Warning: Permanently added '[localhost]:18636' (ECDSA) to the list of known hosts.
2025/04/23 17:29:33 fuzzer started
2025/04/23 17:29:33 dialing manager at localhost:42253
syzkaller login: [   98.387649] cgroup: Unknown subsys name 'net'
[   98.573475] cgroup: Unknown subsys name 'cpuset'
[   98.604833] cgroup: Unknown subsys name 'rlimit'
2025/04/23 17:29:55 syscalls: 2214
2025/04/23 17:29:55 code coverage: enabled
2025/04/23 17:29:55 comparison tracing: enabled
2025/04/23 17:29:55 extra coverage: enabled
2025/04/23 17:29:55 setuid sandbox: enabled
2025/04/23 17:29:55 namespace sandbox: enabled
2025/04/23 17:29:55 Android sandbox: enabled
2025/04/23 17:29:55 fault injection: enabled
2025/04/23 17:29:55 leak checking: enabled
2025/04/23 17:29:55 net packet injection: enabled
2025/04/23 17:29:55 net device setup: enabled
2025/04/23 17:29:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/23 17:29:55 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/23 17:29:55 USB emulation: enabled
2025/04/23 17:29:55 hci packet injection: enabled
2025/04/23 17:29:55 wifi device emulation: enabled
2025/04/23 17:29:55 802.15.4 emulation: enabled
2025/04/23 17:29:55 fetching corpus: 0, signal 0/0 (executing program)
2025/04/23 17:29:56 starting 8 fuzzer processes
17:29:56 executing program 1:
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=@routing={0x2c, 0x6, 0x0, 0x3f, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2]}, 0x38)
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xb273]}, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000080)="a83b011bc6b209d2a0fcc899d16505dbf994c96db082c7c524faf6a473ea29a06af7ef01e0ed4931c557d4903670bec784c0b829013bdd9eeea8a44198add4bf0b4f78ab7848a4dadada1ff5db", 0x4d)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x60}}, 0x844)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000280)=0x2ca2, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0), 0x4)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24054090}, 0x4000)
r3 = creat(&(0x7f0000000480)='./file0\x00', 0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3)
recvmsg$unix(r3, &(0x7f0000000840)={&(0x7f00000004c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000600)=""/132, 0x84}], 0x2, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r4=>0x0, <r5=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r9=>0x0}}}, @rights={{0x20, 0x1, 0x1, [<r10=>0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}, 0x40020162)
sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000045}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r10, {<r12=>r4, r5}}, './file0\x00'})
fchownat(r8, &(0x7f00000009c0)='./file0\x00', r12, r9, 0x1000)
sendmsg$NL80211_CMD_SET_BSS(r11, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x40000)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, r13, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x9, 0x10}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5a2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x2000000)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x8c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004801}, 0x4004000)

17:29:56 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, './file0\x00'})
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x2, 0x8, 0x201, 0x0, 0x0, {0xfb276048ee00994d, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2000}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xa9be}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x2755}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040005}, 0x0)
modify_ldt$read_default(0x2, &(0x7f00000002c0)=""/27, 0x1b)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2480041}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x80}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40011}, 0x20000000)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x560}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x20}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x794}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x881)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x2140c2, 0x0)
r4 = signalfd(r3, &(0x7f0000000640)={[0x401]}, 0x8)
r5 = open_tree(r3, &(0x7f0000000680)='./file0\x00', 0x8901)
fadvise64(r5, 0x2, 0x3, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f00000006c0), 0x5d5400, 0x0)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0x4)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000b80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x242639250a98b438}, 0xc, &(0x7f0000000b40)={&(0x7f00000007c0)={0x36c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x348, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}, @ETHTOOL_A_BITSET_VALUE={0x8f, 0x4, "3bff4c758440c69d6ea4995b221d01d5fe2096d375b80c9441200657ee9ac8469a282394206da1a98f035d3da02d287c16cd12758b3cbb606ea0dfbe4ec5ca50063a32ac4b4280a2f15cfc1d8075b4d4dc574a729cd8ee56a912008858aed665d50a5e461bcd725ba282ba9c758c0b7c02907ca54a0005959228971802101ec982b4898ca69bd4382fbfe1"}, @ETHTOOL_A_BITSET_MASK={0x96, 0x5, "a274ca554117ebfda35244c95020c6d28805854ef7be6792912127019a7e99fc7461276e89772c7b6baa053dbe64e30f83f26d5b3cf304e4241db7a4221ac283a5b754f394a852a38ed568683f18b6d9c809a9dcbac6cf9e9c6455b0907ebc99a1fc3362bd66afc1f7a6315ee10abba90a01f899754a739022bfe25b52837fac6a06d7dda4f4238107a512b3c0ddba4cd0b4"}, @ETHTOOL_A_BITSET_MASK={0xd5, 0x5, "774c02bd02097078c2b0703dcca1f1aca606336ca177cb74c991c78f8274f68bef3a21067aaddbf71d38ba758766ec49b30a16afd69abd3b8bcbd1c47132d6ed8a4fc05c2e0e5473fa5feec1752d195b316e5facc25db8a8b046c4832ac8803236561f798bbaf6a9d1769a8b042c786a26c5409db106bbc298f24cf82d979beb5c1116dcdeb8746fdbdfa5e94a9ce4ed145292e87f3f8da5c84e71c666195555cccf89b3f1128707226790b24388f57bb906cb801316c4a18f8229c3446774727ddca7cabcc3f7a29f1678e476b925f1f2"}, @ETHTOOL_A_BITSET_VALUE={0xfc, 0x4, "0d9885ab086b59c68094d43fd0c377efeee0ed496734e2f7978ea2978fd91a8f70068182631e5b3f5789d016b3e8e587e182481006c031475fb2f652674d800abec1b7bca9b522e8b5b7fe6ae7fd9a88a3e459b0e3e230c2d9cbcf0e91aa06e8da4393bcfa3c24d590e20e2c33b1ab99ded25f418ad00574f7f3e13d5b2574a97d968f7f5b631fbc1cb86e0f8cd43f7386ba25d1003e8b362112f5a5e544dcc031db7dc1dc0ba61ed5664446b55286e3120d0a8f24e68441adece46ac4b3448e7ece21fb735ba53e66a7b0c71ef3fb421d226d9871ccfbab7eece4d19ad1bb953c90af0d2c877cb8b45c1781fd0963a967165ad76bda2f65"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/null\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4058080}, 0x800)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000bc0)={"c0e598ad2a611529b353e11b7060ee5f", 0x0, 0x0, {0x20, 0x7fff}, {0x1, 0x1ff}, 0x6, [0x9, 0x4, 0x20, 0xfffffffffffffffa, 0x81, 0x8000, 0x3, 0x5000000000000000, 0x800, 0x4a02, 0x2fa1, 0x3, 0xa68, 0x4, 0x6, 0x7]})
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x48000}, 0x4)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c001}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000f40)={'gretap0\x00', {0x2, 0x0, @initdev}})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d80)={&(0x7f0000001580)={0x7f0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8c}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x890}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x645f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x373}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2eb0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7, 0x0, 0x80000001}, {0x3ff, 0x7f, 0x2, 0x3}, {0x2, 0x6, 0x6, 0xffff}, {0x2, 0x5, 0x6}, {0x2, 0x5, 0xb3, 0x80000000}, {0x400, 0xc3, 0x3f, 0x6}, {0x807, 0x0, 0x0, 0x6}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff0001}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x7f0}, 0x1, 0x0, 0x0, 0x24000091}, 0x20000800)

17:29:56 executing program 2:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x400, 0x70bd2b, 0x25dfdbfb, {0x1, 0x1, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1a8, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd3ab}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xed}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "aa23ad8576b5b458cc5ba922f36d74b771203885c3a201a79fdf22dea6"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe74}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x84}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x67a0ff28}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x4}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000380))
fcntl$notify(r0, 0x402, 0x39)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @local, @loopback}, 0xc)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000400)=0x1)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000440))
r1 = fsmount(r0, 0x0, 0x1)
ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000480)=""/51)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x170, 0x0, 0x11, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x170}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000740)={'bond_slave_1\x00'})
ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000780)={0x10001, 0x6, 0x3f, 0x7, 0x2, 0x3, 0xfffffffffffffff9})
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000007c0))
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940), 0x44000, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff7c8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xaa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}], @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000)

17:29:56 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x111880, 0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x80000)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040))
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x696000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'})
r4 = memfd_secret(0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x1050}, 0x8000)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x1, 'bond_slave_1\x00', {}, 0x4})
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000340)={0x0, 0x2, 0x10000, 0x3f})
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0)
ioctl$EVIOCSABS3F(r7, 0x401845ff, &(0x7f00000003c0)={0x8, 0x1ff, 0x7, 0x1, 0x401, 0x80000001})
clone3(&(0x7f0000001600)={0x2000000, &(0x7f0000000400)=<r8=>0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480), {0x23}, &(0x7f00000004c0)=""/4096, 0x1000, &(0x7f00000014c0)=""/239, &(0x7f00000015c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r4}}, 0x58)
fcntl$dupfd(0xffffffffffffffff, 0x0, r8)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), r3)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000001840)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0xf0, r9, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffc00}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24004001}, 0x800)
r10 = syz_open_dev$mouse(&(0x7f0000001880), 0x5, 0x80000)
ioctl$TIOCSISO7816(r10, 0xc0285443, &(0x7f00000018c0)={0x10001, 0x5, 0x100, 0x0, 0x3})

[  121.525729] audit: type=1400 audit(1745429397.001:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
17:29:57 executing program 5:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0x4, 0x5})
r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000400)={0xa53, 0x0, 0x101, 0x1})
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000440)=<r2=>0x0)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000480)={r2, 0x1, 0x6})
keyctl$set_reqkey_keyring(0xe, 0x1)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x480, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1c}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x80)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x10)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x29}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x40)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x1)
sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000cc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={0x2ac, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x24000011}, 0xc000)
sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x73}}}}, ["", ""]}, 0x28}}, 0x2400c8c0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000001040)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x15d2d1d8f900226a}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)={0x198, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x80000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x101}, {0x6, 0x16, 0x5083}, {0x5}, {0x6, 0x11, 0x23cf}, {0x8, 0xb, 0xffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xcb3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xf03f}, {0x8, 0xb, 0x400000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xfbff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x1}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000010}, 0x440c0)
ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x4)

17:29:57 executing program 4:
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'tunl0\x00', <r0=>0x0, 0x7800, 0x7800, 0xffffffff, 0x400, {{0x22, 0x4, 0x1, 0x6, 0x88, 0x67, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @empty, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xdd, [@empty, @loopback, @local, @local]}, @lsrr={0x83, 0x13, 0x1b, [@loopback, @multicast2, @local, @multicast1]}, @lsrr={0x83, 0x17, 0x7f, [@local, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0xff}, @multicast1]}, @ssrr={0x89, 0xb, 0x32, [@loopback, @dev={0xac, 0x14, 0x14, 0xa}]}, @rr={0x7, 0x27, 0xda, [@local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @rand_addr=0x64010102, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x16}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48810}, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r1, 0xa18, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2400c081}, 0x2004c000)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000400)={'veth1_macvtap\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', <r2=>r0, 0x4, 0xff, 0x1, 0x23, 0x28, @mcast1, @remote, 0x8, 0x1, 0xfffeffff}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x174, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x174}, 0x1, 0x0, 0x0, 0x20008804}, 0x84)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x2be, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x30}}, 0x8004)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x12000002}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)={0x34c, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x330, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8f9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xbc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x6f6, 0x3, 0x30, 0x1255, 0x9, 0x400]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x2, 0x1, 0x60, 0x3, 0x24]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x1}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x3}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x9, 0x36, 0x36, 0x24, 0x16, 0x1b, 0x3187596f97410cc, 0xa, 0x12, 0x6, 0x4, 0x48, 0x4, 0x30, 0xc, 0x24, 0x5, 0x4, 0x24, 0x1b, 0x18, 0x24, 0x16, 0x6c, 0x4, 0x9, 0x14, 0x6b, 0xc]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x4}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x7, 0x8}, {0x2, 0x7}, {0x4, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x7}, {0x3, 0x5}, {}, {0x4, 0x5}, {0x1, 0x8}, {0x1, 0x8}, {0x6}, {0x2, 0x4}, {0x6, 0x8}, {0x3, 0x6}, {0x4, 0xa}, {0x1, 0xa}, {0x5}, {0x1, 0x7}, {0x5, 0x4}, {0x5}, {0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x5, 0x2}, {0x1, 0xa}, {0x1, 0x1}, {0x6, 0x3}, {0x2, 0x9}, {0x5, 0x8}, {0x5, 0x5}, {0x2, 0x4}, {0x5, 0x4}, {0x2, 0x5}, {0x3, 0x9}, {0x6, 0x3}, {0x2}, {0x1, 0x6}, {0x6, 0x9}, {0x6, 0xa}, {0x1, 0x3}, {0x2, 0x9}, {0x2, 0x5}, {0x1, 0x6}, {0x3, 0x5}, {0x7}, {0x7, 0x7}, {0x3, 0x2}, {0x4}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x9}, {0x0, 0x7}, {0x4, 0x9}, {0x7, 0x8}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x1, 0x36, 0x6c, 0xb, 0x60, 0x3, 0x6, 0x9, 0x1b, 0x24, 0x5, 0x2, 0x24, 0x12, 0x1b]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0xa}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x3, 0x4, 0x7, 0x7c, 0x6, 0xeec]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x1}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x9}, {0x6, 0xd}, {0x3, 0x8}, {0x3, 0x3}, {}, {0x2, 0x9}, {0x1, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x4}, {0x6, 0x2}, {0x6}, {0x2, 0x9}, {0x1, 0x9}, {0x7, 0x1}, {0x5, 0x4}, {0x4, 0x1}, {0x2, 0x9}, {0x7, 0x1}, {0x5, 0x4}, {0x0, 0x8}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8001, 0x81, 0x1, 0xfff7, 0x5, 0x1, 0x1]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x1, 0x2, 0x9, 0x12, 0x30, 0xc, 0x1b, 0x30, 0x18, 0x6, 0x60, 0x60, 0x16, 0xb, 0x24, 0x48, 0x2, 0x9, 0xb, 0x60, 0x6c, 0x5, 0x9, 0x5, 0x6c, 0x6, 0x16, 0x36, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x929, 0xfffd, 0x0, 0x8f8, 0x1, 0x3, 0x1, 0x40]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x1}, {0x0, 0x7}, {0x6, 0x8}]}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x4, 0x2, 0x5, 0x88e, 0x31, 0x100]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x77, 0x3, 0xc, 0x30, 0x18, 0x4, 0x18, 0x6, 0x5, 0x18, 0x60, 0x3, 0x6c, 0x18, 0x48, 0xf, 0x3, 0x4, 0x48, 0x48, 0x36, 0x3, 0xc, 0x36, 0x0, 0x0, 0x9, 0xfbba69b6b095c383, 0x2]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x8}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x7}, {0x6}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0xa}, {0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x5, 0x8}, {0x7, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0x7}, {0x3, 0x9}, {0x5, 0x4}, {0x5}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0x6}, {0x2, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x1, 0x5}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x8}, {0x2, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x5, 0x1}, {0x2, 0x7}, {0x5, 0x8}, {0x4, 0x6}, {0x2, 0x4}, {0x5, 0xa}, {0x4}, {0x2}, {0x3, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x3, 0x3}, {0x4, 0xa}, {0x2, 0x9}, {}, {0x0, 0x1}, {0x5}, {0x7, 0x5}, {0x7, 0x5}, {0x3, 0x5}, {0x6, 0x9}, {0x3, 0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x30, 0x12, 0x16, 0x5, 0x4, 0x48, 0x9, 0x0, 0x1b, 0x48, 0x24, 0x9, 0x5, 0x6, 0x1b, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x6, 0x36, 0x30, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x1, 0x2, 0x40, 0x200, 0x2, 0x200]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0xc, 0x60, 0x9, 0x6c, 0x5, 0x60, 0xb, 0x48, 0x2, 0x9, 0x6c, 0x16, 0x18, 0x1b, 0xb, 0x5, 0x1, 0x36, 0x1, 0x16, 0x6]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x9}, {0x2, 0xa}, {0x0, 0x4}, {0x2, 0x7}, {0x4, 0x6}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x5, 0x24, 0x1, 0x6c, 0x18, 0x1, 0x30, 0xb, 0xc, 0x26ec694288d8d0bd, 0x24, 0x2, 0x2, 0x2a, 0x60, 0x0, 0x68, 0x36, 0x6]}, @NL80211_TXRATE_GI={0x5}]}]}]}]}]}, 0x34c}}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x4}}, './file0\x00'})
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x74, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0x74}}, 0x1)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x40, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6eb}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa0c}]}, 0x40}}, 0x4008)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40040)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001080), 0x402000, 0x0)
poll(&(0x7f00000010c0)=[{r5, 0x2216}], 0x1, 0x1a8147c1)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001180)={'syztnl1\x00', &(0x7f0000001100)={'syztnl2\x00', r0, 0x29, 0x0, 0x7, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x8000, 0x4008, 0x227d, 0x3ff}})
accept(r4, 0x0, &(0x7f00000011c0))
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048830}, 0x4040800)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x2c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x880)

17:29:57 executing program 6:
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7)
set_thread_area(&(0x7f0000000040)={0x338e0b4a, 0x20000800, 0x400, 0x1, 0x1, 0x1})
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/240, 0xf0}, {&(0x7f0000000200)=""/17, 0x11}, {&(0x7f0000000240)=""/110, 0x6e}], 0x3, &(0x7f0000000300)}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/57, 0x39}], 0x1, &(0x7f0000000440)=[@rights={{0x2c, 0x1, 0x1, [<r0=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000006c0)=""/76, 0x4c}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/145, 0x91}, {&(0x7f0000001800)=""/116, 0x74}], 0x4}}], 0x4, 0x0, &(0x7f00000019c0)={0x0, 0x989680})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001a00)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001a80)=""/209, 0xd1}, {&(0x7f0000001b80)=""/10, 0xa}], 0x2, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff]}}], 0x168}, 0x2)
write$P9_RGETLOCK(r0, &(0x7f0000001dc0)={0x20, 0x37, 0x1, {0x2, 0x401, 0xa08, r5, 0x2, '\xbc{'}}, 0x20)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000001e00))
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f0000001e40))
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r9, 0xd0009412, &(0x7f0000001e80)={0x0, 0xaa})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SCAN_REQ(r10, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xbd}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8840)
r11 = syz_open_dev$vcsa(&(0x7f0000002f80), 0x5, 0x4600)
statx(r11, &(0x7f0000002fc0)='./file0\x00', 0x100, 0x4, &(0x7f0000003000))
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000003100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
lsetxattr$security_capability(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380), &(0x7f00000033c0)=@v1={0x1000000, [{0x4, 0x60}]}, 0xc, 0x3)
ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000003400))
r12 = pidfd_getfd(r2, r4, 0x0)
write$char_usb(r12, &(0x7f0000003440)="f3f46ae94779eb1950b894db2af534f014718aef1f539807f5ab27f49bc881dc85a4743370d7fabf62dbb2eb6a52b426efe293db70bc640a35e04f29c0b4ccfc11ad1a4da2bc5cbe0137d76332a68a1cf4e1d364e65f963c2474211421623e454ba96ba5396b7268ab050c81cc89da27069af852b87e54a0ddd2e46632635605282bec2bccf55559529a35ba7f35622386ff63b160c308c2eb695a00ae0140a1f6df76ff060ff7ae2e33a56cce30bf7192012e3383b64697f9b0f2e54e11faeeb616b001c5644d192ad31f3dc7fe111436e97abb0db18b5c9a7d2ea871fc2f91436f7a3c6c62a1c2753fe554e12e818c", 0xf0)
syz_open_dev$vcsa(&(0x7f0000003540), 0x4, 0x40000)
sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000036c0)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003680)={&(0x7f0000003600)={0x60, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40840}, 0x40080)

17:29:57 executing program 7:
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@loopback, @in=@private=0xa010102, 0x4e21, 0x9d2, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x87, 0x0, 0xee01}, {0x7fffffff, 0x7, 0x7ff, 0x9, 0x49d, 0x0, 0x100, 0x800}, {0xc5, 0x0, 0x2, 0x8}, 0x8, 0x6e6bc0, 0x2, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4d6, 0x33}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3500, 0x1, 0x1, 0x1, 0x5, 0x2ce, 0x6}}, 0xe8)
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000, 0x10000, &(0x7f0000001100)={0x11, 0xd, 0x0, 0x1, 0x80}, 0x14)
fcntl$addseals(r0, 0x409, 0x0)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001140)={'raw\x00', 0x0, [0x0, 0x3, 0x10000, 0x8, 0x1ff]}, &(0x7f00000011c0)=0x54)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001200)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
getpeername$netlink(r1, &(0x7f0000001240), &(0x7f0000001280)=0xc)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xd4, 0x0, 0x220, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2fce, 0x69}}}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x8001)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001840)={'tunl0\x00', &(0x7f00000017c0)={'syztnl0\x00', <r3=>0x0, 0x20, 0x700, 0x2b, 0x9, {{0x16, 0x4, 0x3, 0x38, 0x58, 0x65, 0x0, 0x4, 0x4, 0x0, @loopback, @loopback, {[@timestamp_prespec={0x44, 0xc, 0xba, 0x3, 0xa, [{@rand_addr=0x64010102, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0xdc, 0x3, 0x2, [{@private=0xa010101, 0x5}, {@loopback, 0x74}, {@remote, 0x8}, {@local, 0x7c00}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x7f, 0x0}, 0xecfc}]}, @end, @noop]}}}}})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000001980)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xbc, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x10001}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000040}, 0x44)
ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000019c0))
r4 = accept(r1, &(0x7f0000001a40)=@nfc_llcp, &(0x7f0000001ac0)=0x80)
syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r4)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcd97, 0x5d}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x16}, 0x40000)
write$cgroup_netprio_ifpriomap(r1, &(0x7f0000001c00)={'ip6_vti0', 0x32, 0x38}, 0xb)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001c40)='/sys/block/loop3', 0x26401, 0x69)
ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000001c80)=0x9)

[  122.888257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  122.890201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  122.892163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  122.896993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  122.900717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  122.955534] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.963382] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.972599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  122.985063] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  122.990689] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  123.048575] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  123.057065] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  123.066547] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  123.071429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  123.075550] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  123.088395] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  123.090901] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  123.092911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  123.093701] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  123.094948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  123.097814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  123.101091] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  123.102752] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  123.104319] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  123.110604] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  123.111221] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  123.114889] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  123.115070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  123.119132] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  123.121229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  123.127011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  123.136369] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  123.136415] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  123.159151] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  123.190365] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  123.193278] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  123.198274] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  123.203624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  123.221255] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  123.228849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  124.975612] Bluetooth: hci0: command tx timeout
[  125.039165] Bluetooth: hci1: command tx timeout
[  125.167174] Bluetooth: hci4: command tx timeout
[  125.230935] Bluetooth: hci2: command tx timeout
[  125.231017] Bluetooth: hci3: command tx timeout
[  125.232843] Bluetooth: hci5: command tx timeout
[  125.295747] Bluetooth: hci7: command tx timeout
[  125.297374] Bluetooth: hci6: command tx timeout
[  127.023527] Bluetooth: hci0: command tx timeout
[  127.087408] Bluetooth: hci1: command tx timeout
[  127.214946] Bluetooth: hci4: command tx timeout
[  127.279883] Bluetooth: hci5: command tx timeout
[  127.280372] Bluetooth: hci3: command tx timeout
[  127.280513] Bluetooth: hci2: command tx timeout
[  127.344838] Bluetooth: hci7: command tx timeout
[  127.345050] Bluetooth: hci6: command tx timeout
[  129.071189] Bluetooth: hci0: command tx timeout
[  129.137038] Bluetooth: hci1: command tx timeout
[  129.263090] Bluetooth: hci4: command tx timeout
[  129.327208] Bluetooth: hci2: command tx timeout
[  129.327243] Bluetooth: hci5: command tx timeout
[  129.327739] Bluetooth: hci3: command tx timeout
[  129.390879] Bluetooth: hci6: command tx timeout
[  129.391445] Bluetooth: hci7: command tx timeout
[  131.118868] Bluetooth: hci0: command tx timeout
[  131.183873] Bluetooth: hci1: command tx timeout
[  131.311259] Bluetooth: hci4: command tx timeout
[  131.374926] Bluetooth: hci5: command tx timeout
[  131.375476] Bluetooth: hci2: command tx timeout
[  131.376132] Bluetooth: hci3: command tx timeout
[  131.439026] Bluetooth: hci6: command tx timeout
[  131.439595] Bluetooth: hci7: command tx timeout
[  183.400942] syz-executor.6 (286) used greatest stack depth: 24576 bytes left
[  185.797169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  185.803675] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  185.806319] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  185.808609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  185.814651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  185.820704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  185.823123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  185.826903] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  185.828509] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  185.831405] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  185.885487] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  185.893703] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  185.900041] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  185.901584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  185.903226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  185.907462] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  185.911630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  185.928645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  185.943692] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  185.949424] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  185.956022] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  185.961981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  185.967600] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  185.968063] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  185.976159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  185.991418] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  185.997604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  186.008056] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  186.018539] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  186.027381] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  186.031219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  186.040115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  186.043405] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  186.050667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  186.060861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  186.063269] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  186.086176] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  186.100246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  186.108122] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  186.110295] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  187.887110] Bluetooth: hci0: command tx timeout
[  187.888250] Bluetooth: hci1: command tx timeout
[  188.015157] Bluetooth: hci4: command tx timeout
[  188.143301] Bluetooth: hci5: command tx timeout
[  188.144084] Bluetooth: hci3: command tx timeout
[  188.144749] Bluetooth: hci2: command tx timeout
[  188.207115] Bluetooth: hci7: command tx timeout
[  188.270893] Bluetooth: hci6: command tx timeout
[  189.934948] Bluetooth: hci0: command tx timeout
[  189.936583] Bluetooth: hci1: command tx timeout
[  190.063331] Bluetooth: hci4: command tx timeout
[  190.192858] Bluetooth: hci5: command tx timeout
[  190.194531] Bluetooth: hci2: command tx timeout
[  190.195893] Bluetooth: hci3: command tx timeout
[  190.255036] Bluetooth: hci7: command tx timeout
[  190.320119] Bluetooth: hci6: command tx timeout
[  191.983694] Bluetooth: hci1: command tx timeout
[  191.984646] Bluetooth: hci0: command tx timeout
[  192.111864] Bluetooth: hci4: command tx timeout
[  192.239587] Bluetooth: hci3: command tx timeout
[  192.240198] Bluetooth: hci5: command tx timeout
[  192.240689] Bluetooth: hci2: command tx timeout
[  192.303864] Bluetooth: hci7: command tx timeout
[  192.366897] Bluetooth: hci6: command tx timeout
[  194.031054] Bluetooth: hci0: command tx timeout
[  194.032091] Bluetooth: hci1: command tx timeout
[  194.159418] Bluetooth: hci4: command tx timeout
[  194.287520] Bluetooth: hci3: command tx timeout
[  194.288092] Bluetooth: hci2: command tx timeout
[  194.288557] Bluetooth: hci5: command tx timeout
[  194.351095] Bluetooth: hci7: command tx timeout
[  194.415843] Bluetooth: hci6: command tx timeout
[  248.069270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  248.070938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  248.072249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  248.076350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  248.081251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  248.318376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  248.321288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  248.323557] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  248.327498] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  248.329618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  248.390386] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  248.393337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  248.395130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  248.410147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  248.414321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  248.464832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  248.480148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  248.488402] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  248.501198] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  248.508299] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  248.583327] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  248.592157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  248.599177] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  248.626569] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  248.634731] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  248.777611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  248.789014] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  248.793143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  248.796469] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  248.804278] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  248.805553] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  248.810049] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  248.824195] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  248.826555] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  248.836295] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  248.837152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  248.850240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  248.852823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  248.881168] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  248.946381] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  250.094931] Bluetooth: hci0: command tx timeout
[  250.350893] Bluetooth: hci1: command tx timeout
[  250.478970] Bluetooth: hci2: command tx timeout
[  250.543227] Bluetooth: hci3: command tx timeout
[  250.798978] Bluetooth: hci4: command tx timeout
[  250.926872] Bluetooth: hci7: command tx timeout
[  250.991122] Bluetooth: hci6: command tx timeout
[  250.992125] Bluetooth: hci5: command tx timeout
[  252.143133] Bluetooth: hci0: command tx timeout
[  252.398883] Bluetooth: hci1: command tx timeout
[  252.527396] Bluetooth: hci2: command tx timeout
[  252.590893] Bluetooth: hci3: command tx timeout
[  252.847405] Bluetooth: hci4: command tx timeout
[  252.974910] Bluetooth: hci7: command tx timeout
[  253.039248] Bluetooth: hci5: command tx timeout
[  253.039725] Bluetooth: hci6: command tx timeout
[  254.192639] Bluetooth: hci0: command tx timeout
[  254.446887] Bluetooth: hci1: command tx timeout
[  254.574917] Bluetooth: hci2: command tx timeout
[  254.638860] Bluetooth: hci3: command tx timeout
[  254.895230] Bluetooth: hci4: command tx timeout
[  255.024351] Bluetooth: hci7: command tx timeout
[  255.088212] Bluetooth: hci5: command tx timeout
[  255.089681] Bluetooth: hci6: command tx timeout
[  256.239157] Bluetooth: hci0: command tx timeout
[  256.496201] Bluetooth: hci1: command tx timeout
[  256.623174] Bluetooth: hci2: command tx timeout
[  256.688009] Bluetooth: hci3: command tx timeout
[  256.943097] Bluetooth: hci4: command tx timeout
[  257.071577] Bluetooth: hci7: command tx timeout
[  257.135168] Bluetooth: hci6: command tx timeout
[  257.136723] Bluetooth: hci5: command tx timeout
[  310.788606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  310.792345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  310.798188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  310.807310] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  310.814379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  310.853502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  310.858173] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  310.862101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  310.874804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  310.883093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  311.180565] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  311.186078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  311.188404] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.196348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.200012] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  311.207166] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  311.220167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  311.226237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  311.265295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  311.268532] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  311.270755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  311.275362] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  311.277264] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  311.281392] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  311.282730] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  311.286009] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  311.293527] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  311.298202] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  311.310061] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  311.317093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  311.380421] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  311.386987] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  311.402128] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  311.407536] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  311.417299] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  311.424342] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  311.433652] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  311.452721] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  311.498538] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  311.544274] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  312.879899] Bluetooth: hci0: command tx timeout
[  312.943168] Bluetooth: hci1: command tx timeout
[  313.263816] Bluetooth: hci3: command tx timeout
[  313.392915] Bluetooth: hci2: command tx timeout
[  313.454935] Bluetooth: hci5: command tx timeout
[  313.518901] Bluetooth: hci4: command tx timeout
[  313.518929] Bluetooth: hci6: command tx timeout
[  313.647918] Bluetooth: hci7: command tx timeout
[  314.926896] Bluetooth: hci0: command tx timeout
[  314.991278] Bluetooth: hci1: command tx timeout
[  315.312289] Bluetooth: hci3: command tx timeout
[  315.440204] Bluetooth: hci2: command tx timeout
[  315.503874] Bluetooth: hci5: command tx timeout
[  315.566890] Bluetooth: hci4: command tx timeout
[  315.567411] Bluetooth: hci6: command tx timeout
[  315.695028] Bluetooth: hci7: command tx timeout
[  316.975050] Bluetooth: hci0: command tx timeout
[  317.040206] Bluetooth: hci1: command tx timeout
[  317.359867] Bluetooth: hci3: command tx timeout
[  317.487852] Bluetooth: hci2: command tx timeout
[  317.550888] Bluetooth: hci5: command tx timeout
[  317.615930] Bluetooth: hci4: command tx timeout
[  317.616411] Bluetooth: hci6: command tx timeout
[  317.742862] Bluetooth: hci7: command tx timeout
[  319.023862] Bluetooth: hci0: command tx timeout
[  319.088173] Bluetooth: hci1: command tx timeout
[  319.408879] Bluetooth: hci3: command tx timeout
[  319.534874] Bluetooth: hci2: command tx timeout
[  319.599012] Bluetooth: hci5: command tx timeout
[  319.663088] Bluetooth: hci4: command tx timeout
[  319.663590] Bluetooth: hci6: command tx timeout
[  319.791872] Bluetooth: hci7: command tx timeout
[  373.591378] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  373.595143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  373.598340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  373.611220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  373.622587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  373.661514] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  373.665652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  373.683704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  373.696177] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  373.703404] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  373.704323] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  373.707984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  373.711998] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  373.729802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  373.742336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  373.769322] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  373.774262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  373.804408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  373.810349] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  373.823428] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  373.943012] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  373.948157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  373.949902] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  373.959433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  373.963292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  374.232602] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  374.235350] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  374.246967] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  374.263141] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  374.273608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  374.546540] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  374.561697] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  374.606201] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  374.628731] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  374.643319] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  374.653947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  374.658077] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  374.691927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  374.702170] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  374.706399] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  375.726987] Bluetooth: hci0: command tx timeout
[  375.791222] Bluetooth: hci1: command tx timeout
[  375.854858] Bluetooth: hci2: command tx timeout
[  375.984152] Bluetooth: hci3: command tx timeout
[  376.047122] Bluetooth: hci4: command tx timeout
[  376.495103] Bluetooth: hci7: command tx timeout
[  376.879121] Bluetooth: hci5: command tx timeout
[  376.879493] Bluetooth: hci6: command tx timeout
[  377.775592] Bluetooth: hci0: command tx timeout
[  377.839030] Bluetooth: hci1: command tx timeout
[  377.902857] Bluetooth: hci2: command tx timeout
[  378.032460] Bluetooth: hci3: command tx timeout
[  378.095106] Bluetooth: hci4: command tx timeout
[  378.542932] Bluetooth: hci7: command tx timeout
[  378.926904] Bluetooth: hci5: command tx timeout
[  378.928503] Bluetooth: hci6: command tx timeout
[  379.822914] Bluetooth: hci0: command tx timeout
[  379.886902] Bluetooth: hci1: command tx timeout
[  379.951276] Bluetooth: hci2: command tx timeout
[  380.078877] Bluetooth: hci3: command tx timeout
[  380.143874] Bluetooth: hci4: command tx timeout
[  380.590944] Bluetooth: hci7: command tx timeout
[  380.974938] Bluetooth: hci6: command tx timeout
[  380.975017] Bluetooth: hci5: command tx timeout
[  381.871222] Bluetooth: hci0: command tx timeout
[  381.935712] Bluetooth: hci1: command tx timeout
[  381.998903] Bluetooth: hci2: command tx timeout
[  382.128109] Bluetooth: hci3: command tx timeout
[  382.191322] Bluetooth: hci4: command tx timeout
[  382.639058] Bluetooth: hci7: command tx timeout
[  383.023274] Bluetooth: hci6: command tx timeout
[  383.023880] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
17:35:02  Registers:
info registers vcpu 0
RAX=ffff888016361bc0 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff813508dd RDI=fffffbfff0b83750 RBP=ffffffff85c1ba80 RSP=ffff8880328672b0
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b0b4 R11=0000000000026dec
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff81518743 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564d000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563d2b0ee080 CR3=0000000016e40000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00712d3d534e4f4954504f5f45424f52
XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff88800fa003c0 RCX=ffffffff84a6af05 RDX=1ffff110066e1fa7
RSI=ffffffff84a6af2d RDI=0000000000000000 RBP=ffff88800eada000 RSP=ffff88803370fc00
R8 =0000000000000001 R9 =ffffed100655aecf R10=0000000000000001 R11=0000000000000000
R12=ffff888032ad7540 R13=ffff88803370fd40 R14=dffffc0000000000 R15=ffff88803370fd38
RIP=ffffffff84a6af66 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f551e62a540 00000000 00000000
GS =0000 ffff8880e574d000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f551eb266f4 CR3=00000000378f0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f551eb3547000007f551eb34f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000