Warning: Permanently added '[localhost]:61604' (ECDSA) to the list of known hosts.
2025/06/07 13:47:31 fuzzer started
2025/06/07 13:47:32 dialing manager at localhost:40003
syzkaller login: [  109.494980] cgroup: Unknown subsys name 'net'
[  109.631764] cgroup: Unknown subsys name 'cpuset'
[  109.679941] cgroup: Unknown subsys name 'rlimit'
2025/06/07 13:47:53 syscalls: 2214
2025/06/07 13:47:53 code coverage: enabled
2025/06/07 13:47:53 comparison tracing: enabled
2025/06/07 13:47:53 extra coverage: enabled
2025/06/07 13:47:53 setuid sandbox: enabled
2025/06/07 13:47:53 namespace sandbox: enabled
2025/06/07 13:47:53 Android sandbox: enabled
2025/06/07 13:47:53 fault injection: enabled
2025/06/07 13:47:53 leak checking: enabled
2025/06/07 13:47:53 net packet injection: enabled
2025/06/07 13:47:53 net device setup: enabled
2025/06/07 13:47:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/07 13:47:53 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/07 13:47:53 USB emulation: enabled
2025/06/07 13:47:53 hci packet injection: enabled
2025/06/07 13:47:53 wifi device emulation: enabled
2025/06/07 13:47:53 802.15.4 emulation: enabled
2025/06/07 13:47:53 fetching corpus: 0, signal 0/0 (executing program)
2025/06/07 13:47:54 starting 8 fuzzer processes
13:47:54 executing program 0:
r0 = socket(0x15, 0x6, 0x5)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x53}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x734bad359bea7ba4}, 0x20004810)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x8854)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x8644}}, './file0\x00'})
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x98, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x80, 0x9]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x9b, 0x4017ae6, 0xb8]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x8005)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x8c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x78}}}}, [@NL80211_ATTR_KEY_SEQ={0x12, 0xa, "20ff60ddd15432926595822a8fca"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, '\\'}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x8c}}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6tnl0\x00', <r4=>0x0, 0x4, 0x2, 0x8, 0x4, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x42}, 0x700, 0x7, 0x400, 0x9}})
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000780)=0x14)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x70}}, 0x840)
sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd6, 0x74}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4830}, 0x4000)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/zoneinfo\x00', 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000a00)={@empty, r4}, 0x14)
r7 = dup(r6)
ioctl$KDSETMODE(r7, 0x4b3a, 0x0)
sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000b40)=<r8=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000b80)={"282f80ffbe48691d0989ac950a6be01f", r8, 0x0, {}, {0xffffffff, 0x8}, 0x80, [0x7, 0x3f, 0x1, 0x8, 0x80, 0xffffffffffffffff, 0x80000001, 0x6, 0x8000, 0x9, 0x3, 0x13e, 0x5, 0x9, 0xb14, 0x4]})
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000c80)={'veth1_virt_wifi\x00', {0x2, 0x0, @initdev}})

13:47:54 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x2})
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x161002)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={0x0, 0x1, 0x56e})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, 0x1, 0x8, 0x301, 0x0, 0x0, {0xc, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x53c2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x346e242f}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5d}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x2000800)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1f}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x20}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1d}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x13}]}, 0x4c}}, 0x1)
rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00')
r2 = syz_open_dev$mouse(&(0x7f00000004c0), 0x6, 0x2)
ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000500)=""/149)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000004}, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000740)=0x1)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000780)={0x4396, 0x7c, 0x5, 0xcdd, 0x8, [{0x8001, 0x4, 0x7, '\x00', 0x1200}, {0x4, 0x3155f10f, 0x7, '\x00', 0x80}, {0x80000001, 0x0, 0x4e4, '\x00', 0x1082}, {0xb9a, 0x8001, 0xda, '\x00', 0x1880}, {0x380000, 0x2, 0x1, '\x00', 0x1080}, {0xffffffffffffffff, 0x6, 0x3, '\x00', 0x2401}, {0x2, 0xfff, 0x7d0, '\x00', 0x104}, {0x8, 0x6, 0xc02, '\x00', 0x104}]})
ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000980)=""/127)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r5=>r3, {0x2}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x45)

13:47:54 executing program 2:
r0 = memfd_secret(0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0xc800)
sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x3f9, 0x400, 0x70bd2a, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x24}}, 0x4000)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x15eaff06}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4c841)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x4, 0x3, 0xffffffff}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2004a095}, 0x80)
r3 = openat$cgroup_ro(r2, &(0x7f0000000600)='freezer.self_freezing\x00', 0x0, 0x0)
r4 = geteuid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x4000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000780)=0xc)
fstat(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fsetxattr$system_posix_acl(r0, &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {0x1, 0x3}, [{0x2, 0x5, r4}], {0x4, 0x2d724a9db869bf80}, [{0x8, 0x0, r5}, {0x8, 0x0, r6}, {0x8, 0x3, 0xee00}, {0x8, 0x3}, {0x8, 0x2, r7}, {0x8, 0x2, 0xee01}], {0x10, 0x1}, {0x20, 0x1}}, 0x5c, 0x3)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000a00)={&(0x7f00000008c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x74, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xb38d792d6f3f53a4}, 0x800)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000a40)={0x4, 0x2, 0x0, 0xff, 0x5, "fb926062a4d366bec4ea3935f7903160e10cb8", 0x10000, 0x8001})
mknodat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x8000, 0x6)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r3)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x108, r9, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff80}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x30cbee81}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x40020)

13:47:54 executing program 3:
fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000))
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000000c0)={0x3, 0x6, 0x49, &(0x7f0000000040)=""/73})
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x20044058)
ioctl$FIOCLEX(0xffffffffffffffff, 0x5451)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000280)={0x1, 0x3, 0x8})
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6a}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x1000}, 0x10)
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000440)={0x18, 0xd, 0x2, {{0x8, 0x1, 0x1}, 0x95}}, 0x18)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x174, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x8}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x18c}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7f}, @NL80211_ATTR_IE={0x13f, 0x2a, [@fast_bss_trans={0x37, 0x113, {0x80, 0xa, "2b73426466804b0e499a0372fa6c6e7a", "23bc2f522d981f6449586808558d826800b82b954d02fd2afad297ca86da7afe", "cb33e97278ba123d6680cb39b6320fbb93775e1d063c2b58bbf1dc121aa23649", [{0x4, 0x4, "7d3d8d9c"}, {0x3, 0x15, "c74fb453a34d071e0c77d747252e793398257012a8"}, {0x2, 0x1b, "b42edd263c259f6efb3e4034e9bf2bbee54a9d21e12667e8107bb3"}, {0x3, 0x1b, "ac394fafe36a6937dffac08eadb5eb1fc94fc8c9e539de25d8b78c"}, {0x4, 0x5, "c261e7ab61"}, {0x4, 0x26, "8efba4b056e93ae4a80071b6517238ef5e8fe0c008f494a7bf45ca06c192594e62e7b93a85a0"}, {0x4, 0x2, "5dcc"}, {0x2, 0x6, "cd0d1e570954"}, {0x2, 0x20, "c25e56ce7b225d16180e676441bab92e62db0851273c8750ac1cefb0a805f5de"}, {0x3, 0xb, "76eef807a5e98a5d813813"}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @broadcast}}, @sec_chan_ofs={0x3e, 0x1}, @ibss={0x6, 0x2, 0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000006c0))
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8800008}, 0xc, &(0x7f0000000c40)={&(0x7f0000000740)={0x4d4, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe383}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6d, 0x3, "b0ac99fc9d31a939b4b742e2fcddac2113b3c3ef815530f3133f79304a516a813ad6fddb9aab2859d382a9c2cb917c9cdfc2ab5f3e7e7a882d54e0ace9623da140b93b15659461ce7162b149055950e31d95e69f584b1914080b6ff2d39d0eb0ee2214c4ef0ef61180"}, @TIPC_NLA_NODE_ID={0xcb, 0x3, "6ef7cc77f99d5acdb0dea38ee5e1130ddfe1b066688834b894074d53e9a594dc9122e87f4852874817893a451214592f3ebfc0dec0b0c352d76573636f1b5734c47c1a89881a034f86ad6048abdd8d817c6f7e24e729bf91c1e5ecba1225492f08169c6807a7010d9f46d69867f209a18ff03094ededc634398afa3bc8eec5898aa0cb39b421b8a692427948e6a0793dbee3415c43617edbf0aa93153ea38823ae72a54140bbe3fcaffa47119144e496e6a6b445e4f444241b0ad894d6fc637c4e1d5adf8a2a62"}]}, @TIPC_NLA_NODE={0x290, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9b}, @TIPC_NLA_NODE_ID={0x9e, 0x3, "2c95d733cab2d64f00500ff335e2c5f0e65c407c909803bdf6b3e09cdeb4277e4f15fc97ef0a3e4990391e9360911e8bb8cdeba1f8de59fc8b7231d2d8979afc2132a63e0b0ebba6d318f46976d2b6c80a557440690db66e49323a90b0c9ee3b18cd83fee81cbdca84471b6862e892dd77eb121b895206fc6fbfbf0857ba07c988f3e4ee397edda6119846845dce45db39460bcbaf2d2a629eef"}, @TIPC_NLA_NODE_ID={0xc0, 0x3, "7e58e5e86a00f2658684e07305465ab3461e0dc36647afa2f2b78f5b0ed5f50474bfc557eb9f8c623b60847f9854e053aefc10ef07679a0e0926bf478491719d251c9c268445622f7eac9074d9f31e9ad9add0a2036dccb099322e9b7734ab7968ce3646515564d523e003d33fb63b96474ea98af6b9332c7ff4644f6c652c175b6897177a6b33aee550866245a17fb9faebf5be434e48bcc3196672740d7b81c8590ea4dc0d44ed5e5ae49383219df34c04503c25aa6707c0e82000"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "552dfdc4645bb36d7f1b84790286c54f76e1b917973425bef747c9a6ea57cdc281f1da3a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x71, 0x3, "81d064ee282280c96fe39e0a7805cca970ddeeb47655f660fb35abf042d50071f31af5b40c3141bbb124e735c38d8be84e706e34b49d7c1521fb3f347cd661bff2478d70daa65a170047eaf43eec4183f555614242b1b9824c7f3727afbc675f38661bd511ee09bcbf9397d797"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ddc1b1b6d7339c1740db87921148d2d2db4be4d0fb1f2d2df45dd0dbad77509afe3de342"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7115}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x485}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf7a0}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}]}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x20000040}, 0x10)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x94, r0, 0xd30, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x20}}}}, [@NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3ff, 0x1, 0x80000001]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x40}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x4, 0x5, 0xba, 0x2, 0x80000001]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008881}, 0x20000000)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fdatasync(r2)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xb8, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x400c1}, 0x800)
getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0xffff, 0x7f, 0x20, 0x4, 0x8, 0xffff]}, &(0x7f0000001040)=0x78)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x10, 0x3f8, 0x200, 0x70bd2d, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x24004095}, 0x2004c080)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0x90, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080)

[  131.443243] audit: type=1400 audit(1749304074.608:7): avc:  denied  { execmem } for  pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:47:54 executing program 4:
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0x9, 0x20, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]})
getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000100)=0xfffffffffffff801)
shutdown(0xffffffffffffffff, 0x1)
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x800)
ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000240))
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x290, r0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x57}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb500000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4000000000}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7486263e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8e6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x25}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc6a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcf88}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4810}, 0x4)
r1 = syz_open_dev$vcsn(&(0x7f0000000640), 0x0, 0x2000)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x68a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2fee}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x34ba}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2f}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40890}, 0x8800)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x3d30a)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000840)={0x400, 0xfffffff9, 0x0, 0xbad, 0x1})
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000880)={0x0, 0x0, 0x5, 0x6})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4810)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000009c0))
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000a00)={0x7, 0x2, 0x9})
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000a40)=0x64840000)
r3 = syz_mount_image$nfs4(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000b40)=[{&(0x7f0000000b00)="3a636e3767b3dcf8738f16d5578b33514b46699d00790011b3202fef00770a81521dd574c00892f21fe121291ce1da6da3651ed7c7099699df18c56d", 0x3c, 0x5}], 0x40008, &(0x7f0000000b80)={[{'eth\x00'}, {'TIPCv2\x00'}, {'}*'}, {'syz1\x00'}, {'*,:}#+('}], [{@seclabel}, {@uid_lt={'uid<', 0xee00}}, {@uid_eq={'uid', 0x3d, 0xee00}}]})
write$binfmt_elf32(r3, &(0x7f0000000c00)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x4, 0xfb, 0x7, 0x3f, 0x2, 0x3, 0x4, 0x3c1, 0x38, 0x399, 0x1, 0xd, 0x20, 0x1, 0x7, 0x4}, [{0x60000000, 0xfffffffb, 0x942, 0xfffffff8, 0x80000000, 0x0, 0x7f, 0xea7}], "e776a7167bdc25471c3fb602b259ca075d6172693a635d263e46fc8dd58d515fd28091f0d971c482604ec9d14215de7a83d5075b6d7cc19ed56a8a4a653f48cb2d37b4932ed5dbd550beb525b6761a941157752a65bac07186e001fb8a4a335948017b0e14d5a8326846581679989b66c73981ce1ebcd587ee32eca7a0cbb8a4229b9905b9c8ce89b076172d4ed3ae45990365d84ed8313bbb06fa8a04f9317c041fe1", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6fb)

13:47:54 executing program 5:
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000040)=""/218, 0xda, 0x40000020, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x6}}, './file0\x00'})
r1 = epoll_create(0x29)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000200)={0xd90b, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
splice(r2, &(0x7f0000000280)=0x3420, r1, &(0x7f00000002c0)=0x3b57, 0x20, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000340)={0x3, 'team_slave_1\x00', {0x319}, 0x60})
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000380)=0x7, 0x4)
preadv2(r1, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000400)=""/1, 0x1}], 0x2, 0x3ff, 0x8, 0x16)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000480)={0x10000000})
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x351500, 0x0)
getsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
r5 = syz_mount_image$msdos(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x7, &(0x7f0000000a00)=[{&(0x7f0000000700)="9a323386fbc02e03345d7b1ec00cb9ca0fe3ed922d1201152e7768fc5919834dba852ff5d074", 0x26, 0x4}, {&(0x7f0000000740)="48812dfa1e049a8a93cb540082c70f2224b1dd47f6e39924d8ee987e1b2ed51aa0829287e14485b73e32aee9201931772b1e05e7cba72e324e279b76900b41d7a2b3879ee6f1839a465697be047f47e49a8b5762bce2f35b2e87316e3d962e26f186df6823ae3795c6f2d5f61d459deae1589906c4caaf214df05451ed730a4697ebed6231f229f30d6c0434321213bbe5", 0x91, 0x4608}, {&(0x7f0000000800)="89b2aa9c18ef071afcabfac3f272de40bbc6626e71e54d11b58d97c13c8a423aeed032bf", 0x24, 0xa16}, {&(0x7f0000000840), 0x0, 0x9d}, {&(0x7f0000000880)="755a727e7ca95e12b2d86cf35d46f13ca9eaebaa25298fd827a49656417951ec9141f24937c4560f1445d5f208a07f4f5c09c4399104b8c28ff1dba88ade035a5e75f3b8422fe4006784504245e9cb5420c2eac693d3c9f75741db523ed629d90c44ae35ebb00e4e12c8d26e85469b449bef2a8779b8", 0x76}, {&(0x7f0000000900)="2fca5ebb65ea4e3593c8386bbeee9c", 0xf, 0x6}, {&(0x7f0000000940)="9e1ea7985269be6d46db73ca3e6757f4a80f3ea9ad26fd3a8e48fe521081810e28592bf8f3faa77a2ee3bfd146c3974c03ee28b245a0e7f067a94c1da81cffaadad7331b4025ac8462dcb708d82ecdbefbf3888017356da35c16660fd4f5453c81a03edc109c7735bd3fb283c1687a9d608d1427f922e9270e3365b6eedabba956a68c10203994cc26b666210df198ca", 0x90, 0x8}], 0x2000000, &(0x7f0000000ac0)={[{@nodots}], [{@smackfshat={'smackfshat', 0x3d, '/dev/nvram\x00'}}]})
fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000b00), &(0x7f0000000b40), 0x2, 0x2)
read(r0, &(0x7f0000000b80)=""/152, 0x98)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000c40)={0x5d, 0x3dac, 0x7fff, 0x0, 0x1f, 0x7, 0x200}, 0xc)

13:47:54 executing program 6:
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000000)={0x1, 0x200, 0x9, 0x2, 0xfffeffff, 0x849e, 0x200, 0x32, 0x6, 0x0, 0x1, 0x0, 0x0, 0x395})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 'wg2\x00', {}, 0x200})
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x408420, 0x4)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000000c0)=0x1, 0x4)
r1 = syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3ff, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="018a3a56af86e2d8c200c1563c4d0113a8b58604d4c9e1c594aa2413bae1cb20dd35aa7986272d8cee7aa908d72a25f27d72ec2499e3b5720da3cec87b7f0785ec0c4cdf82fe6263507e581be9776d09b34c3381420c3989984f78aa4ad7922b34eb6c4c49678606491f8d15d60f8043d88262456650da510bb81573b7c5d4fcf7a7a07a6a4e1d38c4a8bf3a64a8df1bb850a2ac844de65dd4ff748c1393cbab3c2440061306bd540564fffc44c900aac531b9a60a3434cc", 0xb8, 0x200}, {&(0x7f0000000240)="493799676f5dbe0a190cb4b965d81498d376ea6ca130d43dfe55a1853c9dc8ebc1c7e418c6d31e17b4", 0x29, 0x4}], 0x0, &(0x7f00000002c0)={[{@check_relaxed}, {@session={'session', 0x3d, 0x43}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@uid={'uid', 0x3d, 0xee01}}, {@sbsector={'sbsector', 0x3d, 0x93e}}, {}, {@overriderock}, {@map_off}], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x35, 0x0, 0x34, 0x31, 0x66, 0x37, 0x34], 0x2d, [0x61, 0x33, 0x66, 0x30], 0x2d, [0x34, 0x39, 0x33, 0x32], 0x2d, [0x39, 0x65, 0x37, 0x61], 0x2d, [0x39, 0x31, 0x64, 0x35, 0x31, 0x33, 0x33, 0x36]}}}, {@dont_appraise}, {@permit_directio}, {@seclabel}]})
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000003c0)={0x2, 0xbc, "47423f9e62caa6099df5f6f0e8e9d1fc515720535cfa6377fbdc62e860b031d506170b0f64cb7521baab6c5179157a3db00108c3a04296d2c74931056e598a8516e7109c2418fde3508f7b90f302855838c882f8d35ee960293591ab380a1d285b19bc790d7578f85e1b7b9fb0a4df77a9baa18bc6d3d0e5c54e3bbb7e1ea6dad35e64cf66751bd0fdbcbfa1b025d628bd2901a982dbab1fd43135537baa2c0007db7eee2cdc84caf7509b564c2bc454eab81744df1432c510bc63f9"})
fstatfs(r0, &(0x7f0000000480)=""/118)
r2 = syz_open_dev$vcsa(&(0x7f0000000500), 0x0, 0x200002)
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000540)=0x20, 0x4)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x80040, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0)
ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000600)=""/71)
ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000680)=0x7)
fcntl$getflags(r1, 0x401)
r5 = syz_open_dev$mouse(&(0x7f00000006c0), 0x4, 0x400001)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
syz_mount_image$nfs4(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x1, 0x3, &(0x7f0000000880)=[{&(0x7f00000007c0)="51210e4b6e48871dd085e1decd4b40dd298ebe92aca966028e9d355a02ffc0991d", 0x21, 0x9}, {&(0x7f0000000800)="52888b1446785a1e1fb595201a35", 0xe, 0x6}, {&(0x7f0000000840)="cfeedb5b8700445eba4c62f1a95cbe42d03b9a88a188f82cc1aa5a", 0x1b, 0x3}], 0x1, &(0x7f0000000900)={[{',\\'}, {'sbsector'}, {'overriderockperm'}, {}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x65, 0x36, 0x62, 0x66, 0x33, 0x33], 0x2d, [0x37, 0x35, 0x31, 0x65], 0x2d, [0x37, 0x30, 0x37, 0x66], 0x2d, [0x64, 0x36, 0x64, 0x66], 0x2d, [0x30, 0x34, 0x32, 0x31, 0x65, 0x34, 0x66, 0x30]}}}]})
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)

13:47:54 executing program 7:
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80000)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '$\x00'}], 0xa, "30fc8fdabf23598e5cf1dbc477ee3fa7467f90896fb112192b31ed2306372219ddccd97676553a4779c5ea915fd4dc2a7e9a4765064d46722e013659afec6265e943909530798457cb785988c136fe7e217ead2b22945a954a8395310510349a2fe44d641ae64474556fa37a037f2cc5eded84de6bbd714e2655b3c4dc"}, 0x8b)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0xa0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000240)={'ah\x00'}, &(0x7f0000000280)=0x1e)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000300)={0x3c8, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x10}}}}, [@NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x4, 0x48, 0x6c, 0x24, 0x3, 0x48, 0x2, 0x6, 0xb, 0x48, 0x36, 0x16, 0x3, 0x0, 0x1b, 0x6, 0x24, 0x60, 0x6, 0x6c, 0x4a, 0x5, 0x36, 0x48]}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x1b, 0x2, 0xc, 0x30, 0x30, 0x4, 0x6, 0x2, 0x2, 0x9, 0x4, 0x18, 0x24, 0x4, 0x77, 0x3, 0x16, 0x6c, 0xc, 0x30, 0x5, 0x30, 0x2, 0x62]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x2}, {0x1, 0x7}, {0x2, 0x5}, {0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x3, 0x8}, {0x2, 0x4}, {0x1}, {0x0, 0x7}, {0x2, 0x4}, {0x7, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x9}, {0x3, 0x4}, {0x3, 0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x6}, {}, {0x1, 0x9}, {0x4, 0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x3, 0x7}, {0x4, 0x6}, {0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x3, 0xa}, {0x5, 0x4}, {0x4, 0x3}, {0x4, 0x3}, {0x2, 0x7}, {0x0, 0x3}, {0x0, 0xa}, {0x1, 0x8}, {0x4, 0x7}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x1}, {0x3, 0x7}, {0x1, 0x2}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x5}, {0x1}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0xa}, {0x2, 0x2}, {0x3, 0x3}, {0x2, 0x4}, {0x3, 0x2}, {0x2, 0x5}, {0x3, 0x6}, {0x6, 0x8}, {0x7, 0x3}, {0x7, 0x8}, {0x6, 0x5}, {0x1, 0x9}, {0x2, 0x1}, {0x3, 0x3}, {0x3, 0x8}, {0x7, 0x5}, {0x6, 0xa}, {0x5, 0x6}, {0x4, 0x6}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x9, 0x2, 0xffff, 0x2, 0xffff, 0x8, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x1, 0x1, 0x100, 0x0, 0x3ff, 0x6, 0x59c2]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x24, 0x36, 0x3, 0x60, 0x48, 0x2, 0x3, 0x5, 0x5, 0xb, 0x48, 0xbbed318ebac3066c, 0x6, 0x60, 0x18, 0x6c, 0x18, 0x18, 0xb, 0x36, 0x3, 0x12, 0x6]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x28, 0x2, 0x2, 0x1a, 0x4, 0xc, 0x60, 0x48, 0x30, 0x2, 0xb, 0x3, 0x24, 0x48, 0x3, 0x48, 0x6c, 0x36, 0x30, 0xc, 0x1, 0x18, 0x14, 0x3]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x1b, 0x9, 0xc, 0x16, 0x1b, 0xb, 0x24, 0x60, 0x9, 0x30]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x7}, {0x5, 0xa}, {0x0, 0xa}, {0x5, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0xa}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x6}, {0x0, 0xa}, {0x7, 0x9}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x4}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x98, 0x400, 0x2, 0x2, 0xa63a, 0x7ff, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x3c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x5}, {0x4, 0x9}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x2}, {0x4, 0x2}, {0x7, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x1, 0x1}, {0x5, 0x7}, {0x5, 0x5}, {0x5, 0x7}, {0x6, 0x3}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x3}, {0x3, 0x5}, {0x7}, {0x1, 0x2}, {0x5, 0x4}, {0x6, 0x3}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x6}, {0x3, 0x4}, {0x6, 0x9}, {0x7, 0x1}, {0x5, 0x9}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x7}, {0x2, 0x5}, {0x1, 0x7}, {0x7, 0xa}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x9}, {0x0, 0x8}, {}]}]}]}, @NL80211_ATTR_TX_RATES={0xf4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x100, 0x7f, 0xffff, 0x5, 0x3ff, 0x7, 0x3]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x9}, {0x4, 0x3}, {0x1, 0x1}, {0x4, 0x6}, {0x5, 0x6}, {0x7, 0xa}, {0x7, 0x8}, {0x6, 0x3}, {0x3, 0x9}, {0x7, 0x8}, {0x2, 0x5}, {0x0, 0x5}, {0x5, 0x8}, {0x0, 0x7}, {0x1, 0xa}, {0x3, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x64, 0x18, 0x16, 0x5, 0x12, 0x3, 0x1b, 0x12, 0x6c, 0x16, 0x2, 0x12, 0x6, 0x1, 0x4, 0x18, 0x6c, 0x5, 0x1b, 0x18, 0x5, 0x36]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x66]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x3, 0x9, 0x4, 0x7, 0x8, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x0, 0xfe00, 0x1, 0x970, 0x3ff, 0x9]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{}, {0x5, 0x9}, {0x3, 0x9}, {0x2}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0x9, 0x5, 0x48, 0xb, 0x36, 0x30, 0xb, 0x48, 0x16, 0x24, 0x6c, 0xb, 0x16, 0x18, 0x2, 0x1b, 0x36, 0x1b, 0x1b, 0x36, 0x16, 0x60, 0xb, 0x18, 0x1, 0x6, 0x1, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x400, 0x1f, 0x6, 0x6, 0x0, 0x401, 0xfff7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x3671, 0x9, 0x2, 0xffff, 0x81, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x2, 0x24, 0x16, 0x0, 0x6, 0x5, 0x1b, 0x16, 0x4, 0x60, 0x3a, 0xb, 0x0, 0x4, 0x6, 0x1, 0xb, 0x12, 0x18, 0x24]}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x30, 0x2, 0x12, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf000, 0x800, 0x8e, 0x9, 0x3f, 0x8, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0xa}, {0x3, 0xa}, {0x0, 0x7}, {0x2, 0x8}, {0x5, 0x1}, {0x2, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0x4}, {0x2, 0x8}, {0x6, 0x1}, {0x5, 0x4}, {0x2, 0x8}, {0x3, 0x5}, {0x2, 0x6}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x9}, {0x5, 0xa}, {0x3, 0x5}, {0x4, 0x9}, {0x5, 0xa}, {0x4, 0x2}, {0x7, 0x4}, {0x5}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x4}, {0x3}, {0x5, 0x9}, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x3, 0x5}, {0x2, 0x8}, {0x5}, {0x2, 0x5}, {0x6, 0x8}, {0x6, 0x5}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {}, {0x2, 0x7}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x6}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x0, 0x452d, 0x4, 0x8, 0x0, 0x5]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7}, {0x0, 0x1}, {0x2, 0xa}, {0x7, 0x5}, {0x6, 0x7}, {0x7, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x2, 0x5}, {0x6}, {0x0, 0x4}, {}, {0x5, 0x7}, {0x0, 0x1}, {0x4, 0x2}, {0x2, 0x2}, {0x5, 0x5}, {0x4}, {0x6, 0x2}, {0x7, 0x6}, {0x2, 0xa}, {0x2}, {0x5, 0x4}, {0x7, 0x9}, {0x6, 0x6}, {0x1, 0xa}, {0x1, 0x7}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x3}, {0x3, 0x1}, {0x6, 0x7}, {0x1, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x5, 0x8}, {0x5, 0x8}, {0x6, 0x8}, {0x0, 0x7}, {0x2, 0x1}, {0x6}, {0x6, 0x6}, {0x0, 0x9}, {0x5, 0x7}, {0x3, 0x8}, {0x3, 0x1}, {0x0, 0x9}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x1}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff, 0x3, 0x3ff, 0x6, 0x4, 0x8000, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1ea, 0x5, 0x32, 0xfd66, 0x7dfd, 0x3, 0xb0]}}]}]}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x40000}, 0x44000)
r2 = fcntl$dupfd(r1, 0x0, r0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4c840)
r4 = syz_open_dev$vcsa(&(0x7f00000008c0), 0x7, 0x200)
sendmsg$IPSET_CMD_RENAME(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x5, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r1)
sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x4001)
sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2c}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000040)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8295880c}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8814)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, 0x0, 0x762, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x20}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xffff0001, 0x2]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20004000)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000e80)={0x6, 'wg1\x00', {0xfffffffd}, 0x1})
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x35}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040891}, 0x84)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x54, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x21b}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x94}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x24050000)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001740)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f0000001380)={0x364, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0x81, 0x5, 0x3}, {0x8001, 0x96, 0x0, 0x4}, {0x3f, 0x1, 0xff, 0x20}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x84, 0x58, 0xbb05}, {0xb915, 0x8, 0x7f, 0xfdd}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x364}, 0x1, 0x0, 0x0, 0x4810}, 0x4)

[  132.839387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  132.844170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  132.849100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  132.859740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  132.879425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  132.902882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  132.910564] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  132.920965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  132.945533] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  132.951348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  132.991543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  133.014238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  133.031689] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  133.036212] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  133.039174] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  133.040489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  133.048839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  133.053685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  133.079722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  133.084355] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  133.087360] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  133.088946] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  133.092723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  133.094557] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  133.098655] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  133.101592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  133.102292] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  133.109097] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  133.111884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  133.115631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  133.115643] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  133.123298] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  133.137360] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  133.153340] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  133.161702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  133.186897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  133.212743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  133.225789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  133.228334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  133.255940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  134.976631] Bluetooth: hci0: command tx timeout
[  135.040691] Bluetooth: hci1: command tx timeout
[  135.168118] Bluetooth: hci3: command tx timeout
[  135.232338] Bluetooth: hci7: command tx timeout
[  135.232890] Bluetooth: hci6: command tx timeout
[  135.296093] Bluetooth: hci5: command tx timeout
[  135.296632] Bluetooth: hci2: command tx timeout
[  135.361053] Bluetooth: hci4: command tx timeout
[  137.024102] Bluetooth: hci0: command tx timeout
[  137.090125] Bluetooth: hci1: command tx timeout
[  137.219046] Bluetooth: hci3: command tx timeout
[  137.281186] Bluetooth: hci6: command tx timeout
[  137.281674] Bluetooth: hci7: command tx timeout
[  137.345196] Bluetooth: hci2: command tx timeout
[  137.345659] Bluetooth: hci5: command tx timeout
[  137.408235] Bluetooth: hci4: command tx timeout
[  139.073196] Bluetooth: hci0: command tx timeout
[  139.136366] Bluetooth: hci1: command tx timeout
[  139.264280] Bluetooth: hci3: command tx timeout
[  139.329099] Bluetooth: hci7: command tx timeout
[  139.329608] Bluetooth: hci6: command tx timeout
[  139.394477] Bluetooth: hci2: command tx timeout
[  139.394955] Bluetooth: hci5: command tx timeout
[  139.457117] Bluetooth: hci4: command tx timeout
[  141.121268] Bluetooth: hci0: command tx timeout
[  141.184069] Bluetooth: hci1: command tx timeout
[  141.314922] Bluetooth: hci3: command tx timeout
[  141.376234] Bluetooth: hci6: command tx timeout
[  141.376668] Bluetooth: hci7: command tx timeout
[  141.443163] Bluetooth: hci5: command tx timeout
[  141.443604] Bluetooth: hci2: command tx timeout
[  141.504041] Bluetooth: hci4: command tx timeout
[  193.449942] syz-executor.0 (292) used greatest stack depth: 24848 bytes left
[  195.874948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  195.882304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  195.886480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  195.892810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  195.900762] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  195.907685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  195.918348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  195.931681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  195.950680] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  195.964236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  196.066385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  196.069500] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  196.073512] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  196.078768] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  196.082657] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  196.086543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  196.105320] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  196.145918] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  196.166531] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  196.177592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  196.180524] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  196.191807] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  196.204054] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  196.223842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  196.230498] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  196.233701] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  196.246344] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  196.251919] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  196.270859] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  196.273639] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  196.275938] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  196.282658] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  196.289123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  196.291644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  196.301927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  196.351341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  196.422514] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  196.430561] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  196.444756] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  196.484239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  197.953102] Bluetooth: hci1: command tx timeout
[  198.016166] Bluetooth: hci0: command tx timeout
[  198.272094] Bluetooth: hci3: command tx timeout
[  198.336125] Bluetooth: hci4: command tx timeout
[  198.400220] Bluetooth: hci2: command tx timeout
[  198.464088] Bluetooth: hci7: command tx timeout
[  198.529144] Bluetooth: hci6: command tx timeout
[  198.656087] Bluetooth: hci5: command tx timeout
[  200.000119] Bluetooth: hci1: command tx timeout
[  200.065398] Bluetooth: hci0: command tx timeout
[  200.321326] Bluetooth: hci3: command tx timeout
[  200.384072] Bluetooth: hci4: command tx timeout
[  200.449167] Bluetooth: hci2: command tx timeout
[  200.513065] Bluetooth: hci7: command tx timeout
[  200.577103] Bluetooth: hci6: command tx timeout
[  200.705131] Bluetooth: hci5: command tx timeout
[  202.050075] Bluetooth: hci1: command tx timeout
[  202.114023] Bluetooth: hci0: command tx timeout
[  202.369253] Bluetooth: hci3: command tx timeout
[  202.432069] Bluetooth: hci4: command tx timeout
[  202.497077] Bluetooth: hci2: command tx timeout
[  202.560053] Bluetooth: hci7: command tx timeout
[  202.625250] Bluetooth: hci6: command tx timeout
[  202.752142] Bluetooth: hci5: command tx timeout
[  204.098027] Bluetooth: hci1: command tx timeout
[  204.162436] Bluetooth: hci0: command tx timeout
[  204.417050] Bluetooth: hci3: command tx timeout
[  204.482922] Bluetooth: hci4: command tx timeout
[  204.544319] Bluetooth: hci2: command tx timeout
[  204.611232] Bluetooth: hci7: command tx timeout
[  204.672096] Bluetooth: hci6: command tx timeout
[  204.802012] Bluetooth: hci5: command tx timeout
[  258.074866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  258.080145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  258.089052] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  258.098851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  258.106412] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  258.205475] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  258.217048] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  258.220503] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  258.231869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  258.240708] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  258.336739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  258.342340] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  258.350728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  258.365520] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  258.388788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  258.421643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  258.425480] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  258.431408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  258.470332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  258.478263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  258.487290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  258.506308] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  258.535775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  258.544274] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  258.560967] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  258.584051] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  258.586104] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  258.592795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  258.596618] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  258.617291] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  258.617491] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  258.623730] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  258.628663] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  258.629453] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  258.654254] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  258.661283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  258.685800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  258.694800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  258.696869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  258.755259] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  260.160477] Bluetooth: hci0: command tx timeout
[  260.288058] Bluetooth: hci1: command tx timeout
[  260.481352] Bluetooth: hci2: command tx timeout
[  260.608791] Bluetooth: hci3: command tx timeout
[  260.800421] Bluetooth: hci4: command tx timeout
[  260.864112] Bluetooth: hci7: command tx timeout
[  260.865323] Bluetooth: hci5: command tx timeout
[  260.865561] Bluetooth: hci6: command tx timeout
[  262.208261] Bluetooth: hci0: command tx timeout
[  262.336172] Bluetooth: hci1: command tx timeout
[  262.528248] Bluetooth: hci2: command tx timeout
[  262.658021] Bluetooth: hci3: command tx timeout
[  262.848113] Bluetooth: hci4: command tx timeout
[  262.912145] Bluetooth: hci5: command tx timeout
[  262.912210] Bluetooth: hci7: command tx timeout
[  262.913065] Bluetooth: hci6: command tx timeout
[  264.256080] Bluetooth: hci0: command tx timeout
[  264.385069] Bluetooth: hci1: command tx timeout
[  264.577078] Bluetooth: hci2: command tx timeout
[  264.704057] Bluetooth: hci3: command tx timeout
[  264.896056] Bluetooth: hci4: command tx timeout
[  264.960488] Bluetooth: hci6: command tx timeout
[  264.960965] Bluetooth: hci7: command tx timeout
[  264.961424] Bluetooth: hci5: command tx timeout
[  266.305062] Bluetooth: hci0: command tx timeout
[  266.432305] Bluetooth: hci1: command tx timeout
[  266.626032] Bluetooth: hci2: command tx timeout
[  266.752070] Bluetooth: hci3: command tx timeout
[  266.944220] Bluetooth: hci4: command tx timeout
[  267.008092] Bluetooth: hci5: command tx timeout
[  267.008193] Bluetooth: hci7: command tx timeout
[  267.008547] Bluetooth: hci6: command tx timeout
[  320.470855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  320.481834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  320.485394] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  320.499611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  320.508416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  320.861686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  320.867231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  320.873110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  320.882608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  320.890794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  320.973284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  320.985538] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  320.988562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  320.996610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  321.003687] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  321.009645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  321.034318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  321.046658] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  321.048863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  321.062123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  321.070225] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  321.072583] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  321.083245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  321.083624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  321.089877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  321.099739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  321.106118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  321.108139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  321.153402] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  321.165038] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  321.240171] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  321.251547] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  321.280649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  321.292310] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  321.300638] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  321.375949] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  321.380730] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  321.386623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  321.428671] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  321.432761] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  322.561114] Bluetooth: hci0: command tx timeout
[  323.008397] Bluetooth: hci1: command tx timeout
[  323.073420] Bluetooth: hci3: command tx timeout
[  323.200553] Bluetooth: hci5: command tx timeout
[  323.201389] Bluetooth: hci2: command tx timeout
[  323.329314] Bluetooth: hci7: command tx timeout
[  323.392122] Bluetooth: hci4: command tx timeout
[  324.353231] Bluetooth: hci6: command tx timeout
[  324.609121] Bluetooth: hci0: command tx timeout
[  325.057050] Bluetooth: hci1: command tx timeout
[  325.121091] Bluetooth: hci3: command tx timeout
[  325.249224] Bluetooth: hci5: command tx timeout
[  325.249726] Bluetooth: hci2: command tx timeout
[  325.376321] Bluetooth: hci7: command tx timeout
[  325.440064] Bluetooth: hci4: command tx timeout
[  326.401737] Bluetooth: hci6: command tx timeout
[  326.656059] Bluetooth: hci0: command tx timeout
[  327.105247] Bluetooth: hci1: command tx timeout
[  327.169243] Bluetooth: hci3: command tx timeout
[  327.296318] Bluetooth: hci5: command tx timeout
[  327.296827] Bluetooth: hci2: command tx timeout
[  327.425169] Bluetooth: hci7: command tx timeout
[  327.489062] Bluetooth: hci4: command tx timeout
[  328.449210] Bluetooth: hci6: command tx timeout
[  328.705210] Bluetooth: hci0: command tx timeout
[  329.153066] Bluetooth: hci1: command tx timeout
[  329.216405] Bluetooth: hci3: command tx timeout
[  329.345116] Bluetooth: hci5: command tx timeout
[  329.345600] Bluetooth: hci2: command tx timeout
[  329.473286] Bluetooth: hci7: command tx timeout
[  329.537084] Bluetooth: hci4: command tx timeout
[  330.497833] Bluetooth: hci6: command tx timeout
[  382.867373] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  382.869954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  382.872767] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  382.882622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  382.885136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  383.005699] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  383.008904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  383.011344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  383.018574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  383.023216] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  383.120851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  383.124234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  383.130423] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  383.135694] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  383.139283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  383.268485] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  383.276423] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  383.280521] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  383.283830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  383.303370] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  383.303644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  383.311440] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  383.313435] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  383.314465] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  383.333225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  383.344065] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  383.364437] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  383.369470] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  383.386677] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  383.388747] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  383.392796] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  383.394086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  383.403486] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  383.405617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  383.425144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  383.427856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  383.431359] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  383.433748] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  383.439488] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  383.443537] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  384.961100] Bluetooth: hci0: command tx timeout
[  385.089092] Bluetooth: hci1: command tx timeout
[  385.216092] Bluetooth: hci2: command tx timeout
[  385.409390] Bluetooth: hci3: command tx timeout
[  385.472119] Bluetooth: hci4: command tx timeout
[  385.537042] Bluetooth: hci6: command tx timeout
[  385.601039] Bluetooth: hci7: command tx timeout
[  385.602077] Bluetooth: hci5: command tx timeout
[  387.008048] Bluetooth: hci0: command tx timeout
[  387.136109] Bluetooth: hci1: command tx timeout
[  387.264247] Bluetooth: hci2: command tx timeout
[  387.457257] Bluetooth: hci3: command tx timeout
[  387.521254] Bluetooth: hci4: command tx timeout
[  387.584121] Bluetooth: hci6: command tx timeout
[  387.648137] Bluetooth: hci5: command tx timeout
[  387.648164] Bluetooth: hci7: command tx timeout
[  389.058140] Bluetooth: hci0: command tx timeout
[  389.184238] Bluetooth: hci1: command tx timeout
[  389.312053] Bluetooth: hci2: command tx timeout
[  389.506032] Bluetooth: hci3: command tx timeout
[  389.568323] Bluetooth: hci4: command tx timeout
[  389.632319] Bluetooth: hci6: command tx timeout
[  389.696080] Bluetooth: hci7: command tx timeout
[  389.697064] Bluetooth: hci5: command tx timeout
[  391.104184] Bluetooth: hci0: command tx timeout
[  391.233314] Bluetooth: hci1: command tx timeout
[  391.360139] Bluetooth: hci2: command tx timeout
[  391.553045] Bluetooth: hci3: command tx timeout
[  391.616254] Bluetooth: hci4: command tx timeout
[  391.681096] Bluetooth: hci6: command tx timeout
[  391.746043] Bluetooth: hci5: command tx timeout
[  391.746090] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
13:53:00  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff888031c91b80 RCX=ffff888038db7a2c RDX=0000000000000000
RSI=ffffffff81bb6685 RDI=ffff888031c91f7c RBP=ffff888031c91b80 RSP=ffff888038db7a50
R8 =0000000000000001 R9 =ffff888038db7b18 R10=000000000003b6cd R11=0000000000027f12
R12=0000000000000000 R13=ffff888038db7b20 R14=ffff888031c91b80 R15=ffff888038db7ad8
RIP=ffffffff815abe27 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fda503fb540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055cdf68cb4c8 CR3=0000000037913000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff81353e1d RDI=fffffbfff0b83978 RBP=ffffffff85c1cbc0 RSP=ffff88806cf08990
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b6cd R11=00000000000232f2
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf08a78
RIP=ffffffff8151b1d2 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe68ddcff8 CR3=000000000da6a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000