Debian GNU/Linux 11 syzkaller ttyS0

syzkaller login: [   97.945226] hrtimer: interrupt took 16266681 ns
Warning: Permanently added '[localhost]:4841' (ECDSA) to the list of known hosts.
2025/06/06 09:22:41 fuzzer started
2025/06/06 09:22:42 dialing manager at localhost:39689
[  103.757655] cgroup: Unknown subsys name 'net'
[  103.952576] cgroup: Unknown subsys name 'cpuset'
[  103.991844] cgroup: Unknown subsys name 'rlimit'
2025/06/06 09:23:03 syscalls: 2214
2025/06/06 09:23:03 code coverage: enabled
2025/06/06 09:23:03 comparison tracing: enabled
2025/06/06 09:23:03 extra coverage: enabled
2025/06/06 09:23:03 setuid sandbox: enabled
2025/06/06 09:23:03 namespace sandbox: enabled
2025/06/06 09:23:03 Android sandbox: enabled
2025/06/06 09:23:03 fault injection: enabled
2025/06/06 09:23:03 leak checking: enabled
2025/06/06 09:23:03 net packet injection: enabled
2025/06/06 09:23:03 net device setup: enabled
2025/06/06 09:23:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/06 09:23:03 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/06 09:23:03 USB emulation: enabled
2025/06/06 09:23:03 hci packet injection: enabled
2025/06/06 09:23:03 wifi device emulation: enabled
2025/06/06 09:23:03 802.15.4 emulation: enabled
2025/06/06 09:23:03 fetching corpus: 0, signal 0/0 (executing program)
2025/06/06 09:23:05 starting 8 fuzzer processes
09:23:05 executing program 0:
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x2, 0x3, 0x0, 0x20, 0x9}, &(0x7f0000000040)=0x20)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000140))
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/66, 0x42, 0x0, &(0x7f0000000200)={0x0, 0x989680})
r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80000)
shutdown(r0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000300), 0x4)
r1 = syz_open_dev$vcsa(&(0x7f0000000340), 0x7000, 0x4002)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
r3 = signalfd4(r2, &(0x7f0000000600), 0x8, 0x800)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6308, 0x74}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "46e76d43f8b2a2cc7a428b9dd8bbf86c"}, @NL80211_ATTR_PMKID={0x14, 0x55, "2f57fb67074404af30eb5f773d8c9fef"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4d}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000011}, 0x20008004)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x20008000)
openat$cgroup_ro(r2, &(0x7f00000008c0)='blkio.bfq.sectors\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000900)={0x3, 0xfffffc01, 0x4, 0x6, 0x0, 0x2})
pidfd_send_signal(r2, 0x21, &(0x7f0000000940)={0x31, 0x87, 0x42}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f00000009c0)={0x6, 'virt_wifi0\x00', {0x7fffffff}})
fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000a00), &(0x7f0000000a40)={0x0, 0xfb, 0x16, 0x5, 0x80, "e0fca9a884b3d62a81cbcf115de02478", "aa"}, 0x16, 0x4)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3e0474a, 0x14}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4800)

09:23:05 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/197, &(0x7f0000000100)=0xc5)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfff8}, {0x8, 0x15, 0x400}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x4}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008090}, 0x20000000)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x12c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @local}, 0x7fffffff}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3f, @local, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @mcast1, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x15c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8b}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xcea}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x36b}]}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff813}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x275d}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1}, 0xc080)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0xa}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000880)
r1 = dup(r0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000840)={{0x2, 0x4e24, @empty}, {0x1, @multicast}, 0x26, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 'veth0_virt_wifi\x00'})
r2 = signalfd4(r0, &(0x7f00000008c0)={[0x400]}, 0x8, 0x800)
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000900)=""/200, &(0x7f0000000a00)=0xc8)
sync_file_range(r1, 0x9, 0x80000000, 0x2)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r3, &(0x7f0000000a40)={0x24, @none={0x0, 0x2}}, 0x14)
r4 = accept(r2, &(0x7f0000001200)=@in={0x2, 0x0, @broadcast}, &(0x7f0000001280)=0x80)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001300)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5c7b, 0x74}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r6 = dup(r4)
sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x40, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001500)={0x0, 0xfffffffffffffffc, 0x0, [0x80000001, 0x100000001, 0x100, 0x6625, 0x8], [0x7a4, 0xffffffff, 0xe6, 0x7, 0x0, 0x6, 0x8001, 0x1f, 0x4, 0x9, 0x80000001, 0x3, 0xa128, 0x7b, 0x2, 0x80, 0x1f, 0x5, 0x80000000, 0x9, 0xfffffffffffffff7, 0x4, 0x9, 0x3a0, 0x7, 0x0, 0xffffffffffffffc1, 0x4, 0x7fffffff, 0x7, 0x0, 0xfffffffffffffffc, 0x2, 0x8, 0x3ff, 0xff, 0xd55, 0x40, 0x7, 0x7fff, 0x3f, 0x6, 0x9, 0x1, 0x1, 0x6, 0x280f, 0xffffffffffffff12, 0x8ed0, 0xff, 0x4, 0x80000001, 0x8, 0x80000000, 0x4, 0x2, 0x4, 0x400, 0x0, 0x2, 0x7, 0xfff, 0x1, 0x10001, 0x5, 0x724b7a4d, 0x4, 0x0, 0x9, 0x7, 0x2, 0xfffffffffffffe00, 0x9, 0x400, 0x40, 0x0, 0x6, 0x6, 0x2f, 0x2, 0x0, 0xc8d, 0x0, 0x0, 0x8, 0xfffffffffffffff7, 0x1, 0x5, 0x5e9, 0x7f, 0x1, 0x10001, 0x80000001, 0x100, 0x33, 0x800, 0x5, 0x9, 0x2, 0xfffffffffffff27e, 0x10000, 0x1, 0x8000, 0x2, 0xff, 0x3ff, 0x6, 0x5, 0x1000, 0x8, 0x13, 0x400, 0x10000, 0x1, 0x7fff, 0x1, 0xffffffffffffff54, 0x7f, 0x81, 0x1f, 0x6]})
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x5)

09:23:05 executing program 2:
fcntl$setsig(0xffffffffffffffff, 0xa, 0x36)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x3f}}, './file0\x00'})
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000100)={'erspan0\x00', <r1=>0x0, 0x10, 0x8000, 0x1, 0x800, {{0x46, 0x4, 0x3, 0x3, 0x118, 0x64, 0x0, 0x40, 0x29, 0x0, @private=0xa010101, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0xf1, 0x3, 0xe, [{@rand_addr=0x64010100, 0x5}, {@private=0xa010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x46}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @timestamp_addr={0x44, 0xc, 0xa0, 0x1, 0xc, [{@multicast1, 0x6}]}, @timestamp_addr={0x44, 0xc, 0xc9, 0x1, 0x1, [{@broadcast, 0x1}]}, @timestamp_prespec={0x44, 0x14, 0x33, 0x3, 0x4, [{@local, 0x2}, {@multicast2, 0x976}]}, @timestamp_addr={0x44, 0x34, 0x8b, 0x1, 0x6, [{@loopback, 0x5469}, {@multicast2, 0x7d68d141}, {@local, 0x7fffffff}, {@remote, 0x13}, {@empty, 0x8001}, {@broadcast, 0x1f}]}, @lsrr={0x83, 0x23, 0x3, [@private=0xa010101, @private=0xa010102, @loopback, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @local]}, @timestamp={0x44, 0x8, 0x76, 0x0, 0x9, [0xffffffff]}, @generic={0x86, 0x11, "cd47ffbfbb5d716b38ca506f1141ee"}, @timestamp_prespec={0x44, 0x24, 0x2f, 0x3, 0x4, [{@rand_addr=0x64010101, 0xffff}, {@broadcast, 0x200}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x1}]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x81)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'sit0\x00', <r2=>r1, 0x2f, 0x81, 0x5, 0x400, 0x2, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7800, 0x1, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', <r3=>0x0, 0x29, 0x9, 0x7, 0xff, 0x47, @local, @private1, 0x781, 0x20, 0x3, 0x1}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000b40)={&(0x7f0000000340), 0xc, &(0x7f0000000b00)={&(0x7f0000000500)={0x5d4, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc8, 0x4, "10f4cd11d329e2b55c789221fd5979c047deff0933394ea5198f3ae9c480a8b4296ff6c3056bb1815526d9273c57de825b0d2e7fd924e7f362f9f8f05c79859b83ab60f5707e60f0ebef38991a15cd11c41f082a1c64871c6acf70b451511037019cb0c7f69186581329b98e68bceebe378821054b0074bfb73fc6d6d39d572a76b58a36d1957d65c86e19b2d2ede13d0ad0f80946786f62838a42f9f09f32cb2c8e4d498069358a2a083b26bb4a3fe046ba8aea9c6fc823b59e31bd4dc57b62e583cc8f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e, 0x4, "51f2f89961d18d9ea89ab7b76215b6fefb91e03b1a47c3a35ed75393e8e6cedb3b5dc55f800c7ed5e03d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x59, 0x5, "7e8cfaf7845ec302555fdbdf73066a607e0463af766bfd47a037d16b3d216a618699ec397c17f8c468931eef514f0dbff33130a4c0b74ee4108ea73817b1ccc22193482c8b10958eb74f48a4a2400d1749d3313a32"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x52, 0x4, "c12c23b94d39b47a91e11566b919efdce7e06cc546bf14389798f3978f66eb5f91fd8799cbec86bb9a0c4457b14c91b083a50dc1f49114a0b429ea22c37120312bdac0cbe2082da361599698ca89"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "3e6768c2a078a12e96ee36384376aa8128108cc7bef96a83ec52745cb5a426c7aa618f0d9c8b82e923381613ef5a6bb4fc1936d5dcb225bb5ed22934d22af1f217b5048bac0c08e5cd53e3457909b966e4180ce4d7fd4841a35ff655aff07363641fa0e75e8624c89e6ec7314e4979a4bf824134bc4520121f872bc22c90df4c5c755d118f2bec209f"}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x258, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!.&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xa0{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf78}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.{[{\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&:]$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.@$#\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "2acb29bf5d3ccec14fdff1dbf8e81a45cade1310e964474ff124d9c0d49ac65b3fd665970b9fd9ff806195c2395a3ba7a6cc0918c66434b0c4a6f876307cb214d0fd1bdbb980d970c3c8462fce9d46def8c28bd79cab375c7a3a6ff46b257d99e6005f9af65722bc4c9ca0abc73e5b811397818b5953eb80f4100bdb0d057b6a56b38c366f77cee159ef280911e1d8365c9285bc3a3f288ffa9a16a89fd1df115e6f86662aa28f5bfc0bea86130af079acdb935061e6281a1f358baad3d1e268443a3d1acba5e540611ee6"}, @ETHTOOL_A_BITSET_VALUE={0xb7, 0x4, "00b89bd366d489fee45c991414c01e02eb58654b93e43e200027fd869a23660fb144ae1867381e2a737511f4bbbef78a75b76f9d0267ce4b89519dc8c017dfde4953548289cdae0eac554eec8713066669ae765100717524cb928151a8b027b53f8b58e2f6cfbc69225d4f9098810de3143885369cc2c7ebee48449a0f6d00269796f0175de1671290013b17e3c4643ab9c7df90456444846e4ce8267d37c9eee87c4723ad33e21201beb1133daaf55cb3a117"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x5d4}, 0x1, 0x0, 0x0, 0x4008144}, 0x20004000)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000c80)={{0x1, 0x1, 0x18, <r4=>r0, @out_args}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'syztnl1\x00', r3, 0x4, 0x4, 0x0, 0x0, 0x62, @empty, @ipv4={'\x00', '\xff\xff', @remote}, 0x80, 0x7800, 0x7, 0x421c2a4}})
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000d80)=0x1)
getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000dc0)={@remote, @dev, <r5=>0x0}, &(0x7f0000000e00)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000ec0)={'syztnl2\x00', &(0x7f0000000e40)={'syztnl0\x00', r5, 0x2f, 0x2, 0xde, 0x0, 0x54, @mcast1, @loopback, 0x10, 0x60, 0x7, 0x1}})
ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000f00)={{0xc888, 0x1985}, 0x100, './file0\x00'})
r6 = syz_open_dev$usbmon(&(0x7f0000001040), 0x0, 0x5801)
ioctl$int_in(r6, 0x5421, &(0x7f0000001080)=0x147)
readahead(0xffffffffffffffff, 0x6, 0x7fffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001100)={0x1b0, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4008084}, 0x1)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2001100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x34fb}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000904}, 0x4090)

09:23:05 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000080))
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x1000, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000100)={<r3=>r0, 0x1, 0x40, 0xfa})
rt_sigtimedwait(&(0x7f0000000140)={[0x3ff]}, &(0x7f0000000180), &(0x7f0000000200), 0x8)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)={0x2, 'dummy0\x00', {0x4}, 0x9})
r4 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x20}}, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000380))
clock_gettime(0x0, &(0x7f0000000780)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(r0, &(0x7f0000000700)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000440), 0x0, &(0x7f0000000480)}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/71, 0x47}], 0x1, &(0x7f0000000600)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x2, 0x10000, &(0x7f00000007c0)={r5, r6+10000000})
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
write$snapshot(r10, &(0x7f0000000840)="4a86d94a04bae0ec4ec5a8e790ad33591b9a59ccd5bcfa998dec205be788957fc6dddbd7b1ee", 0x26)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000000880)={{0x1, 0x1, 0x18, r7}, './file0\x00'})
r11 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x1c400, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, &(0x7f0000000900))
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x158, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa09}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000001840)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f0000000bc0)={0xc08, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3c}}}}, [@NL80211_ATTR_CSA_IES={0x4c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x400, 0x1, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x7, 0x800, 0x9, 0x3f, 0x8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x8, 0x40, 0x1, 0xd19, 0x9, 0xe7, 0x100]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x16, 0xba, [0x7, 0x7, 0x8000, 0xb06c, 0x2, 0xa81, 0xf77, 0x3ecb, 0x3]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x81}, @NL80211_ATTR_CSA_IES={0xb94, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x5ba9, 0x7f]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x106, 0xf, [@mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x30, 0x9, 0x2, 0x9}}, @channel_switch={0x25, 0x3, {0x0, 0x64, 0x3}}, @dsss={0x3, 0x1, 0x1}, @cf={0x4, 0x6, {0x3f, 0x6, 0x20, 0x6}}, @gcr_ga={0xbd, 0x6}, @ibss={0x6, 0x2, 0xda}, @perr={0x84, 0xd4, {0xd0, 0xc, [@ext={{}, @broadcast, 0x1, @broadcast, 0xb}, @not_ext={{}, @device_b, 0x3be4, "", 0x28}, @ext={{}, @broadcast, 0xfff, @broadcast, 0x19}, @ext={{}, @device_a, 0x5, @broadcast, 0x42}, @ext={{}, @broadcast, 0x6, @device_a, 0x2a}, @not_ext={{}, @broadcast, 0x800, "", 0x24}, @ext={{}, @broadcast, 0x3ff, @broadcast, 0x2f}, @ext={{}, @broadcast, 0x9, @broadcast, 0x12}, @ext={{}, @broadcast, 0x90ba, @broadcast, 0x16}, @ext={{}, @device_a, 0x7, @device_a, 0x1f}, @ext={{}, @broadcast, 0x6, @device_b, 0x1a}, @not_ext={{}, @device_a, 0x101, "", 0xc}]}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0xbe, 0x0, 0x2, 0xfce, 0x6d, 0x9b, 0x1800]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x7d2, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0xff, 0xf, [@challenge={0x10, 0x1, 0x38}, @perr={0x84, 0x82, {0x7f, 0x8, [@ext={{}, @device_b, 0x7, @broadcast, 0x5}, @not_ext={{}, @broadcast, 0x9, "", 0xd}, @ext={{}, @device_a, 0x80000001, @broadcast, 0x12}, @not_ext={{}, @device_b, 0xffff, "", 0x26}, @ext={{}, @device_a, 0x401, @broadcast, 0x36}, @not_ext={{}, @broadcast, 0x7ff, "", 0x29}, @ext={{}, @device_a, 0x401, @device_b, 0x42}, @not_ext={{}, @device_b, 0x90, "", 0x3a}]}}, @tim={0x5, 0x72, {0x31, 0xd0, 0x8, "eef609f1ceb772ab93e6f59fb19bd0519e163f13594e046de0d5c17d7f1541767346e4606714dc781ded04ea3e42aa857f6ca468683df1e7bc6c87588ca7b1d3b12c03f133fec2216a255db410e5ebee6852b1441ba2f0d5539d74da49103d06ff6c1a53f78a22f1a6d81eec21f9ea"}}]}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@dsss={0x3, 0x1, 0xa}]}, @NL80211_ATTR_IE={0x18f, 0x2a, [@perr={0x84, 0x42, {0x81, 0x4, [@ext={{}, @device_a, 0x7fffffff, @device_b, 0xa}, @ext={{}, @broadcast, 0x4, @device_b, 0x3f}, @not_ext={{}, @broadcast, 0x200, "", 0xd}, @not_ext={{}, @device_a, 0x10001, "", 0x3f}]}}, @tim={0x5, 0x5a, {0xff, 0xc7, 0x7, "8abcb55fc3c186cd42cbfa1153d9f530535230ff30e8e512eb6947ef5f74bed884db8153368c6a19cdd36588dded56be301373679ccfc6ac96578ecf6ac09f5f50a36c3235b1e99aea4aa765f1a4d2dc85ea01bbe8e5e1"}}, @measure_req={0x26, 0x33, {0x2, 0x5, 0x80, "a85f81dd5254221fe7317f067251af27d0d1e876716f776c519e1885213a48811e963076655fa913c0daceafab8705fb"}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xa9, {0x83, 0xb, [@not_ext={{}, @device_a, 0x0, "", 0x19}, @not_ext={{}, @device_b, 0x401, "", 0x33}, @not_ext={{}, @broadcast, 0x800, "", 0xb}, @ext={{}, @device_b, 0x101, @device_b, 0x7}, @ext={{}, @broadcast, 0x70, @device_a, 0x40}, @not_ext={{}, @device_a, 0x10001, "", 0x33}, @not_ext={{}, @device_b, 0x1, "", 0xf}, @not_ext={{}, @device_a, 0x20000, "", 0x17}, @not_ext={{}, @device_a, 0x100, "", 0x12}, @ext={{}, @device_b, 0xfffeffff, @device_a, 0xa}, @ext={{}, @broadcast, 0xdf, @broadcast, 0x1e}]}}, @dsss={0x3, 0x1, 0x9}]}]]}]}, 0xc08}, 0x1, 0x0, 0x0, 0x8080}, 0x24040000)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r8, 0xc08c5336, &(0x7f0000001880)={0x40, 0x6, 0x0, 'queue0\x00', 0x1a})

[  127.271739] audit: type=1400 audit(1749201786.008:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:23:06 executing program 4:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r0=>0x0})
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @remote, 0x8, 0x5, 0x40, 0x0, 0x1, 0x100000010, r0})
r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80800)
shutdown(r1, 0x1)
r2 = dup(r1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r0, 0x1, 0x1, 0x3, 0x1, {{0x14, 0x4, 0x3, 0x15, 0x50, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0xf7, [@private=0xa010100, @multicast2]}, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x7, 0x12, "df945943652ffed2f68e0f723ae833e8"}, {0x6, 0xc, "5f799b82ea6ffc3ff4a4"}, {0x0, 0xd, "cdde01177da0cb67b74d28"}]}]}}}}})
listen(r1, 0x7f)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r2, {0x8}}, './file0\x00'})
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000240)={0x1, 0x80, 0x417, 0x8, 0x40, 0x3, 0xf75}, 0xc)
ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000280)=""/35)
ioctl$TIOCGRS485(r3, 0x542e, &(0x7f00000002c0))
getsockname(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000380)=0x80)
accept(r4, &(0x7f00000003c0)=@ax25={{0x3, @netrom}, [@netrom, @remote, @netrom, @rose, @remote, @rose, @bcast]}, &(0x7f0000000440)=0x80)
r5 = accept(r1, &(0x7f0000000480)=@caif, &(0x7f0000000500)=0x80)
ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000540)={{r3}, 0x7defa86e, 0x81d4, 0x7fffffff})
getpeername$packet(r2, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000600)={0x1}, 0x8)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
fdatasync(r6)

09:23:06 executing program 5:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x404040, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x8, 0x40, [0xffffffff, 0x1f, 0x20, 0x4], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x5, 0x7, 0x80000001, 0x9, 0x1a, "3fd67e72d1a8170c525cb9752890b6a66bec9e"})
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0)
ioctl$CDROMREADMODE1(r1, 0x530d, &(0x7f0000000140)={0x5, 0x7f, 0xff, 0x0, 0x2, 0x7f})
fsetxattr$security_ima(r0, &(0x7f0000000bc0), &(0x7f0000000c00)=@sha1={0x1, "27197cb44a66a173c5d3a482522e3d500bba297e"}, 0x15, 0x3)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000c40), 0x240400, 0x0)
copy_file_range(r2, &(0x7f0000000c80)=0xbb, r1, &(0x7f0000000cc0)=0x7, 0xa910, 0x0)
r3 = gettid()
mq_notify(r1, &(0x7f0000000d00)={0x0, 0x6, 0x4, @tid=r3})
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000d40)={{0x1, 0x1, 0x18, <r4=>r1, {0x69b}}, './file0\x00'})
ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000d80))
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000dc0)=""/216)
ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000ec0)=r3)
ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000f00)=""/61)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000f40)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'})
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000f80), 0x48a100, 0x0)
ioctl$CDROMGETSPINDOWN(r5, 0x531d, &(0x7f0000000fc0))

09:23:06 executing program 6:
fadvise64(0xffffffffffffffff, 0xf, 0x0, 0x1)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x2400c040)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{r1, r2+60000000}}, &(0x7f0000000200))
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000240)={0x3, 0x4, 0x1f, 0x80, 0x40})
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9e40}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfca7}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xcc5}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1f}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3ff}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x25}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4020080}, 0x24000000)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000400))
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x44000880)
r4 = memfd_secret(0x0)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000580)=0xffffffe0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x800)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'ip6tnl0\x00', <r5=>0x0, 0x29, 0xe5, 0x1, 0x1ff, 0x3, @mcast2, @local, 0x40, 0x8, 0x2, 0xfffffffb}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x90, 0x0, 0x108, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3af59c07}, @ETHTOOL_A_BITSET_VALUE={0xa, 0x4, "db1f96db76e4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x55bbfb19e67ebaf3}, 0x44000)
setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000940)={0x6, 0x81}, 0x2)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x409c)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000b00)={0x0, @qipcrtr={0x2a, 0x1, 0x8000}, @l2={0x1f, 0x7, @any, 0x8}, @vsock={0x28, 0x0, 0x2711, @hyper}, 0x8, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000ac0)='team_slave_1\x00', 0x4690, 0x6, 0x7})

09:23:06 executing program 7:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1ff, 0x80100)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf8c25743a356c2d5}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0xd5)
r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7, 0x400000)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x5, 0x1ff}, {0x0, 0x3}, {0x100}, {0x9, 0x8}]})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000280)={0x4bc, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x304, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5a, 0x3, "ef8e306e8abd1b6e42f8a9773d08fe5e5266b47fd2e10d9ceb36197eb9b2ceeb4dd6a4a778ce4fcc8997a5222a6e13b02c6da479041c13e70544375eed295f61e42f33263278bb9deec2a9534c5ae619e80f26a1f39f"}, @TIPC_NLA_NODE_ID={0xe8, 0x3, "f8c1fdee15fee0d5a859032dcede3b15ea5dd7412471611e7cef0a07026ff3632b9cbdbd00a6a15d179cd2dcb33fe26cf75eb52a46dfb9901f061761c2356525a5e751e907a239572319f501fd584522b6e05a7fa7cf7906342c0966f6da01ce1a3aff1a625a312b28e3485238d128175ced8458efe6d6d0323dd5536bff8b69156a2843bcd5d6858a302a0bde2176f189d154c3bd214a8e3bbacf776042934eeebfc5f48ad0e5aed7a765460c4567746b2db2b86d3675b159f61a7ab6d0e204bd09fbe5b179ac9600de59ec3ee12afb5db29d8946ef0a2ce9895ad3a41120823c9bd98c"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "f17d827fc64800936942c1ed823bfece993e085181fab1820db494009b10"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "3af2251e0ecdbffd8a4d8bee6aadc44631bcb5e2"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "526f8010871181d39abd48cf5406985a38839a8072358e3665d1cc2885ea30b3107ba713"}}, @TIPC_NLA_NODE_ID={0xd2, 0x3, "b0576aecc0f40bb82bbe5e8e3603aa40ca66df6dac787547caa267c1a9d9c3185caad5eebd4a8690f11220be751e3b6644dd94ddd7241f10565638f06a95a101402a892413790d8d51c5aae783164ad87c82cf4e6eb5739a1fa32eb067169bf488d4e8a479a1dae6ea57b1890339d8fc683245784ba2416e771ec453dc9e0859e224f398cf75f3a3a588ed65da9af8cadaacfbd7bfebc36a23ea1dbc8d2b993b5837068bc7de49cef2b29ef0219ab14baa9ea941c643b546597f5904e8c13466e1a9acc71ddd0630cd639087c8c9"}, @TIPC_NLA_NODE_ID={0x17, 0x3, "e53010951bd7f65d2a595ca99115a76a7fa99d"}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe2, 0x3, "819a5a45b4d858705fb32ba13798083ca4015c9997588f28b38438cbfc09f616030083009821262fd56ee1dc9fdba1e3885f68674a36dab52f87882e9fb67defa63d679d2eae5b6c5b3f57133d49c4f7a83f3f93a4ecc51a362b867c589cc46eab4452b7fc1d7f0486e9c6286f848dd51fbe900b9842c4d7d1272176a1b837d36eb0a06fda0a0a393d85b178d60b56d8a0628029b224938a0d30d2b945667c75fa4baa8724293385aa235c195339b12ae8dfa78c72d970e3bd7d12d02e52b5fca56a0b26964c0a42c5186012a848724f55640b7d945834443a96eba847d9"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x29, 0x3, "05b34c30f563d826272d390628e298e7012863889973dbaf01a27c0834d10681d1942f7f8f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x55, 0x3, "2cad7797267ba765178cb201102636aacd3c47bfb566a50d24e5950fdf202e0f5cb26b9ae13b01087faa0a3520e3672351fe61dccb9e03ff7b84f246700a23b8f0d83f43f6c27a739c1c8523ec7a8810c7"}]}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
r3 = syz_io_uring_complete(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2)
sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r4, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001)
ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000900)={0x0, 0x4, 0x7fff, 0xffffff7f, 0x7ff, 0x5, 0x10001})
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000940)='./binderfs/custom1\x00')
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044800}, 0x8800)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000a80)={{0x1, 0x1, 0x18, <r5=>r3, {0x0, 0x7fffffff}}, './file0\x00'})
ioctl$KDFONTOP_COPY(r5, 0x4b72, &(0x7f0000000ec0)={0x3, 0x0, 0x12, 0x14, 0x172, &(0x7f0000000ac0)})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000f00)={{0x1, 0x1, 0x18, <r6=>r0, {0x4}}, './file0\x00'})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x18, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000001040)={{0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x24, 0x8, 0x60}, {@multicast1, 0x4e21, 0x4, 0x67, 0xfff, 0xfffffffc}}, 0x44)
io_submit(0x0, 0x1, &(0x7f0000001180)=[&(0x7f0000001140)={0x0, 0x0, 0x0, 0x3, 0x7, r2, &(0x7f00000010c0)="c81d25e790b120f742b0ff87dc38b1d773551dced1f7c26b91d63fcafa34eac5bd22b0d000f9cfda6c2c001784f332974e51b1e5249352bb6e8b39b6df209c6e01cd34e5fe4576f1057171e14aba20537104171a55", 0x55, 0x1ff, 0x0, 0x1}])

[  128.800853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  128.802656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  128.806664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  128.809186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  128.811377] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  128.812811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  128.814454] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  128.816490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  128.817382] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  128.818659] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  128.820677] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  128.826912] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  128.832402] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  128.837254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  128.842168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  128.847891] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  128.851152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  128.855446] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  128.856523] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  128.859477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  128.866692] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  128.867816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.882218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  128.890515] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  128.913351] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  128.915454] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  128.918265] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  128.930575] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  128.934325] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  128.936058] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  128.940936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  128.943457] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  128.946442] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  128.948329] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  128.951922] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  128.973427] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  128.976520] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  128.992387] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  129.010380] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  129.015488] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  130.980132] Bluetooth: hci1: command tx timeout
[  130.980945] Bluetooth: hci0: command tx timeout
[  130.982043] Bluetooth: hci3: command tx timeout
[  131.045073] Bluetooth: hci6: command tx timeout
[  131.046100] Bluetooth: hci2: command tx timeout
[  131.046728] Bluetooth: hci4: command tx timeout
[  131.107122] Bluetooth: hci7: command tx timeout
[  131.107148] Bluetooth: hci5: command tx timeout
[  133.027689] Bluetooth: hci0: command tx timeout
[  133.027706] Bluetooth: hci1: command tx timeout
[  133.030339] Bluetooth: hci3: command tx timeout
[  133.091139] Bluetooth: hci4: command tx timeout
[  133.092682] Bluetooth: hci2: command tx timeout
[  133.092933] Bluetooth: hci6: command tx timeout
[  133.155238] Bluetooth: hci7: command tx timeout
[  133.156751] Bluetooth: hci5: command tx timeout
[  135.076350] Bluetooth: hci3: command tx timeout
[  135.078141] Bluetooth: hci0: command tx timeout
[  135.078581] Bluetooth: hci1: command tx timeout
[  135.139068] Bluetooth: hci6: command tx timeout
[  135.139156] Bluetooth: hci4: command tx timeout
[  135.139618] Bluetooth: hci2: command tx timeout
[  135.204794] Bluetooth: hci5: command tx timeout
[  135.204887] Bluetooth: hci7: command tx timeout
[  137.123676] Bluetooth: hci1: command tx timeout
[  137.125221] Bluetooth: hci0: command tx timeout
[  137.125278] Bluetooth: hci3: command tx timeout
[  137.187124] Bluetooth: hci4: command tx timeout
[  137.188424] Bluetooth: hci2: command tx timeout
[  137.189290] Bluetooth: hci6: command tx timeout
[  137.251314] Bluetooth: hci5: command tx timeout
[  137.252382] Bluetooth: hci7: command tx timeout
[  191.608664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.620329] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.625145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  191.639633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  191.653072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  191.740129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  191.746542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  191.749109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  191.753203] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  191.753228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  191.756327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  191.761433] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  191.763917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  191.767333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  191.771310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  191.801715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  191.812652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  191.817667] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  191.821202] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.827019] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.832575] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.844496] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  191.851205] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.854427] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  191.865495] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  191.872573] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  191.872625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  191.880175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  191.880862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  191.885398] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  191.888461] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  191.903262] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  191.914376] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  191.941942] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  191.963517] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  192.033904] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  192.039772] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  192.045282] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  192.062599] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  192.073784] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  193.699279] Bluetooth: hci0: command tx timeout
[  193.827208] Bluetooth: hci2: command tx timeout
[  193.827221] Bluetooth: hci1: command tx timeout
[  193.956248] Bluetooth: hci4: command tx timeout
[  193.958283] Bluetooth: hci3: command tx timeout
[  194.020374] Bluetooth: hci5: command tx timeout
[  194.020421] Bluetooth: hci6: command tx timeout
[  194.148726] Bluetooth: hci7: command tx timeout
[  195.747141] Bluetooth: hci0: command tx timeout
[  195.876056] Bluetooth: hci2: command tx timeout
[  195.876115] Bluetooth: hci1: command tx timeout
[  196.003093] Bluetooth: hci3: command tx timeout
[  196.003169] Bluetooth: hci4: command tx timeout
[  196.068480] Bluetooth: hci5: command tx timeout
[  196.068622] Bluetooth: hci6: command tx timeout
[  196.196097] Bluetooth: hci7: command tx timeout
[  197.796098] Bluetooth: hci0: command tx timeout
[  197.923123] Bluetooth: hci1: command tx timeout
[  197.923143] Bluetooth: hci2: command tx timeout
[  198.051424] Bluetooth: hci3: command tx timeout
[  198.051591] Bluetooth: hci4: command tx timeout
[  198.115072] Bluetooth: hci5: command tx timeout
[  198.116682] Bluetooth: hci6: command tx timeout
[  198.243242] Bluetooth: hci7: command tx timeout
[  199.845023] Bluetooth: hci0: command tx timeout
[  199.971126] Bluetooth: hci2: command tx timeout
[  199.971324] Bluetooth: hci1: command tx timeout
[  200.101022] Bluetooth: hci4: command tx timeout
[  200.101038] Bluetooth: hci3: command tx timeout
[  200.163172] Bluetooth: hci6: command tx timeout
[  200.163193] Bluetooth: hci5: command tx timeout
[  200.291386] Bluetooth: hci7: command tx timeout
[  254.207042] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  254.210723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  254.220281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  254.232258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  254.243363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  254.454400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  254.460062] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  254.461344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  254.474257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  254.477551] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  254.512212] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  254.515088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  254.520255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  254.531259] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  254.536865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  254.544140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  254.548872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  254.549891] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  254.552645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  254.554938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  254.594167] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  254.594379] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  254.602496] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  254.603466] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  254.618200] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  254.632173] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  254.659865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  254.662856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  254.663916] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  254.675217] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  254.682443] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  254.686753] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  254.691442] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  254.708662] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  254.720299] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  254.727226] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  254.731429] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  254.733418] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  254.779200] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  254.792341] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  256.291151] Bluetooth: hci0: command tx timeout
[  256.547358] Bluetooth: hci1: command tx timeout
[  256.613480] Bluetooth: hci3: command tx timeout
[  256.676796] Bluetooth: hci2: command tx timeout
[  256.804089] Bluetooth: hci6: command tx timeout
[  256.804379] Bluetooth: hci4: command tx timeout
[  256.805723] Bluetooth: hci5: command tx timeout
[  256.932124] Bluetooth: hci7: command tx timeout
[  258.339360] Bluetooth: hci0: command tx timeout
[  258.595376] Bluetooth: hci1: command tx timeout
[  258.659132] Bluetooth: hci3: command tx timeout
[  258.724069] Bluetooth: hci2: command tx timeout
[  258.851070] Bluetooth: hci5: command tx timeout
[  258.852380] Bluetooth: hci4: command tx timeout
[  258.852679] Bluetooth: hci6: command tx timeout
[  258.979087] Bluetooth: hci7: command tx timeout
[  260.387129] Bluetooth: hci0: command tx timeout
[  260.644206] Bluetooth: hci1: command tx timeout
[  260.707068] Bluetooth: hci3: command tx timeout
[  260.771344] Bluetooth: hci2: command tx timeout
[  260.899620] Bluetooth: hci6: command tx timeout
[  260.900881] Bluetooth: hci4: command tx timeout
[  260.901537] Bluetooth: hci5: command tx timeout
[  261.029011] Bluetooth: hci7: command tx timeout
[  262.435095] Bluetooth: hci0: command tx timeout
[  262.691268] Bluetooth: hci1: command tx timeout
[  262.757098] Bluetooth: hci3: command tx timeout
[  262.819457] Bluetooth: hci2: command tx timeout
[  262.947331] Bluetooth: hci5: command tx timeout
[  262.949028] Bluetooth: hci4: command tx timeout
[  262.949044] Bluetooth: hci6: command tx timeout
[  263.075883] Bluetooth: hci7: command tx timeout
[  316.952420] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  316.955457] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  316.962303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  316.969263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  316.972583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  317.182483] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  317.188756] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  317.192429] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  317.199635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  317.206535] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  317.211344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  317.213810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  317.217348] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  317.231577] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  317.237750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  317.249924] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  317.263004] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  317.274419] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  317.281817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  317.289217] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  317.323270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  317.324714] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  317.332811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  317.334663] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  317.338568] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  317.340321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  317.367047] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  317.372190] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  317.374552] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  317.379353] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  317.382129] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  317.387151] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  317.391031] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  317.393471] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  317.401945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  317.409311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  317.412382] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  317.421718] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  317.429380] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  317.435156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  319.011341] Bluetooth: hci0: command tx timeout
[  319.268301] Bluetooth: hci1: command tx timeout
[  319.331083] Bluetooth: hci2: command tx timeout
[  319.395358] Bluetooth: hci3: command tx timeout
[  319.459369] Bluetooth: hci7: command tx timeout
[  319.524070] Bluetooth: hci5: command tx timeout
[  319.524168] Bluetooth: hci4: command tx timeout
[  319.525106] Bluetooth: hci6: command tx timeout
[  321.060092] Bluetooth: hci0: command tx timeout
[  321.315129] Bluetooth: hci1: command tx timeout
[  321.379247] Bluetooth: hci2: command tx timeout
[  321.444114] Bluetooth: hci3: command tx timeout
[  321.508115] Bluetooth: hci7: command tx timeout
[  321.571087] Bluetooth: hci5: command tx timeout
[  321.571123] Bluetooth: hci6: command tx timeout
[  321.572063] Bluetooth: hci4: command tx timeout
[  323.107226] Bluetooth: hci0: command tx timeout
[  323.363061] Bluetooth: hci1: command tx timeout
[  323.428331] Bluetooth: hci2: command tx timeout
[  323.491300] Bluetooth: hci3: command tx timeout
[  323.555169] Bluetooth: hci7: command tx timeout
[  323.619114] Bluetooth: hci6: command tx timeout
[  323.620015] Bluetooth: hci4: command tx timeout
[  323.620535] Bluetooth: hci5: command tx timeout
[  325.156049] Bluetooth: hci0: command tx timeout
[  325.412056] Bluetooth: hci1: command tx timeout
[  325.475307] Bluetooth: hci2: command tx timeout
[  325.539431] Bluetooth: hci3: command tx timeout
[  325.603389] Bluetooth: hci7: command tx timeout
[  325.667135] Bluetooth: hci4: command tx timeout
[  325.668654] Bluetooth: hci5: command tx timeout
[  325.669182] Bluetooth: hci6: command tx timeout
[  379.781870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  379.791139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  379.792782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  379.800291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  379.804846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  380.024793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  380.026539] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  380.027877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  380.031284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  380.033326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  380.153937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  380.156467] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  380.157824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  380.161455] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  380.163608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  380.224461] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  380.236161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  380.238259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  380.250839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  380.278234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  380.305384] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  380.310789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  380.322259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  380.345183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  380.385221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  380.397606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  380.403684] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  380.420259] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  380.438018] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  380.453354] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  380.604749] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  380.619125] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  380.639487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  380.646386] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  380.648060] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  380.650220] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  380.672134] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  380.678301] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  380.686007] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  380.688394] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  381.859194] Bluetooth: hci0: command tx timeout
[  382.051998] Bluetooth: hci1: command tx timeout
[  382.179072] Bluetooth: hci2: command tx timeout
[  382.307203] Bluetooth: hci3: command tx timeout
[  382.499090] Bluetooth: hci5: command tx timeout
[  382.629269] Bluetooth: hci4: command tx timeout
[  382.691289] Bluetooth: hci6: command tx timeout
[  382.819530] Bluetooth: hci7: command tx timeout
[  383.907169] Bluetooth: hci0: command tx timeout
[  384.100003] Bluetooth: hci1: command tx timeout
[  384.227048] Bluetooth: hci2: command tx timeout
[  384.355656] Bluetooth: hci3: command tx timeout
[  384.547119] Bluetooth: hci5: command tx timeout
[  384.675056] Bluetooth: hci4: command tx timeout
[  384.739091] Bluetooth: hci6: command tx timeout
[  384.868120] Bluetooth: hci7: command tx timeout
[  385.956319] Bluetooth: hci0: command tx timeout
[  386.147086] Bluetooth: hci1: command tx timeout
[  386.275523] Bluetooth: hci2: command tx timeout
[  386.403370] Bluetooth: hci3: command tx timeout
[  386.595099] Bluetooth: hci5: command tx timeout
[  386.723065] Bluetooth: hci4: command tx timeout
[  386.787306] Bluetooth: hci6: command tx timeout
[  386.915275] Bluetooth: hci7: command tx timeout
[  388.003404] Bluetooth: hci0: command tx timeout
[  388.197063] Bluetooth: hci1: command tx timeout
[  388.324080] Bluetooth: hci2: command tx timeout
[  388.452466] Bluetooth: hci3: command tx timeout
[  388.644000] Bluetooth: hci5: command tx timeout
[  388.771261] Bluetooth: hci4: command tx timeout
[  388.835088] Bluetooth: hci6: command tx timeout
[  388.963129] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
09:28:10  Registers:
info registers vcpu 0
RAX=ffff88800946adc0 RBX=ffff888016608000 RCX=ffffffff81b60341 RDX=1ffff11002cc110d
RSI=ffffffff81bfc526 RDI=ffff88800946adc0 RBP=ffff88802b75c400 RSP=ffff8880281c7d30
R8 =0000000000000001 R9 =ffffed10056eb882 R10=ffff88802b75c400 R11=0000000000000001
R12=0000000000000000 R13=ffff8880281c7e98 R14=ffff88800946ad00 R15=dffffc0000000000
RIP=ffffffff84b64924 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe5e00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f86283828e0 CR3=0000000033766000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff0000ffffffffff00000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=00007f5655460699 RCX=ffff888029c9f5cc RDX=0000000000000002
RSI=ffffffff85c1cbc0 RDI=ffff888034c5c1a8 RBP=00007f5655460699 RSP=ffff888029c9f5e0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffffffff815f9b42 R13=0000000000000202 R14=ffff888034c5b700 R15=0000000000000003
RIP=ffffffff8151aef5 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007febdc9901f0 CR3=000000002ff44000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000