Warning: Permanently added '[localhost]:46455' (ECDSA) to the list of known hosts.
2025/06/19 07:01:10 fuzzer started
2025/06/19 07:01:11 dialing manager at localhost:36157
syzkaller login: [  101.812740] cgroup: Unknown subsys name 'net'
[  101.947219] cgroup: Unknown subsys name 'cpuset'
[  101.991582] cgroup: Unknown subsys name 'rlimit'
2025/06/19 07:01:26 syscalls: 202
2025/06/19 07:01:26 code coverage: enabled
2025/06/19 07:01:26 comparison tracing: enabled
2025/06/19 07:01:26 extra coverage: enabled
2025/06/19 07:01:26 setuid sandbox: enabled
2025/06/19 07:01:26 namespace sandbox: enabled
2025/06/19 07:01:26 Android sandbox: enabled
2025/06/19 07:01:26 fault injection: enabled
2025/06/19 07:01:26 leak checking: enabled
2025/06/19 07:01:26 net packet injection: enabled
2025/06/19 07:01:26 net device setup: enabled
2025/06/19 07:01:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/19 07:01:26 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/19 07:01:26 USB emulation: enabled
2025/06/19 07:01:26 hci packet injection: enabled
2025/06/19 07:01:26 wifi device emulation: enabled
2025/06/19 07:01:26 802.15.4 emulation: enabled
2025/06/19 07:01:26 fetching corpus: 0, signal 0/0 (executing program)
2025/06/19 07:01:27 starting 8 fuzzer processes
07:01:27 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x3}}, './file0\x00'})
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48d0}, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0x3}}, './file0\x00'})
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc0050}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x803, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x79}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4068800)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x41}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x48484)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xcfd2ec4118fc23a0}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, @in_args={0x1}}, './file0\x00'})
mkdirat(r2, &(0x7f00000005c0)='./file1\x00', 0xc3)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r3, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x7e}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "90f1c12d4fb7c3d01343895c13a84289"}, @NL80211_ATTR_PMKID={0x14, 0x55, "f0a79fb4d5b6aa54fbb26f242c62e8b4"}, @NL80211_ATTR_BSSID={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x2000c801)
mknodat(r0, &(0x7f0000000780)='./file1\x00', 0x4, 0x1)
faccessat2(r2, &(0x7f00000007c0)='./file0\x00', 0x0, 0x200)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r4=>r1, {<r5=>r1}}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, r2, {0x7}}, './file1\x00'})
getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8811}, 0x4008000)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40040c7)
r7 = syz_mount_image$ext4(&(0x7f0000000b80)='ext2\x00', &(0x7f0000000bc0)='./file0\x00', 0x4, 0x2, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="a920289d088288c957cfa0f46e9106d26a93748a0c2f993f603c44929050931561b34ee3faf9d50f42f77efbc30dba1c67b9ec916d840e9ffa46bed795a682b7587eb4421799f1a81fe59eed72c4b0d7c1384b8560401d6c96916a9302c545c41ef6df54c5d5c793bc88d23e533e908b998bc02ff3be117633d89d3cce5e1a4e0f0174447359515bff49dda72e31c45f50acd8de3dcdf4c648fa08895fc863af783b414579ab91209b212143406a81184fdce1f7802a2260d9980224828a8b951ec1972e39422221d678f4da8198682ec3d846170626c831bbb55475fe67241a843235f1b980", 0xe6, 0x9}, {&(0x7f0000000d00)="4162557296339e336e928fb4991a4659f25c11d8a5761a6e297b328a2e4cee4becf09d72e2d9d5495654e54db027bb62ac3b242cfaa45b5044c8b9a8df919946efb852629cb05b02f65d47051a0ab8fd42deb0ef6bee75a13d977ee83b8e9dbca73cb58a1152fc250005c123d619c2c53b8acfbd5ae0314d0d04316cf9f62a34c82d56b437bd5b30a988", 0x8a, 0x9}], 0x1005044, &(0x7f0000000e00)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@norecovery}, {@journal_path={'journal_path', 0x3d, './file0'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'wlan1\x00'}}, {@obj_type={'obj_type', 0x3d, 'nl80211\x00'}}, {@hash}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x63, 0x31, 0x65, 0x35, 0x35, 0x63, 0x64], 0x2d, [0x62, 0x37, 0x65, 0x63], 0x2d, [0x64, 0x35, 0x38, 0x63], 0x2d, [0x34, 0x65, 0x64, 0x35], 0x2d, [0x39, 0x64, 0x33, 0x37, 0x38, 0x33, 0x32, 0x30]}}}, {@permit_directio}]})
faccessat2(r7, &(0x7f0000000ec0)='./file1\x00', 0xb3, 0x1000)

07:01:27 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x99}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x804)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xd49a2d22e0ae6e95}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008881}, 0x1)
r1 = socket(0x1, 0x5, 0x1ff)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2ef}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x49}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x1)
r5 = socket(0x37, 0xa, 0x3c800)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1)
sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe8, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6060}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x68}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}]}]}, 0xe8}}, 0x800)
sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4040005)
pipe(&(0x7f0000000900)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x74}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008014}, 0x8011)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r7, {r1}}, './file0\x00'})
getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4)
pipe(&(0x7f0000000b00)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x34}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004884)

07:01:27 executing program 2:
getresgid(&(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040), &(0x7f0000000080)=<r1=>0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {<r3=>0xffffffffffffffff}}, './file0\x00'})
write$P9_RGETATTR(r3, &(0x7f0000000100)={0xa0, 0x19, 0x1, {0x840, {0x2, 0x1, 0x7}, 0x2, 0xee00, r1, 0x4, 0x10001, 0x6, 0x6, 0x1, 0x7, 0x1, 0x9, 0x80, 0xa0, 0x54, 0x100, 0x7, 0xffff}}, 0xa0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8016}, 0x40800)
write$P9_RGETATTR(r2, &(0x7f00000002c0)={0xa0, 0x19, 0x1, {0x820, {0x1, 0x0, 0x2}, 0x0, 0xee01, r0, 0x9, 0x7fffffff, 0x3, 0x4b2, 0x8, 0xe572, 0x3, 0x75f, 0xc55, 0xffffffff, 0x1fd, 0x6, 0x3, 0x0, 0xbab2}}, 0xa0)
getegid()
sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x30}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x322}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}]}, 0x78}, 0x1, 0x0, 0x0, 0x6008091}, 0x4008040)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000004c0)=0x3, 0x4)
getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=<r4=>0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4)
pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84800)
write$P9_RLCREATE(r5, &(0x7f0000000600)={0x18, 0xf, 0x2, {{0x0, 0x2, 0x8}, 0xfffff001}}, 0x18)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x3, 0x1, &(0x7f0000000780)=[{&(0x7f00000006c0)="2d02adc740b4d682fed748207e0a68b09721a87b96a2f0252db7756e99f4acfae2ac234d8b7d9403c08449e6e7ba521c89dd12a8fc9712c9d2df9571f05177de71b20796cb13c04e9f317c8985fad51d5bd43f52dce5c12420cad09e1d95fb6e2fc7a3859faa307ecb891ef0384997bb9871effdbbe49c0881aabe8ffd030c0dcfff8817ee3876a15d8b42fb0632dc0c9e8ebd7488c427872609330ba8a1a2e2f681148c7c6994427c9b202f", 0xac, 0x71d1}], 0x2840, &(0x7f00000007c0)={[{@nombcache}], [{@subj_user={'subj_user', 0x3d, '!)^'}}, {@subj_role}, {@appraise_type}, {@audit}, {@subj_role}, {@hash}, {@obj_user={'obj_user', 0x3d, '#(.\\@{:+,'}}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r6=>r3, {0x5}}, './file0\x00'})
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10)
write$P9_RREADLINK(r6, &(0x7f0000000980)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
ioctl$TUNSETGROUP(r2, 0x400454ce, r1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r3, {0x401}}, './file0\x00'})
socketpair(0x1d, 0xa, 0x80000000, &(0x7f0000000a00)={<r7=>0xffffffffffffffff})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe2f6, 0x2c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc0)

07:01:27 executing program 3:
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff83f9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x840)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf0, 0x0, 0x2e, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd8, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x22}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfb}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000005c0))
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20008080)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40000)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20010820}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x572ee033df421f2c}, 0x20004000)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan1\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x84)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40), 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x8c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8c}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbea0}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004405}, 0x4000080)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000005)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x804)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x6}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x24040000)

[  117.781493] audit: type=1400 audit(1750316487.690:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:01:27 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x1)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc7, 0x6}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x6}}, './file0\x00'})
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6b}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004044}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {<r3=>r2}}, './file0/../file0\x00'})
r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {r2}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r6, 0x105, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2050}, 0x0)
syz_open_dev$hidraw(&(0x7f00000005c0), 0xe00000000000000, 0x4040)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r8, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x24000020)
r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000780), 0x800, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f00000007c0))
socketpair(0xf, 0x3, 0x20, &(0x7f0000000800))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000840)={{0x1, 0x1, 0x18}, './file0\x00'})

07:01:27 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x10000}}, './file0\x00'})
r1 = timerfd_create(0x2, 0x80000)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x34, @time={0x24}, 0x1, {0x1, 0x13}, 0xdc, 0x1, 0xfb})
r2 = timerfd_create(0x2, 0x80000)
timerfd_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r1, {0x5}}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000140))
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r1, {0xe0223274, 0xb0c}}, './file0\x00'})
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000)
timerfd_gettime(r3, &(0x7f0000000300))
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x204, r5, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7e}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x170, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}, {0x104, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xff, 0x1, "3266359ac306d2ec08df5ca5d543b0bcba0a92252514727749eca735b68d3fc7c801576adcf1e1c3accb93f7fcbfdd201a14465d76b346fee92e1bdefcc3febe4dbc1268d0767768400e48b09004f30c24e3b73cc22f9dc3c22bfad0f506a0f624e7909187472c66e607ca72835e27e1f1deee1632034d198600c3677094c29e783fc3ff0b5ba80ac14af32bc833336e76c87b18c6873aded3017beaf78fdc23d9fe6d70d495881ec00ab597ad52b2de29fca74b229c1946a95f0b9ff95407584713f95cffb9ad344a8d65e60fe64d5169192c6db4b8fc3ac639a96852ebaad0be3eba3e6c46ca11b988352906565bea3671daf6184af8cc7bed21"}}, {0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x58, 0x1, "9383cc3504ad6fc1ef792db88ecf768d96b6a2fd28ae21d1ef0c221ccba4dccb1a7e8a88d20f16cf5177e18ffe330cc039c11d9db8d3b830ed5bb580d9c9cd5279b0de84eb4cd71c4d2f749a3dddfdf88d756697"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x4c, 0x1, "0e8269e6310026902ad456c87865f99ffd4ffcd628e557a516d10fb4b14faac63d82e694868818ed11bc5f704a1bb5b821a8d0d32c729686c57d64675a174088c3ae2f710c5d69a0"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6a99}]}, 0x204}, 0x1, 0x0, 0x0, 0x10}, 0x8800)
timerfd_settime(r3, 0x0, &(0x7f0000000680)={{0x77359400}, {0x77359400}}, &(0x7f00000006c0))
ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r6=>r0, {0x5}}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r5, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x81, 0x1e}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x18, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="c0586e101be7"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}]}]}, 0x48}}, 0x24000004)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r8=>r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000900)={{0x1, 0x1, 0x18}, './file1\x00'})
r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000940), 0x80, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000000980)={"db7237137aa2478b2d9bd0944abeca22", 0x0, 0x0, {0x1, 0x26}, {0xffffffff, 0x8000}, 0x7, [0x7fffffff, 0x3, 0x1000, 0x7, 0x200, 0x100000000, 0x1ff, 0xffffffffffff7fff, 0x3f, 0xfffffffffffffffe, 0x50a, 0x2, 0xc4, 0x4, 0x400, 0x81]})

07:01:27 executing program 6:
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40080)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x21}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x8801}, 0x40001)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x2}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x200}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf5061d764de0f223}, 0xc000)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f0000000480)={@desc={0x1, 0x0, @desc3}})
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000004c0)={0x4, "48d82e"}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x8}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x8090)
sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200202}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x84, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x62}}}}, [@NL80211_ATTR_IE={0x62, 0x2a, [@random_vendor={0xdd, 0xe, "07ad995b05581800ba6d13518a6b"}, @preq={0x82, 0x41, @ext={{0x1, 0x1, 0x1}, 0x3f, 0xe4, 0x7, @device_a, 0x4, @device_b, 0x8f1, 0x100, 0x3, [{}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x1}, @device_b, 0x8}]}}, @chsw_timing={0x68, 0x4, {0x0, 0x8}}, @channel_switch={0x25, 0x3, {0x1, 0x0, 0x6}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000001)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r3=>r1, {0xb16c}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r4, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x800000, 0x54}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8e}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40408c5}, 0x20040045)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x67}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x2004c850)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000b00)={{0x1, 0x1, 0x18, <r7=>r1, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'})
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x24}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8011)

07:01:27 executing program 7:
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000000000))
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0xf8000, 0x4, 0x3, 0x0, 0x1}, 0x8)
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x14}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4d94842eeab0408a26c8fc742c5822a4"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ab84cb54b333"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x63}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x44000800)
read$rfkill(r1, &(0x7f0000000200), 0x8)
sched_rr_get_interval(r0, &(0x7f0000000240))
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x854)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000380)={@id={0x2, 0x0, @auto="f2d248b1fefa4619f32fdc7eea470004"}})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0xc104)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r4=>r2, @in_args={0x2}}, './file0\x00'})
ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000540)=""/27)
clock_gettime(0x7, &(0x7f0000000580))
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000005c0)=<r5=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000600)={"934a922cf03585b64fc9aef8c2db5f38", <r6=>0x0, 0x0, {0xab3, 0x80000001}, {0x4, 0x9}, 0x101, [0x7, 0x9, 0x3f, 0x2, 0x6, 0x10000, 0x7ff, 0x100000000, 0xfffffffffffff000, 0x7fffffff, 0x80000000, 0x400, 0x5, 0x9, 0x4, 0x1004000]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000700)={"3cf7dfa53a41047c707b28de402c66bc", r5, r6, {0x1f, 0xffff}, {0x184, 0x401}, 0x8000, [0x5, 0x2, 0x7, 0x6, 0xd18, 0x8, 0x7, 0xfffffffffffffffb, 0x2, 0x9, 0x8, 0x8, 0x4, 0x8, 0x1, 0x6]})
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000840)={@id={0x2, 0x0, @d}, 0x7, 0x0, '\x00', @auto=[0x31, 0x3b, 0x35, 0x37, 0x25, 0x3e, 0x28]})

[  119.250197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.257280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.261937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.270715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.280401] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.341186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.347214] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  119.349419] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.357807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  119.361356] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  119.365088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.373293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  119.375373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.383603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  119.389177] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.397040] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.399412] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.404088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  119.408570] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.417512] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  119.421268] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.421317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.442373] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  119.442926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.443939] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  119.449777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.451512] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  119.462807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  119.488196] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.490781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  119.500100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  119.500131] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  119.505359] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  119.506476] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  119.510363] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  119.522508] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  119.536319] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.549560] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  119.553339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  119.562586] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  121.323360] Bluetooth: hci0: command tx timeout
[  121.516745] Bluetooth: hci3: command tx timeout
[  121.517952] Bluetooth: hci2: command tx timeout
[  121.579506] Bluetooth: hci4: command tx timeout
[  121.643411] Bluetooth: hci5: command tx timeout
[  121.643448] Bluetooth: hci7: command tx timeout
[  121.643742] Bluetooth: hci1: command tx timeout
[  121.645180] Bluetooth: hci6: command tx timeout
[  123.372029] Bluetooth: hci0: command tx timeout
[  123.563141] Bluetooth: hci3: command tx timeout
[  123.566011] Bluetooth: hci2: command tx timeout
[  123.627919] Bluetooth: hci4: command tx timeout
[  123.691395] Bluetooth: hci1: command tx timeout
[  123.692140] Bluetooth: hci7: command tx timeout
[  123.692623] Bluetooth: hci5: command tx timeout
[  123.693066] Bluetooth: hci6: command tx timeout
[  125.420543] Bluetooth: hci0: command tx timeout
[  125.611980] Bluetooth: hci2: command tx timeout
[  125.612439] Bluetooth: hci3: command tx timeout
[  125.676927] Bluetooth: hci4: command tx timeout
[  125.739135] Bluetooth: hci7: command tx timeout
[  125.739585] Bluetooth: hci1: command tx timeout
[  125.740988] Bluetooth: hci5: command tx timeout
[  125.741016] Bluetooth: hci6: command tx timeout
[  127.466938] Bluetooth: hci0: command tx timeout
[  127.659057] Bluetooth: hci3: command tx timeout
[  127.660128] Bluetooth: hci2: command tx timeout
[  127.724635] Bluetooth: hci4: command tx timeout
[  127.787143] Bluetooth: hci5: command tx timeout
[  127.787952] Bluetooth: hci1: command tx timeout
[  127.788701] Bluetooth: hci6: command tx timeout
[  127.789539] Bluetooth: hci7: command tx timeout
[  179.084007] syz-executor.4 (285) used greatest stack depth: 24544 bytes left
[  181.762984] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.765933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.768965] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.778172] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.784237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.834115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  181.837738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  181.840118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  181.846233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  181.850340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  181.890715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  181.899552] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  181.901372] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  181.910771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  181.915539] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  181.931941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  181.936467] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  181.941272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  181.945560] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.950455] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  181.955301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  181.956998] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  181.963197] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.970440] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.990138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  181.994224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  181.994522] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  182.000563] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  182.004588] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  182.005551] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  182.007106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  182.007805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  182.012456] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  182.037372] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  182.037379] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  182.052639] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  182.068534] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  182.076221] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  182.079156] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  182.088047] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  183.851058] Bluetooth: hci0: command tx timeout
[  183.915954] Bluetooth: hci1: command tx timeout
[  183.978941] Bluetooth: hci2: command tx timeout
[  184.107614] Bluetooth: hci4: command tx timeout
[  184.108764] Bluetooth: hci3: command tx timeout
[  184.109316] Bluetooth: hci5: command tx timeout
[  184.171984] Bluetooth: hci7: command tx timeout
[  184.172544] Bluetooth: hci6: command tx timeout
[  185.899065] Bluetooth: hci0: command tx timeout
[  185.963042] Bluetooth: hci1: command tx timeout
[  186.027123] Bluetooth: hci2: command tx timeout
[  186.155582] Bluetooth: hci5: command tx timeout
[  186.156934] Bluetooth: hci3: command tx timeout
[  186.157343] Bluetooth: hci4: command tx timeout
[  186.219290] Bluetooth: hci6: command tx timeout
[  186.219707] Bluetooth: hci7: command tx timeout
[  187.946916] Bluetooth: hci0: command tx timeout
[  188.011897] Bluetooth: hci1: command tx timeout
[  188.074897] Bluetooth: hci2: command tx timeout
[  188.203085] Bluetooth: hci3: command tx timeout
[  188.203525] Bluetooth: hci4: command tx timeout
[  188.204887] Bluetooth: hci5: command tx timeout
[  188.268478] Bluetooth: hci7: command tx timeout
[  188.268939] Bluetooth: hci6: command tx timeout
[  189.995902] Bluetooth: hci0: command tx timeout
[  190.059049] Bluetooth: hci1: command tx timeout
[  190.123045] Bluetooth: hci2: command tx timeout
[  190.250993] Bluetooth: hci4: command tx timeout
[  190.251440] Bluetooth: hci3: command tx timeout
[  190.251895] Bluetooth: hci5: command tx timeout
[  190.315282] Bluetooth: hci6: command tx timeout
[  190.315717] Bluetooth: hci7: command tx timeout
[  243.957453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  243.959520] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  243.961148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  243.965234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  243.967555] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  244.037168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  244.043301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  244.050703] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  244.053131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  244.054653] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  244.059364] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  244.063439] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.065034] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  244.068750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.076386] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.127205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.135286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.136666] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.148427] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.154282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  244.262477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.283791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.297873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.304723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.321762] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.379981] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  244.386522] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  244.398536] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  244.416116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  244.418530] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  244.420777] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  244.422153] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  244.426100] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  244.427721] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  244.433116] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  244.434060] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  244.475286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  244.475967] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  244.482704] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  244.482702] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  245.995950] Bluetooth: hci0: command tx timeout
[  246.123151] Bluetooth: hci2: command tx timeout
[  246.186918] Bluetooth: hci1: command tx timeout
[  246.187965] Bluetooth: hci3: command tx timeout
[  246.443366] Bluetooth: hci4: command tx timeout
[  246.506967] Bluetooth: hci6: command tx timeout
[  246.570962] Bluetooth: hci7: command tx timeout
[  246.571516] Bluetooth: hci5: command tx timeout
[  248.044113] Bluetooth: hci0: command tx timeout
[  248.173117] Bluetooth: hci2: command tx timeout
[  248.234931] Bluetooth: hci3: command tx timeout
[  248.235364] Bluetooth: hci1: command tx timeout
[  248.490941] Bluetooth: hci4: command tx timeout
[  248.554947] Bluetooth: hci6: command tx timeout
[  248.619904] Bluetooth: hci7: command tx timeout
[  248.620326] Bluetooth: hci5: command tx timeout
[  250.091151] Bluetooth: hci0: command tx timeout
[  250.218978] Bluetooth: hci2: command tx timeout
[  250.283176] Bluetooth: hci1: command tx timeout
[  250.283611] Bluetooth: hci3: command tx timeout
[  250.538913] Bluetooth: hci4: command tx timeout
[  250.603130] Bluetooth: hci6: command tx timeout
[  250.666935] Bluetooth: hci5: command tx timeout
[  250.667368] Bluetooth: hci7: command tx timeout
[  252.139559] Bluetooth: hci0: command tx timeout
[  252.267931] Bluetooth: hci2: command tx timeout
[  252.331149] Bluetooth: hci3: command tx timeout
[  252.331579] Bluetooth: hci1: command tx timeout
[  252.588163] Bluetooth: hci4: command tx timeout
[  252.650894] Bluetooth: hci6: command tx timeout
[  252.714944] Bluetooth: hci7: command tx timeout
[  252.715380] Bluetooth: hci5: command tx timeout
[  306.313195] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  306.318262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  306.321288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  306.336029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  306.342746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  306.389491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  306.393531] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  306.401602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  306.417558] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  306.421530] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  306.456385] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  306.466369] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  306.484383] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  306.498680] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  306.515438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  306.562057] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  306.571399] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  306.577294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  306.585591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  306.623322] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  306.683113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  306.687428] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  306.708291] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  306.710669] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  306.712983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  306.722722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  306.724390] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  306.729599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  306.733128] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  306.741361] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  306.744719] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  306.759494] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  306.765277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  306.774418] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  306.780186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  306.808117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  306.809820] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  306.823321] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  306.829343] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  306.833311] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  308.395209] Bluetooth: hci0: command tx timeout
[  308.459984] Bluetooth: hci1: command tx timeout
[  308.588880] Bluetooth: hci2: command tx timeout
[  308.715059] Bluetooth: hci3: command tx timeout
[  308.843058] Bluetooth: hci6: command tx timeout
[  308.907156] Bluetooth: hci7: command tx timeout
[  308.907288] Bluetooth: hci4: command tx timeout
[  308.908249] Bluetooth: hci5: command tx timeout
[  310.443241] Bluetooth: hci0: command tx timeout
[  310.508858] Bluetooth: hci1: command tx timeout
[  310.634919] Bluetooth: hci2: command tx timeout
[  310.762965] Bluetooth: hci3: command tx timeout
[  310.891950] Bluetooth: hci6: command tx timeout
[  310.954932] Bluetooth: hci5: command tx timeout
[  310.954963] Bluetooth: hci4: command tx timeout
[  310.955402] Bluetooth: hci7: command tx timeout
[  312.492065] Bluetooth: hci0: command tx timeout
[  312.555766] Bluetooth: hci1: command tx timeout
[  312.684099] Bluetooth: hci2: command tx timeout
[  312.812784] Bluetooth: hci3: command tx timeout
[  312.939936] Bluetooth: hci6: command tx timeout
[  313.002934] Bluetooth: hci4: command tx timeout
[  313.002984] Bluetooth: hci7: command tx timeout
[  313.003409] Bluetooth: hci5: command tx timeout
[  314.538920] Bluetooth: hci0: command tx timeout
[  314.602885] Bluetooth: hci1: command tx timeout
[  314.732172] Bluetooth: hci2: command tx timeout
[  314.859157] Bluetooth: hci3: command tx timeout
[  314.986892] Bluetooth: hci6: command tx timeout
[  315.050990] Bluetooth: hci5: command tx timeout
[  315.051120] Bluetooth: hci7: command tx timeout
[  315.051471] Bluetooth: hci4: command tx timeout
[  368.957939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  368.961691] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  368.964814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  368.976361] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  368.982456] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.045631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.050112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.054272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.064381] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.067794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.233555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.254404] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.262360] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.273092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.300789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.323762] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  369.331421] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.336617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  369.339302] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  369.344105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  369.353083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  369.354474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  369.357422] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  369.398707] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  369.402294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  369.412302] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  369.412388] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  369.446737] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  369.455817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  369.460504] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  369.464764] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  369.471535] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  369.479421] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  369.492057] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  369.495892] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  369.498360] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  369.510240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  369.519316] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  369.528694] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  369.535293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  371.052088] Bluetooth: hci0: command tx timeout
[  371.115975] Bluetooth: hci1: command tx timeout
[  371.371959] Bluetooth: hci2: command tx timeout
[  371.434906] Bluetooth: hci3: command tx timeout
[  371.499902] Bluetooth: hci4: command tx timeout
[  371.563941] Bluetooth: hci6: command tx timeout
[  371.626999] Bluetooth: hci7: command tx timeout
[  371.690992] Bluetooth: hci5: command tx timeout
[  373.099526] Bluetooth: hci0: command tx timeout
[  373.163962] Bluetooth: hci1: command tx timeout
[  373.418901] Bluetooth: hci2: command tx timeout
[  373.482938] Bluetooth: hci3: command tx timeout
[  373.547261] Bluetooth: hci4: command tx timeout
[  373.610934] Bluetooth: hci6: command tx timeout
[  373.674946] Bluetooth: hci7: command tx timeout
[  373.739540] Bluetooth: hci5: command tx timeout
[  375.147048] Bluetooth: hci0: command tx timeout
[  375.210937] Bluetooth: hci1: command tx timeout
[  375.466968] Bluetooth: hci2: command tx timeout
[  375.531869] Bluetooth: hci3: command tx timeout
[  375.594905] Bluetooth: hci4: command tx timeout
[  375.659008] Bluetooth: hci6: command tx timeout
[  375.723153] Bluetooth: hci7: command tx timeout
[  375.786908] Bluetooth: hci5: command tx timeout
[  377.194899] Bluetooth: hci0: command tx timeout
[  377.259130] Bluetooth: hci1: command tx timeout
[  377.515085] Bluetooth: hci2: command tx timeout
[  377.578911] Bluetooth: hci3: command tx timeout
[  377.643304] Bluetooth: hci4: command tx timeout
[  377.706931] Bluetooth: hci6: command tx timeout
[  377.771271] Bluetooth: hci7: command tx timeout
[  377.834976] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
07:06:29  Registers:
info registers vcpu 0
RAX=0000000000000367 RBX=ffff888035acf718 RCX=0000000000000040 RDX=ffffffff81bc3b60
RSI=0000000000000000 RDI=ffffffff81624da3 RBP=ffff888035acf6e8 RSP=ffff888035acf6a0
R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff86414657 R11=0000000000000001
R12=0000000000000200 R13=1ffff11006b59ee4 R14=ffffed1006b59ee3 R15=ffff888035acf720
RIP=ffffffff81738d90 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe4300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f09c2281020 CR3=0000000024f14000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff88806cf08b40 RCX=ffff88806cf089cc RDX=1ffff1100d9e118c
RSI=ffffffff819c141d RDI=ffff88806cf08b4c RBP=ffff88806cf08c60 RSP=ffff88806cf08a58
R8 =0000000000000001 R9 =ffff88806cf08ab8 R10=000000000003b53d R11=0000000000021ea4
R12=ffff88806cf08b40 R13=0000000000000000 R14=ffff888035c23700 R15=ffff888034e99b90
RIP=ffffffff81604ab3 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0c09dce44e CR3=000000002dddc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff00ffff
XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000