Warning: Permanently added '[localhost]:6951' (ECDSA) to the list of known hosts.
2025/06/16 13:36:43 fuzzer started
2025/06/16 13:36:44 dialing manager at localhost:42061
syzkaller login: [  112.275657] cgroup: Unknown subsys name 'net'
[  112.386118] cgroup: Unknown subsys name 'cpuset'
[  112.428627] cgroup: Unknown subsys name 'rlimit'
2025/06/16 13:37:01 syscalls: 2214
2025/06/16 13:37:01 code coverage: enabled
2025/06/16 13:37:01 comparison tracing: enabled
2025/06/16 13:37:01 extra coverage: enabled
2025/06/16 13:37:01 setuid sandbox: enabled
2025/06/16 13:37:01 namespace sandbox: enabled
2025/06/16 13:37:01 Android sandbox: enabled
2025/06/16 13:37:01 fault injection: enabled
2025/06/16 13:37:01 leak checking: enabled
2025/06/16 13:37:01 net packet injection: enabled
2025/06/16 13:37:01 net device setup: enabled
2025/06/16 13:37:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/16 13:37:01 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/16 13:37:01 USB emulation: enabled
2025/06/16 13:37:01 hci packet injection: enabled
2025/06/16 13:37:01 wifi device emulation: enabled
2025/06/16 13:37:01 802.15.4 emulation: enabled
2025/06/16 13:37:01 fetching corpus: 0, signal 0/0 (executing program)
2025/06/16 13:37:03 starting 8 fuzzer processes
13:37:03 executing program 0:
prctl$PR_MCE_KILL_GET(0x22)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/rcupdate', 0x1, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000040)={0x2, 0x100, 0x5, 0x76, 0x6, 0x3})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xedb0}}, './file0\x00'})
ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f00000000c0)={{0x2, 0xffffffff, 0x1, 0x40, 0xfffffffd, 0x6}, 0x22f, [0x0, 0x6de, 0x80000001, 0x8, 0x2e61, 0x530a, 0x3, 0x3, 0x8, 0x8000, 0x9, 0x1f, 0x9, 0x6, 0x3, 0x951, 0x80000000, 0xa1, 0x69, 0x3, 0x401, 0x5, 0xfffffc00, 0x1f, 0x0, 0x4, 0x6, 0x80000000, 0x10001, 0x100, 0x7, 0x7ff, 0x2, 0x7, 0x8, 0x8, 0x6, 0x6, 0x3, 0x5, 0x9, 0xa33, 0xa5d2, 0xbe, 0x7, 0x200, 0x4, 0x8, 0x6, 0x8, 0x7, 0x2, 0x2, 0x4, 0x5, 0x1, 0x1, 0x18000000, 0x0, 0x0, 0x8000, 0xc6, 0x6, 0x7fff, 0x80000000, 0x19b7, 0x2, 0x3d2a, 0x2, 0x1, 0x1, 0xc8d3, 0x2, 0xfffffff8, 0x3f, 0x4, 0xfffffffe, 0x6, 0x1, 0xfffffffd, 0x401, 0x2, 0x1, 0xcb57, 0x3, 0xb5, 0x4, 0x3f, 0x9, 0xe1, 0xad6, 0x20, 0x10001, 0xc900000, 0xcca0, 0x6, 0x1d88, 0xfffffff7, 0x1, 0x800, 0x1f, 0x58, 0x14d28d97, 0x8, 0x7f, 0x1, 0x9, 0x2, 0x7, 0xffff, 0x9, 0x0, 0x80000000, 0xff, 0x81, 0x4, 0x5, 0x408, 0x1, 0x4, 0x3, 0x5, 0x6, 0x4, 0x81, 0x3f, 0x8000, 0xf83, 0x2, 0x60, 0xeed, 0xffffffe0, 0x1000, 0x8, 0x7, 0x9, 0x6, 0x7f, 0x101, 0x400, 0xb385, 0x1000, 0x6, 0x7fffffff, 0x8, 0x6, 0x7fffffff, 0x101, 0xfffffffd, 0x7fffffff, 0x0, 0x1f, 0x9, 0x8022, 0x80000001, 0x3ff, 0x401, 0x0, 0x80, 0x3ff, 0x80000000, 0x7ff, 0x95ca, 0x6, 0x10001, 0x2, 0x9, 0x8, 0x23, 0x0, 0x7, 0x1000, 0x39, 0x7, 0x1, 0x8, 0xff, 0x1, 0x81, 0x7fffffff, 0x9, 0xfd6, 0x100, 0x200000, 0xffff, 0x8000, 0xa09, 0x4, 0x5, 0x10000, 0x0, 0x40, 0xed, 0x0, 0x7, 0x1, 0xc7d, 0xfffffff9, 0x5, 0x1, 0x69, 0xb6a21a6f, 0x3, 0x80, 0x1, 0x3, 0x38, 0x645e, 0x6, 0x3, 0x5, 0x4, 0xb73, 0x6, 0x100, 0x0, 0x1, 0x6, 0x9, 0x4, 0x2, 0x101, 0x80, 0xdf3, 0x7, 0x1f, 0x1f, 0x4, 0x4, 0xffffffff, 0x3, 0x83, 0x1, 0x10001, 0x5, 0x3, 0x1, 0x800, 0x8, 0x2e119340, 0x5, 0x5, 0x1, 0x8, 0x101, 0x9, 0x7, 0x6, 0x1, 0x6, 0x4, 0x9f0b, 0x4, 0x1, 0x80000000, 0x100, 0x4490, 0x40, 0xfff, 0x200, 0xabd8, 0x6, 0x7, 0x2, 0x5, 0x2d, 0x80000000, 0x800, 0x20, 0x401, 0x8000, 0x8, 0x4, 0x9, 0x3ff, 0x6b, 0x0, 0xff, 0x100, 0x80000000, 0x70, 0x5, 0x74, 0x6, 0x5, 0x81, 0x5, 0x7, 0x7fff, 0x20, 0x8000, 0x401, 0xbca, 0x7f, 0x371, 0x6, 0xaff, 0x5, 0x3, 0x8001, 0x8, 0x3, 0x5, 0x78, 0x8, 0xfffffff9, 0x40, 0x18a880, 0x8001, 0x9, 0x6, 0x8001, 0x0, 0x4, 0x8000, 0xf, 0x8, 0x10000, 0x14, 0x200, 0x0, 0x30, 0xa8fa, 0xfea, 0x8001, 0x3, 0xf1, 0x1, 0x3, 0x7, 0x1, 0x6, 0x5, 0x2, 0x800, 0x2, 0x9, 0xffff, 0x0, 0x1c7, 0x4, 0x8, 0x401, 0x29f40000, 0x0, 0x60ff, 0xe38, 0x6, 0x538, 0x8f2, 0x0, 0x10001, 0x7ff, 0x5e57fe18, 0x5, 0x0, 0xb3, 0xc0, 0x7, 0x800, 0x1000, 0x7, 0x0, 0x7118, 0x800, 0x5, 0x6, 0xda, 0xed62, 0x1, 0x40, 0x101, 0x5, 0x40, 0x5, 0x516e, 0x7fffffff, 0x2, 0x5, 0x5, 0xe5700b0a, 0x20, 0x80, 0xfffffffd, 0x1000, 0x8, 0x5396, 0x9, 0x3, 0x1000, 0x2, 0x5, 0x20, 0x6, 0x8, 0xa5dd, 0x101, 0x5, 0x5ce, 0x8, 0x3, 0xe0000000, 0x10001, 0x4be, 0x6, 0x6, 0x2, 0x8, 0x3ff, 0x1, 0x3, 0x2, 0x5, 0x6, 0x7f, 0x31, 0x5cd, 0x2b62df5d, 0x9, 0x2, 0x80000001, 0x40, 0x6, 0x762, 0x60, 0x0, 0x0, 0x5, 0x3f, 0x4, 0x8001, 0x4, 0x5, 0x0, 0x7, 0x1000, 0x7f, 0x9c, 0x9, 0x3, 0x8, 0x5, 0x3ff, 0x2, 0xe3, 0x5, 0x8, 0x0, 0x2, 0x396, 0x5ab, 0x400, 0x8, 0x7fff, 0x4, 0x9d6, 0xffffff75, 0x1, 0x1, 0x8, 0x3, 0xffffff9b, 0x0, 0x2, 0x5, 0x8, 0x9, 0x9, 0x1f, 0x9, 0x7, 0x1, 0x57, 0x0, 0x80000001, 0x0, 0x7fff, 0x7fff, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0xab, 0x9, 0x1, 0x7ff, 0x5ad, 0x4, 0x200, 0x0, 0x101, 0xa0e2, 0x426, 0xdb, 0xb98, 0x1dbd, 0x1, 0x0, 0x1, 0x80, 0x0, 0xf48, 0x7fffffff, 0x0, 0xd0, 0x9, 0x80, 0x80000001, 0x0, 0x9, 0x3, 0x4, 0x9, 0x3f, 0x2, 0x7, 0x3, 0x4, 0x5, 0x5, 0xfffffc01, 0x0, 0x9, 0x1f, 0x9, 0x5, 0xffff, 0x40, 0x7ff, 0x8d4e, 0x8, 0xffff, 0x3ff, 0x8d, 0x8, 0x1, 0xffffff73, 0xffff0000, 0x80000001, 0x0, 0xb3, 0x8001, 0x8, 0x10000, 0xc9360000, 0x1, 0xf1, 0x1, 0x8da, 0x6, 0xfff, 0x7, 0x1, 0x9, 0x3, 0x81, 0x8, 0x20, 0x70, 0x5, 0x1, 0x8b3, 0x10000, 0x1, 0x100, 0x2, 0x0, 0x7, 0x0, 0x7ff, 0x8, 0x8000, 0x81, 0x800, 0x8, 0x0, 0xda, 0x51, 0x9a0, 0x8, 0x6, 0x1, 0x10000, 0x8, 0xffff, 0x0, 0x81, 0x3f, 0x0, 0x8, 0x2, 0x7f, 0x5, 0x4, 0x1000, 0x3, 0x8242, 0x4, 0x7fff, 0x2, 0x6, 0x8, 0x1, 0x1ff, 0x8001, 0x3, 0x8be, 0x2, 0x1f, 0x6, 0x1, 0x101, 0x101, 0x7ff, 0x5, 0x3c5, 0xffff2417, 0x3, 0x7ff, 0x2, 0xa9, 0x7, 0x401, 0x1, 0x3f, 0x0, 0x2, 0x3, 0xff, 0x100, 0x7, 0x30435596, 0x5, 0x9, 0x0, 0x7, 0x0, 0x2, 0xc500, 0x1f, 0x9, 0x0, 0x67, 0x9d1, 0x0, 0x75c50, 0x3a9, 0x9fb, 0x5, 0x9, 0x2, 0x0, 0x2ca7, 0x6, 0x6, 0x2, 0x10000, 0x100, 0x5, 0xfffffff8, 0x7, 0x40, 0x7fff, 0x400, 0xffff, 0x4, 0x80000000, 0xbd96, 0x64, 0x44, 0x0, 0x0, 0x6, 0x4, 0x29, 0x6, 0x1, 0x401, 0x5, 0x9, 0xfffffffe, 0xfffffffe, 0x0, 0x4, 0x1, 0x101, 0x8, 0x0, 0x3, 0xff, 0x9b4, 0x8000, 0x55a, 0x1f, 0x1, 0xffff4c5e, 0x9, 0x6, 0x0, 0x1c, 0x6, 0x8, 0x4, 0x3ff, 0x2, 0x200, 0x4, 0xb6, 0x7, 0x5, 0x13315ac6, 0xfffffeff, 0x5, 0x9, 0x2, 0x3, 0x9, 0xfffffffc, 0xd34f, 0x10000, 0x4, 0x1e0, 0x9, 0x887, 0x1, 0x9, 0x9, 0x523696c8, 0x20, 0x8001, 0x1, 0x6, 0x1, 0x0, 0x7ff, 0x80000000, 0x40, 0x0, 0x8000, 0x5000000, 0x258, 0x9, 0xfffffff7, 0x2, 0x0, 0x10000, 0x2, 0x80000000, 0x8001, 0x9, 0x2, 0x3a000000, 0x2, 0xffff, 0x200, 0xcf, 0x0, 0xff, 0xfffffffc, 0x1, 0x2, 0x100, 0x20, 0x8, 0x80000001, 0x77347dcc, 0x74da, 0x80, 0xae8, 0x9e, 0x7fffffff, 0xfff, 0xffff55cb, 0xfffffffc, 0x1, 0x6, 0x9, 0x2, 0x29fb, 0x9, 0x5, 0x7fffffff, 0x8, 0x3f, 0x7f, 0x8, 0xa3, 0x92, 0xffff04e7, 0xfffffff3, 0xc0, 0x3, 0x418a, 0x10000, 0x7, 0x6, 0x9, 0xdae8, 0x100, 0xdd, 0x8000, 0x3b6, 0x6, 0x0, 0x3, 0x1, 0x6, 0x9885, 0x1, 0x1, 0x6dad, 0x400, 0x1ff, 0xffffa7aa, 0xffffffff, 0x3f, 0x8000, 0xfff, 0x1f, 0x9, 0x9, 0x7fffffff, 0x0, 0x81, 0x0, 0x0, 0xfff, 0x7, 0x1, 0x8000, 0x0, 0x7f, 0x401, 0x0, 0x9, 0x2, 0x56, 0x4, 0x800, 0xcfd, 0x6d, 0x7, 0x40, 0x7fff, 0x3f, 0x5, 0x7, 0xffff, 0x7, 0x3, 0x7fffffff, 0xc2c0, 0x7fffffff, 0x7fff, 0x800, 0xdc667e3, 0x7, 0xadd6, 0x80000001, 0xffff, 0xb2400000, 0x8, 0x3, 0x200, 0x88, 0x200, 0x1, 0x400, 0x7fffffff, 0x8, 0x7, 0x3, 0x1f, 0x9, 0x800, 0x2, 0x2, 0x400, 0x101, 0x1, 0x2, 0x20, 0x2, 0xffffffff, 0x7, 0x94, 0x55e, 0x10001, 0x4, 0x4, 0x5, 0x7, 0x0, 0xfffffbff, 0x81, 0x4, 0x1, 0x4, 0x8, 0xb0, 0x4, 0x28, 0x9, 0x8, 0x5, 0xe5f, 0x4, 0x4, 0x8001, 0x54a, 0x27e, 0x8001, 0x0, 0x5ae8, 0x7, 0x80, 0x99c1, 0x5, 0x846, 0x7, 0x1, 0xffffffe0, 0x6, 0x1, 0xffffffff, 0x7, 0x0, 0x8001, 0x4, 0x6, 0xe04d, 0x2e, 0x0, 0x7, 0x0, 0x0, 0xa8b, 0x7, 0x6, 0x0, 0x9, 0x8, 0x8, 0x3, 0xffff765d, 0x7ff, 0x6e94, 0x7fff, 0x9f, 0x401, 0x1ff, 0x80, 0x3, 0x24, 0x8001, 0x1, 0x6, 0x7, 0x101, 0x2, 0xfffff5cc, 0x8, 0x53d0, 0x8, 0x7ff, 0x10000, 0x6, 0x4, 0x4, 0x5, 0xff, 0x3f, 0x80000000, 0x6, 0x0, 0x3, 0x8000, 0x8001, 0x3f, 0x20, 0x1, 0x10001, 0x8, 0x7, 0x3, 0x0, 0x1, 0xff, 0x72, 0x6, 0x3, 0x7fff, 0xfff, 0x2, 0x8, 0x2, 0x81, 0xec, 0x100, 0x5, 0x4, 0x4, 0x2, 0x10000, 0x10000, 0x0, 0x8, 0x454, 0x5, 0xf31, 0x1, 0x3, 0x0, 0x3f, 0x5, 0x5, 0x7f, 0x466d, 0x913, 0x800, 0x3]})
mkdir(&(0x7f0000001100)='./file0\x00', 0x9a)
mount$9p_fd(0x0, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x30080, &(0x7f00000011c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@cache_loose}, {@access_any}, {@privport}, {@debug={'debug', 0x3d, 0x8}}, {@access_client}, {@access_client}, {@uname={'uname', 0x3d, '@!'}}], [{@smackfshat={'smackfshat', 0x3d, '&!]2)'}}, {@euid_gt={'euid>', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, '^:#'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@obj_user}, {@dont_measure}, {@fowner_lt}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_lt={'uid<', 0xee00}}]}})
ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000001340)='veth0\x00')
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000013c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x400}}, './file0\x00'})
prctl$PR_SET_TSC(0x1a, 0x2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000001400)={{0x1, 0x1, 0x18, <r4=>r3, {0xfffffc87}}, './file0\x00'})
ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000001440))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001480)={{0x1, 0x1, 0x18, <r5=>r3}, '.\x00'})
setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f00000014c0)=0x87f, 0x2)
syz_mount_image$iso9660(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x9df2, 0x5, &(0x7f0000001840)=[{&(0x7f0000001580)="8df6f0a22617c571ab25e366079d6a6ee8f6be45d8e6b38554b850b51c54442b5cf682b44b9136b89f0f3c9af468d3a363c4cb8ac9a7a3bfa49e7ee41ae4f537559c2eb7d0dbbc169f5ed99e8b42947b0695e2ceccb809b728f6a31d916ab26a2988c0f1", 0x64, 0x4}, {&(0x7f0000001600)="223b0f7b55717b43034594f3ec316baf5b0f952f5af7e4186d091ff3d1d585b0a643e0d70b9792b9c9dec13ae967521a6159100225998ae721d14d7713b195cb7973f0c3f2c04abf4891ca51f1730368e10a67130f696e68e303c753853b5c463f0ca83f2f3bb71dd267077dc2a6b1957c974ebb597bbb872e8aa89db13bee51224df6566534acd7514e156bbe7b6821b1266520cadbcdb48b262584acde70ef", 0xa0, 0xff0}, {&(0x7f00000016c0)="a06a6315cc695df66acdb13c1f48e8fc847ed90cfae1662f00047a2e3fb16c3a0e27ec4cc8edad9866d4216cea67bd1f808b1bc78afb76eb84d390cfc0de4c", 0x3f, 0xbda1}, {&(0x7f0000001700)="7b455a35517a625c2addc945ade85e85ceb42a423e865dd97b3a6159e1c5a8afac45c20d897230deea72077e801b9a110c5eb2db9ccd1a30486427e41ae8dbd2b95ac417dc49eac0603884ba7aa86a539558fcd51afb435a2792120847497a809198b7f764c2d0253d275e40ab60e894e1e0b5b632b55cd26b508a5156e182cd0d58ddfdb34d1e9037617cb4623541c36c2545efd188d7137d5aac02c5ed79b6ed04bce055c43bc9f86b0e76d29841e1d515a36cd7a1b5bb52d69bf14c2b311d36db29a1972e0c551b56abac38bd4abf67de06615f9d7cb189d7ebccd95d093caa05b17b48f7a99b1c744c1d", 0xec, 0x6}, {&(0x7f0000001800)="db6443fada3f2671be294b0ee96186bf630463a5f188d5de8f35c5e1efd472049f0e382ee8b1e32e7f61012d8ae1c437df8ed0bd15798a77fc4d", 0x3a, 0x1}], 0xc, &(0x7f00000018c0)={[{@hide}], [{@permit_directio}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@seclabel}]})
getresgid(&(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980))
pipe2(&(0x7f00000019c0)={<r6=>0xffffffffffffffff}, 0xcf30eb9311468c0f)
renameat(r6, &(0x7f0000001a00)='./file1\x00', r3, &(0x7f0000001a40)='./file0\x00')
mount$bind(&(0x7f0000001a80)='./file1\x00', &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x211446d, 0x0)

13:37:03 executing program 1:
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000))
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x800, &(0x7f0000000080))
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f00000001c0)={0x10b4, 0x14, 0x400, 0x70bd28, 0x25dfdbfd, {0x18, 0x81}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "14b63f772b91dc1020d9320459bb6d33322a18a9585e19cb68ebce3d0df35cb553f19594d3be5c13fc916c7d763fe86a7a9a98336dc1fe252e36c475532f0130bb2d3eb5de85e0d438090e5f7c7ceb0e0a29dab14460f03617da00a13e53d7930a06fe830627277de43baf5bb9c3569f32f50f98607ffa33760eb239be7d091f73d5386e43b0680ed2c545a22fa4ee5fd61b3c187005cc20c74e0babeed3fd31725110560b1352952ea3ce9ff713af3801802b8e8092e0fa529e9a56703c775d689f1b78f78fe8531a469657fd3ee26cc6e65dee847a2437a2d87b5cc57194d2a850d2ab3a8899ea896084c35ac7f8684b42e7b9d960af726a3c8fd9ca23d66ae644bec47c98105d621a8762e37e8182fea83d061cae346ceccfaba772dd3a1c9443f6d910c6000878581a7b1c2e7afcb8249d5733b3186c60073d9ea1d5b279cfa53908e5858648be4d8ab1ac69181dff7a51e3e2eabbee82714c6974b887a2499648a6426518349ce0ddd05f9ef88a7f7cf072db38a1f8bde32e02289246fda6d2c058977e694b7bac751d633f2cb3e352b7f2e1e6a40dcab19cc4b59b40ef550164ea860d8b965eea69db433ccfcccbfb94ff1334e416adea76b2a8e38984a13a55f5daaf30641ba498bcc46f939b368d402c8e101c1576577b9a8ef9eeb07c488f9a4cb16d7e0c73b5595e90998d4591d7f0ee360e3ea46816e682d3560b673e6956f297d615755ed5fcc547627ffbfa55dc7fbeb2924b19989bbc081d8e96b675cfc3348614819408f7d1d36afb0f1470486fe3b49d06b3befdad790c345855d2192d4b7443a22dc52a4f43aa105ab14ce5cfc9dcbcbdced2a4ffb2852dd33ef27c74bffbdbc7b475a625e1ebbacc6140a1055c3180206a1debc3bb544b7b1511c331384c9e892a60a44111fcc1983e062e1a96a398814021c94c646fe8e121079578c1badd16d8101841a1a94a182fb2a84b7644a2705e8ba82f1bcfdad2c97f9b263ab1c8525d462f76fe82bb7ab1d2b575d4e2a773cedd563ace8f06716efc84ddf61fefdbbbf9aa3f7c59c4ccb860ff9f19d134cd181ea32d5cc10cdf55e7e20341cc3ce172070efa310b578c93cde9e9d39128b410b446383ca4cb1e16734c6b6811ccd8e17195da9e74e375f4a5fa4ae86b28edfcf0ce6865a6124ce2bfaad008cd3efd8a7619c4a6e157773f0eac79ddbddf7f31078f4e25ae90551875c97edf263ed74531b623803483d611440e2ba82be7ab725be8835ffd7ffdc33a50670665aad83ae5391a3db80c6f196d45774aa4ada5c6c9027af48acc66d146ebb4a0de62e50bf1cd3265826e623204ea8034b03d4f634284d1c943f2e160d6f50e63abe0824e2eea4627a54f57c23c5ad4c8326fab805f6ec2bcfc288e3b0a6933de205e53e8eb4195678272592861dd6a8104e9a1777fae467f6caec630a3e60d2aaf2f1e36f462dffc288c077355fa16e85779275725aff183b6ad91e189a8991a37adcd4ccc79b5cbd8da595f43015d887d8824547bff8fc94ff12c058ef2abb866789ca2564e5f02f3eba423d3aee0de4772a61471f9ed1bb24895e096014350f2333d552dcdd6b0a4a98baaf5f587307271586fe1edbe410fcb3a4be10843b1bdad7bb36a2dbbee5b0d936d0ba9341ca36b5e973893b22672106242339b90ec8d47db6bf018462404e47db2b716b5905d9c31b7b0f080b79356ad54af79a97b0f77f1c5096766bc8410542201db5140e4cb4ba03af2a69a73216468866d922066bb990c25a07fbf7d956794692400d776a19e74b238a6054f639461beda9e255f1ac1b190c14ff0ca84de79d9ee5d52cd208eaade237dafd7fa56870f7b35c8b0a9d66d879bae743f315f6497fe7d7cc1ab7baaa3074744d2494955e320f87c7859431dffba7ce98e1ca98c042d0b7ded3391ba4683aa200ed2418b05d7efac1b28e5ae236c2af9723edc63ca7fd5d579a644f29b66097b7cc3c0fff6605d99fd4b52c905bb8c332584bfe0452cf0aedaaaaa6b82d2936201a7f05318dcb2025ba1f6d4b1fc3a937de94f70eeac784dcb0c79e2fa3e3df4b559fdf37b35f5dcce34e2626ed471b43b6968f263da21d562baea4dae8dc7633c82d38e7269e2b7eabd0531d9542f5ea7e33bd2adfeb737cd0c82630e9f95098ce366ae801ec5df3a5bad8f42e49d2873b195994c3f0e4f63af7d0335618b93e3abe5b56ee7510832506ebc94254a23fe2ebd92e1e34467375b2a35db4a58ab9dcd6c6acecbdc9dda149367ec396ec9b72c72ab324ea2fd6619d0c3cc463ae898544c4c731258baac0c69851c2680d2ad164696861cbf472642800b5e15efe0a7041f650b64990c8246f3116c5131e156d523030153e9db22219fcec99585dc2451894ed2f1e55727764d00b9e1d5864da5cbc401f9bbf97402b667ce9e17ecdc13cae67232fd6b810962a7b0d1efe19e4104f2e90366674d27a3c3502d15808075b449faa68cde83de6e547a697b2271d0f0df38a786862248543ec58c7aa26e09266e6d3dea457ea877727b55c499ee09961ec435ae227b6b135e7fc29b317e20064412f5ba1ec65475876b9b1e0fa437cde791c02736d37ef0a9af3abfbe44629743ff7403ab23d1684fd65a09d5400461d68fcea3533f7889459f923ebd2d4b8e3186d174021727ca61841c36046d77cd253bd16426db3ab648a89ad557cd049d5512bce46ff1fcb007a60c892f110668b76488e05ab7fef19718b396042b9f2a0723fad06134653e9f88467e13f8cede8e7cde6ed28ab83193846402e3598e31d19bf1a6d6225ab0d9d3f8978a2ab876956547077612c6fcfd0db94d6ba55e40fa53469d63b3a0f1a87fdc603a044056fa76eb5566892d49f1270ecb7cca622308bbeba9e127181d053bff20f78bbe7a151be68bb651f88b72b1b8497af3ecfd1253ba117d565ecd8233f077d69ae613691f33ca1dd9b0a2231432ff5a9178c64051737712f3d9afcafdde9967a180354441b7abd0b7a53477ef6b6495b9a7b2e1f454adddafed08cc2a3dbbb26ec2e4da709520d7b1952b00c310af19b0522c3c0d8dda97764af74b6df3bdd3868a967f3956231ccb1b328b52feb826fd7e7137834126ba6f4b65ddd1867d4e309d4b5c55c6f7367a05280be5c22e1668451b51a1d4991bdef43d4eb90437b0f9a025b7ed5b38cc19a2650eeec3d93e8f4a1e82f9ff548abc06d7684f3f9ba340c862414e3d22bf84526eba3d04b9858c8e8e28ec5b427cdcd72e03d3fc9419219526250176e51ee3de80eba453ecfc0b56a4ec4718510dbfb39f3b43a09ae8bbf7dfe616b9225fa4fa211daf4871f84c4f300d10ab124efb48051d8d9055712a8258ffe7d7f9995a4717745677810771c7eea2822cfc2a792e18b0ccb305539f4fc57717a3772948c34c878ec56e3ad37507f6cf2ab3e62c271c979ce11f54517e3abdfc35c3ae1566f3a6852db102361dcd96f33c0147ee336a09e65cd4f92b5f55000626946533f89104700f43ab99bfcfd12ecac80e5e4567ad271bc79b8e356b562305fa7456953ce6e88f5c04b497f63774d2cb29c9caaa0c1b77f3eb45f802820ad95a0c88ae9def1be543c6426bcf853b1f9e5725c3f1f701bc17b2546a1d0a065a2dcd350d6bb268d5dfeea85266c217a74d077893b753e33bdd17b581eb0a334f8f64d3bbb1acf5910c4046fbf2332db31dd5ff96a3a0fa10837638a24aa6f965129c7b453a2c2b590c1fd34e8a13ea91b921b2784d5274766f0cc6ebdc09880ee24e2204a1c968162df93f9d6119312820ce8716457f78069c0921e6df262a9a488d97ce4b30c99c3cb1cd17be8b317347b687c430f0851e9452826b620f4d9e0db9ec22aa5a744bf18da0de404a54b30444533bc4bb412bc2b26d7e993f664ea17aa48a452abdd73577eeba7278e4fd9d71be4de0aad9a663e28e4a162f8e98ee9745fb56fc0bd39ef069b72f85c33194c957ed8b6e76993474648dc8254c3356195d4eced7ba2fd37ff76fbcbedf9f750cc1735c25b79f86d98ecd0a541d4f7467aadea2a617bd7a6c61d404e40a88d94b6aaa2301ec90344d08a83d41705073a2276e51e0a4b4950f04c7ca36023be2ee73aa490d28bf722eb4fa748c8acfaf9cff3263f1a560737a636ad82422da1ba102c140e56903fee8f11e8477d35387c5c8a934f4c8eaffe85851f4efd23de844d69cebd8c11f0d66332517a6632b0da2fe9f3987680626051a710ee53b49c886e704d3770d7a9f91dd665558edccdd4d079fc35381b06596277575696a1a35cda1c021e10bdd2b87f528786eaea7abb2d7b2f466d78ba899005ce0096b8fdfdccab0043c58dfccca4fbfb735ac5896c8c2e9f2fb7eb944cd34335ff6ef1442b45ec4fbf6f382ca61b562c6dfc4da14cba1fe5944b413a43a7084057e26e8793d3154eabd1e0aa8c06464560ebe649461f9089a3fe7305777b8d82e79610ea799661966529cbb66ea7a21d2d1902f0817fcdf5db2e308ae1b811bbc8b34d8d72830b785472d837828fc4f750c73b13fee5db46e3576754345e4e451b22bf128875b6b492f054b60388ba2f8ed55e4da648910c81632cd3ee1b5be3901371c4dbf1a4cf2aefdd813ecf1f77b97f31d98eb8b89cd3c8d3b73de2f3e8087800e9a65634c1e3c5a1eb9867d079ca004b2a7cc9cecf1eb7d488ff99fb4b3aae2f55e337708a37a856cdd2b05636c2ea87948ccff750a79884a6c6da890090ce9b09cea0387a53326416cb24ccd73c545918ee63ea4eeb9cd28f9b91c27dbaadd614bd31981a833ea17f5338587b393171580bf388751f591bcfb127794e91a40532eec4f857710d91ba4bb0580fe7aacb72805e734f12181703b5d5a36e0b171063cca8b5804145169e23ce98b6fdadba83f8106d35d9d05a8f0d9fc00337f944dfda99981b55ac5aac24cee2125c2029f9350f6ac4ceee39b5b64ff56d8fa2937d34e0fd31df1d6a4fcf3dc294bc4d1e7b94df17e3d980f71537757c91c9d720fbf9aadcb6e373f8c2465fdb3b653da08d4620e9841e626590711d871f66eddedf67e6987c5b20a8baec31fb65b17d5ef985cd3b1900b81ab71f89c1448a87871ff30d1d2ed18f327dc4ad3fee8f7d8c7fda389c7db27e48cd89328c236dedf7a5f2fa66085fa97f9afefe194968952891323850ee77fbe93b1f69066901f23f6f14b6f3dc4aad55d874bd12fc99572d71bf0d54181f5ca1ee9d8ef6477ed8fee6b86c9e22ae4a34cd1f0c02016a48b85d2ddc8e49db828f6a453c0ee0a96c354e570d6f1907ba8ad69553d530ff2e328aef7b233c09c8b1d217b251c9a86d0aa38f96a5cffe9aa4985d686d127692a324fd02d6c8501fa84c07d0f98b47f9ca80fe90477c66b1c879a4fc6ccd58f4fb1fd1d4e1c00e4ad83d109494f66e244038f30cd58c74632869292b4d05f4b53b751808e319ef780496d648258b7933323afb3a8c55f8ee3959863f017ab3cc6105c8ab99f0e7a5367060b8953856906722c61f0a70335459d12559ac4623b918747fb1c984b034226f24fa4953f797fb0bc8b2b28886ceb9cbeb659fc9438986cc2f1c079b64cf442cb2fdcdb3bb3460fc11f787b75a83736d035a6632abc7f1dd5aa2ab89cf80d9c05ed189ccbf405d658eb5f701788d01e2929da748221ab43141ef727e72138a3bfe1e9276e4f451214fe7c294499b72fd926fc2397473df9af1f2e5b7d8059e5a7df0d6683996f66fcda293181d76adcc1a9097e738f27db2916bc6214cb140c619750fa"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "9e0377c68e70cfbf2a6f116881d85485dd1947abe18eeb91e88dcb888326056154ac23759c7c3c498dcd1d887aec70a031e65e6fff360cef2c0cb41d4b85ab0a5627d64e0678cd04bf3fa76071dad43bf9328e2a8f4cafebc7913340288805b083e24a568ff1ea110500ac1568180d8f3cbb330a185d945bcaa2a50da9989c93c4ae91aa74d18c9e2dc4d2137a44b24ae653a259340fca"}]}, 0x10b4}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
r0 = syz_open_procfs(0x0, &(0x7f0000001300)='syscall\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000001340)={@id, 0x8, 0x0, '\x00', @auto=[0x2f, 0x37, 0x39, 0x18, 0x2e, 0x2e, 0x1c, 0x19]})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001440)={<r2=>0x0, <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001580)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x30}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x2e}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048045}, 0x84)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000015c0)={r2, 0x7, 0x5})
r4 = socket$inet(0x2, 0x6, 0x9)
ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000001600)={0x6, 0xffff, 0x1, 0x615, 0x4, [{0x3ff, 0x8000, 0x9, '\x00', 0x208}, {0x2, 0x4, 0x1, '\x00', 0x2082}, {0xffffffff, 0x5, 0x80, '\x00', 0x87}, {0x8000, 0x3, 0x3, '\x00', 0x800}]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000001700))
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001740)='/sys/class/block', 0x109802, 0x20)
setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000017c0)={'filter\x00', 0x0, 0x0, 0x0, [0x80, 0x8, 0x3f, 0x6, 0x9ce, 0x9], 0x6, &(0x7f0000001780)=[{}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0), 0x4)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000001a00)={&(0x7f0000001900), &(0x7f0000001940)=""/154, 0x9a})
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000001a40), &(0x7f0000001a80)=0x30)
timer_create(0x5, &(0x7f0000001bc0)={0x0, 0x14, 0x0, @thr={&(0x7f0000001ac0)="91c9bf551db0f73b85625c289b43dd5b3bdc585a802a86ad044695e3f5c8a8a07a6ce64ef97f26293d9f18df8bb681e15ba9dfb6e93ce4e8f71b37b937fe049536ab9f9e", &(0x7f0000001b40)="e19673717c47a15e957768c4bfcc61c1b30e16d8e77e6a32a430a936ef2391d24227282586417799a21dd0f5ef2e02e2d47f5cef2c2b627394c336cf8b8ef307dff5d3c2778678a0befc77"}}, &(0x7f0000001c00))
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001c40), 0x101002, 0x0)
ioctl$TCSBRK(r6, 0x5409, 0x3)

13:37:03 executing program 3:
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x124, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r4, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x77}}}}, ["", ""]}, 0x28}}, 0x20004010)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r3)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000b00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000800)={0x28c, r6, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12b40e7d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x117}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5ef}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @private0, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8001, @loopback, 0x20}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @remote, 0x3fb}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x8000}, 0x4090)
ioperm(0x2, 0x2, 0x5)
pipe2(&(0x7f0000000b40)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80000)
setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f0000000b80)="a865f02a8ea2c8368e206b25745f4d14890795f9c755b6c317b1faade14b751e607c2a8d966d24d931c4d1de75ffb09a47cce3c36cc7aa2cf8", 0x39)
ioctl$SCSI_IOCTL_PROBE_HOST(r7, 0x5385, &(0x7f0000000bc0)={0x4f, ""/79})
r9 = fsmount(r8, 0x0, 0xf3)
open_by_handle_at(r9, &(0x7f0000000c40)=@OVL_FILEID_V1={0xec, 0xf8, {'\x00', {0x0, 0xfb, 0xe9, 0x4, 0x1f, "4fc0d345b39626d1c82f4b799ced184e", "6c636006faa61f81cdbf1e43796b189c0b3b2c92a6960295d2ec155014c18fb662a55c8ae1998cbe14d1f53e80e5f2f28f1bd5267c3e52a131017c54ae75553ae4356be9dd750114911322b0297047c2fcd3e7f8dbeeba2d97215ee25779bf2cf777a3db42f34b08974794fa318c876ac753a4eaa8784b2452ec9197435b23ce8098f606f086d19bbd8a5c64658165ec0f33109872758bcc068583caf354d87f81196b269b08b2bcd812939229142afe6e063dd1e11a40151fe415d7fd3692b3c34b6d024edfed4d886c5e8ce9a1ae57a3168140"}}}, 0x2000)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x3}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x10004810)
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e40), 0x20000)
r11 = inotify_init()
io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000001000)=[r10, r11, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)

13:37:03 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x51, 0x8000}}, './file0\x00'})
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x440c0)
r2 = syz_open_dev$vcsn(&(0x7f0000000280), 0x0, 0x0)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f00000002c0)=0x9)
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x200, 0x1)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000340)={0x5, 0x5})
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000380))
getpeername$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000500)={<r4=>0x0, @multicast1, @multicast1}, &(0x7f0000000540)=0xc)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9ed5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x84}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000040)
r5 = open_tree(r0, &(0x7f0000000680)='./file0\x00', 0x1)
ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381)
r6 = dup(r0)
ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611)
recvfrom(r0, &(0x7f00000006c0)=""/251, 0xfb, 0x40000000, &(0x7f00000007c0)=@ll={0x11, 0x1a, r4, 0x1, 0x4}, 0x80)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20044800)

[  131.309196] audit: type=1400 audit(1750081023.703:7): avc:  denied  { execmem } for  pid=283 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:37:03 executing program 4:
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000))
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="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")
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x217, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040880}, 0x20000000)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000003c0)={{}, 0x0, 0x16, @unused=[0xe57, 0x80000001, 0xffffffff, 0x200], @devid})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000013c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x2}}, './file0\x00'})
ioctl$TIOCSIG(r2, 0x40045436, 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001400)={0x0, 0x1, 0x6, @random="3dc129643536"}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000001440)={{0x1, 0x1, 0x18, r2, {<r4=>r2}}, './file0\x00'})
ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000001480)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r5 = openat$incfs(r4, &(0x7f00000014c0)='.pending_reads\x00', 0x80000, 0x40)
ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000001500)=""/240)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000001600))
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000016c0)=@get={0x1, &(0x7f0000001640)=""/74, 0x3})
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, r0, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x24044054)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000001840), &(0x7f0000001880)=@v2={0x2000000, [{0xe2, 0x2}, {0x40, 0x400}]}, 0x14, 0x2)

13:37:03 executing program 5:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, <r0=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000200)=r0)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2104040}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x3, 0x8, 0x600, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2cc6180f669d13e5}, 0x162ba82e9a10ccd4)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x40b8efacda57de27}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000480)={0x8000, 0x8, 0x0, 'queue0\x00'})
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000084)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8845)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r1)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1f0, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x401, @local, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x833, @private2={0xfc, 0x2, '\x00', 0x1}, 0x54}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9afd}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe019}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x800}, 0x4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r1)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r6, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x22}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0xa000}, 0x40000)
getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000c40)=""/72, &(0x7f0000000cc0)=0x48)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x8800)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r8, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0xc41)

13:37:03 executing program 6:
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000000)="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")
ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000100))
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000180)={0x100000001, 0x600000000000})
ioctl$KDDISABIO(r0, 0x4b37)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000001c0), 0x2)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0xff, 0x3})
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x109083, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000280)={0x7, 'batadv_slave_0\x00', {0x5}, 0x1})
r2 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x80000000, 0x400000)
fgetxattr(r2, &(0x7f0000000300)=@random={'os2.', '&\x00'}, &(0x7f0000000340)=""/190, 0xbe)
write$tcp_mem(r0, &(0x7f0000000400)={0x0, 0x20, 0x20, 0x20, 0x20}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x1, 0x9, 0x20, @private2, @empty, 0x8000, 0x700, 0x5, 0x1}})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000540))
bind$802154_raw(r0, &(0x7f0000000580)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14)
r3 = accept4$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000600)=0x1c, 0x800)
fcntl$addseals(r3, 0x409, 0x0)
getsockopt(r1, 0x8, 0x9, &(0x7f0000000640)=""/145, &(0x7f0000000700)=0x91)
setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000740)=@gcm_128={{0x304}, "b770e443e9d4a58c", "2ba90db8666d711de5b184f8aae4d4c0", "d3747fdc", "05202807d41269b4"}, 0x28)

13:37:03 executing program 7:
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000))
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000095}, 0x0)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48004}, 0x40041)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x2, 0x2, 0x101, 0x0, 0x0, {0x9, 0x0, 0x9}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffff}]}, 0x24}}, 0x40804)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'sit0\x00', <r1=>0x0, 0x29, 0x6, 0x6, 0x80000000, 0x40, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x10, 0xb3, 0x7}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x244, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x12c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x850d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x58a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47cb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xde}]}]}, 0x12c}}, 0x8000)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000980)={{0x0, 0x35, 0x44, 0xfffffffffffffff8, 0xf6, 0x5, 0x6, 0x2, 0x9, 0x8f, 0x7ff, 0x31a, 0x3ff, 0x9, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r2 = dup(0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x168, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xaefb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x95}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x801}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7e4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x98}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}}]}, 0x168}, 0x1, 0x0, 0x0, 0x200098c1}, 0x4040005)
sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, 0x15, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c800}, 0xc040)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000e80), 0x44000, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, 0x0, 0xf36919bcf1c3f5b9, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x50)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000fc0), 0x802, 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000001000)={@private1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x10000, 0x7, 0x0, 0x0, 0xf37e00, 0x1200000, r1})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001080), r5)
sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000880)
sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x44, 0x3, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xbe2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)

[  132.879117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  132.883598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  132.885787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  132.889005] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  132.892917] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  132.893967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  132.896799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  132.911551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  132.914956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  132.916173] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  132.922650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  132.924610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  132.926099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  132.931317] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  132.932223] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  132.932855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  132.938941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  132.939348] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  132.943045] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  132.945350] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  132.972654] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  132.977081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  132.979385] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  132.984890] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  132.987302] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  133.002382] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  133.003522] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  133.005018] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  133.006930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  133.011886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  133.015260] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  133.016620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  133.021266] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  133.023716] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  133.043936] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  133.046573] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  133.049819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  133.073776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  133.075163] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  133.091034] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  134.952282] Bluetooth: hci0: command tx timeout
[  135.014988] Bluetooth: hci1: command tx timeout
[  135.079222] Bluetooth: hci4: command tx timeout
[  135.079966] Bluetooth: hci7: command tx timeout
[  135.080535] Bluetooth: hci2: command tx timeout
[  135.081143] Bluetooth: hci3: command tx timeout
[  135.144009] Bluetooth: hci5: command tx timeout
[  135.144612] Bluetooth: hci6: command tx timeout
[  136.999563] Bluetooth: hci0: command tx timeout
[  137.064155] Bluetooth: hci1: command tx timeout
[  137.127902] Bluetooth: hci7: command tx timeout
[  137.128395] Bluetooth: hci3: command tx timeout
[  137.128938] Bluetooth: hci4: command tx timeout
[  137.129398] Bluetooth: hci2: command tx timeout
[  137.190873] Bluetooth: hci6: command tx timeout
[  137.190948] Bluetooth: hci5: command tx timeout
[  139.046801] Bluetooth: hci0: command tx timeout
[  139.111249] Bluetooth: hci1: command tx timeout
[  139.175805] Bluetooth: hci3: command tx timeout
[  139.175995] Bluetooth: hci2: command tx timeout
[  139.176285] Bluetooth: hci4: command tx timeout
[  139.176681] Bluetooth: hci7: command tx timeout
[  139.239105] Bluetooth: hci6: command tx timeout
[  139.239576] Bluetooth: hci5: command tx timeout
[  141.095052] Bluetooth: hci0: command tx timeout
[  141.158799] Bluetooth: hci1: command tx timeout
[  141.224121] Bluetooth: hci4: command tx timeout
[  141.224188] Bluetooth: hci7: command tx timeout
[  141.224569] Bluetooth: hci2: command tx timeout
[  141.225051] Bluetooth: hci3: command tx timeout
[  141.287202] Bluetooth: hci6: command tx timeout
[  141.287679] Bluetooth: hci5: command tx timeout
[  192.971900] syz-executor.1 (292) used greatest stack depth: 25024 bytes left
[  193.377787] syz-executor.4 (295) used greatest stack depth: 24864 bytes left
[  195.839229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  195.843425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  195.844479] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  195.847081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  195.848938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  195.858507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  195.863257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  195.866682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  195.883006] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  195.888602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  195.920353] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  195.928575] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  195.931373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  195.938097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  195.952214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  195.980999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  195.995645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  196.006381] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  196.013100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  196.020865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  196.106401] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  196.114943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  196.131120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  196.153517] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  196.161501] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  196.206399] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  196.208862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  196.231783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  196.232076] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  196.239008] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  196.243973] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  196.286121] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  196.289270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  196.298024] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  196.298583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  196.301946] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  196.313424] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  196.350172] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  196.416295] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  196.433279] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  197.927838] Bluetooth: hci0: command tx timeout
[  197.991813] Bluetooth: hci1: command tx timeout
[  198.119955] Bluetooth: hci2: command tx timeout
[  198.121676] Bluetooth: hci4: command tx timeout
[  198.310936] Bluetooth: hci6: command tx timeout
[  198.567050] Bluetooth: hci3: command tx timeout
[  198.759787] Bluetooth: hci5: command tx timeout
[  198.887754] Bluetooth: hci7: command tx timeout
[  199.974859] Bluetooth: hci0: command tx timeout
[  200.038846] Bluetooth: hci1: command tx timeout
[  200.167915] Bluetooth: hci4: command tx timeout
[  200.168470] Bluetooth: hci2: command tx timeout
[  200.359870] Bluetooth: hci6: command tx timeout
[  200.616089] Bluetooth: hci3: command tx timeout
[  200.807811] Bluetooth: hci5: command tx timeout
[  200.935771] Bluetooth: hci7: command tx timeout
[  202.022769] Bluetooth: hci0: command tx timeout
[  202.088036] Bluetooth: hci1: command tx timeout
[  202.216745] Bluetooth: hci4: command tx timeout
[  202.218167] Bluetooth: hci2: command tx timeout
[  202.406774] Bluetooth: hci6: command tx timeout
[  202.663805] Bluetooth: hci3: command tx timeout
[  202.857739] Bluetooth: hci5: command tx timeout
[  202.982770] Bluetooth: hci7: command tx timeout
[  204.071046] Bluetooth: hci0: command tx timeout
[  204.135803] Bluetooth: hci1: command tx timeout
[  204.263798] Bluetooth: hci2: command tx timeout
[  204.265213] Bluetooth: hci4: command tx timeout
[  204.455841] Bluetooth: hci6: command tx timeout
[  204.712163] Bluetooth: hci3: command tx timeout
[  204.902817] Bluetooth: hci5: command tx timeout
[  205.030767] Bluetooth: hci7: command tx timeout
[  255.993219] syz-executor.0 (2414) used greatest stack depth: 24784 bytes left
[  258.108396] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  258.112026] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  258.121662] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  258.126426] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  258.132280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  258.302200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  258.307021] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  258.312319] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  258.319067] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  258.322441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  258.414639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  258.420433] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  258.431619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  258.441641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  258.451182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  258.511418] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  258.520479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  258.540607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  258.566584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  258.573442] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  258.586091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  258.587094] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  258.591611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  258.594471] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  258.598042] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  258.611289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  258.629299] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  258.649242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  258.652498] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  258.666442] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  258.669767] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  258.673052] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  258.677017] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  258.677923] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  258.680909] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  258.694109] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  258.709476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  258.725224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  258.726346] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  258.758458] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  260.198961] Bluetooth: hci0: command tx timeout
[  260.390837] Bluetooth: hci1: command tx timeout
[  260.519004] Bluetooth: hci2: command tx timeout
[  260.712133] Bluetooth: hci3: command tx timeout
[  260.839148] Bluetooth: hci4: command tx timeout
[  260.902831] Bluetooth: hci6: command tx timeout
[  260.904875] Bluetooth: hci5: command tx timeout
[  261.031126] Bluetooth: hci7: command tx timeout
[  262.247213] Bluetooth: hci0: command tx timeout
[  262.439820] Bluetooth: hci1: command tx timeout
[  262.566790] Bluetooth: hci2: command tx timeout
[  262.758823] Bluetooth: hci3: command tx timeout
[  262.887826] Bluetooth: hci4: command tx timeout
[  262.951791] Bluetooth: hci5: command tx timeout
[  262.952284] Bluetooth: hci6: command tx timeout
[  263.078790] Bluetooth: hci7: command tx timeout
[  264.296779] Bluetooth: hci0: command tx timeout
[  264.487737] Bluetooth: hci1: command tx timeout
[  264.616114] Bluetooth: hci2: command tx timeout
[  264.806867] Bluetooth: hci3: command tx timeout
[  264.934987] Bluetooth: hci4: command tx timeout
[  264.999407] Bluetooth: hci6: command tx timeout
[  264.999781] Bluetooth: hci5: command tx timeout
[  265.128206] Bluetooth: hci7: command tx timeout
[  266.343780] Bluetooth: hci0: command tx timeout
[  266.537045] Bluetooth: hci1: command tx timeout
[  266.664991] Bluetooth: hci2: command tx timeout
[  266.857792] Bluetooth: hci3: command tx timeout
[  266.983831] Bluetooth: hci4: command tx timeout
[  267.047135] Bluetooth: hci5: command tx timeout
[  267.047848] Bluetooth: hci6: command tx timeout
[  267.174816] Bluetooth: hci7: command tx timeout
[  320.962187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  320.965002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  320.968333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  320.972879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  320.975594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  320.980168] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  320.985796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  320.991850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  320.993966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  321.001252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  321.054455] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  321.058051] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  321.062066] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  321.071064] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  321.078214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  321.152456] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  321.162962] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  321.165404] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  321.177605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  321.181809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  321.342522] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  321.347977] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  321.368211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  321.373896] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  321.377247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  321.379325] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  321.389131] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  321.391530] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  321.393511] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  321.396672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  321.403206] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  321.446127] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  321.448553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  321.506857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  321.509246] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  321.517104] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  321.527426] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  321.540032] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  321.572162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  321.606003] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  323.046880] Bluetooth: hci1: command tx timeout
[  323.046920] Bluetooth: hci0: command tx timeout
[  323.110803] Bluetooth: hci2: command tx timeout
[  323.242358] Bluetooth: hci3: command tx timeout
[  323.501453] Bluetooth: hci5: command tx timeout
[  323.558854] Bluetooth: hci4: command tx timeout
[  323.687076] Bluetooth: hci7: command tx timeout
[  323.815795] Bluetooth: hci6: command tx timeout
[  325.094784] Bluetooth: hci0: command tx timeout
[  325.094843] Bluetooth: hci1: command tx timeout
[  325.159001] Bluetooth: hci2: command tx timeout
[  325.286789] Bluetooth: hci3: command tx timeout
[  325.543511] Bluetooth: hci5: command tx timeout
[  325.607334] Bluetooth: hci4: command tx timeout
[  325.735748] Bluetooth: hci7: command tx timeout
[  325.863771] Bluetooth: hci6: command tx timeout
[  327.144742] Bluetooth: hci0: command tx timeout
[  327.144794] Bluetooth: hci1: command tx timeout
[  327.207972] Bluetooth: hci2: command tx timeout
[  327.335764] Bluetooth: hci3: command tx timeout
[  327.590873] Bluetooth: hci5: command tx timeout
[  327.655947] Bluetooth: hci4: command tx timeout
[  327.783765] Bluetooth: hci7: command tx timeout
[  327.912780] Bluetooth: hci6: command tx timeout
[  329.190900] Bluetooth: hci0: command tx timeout
[  329.190932] Bluetooth: hci1: command tx timeout
[  329.254935] Bluetooth: hci2: command tx timeout
[  329.384724] Bluetooth: hci3: command tx timeout
[  329.638802] Bluetooth: hci5: command tx timeout
[  329.704073] Bluetooth: hci4: command tx timeout
[  329.831104] Bluetooth: hci7: command tx timeout
[  329.959919] Bluetooth: hci6: command tx timeout
[  383.432037] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  383.433915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  383.445358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  383.463118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  383.474849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  383.672930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  383.674915] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  383.677939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  383.692161] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  383.698819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  383.743452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  383.753027] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  383.776087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  383.785721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  383.801075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  383.803208] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  383.828388] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  383.832805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  383.835469] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  383.840396] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  383.843976] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  383.853598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  383.862008] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  383.867076] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  383.871241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  383.959869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  383.970622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  383.984641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  384.006567] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  384.037772] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  384.277491] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  384.301566] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  384.316335] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  384.339180] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  384.341451] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  384.351463] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  384.361253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  384.388145] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  384.398542] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  384.420370] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  385.510785] Bluetooth: hci0: command tx timeout
[  385.768114] Bluetooth: hci1: command tx timeout
[  385.894776] Bluetooth: hci2: command tx timeout
[  385.958802] Bluetooth: hci3: command tx timeout
[  385.960237] Bluetooth: hci4: command tx timeout
[  386.087764] Bluetooth: hci5: command tx timeout
[  386.471208] Bluetooth: hci7: command tx timeout
[  386.600768] Bluetooth: hci6: command tx timeout
[  387.559167] Bluetooth: hci0: command tx timeout
[  387.815787] Bluetooth: hci1: command tx timeout
[  387.942856] Bluetooth: hci2: command tx timeout
[  388.007911] Bluetooth: hci4: command tx timeout
[  388.008400] Bluetooth: hci3: command tx timeout
[  388.135101] Bluetooth: hci5: command tx timeout
[  388.519186] Bluetooth: hci7: command tx timeout
[  388.647772] Bluetooth: hci6: command tx timeout
[  389.606826] Bluetooth: hci0: command tx timeout
[  389.864367] Bluetooth: hci1: command tx timeout
[  389.992756] Bluetooth: hci2: command tx timeout
[  390.054818] Bluetooth: hci4: command tx timeout
[  390.055312] Bluetooth: hci3: command tx timeout
[  390.182878] Bluetooth: hci5: command tx timeout
[  390.566770] Bluetooth: hci7: command tx timeout
[  390.696939] Bluetooth: hci6: command tx timeout
[  391.655951] Bluetooth: hci0: command tx timeout
[  391.910760] Bluetooth: hci1: command tx timeout
[  392.039156] Bluetooth: hci2: command tx timeout
[  392.104008] Bluetooth: hci3: command tx timeout
[  392.104497] Bluetooth: hci4: command tx timeout
[  392.230853] Bluetooth: hci5: command tx timeout
[  392.614793] Bluetooth: hci7: command tx timeout
[  392.745245] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
13:42:12  Registers:
info registers vcpu 0
RAX=ffffffff87a4a978 RBX=ffff888016138000 RCX=0000000000000200 RDX=0000000000000008
RSI=ffff888016138ad0 RDI=ffff888016138aa8 RBP=ffff888016138a58 RSP=ffff88806ce08868
R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff888016138ad0 R13=99b43964c8769410 R14=0000000000000000 R15=0000000000000003
RIP=ffffffff8151973f RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e562f000 00000000 00000000
LDT=0000 fffffe0e00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f77114461f0 CR3=000000000ca1d000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffffffff85c75080 RCX=b30f96e79d24f230 RDX=0000000019d6cd52
RSI=000000002e6343c6 RDI=00000000c2958701 RBP=00007f8e549f6699 RSP=ffff8880280af630
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=00007f8e549f6699 R13=0000000000000000 R14=ffff8880372c8000 R15=0000000000092800
RIP=ffffffff84b49bc0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e572f000 00000000 00000000
LDT=0000 fffffe2400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7bd9f774a1 CR3=000000000cd18000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff
XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000