Warning: Permanently added '[localhost]:24042' (ECDSA) to the list of known hosts.
2025/01/23 06:35:00 fuzzer started
2025/01/23 06:35:01 dialing manager at localhost:38529
syzkaller login: [   63.912381] cgroup: Unknown subsys name 'net'
[   64.044975] cgroup: Unknown subsys name 'cpuset'
[   64.068374] cgroup: Unknown subsys name 'rlimit'
[   69.523964] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[   79.370370] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/23 06:35:17 syscalls: 2217
2025/01/23 06:35:17 code coverage: enabled
2025/01/23 06:35:17 comparison tracing: enabled
2025/01/23 06:35:17 extra coverage: enabled
2025/01/23 06:35:17 setuid sandbox: enabled
2025/01/23 06:35:17 namespace sandbox: enabled
2025/01/23 06:35:17 Android sandbox: enabled
2025/01/23 06:35:17 fault injection: enabled
2025/01/23 06:35:17 leak checking: enabled
2025/01/23 06:35:17 net packet injection: enabled
2025/01/23 06:35:17 net device setup: enabled
2025/01/23 06:35:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/23 06:35:17 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/23 06:35:17 USB emulation: enabled
2025/01/23 06:35:17 hci packet injection: enabled
2025/01/23 06:35:17 wifi device emulation: enabled
2025/01/23 06:35:17 802.15.4 emulation: enabled
2025/01/23 06:35:17 fetching corpus: 0, signal 0/2000 (executing program)
2025/01/23 06:35:17 fetching corpus: 0, signal 0/4000 (executing program)
2025/01/23 06:35:17 fetching corpus: 0, signal 0/6000 (executing program)
2025/01/23 06:35:17 fetching corpus: 0, signal 0/8000 (executing program)
2025/01/23 06:35:17 fetching corpus: 0, signal 0/10000 (executing program)
2025/01/23 06:35:17 fetching corpus: 0, signal 0/10752 (executing program)
2025/01/23 06:35:17 fetching corpus: 0, signal 0/10752 (executing program)
2025/01/23 06:35:20 starting 8 fuzzer processes
06:35:20 executing program 0:
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x3, 0x3, 0x107, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8001)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', <r0=>0x0, 0x29, 0x1, 0x9, 0x800, 0x50, @private0, @private1, 0x700, 0x700, 0xfffffffd, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'sit0\x00', <r1=>0x0, 0x4, 0x5, 0x17, 0xfffffff8, 0x0, @remote, @local, 0x4e291af4607012f7, 0x8000, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'sit0\x00', <r2=>0x0, 0x2f, 0x3, 0x1, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @private2, 0x7800, 0x8, 0x3, 0x35}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'ip6_vti0\x00', <r3=>0x0, 0x4, 0x8, 0x6, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x40, 0x4, 0x9}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x124, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001a00)={'ip6tnl0\x00', &(0x7f0000001980)={'ip6_vti0\x00', <r5=>r0, 0x4, 0x7f, 0x3a, 0xb3cb, 0x0, @local, @rand_addr=' \x01\x00', 0x80, 0x7800, 0x0, 0x40000000}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001b80)={'syztnl1\x00', &(0x7f0000001b00)={'syztnl0\x00', <r6=>0x0, 0x29, 0x5a, 0x3, 0x8, 0x0, @mcast1, @mcast1, 0x10, 0x80, 0xf1}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001c40)={'ip6gre0\x00', &(0x7f0000001bc0)={'ip6_vti0\x00', <r7=>r1, 0x2f, 0xdc, 0x7, 0x67, 0x52, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x79, 0xffff}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001d40)={'syztnl2\x00', &(0x7f0000001cc0)={'syztnl1\x00', <r8=>r2, 0x4, 0x3f, 0x8, 0x3, 0x50, @rand_addr=' \x01\x00', @local, 0x80, 0x10, 0x8, 0x8e}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e00)={'syztnl1\x00', &(0x7f0000001d80)={'syztnl2\x00', <r9=>r1, 0x2f, 0x8, 0x8, 0x2, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0xbcf6d8fd5bf3f444, 0x7, 0x8000, 0x75c}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001ec0)={'syztnl2\x00', &(0x7f0000001e40)={'ip6_vti0\x00', <r10=>r2, 0x4, 0x0, 0x1, 0xfff, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x20, 0x7, 0x6, 0x8}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'geneve0\x00', <r11=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002000)={'ip_vti0\x00', &(0x7f0000001f40)={'gre0\x00', <r12=>r1, 0x80, 0x8, 0x4, 0x2, {{0x28, 0x4, 0x0, 0x0, 0xa0, 0x66, 0x0, 0x9, 0x4, 0x0, @remote, @local, {[@cipso={0x86, 0x50, 0x0, [{0x5, 0xc, "f3fc099f6a9d5c517ac6"}, {0x7, 0x5, "38da00"}, {0x0, 0x11, "b72a1cf883283a88423a52a6126100"}, {0x1, 0xc, "47b7174fa312ec63baa5"}, {0x0, 0x6, "309fb6b7"}, {0x0, 0x10, "0b9f13782e8c5d99551374a6786b"}, {0x2, 0x6, "c9d5fd7e"}]}, @timestamp={0x44, 0x10, 0x84, 0x0, 0x9, [0x20, 0x16, 0x49]}, @end, @end, @noop, @lsrr={0x83, 0x17, 0xe1, [@rand_addr=0x64010102, @empty, @multicast2, @empty, @loopback]}, @timestamp={0x44, 0x10, 0xc9, 0x0, 0x3, [0x6be, 0x0, 0x8]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000020c0)={'ip6_vti0\x00', &(0x7f0000002040)={'ip6gre0\x00', <r13=>r1, 0x4, 0x20, 0x0, 0xfffffffe, 0x0, @loopback, @empty, 0x700, 0x80, 0x0, 0x80}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002180)={'sit0\x00', &(0x7f0000002100)={'syztnl1\x00', <r14=>r3, 0x2f, 0x35, 0x1, 0x3, 0x17, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x10000, 0xf4}})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f00000006c0), 0xc, &(0x7f0000002b40)={&(0x7f00000021c0)={0x980, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x6, 0x20, 0x1}, {0xe62, 0x2, 0x4c, 0x9}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6b, 0xff, 0x80, 0xffffffd3}, {0xff81, 0xff, 0x65, 0x4}, {0x8, 0x0, 0x7}, {0x6, 0x5, 0x81}, {0x6, 0x8, 0xfa}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r0}, {0x258, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9eed}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x15d}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdf}}}]}}, {{0x8, 0x1, r0}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r11}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r2}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff800}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x980}, 0x1, 0x0, 0x0, 0x8000}, 0x14)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x10, 0x3f2, 0x101, 0x70bd29, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x200c080)
connect(0xffffffffffffffff, &(0x7f0000002cc0)=@in={0x2, 0x4e23, @broadcast}, 0x80)

06:35:20 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00')
syz_genetlink_get_family_id$team(&(0x7f0000000000), r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done, @increfs={0x40046304, 0x1}, @enter_looper, @decrefs={0x40046307, 0x2}, @acquire={0x40046305, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/131, 0x83, 0x0, 0x1d}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x2, 0x3}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x9, 0x1, 0x28}, @flat=@binder={0x73622a85, 0x1001, 0x1}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x38}}, 0x1000}], 0x9d, 0x0, &(0x7f0000000380)="f6b2d2a1bef2b4adf09c30c44083c6a1ce7238ea9984a80f3210cbaa0e5ecaf730a6f48aa3cda97f66956a4196077a686c1d0c0b220db5caaa63b5c21f319be596f12ff2c9156ebb653ee794ef57c32378b30dac39e686795c20bf061cb89a063be15f6db5d70e982b546d8b9e86a3bbbab6d24a567786a901c93484477766cf80c6ffcbc0bab50d3a4f857b9e6e3594087fa5f4fda432830498884b5f"})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
fcntl$setflags(r0, 0x2, 0x0)
r1 = socket(0x26, 0x4, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x16}}}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044000}, 0x2000080)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000700)=0x12, 0x4)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000780)=@buf={0x27, &(0x7f0000000740)="ba8cc56c6f45a2edbb773e2ff2dfcd29b4b0288b999030afee37097ff32e7fd9392674b52ec477"})
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x0, 0x800, 0xfffffffb, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x9a}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040)
getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000900)=""/158, &(0x7f00000009c0)=0x9e)
mkdirat(r0, &(0x7f0000000a00)='./file0\x00', 0xa)
r3 = syz_open_dev$sg(&(0x7f0000000a40), 0x9, 0xc0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r1)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa4, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000045}, 0x0)
r5 = creat(&(0x7f0000000c40)='./file0\x00', 0xa8)
sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xec, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xee86}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000ec0)={0xffffffffffffffff, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x80)

06:35:20 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000080)={0x0, 0x41, 0x7b, 0x9, 0x9})
r0 = open(&(0x7f0000000100)='./file0\x00', 0xa0000, 0x8)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000140)={0x400, 0x3})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000001c0)={{r1}, {@void, @max}})
read$rfkill(r1, &(0x7f0000000200), 0x8)
r2 = getpid()
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
kcmp(0x0, r2, 0x0, r0, r3)
sysinfo(&(0x7f0000000240)=""/29)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000280))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f00000002c0)={0x8})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r5=>r1}, './file0/file0\x00'})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000340)=0x9, 0x0, 0x4)
ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x9, 0x800, 0x700c})
ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000003c0))
ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000400)={0x10000, 0xad, 0x80000000})
fcntl$addseals(r3, 0x409, 0x0)

06:35:20 executing program 2:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r0, 0xc08, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x81}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x62fc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1bec}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x26}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x85}, 0x20004810)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xf}, @val={0x8}, @val={0xc, 0x99, {0xfff, 0x36}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'sit0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
r1 = syz_open_dev$vcsn(&(0x7f0000000340), 0x2, 0xca0a00)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8001, 0x24}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}]}, 0x64}, 0x1, 0x0, 0x0, 0x8081}, 0x800)
sendmsg$nl_xfrm(r1, &(0x7f0000000a40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000540)=@getae={0x484, 0x1f, 0xe00, 0x70bd29, 0x25dfdbff, {{@in6=@mcast1, 0x4d4, 0x2, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200, 0x3501}, [@algo_crypt={0x116, 0x2, {{'ecb(aes)\x00'}, 0x670, "18316afa8d24c92db6e0e02d9d512b81a5ba1859dcf56b1b6afa46f77bb4240d00ab1b1b7869f7afbb3490e83d248cd0a83688a206fda2a8b2c77bd2c0bc68414462a6bbdd3508bb73f8daf6d7c7c29f2a2d618019920cfd91ba81a6251f64dc107e1fec78e58860e88eda3ae6a8832e732616f7073fd546bcf8486f5a6ceb31080bad6f972496485e0e308b35173e75e139ecbda1a87fd1f56039676c3916257c217ecca59b7ae1637511c5f1956cdf16b60664ffb1245593a79f2ee6dea5c0249824cbd1a4260e34552c6793ff"}}, @tmpl={0x144, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x4d2, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0x4d5}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x4, 0x2, 0x8, 0x1, 0x5, 0x7f}, {{@in6=@private1, 0x4d3, 0x6c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3500, 0x1, 0x0, 0x1, 0x100, 0x80000001, 0xffffff59}, {{@in6=@mcast1, 0x4d6, 0x32}, 0x0, @in=@rand_addr=0x64010102, 0x3506, 0x1, 0x2, 0x7, 0x4, 0xa, 0x7fff}, {{@in6=@private1, 0x4d3, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x3507, 0x0, 0x2, 0x4, 0x5, 0xfff, 0x401}]}, @algo_aead={0xb2, 0x12, {{'aegis256-generic\x00'}, 0x330, 0x200, "74eb13c5c70c006b41d13680d559f7e3dc11413aab168387c39cb063456953ef07becda873bc4fb6573190e0baefaccfee796c144c3621733199d8918c460ffd594a272108c284a1acd45d1b55ef0394ac5c5fb23ecabae362707418186621c7ee5cfcea5080"}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd28, 0xffffffff}}, @algo_aead={0xf9, 0x12, {{'echainiv(morus640)\x00'}, 0x568, 0x140, "d248379d93d86ddfa728cbe4a8dfa9eac0340b404499bafd6980c14c947260d1c35fcda40fa6cbb759da7749fd0335358b51941a03b95ad07f1a88234adab9eeb44574819313e58ed92a93a2d8bdf9d5b9cb9c846183542e84d75fa17fd6676fb1500636e4145a27ba951514b74c72f2409b7c902856f2288e5c403ee2afe2e3d93cb91a48b0da7f80c5e9cebe198f705ab37f7ddbc503c600e2ae62eaabc81a118ddadbdf27b0bf1d35a6eaa9"}}, @srcaddr={0x14, 0xd, @in=@rand_addr=0x64010100}, @srcaddr={0x14, 0xd, @in=@local}]}, 0x484}, 0x1, 0x0, 0x0, 0x8040}, 0x20040040)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000a80), 0x200000, 0x0)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r1)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x38}}, 0x4000800)
ioprio_set$uid(0x0, 0x0, 0x2004)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvfrom$inet6(r5, &(0x7f0000000c00)=""/218, 0xda, 0x40000040, &(0x7f0000000d00)={0xa, 0x4e23, 0x1ff, @mcast2, 0x6eb}, 0x1c)
r6 = io_uring_setup(0x7dff, &(0x7f0000000d40)={0x0, 0x6ddb, 0x8, 0x2, 0x146, 0x0, r1})
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/sys/kernel/uevent_seqnum', 0x1, 0x0)
ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000e40)={{r7}, 0x3, &(0x7f0000000e00)=[0xfff, 0x5, 0x3], 0xd3c, 0x2, [0x6, 0x1, 0x1, 0x7fff]})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r7)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xc4, r8, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x8e, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @random="690ae2a7e464", @broadcast, @device_a, {0x7, 0x1}}, {0x1, 0x0, 0x2, 0x0, 0x6}}, {@type11={{0x0, 0x2, 0xa}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x9, 0x8}}, {0x1, 0x1, 0x1, 0x1, 0x4}}}, @ver_80211n={0x0, 0xff, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x3d, "f27a65477c701e67f4a78c719d871f07118002f1ef93928d6bbc25f2fbb53efc355673cef65d57e1d407d52135673e44b1b78ff60f9715c95006ba8997"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80000}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0xc, 0x0, 0x5}, [""]}, 0x14}}, 0x4004090)

06:35:20 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x6, 0x8, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x20000810)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xc0, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x527}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ee2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xd02, 0xfff, 0x8, 0x7, 0x7fffffff]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x0, 0x595, 0x0, 0x7]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x191}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7715123e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffd}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x14}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7df6}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008080}, 0x10)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0xa, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_hsr\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x21}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400}, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000480)={{0x0, 0x3, 0x3, 0x94, 0x0, 0x8, 0x3ff, 0xeff5, 0x7fffffff, 0x6, 0x7fffffff, 0x10000, 0x7, 0x401, 0x6}, 0x10, [0x0, 0x0]})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc008804}, 0x2000c015)
getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
pread64(r1, &(0x7f0000000900)=""/232, 0xe8, 0x2)
mknod(&(0x7f0000000a00)='./file0\x00', 0x200, 0x9)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000a40)={0x0, r0, 0x5, 0x10000, 0x1, 0x5})
utime(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)={0x0, 0x7f})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000b00)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'})
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000b40)=""/164, &(0x7f0000000c00)=0xa4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'syztnl2\x00', <r3=>0x0, 0x29, 0x8, 0xff, 0xffffffff, 0x68, @empty, @loopback, 0x80, 0x80, 0x1f, 0x5}})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x1)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000f80)={'syztnl0\x00', &(0x7f0000000f00)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x2, 0x7fff, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x7800, 0x7, 0xffffff00, 0x7}})

[   82.815729] audit: type=1400 audit(1737614120.457:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
06:35:20 executing program 5:
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x8)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000180), 0x4)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000001c0)={0xe21, 0x1ff})
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sendmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@ax25={{0x3, @default, 0x2}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="1fd887c9dd5629edb4488ffd1ed02b", 0xf}, {&(0x7f0000000340)="6fea29d9543153622c2bf0d9c9e9355986b8af3387b87e4380e6853b62b93297ca5467a15d2a44c5cdeb2fd5b2bf1153b85ff9a0d4a1917133b96ee7b47bc2074e8c7b484d2505ae26a6264a336410248909f85b7977f296aa4160119865357ccbc99910100c93e90a091bac3ff7361e043f300106c3c083eea1a38a7dfdaa1ab89c41148d76", 0x86}, {&(0x7f0000000400)="699df14bc30d6ebd87c3c8b8f58d8e931cb03fbc8a489fe1e58fd73584528fd92fecd71483873f66d4d8091681555f7d5884eb0530168d0de45c5183d5f283024de9c0843356c0a3d72c4c9e056640", 0x4f}], 0x3}, 0x20000000)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x5}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x2}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000080)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0xc}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f0000000780)={0x944, 0x1, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_PAYLOAD={0x41, 0xa, "fb4d1871f8813eb3e34df1fe67b81f0312edf71c0960789065ecdc68b0434df7b5461871eda3da2a687e94d0e1d367d13bac323c72b39eb6d89cde5193"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf23e}, @NFQA_EXP={0x2b8, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x1f8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0xd0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, @NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}]}, @NFQA_PAYLOAD={0xe2, 0xa, "33685f2d2fd62d2b53e36e8324dc0cd0f1e63609328497c5d877169465d40ce48b465e6554b248a3f0491d080c6ff490dddad7294e58df3bbb1f6a03ae93e20e2a9a074913ab317ad1e3f41ff004aa439c4a976ff0fb25b36e164c96d81a35bd90f8cb2a8b835d288866762885068e1c0c987cbe8fea23372004396588af9a13b37cdbd4d33916f3a3477c1197f3df58af8717ccb3d06b5c84f6ceb316edb53e558e1081230c11ac0f9c4998553f36ba6fcecaaaaeb40e1f1ff1868478fb18612a0d042dee04ed166dae41eab5b7bed62484f233152a4af27d69e5c4f8d3"}, @NFQA_EXP={0x198, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x80}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0xd8, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private1}}}]}]}, @NFQA_EXP={0x2d0, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x23}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6f}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x194, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, @NFQA_PAYLOAD={0xca, 0xa, "2c683f4c37289abcfe782eb6f3e879067514b7abbbaac59ca370aa6837fa8aa72ff8e33471c1411254f564727b7de4cc5b464563f30880e46f53b30c3e98c6fe5f29d39119b3be012f46218afd823b419ffe36d19212428ded746fc7a6c4e063cea4119af939dbb23eb4ee872bb53ca63c7bcedabea1d4e4d725b71d178b2dda195bc30c5c8d6df95b8c5d38f40a06a8912e0bd552d4d86e7ee35931f4595c25b50730aa1e7d2902fe497df485fe0407b8ca1bef1313ad55dc6b8e121c63166d48806548cdb2"}]}, 0x944}, 0x1, 0x0, 0x0, 0x50}, 0x20000000)
r2 = msgget$private(0x0, 0x0)
msgrcv(r2, &(0x7f0000001180)={0x0, ""/232}, 0xf0, 0x2, 0x0)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000012c0)=0x14)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001380)={0x154, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ab0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xaf1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe19d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x965}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd34}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x95c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x241}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x890}, 0x40000)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002780), 0x100, 0x0)
ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000002800)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2}}, @l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1000}, @in={0x2, 0x4e22, @local}, 0x1, 0x0, 0x0, 0x0, 0x5f, &(0x7f00000027c0)='vlan0\x00', 0x9, 0xbd25, 0xff})

06:35:20 executing program 6:
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/4096)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000001000)=0x534, 0x4)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000001040))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000001080))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000010c0)={'ip6_vti0\x00', {0x2, 0x0, @initdev}})
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000001100))
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/class/mei', 0x40000, 0x110)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2)
syz_genetlink_get_family_id$tipc(&(0x7f0000001240), r2)
r3 = accept4$inet6(r2, &(0x7f0000001280), &(0x7f00000012c0)=0x1c, 0x800)
setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000001300)={{0xa, 0x4e20, 0x944f, @loopback, 0x7}, {0xa, 0x4e24, 0x5ea, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x3, [0x7, 0x80000001, 0x0, 0x0, 0x8, 0x5, 0x1, 0x9]}, 0x5c)
write$binfmt_script(r1, &(0x7f0000001380)={'#! ', './file0', [{0x20, ',*#)'}, {0x20, '\\'}, {}, {0x20, 'TIPC\x00'}], 0xa, "66982a157d49020b48c167f7f5338c3954c4936f19280faa5164680797d68a97f5c42853eba50df2772a4a440132c1b68bb44d9a8083df494af0d9686582d284c73e59b6c385c5d40fa6808c3aeecc856b8a0b"}, 0x6c)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000001400)=""/50)
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000001440)=""/206, &(0x7f0000001540)=0xce)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000001580)={0x1, 0xfffffffffffffffb, 0x5})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r2)
sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4048010)

06:35:20 executing program 7:
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee01}}, './file0\x00'})
ioctl$TCXONC(r0, 0x540a, 0x3)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x1f}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4c810)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000240)=0x1)
sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f2, 0x800, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4050}, 0x20000050)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='status\x00')
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000440)={0xa83d, 0x0, &(0x7f0000000400)=[r0, r0, r1, r3, r1]}, 0x5)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000480)={0x2, 0x1000}, 0x4)
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2000, 0x2, 0x0, 0x0, {0x69c, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x5, 0x3c}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x9, 0x24, [{0x60}, {0x12}, {0x5}, {0xc}, {0x18}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24000005)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2)
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xfc, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x24, 0x80, [@ibss={0x6, 0x2, 0x10}, @challenge={0x10, 0x1, 0xc4}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0x4e, 0x8}}]}, @NL80211_ATTR_IE={0xc1, 0x2a, [@random={0x9, 0x15, "ecacaeaafdc16ccc2934c0cd6fc9bd453aabab4649"}, @link_id={0x65, 0x12, {@random="198c17061915", @device_a, @broadcast}}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x7, @device_a, 0x8, "", 0x8, 0x0, @device_a, 0x100}}, @tim={0x5, 0x62, {0x1, 0x5e, 0x20, "8c44131af5f96c24b7d55d8d3d28194b6d4dda906e7be9609cd9779ad5a0f9d842891e0a12b61c358966469d81fc72bc27ec1482f1d82c22206b2ea35e9d80135dacd870644a0b3614780a1fa27914cc4614b542025666a5f5cbe0cb404b39"}}, @supported_rates={0x1, 0x8, [{0x6, 0x1}, {0x48}, {0x48, 0x1}, {0x36}, {0x24, 0x1}, {0xc}, {0x3, 0x1}, {0x2}]}, @dsss={0x3, 0x1, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40040}, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000a80)={0x5e2, 0x10, '\x00', 0x1, &(0x7f0000000a40)=[0x0, 0x0]})
r5 = fcntl$dupfd(r1, 0x406, r2)
ioctl$TCSBRK(r5, 0x5409, 0x1)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000009bc0)={&(0x7f0000009b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x44004}, 0x30040800)

[   84.152564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.156005] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.158827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.165102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.169725] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   84.171999] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.336034] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.336759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.341105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.342056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.344994] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.346999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.353150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.357399] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   84.360839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.363706] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.372390] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   84.376445] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.475265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.483866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.494675] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.512891] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.516390] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.542496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.610026] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   84.617618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   84.637629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   84.638430] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   84.644666] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   84.661489] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   84.668581] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   84.671866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   84.675596] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   84.680544] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   84.680820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   84.691908] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   84.698642] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   84.702586] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   84.715609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   84.719972] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   84.722984] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.726803] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   84.728200] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   84.733978] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   84.735004] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   84.742933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   84.744489] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   84.746604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.238823] Bluetooth: hci0: command tx timeout
[   86.429693] Bluetooth: hci2: command tx timeout
[   86.429729] Bluetooth: hci1: command tx timeout
[   86.621417] Bluetooth: hci3: command tx timeout
[   86.813858] Bluetooth: hci5: command tx timeout
[   86.813954] Bluetooth: hci4: command tx timeout
[   86.814799] Bluetooth: hci7: command tx timeout
[   86.877483] Bluetooth: hci6: command tx timeout
[   88.286401] Bluetooth: hci0: command tx timeout
[   88.477870] Bluetooth: hci1: command tx timeout
[   88.478716] Bluetooth: hci2: command tx timeout
[   88.669354] Bluetooth: hci3: command tx timeout
[   88.862049] Bluetooth: hci4: command tx timeout
[   88.862786] Bluetooth: hci7: command tx timeout
[   88.863671] Bluetooth: hci5: command tx timeout
[   88.927239] Bluetooth: hci6: command tx timeout
[   90.334379] Bluetooth: hci0: command tx timeout
[   90.526362] Bluetooth: hci1: command tx timeout
[   90.526936] Bluetooth: hci2: command tx timeout
[   90.718455] Bluetooth: hci3: command tx timeout
[   90.912292] Bluetooth: hci4: command tx timeout
[   90.912395] Bluetooth: hci5: command tx timeout
[   90.912416] Bluetooth: hci7: command tx timeout
[   90.974275] Bluetooth: hci6: command tx timeout
[   92.384279] Bluetooth: hci0: command tx timeout
[   92.574519] Bluetooth: hci1: command tx timeout
[   92.575092] Bluetooth: hci2: command tx timeout
[   92.766437] Bluetooth: hci3: command tx timeout
[   92.957293] Bluetooth: hci7: command tx timeout
[   92.960263] Bluetooth: hci5: command tx timeout
[   92.960335] Bluetooth: hci4: command tx timeout
[   93.022274] Bluetooth: hci6: command tx timeout
[  144.252639] syz-executor.6 (286) used greatest stack depth: 23312 bytes left
[  146.615270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  146.619179] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  146.619966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  146.621156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  146.624721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  146.630171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  146.632878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  146.641493] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  146.643527] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  146.646625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  146.651298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  146.653393] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  146.666680] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  146.668406] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  146.670571] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  146.671677] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  146.676805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  146.690373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  146.695572] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  146.697548] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  146.699227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  146.700361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  146.704770] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  146.706088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  146.745251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  146.759554] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  146.763354] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  146.764659] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  146.766473] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  146.768755] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  146.770533] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  146.772432] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  146.774013] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  146.775335] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  146.775510] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  146.778374] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  146.789532] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  146.793769] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  146.794837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  146.796295] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  146.797379] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  146.798626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.895672] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  146.898592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  146.901532] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  146.913514] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  146.934516] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  146.936674] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  148.765377] Bluetooth: hci1: command tx timeout
[  148.765853] Bluetooth: hci3: command tx timeout
[  148.765977] Bluetooth: hci0: command tx timeout
[  148.766736] Bluetooth: hci2: command tx timeout
[  148.829367] Bluetooth: hci4: command tx timeout
[  148.893561] Bluetooth: hci6: command tx timeout
[  148.894035] Bluetooth: hci7: command tx timeout
[  149.022480] Bluetooth: hci5: command tx timeout
[  150.813670] Bluetooth: hci2: command tx timeout
[  150.813764] Bluetooth: hci0: command tx timeout
[  150.813855] Bluetooth: hci3: command tx timeout
[  150.813916] Bluetooth: hci1: command tx timeout
[  150.878324] Bluetooth: hci4: command tx timeout
[  150.943309] Bluetooth: hci7: command tx timeout
[  150.943899] Bluetooth: hci6: command tx timeout
[  151.069258] Bluetooth: hci5: command tx timeout
[  152.864252] Bluetooth: hci1: command tx timeout
[  152.864358] Bluetooth: hci3: command tx timeout
[  152.864464] Bluetooth: hci0: command tx timeout
[  152.864540] Bluetooth: hci2: command tx timeout
[  152.925357] Bluetooth: hci4: command tx timeout
[  152.990382] Bluetooth: hci6: command tx timeout
[  152.990551] Bluetooth: hci7: command tx timeout
[  153.118225] Bluetooth: hci5: command tx timeout
[  154.909410] Bluetooth: hci2: command tx timeout
[  154.909575] Bluetooth: hci0: command tx timeout
[  154.909735] Bluetooth: hci3: command tx timeout
[  154.909848] Bluetooth: hci1: command tx timeout
[  154.974564] Bluetooth: hci4: command tx timeout
[  155.037395] Bluetooth: hci6: command tx timeout
[  155.037567] Bluetooth: hci7: command tx timeout
[  155.165533] Bluetooth: hci5: command tx timeout
[  208.436776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  208.441844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  208.443957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  208.450140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  208.452099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  208.453788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  208.574109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  208.576824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  208.582744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  208.588723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  208.593694] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  208.597687] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  208.615500] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  208.624736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  208.627770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  208.632483] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  208.634954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  208.643830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  208.752469] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  208.769854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  208.779890] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  208.799941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  208.802128] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  208.813592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  208.843894] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  208.847737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  208.849159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  208.853517] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  208.855457] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  208.856761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  208.945556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  208.955712] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  208.971691] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  208.972315] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  208.977630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  209.034594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  209.044750] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  209.046382] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  209.054911] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  209.070376] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  209.073663] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  209.075160] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  209.076781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  209.094882] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  209.110668] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  209.149789] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  209.167280] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  209.168925] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  210.525293] Bluetooth: hci0: command tx timeout
[  210.654284] Bluetooth: hci1: command tx timeout
[  210.720250] Bluetooth: hci2: command tx timeout
[  210.910339] Bluetooth: hci3: command tx timeout
[  210.973602] Bluetooth: hci4: command tx timeout
[  211.166466] Bluetooth: hci5: command tx timeout
[  211.167057] Bluetooth: hci6: command tx timeout
[  211.295377] Bluetooth: hci7: command tx timeout
[  212.573354] Bluetooth: hci0: command tx timeout
[  212.701648] Bluetooth: hci1: command tx timeout
[  212.765352] Bluetooth: hci2: command tx timeout
[  212.957977] Bluetooth: hci3: command tx timeout
[  213.021672] Bluetooth: hci4: command tx timeout
[  213.214236] Bluetooth: hci6: command tx timeout
[  213.214271] Bluetooth: hci5: command tx timeout
[  213.342385] Bluetooth: hci7: command tx timeout
[  214.621324] Bluetooth: hci0: command tx timeout
[  214.749445] Bluetooth: hci1: command tx timeout
[  214.814642] Bluetooth: hci2: command tx timeout
[  215.007267] Bluetooth: hci3: command tx timeout
[  215.069298] Bluetooth: hci4: command tx timeout
[  215.261325] Bluetooth: hci5: command tx timeout
[  215.263243] Bluetooth: hci6: command tx timeout
[  215.389284] Bluetooth: hci7: command tx timeout
[  216.669304] Bluetooth: hci0: command tx timeout
[  216.797346] Bluetooth: hci1: command tx timeout
[  216.861343] Bluetooth: hci2: command tx timeout
[  217.053266] Bluetooth: hci3: command tx timeout
[  217.117394] Bluetooth: hci4: command tx timeout
[  217.309282] Bluetooth: hci6: command tx timeout
[  217.309316] Bluetooth: hci5: command tx timeout
[  217.437360] Bluetooth: hci7: command tx timeout
[  270.891818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  270.894885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  270.897593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  270.904804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  270.915917] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  270.920350] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  271.151756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  271.154717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  271.159467] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  271.166691] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  271.170573] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  271.177443] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  271.219353] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  271.224497] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  271.225849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  271.229642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  271.231738] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  271.233085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  271.289938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  271.303391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  271.306488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  271.339667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  271.350996] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  271.351873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  271.420501] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  271.421718] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  271.427694] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  271.430824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  271.436890] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  271.447401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  271.447780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  271.458816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  271.464515] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  271.491737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  271.493938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  271.494847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  271.500378] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  271.504639] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  271.507494] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  271.508247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  271.517584] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  271.519723] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  271.520566] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  271.523416] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  271.524476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  271.537345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  271.603104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  271.606315] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  272.989341] Bluetooth: hci0: command tx timeout
[  273.245275] Bluetooth: hci1: command tx timeout
[  273.309235] Bluetooth: hci2: command tx timeout
[  273.439219] Bluetooth: hci3: command tx timeout
[  273.629238] Bluetooth: hci5: command tx timeout
[  273.693272] Bluetooth: hci7: command tx timeout
[  273.693518] Bluetooth: hci4: command tx timeout
[  273.693636] Bluetooth: hci6: command tx timeout
[  275.039292] Bluetooth: hci0: command tx timeout
[  275.293298] Bluetooth: hci1: command tx timeout
[  275.358235] Bluetooth: hci2: command tx timeout
[  275.486254] Bluetooth: hci3: command tx timeout
[  275.677375] Bluetooth: hci5: command tx timeout
[  275.741333] Bluetooth: hci6: command tx timeout
[  275.741510] Bluetooth: hci4: command tx timeout
[  275.741607] Bluetooth: hci7: command tx timeout
[  277.086258] Bluetooth: hci0: command tx timeout
[  277.341321] Bluetooth: hci1: command tx timeout
[  277.406358] Bluetooth: hci2: command tx timeout
[  277.534250] Bluetooth: hci3: command tx timeout
[  277.726362] Bluetooth: hci5: command tx timeout
[  277.791247] Bluetooth: hci4: command tx timeout
[  277.791366] Bluetooth: hci7: command tx timeout
[  277.791465] Bluetooth: hci6: command tx timeout
[  279.135278] Bluetooth: hci0: command tx timeout
[  279.390645] Bluetooth: hci1: command tx timeout
[  279.454291] Bluetooth: hci2: command tx timeout
[  279.584237] Bluetooth: hci3: command tx timeout
[  279.774533] Bluetooth: hci5: command tx timeout
[  279.838275] Bluetooth: hci6: command tx timeout
[  279.838310] Bluetooth: hci7: command tx timeout
[  279.838422] Bluetooth: hci4: command tx timeout
[  333.616733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  333.620338] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  333.626692] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  333.629788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  333.634217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  333.640373] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  333.644608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  333.649870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  333.653427] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  333.653582] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  333.657782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  333.668482] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  333.696722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  333.703060] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  333.706477] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  333.716635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  333.724823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  333.727112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  333.738814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  333.746030] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  333.749527] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  333.758879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  333.760751] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  333.762639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  333.764602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  333.770712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  333.776839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  333.801566] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  333.811936] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  333.819837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  333.909079] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  333.927127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  333.931102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  333.947014] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  333.955538] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  333.963599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  334.141995] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  334.145493] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  334.147727] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  334.156537] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  334.161503] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  334.164218] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  334.172873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  334.186849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  334.189623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  334.201505] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  334.204392] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  334.209561] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  335.709272] Bluetooth: hci1: command tx timeout
[  335.773254] Bluetooth: hci0: command tx timeout
[  335.837301] Bluetooth: hci3: command tx timeout
[  335.837334] Bluetooth: hci2: command tx timeout
[  335.901285] Bluetooth: hci4: command tx timeout
[  336.029514] Bluetooth: hci5: command tx timeout
[  336.285394] Bluetooth: hci7: command tx timeout
[  336.349651] Bluetooth: hci6: command tx timeout
[  337.759228] Bluetooth: hci1: command tx timeout
[  337.822219] Bluetooth: hci0: command tx timeout
[  337.887370] Bluetooth: hci2: command tx timeout
[  337.887406] Bluetooth: hci3: command tx timeout
[  337.949553] Bluetooth: hci4: command tx timeout
[  338.077951] Bluetooth: hci5: command tx timeout
[  338.333423] Bluetooth: hci7: command tx timeout
[  338.397294] Bluetooth: hci6: command tx timeout
[  339.805309] Bluetooth: hci1: command tx timeout
[  339.869276] Bluetooth: hci0: command tx timeout
[  339.933400] Bluetooth: hci3: command tx timeout
[  339.934464] Bluetooth: hci2: command tx timeout
[  339.997275] Bluetooth: hci4: command tx timeout
[  340.125227] Bluetooth: hci5: command tx timeout
[  340.381738] Bluetooth: hci7: command tx timeout
[  340.446191] Bluetooth: hci6: command tx timeout
[  341.853418] Bluetooth: hci1: command tx timeout
[  341.917464] Bluetooth: hci0: command tx timeout
[  341.982297] Bluetooth: hci2: command tx timeout
[  341.982390] Bluetooth: hci3: command tx timeout
[  342.045266] Bluetooth: hci4: command tx timeout
[  342.173305] Bluetooth: hci5: command tx timeout
[  342.431302] Bluetooth: hci7: command tx timeout
[  342.493278] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
06:40:30  Registers:
info registers vcpu 0
RAX=0000000000000003 RBX=0000000000000001 RCX=ffffffff81a4c300 RDX=0000000000000003
RSI=ffffffff868444ec RDI=ffffffff864cd780 RBP=ffff88803800fa20 RSP=ffff88803800f910
R8 =ffffffff868444ec R9 =ffff88803800fa08 R10=000000000003ab7c R11=0000000000022b14
R12=ffffffff864cd788 R13=ffffffff864cd780 R14=ffff88803800fa09 R15=ffff88803800f9c8
RIP=ffffffff813484b3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe0fe9ff1f0 CR3=000000003677a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffffffff815ec480 RCX=0000000000000001 RDX=ffff888028197138
RSI=ffff888028197f48 RDI=ffff888028197138 RBP=ffff8880281971d0 RSP=ffff888028197128
R8 =0000000000000001 R9 =ffff888028197178 R10=000000000003ab7c R11=00000000000c28ab
R12=ffff888028197200 R13=0000000000000000 R14=ffff888015abb780 R15=0000000000000cc0
RIP=ffffffff81348bd2 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007faa923a5368 CR3=0000000037262000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000