Warning: Permanently added '[localhost]:7922' (ECDSA) to the list of known hosts.
2025/04/28 11:36:26 fuzzer started
2025/04/28 11:36:27 dialing manager at localhost:46629
syzkaller login: [   99.255370] cgroup: Unknown subsys name 'net'
[   99.414228] cgroup: Unknown subsys name 'cpuset'
[   99.452512] cgroup: Unknown subsys name 'rlimit'
2025/04/28 11:36:43 syscalls: 2214
2025/04/28 11:36:43 code coverage: enabled
2025/04/28 11:36:43 comparison tracing: enabled
2025/04/28 11:36:43 extra coverage: enabled
2025/04/28 11:36:43 setuid sandbox: enabled
2025/04/28 11:36:43 namespace sandbox: enabled
2025/04/28 11:36:43 Android sandbox: enabled
2025/04/28 11:36:43 fault injection: enabled
2025/04/28 11:36:43 leak checking: enabled
2025/04/28 11:36:43 net packet injection: enabled
2025/04/28 11:36:43 net device setup: enabled
2025/04/28 11:36:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/28 11:36:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/28 11:36:43 USB emulation: enabled
2025/04/28 11:36:43 hci packet injection: enabled
2025/04/28 11:36:43 wifi device emulation: enabled
2025/04/28 11:36:43 802.15.4 emulation: enabled
2025/04/28 11:36:43 fetching corpus: 0, signal 0/0 (executing program)
2025/04/28 11:36:46 starting 8 fuzzer processes
11:36:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000040)=""/187)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {<r2=>r0}}, './file0\x00'})
ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000001c0)=0x80000000)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
fsetxattr$security_evm(r4, &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x2, "b575e8aed698205ed7"}, 0xa, 0x3)
write$P9_RLOCK(r3, &(0x7f0000000300)={0x8, 0x35, 0x2}, 0x8)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4)
timerfd_gettime(r1, &(0x7f00000003c0))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x2}}, './file0\x00'})
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000440))
r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x109c00, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r6)
read$eventfd(r2, &(0x7f0000000500), 0x8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, <r7=>0x0}, &(0x7f00000005c0)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1c4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1c4}}, 0x0)

11:36:46 executing program 1:
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0x5, 0x4)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="b8525ea95280a8cac5", 0x9)
socketpair(0x1d, 0x4, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xc2a}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf91}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x33}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x6010}, 0x8000)
r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x800, 0x2002)
getsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000300))
readahead(r0, 0x9eb, 0x5330)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000340))
flistxattr(r0, &(0x7f0000000380)=""/61, 0x3d)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r5=>r0, {0x3}}, './file0\x00'})
ioctl$sock_bt_hci(r5, 0x400448e1, &(0x7f0000000400)="bd92cc01e7d91709bb7e06abaca61ba2c8eefe911643c80868e67774eae82e6b8cc08c4a6cf1d9c20ae7a71316e24ad3b33c46d5e38a821816c9681bced3b7fd032fef56a5233b6b6e6ca075ee8e0e7e0b54a860515b075b2c6225805ed196a69fe9de4e3d5ef5cae4704121c774a32d708657c2856ed4a03f17334ae3e88acc0ca0193267767c08746daa5d2f8f34844f163a6c67e3807b527adb8e033df299d4a2d24e77068450eb7e95d7c69ed2ee6dd554a00e944d84a829e61716445428d5633862f85376db")
sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x70e39dc47ccdc439}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1ff}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000640), &(0x7f0000000680)=0x8)
r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x5)
ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000006c0)=<r7=>0x0)
ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000700)=r7)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r4)

11:36:46 executing program 2:
utime(&(0x7f0000000000)='.\x00', &(0x7f0000000040)={0x4, 0x89})
listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/88, 0x58)
setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.sockprotoname\x00', &(0x7f00000001c0)='@#@)\x00', 0x5, 0x0)
lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.origin\x00', &(0x7f0000000280)='\x00', 0x1, 0x2)
mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x218000, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@version_9p2000}, {@access_user}, {@noextend}, {@cache_loose}, {@debug={'debug', 0x3d, 0x6}}, {@nodevmap}, {@cache_none}, {@loose}], [{@appraise_type}]}})
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x101080, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000500))
openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x121201, 0x44)
r2 = gettid()
r3 = openat$cgroup_ro(r1, &(0x7f0000000580)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000005c0)='sit0\x00')
r4 = eventfd2(0x9, 0x180000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000fbb000/0x3000)=nil, &(0x7f0000000600)="934e79bf349b0ec6e179eb655135bfaf5e54751932aee738580164eb43eb39b2fd2f50f30881df180b579c62463dc68fd152574805e13677fd7bb9af848d6b3bbc1aa26052a0259f5603948d1f8c009f2a75", 0x52, r4}, 0x68)
setxattr$security_ima(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), &(0x7f0000000780)=@v2={0x3, 0x1, 0x0, 0x5, 0x32, "efc38f1acb7c2eeb9cda51d6717ef4cffe724f0a4626d921dcc488f5cd061806ddc8f7e29700af401459a6016cdec7ba6be7"}, 0x3b, 0x1)
clock_gettime(0x0, &(0x7f0000000c00)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/18, 0x12}, {&(0x7f00000008c0)=""/88, 0x58}, {&(0x7f0000000940)=""/49, 0x31}, {&(0x7f0000000980)=""/175, 0xaf}, {&(0x7f0000000a40)=""/72, 0x48}], 0x6, &(0x7f0000000b40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r7=>0x0}}}], 0x80}}], 0x1, 0x40010002, &(0x7f0000000c40)={r5, r6+10000000})
sendmsg$nl_generic(r0, &(0x7f0000000e40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)={0x150, 0x19, 0x2, 0x70bd25, 0x25dfdbfc, {0x18}, [@typed={0x8, 0x83, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x4a, 0x0, 0x0, @pid=r2}, @typed={0x8, 0xe, 0x0, 0x0, @pid=r7}, @nested={0x104, 0x42, 0x0, 0x1, [@generic="fcc118c87e27c7ba0af23ceba5218f5e527c60a38fc31eaa1e4e82e654dbb32bc3682316b449a4bfca4161ff47d81041f8df19f56b248b885ee449d558105bfa1fcf064f0112b8ef37d183d0d2bd9ad846be7694d8c358750952c27b1d3ef75b21ba6a6e4afff024f107dad9b010e5c8c4877a1ef5527260f6a450e38fb0f50f8ee55aee1b984e195b38e300d5c6b1520ec2605bf028277c44d1c48efa78227353bbcd029a5d456770b0d0f18e1aac09aa0eb691599a48756952756b3950a6a33977c7c6e4c9067102938b70e7f6817b4ac5ec33bac6d805cd1ad2d27518ad433d631e31e7b1adacb059314df2d7d1f702bb977084997ef8", @typed={0x6, 0x1b, 0x0, 0x0, @str='^\x00'}]}, @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @typed={0x4, 0x52}]}, 0x150}, 0x1, 0x0, 0x0, 0x30008840}, 0x804)
pivot_root(&(0x7f0000000e80)='./file0\x00', 0xffffffffffffffff)

[  117.978770] audit: type=1400 audit(1745840206.464:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:36:46 executing program 3:
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x23}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x3}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4854)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x78}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x70}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4814)
r2 = syz_open_dev$vcsa(&(0x7f0000000440), 0x80000001, 0x200)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x6}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000005c0)="a85287babbea8312f4b5a1017ce13143", 0x10)
getpgid(0x0)
recvmsg$unix(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/148, 0x94}, {&(0x7f00000006c0)=""/40, 0x28}, {&(0x7f0000000700)=""/15, 0xf}, {&(0x7f0000000740)=""/122, 0x7a}, {&(0x7f00000007c0)=""/150, 0x96}, {&(0x7f0000000880)=""/106, 0x6a}, {&(0x7f0000000900)=""/115, 0x73}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x8, &(0x7f0000001a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x12000)
sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000001c00)={&(0x7f0000001b40), 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xd0)
r4 = socket(0x2, 0x3, 0x100)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0xb0, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xf6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_team\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x400}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80c4}, 0x1)
r5 = open(&(0x7f0000001dc0)='./file0\x00', 0x200000, 0x2)
ioctl$PIO_FONT(r5, 0x4b61, &(0x7f0000001e00))
r6 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KIOCSOUND(r6, 0x4b2f, 0x8)
fcntl$addseals(r5, 0x409, 0x4)
sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x1)

11:36:46 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, @out_args}, './file0\x00'})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001080)={'nat\x00', 0x0, 0x4, 0x1000, [0x1ff, 0x2, 0x8, 0x6, 0x1, 0x100000001], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f0000000080)=""/4096}, &(0x7f0000001100)=0x78)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000001140))
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0)
r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x81)
r3 = creat(&(0x7f0000001180)='./file0\x00', 0x306)
ioctl$CDROMREADCOOKED(r3, 0x5315, &(0x7f00000011c0))
recvmmsg$unix(r0, &(0x7f000000a0c0)=[{{&(0x7f0000001c40), 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000001cc0)=""/196, 0xc4}, {&(0x7f0000001dc0)=""/23, 0x17}, {&(0x7f0000001e00)=""/121, 0x79}, {&(0x7f0000001e80)=""/25, 0x19}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x5, &(0x7f0000002f40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000003040)=@abs, 0x6e, &(0x7f0000004100)=[{&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/39, 0x27}], 0x2}}, {{&(0x7f0000004140), 0x6e, &(0x7f0000007680)=[{&(0x7f00000041c0)=""/24, 0x18}, {&(0x7f0000004200)=""/164, 0xa4}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/158, 0x9e}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/110, 0x6e}, {&(0x7f0000006400)=""/249, 0xf9}, {&(0x7f0000006500)=""/69, 0x45}, {&(0x7f0000006580)=""/4096, 0x1000}, {&(0x7f0000007580)=""/247, 0xf7}], 0xa, &(0x7f0000007740)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000007780)=@abs, 0x6e, &(0x7f0000008b80)=[{&(0x7f0000007800)=""/243, 0xf3}, {&(0x7f0000007900)=""/214, 0xd6}, {&(0x7f0000007a00)=""/28, 0x1c}, {&(0x7f0000007a40)=""/4096, 0x1000}, {&(0x7f0000008a40)=""/4, 0x4}, {&(0x7f0000008a80)=""/3, 0x3}, {&(0x7f0000008ac0)=""/191, 0xbf}], 0x7, &(0x7f0000008c00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000008c40)=@abs, 0x6e, &(0x7f0000008f00)=[{&(0x7f0000008cc0)=""/98, 0x62}, {&(0x7f0000008d40)=""/82, 0x52}, {&(0x7f0000008dc0)=""/94, 0x5e}, {&(0x7f0000008e40)=""/173, 0xad}], 0x4}}, {{&(0x7f0000008f40), 0x6e, &(0x7f000000a000)=[{&(0x7f0000008fc0)=""/4096, 0x1000}, {&(0x7f0000009fc0)=""/21, 0x15}], 0x2, &(0x7f000000a040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x6, 0x6100, &(0x7f000000a240)={0x0, 0x3938700})
write$P9_RFLUSH(r5, &(0x7f000000a280)={0x7, 0x6d, 0x1}, 0x7)
fcntl$getownex(r7, 0x10, &(0x7f000000a2c0))
r8 = dup2(r2, r4)
ioctl$IOC_PR_PREEMPT(r8, 0x401870cb, &(0x7f000000a5c0)={0x401, 0x81, 0xbce, 0x6ef3})
syz_open_dev$vcsa(&(0x7f000000a600), 0x2, 0x40)
syz_open_dev$vcsa(&(0x7f000000a640), 0xb7, 0x4000)
r9 = openat$full(0xffffffffffffff9c, &(0x7f000000a680), 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r9, &(0x7f000000a8c0)={&(0x7f000000a6c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f000000a880)={&(0x7f000000a700)={0x158, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x6f2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x240f}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8001}, 0x240000c0)
getsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f000000a900)=""/153, &(0x7f000000a9c0)=0x99)
r10 = open(&(0x7f000000aa00)='./file0\x00', 0x2001, 0x86)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r10, &(0x7f000000ab00)={&(0x7f000000aa40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000aac0)={&(0x7f000000aa80)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040044}, 0x4040000)

11:36:46 executing program 4:
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x1f)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x6}}, './file0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x414, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x66}}}}, [@NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x34f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2f4, 0x11d, 0x0, 0x1, [{0x2f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2e0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xc5c, 0xb3, 0x4e, 0x6, 0x0, 0x8, 0x94]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xff, 0xffff, 0x5, 0xad3, 0x80, 0xa85, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x0, 0x4, 0x4, 0x80, 0x8, 0xaa00, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x1}, {0x6}, {0x1, 0x4}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x7, 0x401, 0x5, 0x1f, 0x0, 0x400]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0xa}, {0x6, 0x2}, {0x7, 0x5}, {0x3, 0xa}, {0x7, 0x4}, {0x6}, {0x5, 0x2}, {0x4, 0x6}, {0x0, 0x7}, {0x2, 0x5}, {0x2, 0x5}, {0x3, 0x3}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x4}, {0x7, 0x7}, {0x4, 0x2}, {0x5}, {0x2, 0x6}, {0x2, 0x9}, {0x6, 0x3}, {0x4, 0x1}, {0x4, 0x5}, {0x4}, {0x6, 0x9}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x3}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x2}, {0x4, 0x7}, {0x1, 0x9}, {0x0, 0x9}, {0x5, 0x4}, {0x5, 0x6}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0x6}, {0x5, 0x7}, {0x2, 0x3}, {0x4}, {0x1, 0x2}, {0x2}, {0x1, 0x4}, {0x4, 0x6}, {0x1, 0x1}, {0x3, 0x7}, {0x7, 0xa}, {0x1, 0xa}, {}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xd, 0x1, 0x12, 0x43, 0x4, 0x37, 0xa, 0x36, 0x4, 0x36, 0x6, 0x36, 0x60, 0xc]}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x1, 0x2, 0x31, 0xb, 0x16, 0x16, 0x60, 0x1b, 0x60, 0x3, 0x2, 0x1, 0x55, 0x60, 0x24, 0x6c, 0x24, 0x1b, 0x6, 0x60, 0xc, 0x48, 0xb, 0x30, 0x24, 0x60, 0x2, 0xb, 0x48, 0xe26c07fe856bd42c]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x1, 0x3, 0x1b, 0x6c, 0x5, 0x6c, 0x36, 0x1b, 0x30, 0x18, 0x5, 0x14, 0x4, 0x48, 0x48, 0x18, 0x5, 0x3, 0x60, 0xb, 0x1e, 0x6, 0x12, 0x24, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1c70, 0x5, 0x8, 0x5, 0x7, 0x2, 0x841]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x1, 0x1f, 0x6, 0x48, 0x60, 0x24, 0x4, 0x1f, 0xc, 0x36, 0x4, 0x60, 0x1b, 0x5a, 0x18, 0x2, 0x48, 0x30, 0x12, 0x18, 0x36, 0xb, 0x9, 0xc9e9861f1c715fb8, 0x60, 0x1, 0xc, 0x6c, 0x24, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1ff, 0x61a, 0x7, 0x1ff, 0x200, 0x8, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x2}, {0x0, 0x3}, {0x2, 0x4}, {0x3}, {0x0, 0x3}, {0x1, 0x3}, {0x7, 0x8}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1e2, 0x9, 0xfff, 0xfff, 0x1, 0x401, 0x5, 0x7]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x6c, 0x9, 0x1, 0x5, 0x4, 0x6c, 0xb, 0x1b, 0x5, 0x48, 0xc, 0x3, 0x6c, 0xc, 0x3, 0x7, 0x1, 0x2, 0x9, 0x6, 0xc, 0x16]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xf, 0x60, 0x5, 0x4, 0x0, 0xf, 0x6, 0x18, 0x9, 0x6, 0x16, 0xd, 0x3, 0x1, 0xb, 0xb, 0x5, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd6, 0x6, 0x7fff, 0x401, 0x6, 0x7, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfac, 0x1, 0xff, 0x4, 0x8, 0x3f, 0x56f, 0x5]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x4}, {0x3, 0x8}, {0x5, 0x3}, {0x1, 0xe}, {0x0, 0x5}, {0x7, 0x6}, {0x2, 0x3}, {0x5, 0x5}, {0x2, 0xa}, {0x0, 0x8}, {0x4, 0xa}, {0x2, 0x9}, {0x6, 0x2}, {0x0, 0x1}, {0x5, 0x5}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0x5}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x2}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x2, 0x2, 0x16, 0x1, 0x6c, 0xb, 0xc, 0x6c, 0x3, 0x48, 0x6c, 0x1b, 0x60, 0x12, 0x16, 0x9, 0x9, 0x3, 0x60]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x9}, {0x7, 0x2}, {0x5}, {0x2, 0x8}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x4}, {0x6, 0x7}, {0x2, 0x4}, {0x6}, {0x4, 0x5}, {0x6, 0x9}, {0x0, 0x3}, {0x4, 0x9}, {0x5, 0x4}, {0x4, 0x7}, {0x6, 0x8}, {0x2, 0x7}, {0x3, 0x6}, {0x5, 0x3}, {0x1, 0x1}, {0x5, 0x6}, {0x7, 0xa}, {0x3, 0x4}, {0x7, 0x8}, {0x1, 0x5}, {0x5, 0x9}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x3}, {0x2, 0x1}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x1}, {0x4, 0x2}, {0x5, 0x3}, {0x3, 0x9}, {0x6, 0x1}, {0x4, 0x8}, {0x3, 0x9}, {0x5, 0xa}, {0x5, 0x4}, {0x2, 0xa}, {0x1, 0x9}, {0x7, 0xa}, {0x5, 0x2}, {0x0, 0x4}, {0x3, 0x8}, {0x5, 0x8}, {0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x2, 0x9}, {0x4, 0x3}, {0x0, 0x6}, {0x4, 0x3}, {0x6, 0x9}, {0x7, 0x1}, {0x4, 0x5}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0x1}, {0x6, 0xa}, {0x5}]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x2, 0x1}, {0x4, 0x7}, {0x1, 0x2}, {0x1, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1000, 0x39b, 0x7e2, 0x6, 0xe0, 0x200]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}]}, @NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6000000000000000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffa4b2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x414}, 0x1, 0x0, 0x0, 0xc018}, 0x20000880)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x52}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x11}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c4}, 0x80)
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
pipe2(&(0x7f0000000880)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80800)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x90, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5b}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3aa}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x6147a2b9, 0x0, 0x3, 0x5, 0x1]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3c}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x15f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x21}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x88000}, 0x4c004)
sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c819)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0), 0x201600, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}]}, 0x1c}}, 0x1)
r9 = openat$incfs(r4, &(0x7f0000000e00)='.pending_reads\x00', 0x210002, 0x44)
sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, r5, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1c85}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000044}, 0x8841)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000001000)={0x154, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x3a}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x1c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xe}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xe}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xf}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}]}, @beacon=[@NL80211_ATTR_IE={0xd9, 0x2a, [@ht={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x36c, 0x1f01, 0x0, 0x1f, 0x0, 0x1, 0x1, 0x3}, 0x808, 0x0, 0x5}}, @mic={0x8c, 0x18, {0x288, "0f910c80364d", @long="d9796fdab2868affd5acacf1a5f103f5"}}, @challenge={0x10, 0x1, 0xbf}, @ssid={0x0, 0x1c, @random="189fc0f852f7c9eb1c2a8d732e183e6d758dc769087021b6c0c47f65"}, @measure_req={0x26, 0x7c, {0x1, 0x3, 0x2, "1186a00b0f53c588a67fef63723959c4ee209b73c895a2c39e15da034566a0849700e7dab4194a8ea6efc7d730aa787985d601ab9575c5c99c51a38ea84082f0c799a06f41b4e50ac465116cc65b3cb08eb49f7cf2abc6735927b86f4b0d298abdcaec0607fbecc69bf794c478cef31c3d03c269f7f0a16fd0"}}]}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xff}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x154}, 0x1, 0x0, 0x0, 0x20008004}, 0x4048003)

11:36:46 executing program 6:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "6792b2fd3730f612db410af6a16acfb6"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cb7b4da134d32dc1f0b74f48ad"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x48045}, 0x4004881)
write$9p(0xffffffffffffffff, &(0x7f0000000200)="0ddc4aa9263cc1e1ada78cb66592c5ea0bdeb2924491b5aa9cde0d2d00b7d151d32a5d7f8eea79d686a3e371ccc8515db7be641b2e1cbb1e00fa0b2fd050b6f993911591913b024adca35b5cb48daa828e8c84f1d1d8422c568e62e2f85d90df70299fa7bb2ace0c9d06b6", 0x6b)
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x79, 0x1}, 0x7)
sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8811}, 0x4040004)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000440)={'\x00', 0x3f, 0x1, 0x80000001, 0x100000000, 0x1, 0xffffffffffffffff})
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000004c0)={0x21, 0x8, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @enc_lim={0x4, 0x1, 0xfa}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x7f}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001840)={{0x1, 0x1, 0x18, <r3=>r2, {0x2}}, './file0\x00'})
sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x2000081)
r4 = pidfd_getfd(r3, r2, 0x0)
waitid$P_PIDFD(0x3, r4, &(0x7f0000001980), 0x80000000, 0x0)
r5 = open(&(0x7f0000001a00)='./file0\x00', 0x200, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc5d0}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c000}, 0x44001)
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001b40), 0x48000, 0x0)
fcntl$getownex(r6, 0x10, &(0x7f0000001b80))
ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000001bc0))
writev(r5, &(0x7f0000002000)=[{&(0x7f0000001c00)="876efd46968ba5e3660fe9fc043a09941072a7846c811e4359f1e86dd0ae2ec9e26644985b3ad90d43b4db654222ded9f353524ee9345b22541c12c26336", 0x3e}, {&(0x7f0000001c40)="198ea4d6946a4c0115655355cf44996417271829576989f22cb587332261eaeb35323b1b4defd8ed3ffe804e098de9e6033c9595eb38aea7d084c597851442c114ab676b953397df30d6c4e2b163e8096fc27101bdc166f00cacd7e3a6eb4b90275f91483831ef1aa25bf02f3752d75dabcb5592be49b7684a4eaf2ab73b4c525069b5a87915f23651eeddf72bff7512c3805fb7b48d490ad6f33d496d120ed432e28efe14d6cf5586f1cd2d224f4c7f96fc1614c33ac445e827f30be5756408ba8ea579d111a51f053bf6d2e0ccdf671733ef85120ab4689129951244d5fa", 0xdf}, {&(0x7f0000001d40)="61a4bd7ea37ccf59fc675debcaef62af2ea209a32cb72a7e4fc60a8d88eafb49bc5d41948595cbeb7b84b71cd58db5178a6c7c97b7bc67dd261bfd78d4", 0x3d}, {&(0x7f0000001d80)="904d0566c1ff451dd0eda2b50b69aace148e522054b14de3a90eaa01d7ded461d64b4099a7f74a89d61887b8ba6a26e1999525ece3dd974d7e19467819d347ac92f7e307b076b173aac4a3ba32040bbfd65479bbdf1f4fa064d58e00afbb0e11ab20a01d507263fe5a1b2bbe659f180a167a7f6ca56e4604acb9b6e7e9b7468fa6527f1ebeee45ca951db9d60d2e991a45150a39b3b5c245db9514e043ad36c920a18a15fdd4ccbf70d7af", 0xab}, {&(0x7f0000001e40)="1b25cd0ec07f7e4e617f46779d97f4924bc5f9dbd0be5814a3b5d6d33d150126f0c5e4bf206b31b45fc8509ce6dbf93f590f4da70f9905dcf1f0b9edc779b35eca10dd2d22717d6dc937304ecdf6a4438bfcae16115ffdc6a563e26024928947bbdc17126c48bfb3e8b2ed7e1c6c9872ad42294e675f64088cb326cbec84f42a30224a0aa662eec3090cec0cdb4f97d3f8cbb82e0072edf943eba24d5ddfdd31fa5fd6ea606dfadd2b38a6cc258ea5673647db", 0xb3}, {&(0x7f0000001f00)="a91e1ecfef6d6377e7b2f8a3a796594fc420f62995df2f6d7f794a8076acad164cd5450ae65d1d9ff0597ab7906314e50fca9a1cad3b080566358e2b637e47f9535610b27413e7eb3eee788c5bdeea427d", 0x51}, {&(0x7f0000001f80)="ea2813fc612b1cd1ce4624b3b6cf3d3f77727613a9b712ab7dae681ac92e08e0ff43e54cea34097ec3f996f0c0b7a52df573ec325b903b6f2410e2d4dfed03e5fc9e632b816eed6f89af3ec89183a9c00a101aad5dbc777a81c120c5c88eef3b7526361ed3cf841d81d5910fc48f0de41a4a69e65cfa21dce532f193", 0x7c}], 0x7)
ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f00000020c0))

11:36:46 executing program 7:
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x49, 0x2, {0x10, 0x1, 0x4}}, 0x14)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$P9_RMKNOD(r0, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x2, 0x4, 0x6}}, 0x14)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pwrite64(r1, &(0x7f00000000c0)="7e509a168b6a7a6e592416d518c433138fbef3191f6143951c02691bc8903e776f5e3f83369c535c0a2021de4f5c560ef6d1b0bd99c7e0ad61a789372de30050bbcba2ed8067d6aab4f89797615005659c6260beeeed4e4a44da1fa13a18097e7dbf7ba0e68ed6c2e5a482cf7c3179d267a56b0d53974ea76cf3dde9b595e26faf7376dd70f283999bb7bc5ec755c36da648585af7968f787f3476803a01e6b934e1fb384d70c76bc69f7a09c5dda04ea183974d94bd56993e", 0xb9, 0x100000001)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000180))
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000200)={{0x1, 0x20}, 'port0\x00', 0x4, 0x0, 0xe1a8, 0x1, 0x7ff, 0x6, 0x2, 0x0, 0x4, 0xff})
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x3, 0x4, 0x2, 0x5, 0x11, "eccf0b93daa0ad55"})
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000300))
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000380)={@desc={0x1, 0x0, @desc2}, 0x40, 0x0, '\x00', @b})
recvmsg$unix(r3, &(0x7f00000007c0)={&(0x7f0000000440), 0x6e, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/58, 0x3a}, {&(0x7f0000000500)=""/207, 0xcf}], 0x2, &(0x7f0000000640)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}, 0x100)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8001)
getsockopt(r2, 0x8, 0x8, &(0x7f0000000900)=""/99, &(0x7f0000000980)=0x63)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r6 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r6)
r7 = syz_io_uring_complete(0x0)
ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000ac0)={0x3ff, 0x9, 0x5, 0x6, 0x0, "cef9218ff2f5a365afb608f97f712ae28ce78e", 0xda0e, 0x400})

[  119.510391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.514434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.519959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.527329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.534350] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.635646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.651130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.662878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.671490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.676509] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.735563] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.741680] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.746710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.755823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.765341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.840877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  119.853714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  119.874518] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.903982] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  119.907073] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  119.915813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  119.924646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  119.929700] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  119.932237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.937884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.958751] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.971318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  119.991275] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  120.000558] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  120.002279] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  120.006978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.012644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  120.039872] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  120.043623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  120.045549] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.050987] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  120.078761] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  120.089756] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  120.090966] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  120.097725] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  121.592671] Bluetooth: hci0: command tx timeout
[  121.721070] Bluetooth: hci1: command tx timeout
[  121.847106] Bluetooth: hci2: command tx timeout
[  122.103140] Bluetooth: hci4: command tx timeout
[  122.104076] Bluetooth: hci5: command tx timeout
[  122.104113] Bluetooth: hci3: command tx timeout
[  122.168230] Bluetooth: hci7: command tx timeout
[  122.168980] Bluetooth: hci6: command tx timeout
[  123.641278] Bluetooth: hci0: command tx timeout
[  123.770048] Bluetooth: hci1: command tx timeout
[  123.895126] Bluetooth: hci2: command tx timeout
[  124.151144] Bluetooth: hci3: command tx timeout
[  124.154352] Bluetooth: hci4: command tx timeout
[  124.154377] Bluetooth: hci5: command tx timeout
[  124.215181] Bluetooth: hci6: command tx timeout
[  124.218103] Bluetooth: hci7: command tx timeout
[  125.687349] Bluetooth: hci0: command tx timeout
[  125.815172] Bluetooth: hci1: command tx timeout
[  125.943222] Bluetooth: hci2: command tx timeout
[  126.199165] Bluetooth: hci5: command tx timeout
[  126.199195] Bluetooth: hci4: command tx timeout
[  126.199714] Bluetooth: hci3: command tx timeout
[  126.263101] Bluetooth: hci7: command tx timeout
[  126.263701] Bluetooth: hci6: command tx timeout
[  127.735073] Bluetooth: hci0: command tx timeout
[  127.863123] Bluetooth: hci1: command tx timeout
[  127.992102] Bluetooth: hci2: command tx timeout
[  128.247175] Bluetooth: hci5: command tx timeout
[  128.247640] Bluetooth: hci4: command tx timeout
[  128.248172] Bluetooth: hci3: command tx timeout
[  128.312305] Bluetooth: hci6: command tx timeout
[  128.312805] Bluetooth: hci7: command tx timeout
[  181.575566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.577258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.578798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.581552] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.583339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.642220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  181.644934] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  181.647472] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  181.658391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  181.662236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  181.723045] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  181.729569] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  181.731304] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  181.733919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  181.736288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  181.763410] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  181.778381] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  181.806573] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  181.812134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  181.814463] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  181.907925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.911874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.915438] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.925607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.931323] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  181.981521] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  181.988331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  181.991344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.004525] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  182.006766] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  182.012090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.015273] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  182.040849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  182.074454] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  182.106599] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  182.112449] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  182.122622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  182.151146] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  182.192320] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  182.195376] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  183.608066] Bluetooth: hci0: command tx timeout
[  183.736261] Bluetooth: hci1: command tx timeout
[  183.799184] Bluetooth: hci2: command tx timeout
[  183.927136] Bluetooth: hci3: command tx timeout
[  183.992120] Bluetooth: hci4: command tx timeout
[  184.119131] Bluetooth: hci5: command tx timeout
[  184.185067] Bluetooth: hci6: command tx timeout
[  184.311101] Bluetooth: hci7: command tx timeout
[  185.655100] Bluetooth: hci0: command tx timeout
[  185.783432] Bluetooth: hci1: command tx timeout
[  185.847434] Bluetooth: hci2: command tx timeout
[  185.975103] Bluetooth: hci3: command tx timeout
[  186.039078] Bluetooth: hci4: command tx timeout
[  186.167428] Bluetooth: hci5: command tx timeout
[  186.232050] Bluetooth: hci6: command tx timeout
[  186.359109] Bluetooth: hci7: command tx timeout
[  187.704771] Bluetooth: hci0: command tx timeout
[  187.831100] Bluetooth: hci1: command tx timeout
[  187.895462] Bluetooth: hci2: command tx timeout
[  188.023110] Bluetooth: hci3: command tx timeout
[  188.088220] Bluetooth: hci4: command tx timeout
[  188.215105] Bluetooth: hci5: command tx timeout
[  188.279373] Bluetooth: hci6: command tx timeout
[  188.407096] Bluetooth: hci7: command tx timeout
[  189.751174] Bluetooth: hci0: command tx timeout
[  189.879083] Bluetooth: hci1: command tx timeout
[  189.943388] Bluetooth: hci2: command tx timeout
[  190.071389] Bluetooth: hci3: command tx timeout
[  190.136075] Bluetooth: hci4: command tx timeout
[  190.263275] Bluetooth: hci5: command tx timeout
[  190.327292] Bluetooth: hci6: command tx timeout
[  190.455088] Bluetooth: hci7: command tx timeout
[  244.428395] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.438229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  244.440963] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.444368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.445979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  244.449751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  244.460344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.462966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  244.471556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.473646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  244.573356] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  244.588775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  244.602235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  244.614458] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  244.622508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.634486] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.635843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.653332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.656296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.659420] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.661759] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.667861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.671648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.698397] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.716400] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  244.739211] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  244.747771] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  244.756911] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  244.759764] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  244.764192] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  244.786860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  244.815921] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  244.820311] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  244.865443] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  244.868417] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  244.869301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  244.872369] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  244.941178] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  244.982488] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  244.993470] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  246.520322] Bluetooth: hci1: command tx timeout
[  246.522212] Bluetooth: hci0: command tx timeout
[  246.711111] Bluetooth: hci2: command tx timeout
[  246.775173] Bluetooth: hci3: command tx timeout
[  246.775924] Bluetooth: hci4: command tx timeout
[  246.903117] Bluetooth: hci5: command tx timeout
[  246.967110] Bluetooth: hci6: command tx timeout
[  247.095365] Bluetooth: hci7: command tx timeout
[  248.567173] Bluetooth: hci1: command tx timeout
[  248.567678] Bluetooth: hci0: command tx timeout
[  248.759223] Bluetooth: hci2: command tx timeout
[  248.824266] Bluetooth: hci3: command tx timeout
[  248.824710] Bluetooth: hci4: command tx timeout
[  248.952297] Bluetooth: hci5: command tx timeout
[  249.015106] Bluetooth: hci6: command tx timeout
[  249.144589] Bluetooth: hci7: command tx timeout
[  250.616366] Bluetooth: hci0: command tx timeout
[  250.616863] Bluetooth: hci1: command tx timeout
[  250.810132] Bluetooth: hci2: command tx timeout
[  250.872323] Bluetooth: hci4: command tx timeout
[  250.872760] Bluetooth: hci3: command tx timeout
[  250.999094] Bluetooth: hci5: command tx timeout
[  251.063070] Bluetooth: hci6: command tx timeout
[  251.191067] Bluetooth: hci7: command tx timeout
[  252.664478] Bluetooth: hci0: command tx timeout
[  252.664952] Bluetooth: hci1: command tx timeout
[  252.856382] Bluetooth: hci2: command tx timeout
[  252.920674] Bluetooth: hci3: command tx timeout
[  252.921137] Bluetooth: hci4: command tx timeout
[  253.048067] Bluetooth: hci5: command tx timeout
[  253.112107] Bluetooth: hci6: command tx timeout
[  253.240103] Bluetooth: hci7: command tx timeout
[  306.763583] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  306.771375] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  306.780166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  306.791137] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  306.804728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  306.972219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  306.978230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  306.982279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  306.985142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  306.992576] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  306.993851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  306.996972] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  307.002613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  307.029162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  307.037305] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  307.084315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  307.093490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  307.113644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  307.133644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  307.183818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  307.214106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.223827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  307.238235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  307.258521] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.292927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.593080] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.621991] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.624709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  307.661185] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  307.665306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.672950] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  307.675534] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  307.685444] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.709370] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  307.709925] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  307.712817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  307.720212] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  307.724739] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  307.726806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  307.810485] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  308.855075] Bluetooth: hci0: command tx timeout
[  309.112080] Bluetooth: hci2: command tx timeout
[  309.175207] Bluetooth: hci1: command tx timeout
[  309.240132] Bluetooth: hci4: command tx timeout
[  309.367147] Bluetooth: hci3: command tx timeout
[  309.753785] Bluetooth: hci7: command tx timeout
[  309.815164] Bluetooth: hci5: command tx timeout
[  309.879118] Bluetooth: hci6: command tx timeout
[  310.904608] Bluetooth: hci0: command tx timeout
[  311.159199] Bluetooth: hci2: command tx timeout
[  311.223538] Bluetooth: hci1: command tx timeout
[  311.287269] Bluetooth: hci4: command tx timeout
[  311.416386] Bluetooth: hci3: command tx timeout
[  311.799470] Bluetooth: hci7: command tx timeout
[  311.863169] Bluetooth: hci5: command tx timeout
[  311.928301] Bluetooth: hci6: command tx timeout
[  312.951181] Bluetooth: hci0: command tx timeout
[  313.207225] Bluetooth: hci2: command tx timeout
[  313.271217] Bluetooth: hci1: command tx timeout
[  313.336444] Bluetooth: hci4: command tx timeout
[  313.463151] Bluetooth: hci3: command tx timeout
[  313.847142] Bluetooth: hci7: command tx timeout
[  313.912071] Bluetooth: hci5: command tx timeout
[  313.975664] Bluetooth: hci6: command tx timeout
[  315.000061] Bluetooth: hci0: command tx timeout
[  315.255147] Bluetooth: hci2: command tx timeout
[  315.319158] Bluetooth: hci1: command tx timeout
[  315.383155] Bluetooth: hci4: command tx timeout
[  315.512165] Bluetooth: hci3: command tx timeout
[  315.895096] Bluetooth: hci7: command tx timeout
[  315.959122] Bluetooth: hci5: command tx timeout
[  316.024201] Bluetooth: hci6: command tx timeout
[  369.292784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  369.302415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  369.307756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  369.319878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  369.327706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.360693] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.366246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.369819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.377821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.382477] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.553529] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.584187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.590844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.608534] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  369.608557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.616185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.628506] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.659442] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  369.666819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  369.673450] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  369.677953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  369.680764] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  369.686039] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  369.689244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  369.702834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  369.706127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  369.714515] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  369.727385] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  369.732580] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  369.769773] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  369.779598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  369.792321] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  369.821795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  369.861936] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  369.885473] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  370.118750] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  370.134251] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  370.153498] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  370.196639] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  370.235710] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  371.385710] Bluetooth: hci0: command tx timeout
[  371.447191] Bluetooth: hci1: command tx timeout
[  371.769122] Bluetooth: hci4: command tx timeout
[  371.896819] Bluetooth: hci5: command tx timeout
[  371.896842] Bluetooth: hci2: command tx timeout
[  371.960632] Bluetooth: hci6: command tx timeout
[  371.960649] Bluetooth: hci3: command tx timeout
[  372.535146] Bluetooth: hci7: command tx timeout
[  373.431261] Bluetooth: hci0: command tx timeout
[  373.496070] Bluetooth: hci1: command tx timeout
[  373.815484] Bluetooth: hci4: command tx timeout
[  373.943594] Bluetooth: hci5: command tx timeout
[  373.944211] Bluetooth: hci2: command tx timeout
[  374.007509] Bluetooth: hci6: command tx timeout
[  374.008217] Bluetooth: hci3: command tx timeout
[  374.584050] Bluetooth: hci7: command tx timeout
[  375.482080] Bluetooth: hci0: command tx timeout
[  375.543258] Bluetooth: hci1: command tx timeout
[  375.863080] Bluetooth: hci4: command tx timeout
[  375.991307] Bluetooth: hci5: command tx timeout
[  375.992091] Bluetooth: hci2: command tx timeout
[  376.056097] Bluetooth: hci3: command tx timeout
[  376.056612] Bluetooth: hci6: command tx timeout
[  376.632320] Bluetooth: hci7: command tx timeout
[  377.528413] Bluetooth: hci0: command tx timeout
[  377.591094] Bluetooth: hci1: command tx timeout
[  377.912140] Bluetooth: hci4: command tx timeout
[  378.040108] Bluetooth: hci2: command tx timeout
[  378.040174] Bluetooth: hci5: command tx timeout
[  378.103168] Bluetooth: hci3: command tx timeout
[  378.104336] Bluetooth: hci6: command tx timeout
[  378.680119] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
11:41:56  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff8880324cc800 RCX=ffffffff819ab7c9 RDX=ffff8880364fed58
RSI=ffffffff819ab7d7 RDI=ffff8880364fed58 RBP=0000000040000001 RSP=ffff8880163d78b8
R8 =0000000000000000 R9 =ffffed1006499900 R10=0000000040000001 R11=0000000000000000
R12=ffff8880324cc780 R13=0000000040000001 R14=0000000000000001 R15=ffff88802db00000
RIP=ffffffff81594882 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f122a7b2540 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f122a883710 CR3=000000003383e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00
XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff88802b7c8001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802b7c7c01
RSI=ffff88802b7c7ce8 RDI=ffff88802b7c7588 RBP=ffff88802b7c75d0 RSP=ffff88802b7c7508
R8 =ffffffff8684ce98 R9 =ffff88802b7c75b8 R10=000000000003b0c2 R11=00000000000218d8
R12=ffff88802b7c75d8 R13=ffff88802b7c75c0 R14=ffff88802b7c7cf0 R15=ffff88802b7c7578
RIP=ffffffff813513b8 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe0100000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4e859ac8e0 CR3=0000000037f08000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000