Warning: Permanently added '[localhost]:49114' (ECDSA) to the list of known hosts.
2025/06/06 08:00:07 fuzzer started
2025/06/06 08:00:08 dialing manager at localhost:39689
syzkaller login: [  101.678619] cgroup: Unknown subsys name 'net'
[  101.842058] cgroup: Unknown subsys name 'cpuset'
[  101.902649] cgroup: Unknown subsys name 'rlimit'
2025/06/06 08:00:29 syscalls: 2214
2025/06/06 08:00:29 code coverage: enabled
2025/06/06 08:00:29 comparison tracing: enabled
2025/06/06 08:00:29 extra coverage: enabled
2025/06/06 08:00:29 setuid sandbox: enabled
2025/06/06 08:00:29 namespace sandbox: enabled
2025/06/06 08:00:29 Android sandbox: enabled
2025/06/06 08:00:29 fault injection: enabled
2025/06/06 08:00:29 leak checking: enabled
2025/06/06 08:00:29 net packet injection: enabled
2025/06/06 08:00:29 net device setup: enabled
2025/06/06 08:00:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/06 08:00:29 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/06 08:00:29 USB emulation: enabled
2025/06/06 08:00:29 hci packet injection: enabled
2025/06/06 08:00:29 wifi device emulation: enabled
2025/06/06 08:00:29 802.15.4 emulation: enabled
2025/06/06 08:00:29 fetching corpus: 0, signal 0/0 (executing program)
2025/06/06 08:00:31 starting 8 fuzzer processes
08:00:31 executing program 0:
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}}, 0x54)
r0 = dup(0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x108, 0x0, 0x880, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8001}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9034}, {0x6, 0x16, 0xffa1}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x1}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xb4}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}]}, 0x108}, 0x1, 0x0, 0x0, 0x24}, 0x880)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', <r2=>0x0, 0x4, 0x8, 0x4, 0x55, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x8, 0x20, 0x8000, 0x7ff}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6_vti0\x00', <r3=>0x0, 0x29, 0x0, 0x81, 0x7f, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x7800, 0x8, 0x7f}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x15c, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
r5 = accept$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x14)
getsockname$packet(r5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14)
r6 = openat$cgroup_pressure(r0, &(0x7f0000000840)='io.pressure\x00', 0x2, 0x0)
fadvise64(r6, 0xca, 0x1, 0x3)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x4c8, 0x0, 0x1f8, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000880), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="bcf229a07576", @mac, @rand_addr=0x64010101, @rand_addr=0x64010102, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8001, 0x2}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010100, 0xff, 0x0, 0x0, 0x6, {@mac, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x5, 0x40, 0x4, 0x5, 0x7fff, 0x8, 'veth1_to_bridge\x00', 'xfrm0\x00', {0xff}, {}, 0x0, 0x20}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:cgroup_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518)
symlinkat(&(0x7f0000000e00)='./file0\x00', r0, &(0x7f0000000e40)='./file0\x00')
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ec0), r0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, r7, 0x4, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008050}, 0x8a912c16cfdb85b8)
ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000fc0)=0x8f75)
r8 = dup2(r5, r0)
ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000001000)={0x6, 0x3, 0x800, 0x5, 0x1})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r8, 0xc058534b, &(0x7f0000001040)={0x6, 0xa7, 0x3f, 0xd3bd, 0xa6720000, 0x3})

08:00:31 executing program 1:
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x1, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x8080)
r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x4048800)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x15c, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xde}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6f}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x20040081)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x402840, 0x0)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000600))
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80280}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x7, 0x6, 0xa00, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040011)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40054}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, 0x0, 0x811, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000011)
sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, r3, 0x600, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x4008801)
r5 = perf_event_open(&(0x7f0000000c40)={0x0, 0x80, 0x43, 0x4, 0x2, 0x80, 0x0, 0xe48, 0x100, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x2, 0x6}, 0x2582, 0x5, 0x5, 0x5, 0xd9a, 0x7fff, 0x1, 0x0, 0x200, 0x0, 0x3ff}, 0x0, 0xe, r1, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000cc0))
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000d00)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x401}}, './file0\x00'})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r1)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x70, r7, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x24000000)

08:00:31 executing program 2:
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r0, 0x5396, &(0x7f00000000c0)={0x15ce1be5})
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', <r4=>0x0, 0x4, 0x3, 0x0, 0xb0, 0x0, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8718, 0x5, 0xe8}})
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000002c0)={r4, @remote, @local}, 0xc)
ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000300)={0x3, 0xfffffffffffffff8})
r5 = eventfd2(0x9, 0x800)
ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000340))
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x20, 0x4})
sched_yield()
ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000780))
r6 = inotify_init()
ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x8)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, 0x1, 0x1, 0x0, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001)
fallocate(r5, 0x4, 0xfffffffffffffffc, 0x0)
ioctl$HIDIOCGFLAG(r3, 0x8004480e, &(0x7f0000000900))
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

[  124.810281] audit: type=1400 audit(1749196831.386:7): avc:  denied  { execmem } for  pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:00:31 executing program 3:
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001640)={'sit0\x00', &(0x7f00000015c0)={'syztnl1\x00', <r0=>0x0, 0x2f, 0x7, 0x6, 0x22, 0x0, @mcast2, @mcast2, 0x20, 0x40, 0x4, 0x1}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001700)={'erspan0\x00', &(0x7f0000001680)={'syztnl1\x00', <r1=>0x0, 0x80, 0x20, 0x400, 0x7ff, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0x1b, 0x4f, [@dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @remote, @empty, @private=0xa010102]}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000001d00)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d40)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e00)={'syztnl2\x00', &(0x7f0000001d80)={'sit0\x00', <r3=>0x0, 0x4, 0x6, 0x1e, 0x80000001, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x8, 0x1, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000001ec0)={'ip6gre0\x00', &(0x7f0000001e40)={'syztnl2\x00', <r4=>0x0, 0x4, 0x4, 0xc7, 0x800, 0x9, @loopback, @local, 0x10, 0x1, 0x3f, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001f80)={'syztnl2\x00', &(0x7f0000001f00)={'ip6gre0\x00', <r5=>0x0, 0x2f, 0x2, 0x40, 0x3, 0x46, @dev={0xfe, 0x80, '\x00', 0x32}, @dev={0xfe, 0x80, '\x00', 0x43}, 0xf887, 0x8000, 0x0, 0x1}})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002400)={&(0x7f0000001fc0)={0x43c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x7, 0x8, 0xaa}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1f, 0x1, 0x1, 0x1}, {0x64dc, 0x1, 0x8, 0x3}, {0x7, 0x81, 0xff, 0x19d}, {0x1ff, 0x9, 0x2, 0x7}, {0x8, 0xff, 0x9b, 0x1}]}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x43c}}, 0x4000004)
r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000002480), &(0x7f00000024c0)=0x1c, 0x800)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000002500)={{0x1, 0x1, 0x18, <r7=>r6, {0x1, 0x4}}, './file0\x00'})
getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f0000002540)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000002580)=0x28)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044090}, 0x10)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f00000026c0), 0x400, 0x0)
ioctl$sock_netdev_private(r8, 0x89f7, &(0x7f0000002700)="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")
r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002800), 0x440000, 0x0)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000002880), r8)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000002980)={'ip_vti0\x00', &(0x7f00000028c0)={'tunl0\x00', <r11=>r2, 0x1, 0x700, 0x9, 0x0, {{0x25, 0x4, 0x0, 0x7, 0x94, 0x66, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x80000001, {[@timestamp_addr={0x44, 0x14, 0x4e, 0x1, 0x7, [{@empty, 0xc24}, {@private=0xa010101, 0x19}]}, @noop, @timestamp_addr={0x44, 0x34, 0xc, 0x1, 0x4, [{@remote, 0x4}, {@multicast1, 0x8}, {@rand_addr=0x64010100}, {@loopback, 0x100}, {@rand_addr=0x64010102, 0x401}, {@multicast1, 0x8d7a}]}, @end, @timestamp_addr={0x44, 0x34, 0xfa, 0x1, 0x0, [{@broadcast, 0x8}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x3}, {@loopback, 0x1}, {@empty, 0x800}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x7}]}]}}}}})
sendmsg$FOU_CMD_ADD(r9, &(0x7f0000002a80)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x54, r10, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x90}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0x400000000000000)
r12 = dup2(r7, r7)
ioctl$EVIOCSFF(r12, 0x40304580, &(0x7f0000002ac0)={0x54, 0x400, 0x0, {0x7fff, 0x100}, {0x1, 0x401}, @cond=[{0xc00, 0x8, 0x2, 0x6, 0x4125}, {0x20, 0x4, 0x6, 0x0, 0x1f}]})

08:00:31 executing program 4:
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x17, {0x8, 0xc2, @l2={'ib', 0x3a, 'hsr0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000100)={0x3, 0x80, 0x2, 0x5, 0x3, [{0x8, 0x3, 0x9, '\x00', 0x1a08}, {0x40, 0x5, 0x4d, '\x00', 0x2002}, {0x401, 0x7, 0x5, '\x00', 0xd}]})
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x7a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000000)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000380)={{0x2, 0x2}, 0x100, './file0\x00'})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf07}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11cd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000)
stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresgid(0xee00, r1, 0xee01)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan4\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan1\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x8997, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x5c080}, 0x40040)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x98010001}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044}, 0x4048040)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r5)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000b40), 0x423acb15cffe88bd, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x44044)
sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0x0, 0x2, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d80), r5)

08:00:31 executing program 5:
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x280, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xde, 0x5b, "2fb165e2e176f6ec4fcfc46fa4a119f80fb72468755da065ac3c729a79f42886c0b17ce70156fef88e39a332fcb56864c9cbd6bf463572577cd0e0c69f601e88b58c8720a975611fadf087c2aba7a59d110ff8eac358114b2b744c78089ecf6fb5951d0d9c3bcac5d4ed587cd38edcbdf023f0507fbfec310dbf72e3ad017f9cf7b8377d11972104a3771d2fe98d3c6dd440edecdfc82dcde70d1c7b9469fc6183d888abeaad6c1895664035a98de59011022fd7e71f63a020d610d8cafd8180268fb23edf0961484cb39769f8ba75df7cfde031531d0372ad22"}, @NL80211_ATTR_FRAME_MATCH={0xfd, 0x5b, "47a52d6b202effdf6b0e2338c9c7f0214a67cc214433cb867333daadf8c2a5f7e127654f630e59cf2eb851f2e59526e79b16800c65a1f9e4eb0aeca9f246b82a064873c0882640ad0e5466f7db9f5968524a9a5e6abd354ceaa42111799893c2f411872a349e943931859f3a0461972afedc408c9038e66b0b4a32296710d99bca55f2c2c580d3c9860cce45f4437e9ebbbdcd95897562edefbb7335d9ef0515120d2bad7b0ef7da8f652a501c611e12f15cf3c84a5396c35c28190e2f5e27866ae34ac527eb0fe8dc9c7dfa0ce959a69628b25ab5c5ae70d11a7e35ae94763137de25c20c532cc5b344d823ed55c5b5c149ff2d2999987aed"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x63, 0x5b, "1383b3604a44d7fbfbc804c51492c38a3bf54788988313955a8d8dd045f7d313d5f0e16e82b907b55386c5f5caee0bfd9317acf4ce31d06a941a983c27b57808d97e7efd2c043c94a33440207da8422761c818ed0034f329b3b00cf43cb576"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44841}, 0x4081)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', <r1=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x66543a3e69af348b}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040004}, 0x404c010)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000600))
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x0, 0x1ff, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7940, 0x700, 0xbd7, 0x7}})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r3, 0x14, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x24}}, 0x800)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x800}}, './file0\x00'})
accept4(r4, 0x0, &(0x7f0000000880), 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000900)={{0x1, 0x1, 0x18}, './file0\x00'})
sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000009)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8108020}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r5, 0x8, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000c40)={'team0\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000000c80)={0x11, 0xf7, r6, 0x1, 0x6, 0x6, @local}, 0x14)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7fffffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000)

08:00:31 executing program 6:
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000))
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x8, 0x1, 0x5a, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, 0x8, 0x700, 0x6, 0x5}})
r1 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x4001, 0xa, 0x9}, 0x18)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc6a4c597f48c65e7}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x8000020)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x18020840}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x100}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x80000000}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8000}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000005c0)=0x6, 0x4)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x8040, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x94}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000000)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x10000, 0x0)
ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000780)=0x4)
ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x18, 0x0, 0xa20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000014}, 0x80)

08:00:31 executing program 7:
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000)=""/67, &(0x7f0000000080)=0x43)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xac}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xeb}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0x78}, 0x1, 0x0, 0x0, 0x8021}, 0x4000014)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x2b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x50)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x39}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000010)
lsetxattr$security_ima(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000700)=@sha1={0x1, "00db604bbd130011cfd3b7c0f506cfae3c45d20c"}, 0x15, 0x2)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000740)={<r3=>0xffffffffffffffff, 0x1a8, 0x10000, 0x7f})
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1, 0x41bd3019, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x80, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x14b6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x460}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc2e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe2a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4085}, 0x20004000)
r4 = add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, 0xfffffffffffffffd, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a80)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffffc, 0x41}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x20090800)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x84, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004004}, 0x1)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
getsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000e00)=""/183, &(0x7f0000000ec0)=0xb7)

[  126.171520] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.180327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.187714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.207843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.214951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.400585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.403497] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  126.406802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  126.420085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  126.430127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.432716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.435859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  126.438488] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.446527] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.450059] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.460713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.466337] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  126.468189] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.472481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.477597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  126.481856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  126.486539] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.496698] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  126.500263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.503672] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  126.521785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.528848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  126.531150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.535787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  126.535986] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  126.537415] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  126.557825] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  126.559607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  126.561976] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  126.574517] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  126.576609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  126.593468] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  126.621153] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  126.634308] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  126.666547] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  128.259801] Bluetooth: hci0: command tx timeout
[  128.579459] Bluetooth: hci3: command tx timeout
[  128.643328] Bluetooth: hci1: command tx timeout
[  128.644078] Bluetooth: hci4: command tx timeout
[  128.644091] Bluetooth: hci2: command tx timeout
[  128.707114] Bluetooth: hci6: command tx timeout
[  128.707242] Bluetooth: hci5: command tx timeout
[  128.773065] Bluetooth: hci7: command tx timeout
[  130.309056] Bluetooth: hci0: command tx timeout
[  130.628242] Bluetooth: hci3: command tx timeout
[  130.691172] Bluetooth: hci4: command tx timeout
[  130.691208] Bluetooth: hci2: command tx timeout
[  130.691665] Bluetooth: hci1: command tx timeout
[  130.755394] Bluetooth: hci5: command tx timeout
[  130.755892] Bluetooth: hci6: command tx timeout
[  130.820687] Bluetooth: hci7: command tx timeout
[  132.356119] Bluetooth: hci0: command tx timeout
[  132.676038] Bluetooth: hci3: command tx timeout
[  132.741053] Bluetooth: hci2: command tx timeout
[  132.741567] Bluetooth: hci4: command tx timeout
[  132.742045] Bluetooth: hci1: command tx timeout
[  132.804439] Bluetooth: hci5: command tx timeout
[  132.804945] Bluetooth: hci6: command tx timeout
[  132.867103] Bluetooth: hci7: command tx timeout
[  134.405042] Bluetooth: hci0: command tx timeout
[  134.724113] Bluetooth: hci3: command tx timeout
[  134.787261] Bluetooth: hci1: command tx timeout
[  134.787764] Bluetooth: hci4: command tx timeout
[  134.789046] Bluetooth: hci2: command tx timeout
[  134.851121] Bluetooth: hci5: command tx timeout
[  134.852458] Bluetooth: hci6: command tx timeout
[  134.915114] Bluetooth: hci7: command tx timeout
[  186.429226] syz-executor.6 (296) used greatest stack depth: 24912 bytes left
[  189.018636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.030541] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.036055] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.044709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.050830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.097656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.109632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  189.112748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  189.116900] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  189.118183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.129489] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.129805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  189.132397] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.136207] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  189.150528] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  189.160684] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.164258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  189.170921] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.182811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  189.192270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  189.323161] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.325553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.338389] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.391224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  189.398531] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.399352] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  189.403775] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  189.406591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.409644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  189.411941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.414766] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  189.421214] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  189.428938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.430983] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  189.476562] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.480381] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  189.488510] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  189.512393] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  189.521559] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  189.546308] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  191.108095] Bluetooth: hci0: command tx timeout
[  191.235624] Bluetooth: hci1: command tx timeout
[  191.236825] Bluetooth: hci3: command tx timeout
[  191.237093] Bluetooth: hci2: command tx timeout
[  191.555139] Bluetooth: hci4: command tx timeout
[  191.619401] Bluetooth: hci6: command tx timeout
[  191.620107] Bluetooth: hci5: command tx timeout
[  191.620150] Bluetooth: hci7: command tx timeout
[  193.156317] Bluetooth: hci0: command tx timeout
[  193.284088] Bluetooth: hci3: command tx timeout
[  193.284113] Bluetooth: hci2: command tx timeout
[  193.284161] Bluetooth: hci1: command tx timeout
[  193.604555] Bluetooth: hci4: command tx timeout
[  193.667122] Bluetooth: hci5: command tx timeout
[  193.667293] Bluetooth: hci6: command tx timeout
[  193.668109] Bluetooth: hci7: command tx timeout
[  195.205081] Bluetooth: hci0: command tx timeout
[  195.331435] Bluetooth: hci1: command tx timeout
[  195.331469] Bluetooth: hci3: command tx timeout
[  195.331923] Bluetooth: hci2: command tx timeout
[  195.651091] Bluetooth: hci4: command tx timeout
[  195.715300] Bluetooth: hci5: command tx timeout
[  195.716162] Bluetooth: hci7: command tx timeout
[  195.716188] Bluetooth: hci6: command tx timeout
[  197.251078] Bluetooth: hci0: command tx timeout
[  197.379311] Bluetooth: hci2: command tx timeout
[  197.381075] Bluetooth: hci3: command tx timeout
[  197.381239] Bluetooth: hci1: command tx timeout
[  197.699100] Bluetooth: hci4: command tx timeout
[  197.763124] Bluetooth: hci6: command tx timeout
[  197.763333] Bluetooth: hci7: command tx timeout
[  197.763619] Bluetooth: hci5: command tx timeout
[  251.474434] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  251.478265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  251.484502] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  251.496891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  251.499654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  251.608203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  251.611627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  251.614960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  251.621399] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  251.626880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  251.628908] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  251.638932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  251.645222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  251.673978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.676505] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.677809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  251.680104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  251.682441] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.696720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.701382] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.895891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  251.913657] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  251.915119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  251.917494] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  251.918674] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  251.925433] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  251.937649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.942039] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  251.949622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.978071] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  251.990401] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  251.992234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  252.002484] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  252.006464] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  252.009821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  252.011078] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  252.012669] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  252.018933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  252.042288] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  252.071394] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  253.571116] Bluetooth: hci0: command tx timeout
[  253.699139] Bluetooth: hci1: command tx timeout
[  253.763427] Bluetooth: hci3: command tx timeout
[  253.763803] Bluetooth: hci2: command tx timeout
[  254.148266] Bluetooth: hci7: command tx timeout
[  254.148305] Bluetooth: hci5: command tx timeout
[  254.211135] Bluetooth: hci4: command tx timeout
[  254.212307] Bluetooth: hci6: command tx timeout
[  255.619595] Bluetooth: hci0: command tx timeout
[  255.749129] Bluetooth: hci1: command tx timeout
[  255.811315] Bluetooth: hci3: command tx timeout
[  255.812195] Bluetooth: hci2: command tx timeout
[  256.195318] Bluetooth: hci5: command tx timeout
[  256.195858] Bluetooth: hci7: command tx timeout
[  256.259405] Bluetooth: hci6: command tx timeout
[  256.260126] Bluetooth: hci4: command tx timeout
[  257.667107] Bluetooth: hci0: command tx timeout
[  257.795585] Bluetooth: hci1: command tx timeout
[  257.859132] Bluetooth: hci2: command tx timeout
[  257.859183] Bluetooth: hci3: command tx timeout
[  258.243789] Bluetooth: hci7: command tx timeout
[  258.244449] Bluetooth: hci5: command tx timeout
[  258.307152] Bluetooth: hci4: command tx timeout
[  258.307757] Bluetooth: hci6: command tx timeout
[  259.715740] Bluetooth: hci0: command tx timeout
[  259.843266] Bluetooth: hci1: command tx timeout
[  259.907205] Bluetooth: hci3: command tx timeout
[  259.907753] Bluetooth: hci2: command tx timeout
[  260.291156] Bluetooth: hci7: command tx timeout
[  260.291755] Bluetooth: hci5: command tx timeout
[  260.356056] Bluetooth: hci4: command tx timeout
[  260.356628] Bluetooth: hci6: command tx timeout
[  313.948122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  313.951943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.958685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.966623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.971765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  314.024430] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  314.028759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  314.032640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  314.038743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  314.042372] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  314.219479] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.228094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.243962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.262609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.266665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  314.278547] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  314.285847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  314.287677] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  314.294513] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  314.299321] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  314.360645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  314.389648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  314.416850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.428480] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  314.439457] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  314.679117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  314.684640] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  314.690971] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  314.705846] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  314.719489] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  314.758035] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  314.760049] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  314.791723] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  314.812444] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  314.817405] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  314.821412] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.834596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  314.843304] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.886385] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  314.887448] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  316.035099] Bluetooth: hci0: command tx timeout
[  316.099253] Bluetooth: hci1: command tx timeout
[  316.355134] Bluetooth: hci3: command tx timeout
[  316.355162] Bluetooth: hci2: command tx timeout
[  316.676536] Bluetooth: hci4: command tx timeout
[  316.867116] Bluetooth: hci7: command tx timeout
[  316.995376] Bluetooth: hci5: command tx timeout
[  317.059452] Bluetooth: hci6: command tx timeout
[  318.084071] Bluetooth: hci0: command tx timeout
[  318.147081] Bluetooth: hci1: command tx timeout
[  318.403076] Bluetooth: hci2: command tx timeout
[  318.403099] Bluetooth: hci3: command tx timeout
[  318.723064] Bluetooth: hci4: command tx timeout
[  318.915442] Bluetooth: hci7: command tx timeout
[  319.044160] Bluetooth: hci5: command tx timeout
[  319.109097] Bluetooth: hci6: command tx timeout
[  320.132396] Bluetooth: hci0: command tx timeout
[  320.196255] Bluetooth: hci1: command tx timeout
[  320.451123] Bluetooth: hci3: command tx timeout
[  320.452101] Bluetooth: hci2: command tx timeout
[  320.772034] Bluetooth: hci4: command tx timeout
[  320.963142] Bluetooth: hci7: command tx timeout
[  321.091146] Bluetooth: hci5: command tx timeout
[  321.155406] Bluetooth: hci6: command tx timeout
[  322.179277] Bluetooth: hci0: command tx timeout
[  322.243144] Bluetooth: hci1: command tx timeout
[  322.501052] Bluetooth: hci2: command tx timeout
[  322.501616] Bluetooth: hci3: command tx timeout
[  322.819100] Bluetooth: hci4: command tx timeout
[  323.013249] Bluetooth: hci7: command tx timeout
[  323.141073] Bluetooth: hci5: command tx timeout
[  323.203211] Bluetooth: hci6: command tx timeout
[  376.221969] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.229142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.233955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.242962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.250681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.540525] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.544286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.547879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.555716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.576806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  376.579496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  376.593967] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  376.595728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  376.606277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  376.614634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  376.623565] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  376.633376] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  376.641780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  376.650554] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  376.660537] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  376.667459] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  376.683111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  376.689616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  376.705325] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  376.711409] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  377.044390] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  377.054821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  377.081509] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  377.082497] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  377.093501] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  377.096914] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  377.101515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  377.106496] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  377.129876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  377.193560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  377.333967] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  377.383608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  377.398617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  377.459551] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  377.477604] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  378.308611] Bluetooth: hci0: command tx timeout
[  378.627321] Bluetooth: hci1: command tx timeout
[  378.756320] Bluetooth: hci4: command tx timeout
[  378.757367] Bluetooth: hci3: command tx timeout
[  378.757888] Bluetooth: hci2: command tx timeout
[  379.139090] Bluetooth: hci7: command tx timeout
[  379.779077] Bluetooth: hci5: command tx timeout
[  379.971085] Bluetooth: hci6: command tx timeout
[  380.356113] Bluetooth: hci0: command tx timeout
[  380.675397] Bluetooth: hci1: command tx timeout
[  380.803146] Bluetooth: hci4: command tx timeout
[  380.803632] Bluetooth: hci2: command tx timeout
[  380.804103] Bluetooth: hci3: command tx timeout
[  381.188373] Bluetooth: hci7: command tx timeout
[  381.827358] Bluetooth: hci5: command tx timeout
[  382.020429] Bluetooth: hci6: command tx timeout
[  382.406021] Bluetooth: hci0: command tx timeout
[  382.723245] Bluetooth: hci1: command tx timeout
[  382.852280] Bluetooth: hci3: command tx timeout
[  382.852316] Bluetooth: hci2: command tx timeout
[  382.852375] Bluetooth: hci4: command tx timeout
[  383.235279] Bluetooth: hci7: command tx timeout
[  383.875085] Bluetooth: hci5: command tx timeout
[  384.067114] Bluetooth: hci6: command tx timeout
[  384.451117] Bluetooth: hci0: command tx timeout
[  384.771373] Bluetooth: hci1: command tx timeout
[  384.899119] Bluetooth: hci3: command tx timeout
[  384.899558] Bluetooth: hci4: command tx timeout
[  384.899622] Bluetooth: hci2: command tx timeout
[  385.284275] Bluetooth: hci7: command tx timeout
[  385.923374] Bluetooth: hci5: command tx timeout
[  386.115462] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
08:05:36  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=00007f83f9c6dd82 RCX=bde53094b5b1327e RDX=0000000000000000
RSI=000000000b6dc639 RDI=00007f83f9c6dd82 RBP=00007f83f9c6dd82 RSP=ffff88806ce089f0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff88806ce08b18 R13=0000000000000000 R14=ffff888017129b80 R15=ffff8880157c0400
RIP=ffffffff815f984b RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe3300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f83f9c451f0 CR3=000000002c3c2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff81354102 RDI=ffff88806cf31850 RBP=ffffffff85c1cbc0 RSP=ffff88806cf089e0
R8 =0000000000000001 R9 =ffff88806cf08ad8 R10=000000000003b6bd R11=00000000000c4f9f
R12=ffffffff81354102 R13=ffff88806cf08ae0 R14=ffff88802709f460 R15=ffff88806cf08a98
RIP=ffffffff8151af59 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd27ffbc540 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe0100000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a764f172b0 CR3=0000000037a20000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000