Warning: Permanently added '[localhost]:41001' (ECDSA) to the list of known hosts.
2025/05/01 05:38:17 fuzzer started
2025/05/01 05:38:17 dialing manager at localhost:43767
syzkaller login: [  102.887951] cgroup: Unknown subsys name 'net'
[  103.039024] cgroup: Unknown subsys name 'cpuset'
[  103.139610] cgroup: Unknown subsys name 'rlimit'
2025/05/01 05:38:33 syscalls: 2214
2025/05/01 05:38:33 code coverage: enabled
2025/05/01 05:38:33 comparison tracing: enabled
2025/05/01 05:38:33 extra coverage: enabled
2025/05/01 05:38:33 setuid sandbox: enabled
2025/05/01 05:38:33 namespace sandbox: enabled
2025/05/01 05:38:33 Android sandbox: enabled
2025/05/01 05:38:33 fault injection: enabled
2025/05/01 05:38:33 leak checking: enabled
2025/05/01 05:38:33 net packet injection: enabled
2025/05/01 05:38:33 net device setup: enabled
2025/05/01 05:38:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/01 05:38:33 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/01 05:38:33 USB emulation: enabled
2025/05/01 05:38:33 hci packet injection: enabled
2025/05/01 05:38:33 wifi device emulation: enabled
2025/05/01 05:38:33 802.15.4 emulation: enabled
2025/05/01 05:38:33 fetching corpus: 0, signal 0/0 (executing program)
2025/05/01 05:38:36 starting 8 fuzzer processes
05:38:36 executing program 0:
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000))
fcntl$notify(0xffffffffffffffff, 0x402, 0x18)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000040)={0x0, "a320bd06854113eee3dd7c32bf8b0484"})
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040), 0x8000, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000001080))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000010c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x6}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000001100)={{0x1, 0x1, 0x18, <r3=>r2, {0x4}}, './file0\x00'})
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000001140))
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000001180))
r4 = openat$cgroup_procs(r3, &(0x7f0000001240)='cgroup.procs\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001280)={{r4}, 0x0, 0xa, @unused=[0x4, 0xffff, 0x8754, 0xed], @subvolid=0x3ff})
fcntl$setownex(r3, 0xf, &(0x7f0000002280)={0x1})
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000022c0), 0x10440, 0x0)
fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000002300), &(0x7f0000002340)='./file0\x00', 0x8, 0x3)
ioctl$CDROM_MEDIA_CHANGED(0xffffffffffffffff, 0x5325, 0x3)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x20000001)

05:38:36 executing program 1:
keyctl$clear(0x7, 0xfffffffffffffffa)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8)
getsockname(0xffffffffffffffff, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x216003, 0x0)
ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000180)={0x5})
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x110, 0x218, 0x328, 0x328, 0x328, 0x4, &(0x7f00000004c0), {[{{@arp={@remote, @remote, 0xff000000, 0xffffffff, 0x5, 0xc, {@empty, {[0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x3, 0x8, 0x46, 0x69, 0xfff, 'wlan1\x00', 'vlan1\x00', {0xff}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="3aaae400e9f8", @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @multicast2, @multicast2, 0x1, 0x1}}}, {{@arp={@local, @dev={0xac, 0x14, 0x14, 0x3c}, 0xffffff00, 0xff, 0x9, 0x3, {@mac=@remote, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfffd, 0x93d1, 0x6, 0x9, 0x8, 0x3, 'batadv_slave_1\x00', 'ip_vti0\x00', {0xff}}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast1, @local, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/asound/seq/timer\x00', 0x0, 0x0)
write$tcp_mem(r1, &(0x7f00000009c0)={0x5, 0x20, 0x4, 0x20, 0x3}, 0x48)
getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000a40)={@multicast2, @dev, @broadcast}, &(0x7f0000000a80)=0xc)
r2 = add_key$keyring(&(0x7f0000000b80), &(0x7f0000000bc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
request_key(&(0x7f0000000ac0)='logon\x00', &(0x7f0000000b00)={'syz', 0x0}, &(0x7f0000000b40)='\xbb\xbb\xbb\xbb\xbb\xbb', r2)
fcntl$getflags(r0, 0x3)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x8c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xffffffff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40081}, 0x4000010)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000d80)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x5, [@remote, @broadcast, @multicast2, @multicast2, @broadcast]}, 0x24)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000dc0)='\x00', 0x0, 0xffffffffffffffff)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000e00), 0x12800, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r4, &(0x7f0000000e40)={0x20000000})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000001180)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000ec0)={0x260, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000001}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0xb8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd9d}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVKEY={0xfc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3ff}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2327}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x20f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2d}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x81}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x24040844}, 0x4000000)

05:38:36 executing program 2:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x64}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x44, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="53e6ad3d6e82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x10000}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xf2bc}]}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x40}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1ff}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x3c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="17fd5b5d900b2cf8a8557242aa"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="99c8f0633832363652a9ce9d86b4072267ff65f828f7a8e03f23b295e5"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x48084)
r2 = gettid()
tkill(r2, 0x15)
r3 = accept$unix(r0, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e)
recvfrom(r3, &(0x7f0000000400)=""/195, 0xc3, 0x40000000, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20014}, 0x10044080)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @loopback}, &(0x7f0000000640)=0xc)
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1fc, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe4}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe76}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc04a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa9a2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x19}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xda7}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x10}, 0x8000045)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x23}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1047}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000)
pipe2(&(0x7f0000000b40)={<r4=>0xffffffffffffffff}, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000b80)={{0xfc}, 0x100, './file0\x00'})
mount$cgroup2(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x10000, &(0x7f0000000d40)={[], [{@smackfshat={'smackfshat', 0x3d, 'PPPPPP'}}]})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000dc0)={0x1, &(0x7f0000000d80)=[{0xb3, 0x9, 0xa9, 0x7}]})
wait4(r2, &(0x7f0000000e00), 0x4, &(0x7f0000000e40))
r5 = syz_open_dev$sg(&(0x7f0000000f00), 0xfffffffffffffffe, 0x8500)
kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, r4, &(0x7f0000000f80)={r4, r5, 0xaff})

[  120.840806] audit: type=1400 audit(1746077916.162:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:38:36 executing program 3:
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040041}, 0x1)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', <r1=>0x0})
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008044}, 0x4040040)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048004}, 0x40020)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x3e9, 0x4, 0x70bd27, 0x25dfdbff, {0x34, 0x0, 0x2, 0x0, 0x2, 0x8000, 0x2, 0x3ff, 0x0, 0x8001}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40814}, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20040060)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan4\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x2000c891)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x98, r5, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x9}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x2, 0x6, 0x0, {0x2, 0x2, 0x0, 0x3cd, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x72}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x20, 0x2, 0x0, 0x0, {0xfffffffffffffffa, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x400, 0x8001}}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000b40)=0x400)
r7 = signalfd(0xffffffffffffffff, &(0x7f0000000b80)={[0x7]}, 0x8)
ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000bc0))
sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb5, 0x32}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

05:38:36 executing program 4:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7f}]}, 0x50}, 0x1, 0x0, 0x0, 0x48001}, 0x4010)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xb769c094c29d388e}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000019)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4048005)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x14000044}, 0x4)
r7 = add_key$user(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="708f7027a329c99aa92043fb1da253cf6ac5bbd42ab4234f0c41eda342c522137912d0830d865f24c32bd16fc0c2255f6f2439320f6efe4026449e534fa626f718f069bcdebb702251d7c2a5f8817864f85fae", 0x53, 0xffffffffffffffff)
keyctl$get_security(0x11, r7, &(0x7f0000000740)=""/4096, 0x1000)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xeb}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x63}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f66ba1ac05dd"}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x3c, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x10200}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x8e}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xfb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002000)={{0x1, 0x1, 0x18, <r9=>0xffffffffffffffff, {0x5}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x80c5)
sched_setaffinity(0x0, 0x8, &(0x7f0000002140)=0x1)

05:38:36 executing program 5:
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r0=>0x0, 0x4, 0x6, 0xcf, 0x1000, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x0, 0x0, 0xffffff81}})
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x400000)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x25c, 0x12, 0x20, 0x70bd28, 0x25dfdbfb, {0x29, 0x0, 0x8, 0x4c, {0x4e21, 0x4e22, [0x1ff, 0x274e, 0x6, 0xfffffbff], [0xffff1d5f, 0x1, 0x7, 0x5], r0, [0x7, 0x81]}, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "8cc6f1b984015b94f84645b29427981d7e7816aacb36ae2249eed6f7b83eca1ba29a164e52d9ff0311378b20b25b7f6d2719312b89a3a4348db2617d21a62fe090ba4dfd846ec35d05992d4b2c26b2a6aaef6388cad2b2457f00fb777d0f0ec13a62abc40e2e47b2a7f42b406ac4218e8d067d7ac49c95d7849a627abe81e9e409833831b532dabf3020d18f3018eb05fb62c78aa3b4149c07b4f22c2bac5ce425dd33c02adc85f593cc4e79b8aaf498c2058f7d21205643728dc27f51836f48dc449a01d136d29257fd642acb0b840fb430d6c98bed0b55e644575db7bf9b465f1fa170e2419a"}, @INET_DIAG_REQ_BYTECODE={0x95, 0x1, "1b6bf25be09cd511497a5f63e1e9967802f3c9db98fc0b5d0747bb9967a98e0c15e9df7881b42346f2da5bd8555676a041c1cc2b6bf5716cee9f4ebdc49efc20f4dde80018e7ae18e3bec328f4053fab4548e86d9cce87a1a588947065d63f9981c02bd115589a002090ffd0ffff5392f84be51e8381d1b3548a5193134b232ea14de684a70e59fd5d23beadbb8279b732"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "c67e8ff6b6679902420d83cc8f3e1645"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "9ccb15b2adb6cb175d86e53d7272b2205db0f252139cac66f2a746b221b5c2bf56de41ab0efd4b6e67e5cdbd975dc25f5e35c889a03bddf1fd4f18dfcf89b3c9a31d38f58a64c1996f1889d34c734672728a7280cfad9b85f7c893bd48171b32d0d0963abb4571421d7e91cdd7905a1e3a"}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={<r2=>0xffffffffffffffff, 0x1, 0x7ff, 0x5})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000055}, 0x404c000)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r4 = fcntl$dupfd(r3, 0x0, r1)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000006c0), 0x4)
r5 = accept4(r3, &(0x7f0000000700)=@l2={0x1f, 0x0, @none}, &(0x7f0000000780)=0x80, 0x800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'veth1_vlan\x00', <r6=>0x0})
sendmsg$GTP_CMD_GETPDP(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000900)={@empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9, 0xf800, 0x40, 0x400, 0x9, 0x80080010, r0})
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008884)
openat$sr(0xffffffffffffff9c, &(0x7f0000000a80), 0x200000, 0x0)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10)
write$binfmt_aout(r3, &(0x7f0000000bc0)={{0x10b, 0x3f, 0x80, 0x25e, 0x16, 0x9, 0x70, 0xffffff02}, "2b46d5e76852aeb4c60aa18927060a404c0eb86894d0871d6a137e5e1545cc85e1b8ae7529ea263623f470a5b68e80f9bb129871ce9dfb77af1e79d70709ac0a7408b4f4b7297f0fc332be39fd6733eb6ee425bf2f414b61613cee93a0a824d4a98d1a5d2e0363684dcf8e184e04d9256f10107e0993112e0f4335df3b7ff53e4d67a2d23282cf0c61a99205976969867e4c1a389079629afbec506e258ce8d6de68f190523df7829a0a18836abd5f28b1ce654982972f16faed119714eed7daac1009d59172cd62b47c499d127e3ffe3230a00c3f36d634128b2ebc3e9fdcef24e09b284fed81444bb6acfbbd491f74", ['\x00', '\x00']}, 0x310)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f00), 0x8000, 0x0)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r7, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)

05:38:36 executing program 6:
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x12c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x478b}, @DEVLINK_ATTR_RATE_NODE_NAME={0x8d, 0xa8, @random="262585663ab63e789e860919c00f033fe7bce047c2b83428a720f7ed5029edbb830f9f9c0ab63291bbeee4a9198ab2d12c9b5b6fc17400473bbbf3720b5e3ca9eddfd8c39f7b1fde20def3b1b3b340af49c9bec281a7e31a12ee14f9511c415d6cc0a5e71c430831aa403ddd66a4c0abcb03cabf52d7ed9bbff5d167af8aa8fe13fa01691db9748b93"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x5e, 0xa9, @random="1d6fa34d1a75c3f318298a22aea334637c3144eebfc219e47e2318ad0e5c4a0e5d5ee4a735f22fdaae3ecf2e6c2c9f85c64f7f8e619dec8a8480841ba9366ead704920e68342c2872b7fb0665625e9a7db264221be619500db05"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240))
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008050}, 0x20000000)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000380)='.pending_reads\x00', 0x10000, 0xa)
connect(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @loopback}, 0x2, 0x2, 0x2, 0x3}}, 0x80)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/109, 0x6d}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [<r1=>0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}, 0x10002)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000006c0)={0x4, &(0x7f0000000680)=[{0x2, 0x1, 0x40, 0x5e7}, {0x9, 0x5, 0x8, 0x6}, {0x294, 0x0, 0x4, 0x1}, {0x9, 0x80, 0x20, 0xfffffff8}]})
r4 = syz_open_dev$mouse(&(0x7f0000000700), 0x2, 0x531000)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000740)=0xe8b, 0x4)
r5 = creat(&(0x7f0000000780)='./file0\x00', 0x147)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000007c0)={@dev, @remote, <r6=>0x0}, &(0x7f0000000800)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000008c0)={'gretap0\x00', &(0x7f0000000840)={'gretap0\x00', r6, 0x8, 0x7800, 0x10000, 0x6, {{0x15, 0x4, 0x1, 0x3, 0x54, 0x66, 0x0, 0x7f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x3b, 0x1, [{0x7, 0x6, "1071761d"}, {0x6, 0x10, "9ac89dfeddcb8212d4058ad79098"}, {0x2, 0x5, "1d969a"}, {0x7, 0xf, "3f15ea782701432fd8afe6cbd7"}, {0x7, 0xb, "42f93574a53db3cb5a"}]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}})
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000900)='net/icmp6\x00')
ioctl$SG_SET_COMMAND_Q(r7, 0x2271, &(0x7f0000000940))
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000980), 0x208000, 0x0)
r8 = signalfd4(r1, &(0x7f00000009c0)={[0x2]}, 0x8, 0x0)
ioctl$TCSBRK(r8, 0x5409, 0x6)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000a00), 0x10)

05:38:36 executing program 7:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x6, 0x4)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private0, <r0=>0x0}, &(0x7f0000000080)=0x14)
bind(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x17, r0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x80)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/192, 0xc0}, {&(0x7f0000001340)=""/2, 0x2}, {&(0x7f0000001380)=""/128, 0x80}], 0x4, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff]}}], 0x60}, 0x8140)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'wlan1\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000001740)={0x11, 0x7, r7, 0x1, 0x3, 0x6, @multicast}, 0x14)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f0000001780)=0x7)
r9 = syz_io_uring_complete(0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r9, 0x89fb, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'ip6tnl0\x00', r7, 0x29, 0x3, 0x8, 0x1000, 0x2, @private0, @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x80, 0x3, 0x1f}})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001880)={{0x1, 0x1, 0x18, <r10=>r5, {r8}}, './file0\x00'})
ioctl$SG_GET_REQUEST_TABLE(r10, 0x2286, &(0x7f00000018c0))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001a40)={{0x1, 0x1, 0x18, <r11=>r4, {0x100}}, './file0\x00'})
inotify_add_watch(r11, &(0x7f0000001a80)='./file0\x00', 0x80000000)
pipe(&(0x7f0000001ac0)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
ioctl$sock_SIOCDELDLCI(r12, 0x8981, &(0x7f0000001b00)={'macsec0\x00', 0x4})
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r9, 0x3309)
sendmsg$NL80211_CMD_SET_STATION(r12, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x5c, 0x0, 0x388, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x9}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x21, 0x13, [{0x2}, {0x60, 0x1}, {0x16, 0x1}, {0x12, 0x1}, {0x16}, {0x24, 0x1}, {0x6c}, {0x1b}, {0x6}, {0x24}, {0xc}, {0x9}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x60}, {0xc}, {}, {0xb, 0x1}, {0x4883ad399902e446, 0x1}, {0x30, 0x1}, {0x48}, {0xc, 0x1}, {0x1b, 0x1}, {0x30, 0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x48, 0x1}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x81}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040005}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000001c80)={{0x1, 0x1, 0x18, <r14=>r13, {0x64ae5f2b, 0x4}}, './file0\x00'})
sendmsg$AUDIT_SET(r14, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x38, 0x3e9, 0x100, 0x70bd25, 0x25dfdbfb, {0x41, 0x1, 0x2, r1, 0x5db, 0x6, 0x6, 0x68, 0x0, 0x7fffffff}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x4010)

[  122.191197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  122.194103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  122.196803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  122.203266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  122.207582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  122.245394] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.249164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.251158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  122.269015] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  122.274791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  122.320762] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.332777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.335541] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.352305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.370136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.386729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  122.392154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  122.404118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  122.408401] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  122.425337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  122.586768] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  122.600449] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  122.602103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  122.604375] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  122.605494] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  122.610667] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  122.611940] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  122.617587] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  122.623469] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  122.625212] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  122.631756] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  122.636433] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  122.644042] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  122.644993] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  122.651996] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  122.656117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  122.660098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  122.662029] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  122.674102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  122.681223] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  124.275547] Bluetooth: hci0: command tx timeout
[  124.339044] Bluetooth: hci1: command tx timeout
[  124.467131] Bluetooth: hci2: command tx timeout
[  124.530921] Bluetooth: hci3: command tx timeout
[  124.658957] Bluetooth: hci6: command tx timeout
[  124.723159] Bluetooth: hci5: command tx timeout
[  124.787194] Bluetooth: hci4: command tx timeout
[  124.787233] Bluetooth: hci7: command tx timeout
[  126.324075] Bluetooth: hci0: command tx timeout
[  126.387252] Bluetooth: hci1: command tx timeout
[  126.514917] Bluetooth: hci2: command tx timeout
[  126.581897] Bluetooth: hci3: command tx timeout
[  126.709883] Bluetooth: hci6: command tx timeout
[  126.772058] Bluetooth: hci5: command tx timeout
[  126.834919] Bluetooth: hci4: command tx timeout
[  126.837071] Bluetooth: hci7: command tx timeout
[  128.371336] Bluetooth: hci0: command tx timeout
[  128.435155] Bluetooth: hci1: command tx timeout
[  128.563213] Bluetooth: hci2: command tx timeout
[  128.627885] Bluetooth: hci3: command tx timeout
[  128.755174] Bluetooth: hci6: command tx timeout
[  128.819786] Bluetooth: hci5: command tx timeout
[  128.883245] Bluetooth: hci7: command tx timeout
[  128.883405] Bluetooth: hci4: command tx timeout
[  130.419925] Bluetooth: hci0: command tx timeout
[  130.483186] Bluetooth: hci1: command tx timeout
[  130.610924] Bluetooth: hci2: command tx timeout
[  130.675228] Bluetooth: hci3: command tx timeout
[  130.803161] Bluetooth: hci6: command tx timeout
[  130.867188] Bluetooth: hci5: command tx timeout
[  130.931082] Bluetooth: hci7: command tx timeout
[  130.932249] Bluetooth: hci4: command tx timeout
[  182.437450] syz-executor.0 (282) used greatest stack depth: 25224 bytes left
[  182.685383] syz-executor.7 (285) used greatest stack depth: 25016 bytes left
[  185.229681] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  185.237059] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  185.240139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  185.244490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  185.247122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  185.255300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  185.261264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  185.269036] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  185.276778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  185.285686] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  185.288412] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  185.290695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  185.291698] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  185.297652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  185.302222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  185.312425] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  185.316748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  185.321491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  185.331999] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  185.337112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  185.356469] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  185.363595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  185.385504] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  185.387581] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  185.388108] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  185.396618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  185.400158] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  185.401434] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  185.411724] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  185.419503] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  185.421509] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  185.423051] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  185.424146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  185.433190] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  185.441428] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  185.443554] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  185.452221] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  185.463288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  185.557326] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  185.572086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  187.315773] Bluetooth: hci0: command tx timeout
[  187.379733] Bluetooth: hci1: command tx timeout
[  187.444899] Bluetooth: hci2: command tx timeout
[  187.444942] Bluetooth: hci3: command tx timeout
[  187.506981] Bluetooth: hci6: command tx timeout
[  187.507016] Bluetooth: hci5: command tx timeout
[  187.571306] Bluetooth: hci7: command tx timeout
[  187.700018] Bluetooth: hci4: command tx timeout
[  189.365187] Bluetooth: hci0: command tx timeout
[  189.428018] Bluetooth: hci1: command tx timeout
[  189.491110] Bluetooth: hci2: command tx timeout
[  189.491332] Bluetooth: hci3: command tx timeout
[  189.556879] Bluetooth: hci6: command tx timeout
[  189.557379] Bluetooth: hci5: command tx timeout
[  189.620065] Bluetooth: hci7: command tx timeout
[  189.748334] Bluetooth: hci4: command tx timeout
[  191.412150] Bluetooth: hci0: command tx timeout
[  191.475075] Bluetooth: hci1: command tx timeout
[  191.539236] Bluetooth: hci3: command tx timeout
[  191.539293] Bluetooth: hci2: command tx timeout
[  191.602980] Bluetooth: hci5: command tx timeout
[  191.603437] Bluetooth: hci6: command tx timeout
[  191.668092] Bluetooth: hci7: command tx timeout
[  191.794958] Bluetooth: hci4: command tx timeout
[  193.459917] Bluetooth: hci0: command tx timeout
[  193.523913] Bluetooth: hci1: command tx timeout
[  193.586926] Bluetooth: hci2: command tx timeout
[  193.588089] Bluetooth: hci3: command tx timeout
[  193.651160] Bluetooth: hci6: command tx timeout
[  193.652206] Bluetooth: hci5: command tx timeout
[  193.715165] Bluetooth: hci7: command tx timeout
[  193.843090] Bluetooth: hci4: command tx timeout
[  247.435087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  247.439976] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  247.443198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  247.454825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  247.461559] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  247.558564] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  247.561924] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  247.565344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  247.573645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  247.578398] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  247.664974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  247.670136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  247.671357] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  247.687090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  247.692408] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  247.728813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  247.736774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  247.748216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  247.752288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  247.757565] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  247.760045] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  247.770082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  247.778516] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  247.783398] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  247.785485] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  247.857712] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  247.868700] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  247.872355] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  247.881334] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  247.884335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  247.895331] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  247.905266] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  247.926550] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  247.933281] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  247.937321] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  247.990189] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  247.992801] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  247.997537] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  248.005303] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  248.017247] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  249.523249] Bluetooth: hci0: command tx timeout
[  249.650996] Bluetooth: hci1: command tx timeout
[  249.779165] Bluetooth: hci2: command tx timeout
[  249.843484] Bluetooth: hci3: command tx timeout
[  249.843613] Bluetooth: hci4: command tx timeout
[  249.971022] Bluetooth: hci6: command tx timeout
[  249.971045] Bluetooth: hci5: command tx timeout
[  250.099050] Bluetooth: hci7: command tx timeout
[  251.571201] Bluetooth: hci0: command tx timeout
[  251.699912] Bluetooth: hci1: command tx timeout
[  251.826969] Bluetooth: hci2: command tx timeout
[  251.892019] Bluetooth: hci4: command tx timeout
[  251.892210] Bluetooth: hci3: command tx timeout
[  252.019055] Bluetooth: hci5: command tx timeout
[  252.019936] Bluetooth: hci6: command tx timeout
[  252.147953] Bluetooth: hci7: command tx timeout
[  253.620069] Bluetooth: hci0: command tx timeout
[  253.746984] Bluetooth: hci1: command tx timeout
[  253.876059] Bluetooth: hci2: command tx timeout
[  253.938919] Bluetooth: hci3: command tx timeout
[  253.939922] Bluetooth: hci4: command tx timeout
[  254.066921] Bluetooth: hci6: command tx timeout
[  254.066967] Bluetooth: hci5: command tx timeout
[  254.195032] Bluetooth: hci7: command tx timeout
[  255.668129] Bluetooth: hci0: command tx timeout
[  255.796616] Bluetooth: hci1: command tx timeout
[  255.924434] Bluetooth: hci2: command tx timeout
[  255.988640] Bluetooth: hci4: command tx timeout
[  255.988664] Bluetooth: hci3: command tx timeout
[  256.116937] Bluetooth: hci5: command tx timeout
[  256.116962] Bluetooth: hci6: command tx timeout
[  256.243538] Bluetooth: hci7: command tx timeout
[  310.085762] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  310.092505] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  310.096392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  310.115019] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  310.123453] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  310.158929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  310.163419] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  310.167526] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  310.176466] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  310.181040] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  310.417688] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  310.420774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  310.425331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  310.434323] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  310.441077] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  310.530519] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  310.535414] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  310.538981] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  310.547433] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  310.549117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  310.554806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  310.564568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  310.566683] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  310.583206] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  310.593387] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  310.607514] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  310.638811] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  310.640392] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  310.646073] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  310.655344] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  310.668708] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  310.673494] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  310.678343] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  310.683311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  310.690492] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  310.704185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  310.711547] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  310.737995] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  310.803411] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  310.851557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  312.181949] Bluetooth: hci0: command tx timeout
[  312.245746] Bluetooth: hci1: command tx timeout
[  312.562977] Bluetooth: hci2: command tx timeout
[  312.818996] Bluetooth: hci4: command tx timeout
[  312.819074] Bluetooth: hci5: command tx timeout
[  312.883058] Bluetooth: hci3: command tx timeout
[  313.202985] Bluetooth: hci6: command tx timeout
[  313.331260] Bluetooth: hci7: command tx timeout
[  314.228210] Bluetooth: hci0: command tx timeout
[  314.291383] Bluetooth: hci1: command tx timeout
[  314.611382] Bluetooth: hci2: command tx timeout
[  314.866992] Bluetooth: hci4: command tx timeout
[  314.868333] Bluetooth: hci5: command tx timeout
[  314.931820] Bluetooth: hci3: command tx timeout
[  315.251911] Bluetooth: hci6: command tx timeout
[  315.380241] Bluetooth: hci7: command tx timeout
[  316.275950] Bluetooth: hci0: command tx timeout
[  316.339928] Bluetooth: hci1: command tx timeout
[  316.660064] Bluetooth: hci2: command tx timeout
[  316.915963] Bluetooth: hci5: command tx timeout
[  316.916009] Bluetooth: hci4: command tx timeout
[  316.980032] Bluetooth: hci3: command tx timeout
[  317.299963] Bluetooth: hci6: command tx timeout
[  317.426995] Bluetooth: hci7: command tx timeout
[  318.323964] Bluetooth: hci0: command tx timeout
[  318.388015] Bluetooth: hci1: command tx timeout
[  318.708320] Bluetooth: hci2: command tx timeout
[  318.963204] Bluetooth: hci4: command tx timeout
[  318.964101] Bluetooth: hci5: command tx timeout
[  319.026900] Bluetooth: hci3: command tx timeout
[  319.346981] Bluetooth: hci6: command tx timeout
[  319.476126] Bluetooth: hci7: command tx timeout
[  372.231043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  372.234682] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  372.242782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  372.253919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  372.261281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  372.490264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  372.498441] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  372.510372] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  372.521426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  372.536969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  372.596724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  372.624811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  372.632455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  372.639702] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  372.648798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  372.653164] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  372.692653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  372.696447] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  372.699464] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  372.715385] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  372.721651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  372.739597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  372.744683] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  372.756930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  372.758683] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  372.764411] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  372.776891] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  372.778755] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  372.796650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  372.803966] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  372.931004] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  372.938416] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  372.954628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  372.984326] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  372.989280] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  373.138417] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  373.166508] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  373.176648] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  373.210193] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  373.218685] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  374.324008] Bluetooth: hci0: command tx timeout
[  374.643959] Bluetooth: hci1: command tx timeout
[  374.773006] Bluetooth: hci2: command tx timeout
[  374.834901] Bluetooth: hci3: command tx timeout
[  374.898913] Bluetooth: hci5: command tx timeout
[  374.898946] Bluetooth: hci4: command tx timeout
[  375.091914] Bluetooth: hci6: command tx timeout
[  375.283362] Bluetooth: hci7: command tx timeout
[  376.371209] Bluetooth: hci0: command tx timeout
[  376.690979] Bluetooth: hci1: command tx timeout
[  376.819889] Bluetooth: hci2: command tx timeout
[  376.886226] Bluetooth: hci3: command tx timeout
[  376.947442] Bluetooth: hci5: command tx timeout
[  376.947476] Bluetooth: hci4: command tx timeout
[  377.139113] Bluetooth: hci6: command tx timeout
[  377.331115] Bluetooth: hci7: command tx timeout
[  378.419910] Bluetooth: hci0: command tx timeout
[  378.740896] Bluetooth: hci1: command tx timeout
[  378.866960] Bluetooth: hci2: command tx timeout
[  378.933862] Bluetooth: hci3: command tx timeout
[  378.994935] Bluetooth: hci4: command tx timeout
[  378.995391] Bluetooth: hci5: command tx timeout
[  379.186918] Bluetooth: hci6: command tx timeout
[  379.378910] Bluetooth: hci7: command tx timeout
[  380.467513] Bluetooth: hci0: command tx timeout
[  380.786913] Bluetooth: hci1: command tx timeout
[  380.916888] Bluetooth: hci2: command tx timeout
[  380.979178] Bluetooth: hci3: command tx timeout
[  381.043920] Bluetooth: hci5: command tx timeout
[  381.043956] Bluetooth: hci4: command tx timeout
[  381.235912] Bluetooth: hci6: command tx timeout
[  381.427912] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
05:43:46  Registers:
info registers vcpu 0
RAX=0000000000000189 RBX=ffff88802a0d3780 RCX=0000000000000200 RDX=b75e1e894498816a
RSI=ffff88802a0d4200 RDI=ffff88802a0d41d8 RBP=0000000000000000 RSP=ffff8880379c7310
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000026e9f
R12=ffff88802a0d4200 R13=0000000000000000 R14=0000000000000001 R15=ffff88802a0d41d8
RIP=ffffffff81511e53 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5647000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a05283b080 CR3=0000000018b53000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffed100d9e11a2 RBX=ffff88800956cc00 RCX=ffffffff816612b2 RDX=ffff88800956cc00
RSI=ffff88806cf08cf8 RDI=ffffffff8165f130 RBP=dffffc0000000000 RSP=ffff88806cf08c60
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000
R12=000000643735c3c0 R13=ffff88806cf08cf8 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81730050 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5747000 00000000 00000000
LDT=0000 fffffe6b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f113308e6f4 CR3=000000002b2e6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00ff0000000000000000ff0000000000
XMM02=ff00000000000000ff00000000000000 XMM03=0000000000000000ff00000000000000
XMM04=0000000000ff00000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000