Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:45088' (ECDSA) to the list of known hosts.
2025/05/31 18:29:29 fuzzer started
2025/05/31 18:29:29 dialing manager at localhost:34361
syzkaller login: [   94.726267] cgroup: Unknown subsys name 'net'
[   94.868243] cgroup: Unknown subsys name 'cpuset'
[   94.909270] cgroup: Unknown subsys name 'rlimit'
2025/05/31 18:29:44 syscalls: 2214
2025/05/31 18:29:44 code coverage: enabled
2025/05/31 18:29:44 comparison tracing: enabled
2025/05/31 18:29:44 extra coverage: enabled
2025/05/31 18:29:44 setuid sandbox: enabled
2025/05/31 18:29:44 namespace sandbox: enabled
2025/05/31 18:29:44 Android sandbox: enabled
2025/05/31 18:29:44 fault injection: enabled
2025/05/31 18:29:44 leak checking: enabled
2025/05/31 18:29:44 net packet injection: enabled
2025/05/31 18:29:44 net device setup: enabled
2025/05/31 18:29:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/31 18:29:44 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/31 18:29:44 USB emulation: enabled
2025/05/31 18:29:44 hci packet injection: enabled
2025/05/31 18:29:44 wifi device emulation: enabled
2025/05/31 18:29:44 802.15.4 emulation: enabled
2025/05/31 18:29:44 fetching corpus: 0, signal 0/0 (executing program)
2025/05/31 18:29:46 starting 8 fuzzer processes
18:29:46 executing program 0:
ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0x81)
ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f00000000c0)={"b4a6978e582f7aa95c673502", &(0x7f0000000000)="13aa0120b3a91c50fcaeefabe0cf209f4f21e908e78fde2b5c19076b339a9b0295a2afe04b048f2a758b3489850596e90f", 0x31, 0x8001, &(0x7f0000000040)={0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, "3d0c47a9", 0x7c, "83885c12", 0xf9, 0x2b, 0x8, "98ec93", "a4778f8156533626d3a3303b8541c3179e50c45c81bbd5846323004e66baa1867b7fbadd86dac9b101566eded53c"}, 0x3, 0x7fff, 0x200, &(0x7f0000000080)})
r0 = syz_io_uring_complete(0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x40, 0x1, 0x0, 'queue0\x00', 0x7fffffff})
r1 = socket(0x31, 0x80000, 0xfffffffa)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0)
r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x1)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x204, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x8000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1000}, {0x8, 0x15, 0x101}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x828}, {0x8, 0x15, 0xffffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xf512}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0xfffe}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x1000}}]}, 0x204}, 0x1, 0x0, 0x0, 0x600488d4}, 0x48000)
r5 = eventfd(0xc000000)
sync_file_range(r5, 0x800, 0x1f, 0x2)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r6=>r0, @in_args={0x1}}, './file0\x00'})
getsockopt$netlink(r6, 0x10e, 0x8, &(0x7f00000006c0)=""/183, &(0x7f0000000780)=0xb7)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r6, {0x59c}}, './file0\x00'})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r6)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r8, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44001)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xef6bdd3fea0c24ad}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xac, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x3d, 0xa8, @random="04698a6e83f606cb88491aa19621d53a3191f3db8ebe0dac94c9e3ed07f9a4fe7f55b0b7164e7886f5d65ffac449c41fc6a75faf2dc51d2dde"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1f}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100000000}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x200}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @handle=@pci={{0x8}, {0x11}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4800}, 0x8004101)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000b40)={0x5, 0x4, 0x80})

18:29:46 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
fsync(r0)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @broadcast}, &(0x7f00000004c0)=0x10)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000500)={0x0, 'veth0_to_batadv\x00', {0x2}, 0x5})
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40858)
r2 = syz_open_dev$vcsu(&(0x7f0000000700), 0x9, 0x4040)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x80)
ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000840)="aebb02a9c8076e5e3ab7c3c1bf16da0afa1bb8e9cdc6a7d4a057fca6146128ba0657af3a01c3a6c0c082d7c9b19765e51612113f6783c7886d361aaa07c2e6c19f7befd3c981fa593f45dd5917cbcdea92b406183c030774ac3563b576d8c9616ae2d2537af8d0b9d41b36a681a7a324061555a3466f6fff3135a3c178778bc739a1e48a141427245220631add8f34d682009f9f4ed7fea3f04eb7ceb12d622f3089e437403d446ee7526472fef2e0c12584c5af923862bf6a1bbef69e3047ba48fddcfcedc0ff507867f434f66d4edc76b1022a1a26e5247e6a1c8586546ad771")
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000940)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r4, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000ac0))
fsetxattr$security_selinux(r3, &(0x7f0000000b00), &(0x7f0000000b40)='system_u:object_r:getty_exec_t:s0\x00', 0x22, 0x1)
r5 = dup3(r3, r1, 0x80000)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x86}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, <r6=>r2, {0x5}}, './file0\x00'})
ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000000d00)={0x0, 0x8, [0x8001, 0x1, 0x7f, 0x2, 0x1, 0x200]})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000e80)={&(0x7f0000000d40), 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x48, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x4400c044)

18:29:46 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='ip6tnl0\x00')
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x2}, &(0x7f0000000080)=0x28)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000100)={&(0x7f00000000c0)=""/21, 0x15})
ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000140))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000180)=0x2)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x72}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x56}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf26}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe54}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x94)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0xc00, 0x0)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd0, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040015)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r3=>r0, {0x7}}, './file0\x00'})
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000006c0)=""/98)
sendto$inet(r3, &(0x7f0000000740), 0x0, 0x20, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000840)={'veth1_to_bond\x00', &(0x7f0000000780)=@ethtool_flash={0x33, 0xbc2c1f2f, './file0\x00'}})
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000980), &(0x7f00000009c0)=0xc)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000f40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f00)={&(0x7f0000000a40)={0x4b4, r1, 0x314, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x5f}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x44, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x3c, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x52}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x20, 0x2d, 0x0, 0x1, [{0xf, 0x0, @random="a9a7145ca2e14993f96cf1"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x41c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x200, 0x4, 0x0, 0x1, [{0x1fc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xf2, 0x1, "c9b52edb7eb9c378ece9336c271ea73fd676c0d69850b2be8720261cf1b06bda96370aea3af0f67f2ca43bb32bff3447a39daa8e179333f8ed5f6035b17ec635567843496d1a67b77c1c8206196b7344faa06d6d45b272a4e58cb553ad31612c355c541a30c405423df3eb8f52ad394ec6ee2d817f08eba7baea5e594848b2cd68706bda31d50ab750c0630e11f2ccd3702a543686d6a670518709bf19778066d28f70261a33183ea469999c3164b4d126385a815a73d14c0adc42879d1e30d0be91c41a0a4bf19fbf78bd44adc599bdbdc55fe6aa87fc357f96f8c8700184885add6df66a4c9f39e99ff73f0a99"}, @NL80211_PKTPAT_PATTERN={0xa1, 0x2, "4f053b1beeb5696124618c46c0c95ac0ebcb1eeae0423f5660b58c1a0bc15ab7e19a050243260b2975d2700b10bd99812ee888dc125dac587f25f49bbe44a9de56cf7cb90519340fd79ea956d69f7ed8fc41d3257d25132e8b4f5ff5e6f530be94cd9bd08b830bbb0d1dac8ba2ff69ae94033b1a694ae8ef2b77b53d0af2b616db076b55c7ea9c2abb8c2fbb92ac30747bc6221224b0507b880be4d94d"}, @NL80211_PKTPAT_MASK={0x5d, 0x1, "67e459071fd4e5cd54ccf054d7cfdebf5ac2eb89d7e9152e579ee9b2c78a6f69fe60323b3d0c3d3349d1b86cd35139b9ead532c1ab549e1b956544d3c4eacd44187c16722439a1e55895ae7771289932116c7951be13d040d5"}]}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x104, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0x80}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x20, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x200}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}]}, @NL80211_ATTR_IE={0x96, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x78}, 0x4, 0x81, @device_b, 0x1, 0x7fff, 0x1}}, @channel_switch={0x25, 0x3, {0x1, 0x70}}, @random={0x2, 0x74, "33dab55d830263d501ff46c2c23b9066daa096524c7514ddf107d18698fa039dc729efd3d3593d3b4708aebf0f7184e601fa4e403b5190f41f785964d683675f218a4829c8f53a5e9a894183a4e6783e37094b4264b3f204e38b8fb2a6f24bc28eeb458bfa38ff3aebdb3ce173d5338b09f4066b"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x40}}, @NL80211_ATTR_IE={0x28, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x1f, 0x55, @broadcast, 0x8, "", 0x6, 0xfffeffff, @device_b, 0x5}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x14, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x2}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x1}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xf8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xf3, 0xa, "f170146a14e2bc929d2e033652e62debde49ea05ccb2497d5988aec5e866064bc16d409ce504ea8822d420e7e8e500943210901ff233c1838b8cb22e127566d345aa72d7163888dbd43c3584b2715159442630824e89ec1429ef5a8f236c3e37d4ccc75fe8f29dc45ceceecf686aafbe894d566a09e0eaf7e47a908e767d1a1b011ea66873b6b2fd4e052326af1415d8e0b92fb72f10b1f45c69eedffefa6ae3594247d7c1b4dc0729cc6f224d228165ecd5fd17775ee8d13e8b254660173ee6a2d67192ed78817819f8f29ac3b9d707a12a24d2d6969d5aa8a4510b399db5330d737477b771f64b5273d5abfd1020"}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x24, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x18, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1050}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x1}, 0x804)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000001080), &(0x7f00000010c0)=0x4)

18:29:46 executing program 3:
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4040014)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r0, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x866, 0x3f}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r1, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x9b10, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x400b0)
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x81)
r3 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x61d0, 0x1, &(0x7f0000000600)=[{&(0x7f0000000580)="1116b9e72481fdb5d8ad124505ec8af7318a3dad9f7ffe32f5e76505810ead20495be823fbb5de326b4b9495093a07ac80b475d72da6ec0e97415443675e107e4c24", 0x42, 0x1f}], 0x1004, &(0x7f0000000640)={[{@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x806}}], [{@fowner_gt={'fowner>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '\xc7-\xea[.'}}]})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r4=>r2, {<r5=>r3}}, './file0\x00'})
setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000700)=0x1, 0x4)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x20200, 0x0)
mknodat(r6, &(0x7f0000000780)='./file0\x00', 0x80, 0x6)
r7 = signalfd4(r5, &(0x7f00000007c0), 0x8, 0x80000)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r7)
ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000800)=0x4)
ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000840))
r8 = accept4(0xffffffffffffffff, &(0x7f0000000880)=@nfc_llcp, &(0x7f0000000900)=0x80, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r8, 0x40049421, 0x1)
r9 = syz_open_dev$mouse(&(0x7f0000000940), 0x7, 0x4000)
sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000001280)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f0000000d40)={0x4d0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5d4ffeba}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xca}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x4d0}}, 0x4004081)

18:29:46 executing program 4:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x4, 0x70bd2c, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400c050}, 0x4051)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000140)=0x1)
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x8, @multicast1}, 0x173, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)='team_slave_1\x00', 0x3, 0x2, 0x6})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0xffffffff}}, './file0\x00'})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004044)
r3 = syz_open_dev$vcsu(&(0x7f0000000380), 0x7, 0x400800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f00000003c0)={0x10001, 0x1, 0x50, {0xed7, 0x5}, 0xff, 0xffff1e28})
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000440)=""/94)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000004c0)={0x0, 0x3, 0x6, {0x80000000, 0x8}, 0x4, 0xff})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8011020}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c4}, 0x8)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x501000, 0x0)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000006c0)={0xbf, {{0x2, 0x4e24, @multicast2}}, 0x1, 0xa, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e23, @private=0xa010101}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x590)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x88100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xc4, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe0f}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x57}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a5}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1f}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x810)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000e40)=<r7=>0x0)
rt_tgsigqueueinfo(r7, 0xffffffffffffffff, 0xc, &(0x7f0000000e80)={0x13, 0x2, 0x7})
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x9802104}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80)

18:29:47 executing program 5:
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
fstatfs(r0, &(0x7f0000000040)=""/61)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', <r1=>0x0, 0x7800, 0x20, 0x0, 0x800, {{0x13, 0x4, 0x0, 0xe, 0x4c, 0x66, 0x0, 0xff, 0x4, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x1c, 0xf9, 0x3, 0x6, [{@multicast1, 0x1}, {@loopback, 0x7}, {@rand_addr=0x64010100, 0x7}]}, @end, @ssrr={0x89, 0x17, 0xa6, [@rand_addr=0x64010102, @multicast2, @loopback, @loopback, @initdev={0xac, 0x1e, 0x7, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@private2}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r3=>0x0, 0x4, 0x2, 0x1, 0xfffffe01, 0x30, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', <r4=>0x0, 0x0, 0x1, 0x1, 0x1, 0x65, @private0, @private2, 0x8000, 0x1, 0xfd2, 0x6}})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)={0x294, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0xc0, 0xf7, 0xfffffff7}, {0x6, 0xbc, 0x1, 0x2}, {0x5, 0x4, 0x8, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}]}}]}, 0x294}, 0x1, 0x0, 0x0, 0x4040880}, 0x40001)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000780)={0x0, 0x3, 0x5, 0xfffffffffffffff9})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000800))
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000880)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x4f}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), r5)
sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xa0, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000b40)={{0x1, 0x1, 0x18, <r8=>r0, {<r9=>0xffffffffffffffff}}, './file0\x00'})
ioctl$LOOP_CHANGE_FD(r8, 0x4c06, 0xffffffffffffffff)
getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc)
r10 = fsmount(r9, 0x1, 0x70)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r9)
sendmsg$TIPC_CMD_SET_LINK_TOL(r10, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x68, r11, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x800, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}}, 0x810)

[  112.055679] audit: type=1400 audit(1748716187.033:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
18:29:47 executing program 6:
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'vlan0\x00', {0x1}, 0x5})
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40008040)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/virtio_blk', 0x4000, 0x102)
r2 = accept$inet(r1, 0x0, &(0x7f00000001c0))
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14, 0x80800)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e21, 0x6, 0x4e20, 0x0, 0xa, 0x80, 0x80, 0x88, r4}, {0x8000, 0x1, 0xc640, 0xaf4, 0x8480, 0xfffffffffffff6c9, 0x376, 0x7}, {0xe82, 0x40, 0x5d, 0xa4}, 0x7, 0x6e6bbf, 0x1, 0x0, 0x0, 0x3}, {{@in=@remote, 0x4d2, 0xcd}, 0xa, @in6=@mcast2, 0x3506, 0x4, 0x3, 0x0, 0x6, 0x9, 0xd8}}, 0xe8)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x36)
ioctl$FITHAW(r0, 0xc0045878)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000009, 0x30, r5, 0xd2f06000)
r6 = perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x81, 0x6, 0x2, 0x0, 0x0, 0x920, 0x40150, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000380), 0x4}, 0x10, 0x1, 0x332, 0x1, 0x0, 0xfffffff7, 0xffff, 0x0, 0x6, 0x0, 0x1}, r0, 0x4, r0, 0x2)
pwritev(r6, &(0x7f0000000800)=[{&(0x7f0000000440)="39e9526bf749ada117fdee7b218cea39d10e6fd7c7f7974a487fec8c8281b979c602ee1aeba1d234c15180b5aa5b2e358ec2a2b1020aa01851f6b9f9918b935a473b684cbc26a316395bed5b2660f9c28c368b54597781244062386ea92b252f1955539f4974eab99f006a001f4b3d7caf955e4ea67ac66c0c", 0x79}, {&(0x7f00000004c0)="ed8cdd1241450777f4ffd96ebc81a8bf37a2e94a561ce03a0522df596f65ec04bd89c05d602c804cc2ad602d7b6446418bf1cc683f7cfd2115d325d747ce35ac8ff0b3be258128dbac7ea62e6aa04d53f28310d9a9ee20631114ab8f0cd7604d121a35ef867c83f0b99c266ba10d5fab3a8e025af7c3fb2a6d1977b8d2a2eb904fb6eb97557b8dbf125eb84db0d72a0e84be28fe847f6e0ef53420", 0x9b}, {&(0x7f0000000580)="6ef5520c051c3dca2bdbea6921e526a2e89d58ced0a428d4373f62d8b62cda29197bb0df23c1f5336b154ec90d125b545f4af31d499006b84c3f02dbf61c7721dde2f24f", 0x44}, {&(0x7f0000000600)="ade1fc8041eac95396d9ac802bd9ed2e6e7971c8b3b0c9f24a14d797e15b6517c2701f02602d366b354555a7f49c0244d430a011ed0650d93eb9466a54c8d3465d03d3969b02417afe", 0x49}, {&(0x7f0000000680)="29b29a28796dcecb75965e3fe3ff47f8444307fbf1f4945ae435661ef58bb2f251fd219e7240a446a668c86bdceccf0246e68ada42da338a9f93f6cf3642a682f6d96a34a12065400fffafa1a44c159b3b7c1a385847ca44aeacca3d85cdb15559998b6dfed96ae55846840e28072f08a4616fed104e3d2f860df1b46f7ababda657423a9f3dad28178a11dbf21546a1ae5043643963d1b8abfe7e1e603ca04c1a7271295e5eff307da2081a59082e943a97827a59244489af7c0d1a669cff6fdd89a6feb885a8f3188b324840225b2e3aa49fef1c8864139be7721a72ffbf32c517e928ba74732aa2787f2c242fd6", 0xef}, {&(0x7f0000000780)="e33dac21edc6b40340acc799dfa66416540ad1b15d4a18bf43a4b26d0bc91558cbf07b19b743b62e365eaae31f9236c1f39c5a3f9b0e205041485290783ecf633e66a5e934a31f14254a139c2371eb", 0x4f}, {0x0}], 0x7, 0xffffffff, 0x7)
getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000880), 0x10)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000008c0))
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x6c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x800)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, r7, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x3}}}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x20, 0x4}, {0xf, 0x3}, {}, {0x7, 0x5}, {0x63, 0x4}, {0xc1, 0x4}, {0x79, 0x5}, {0x1, 0x4}, {0x40, 0x3}, {0x80, 0x1}, {0x2, 0x2}, {0xcf}, {}, {0x9, 0x1}, {0x57, 0x7}, {0x8, 0x3}, {0x87, 0x4}, {0x2f, 0x7}, {0x7}], "4a2a672a53fcda8d"}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)

18:29:47 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', <r1=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4881)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000180)={r2, r3/1000+10000}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40181)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x200440, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x144, r6, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x130, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @supported_rates={0x1, 0x5, [{0x1, 0x1}, {0x55}, {0x24, 0x1}, {0x30}, {0xc, 0x1}]}, @erp={0x2a, 0x1, {0x1}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x8}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0x9e, 0x0, @device_a, 0x0, 0x7, 0x7}}, @perr={0x84, 0xe9, {0x2, 0xf, [@not_ext={{}, @device_b, 0x40, "", 0xe}, @not_ext={{}, @device_a, 0x5, "", 0x2f}, @not_ext={{}, @broadcast, 0x5, "", 0x22}, @not_ext={{}, @device_a, 0x2, "", 0x3}, @not_ext={{}, @device_a, 0xde, "", 0x31}, @not_ext={{}, @device_a, 0x5, "", 0x3d}, @ext={{}, @broadcast, 0x4, @broadcast, 0x2d}, @ext={{}, @broadcast, 0x1000}, @ext={{}, @broadcast, 0x80000000, @device_b, 0x15}, @ext={{}, @broadcast, 0x5, @device_a, 0x19}, @not_ext={{}, @device_b, 0x8, "", 0x8}, @ext={{}, @device_a, 0x8, @device_a, 0x19}, @not_ext={{}, @device_a, 0x5, "", 0x13}, @not_ext={{}, @device_a, 0x3, "", 0x3d}, @ext={{}, @device_a, 0x80, @device_a, 0x20}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0x6, 0x49}}, @dsss={0x3, 0x1, 0x9}]}]}, 0x144}}, 0x20000000)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000)
getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000700), &(0x7f0000000740)=0x40)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048010}, 0x40000)
sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0xe, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x44)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r0)
sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r8, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r5)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2182}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}]}]}, 0x40}}, 0x20)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000d40)={'ipvs\x00'}, &(0x7f0000000d80)=0x1e)

[  113.494878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  113.503849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  113.510883] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  113.513572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.518677] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.524232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.526602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  113.537586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  113.540722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  113.543997] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.548353] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  113.552405] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  113.555320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  113.557338] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.560669] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.562739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  113.568005] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  113.571523] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  113.573832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  113.576565] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  113.582586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  113.586211] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  113.588638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  113.621507] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  113.632006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  113.639451] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  113.661490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  113.673301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  113.680767] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  113.686860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  113.690478] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  113.703835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  113.715313] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  113.716680] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  113.730771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  113.774248] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  113.790660] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  113.813906] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  113.832745] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  113.858638] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  115.627259] Bluetooth: hci1: command tx timeout
[  115.690495] Bluetooth: hci2: command tx timeout
[  115.690730] Bluetooth: hci3: command tx timeout
[  115.691856] Bluetooth: hci0: command tx timeout
[  115.755464] Bluetooth: hci4: command tx timeout
[  115.818137] Bluetooth: hci5: command tx timeout
[  115.818211] Bluetooth: hci6: command tx timeout
[  115.946439] Bluetooth: hci7: command tx timeout
[  117.675228] Bluetooth: hci1: command tx timeout
[  117.738280] Bluetooth: hci2: command tx timeout
[  117.738459] Bluetooth: hci3: command tx timeout
[  117.738852] Bluetooth: hci0: command tx timeout
[  117.802179] Bluetooth: hci4: command tx timeout
[  117.866292] Bluetooth: hci6: command tx timeout
[  117.866726] Bluetooth: hci5: command tx timeout
[  117.995071] Bluetooth: hci7: command tx timeout
[  119.722258] Bluetooth: hci1: command tx timeout
[  119.786333] Bluetooth: hci3: command tx timeout
[  119.786764] Bluetooth: hci2: command tx timeout
[  119.787704] Bluetooth: hci0: command tx timeout
[  119.850339] Bluetooth: hci4: command tx timeout
[  119.914207] Bluetooth: hci5: command tx timeout
[  119.914461] Bluetooth: hci6: command tx timeout
[  120.042328] Bluetooth: hci7: command tx timeout
[  121.770208] Bluetooth: hci1: command tx timeout
[  121.834142] Bluetooth: hci0: command tx timeout
[  121.834179] Bluetooth: hci2: command tx timeout
[  121.834596] Bluetooth: hci3: command tx timeout
[  121.901102] Bluetooth: hci4: command tx timeout
[  121.962257] Bluetooth: hci6: command tx timeout
[  121.965058] Bluetooth: hci5: command tx timeout
[  122.090090] Bluetooth: hci7: command tx timeout
[  173.487200] syz-executor.1 (282) used greatest stack depth: 24768 bytes left
[  173.541443] syz-executor.0 (285) used greatest stack depth: 24544 bytes left
[  173.618589] syz-executor.7 (289) used greatest stack depth: 24528 bytes left
[  175.869992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.874403] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.876691] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.882856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.887678] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.924893] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.929324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.931972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.941428] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.948447] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.001468] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.012816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.015661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.029489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.039461] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.115705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.138296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  176.148895] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  176.153422] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.163752] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  176.166340] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  176.172480] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  176.175433] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  176.177949] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  176.183500] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  176.199710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  176.218459] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.222344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  176.225264] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  176.226720] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  176.229553] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  176.235967] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  176.237866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  176.240495] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  176.243397] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.245207] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  176.248476] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  176.251628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  176.262861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.265475] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.963102] Bluetooth: hci0: command tx timeout
[  178.026233] Bluetooth: hci1: command tx timeout
[  178.154427] Bluetooth: hci2: command tx timeout
[  178.346236] Bluetooth: hci3: command tx timeout
[  178.346828] Bluetooth: hci7: command tx timeout
[  178.347333] Bluetooth: hci6: command tx timeout
[  178.347483] Bluetooth: hci4: command tx timeout
[  178.410211] Bluetooth: hci5: command tx timeout
[  180.012091] Bluetooth: hci0: command tx timeout
[  180.074089] Bluetooth: hci1: command tx timeout
[  180.202070] Bluetooth: hci2: command tx timeout
[  180.394187] Bluetooth: hci7: command tx timeout
[  180.394620] Bluetooth: hci4: command tx timeout
[  180.395089] Bluetooth: hci3: command tx timeout
[  180.395570] Bluetooth: hci6: command tx timeout
[  180.458108] Bluetooth: hci5: command tx timeout
[  182.059324] Bluetooth: hci0: command tx timeout
[  182.122107] Bluetooth: hci1: command tx timeout
[  182.250104] Bluetooth: hci2: command tx timeout
[  182.442155] Bluetooth: hci4: command tx timeout
[  182.442229] Bluetooth: hci3: command tx timeout
[  182.442608] Bluetooth: hci7: command tx timeout
[  182.443170] Bluetooth: hci6: command tx timeout
[  182.506207] Bluetooth: hci5: command tx timeout
[  184.106408] Bluetooth: hci0: command tx timeout
[  184.171139] Bluetooth: hci1: command tx timeout
[  184.298279] Bluetooth: hci2: command tx timeout
[  184.492201] Bluetooth: hci4: command tx timeout
[  184.492675] Bluetooth: hci7: command tx timeout
[  184.493872] Bluetooth: hci3: command tx timeout
[  184.494386] Bluetooth: hci6: command tx timeout
[  184.555090] Bluetooth: hci5: command tx timeout
[  238.085174] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  238.089658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  238.092589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  238.099807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  238.104576] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  238.324862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  238.339947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.342362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  238.346463] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.350126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.351827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.356486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  238.359971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  238.367576] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.405574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.430946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  238.439882] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  238.451439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  238.459728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  238.463981] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  238.473409] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  238.475402] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  238.480091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  238.501660] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  238.531431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  238.544639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  238.549157] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  238.573334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  238.584350] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  238.589241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  238.594321] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  238.605228] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.608508] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.611970] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.619545] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.631855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  238.634187] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  238.643237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  238.649823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.706807] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  240.170106] Bluetooth: hci0: command tx timeout
[  240.427634] Bluetooth: hci1: command tx timeout
[  240.491116] Bluetooth: hci2: command tx timeout
[  240.618125] Bluetooth: hci3: command tx timeout
[  240.683104] Bluetooth: hci4: command tx timeout
[  240.747121] Bluetooth: hci5: command tx timeout
[  240.747650] Bluetooth: hci6: command tx timeout
[  240.810097] Bluetooth: hci7: command tx timeout
[  242.219188] Bluetooth: hci0: command tx timeout
[  242.474364] Bluetooth: hci1: command tx timeout
[  242.540060] Bluetooth: hci2: command tx timeout
[  242.667249] Bluetooth: hci3: command tx timeout
[  242.731401] Bluetooth: hci4: command tx timeout
[  242.796090] Bluetooth: hci5: command tx timeout
[  242.796530] Bluetooth: hci6: command tx timeout
[  242.859286] Bluetooth: hci7: command tx timeout
[  244.266533] Bluetooth: hci0: command tx timeout
[  244.522072] Bluetooth: hci1: command tx timeout
[  244.588087] Bluetooth: hci2: command tx timeout
[  244.714350] Bluetooth: hci3: command tx timeout
[  244.780633] Bluetooth: hci4: command tx timeout
[  244.843374] Bluetooth: hci6: command tx timeout
[  244.843829] Bluetooth: hci5: command tx timeout
[  244.907075] Bluetooth: hci7: command tx timeout
[  246.315853] Bluetooth: hci0: command tx timeout
[  246.571481] Bluetooth: hci1: command tx timeout
[  246.636055] Bluetooth: hci2: command tx timeout
[  246.762141] Bluetooth: hci3: command tx timeout
[  246.828081] Bluetooth: hci4: command tx timeout
[  246.891964] Bluetooth: hci6: command tx timeout
[  246.892427] Bluetooth: hci5: command tx timeout
[  246.954086] Bluetooth: hci7: command tx timeout
[  300.676885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.681700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.687984] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.698179] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.702814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  300.817723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  300.823394] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  300.829063] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  300.835946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  300.847831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  300.867538] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  300.872735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  300.875296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  300.886755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  300.891746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.898912] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  300.907408] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  300.952858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  300.962793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  300.963109] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  300.987006] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  300.997692] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.003676] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  301.006242] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  301.015410] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.026697] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  301.047760] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  301.067972] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  301.071504] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.088841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  301.113586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  301.145929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.164306] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  301.166600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.181613] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  301.272629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  301.342901] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  301.392596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  301.424781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  301.457888] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  302.763068] Bluetooth: hci0: command tx timeout
[  302.954444] Bluetooth: hci3: command tx timeout
[  303.018364] Bluetooth: hci1: command tx timeout
[  303.082107] Bluetooth: hci2: command tx timeout
[  303.275135] Bluetooth: hci5: command tx timeout
[  303.276440] Bluetooth: hci4: command tx timeout
[  303.338088] Bluetooth: hci7: command tx timeout
[  303.596076] Bluetooth: hci6: command tx timeout
[  304.810380] Bluetooth: hci0: command tx timeout
[  305.002183] Bluetooth: hci3: command tx timeout
[  305.066395] Bluetooth: hci1: command tx timeout
[  305.130314] Bluetooth: hci2: command tx timeout
[  305.322247] Bluetooth: hci5: command tx timeout
[  305.323621] Bluetooth: hci4: command tx timeout
[  305.387196] Bluetooth: hci7: command tx timeout
[  305.643105] Bluetooth: hci6: command tx timeout
[  306.858296] Bluetooth: hci0: command tx timeout
[  307.051145] Bluetooth: hci3: command tx timeout
[  307.115095] Bluetooth: hci1: command tx timeout
[  307.178089] Bluetooth: hci2: command tx timeout
[  307.370136] Bluetooth: hci4: command tx timeout
[  307.370228] Bluetooth: hci5: command tx timeout
[  307.434125] Bluetooth: hci7: command tx timeout
[  307.690203] Bluetooth: hci6: command tx timeout
[  308.906089] Bluetooth: hci0: command tx timeout
[  309.099079] Bluetooth: hci3: command tx timeout
[  309.164311] Bluetooth: hci1: command tx timeout
[  309.227069] Bluetooth: hci2: command tx timeout
[  309.419184] Bluetooth: hci4: command tx timeout
[  309.419272] Bluetooth: hci5: command tx timeout
[  309.482122] Bluetooth: hci7: command tx timeout
[  309.738103] Bluetooth: hci6: command tx timeout
[  362.880399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  362.885396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  362.891434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  362.907131] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  362.910968] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  363.007150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  363.009820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  363.012569] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.017682] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.021424] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  363.332968] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  363.338699] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  363.347305] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  363.353780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  363.361292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  363.483790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  363.489348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  363.504990] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  363.517183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.523362] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  363.544361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.546247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  363.560387] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  363.596070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.596696] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.601410] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.604365] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  363.607238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  363.623476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.639583] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  363.647468] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  363.654329] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  363.662346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.666543] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.669700] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.705524] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  363.735350] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.746494] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  363.756400] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.763926] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  364.971102] Bluetooth: hci0: command tx timeout
[  365.098141] Bluetooth: hci1: command tx timeout
[  365.419101] Bluetooth: hci2: command tx timeout
[  365.610281] Bluetooth: hci3: command tx timeout
[  365.739160] Bluetooth: hci4: command tx timeout
[  365.802291] Bluetooth: hci6: command tx timeout
[  365.867118] Bluetooth: hci5: command tx timeout
[  365.867669] Bluetooth: hci7: command tx timeout
[  367.018359] Bluetooth: hci0: command tx timeout
[  367.147246] Bluetooth: hci1: command tx timeout
[  367.466447] Bluetooth: hci2: command tx timeout
[  367.658267] Bluetooth: hci3: command tx timeout
[  367.788033] Bluetooth: hci4: command tx timeout
[  367.851618] Bluetooth: hci6: command tx timeout
[  367.914428] Bluetooth: hci7: command tx timeout
[  367.914890] Bluetooth: hci5: command tx timeout
[  369.067316] Bluetooth: hci0: command tx timeout
[  369.195121] Bluetooth: hci1: command tx timeout
[  369.515374] Bluetooth: hci2: command tx timeout
[  369.709057] Bluetooth: hci3: command tx timeout
[  369.835085] Bluetooth: hci4: command tx timeout
[  369.899296] Bluetooth: hci6: command tx timeout
[  369.963245] Bluetooth: hci5: command tx timeout
[  369.963690] Bluetooth: hci7: command tx timeout
[  371.115069] Bluetooth: hci0: command tx timeout
[  371.243694] Bluetooth: hci1: command tx timeout
[  371.564073] Bluetooth: hci2: command tx timeout
[  371.755090] Bluetooth: hci3: command tx timeout
[  371.883150] Bluetooth: hci4: command tx timeout
[  371.947116] Bluetooth: hci6: command tx timeout
[  372.011154] Bluetooth: hci5: command tx timeout
[  372.011607] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
18:34:47  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff888036c47360 RCX=ffffffff8679b4bc RDX=ffff888036c48001
RSI=0000000000000001 RDI=ffff88806ce08a88 RBP=ffff888036c40000 RSP=ffff88806ce08a08
R8 =ffffffff8679b4c0 R9 =0000000000000000 R10=000000000003b6bd R11=000000000000031f
R12=ffff888036c47201 R13=ffff88806ce08ac0 R14=ffff888036c472b8 R15=ffff88806ce08a78
RIP=ffffffff813540ee RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe2c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4710e43610 CR3=000000002cfe4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000080010104 RBX=ffff88800f0f0000 RCX=ffffffff82536ea6 RDX=000000000001c06a
RSI=ffffffff82536eb4 RDI=0000000000000007 RBP=000000000001c06a RSP=ffff88806cf08c58
R8 =0000000000000000 R9 =fffffbfff0c83f6a R10=000000000001c06a R11=0000000000000001
R12=000000000001c06a R13=ffff88800f0f0180 R14=ffff88800f0f44c0 R15=ffff88800f0f0008
RIP=ffffffff82536eb8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe5300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd3b77da028 CR3=000000002bbd5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000