023] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  151.271440] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  152.936679] Bluetooth: hci0: command tx timeout
[  153.127457] Bluetooth: hci1: command tx timeout
[  153.256305] Bluetooth: hci2: command tx timeout
[  153.319324] Bluetooth: hci4: command tx timeout
[  153.320276] Bluetooth: hci7: command tx timeout
[  153.320285] Bluetooth: hci3: command tx timeout
[  153.383786] Bluetooth: hci6: command tx timeout
[  153.511317] Bluetooth: hci5: command tx timeout
[  154.984823] Bluetooth: hci0: command tx timeout
[  155.176327] Bluetooth: hci1: command tx timeout
[  155.304760] Bluetooth: hci2: command tx timeout
[  155.367365] Bluetooth: hci3: command tx timeout
[  155.370263] Bluetooth: hci4: command tx timeout
[  155.370336] Bluetooth: hci7: command tx timeout
[  155.432811] Bluetooth: hci6: command tx timeout
[  155.560447] Bluetooth: hci5: command tx timeout
[  157.033326] Bluetooth: hci0: command tx timeout
[  157.224288] Bluetooth: hci1: command tx timeout
[  157.352289] Bluetooth: hci2: command tx timeout
[  157.415507] Bluetooth: hci7: command tx timeout
[  157.416526] Bluetooth: hci4: command tx timeout
[  157.416551] Bluetooth: hci3: command tx timeout
[  157.479336] Bluetooth: hci6: command tx timeout
[  157.607314] Bluetooth: hci5: command tx timeout
[  159.080371] Bluetooth: hci0: command tx timeout
[  159.272350] Bluetooth: hci1: command tx timeout
[  159.399346] Bluetooth: hci2: command tx timeout
[  159.463360] Bluetooth: hci3: command tx timeout
[  159.464533] Bluetooth: hci7: command tx timeout
[  159.464938] Bluetooth: hci4: command tx timeout
[  159.527319] Bluetooth: hci6: command tx timeout
[  159.655327] Bluetooth: hci5: command tx timeout
[  213.111695] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  213.119557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  213.121033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  213.125139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  213.127403] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  213.128860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.168067] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  213.169963] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  213.174510] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  213.180627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  213.183373] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  213.184536] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  213.397111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  213.404637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.404881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  213.406911] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  213.413680] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  213.417231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  213.419767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  213.422156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  213.423645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.426856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.430760] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  213.434556] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.435078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  213.439643] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.440888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  213.445326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  213.447539] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  213.448672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  213.511143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  213.528391] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  213.530752] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  213.543089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  213.545425] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  213.547254] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  213.569868] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  213.574172] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  213.575550] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  213.582874] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  213.588545] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  213.591508] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  213.602045] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  213.603775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  213.607653] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  213.609105] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  213.610722] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  213.612850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  215.143477] Bluetooth: hci0: command tx timeout
[  215.207463] Bluetooth: hci1: command tx timeout
[  215.527341] Bluetooth: hci3: command tx timeout
[  215.529843] Bluetooth: hci4: command tx timeout
[  215.591487] Bluetooth: hci5: command tx timeout
[  215.592052] Bluetooth: hci2: command tx timeout
[  215.720048] Bluetooth: hci7: command tx timeout
[  215.721588] Bluetooth: hci6: command tx timeout
[  217.192329] Bluetooth: hci0: command tx timeout
[  217.258237] Bluetooth: hci1: command tx timeout
[  217.578248] Bluetooth: hci4: command tx timeout
[  217.578341] Bluetooth: hci3: command tx timeout
[  217.640464] Bluetooth: hci2: command tx timeout
[  217.640699] Bluetooth: hci5: command tx timeout
[  217.768425] Bluetooth: hci6: command tx timeout
[  217.769249] Bluetooth: hci7: command tx timeout
[  219.239387] Bluetooth: hci0: command tx timeout
[  219.304432] Bluetooth: hci1: command tx timeout
[  219.623414] Bluetooth: hci3: command tx timeout
[  219.624108] Bluetooth: hci4: command tx timeout
[  219.687377] Bluetooth: hci2: command tx timeout
[  219.688008] Bluetooth: hci5: command tx timeout
[  219.815402] Bluetooth: hci7: command tx timeout
[  219.816011] Bluetooth: hci6: command tx timeout
[  221.287312] Bluetooth: hci0: command tx timeout
[  221.353260] Bluetooth: hci1: command tx timeout
[  221.671995] Bluetooth: hci4: command tx timeout
[  221.672959] Bluetooth: hci3: command tx timeout
[  221.735389] Bluetooth: hci5: command tx timeout
[  221.735551] Bluetooth: hci2: command tx timeout
[  221.864405] Bluetooth: hci6: command tx timeout
[  221.864562] Bluetooth: hci7: command tx timeout
[  273.315864] syz-executor.5 (6772) used greatest stack depth: 24344 bytes left
[  275.324705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  275.327588] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  275.335642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  275.347091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  275.352042] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  275.356072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  275.454071] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  275.456906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.459837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.466068] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.468387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  275.478530] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.485930] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  275.486369] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  275.490384] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  275.503021] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  275.520448] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  275.522675] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  275.583705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  275.589844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  275.594037] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  275.602614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  275.610617] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  275.636684] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  275.673875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  275.680444] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  275.694390] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  275.722955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  275.728072] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  275.741556] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  275.742121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  275.755582] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  275.763540] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  275.780770] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  275.784591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  275.788940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  275.795082] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  275.803940] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  275.806956] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  275.807740] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  275.824742] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  275.849877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  275.869722] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  275.912466] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  275.936674] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  275.955550] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  275.967847] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  275.980557] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  277.415330] Bluetooth: hci0: command tx timeout
[  277.543720] Bluetooth: hci1: command tx timeout
[  277.608348] Bluetooth: hci2: command tx timeout
[  277.736299] Bluetooth: hci3: command tx timeout
[  277.799477] Bluetooth: hci4: command tx timeout
[  277.927370] Bluetooth: hci6: command tx timeout
[  277.927838] Bluetooth: hci5: command tx timeout
[  278.055488] Bluetooth: hci7: command tx timeout
[  279.463293] Bluetooth: hci0: command tx timeout
[  279.592342] Bluetooth: hci1: command tx timeout
[  279.657252] Bluetooth: hci2: command tx timeout
[  279.784261] Bluetooth: hci3: command tx timeout
[  279.847332] Bluetooth: hci4: command tx timeout
[  279.975375] Bluetooth: hci5: command tx timeout
[  279.975690] Bluetooth: hci6: command tx timeout
[  280.103323] Bluetooth: hci7: command tx timeout
[  281.511274] Bluetooth: hci0: command tx timeout
[  281.639280] Bluetooth: hci1: command tx timeout
[  281.703264] Bluetooth: hci2: command tx timeout
[  281.831337] Bluetooth: hci3: command tx timeout
[  281.896251] Bluetooth: hci4: command tx timeout
[  282.023291] Bluetooth: hci6: command tx timeout
[  282.023389] Bluetooth: hci5: command tx timeout
[  282.151441] Bluetooth: hci7: command tx timeout
[  283.559346] Bluetooth: hci0: command tx timeout
[  283.687328] Bluetooth: hci1: command tx timeout
[  283.751265] Bluetooth: hci2: command tx timeout
[  283.879513] Bluetooth: hci3: command tx timeout
[  283.943287] Bluetooth: hci4: command tx timeout
[  284.071288] Bluetooth: hci5: command tx timeout
[  284.071394] Bluetooth: hci6: command tx timeout
[  284.199499] Bluetooth: hci7: command tx timeout
[  337.787076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  337.790016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  337.792926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  337.808050] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  337.813685] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  337.816050] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  337.918055] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  337.927354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  337.929553] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  337.933529] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  337.934492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  337.939703] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  337.948487] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  337.950755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  337.954403] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  337.955360] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  337.956120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  337.959529] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  338.039567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  338.051571] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  338.055226] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  338.070372] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  338.080365] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  338.084781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  338.094028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  338.113867] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  338.115653] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  338.137636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  338.142282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  338.142938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  338.143989] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  338.151045] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  338.159347] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  338.165363] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  338.171567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  338.205924] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  338.224706] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  338.242975] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  338.243618] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  338.253620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  338.264575] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  338.268029] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  338.285953] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  338.329466] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  338.330374] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  338.333524] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  338.335484] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  338.336295] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  339.880428] Bluetooth: hci0: command tx timeout
[  340.007307] Bluetooth: hci2: command tx timeout
[  340.072266] Bluetooth: hci1: command tx timeout
[  340.264283] Bluetooth: hci3: command tx timeout
[  340.264369] Bluetooth: hci4: command tx timeout
[  340.327368] Bluetooth: hci5: command tx timeout
[  340.328309] Bluetooth: hci6: command tx timeout
[  340.456316] Bluetooth: hci7: command tx timeout
[  341.928288] Bluetooth: hci0: command tx timeout
[  342.057401] Bluetooth: hci2: command tx timeout
[  342.121248] Bluetooth: hci1: command tx timeout
[  342.311314] Bluetooth: hci4: command tx timeout
[  342.312426] Bluetooth: hci3: command tx timeout
[  342.376613] Bluetooth: hci5: command tx timeout
[  342.376651] Bluetooth: hci6: command tx timeout
[  342.503294] Bluetooth: hci7: command tx timeout
[  343.976117] Bluetooth: hci0: command tx timeout
[  344.103491] Bluetooth: hci2: command tx timeout
[  344.167433] Bluetooth: hci1: command tx timeout
[  344.359317] Bluetooth: hci4: command tx timeout
[  344.360336] Bluetooth: hci3: command tx timeout
[  344.423480] Bluetooth: hci5: command tx timeout
[  344.424816] Bluetooth: hci6: command tx timeout
[  344.551521] Bluetooth: hci7: command tx timeout
[  346.023344] Bluetooth: hci0: command tx timeout
[  346.151374] Bluetooth: hci2: command tx timeout
[  346.215895] Bluetooth: hci1: command tx timeout
[  346.408413] Bluetooth: hci3: command tx timeout
[  346.408447] Bluetooth: hci4: command tx timeout
[  346.471555] Bluetooth: hci6: command tx timeout
[  346.471612] Bluetooth: hci5: command tx timeout
[  346.601214] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
01:23:12  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=1ffff11007129f4b RCX=ffffffff8150248e RDX=1ffffffff0b831a0
RSI=0000000000000008 RDI=0000000000000000 RBP=ffffffff86406574 RSP=ffff88803894fa48
R8 =0000000000000001 R9 =fffffbfff0c80afa R10=ffffffff864057d7 R11=0000000000000000
R12=ffffffff85c18d00 R13=ffffffff818a3988 R14=ffff888025d09bc0 R15=ffff88803894fd98
RIP=ffffffff81502561 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0f08625540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0f08880000 CR3=000000002cef6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88800e2c8000 RCX=ffff88800a0ad1c0 RDX=00007fe0beaa3000
RSI=ffffffff8166f985 RDI=ffff88800a0ad1c8 RBP=000000000006b000 RSP=ffff8880247dfce8
R8 =0000000000000001 R9 =ffffed1001e9dd3f R10=0000000000000001 R11=0000000000000001
R12=1ffff110048fbfa1 R13=dffffc0000000000 R14=ffff88800a0ad1c0 R15=ffff8880247dfd38
RIP=ffffffff8166f9a2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fe0bea80540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe0bef7c6f4 CR3=0000000029ad4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fe0bef8b47000007fe0bef8af20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000