Warning: Permanently added '[localhost]:44603' (ECDSA) to the list of known hosts.
2025/06/22 19:13:24 fuzzer started
2025/06/22 19:13:24 dialing manager at localhost:33119
syzkaller login: [  101.416018] cgroup: Unknown subsys name 'net'
[  101.571077] cgroup: Unknown subsys name 'cpuset'
[  101.620912] cgroup: Unknown subsys name 'rlimit'
2025/06/22 19:13:39 syscalls: 2214
2025/06/22 19:13:39 code coverage: enabled
2025/06/22 19:13:39 comparison tracing: enabled
2025/06/22 19:13:39 extra coverage: enabled
2025/06/22 19:13:39 setuid sandbox: enabled
2025/06/22 19:13:39 namespace sandbox: enabled
2025/06/22 19:13:39 Android sandbox: enabled
2025/06/22 19:13:39 fault injection: enabled
2025/06/22 19:13:39 leak checking: enabled
2025/06/22 19:13:39 net packet injection: enabled
2025/06/22 19:13:39 net device setup: enabled
2025/06/22 19:13:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/22 19:13:39 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/22 19:13:39 USB emulation: enabled
2025/06/22 19:13:39 hci packet injection: enabled
2025/06/22 19:13:39 wifi device emulation: enabled
2025/06/22 19:13:39 802.15.4 emulation: enabled
2025/06/22 19:13:39 fetching corpus: 0, signal 0/0 (executing program)
2025/06/22 19:13:41 starting 8 fuzzer processes
19:13:41 executing program 0:
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x1, 0x5, 0x6, 0x5}, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa4c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x62}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe642}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @local, 0x1b07}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x2000c800}, 0x44040)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000280)={0x7, 0x7, 0x1}, &(0x7f00000002c0)=0x28)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'})
write$P9_RSTAT(r0, &(0x7f0000000380)={0x44, 0x7d, 0x2, {0x0, 0x3d, 0x9a13, 0x100, {0x20}, 0xa8200000, 0x101, 0x8, 0x8001, 0x4, 'eth\x00', 0x4, 'eth\x00', 0x1, '\x00', 0x1, '^'}}, 0x44)
r2 = socket$packet(0x11, 0x0, 0x300)
fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000400), &(0x7f0000000440)={'L-', 0xfa}, 0x16, 0x2)
tee(r0, r2, 0x20, 0x5)
getresgid(&(0x7f0000000480), &(0x7f00000004c0)=<r3=>0x0, &(0x7f0000000500))
write$P9_RSTATu(r0, &(0x7f0000000540)={0x5b, 0x7d, 0x1, {{0x0, 0x43, 0xfffc, 0x6, {0x2, 0x4, 0x3}, 0x30800000, 0x6, 0x3f24, 0x1, 0x7, '-!})\xe9,\'', 0x1, '^', 0x4, 'udp\x00', 0x4, 'udp\x00'}, 0x3, ')-@', 0xffffffffffffffff, r3, 0xffffffffffffffff}}, 0x5b)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f00000005c0)=""/161)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f00000006c0))
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x210, 0x0, 0x60c, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x49}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x97d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc394}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1d894804}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}]}, @TIPC_NLA_BEARER={0x170, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @loopback, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80, @mcast2, 0x800}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7cf}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x1}, 0x44004)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
r5 = open(&(0x7f0000000a00)='./file0\x00', 0x101000, 0x0)
ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000a40))

19:13:41 executing program 1:
mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000, 0x103)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80, 0x1)
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = syz_open_dev$sg(&(0x7f0000000300), 0x4, 0x800)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000340)={{0x0, 0x8, 0x1, 0x3f, 0x80, 0x100, 0x3, 0xc9, 0x92b, 0x6, 0x6, 0xffff, 0x100000000, 0x7fffffff, 0xbf6}})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001340)={{r3}, "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"})
r4 = openat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x280, 0x11f)
ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205)
fstatfs(r0, &(0x7f0000002380)=""/43)
ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f00000023c0)={0x19e, 0x7})
openat2$dir(0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', &(0x7f0000002440)={0x200100, 0xc2, 0x4}, 0x18)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002480), 0x50900, 0x0)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x54, 0x13, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x8000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000002740)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002600)=""/170, 0xaa, 0x0, &(0x7f00000026c0)=""/84, 0x54}, &(0x7f0000002780)=0x40)
write$P9_RSYMLINK(r4, &(0x7f00000027c0)={0x14, 0x11, 0x1, {0x20, 0x0, 0x7}}, 0x14)
pipe2(&(0x7f0000002840)={<r6=>0xffffffffffffffff}, 0x4800)
syz_genetlink_get_family_id$batadv(&(0x7f0000002800), r6)

19:13:41 executing program 2:
setpriority(0x0, 0x0, 0x8)
r0 = getpid()
migrate_pages(r0, 0x0, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x1f)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_intel_sdw_acpi', 0xe8c0, 0x0)
fcntl$setown(r1, 0x8, r0)
prlimit64(0x0, 0x2, &(0x7f00000000c0)={0xfffffffffffffbff, 0x2}, &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x9a)
mlockall(0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x68094)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x80800, 0x0)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000300)={@private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x0, 0x1, 0x47c6, 0x0, 0x830, 0x4})
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000380)={0x2}, 0x4)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000003c0)=0x2)
r4 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil)
r5 = geteuid()
r6 = getpgrp(r0)
shmctl$IPC_SET(r4, 0x1, &(0x7f0000000400)={{0x0, r5, 0xee01, 0xffffffffffffffff, 0x0, 0x1a5, 0x9}, 0x80000000, 0x1, 0x3, 0x101, r0, r6, 0xfffb})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2d1315237e4700be}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x5e4}, {0x8, 0x15, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

19:13:42 executing program 3:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040012}, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x4002, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xec, r2, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xdc00, 0x60}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0xc49}, {0x8, 0x0, 0x200}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_IE={0x75, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0xa8, 0x3, @broadcast, 0x8, "", 0xe5, 0x1, @device_b, 0x9}}, @gcr_ga={0xbd, 0x6, @broadcast}, @tim={0x5, 0x46, {0x2, 0x4f, 0x40, "39c3cc0722ac14e2c56e501d7cb81b445799fe275d8ff2ff04ba7314ad4bc359221736ea9b625f2d90b36149cefd70f27976ffaac6876f2ba33bf458ab6eea8367132f"}}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}]}, 0xec}, 0x1, 0x0, 0x0, 0xdf2ac8d63d4dbf5c}, 0x804)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x21, 0xa8, @random="72c772c10cfd4202eb26d3c4026f63c54b1b2d4adc854110c252b0f4ae"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10080}, 0x4040050)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000500)=""/158, &(0x7f00000005c0)=0x9e)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000640)=0x8)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000680)='wg0\x00', 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, r3, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x11}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x2c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x10}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800)
r4 = socket$netlink(0x10, 0x3, 0xb)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000008c0)={'ip6_vti0\x00', <r6=>0x0, 0x29, 0x1, 0x5, 0x1798, 0x9, @empty, @empty, 0x40, 0x20, 0x5, 0x100}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0x100, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x39}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xae}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000080)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r3, 0x11, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xff}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xed5}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x91)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000d40)={'wg0\x00'})
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r1)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000001240)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000e00)={0x3c4, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x86}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5695}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6a3d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb08c}}}}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xae, 0x3, "b9eea9cbdfb57c4c52bc913db41509bf50243fad27295f80e5ba277bf53b2a1439077680c793a839ffa81d6b34d7832bd99501477f905cc4f2c9fe2c7674205e97e526a24e0ccd441afd27b0cb4b1809f26914c47230c5d7127f6bf31dae6e2b89ebb9ad0697446b63053a0c13b7b4594f2c11e0eb154ae84e81503a6c76d906f8f43c22e5f4154e8c26e49812743ed847e3ce550d24b8710a385412edd6f29f792c852a3c642a8c36e4"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "d196f3265651954e5dc8bb9025935722d8a1d3a76a8b29442ed1df02c3459de5fa7d0205"}}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xceb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x8080}, 0x40000)

[  118.438891] audit: type=1400 audit(1750619622.045:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
19:13:42 executing program 4:
ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f0000000000)={0x3, 0x7, 0x0, 0x9, 0x20, 0x7f, @lba=0x625b, @lba=0x8})
ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000040)={0x65, 0x7f, 0x3, 0x3, 0x86, 0x9})
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000ac0)={[0x8000000000000]}, 0x8)
lseek(r0, 0x6, 0x3)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000b00))
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), r0)
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000e40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x22c, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf0, 0x3, "6e4150f69edbc48c838f23a39abb8fdb3e85a060cdcdea85bf25b4c7843e55713c58f56a6f2da8b0e7861ca7035157679a4a44434a0fc4f4c954ff4322ebfbc554d4d86504533ebcb1ba851b98849b0f6922795dd428286d4a35d06eb3f085cbc662eda8cbcaef45363d38386097d737e1497112a805e9746d93c51b324218d937a1ab288685c84dcec4614a1952391e290aa75009affbcd2b8854749f0df49df2698e2fb8280eb9c994d51299bcde16a8b2232bee0716764551eef063e83e7126160b7dd3273ddb277df675e2485a19a2d420d8300f823cbcf0ec7d0b99e16214ff4af859c92dd674c389bc"}, @TIPC_NLA_NODE_ID={0x36, 0x3, "8ad6461cc6aaa5776f244c9495cf65f033f09a8912a178b47aca5eef4b8df2aa98383b3ada9e0dace95f8451f13c27380032"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x39}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x75b7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x65}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000e80)=0x8)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000ec0))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x30, r2, 0xc9cdb11220d2aec6, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x401, 0x2e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000880)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000014c0)={0xa, &(0x7f0000001440)=[{0xb2, 0x3, 0x9, 0xffffffff}, {0xf0, 0x40, 0x9, 0x8}, {0xa2, 0xed, 0x8, 0xfff}, {0x7, 0x4, 0x7, 0x5}, {0x8000, 0x8, 0x3, 0x3}, {0x1, 0x81, 0x20}, {0xf1, 0x3f, 0xd0, 0x5}, {0x800, 0xff, 0x2, 0x8}, {0x6, 0x5, 0x23, 0x2}, {0x5, 0xff, 0x7f, 0x5}]})
r5 = fcntl$dupfd(r4, 0x0, r4)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001540), r0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001640)={'vcan0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000001700)={'syztnl1\x00', &(0x7f0000001680)={'ip6tnl0\x00', <r8=>0x0, 0x2d, 0x80, 0x9, 0x69, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf8c0, 0x7800, 0x9, 0x7}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001800)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x6c, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000}, 0x20000800)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x40000)
ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000001940))

19:13:42 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x101000)
ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x2})
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x400001, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000140))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={<r3=>r2, 0x1, 0x1, 0x291e})
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='status\x00')
getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4)
process_madvise(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="f71b1e", 0x3}, {&(0x7f00000002c0)="1fb2f38a32812f61d3eed641947257ff6c122e3a30d14c7d42117bd2353ed7212ed88db33249bfb5e5a6f6bcf504c101fcc21f557ad5bcfcb540d8e37799f14fc902a8c30ef9a59d40d7ef69db403518e48a61ba353d98bf4c5eed0ad547703415f0f6e6c220f656c0edf43243e9262b251e1533a7602295d83ba33f74b87e5e4a7edcba688f28ba3f2f016ed970a7a9408de44d67", 0x95}, {&(0x7f0000000380)="574d663a34bef41a7a831a1b0c6e598d06ce354038eda1c0bac48155c0904bbb396e1fc999914158119d5078c7cc35265822de9c703636eac7b039d7e46f5c05e4ca8fad501d24350a995866bd51be0511150e838fbd76e1d1d7f9553f32156fbb0b222a52a4754fdaf48ef1a78d8a4a0baad2f6ccc4a5f47dd8d8de313f0ca4c3d86a943e42f8a21c778878464862aa0b21b6dd114d794dbb0032d3f9459986d8d10d55e8b7726c66d65f6aaca2ecc928bbfba8ad03846a273c3c3b9c40fa27680e5c2382cdd207d741832202f4a8ad", 0xd0}], 0x3, 0xc, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x31cc1aea5fd664da)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f00000004c0)={0x8, 'veth0_vlan\x00', {'geneve1\x00'}, 0x7})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000500))
ioctl$BLKRRPART(r3, 0x125f, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = syz_open_dev$sg(&(0x7f0000000540), 0xfff, 0x40000)
ioctl$FICLONE(r5, 0x40049409, r6)
ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f0000000580))
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xc0004001}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xfc, 0x0, 0x120, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xde, 0xfa, "f2728ae296d9ca413b3696aea51eaa0a1f8bb6f805a979a27c7ecf7cef05d410ff26f19a20359fdf9e332b70c2116e49c3890247ef03f9830b92cd20d61ab73798a41d1ac76fbccca1ce163f4ff095d9cd3e19057bb4f34e72eabf84580c34f67e41d8b3134ea8cf9f9ab5b7ef8f935fabf8e284f3fcc519ed46e5749c2f8853e80f64ae39f8ad981d07c8f6dfa5bf5f49f1266ea569b465c73cf92c0995d7732872b7d960480459b481bb2c7c518d1f66af4bdc7de813a1cc5140ab90f4a760934c446339ce84e2b36f5e6a620d39609e2ae8800e71efe2b6cf"}]]}, 0xfc}, 0x1, 0x0, 0x0, 0x4011}, 0x88)

19:13:42 executing program 6:
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffc6b, 0x2b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x270}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004881}, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x138, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0x8c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xad}}]}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}]}, 0x138}, 0x1, 0x0, 0x0, 0x48041}, 0x44001)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000480)={{0x2, 0x20}, 'port1\x00', 0x40, 0x180054, 0x1, 0x6, 0x1, 0x7fffffff, 0x80000001, 0x0, 0x5, 0x1})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000680)={&(0x7f0000000540), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x48005}, 0x40)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xe8, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x12}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, [{0x2}, {0x60, 0x1}, {0x9}, {0x60, 0x1}, {0x9}, {0x60, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x6}, {0xb}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_MESH_SETUP={0x40, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}]}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xb1}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4c}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x5b}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x8}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x52}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x80}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xfffff62f}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40085}, 0x11)
r4 = signalfd4(r1, &(0x7f0000000880)={[0xec1]}, 0x8, 0x80000)
ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000008c0)={0x7fff, 0x7, 0x1, 0x300, 0x5, "045a728a12773ef9c7126fa6a7b9eef8cbfcad", 0x3000000, 0x80000000})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r5=>r4, {<r6=>r4}}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000940)={0x3, 0x7, 0x0, 'queue0\x00', 0x7})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x28}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x50)
syz_extract_tcp_res(&(0x7f0000000c80), 0x71, 0xffffffff)
socketpair(0x9, 0x4, 0x101, &(0x7f0000000cc0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r1)
sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x94, r8, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x75}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x4}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x44e587f3}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x40d0)

19:13:42 executing program 7:
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x3)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1)
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000040)=0x3)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x5)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x3ff, 0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100))
r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r1, {0x3}}, './file0\x00'})
write$cgroup_devices(r1, &(0x7f00000001c0)={'b', ' *:* ', 'w\x00'}, 0x8)
ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000200)={0x1, 0x3e26, @status={[0x101, 0x5, 0x4, 0x3ff, 0x1]}, [0x4, 0x4c4140f3, 0x3a, 0x50, 0x4, 0x0, 0x200, 0x6, 0x6, 0x0, 0xffffffffffff8000, 0x9, 0x9, 0x9, 0x8001, 0x80, 0xd2, 0x4, 0xfffffffffffffffa, 0x3, 0x8001, 0x7fff, 0xc90, 0x1f, 0x4, 0x20, 0x1, 0x6, 0xe85, 0x8001, 0x6, 0x88d2, 0x100000000, 0x6, 0xff, 0x400, 0x77b, 0x3, 0x80, 0x6, 0xdb, 0x7a, 0x8, 0x800, 0x1, 0x2, 0x754, 0x10000000000, 0x20, 0x45, 0x9, 0x6, 0x4, 0x8, 0xfffffffffffffff9, 0x3ff, 0x1000, 0x7, 0x17, 0x6, 0xfffffffffffffff9, 0xcf, 0x7, 0x4]})
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000c40)={{0x1, 0x1, 0x18, <r3=>r2, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'})
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000cc0)=0x1)
r4 = syz_open_dev$vcsa(&(0x7f0000000d00), 0x9, 0x121881)
ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000d40)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x1}}, './file0\x00'})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x4000, 0x0)
vmsplice(r6, &(0x7f0000001000)=[{&(0x7f0000000dc0)="bb6c775c46e55d7d31094fd384a8d3766b193e297df13848ae2e00f0e58524b80304fbe1ead53d4813d7aa6723927655f2d387256b2fa855250212894a9052777b058e745eb8a205a77c326199e6e3974b06d00abee255157823aa341fa201d97de281816bd208c28f448f0ca6702ffc4a26f69f2ef67b87b5d43d4916d4aa43cb6563e7597c5e7bf27d5cbcc20b2589dd4ea21d65b4f3b7be8cf02f8824191822698fe11a5a4e897d7eeef0b899a05a54cb32e6a81b649dee3c5c00ab82313d7c0a1e47c2079cd5b49839672a", 0xcd}, {&(0x7f0000000ec0)="177e11386957226f5cc4c3068ce55f56784f17f12a68a528411788a1f83b67e02a5be58df30f926193693c9699f83107edad4a5503b57731224bbb8675dc1e93bc0b00e79593c1861800cfa5fd4f037c9aeae93b19134593e95d9dd8f564c5c7807222974c160fd95fd4f20610a938a826c1910b7121323e290192a5834213c56d1766be8934a68e806e2e6411e70ed685325a8a3c6d1e9037383d280154c84381e4907dc39be9b2837fc50274092fb60aa3cfd722d611b88f4760a52e17b58655e880cfeb898758cf66327c7c9731a93a4191a4f331e42cfe34b32d96806ba4d1f7054f", 0xe4}, {&(0x7f0000000fc0)="5f2b4b47aa021e5a33ed331773c04ca3eb082b88feee98deb235cfad3bddf58c86b1a64289e4cdc87061b1223b6e981c97fd38", 0x33}], 0x3, 0x8)
ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000001040))
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0)

[  119.805344] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.810814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.816807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.827132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.832843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.937012] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.944599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.952002] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.968659] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.975630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  120.004432] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.021042] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.022830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.026691] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.028445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.035429] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.061211] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.071411] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  120.072896] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.084775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.134549] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  120.142057] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  120.147643] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  120.147766] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  120.151694] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  120.155872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  120.158476] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  120.164047] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  120.169851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  120.170709] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  120.171609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  120.174703] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  120.184125] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  120.185705] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  120.204094] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  120.205575] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  120.228808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  120.228840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  120.234703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  120.266428] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  121.889769] Bluetooth: hci0: command tx timeout
[  122.083347] Bluetooth: hci1: command tx timeout
[  122.144394] Bluetooth: hci3: command tx timeout
[  122.144899] Bluetooth: hci2: command tx timeout
[  122.272222] Bluetooth: hci7: command tx timeout
[  122.336550] Bluetooth: hci4: command tx timeout
[  122.337619] Bluetooth: hci6: command tx timeout
[  122.338089] Bluetooth: hci5: command tx timeout
[  123.937176] Bluetooth: hci0: command tx timeout
[  124.129279] Bluetooth: hci1: command tx timeout
[  124.192419] Bluetooth: hci2: command tx timeout
[  124.192796] Bluetooth: hci3: command tx timeout
[  124.320278] Bluetooth: hci7: command tx timeout
[  124.385387] Bluetooth: hci5: command tx timeout
[  124.385799] Bluetooth: hci6: command tx timeout
[  124.386245] Bluetooth: hci4: command tx timeout
[  125.985211] Bluetooth: hci0: command tx timeout
[  126.176650] Bluetooth: hci1: command tx timeout
[  126.240250] Bluetooth: hci2: command tx timeout
[  126.240690] Bluetooth: hci3: command tx timeout
[  126.368626] Bluetooth: hci7: command tx timeout
[  126.433176] Bluetooth: hci4: command tx timeout
[  126.433204] Bluetooth: hci6: command tx timeout
[  126.433606] Bluetooth: hci5: command tx timeout
[  128.032787] Bluetooth: hci0: command tx timeout
[  128.226248] Bluetooth: hci1: command tx timeout
[  128.288247] Bluetooth: hci3: command tx timeout
[  128.288437] Bluetooth: hci2: command tx timeout
[  128.416346] Bluetooth: hci7: command tx timeout
[  128.480470] Bluetooth: hci6: command tx timeout
[  128.481385] Bluetooth: hci5: command tx timeout
[  128.481771] Bluetooth: hci4: command tx timeout
[  180.350362] syz-executor.0 (282) used greatest stack depth: 24704 bytes left
[  183.126034] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  183.129580] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  183.133592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  183.136035] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  183.141723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  183.144020] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  183.146378] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  183.150065] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  183.151912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  183.157637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  183.160010] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  183.163766] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  183.169048] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  183.169747] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  183.169933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  183.188932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  183.198890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  183.207877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  183.215007] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  183.218577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  183.220015] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  183.224078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  183.229926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  183.232655] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  183.239769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  183.347657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  183.357873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  183.360909] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  183.370443] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  183.377670] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.437497] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  183.447067] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  183.458638] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  183.464620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  183.495597] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  183.501859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  183.505577] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  183.510455] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  183.551562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  183.567568] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  185.248337] Bluetooth: hci2: command tx timeout
[  185.312597] Bluetooth: hci0: command tx timeout
[  185.377252] Bluetooth: hci1: command tx timeout
[  185.377311] Bluetooth: hci4: command tx timeout
[  185.377840] Bluetooth: hci3: command tx timeout
[  185.441481] Bluetooth: hci5: command tx timeout
[  185.632307] Bluetooth: hci6: command tx timeout
[  185.632328] Bluetooth: hci7: command tx timeout
[  187.296233] Bluetooth: hci2: command tx timeout
[  187.360369] Bluetooth: hci0: command tx timeout
[  187.424374] Bluetooth: hci3: command tx timeout
[  187.424779] Bluetooth: hci4: command tx timeout
[  187.424994] Bluetooth: hci1: command tx timeout
[  187.490257] Bluetooth: hci5: command tx timeout
[  187.680497] Bluetooth: hci7: command tx timeout
[  187.680961] Bluetooth: hci6: command tx timeout
[  189.345545] Bluetooth: hci2: command tx timeout
[  189.408271] Bluetooth: hci0: command tx timeout
[  189.472226] Bluetooth: hci1: command tx timeout
[  189.473214] Bluetooth: hci4: command tx timeout
[  189.473382] Bluetooth: hci3: command tx timeout
[  189.537217] Bluetooth: hci5: command tx timeout
[  189.728262] Bluetooth: hci6: command tx timeout
[  189.728681] Bluetooth: hci7: command tx timeout
[  191.393199] Bluetooth: hci2: command tx timeout
[  191.458661] Bluetooth: hci0: command tx timeout
[  191.520611] Bluetooth: hci3: command tx timeout
[  191.523424] Bluetooth: hci4: command tx timeout
[  191.523580] Bluetooth: hci1: command tx timeout
[  191.584501] Bluetooth: hci5: command tx timeout
[  191.777372] Bluetooth: hci6: command tx timeout
[  191.777558] Bluetooth: hci7: command tx timeout
[  245.298332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  245.301749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.304348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.309504] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  245.313322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  245.362428] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  245.373948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  245.378532] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  245.392313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  245.395123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  245.432468] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  245.437580] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  245.459687] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  245.469543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  245.481424] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  245.501046] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  245.516524] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  245.522417] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  245.533063] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  245.541999] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  245.581759] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  245.590892] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  245.594111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  245.620703] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  245.652374] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  245.662777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  245.664559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  245.677659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  245.679731] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  245.687433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  245.889817] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  245.921740] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  245.934651] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  246.004452] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  246.016855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  246.241994] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  246.246643] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  246.253537] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  246.286468] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  246.346676] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  247.328225] Bluetooth: hci0: command tx timeout
[  247.457677] Bluetooth: hci1: command tx timeout
[  247.521328] Bluetooth: hci2: command tx timeout
[  247.648237] Bluetooth: hci3: command tx timeout
[  247.777418] Bluetooth: hci4: command tx timeout
[  247.904360] Bluetooth: hci5: command tx timeout
[  248.225231] Bluetooth: hci6: command tx timeout
[  248.480238] Bluetooth: hci7: command tx timeout
[  249.376356] Bluetooth: hci0: command tx timeout
[  249.504902] Bluetooth: hci1: command tx timeout
[  249.570295] Bluetooth: hci2: command tx timeout
[  249.696299] Bluetooth: hci3: command tx timeout
[  249.824420] Bluetooth: hci4: command tx timeout
[  249.952597] Bluetooth: hci5: command tx timeout
[  250.272800] Bluetooth: hci6: command tx timeout
[  250.530271] Bluetooth: hci7: command tx timeout
[  251.424272] Bluetooth: hci0: command tx timeout
[  251.552529] Bluetooth: hci1: command tx timeout
[  251.616803] Bluetooth: hci2: command tx timeout
[  251.745495] Bluetooth: hci3: command tx timeout
[  251.872754] Bluetooth: hci4: command tx timeout
[  252.001210] Bluetooth: hci5: command tx timeout
[  252.322199] Bluetooth: hci6: command tx timeout
[  252.576393] Bluetooth: hci7: command tx timeout
[  253.472386] Bluetooth: hci0: command tx timeout
[  253.600217] Bluetooth: hci1: command tx timeout
[  253.664197] Bluetooth: hci2: command tx timeout
[  253.792496] Bluetooth: hci3: command tx timeout
[  253.921241] Bluetooth: hci4: command tx timeout
[  254.049271] Bluetooth: hci5: command tx timeout
[  254.368211] Bluetooth: hci6: command tx timeout
[  254.624397] Bluetooth: hci7: command tx timeout
[  307.642018] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  307.650554] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  307.651029] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  307.653385] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  307.658886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  307.663959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  307.667791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  307.678839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  307.683930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  307.694254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  307.729003] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  307.733836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  307.737402] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  307.747733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  307.753804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  307.780069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.787064] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  307.793649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  307.815637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.824565] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.983106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.989760] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.993617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  307.995216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.999397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  308.006806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  308.010587] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  308.017997] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  308.021807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  308.023768] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  308.027419] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  308.029347] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  308.029746] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  308.038225] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  308.063926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  308.064335] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  308.073534] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  308.078415] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  308.089537] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  308.134512] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  309.792237] Bluetooth: hci0: command tx timeout
[  309.793001] Bluetooth: hci1: command tx timeout
[  309.856524] Bluetooth: hci2: command tx timeout
[  309.920680] Bluetooth: hci3: command tx timeout
[  310.176780] Bluetooth: hci5: command tx timeout
[  310.240798] Bluetooth: hci4: command tx timeout
[  310.304234] Bluetooth: hci7: command tx timeout
[  310.304823] Bluetooth: hci6: command tx timeout
[  311.840368] Bluetooth: hci0: command tx timeout
[  311.840846] Bluetooth: hci1: command tx timeout
[  311.906161] Bluetooth: hci2: command tx timeout
[  311.968264] Bluetooth: hci3: command tx timeout
[  312.224246] Bluetooth: hci5: command tx timeout
[  312.288281] Bluetooth: hci4: command tx timeout
[  312.352769] Bluetooth: hci7: command tx timeout
[  312.353598] Bluetooth: hci6: command tx timeout
[  313.888247] Bluetooth: hci1: command tx timeout
[  313.888730] Bluetooth: hci0: command tx timeout
[  313.952498] Bluetooth: hci2: command tx timeout
[  314.016234] Bluetooth: hci3: command tx timeout
[  314.273217] Bluetooth: hci5: command tx timeout
[  314.336403] Bluetooth: hci4: command tx timeout
[  314.400493] Bluetooth: hci6: command tx timeout
[  314.400938] Bluetooth: hci7: command tx timeout
[  315.937213] Bluetooth: hci0: command tx timeout
[  315.938079] Bluetooth: hci1: command tx timeout
[  316.000463] Bluetooth: hci2: command tx timeout
[  316.064860] Bluetooth: hci3: command tx timeout
[  316.320354] Bluetooth: hci5: command tx timeout
[  316.384474] Bluetooth: hci4: command tx timeout
[  316.448646] Bluetooth: hci7: command tx timeout
[  316.449591] Bluetooth: hci6: command tx timeout
[  369.912517] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  369.917366] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  369.921702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  369.929837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  369.934618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  370.092437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  370.105714] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  370.128650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  370.131046] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  370.150691] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  370.160091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  370.171662] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  370.178112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  370.185666] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  370.188579] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  370.195671] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  370.200774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  370.241081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  370.250299] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  370.256611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  370.315612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  370.334650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  370.341288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  370.359767] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  370.367579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  370.399676] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  370.400076] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  370.417608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  370.420272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  370.433738] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  370.438365] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  370.442554] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  370.454968] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  370.466653] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  370.472011] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  370.879349] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  370.894395] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  370.922434] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  370.950960] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  370.959261] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  372.000389] Bluetooth: hci0: command tx timeout
[  372.321237] Bluetooth: hci1: command tx timeout
[  372.321504] Bluetooth: hci2: command tx timeout
[  372.384231] Bluetooth: hci3: command tx timeout
[  372.512240] Bluetooth: hci6: command tx timeout
[  372.512271] Bluetooth: hci5: command tx timeout
[  372.576216] Bluetooth: hci4: command tx timeout
[  373.088279] Bluetooth: hci7: command tx timeout
[  374.048653] Bluetooth: hci0: command tx timeout
[  374.368284] Bluetooth: hci1: command tx timeout
[  374.368310] Bluetooth: hci2: command tx timeout
[  374.432209] Bluetooth: hci3: command tx timeout
[  374.560702] Bluetooth: hci6: command tx timeout
[  374.561006] Bluetooth: hci5: command tx timeout
[  374.625178] Bluetooth: hci4: command tx timeout
[  375.136335] Bluetooth: hci7: command tx timeout
[  376.096707] Bluetooth: hci0: command tx timeout
[  376.417376] Bluetooth: hci1: command tx timeout
[  376.417424] Bluetooth: hci2: command tx timeout
[  376.481250] Bluetooth: hci3: command tx timeout
[  376.609185] Bluetooth: hci6: command tx timeout
[  376.609206] Bluetooth: hci5: command tx timeout
[  376.672218] Bluetooth: hci4: command tx timeout
[  377.185174] Bluetooth: hci7: command tx timeout
[  378.144233] Bluetooth: hci0: command tx timeout
[  378.464384] Bluetooth: hci2: command tx timeout
[  378.464510] Bluetooth: hci1: command tx timeout
[  378.530428] Bluetooth: hci3: command tx timeout
[  378.656236] Bluetooth: hci5: command tx timeout
[  378.656648] Bluetooth: hci6: command tx timeout
[  378.720463] Bluetooth: hci4: command tx timeout
[  379.232262] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
19:18:42  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffffffff8100148a RCX=ffff88806ce089cc RDX=1ffff1100d9c115a
RSI=ffffffff85c1cc40 RDI=ffffffff8100148a RBP=ffff88806ce08ad0 RSP=ffff88806ce08a48
R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b53d R11=00000000000c469a
R12=ffff88806ce08b40 R13=0000000000000000 R14=ffff88802dc0b700 R15=ffff8880177efa68
RIP=ffffffff8142fa50 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f9f4cf7c540 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe0600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9f4d167620 CR3=0000000026833000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff
XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f
XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000016e0a73f RBX=0000000016e0a73f RCX=0000000000001003 RDX=00007fbde5df403c
RSI=790c280492100c31 RDI=0000000016e0a73f RBP=0000000000000001 RSP=00007ffcb4322810
R8 =00007ffcb4322950 R9 =00007fbde6145440 R10=00007fbde5f73d60 R11=0000000000000007
R12=00007fbde5df7ebc R13=00007fbde5e0fe38 R14=0000000000000009 R15=00007fbde610b510
RIP=00007fbde6123349 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fbde5c01540 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbde60db000 CR3=0000000035670000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000000000ff00000000 XMM01=ffffffffffffffffffffff00ffffffff
XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000000000000042494c4700342e
XMM04=35322e325f4342494c4700332e325f43 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000