Warning: Permanently added '[localhost]:58740' (ECDSA) to the list of known hosts.
2025/06/01 04:45:51 fuzzer started
2025/06/01 04:45:51 dialing manager at localhost:34361
syzkaller login: [   99.257304] cgroup: Unknown subsys name 'net'
[   99.381207] cgroup: Unknown subsys name 'cpuset'
[   99.420393] cgroup: Unknown subsys name 'rlimit'
2025/06/01 04:46:08 syscalls: 2214
2025/06/01 04:46:08 code coverage: enabled
2025/06/01 04:46:08 comparison tracing: enabled
2025/06/01 04:46:08 extra coverage: enabled
2025/06/01 04:46:08 setuid sandbox: enabled
2025/06/01 04:46:08 namespace sandbox: enabled
2025/06/01 04:46:08 Android sandbox: enabled
2025/06/01 04:46:08 fault injection: enabled
2025/06/01 04:46:08 leak checking: enabled
2025/06/01 04:46:08 net packet injection: enabled
2025/06/01 04:46:08 net device setup: enabled
2025/06/01 04:46:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/01 04:46:08 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/01 04:46:08 USB emulation: enabled
2025/06/01 04:46:08 hci packet injection: enabled
2025/06/01 04:46:08 wifi device emulation: enabled
2025/06/01 04:46:08 802.15.4 emulation: enabled
2025/06/01 04:46:08 fetching corpus: 0, signal 0/0 (executing program)
2025/06/01 04:46:11 starting 8 fuzzer processes
04:46:11 executing program 0:
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x15, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008c0)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000810)
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.pending_reads\x00', 0x8c02, 0x100)
setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "2d638abdd079ba5f", "2cfe9b9d74a4bf64c4521afc6bfdef21", "11b2e1b1", "4fb0d90b62667faf"}, 0x28)
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000003c0))
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, @out_args}, './file0\x00'})
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r3], 0x2)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r2)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r4, 0x900, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7fff}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40080)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r5=>r3, @out_args}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000600)={{0x0, 0x0, 0x9, 0x2, 0x401}, 0x8, 0x2, 'id0\x00', 'timer0\x00', 0x0, 0x1, 0x9a8, 0x850, 0x6})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6tnl0\x00', r0, 0x4, 0xf8, 0x6, 0x6, 0x44, @loopback, @mcast1, 0x0, 0x40, 0x40, 0x5}})
lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x6400)
mount$9p_rdma(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x8004, &(0x7f0000000a00)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@sq={'sq', 0x3d, 0x7fff}}, {@common=@afid={'afid', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x7}}, {@sq={'sq', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x3}}, {@common=@afid={'afid', 0x3d, 0x8}}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x65, 0x38, 0x30, 0x30, 0x62, 0x30], 0x2d, [0x62, 0x62, 0x35, 0x65], 0x2d, [0x31, 0x35, 0x30, 0x66], 0x2d, [0x62, 0x33, 0x34, 0x33], 0x2d, [0x34, 0x38, 0x38, 0x36, 0x37, 0x63, 0x34, 0x64]}}}, {@subj_user={'subj_user', 0x3d, 'ip6gre0\x00'}}, {@euid_eq={'euid', 0x3d, r6}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@obj_user={'obj_user', 0x3d, 'ip6tnl0\x00'}}]}})
mount$9p_unix(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x808000, &(0x7f0000000c40)={'trans=unix,', {[{@cache_mmap}, {@cache_fscache}, {@access_user}, {@version_L}, {@debug={'debug', 0x3d, 0x17}}, {@privport}], [{@fsname={'fsname', 0x3d, 'ip6tnl0\x00'}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}, {@audit}]}})
ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000d00)={0x1, 0xffffffff, 0x8000, 0x8000, 0x9})
r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000d40), 0x72503, 0x0)
ioctl$INCFS_IOC_FILL_BLOCKS(r8, 0x80106720, &(0x7f0000000fc0)={0x4, &(0x7f0000000f40)=[{0x40, 0x6e, &(0x7f0000000d80)="16d40ce51d5abe63329b895d59408518ecfc342f22cb7e213963ba55d34fe299d7a4be67c613f199308a39ece4eb3088006b7414f622689238b06b4f48249e5c6dd1a50b4074694f6b7614ce030764a27f79c174932d282151a226b6f5c13bb261ba2da7791260c00fd4b9462a10", 0x0, 0x1}, {0x6, 0x20, &(0x7f0000000e00)="8d1246a71d8412e382a0384bfdc3e8657b013fc9db5e53e234b71fa7e40b79c8", 0x1, 0x1}, {0xc7, 0x8f, &(0x7f0000000e40)="8b3c9d1b5e9b0dbd12a1ff5ef483998cec0925e4790a871d7f9401b3a626f7c31dd046cba79302a9858b9cdec35849eaad1b21d390fcc526cbcb21e95cf470422d96e057d5d32b6ceefa03dd5f484cba75f7eae4579a1b01cc3959f60fd669ed619620274fe0d94d460ee804d0cd5a991fe0f78f0f853948d3d262da332ccf895ac2c21bbd2f6304bcaca9dc3351a8"}, {0x200, 0x2f, &(0x7f0000000f00)="2cdca0e14222d843f17d45104d3f6058297326c3debb8525389ab4612a7b50285f37d9610ef5159670d85c006726cb"}]})

04:46:11 executing program 1:
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r0, r1, &(0x7f0000000140)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/131, 0x83}], 0x1}, 0x5)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x80800, 0x60)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000001c0)=0x2, &(0x7f0000000200)=0x4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r2, 0x8000000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2}}}}, [@NL80211_ATTR_IE={0x84, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xac, 0x81}}, @ht={0x2d, 0x1a, {0x1, 0x3, 0x7, 0x0, {0x5, 0x3f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x401}}, @challenge={0x10, 0x1, 0x93}, @ssid={0x0, 0x1d, @random="bf933bc249b1dff2cf0bb8a0d3df4a67f5d40b32bf07db528d940ae4d8"}, @prep={0x83, 0x1f, @not_ext={{}, 0x80, 0x4, @broadcast, 0x10000, "", 0x186, 0x7, @device_b, 0x2}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @cf={0x4, 0x6, {0xf2, 0x3f, 0x838, 0x7}}]}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="4ced5cb3afb8"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040801}, 0x48020)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000440))
r5 = accept$inet(r4, 0x0, &(0x7f0000000480))
ftruncate(r5, 0x5)
r6 = dup2(0xffffffffffffffff, r2)
ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r7=>r2, {0xaae}}, './file0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r7)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r8=>r3}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})

04:46:11 executing program 2:
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0x1)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000180)=""/138)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0x8010)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f00000004c0)={0x8, 0x5})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3)
sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x11c, r4, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x4f}}}}, [@NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21ccd66ea76bd00ffb2f5d79e6"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "56f2167ff8"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x11, 0x4, "f6748872c832edaf4c498f32dd"}, @NL80211_KEY_SEQ={0xe, 0x4, "bc28b2f645b1b06a29e2"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "42c79c23ba"}]}]}, 0x11c}}, 0x4008000)
ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000740)={0x3, 0xfffffffe, 0x8, 0x2, 0x1fe00, 0x9})
sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x3fa, 0x4, 0x70bd2b, 0x25dfdbff, {0x1, 0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000880), 0x42000, 0x0)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000900), r3)
sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xfff, 0xffff7b1d, 0x8, 0x3]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}]}, 0x38}, 0x1, 0x0, 0x0, 0x421d0e9a8b6a23da}, 0x4000000)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)

04:46:11 executing program 3:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0xb0, 0x18, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0xe0, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "65aa9eb6fd2a584f73f805a6a730c26a1bc7dbfb181d14dd4e9795dfd64474f13609dfeda2f1689accff55bdfd91b42164aa3f1201287c5b1d43de351971c5c42607275a074b407d832e590166797254a72f4be1d5f73a674c512a33172c1040ce72ca372c7b26db64f36209855d3b55bf57f0b755ad86ac0e91669500f8c933579853ea4e5fc00dd486423dbfdd6da0ba0b2e83a0769464a904d45fba7f98d1cd9531becab48a"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0xa0, 0x3, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x64ce}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xab}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x168, 0xb, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x49}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3e}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_USERDATA={0xe6, 0xd, 0x1, 0x0, "ffa0b08d10fb98d5fa3aad3d4853d0554ecef8482284218c95682cced39dac682686f4e1763271f6fdd991cd961e217c9d5798f2c4876c8436639d485bbebf35b91a7910227cfda444b99fa751e0a360b0b27d7df178c1f86d8d20921e3c14745182920f56fa91a8f21b64eb7c44bb06c7da9bdc6a308b74d1aa7082cc6df7e10cced50e6d686e0ca5e34a15a4dfaeeb7a87cd31b2c5ca945af5fced968b369f09b38458471ce7c5903595edeee71170b27b7dc660f52fade5513e926e609e01f8657031946b1f4a1419c127b9565bd519ae3e4ee1a23500ad0b8bc8b8a5ad110e80"}, @NFTA_SET_USERDATA={0x27, 0xd, 0x1, 0x0, "13df56901163ee4cc53d3d30ed8b0d8776f592f3dd222fccf73123c8fac809ccf531ae"}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x7}}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x8a8412b3a4847094, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x8}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}], {0x14}}, 0x468}, 0x1, 0x0, 0x0, 0x880}, 0x4080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x3, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x80)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000640)={<r0=>0xffffffffffffffff, 0x1, 0x6, 0x7fff})
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80110400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x13, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x10000}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44004)
ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000008c0)={@loopback, 0x1ff, 0x1, 0x1, 0x0, 0x2, 0xf46}, 0x20)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x12c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffb}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xee03}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000014)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x400, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000b40)={0x31cf, 0x3, 0x2, 0x3, 0x9})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x208, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010800}, 0x4000000)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c80), 0x103340, 0x0)
getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r3)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xb}, @void, @val={0xc, 0x99, {0x14000, 0x14}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r5 = epoll_create1(0x80000)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000e80))
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000ec0)={0x0, 0x1, 0x6, @multicast}, 0x10)

[  118.712684] audit: type=1400 audit(1748753171.312:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:46:11 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x308, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "163c6a43d642bc9d48aecfbde6b8f60f"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "1cdc1470a32650c26ec7beaaf7955062"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6590de2ab4c333fcf419791c0e8bbbfd"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xfffffffffffffffa)
r2 = pidfd_getfd(r1, r1, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x220, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x44}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x400}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x17}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xa0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x40}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x26}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x93}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}]}]}, @NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0xe8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x26}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x34}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x65}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x87}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb0ed}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4008}, 0x40001)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000580)=0x1, 0x4)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x8010)
read$rfkill(r3, &(0x7f0000000700), 0x8)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r3)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000bc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000007c0)={0x3bc, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "c99eaf0441a563b6f6efd9a13ae334bc2c803a00838e"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x9d, 0x3, "807c40a919c34bf703a145c3ffd3db23579aa7d4428800543fa97be7ed0e7e91c24bc974c1d2846c8289a7608734ee184c48fa67fc394d727e84dddc9c12b5d182e3f23bc7df4de5541a0e72c8f49b17a42df1586d6d7766544433a289b13d049cd9476850de4362223e801f63111ae285c948a9c36e1f28b28db55cbab1408b41c8b4a5b8320c6de3ffffaa5ea7170309fc03ad13cc9b3bb5"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "418b01ed35f4db2df454ab8295285bd993c7cb8877ac6c"}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xea}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb70}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x562bb0a3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67f}]}, @TIPC_NLA_LINK={0x130, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x41b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b2705bc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6fb}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x55d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xad66}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4008840}, 0x20000004)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c40)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xb4, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x200000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2ea}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x20044084)
r7 = accept4$inet(r3, &(0x7f0000000ec0)={0x2, 0x0, @remote}, &(0x7f0000000f00)=0x10, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000f40)={'icmp6\x00'}, &(0x7f0000000f80)=0x1e)

04:46:11 executing program 5:
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
preadv2(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000000)=""/108, 0x6c}, {&(0x7f0000000080)=""/237, 0xed}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/152, 0x98}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x6, 0x7fffffff, 0x8001, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
r0 = syz_open_dev$vcsu(&(0x7f00000013c0), 0x0, 0x502)
sendmsg$unix(r0, &(0x7f0000001700)={&(0x7f0000001400)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001480)="6060fbebb5132c5a04519247a91f49121ae31ddfd6327f2d26a03408fb12bbf032b3c9da7a4d862d185b6f263b02c0523d49bad0a6a091e953eb7b2fb5f0ec3b8762f676d707d39c642b3bdc0bb32ca3f3cef2ea6329941afbb8e48b94cad708965db16bc19c6db5977d387c4952929623005ab6398ceeaa9556bbec3fe7a9b39953b0c3b4e132d65ba95cb3231eacee7d632ee10ade065a08a35b774be00ea4b4219a6f87800a465032b93c5a8f845594b05072db9899e2bf164160b76dace93f21326980d6fde2a8ec99c5a835f355b7b3dcdb9a84d7bf35a68dd9c075956e2cc9cb72384a4d8a4e1fcc4fa75efbd42fc7d5fbebed26", 0xf7}, {&(0x7f0000001580)="30fd782cf9e4b7e2a0e7043d68b72cdfee89b927fb6ebd2b59bad9fc0bbea5dab1839dce836b76fb64a6f2d419adae7fbe2d8ec015adabb6e87693f313685e15095a4103ff28f5bf6ce86b27f0fa453b7af7190010f4da9525adf2a6d440ee5598f69faf83ca62a39e75a9d29043c3539a2994f3ad2ce4b51fe98b0bcad19f9cd4f3746147eeb74cb9ddbcdbecc81345d43a079e2e8b3de87b30c36225722abaf662f3c94bd53a55f3bb64b49c44e5718043a682c9ab928cff64a58f54dba6c9e81c3d083fb5f4fc78fa103a21ee6168852ff36e4e5115a0cd5dfed5a7ed530214f370e8d27ea3", 0xe7}], 0x2, &(0x7f00000016c0), 0x0, 0x40000}, 0x8020)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x80010, r0, 0x10000000)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000017c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r0, 0x0, &(0x7f0000001740)="d6929df378c04bbad46316adf553b0e585d1ba351700966108de4b57eee9e6b365aaa20d48a60c894a0f3ab46e505a196f8f942e738406bbea8905058be3f87054d681dac01e01d892819d4215e9c29d", 0x50, 0x100, 0x0, {0x0, r2}}, 0x6)
r3 = openat$incfs(r0, &(0x7f0000001800)='.pending_reads\x00', 0x0, 0x48)
write$rfkill(r3, &(0x7f0000001840)={0xfff, 0x5, 0x3}, 0x8)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000001880)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
lchown(&(0x7f0000001900)='./file0\x00', 0xee01, 0xee00)
r4 = syz_open_dev$vcsn(&(0x7f0000001a00), 0xffffffffffff8000, 0x183000)
sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x38, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x801)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x70, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x94}, 0x20000810)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000002440)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002400)={&(0x7f0000001cc0)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x4}, 0x4, 0x7, 0x81, 0x1f, 0xd, 'syz1\x00', "0f6b348da838351d7ae0b5a28a282382ecfaa09bfc6ca54118aec35c863f9696", "f5b5520c2a356922e8d5c56a58d1dfdc10d2dbed312bfba38b22478e2d8bd418", [{0x7ff, 0x0, {0x1, 0x3a}}, {0xedf, 0x3, {0x3, 0x40}}, {0x3f, 0x120, {0x0, 0x5}}, {0x8, 0xc2bd, {0x1, 0x5}}, {0x0, 0x7, {0x1, 0x7ff}}, {0x0, 0x0, {0x0, 0x9}}, {0xfffd, 0x3, {0x1, 0x8}}, {0x5, 0x1, {0x1, 0x9d1e}}, {0x3, 0x20, {0x0, 0x5}}, {0x333, 0xfff, {0x0, 0x9}}, {0x401, 0x684f, {0x3, 0x5}}, {0x9, 0x7, {0x3, 0x41e}}, {0x4225, 0xffff, {0x3, 0x12}}, {0x2, 0x6, {0x3}}, {0x5, 0x2, {0x3, 0xfffffffc}}, {0x8c6, 0x1f, {0x3, 0x2}}, {0x5, 0x5, {0x1, 0x4a6f}}, {0x7fff, 0x1, {0x3, 0x3}}, {0x7a0, 0x2, {0x1, 0x3}}, {0x1f, 0x91, {0x1, 0x27c}}, {0x7, 0xff81, {0x2, 0x9}}, {0x9c0, 0xcb, {0x0, 0x2}}, {0x7, 0x96af, {0x0, 0x7}}, {0x894, 0x1, {0x3, 0x9}}, {0x2, 0xfff, {0x2, 0x28a89efb}}, {0x9431, 0x4, {0x2, 0x6}}, {0x0, 0x4, {0x0, 0xffff}}, {0x2, 0x6, {0x0, 0x1}}, {0x80, 0x200, {0x1, 0x8}}, {0x2, 0x95, {0x0, 0x1}}, {0x9, 0x7, {0x3, 0x1}}, {0x9, 0x5, {0x2, 0x4}}, {0xfeff, 0x800, {0x2, 0x8}}, {0x200, 0x84e, {0x0, 0x400}}, {0x1ff, 0x2, {0x2, 0x6}}, {0x8001, 0x3f, {0x3, 0x1}}, {0x7, 0xb66, {0x0, 0x7fff}}, {0x8b0, 0x8d5, {0x3, 0x80000000}}, {0x7, 0x0, {0x2}}, {0x9, 0x5, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x8bf}, 0xff, 0x3, 0xfb78, 0x3f, 0x26, 'syz0\x00', "34b432b6483d5ebcfcf381e949defa1c4e29c066e12b436b32f8ecf457921e90", "4d99c8f91c139e3a2fd23e5794ec1c724fec0fba9fe4e3c90f8ad07a79efc345", [{0x9, 0x4572, {0x2, 0x1}}, {0x2, 0x800, {0x2, 0x1}}, {0x6, 0xab55, {0x0, 0x1}}, {0x3, 0x4, {0x0, 0xffffffe1}}, {0x1894, 0x8, {0x1, 0x6}}, {0x80, 0x37, {0x0, 0x2}}, {0x9, 0x8001, {0x1, 0x200000}}, {0x1, 0x8, {0x3, 0x9}}, {0x1}, {0xda3, 0x2, {0x0, 0x1}}, {0x9, 0x1ae0, {0x1, 0x7fffffff}}, {0x7, 0x8000, {0x0, 0xf2b3}}, {0x401, 0x8000, {0x1, 0x81}}, {0x80, 0xe4a, {0x2, 0x401}}, {0x7, 0x4, {0x4, 0xf08}}, {0x1, 0x8, {0x2, 0x6}}, {0x200, 0x8, {0x1, 0x43}}, {0x7fff, 0x5, {0x1, 0x401}}, {0x2000, 0x9, {0x1, 0x6d92}}, {0x1000, 0x1, {0x3}}, {0xff00, 0x1, {0x3, 0x7}}, {0x3ff, 0x400, {0x1}}, {0x6, 0x1, {0x3, 0x200}}, {0xfff, 0x2, {0x2, 0x4}}, {0x1, 0x0, {0x2, 0xae}}, {0x0, 0x81, {0x3, 0xb7d3}}, {0x8, 0x6b, {0x1, 0x800}}, {0x7, 0x37, {0x3}}, {0xc68b, 0x1, {0x0, 0xfffff0f3}}, {0x1, 0x4, {0x0, 0x10001}}, {0x1, 0x2, {0x1, 0x10000}}, {0x1ff, 0x3, {0x0, 0x1}}, {0x5, 0x7ff, {0x2, 0x2}}, {0x8000, 0x800, {0x0, 0x1}}, {0xbd40, 0x1f, {0x0, 0x80}}, {0x3, 0x7, {0x3, 0x3}}, {0x80, 0x8000, {0x2}}, {0x2, 0xfffc, {0x0, 0x1}}, {0x8000, 0x1000, {0x3, 0x4}}, {0x3, 0x5, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0xdae8}, 0x7, 0x5, 0x1, 0xc69, 0x18, 'syz0\x00', "84ec411a5dbc26186f33e2eeba720528883a13daaa7bb495ee39b9778fbe93f1", "3929138cb953d1cb92a7c41cc4de20b9ece8e823bea5430b5482b22d5defccae", [{0x81, 0x3, {0x2}}, {0xfc00, 0x78bc, {0x2, 0x40}}, {0x2, 0x3, {0x2, 0x1ff}}, {0x6, 0x0, {0x2, 0x7ff}}, {0xfff, 0x3f, {0x2, 0x100}}, {0x0, 0x4c9c, {0x3, 0x3}}, {0x283a, 0x0, {0x7, 0x5}}, {0x6, 0x2400, {0x3, 0xf253}}, {0x8001, 0x8000, {0x1, 0x1}}, {0x100, 0x7, {0x3, 0x3}}, {0x9, 0x11, {0x2, 0x7}}, {0x1, 0x300, {0x3, 0x80}}, {0x20, 0x8001, {0x1, 0x7f}}, {0x2, 0x400, {0x2}}, {0x0, 0x11f2}, {0xa07, 0xd7, {0x0, 0x3a660f61}}, {0x7, 0x8001, {0x3, 0x3}}, {0x9, 0x800, {0x3, 0x5}}, {0x1, 0x1, {0x2}}, {0x5, 0x2, {0x0, 0xccf}}, {0x0, 0x8001, {0x2, 0x7}}, {0x5e, 0x9, {0x0, 0x5}}, {0xfffd, 0x0, {0x1, 0xff}}, {0x2, 0x8, {0x1, 0xae9}}, {0x3ff, 0x2400, {0x0, 0x6}}, {0xffff, 0x7, {0x1, 0x6}}, {0x9d, 0x4, {0x0, 0x20}}, {0x800, 0x4, {0x2, 0x81}}, {0x7, 0x5f, {0x0, 0x20bc}}, {0x3, 0x7ff, {0x0, 0x6a84}}, {0xff80, 0x3, {0x2, 0x1}}, {0x7, 0x7fff, {0x1, 0x3}}, {0x81, 0x80, {0x0, 0x4}}, {0x3, 0x5, {0x0, 0x4}}, {0x9, 0x4000, {0x2, 0x5}}, {0xc64, 0x4, {0x1, 0xfffffffa}}, {0x200, 0x3, {0x0, 0x81}}, {0x5, 0x7, {0x0, 0x6}}, {0x1, 0x9, {0x0, 0x3}}, {0xfffe, 0x4, {0x3, 0x37c}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8000}, 0x8000004)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000002480)={0x2, 0x10000, 0xc0, 0x3ff, 0x0, 0xc6b2})
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002500)={'vcan0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000025c0)={'ip6_vti0\x00', &(0x7f0000002540)={'ip6tnl0\x00', r5, 0x2f, 0x2, 0xe7, 0x1, 0x20, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8, 0x2, 0x1}})
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

04:46:11 executing program 6:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @multicast}, &(0x7f0000000080)=0x80)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000100)={'bridge0\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=&(0x7f00000000c0)={0x7ff}}})
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x3f, 0x3, 0x2, 0x2344, 0x2fe58f3b})
recvmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000180), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)=""/88, 0x58}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8001)
ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000400)={0xfffffffffffffffc, 0x30, [0x4, 0x0, 0x7, 0x4], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={'xfrm0\x00', {0x2, 0x0, @private}})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, @out_args}, './file0\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000004c0))
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto(r8, &(0x7f00000006c0)="c4f6f61f7949fede5394ec3e4ec1381d7936a284e0a20714d12b29", 0x1b, 0x0, &(0x7f0000000700)=@l2={0x1f, 0x200, @any, 0x29d4, 0x1}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r9=>r5}, './file0\x00'})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x88, r10, 0x1120, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x61}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004001}, 0x4801)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000009c0)={0x6, 0x4, 0x9, 0x3, 0xf1, 0xe0, 0x400}, 0xc)
name_to_handle_at(r1, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=@ocfs2_parent={0x18, 0x2, {{0x2, 0xc18, 0x3}, {0x0, 0x183, 0x42be}}}, &(0x7f0000000a80), 0x1000)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r5)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r12, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x3, 0x28}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40044}, 0x4000010)

04:46:11 executing program 7:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0xbd44, 0x5, 0x3, 0x7, 0x407, 0x3, 0x4}, 0x1c)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r0=>0x0}, &(0x7f0000000080)=0x14)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}}, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @private2, 0x7}, 0x1c)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000200)=0x881, &(0x7f0000000240)=0x2)
r2 = dup3(r1, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', <r4=>0x0, 0x4, 0x7, 0x5, 0x40, 0x20, @mcast2, @mcast2, 0x7800, 0x80, 0x4, 0x3d6}})
r5 = accept(0xffffffffffffffff, &(0x7f00000004c0)=@ll={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x80)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={0x2c8, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000940))
sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x18, 0x3f9, 0x200, 0x70bd29, 0x25dfdbfe, {0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x48050}, 0x20000c1)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5c, r8, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x78, 0x3, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x2ec30479}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xc56f}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x4000800)
getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000001100)=""/130, &(0x7f00000011c0)=0x82)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000001200)={0x7, 'wg1\x00', {0x3}, 0x2})
ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000001240))

[  120.078187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  120.082232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  120.083530] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  120.088732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  120.091542] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  120.141693] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  120.148377] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  120.152760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  120.167266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  120.175523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  120.231591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.247582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.250251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.267479] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.274140] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  120.277701] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  120.292692] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  120.308113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  120.313297] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  120.325896] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  120.342271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  120.356211] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  120.362445] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  120.366375] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  120.383315] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  120.392273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.393892] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  120.396297] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  120.399845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  120.403241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.405083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  120.412866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  120.450709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.480428] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.484422] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  120.487683] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.501750] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  120.508332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  120.571453] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  120.603652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  122.105622] Bluetooth: hci0: command tx timeout
[  122.234041] Bluetooth: hci1: command tx timeout
[  122.426511] Bluetooth: hci2: command tx timeout
[  122.553229] Bluetooth: hci6: command tx timeout
[  122.554908] Bluetooth: hci4: command tx timeout
[  122.618027] Bluetooth: hci7: command tx timeout
[  122.682155] Bluetooth: hci3: command tx timeout
[  122.682691] Bluetooth: hci5: command tx timeout
[  124.153016] Bluetooth: hci0: command tx timeout
[  124.281318] Bluetooth: hci1: command tx timeout
[  124.473693] Bluetooth: hci2: command tx timeout
[  124.601310] Bluetooth: hci4: command tx timeout
[  124.601753] Bluetooth: hci6: command tx timeout
[  124.665965] Bluetooth: hci7: command tx timeout
[  124.729246] Bluetooth: hci5: command tx timeout
[  124.729682] Bluetooth: hci3: command tx timeout
[  126.201129] Bluetooth: hci0: command tx timeout
[  126.329143] Bluetooth: hci1: command tx timeout
[  126.521961] Bluetooth: hci2: command tx timeout
[  126.649410] Bluetooth: hci4: command tx timeout
[  126.649854] Bluetooth: hci6: command tx timeout
[  126.713038] Bluetooth: hci7: command tx timeout
[  126.777247] Bluetooth: hci5: command tx timeout
[  126.777681] Bluetooth: hci3: command tx timeout
[  128.249015] Bluetooth: hci0: command tx timeout
[  128.377029] Bluetooth: hci1: command tx timeout
[  128.570251] Bluetooth: hci2: command tx timeout
[  128.697160] Bluetooth: hci6: command tx timeout
[  128.697614] Bluetooth: hci4: command tx timeout
[  128.761022] Bluetooth: hci7: command tx timeout
[  128.826995] Bluetooth: hci3: command tx timeout
[  128.827426] Bluetooth: hci5: command tx timeout
[  179.982888] syz-executor.1 (284) used greatest stack depth: 25072 bytes left
[  180.121943] syz-executor.0 (281) used greatest stack depth: 24512 bytes left
[  182.466387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  182.468233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  182.470057] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.476231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  182.485267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.538776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.545253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.550610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.565089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  182.568069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  182.603496] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.607735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.614158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.623151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  182.628633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  182.676824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  182.687425] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  182.692587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  182.701289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  182.709597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  182.776800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  182.789798] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  182.791768] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  182.798883] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.802992] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.813079] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  182.815021] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  182.817547] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  182.819428] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  182.829965] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  182.834150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  182.835535] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  182.852495] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  182.863010] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  182.889072] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  182.893338] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  182.928437] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  182.945365] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  182.954403] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  182.973065] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  184.569249] Bluetooth: hci0: command tx timeout
[  184.633248] Bluetooth: hci1: command tx timeout
[  184.697094] Bluetooth: hci2: command tx timeout
[  184.761176] Bluetooth: hci3: command tx timeout
[  184.953042] Bluetooth: hci4: command tx timeout
[  185.081024] Bluetooth: hci7: command tx timeout
[  185.082036] Bluetooth: hci5: command tx timeout
[  185.145067] Bluetooth: hci6: command tx timeout
[  186.617063] Bluetooth: hci0: command tx timeout
[  186.681059] Bluetooth: hci1: command tx timeout
[  186.745419] Bluetooth: hci2: command tx timeout
[  186.809986] Bluetooth: hci3: command tx timeout
[  187.001041] Bluetooth: hci4: command tx timeout
[  187.130008] Bluetooth: hci5: command tx timeout
[  187.130178] Bluetooth: hci7: command tx timeout
[  187.194112] Bluetooth: hci6: command tx timeout
[  188.666958] Bluetooth: hci0: command tx timeout
[  188.729236] Bluetooth: hci1: command tx timeout
[  188.793222] Bluetooth: hci2: command tx timeout
[  188.856992] Bluetooth: hci3: command tx timeout
[  189.049002] Bluetooth: hci4: command tx timeout
[  189.177156] Bluetooth: hci5: command tx timeout
[  189.178154] Bluetooth: hci7: command tx timeout
[  189.241992] Bluetooth: hci6: command tx timeout
[  190.713285] Bluetooth: hci0: command tx timeout
[  190.777024] Bluetooth: hci1: command tx timeout
[  190.841105] Bluetooth: hci2: command tx timeout
[  190.905300] Bluetooth: hci3: command tx timeout
[  191.099322] Bluetooth: hci4: command tx timeout
[  191.225160] Bluetooth: hci7: command tx timeout
[  191.225369] Bluetooth: hci5: command tx timeout
[  191.289007] Bluetooth: hci6: command tx timeout
[  245.196805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  245.200429] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.205552] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.214825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  245.220142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  245.334674] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  245.351451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  245.357427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  245.365197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  245.369745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  245.530316] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  245.542677] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  245.552200] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  245.561188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  245.574502] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  245.578549] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  245.581631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  245.585525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  245.587715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  245.590459] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  245.595469] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  245.597316] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  245.602805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  245.608491] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  245.610083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  245.615500] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  245.620492] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  245.631283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  245.659481] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  245.706453] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  245.735098] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  245.739591] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  245.791569] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  245.804900] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  245.807624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  245.811823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  245.823401] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  245.825535] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  245.839320] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  245.845751] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  247.289036] Bluetooth: hci0: command tx timeout
[  247.418063] Bluetooth: hci1: command tx timeout
[  247.737222] Bluetooth: hci3: command tx timeout
[  247.737999] Bluetooth: hci5: command tx timeout
[  247.801055] Bluetooth: hci4: command tx timeout
[  247.801643] Bluetooth: hci2: command tx timeout
[  247.865234] Bluetooth: hci6: command tx timeout
[  247.929021] Bluetooth: hci7: command tx timeout
[  249.338046] Bluetooth: hci0: command tx timeout
[  249.465037] Bluetooth: hci1: command tx timeout
[  249.785371] Bluetooth: hci3: command tx timeout
[  249.785866] Bluetooth: hci5: command tx timeout
[  249.851795] Bluetooth: hci2: command tx timeout
[  249.852302] Bluetooth: hci4: command tx timeout
[  249.913186] Bluetooth: hci6: command tx timeout
[  249.979007] Bluetooth: hci7: command tx timeout
[  251.385000] Bluetooth: hci0: command tx timeout
[  251.513210] Bluetooth: hci1: command tx timeout
[  251.833238] Bluetooth: hci5: command tx timeout
[  251.833730] Bluetooth: hci3: command tx timeout
[  251.897040] Bluetooth: hci4: command tx timeout
[  251.897529] Bluetooth: hci2: command tx timeout
[  251.961301] Bluetooth: hci6: command tx timeout
[  252.026146] Bluetooth: hci7: command tx timeout
[  253.433126] Bluetooth: hci0: command tx timeout
[  253.561017] Bluetooth: hci1: command tx timeout
[  253.881069] Bluetooth: hci3: command tx timeout
[  253.881588] Bluetooth: hci5: command tx timeout
[  253.945038] Bluetooth: hci2: command tx timeout
[  253.945564] Bluetooth: hci4: command tx timeout
[  254.009152] Bluetooth: hci6: command tx timeout
[  254.073226] Bluetooth: hci7: command tx timeout
[  307.608430] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  307.622280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  307.625853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  307.639102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  307.646017] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  307.854656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  307.857823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  307.860216] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  307.874278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  307.879532] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  307.883417] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  307.885714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  307.889742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  307.893454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  307.896625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  308.103333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  308.115764] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  308.134155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  308.141057] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  308.160247] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  308.162187] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  308.166866] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  308.175467] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  308.196214] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  308.210177] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  308.215185] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  308.222109] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  308.225410] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  308.234583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  308.270741] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  308.274627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  308.281623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  308.285467] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  308.290422] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  308.334485] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  308.338786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  308.351628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  308.356752] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  308.368429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  308.412212] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  309.690032] Bluetooth: hci0: command tx timeout
[  309.945217] Bluetooth: hci1: command tx timeout
[  309.946948] Bluetooth: hci2: command tx timeout
[  310.266227] Bluetooth: hci4: command tx timeout
[  310.330012] Bluetooth: hci7: command tx timeout
[  310.458067] Bluetooth: hci5: command tx timeout
[  310.522126] Bluetooth: hci3: command tx timeout
[  310.522206] Bluetooth: hci6: command tx timeout
[  311.737280] Bluetooth: hci0: command tx timeout
[  311.994983] Bluetooth: hci2: command tx timeout
[  311.995445] Bluetooth: hci1: command tx timeout
[  312.313982] Bluetooth: hci4: command tx timeout
[  312.377238] Bluetooth: hci7: command tx timeout
[  312.505031] Bluetooth: hci5: command tx timeout
[  312.569021] Bluetooth: hci3: command tx timeout
[  312.569050] Bluetooth: hci6: command tx timeout
[  313.786068] Bluetooth: hci0: command tx timeout
[  314.041305] Bluetooth: hci1: command tx timeout
[  314.041565] Bluetooth: hci2: command tx timeout
[  314.361080] Bluetooth: hci4: command tx timeout
[  314.425040] Bluetooth: hci7: command tx timeout
[  314.553629] Bluetooth: hci5: command tx timeout
[  314.618167] Bluetooth: hci3: command tx timeout
[  314.618192] Bluetooth: hci6: command tx timeout
[  315.833294] Bluetooth: hci0: command tx timeout
[  316.091475] Bluetooth: hci1: command tx timeout
[  316.091667] Bluetooth: hci2: command tx timeout
[  316.409283] Bluetooth: hci4: command tx timeout
[  316.473225] Bluetooth: hci7: command tx timeout
[  316.601016] Bluetooth: hci5: command tx timeout
[  316.665398] Bluetooth: hci6: command tx timeout
[  316.665646] Bluetooth: hci3: command tx timeout
[  370.252031] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  370.255317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  370.260712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  370.266985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  370.271332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  370.538659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  370.542432] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  370.545119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  370.550257] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  370.554141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  370.556222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  370.559077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  370.563437] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  370.570179] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  370.580874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  370.611547] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  370.636882] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  370.649853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  370.672735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  370.687733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  370.700533] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  370.704652] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  370.711817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  370.728962] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  370.733441] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  370.747226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  370.777883] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  370.780621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  370.802330] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  370.806601] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  371.062624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  371.065846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  371.101395] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  371.151018] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  371.206562] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  371.426270] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  371.432202] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  371.445141] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  371.553558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  371.558027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  372.346023] Bluetooth: hci0: command tx timeout
[  372.665148] Bluetooth: hci1: command tx timeout
[  372.666200] Bluetooth: hci2: command tx timeout
[  372.793646] Bluetooth: hci4: command tx timeout
[  372.857058] Bluetooth: hci3: command tx timeout
[  372.921096] Bluetooth: hci6: command tx timeout
[  373.305462] Bluetooth: hci7: command tx timeout
[  373.753999] Bluetooth: hci5: command tx timeout
[  374.393179] Bluetooth: hci0: command tx timeout
[  374.713799] Bluetooth: hci1: command tx timeout
[  374.714314] Bluetooth: hci2: command tx timeout
[  374.841952] Bluetooth: hci4: command tx timeout
[  374.906087] Bluetooth: hci3: command tx timeout
[  374.970342] Bluetooth: hci6: command tx timeout
[  375.354046] Bluetooth: hci7: command tx timeout
[  375.802225] Bluetooth: hci5: command tx timeout
[  376.442796] Bluetooth: hci0: command tx timeout
[  376.762346] Bluetooth: hci2: command tx timeout
[  376.762874] Bluetooth: hci1: command tx timeout
[  376.891018] Bluetooth: hci4: command tx timeout
[  376.954954] Bluetooth: hci3: command tx timeout
[  377.017994] Bluetooth: hci6: command tx timeout
[  377.401983] Bluetooth: hci7: command tx timeout
[  377.850044] Bluetooth: hci5: command tx timeout
[  378.490956] Bluetooth: hci0: command tx timeout
[  378.809996] Bluetooth: hci1: command tx timeout
[  378.810464] Bluetooth: hci2: command tx timeout
[  378.937148] Bluetooth: hci4: command tx timeout
[  379.001212] Bluetooth: hci3: command tx timeout
[  379.067013] Bluetooth: hci6: command tx timeout
[  379.451357] Bluetooth: hci7: command tx timeout
[  379.897943] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
04:51:19  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=ffffffff81353e1d RDI=fffffbfff0b83a38 RBP=ffffffff85c1d1c0 RSP=ffff888038ca77e0
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6bd R11=00000000000083f6
R12=0000000000000001 R13=ffffffff81353e1d R14=0000000000000000 R15=ffff888038ca78e8
RIP=ffffffff81aecca9 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe6b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe8cef13368 CR3=0000000037ca9000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff8880291e7408 RCX=ffff8880291e735c RDX=1ffff1100523ce8c
RSI=ffffffff85c1d1c0 RDI=ffffffff8195724c RBP=ffff8880291e7460 RSP=ffff8880291e73f0
R8 =0000000000000001 R9 =ffff8880291e7448 R10=000000000003b6bd R11=00000000000218fe
R12=ffff8880291e74d0 R13=0000000000000000 R14=ffff88801a6a0000 R15=ffff88800e2783c0
RIP=ffffffff81353b1b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc3bed0f70 CR3=000000003578a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000