Warning: Permanently added '[localhost]:30991' (ECDSA) to the list of known hosts.
2025/06/25 10:36:42 fuzzer started
2025/06/25 10:36:43 dialing manager at localhost:42423
syzkaller login: [  111.604727] cgroup: Unknown subsys name 'net'
[  111.752552] cgroup: Unknown subsys name 'cpuset'
[  111.788637] cgroup: Unknown subsys name 'rlimit'
2025/06/25 10:37:00 syscalls: 202
2025/06/25 10:37:00 code coverage: enabled
2025/06/25 10:37:00 comparison tracing: enabled
2025/06/25 10:37:00 extra coverage: enabled
2025/06/25 10:37:00 setuid sandbox: enabled
2025/06/25 10:37:00 namespace sandbox: enabled
2025/06/25 10:37:00 Android sandbox: enabled
2025/06/25 10:37:00 fault injection: enabled
2025/06/25 10:37:00 leak checking: enabled
2025/06/25 10:37:00 net packet injection: enabled
2025/06/25 10:37:00 net device setup: enabled
2025/06/25 10:37:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/25 10:37:00 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/25 10:37:00 USB emulation: enabled
2025/06/25 10:37:00 hci packet injection: enabled
2025/06/25 10:37:00 wifi device emulation: enabled
2025/06/25 10:37:00 802.15.4 emulation: enabled
2025/06/25 10:37:00 fetching corpus: 0, signal 0/0 (executing program)
2025/06/25 10:37:01 starting 8 fuzzer processes
10:37:01 executing program 0:
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x8, 0x7c, {0x7c, 0x5, "fa625e935a17d6a76929c1fcb9ecf832405cabe50f3f6edd4e6ad83c0a865cf10c6bd96cf5d2361a8152f04c5e6a16bb4a087f68b334f604c6c70110467f34b34fe0f897ee67c89012e3cb0421feffe3d52a0440c78996aaffed47136efd3812c844317f61af5fe3712b8840af942d329b649b8a4afa336a10e9"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x0, 0x8, 0x43, "ca97bab13c76c7287f82110dd7233dcee10dd291279b523d86304f85165d90e9e7d28d088aff87fe17018d7679d82e2e455f06e3f4005ca30b2c27b26f1b90e9862912"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x20, 0x8001, 0x8, 0x8000, 0x4, 0x9e5, 0x1, 0xad, 0x4, 0x1f, 0x2, 0x88c}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x20000000}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000340)={0x20, 0x89, 0x2}})
r0 = syz_usb_connect$cdc_ecm(0x2, 0x6b, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x6, 0xa0, 0x3, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x1f, {{0x6, 0x24, 0x6, 0x0, 0x0, '6'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xffffff80, 0x28e5, 0x40, 0x9}, [@country_functional={0xc, 0x24, 0x7, 0x0, 0xbe8, [0xa947, 0x8, 0x81]}, @mbim_extended={0x8, 0x24, 0x1c, 0x800, 0xfb, 0x101}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x8, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0x8, 0x7f}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x1d, 0x0, 0x0, 0x40, 0x1}, 0xab, &(0x7f00000004c0)={0x5, 0xf, 0xab, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x1f, "239aab8ea9c246ec1c24c9e43ecd8887"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x3, 0xb55}, @generic={0x6f, 0x10, 0xd, "a8a5d3851062fe422eb6a41f97a008addd1fa2b92d7aba2b3aa730980b75ea96c400e9c1f6025f55a6dfe5211364eb20e20586c423a2674e1dacb318328969de2810c54b143a86fc0f08fee34e2b96f732ccfe5eea9e149adf5f77eca04bede5f8b18bcdd579dd124228003b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x5, 0x81, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x6, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x6, 0x0, 0x4, 0xff}]}, 0x2, [{0x8f, &(0x7f0000000580)=@string={0x8f, 0x3, "b0878625dcb532a2a07dee177178cc2053ff44b64fa35aad2435de887d179d6caff7ab79a500b87476b4afc52d1a713c6a858068045fbb1840729255616d275f4dfb5b1492c6d399c874b6d6fa8f6b585560430a381ac022ed5a53acba67d8f45c8c22899146e86d4ed7d2045a83b68c31ea878d4db7d79ac657a2bbdbea0dc70477f042c589e3a1f38a4de6b7"}}, {0x2f, &(0x7f0000000640)=@string={0x2f, 0x3, "aa83f8363887551755e052e0fd194754b9d7653d81511dcbaae5e0cac67018bb52c5ccd72e1c24c806aff42853"}}]})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x20, 0x22, 0x1a, {0x1a, 0x7, "3a3317264ed0ded7bf1b153bb24797e07e577f0204d4b153"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000780)={0x40, 0x0, 0x83, "6b92b6dfdf900de6883c27b7239fa0aef91840fe3c1cc1033166a2ea4021d63ad57c24184e6613fa77820cdf352f3b3021d7d6374c20360332843afbbe296eff6df758cbd23b2b6e1af76c04fe259d4f962d01ef16e9a53a1880de7704a02150e0fb9f363dfac27c27909473499ea6309e4f1cc8a56f91ecd8e27768a51dfae5f4a0f7"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x3}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240440c1}, 0x4000)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000b80)={0x14, &(0x7f0000000a80)={0x20, 0x7, 0xa8, {0xa8, 0x31, "a3dda5938b9c6e3d5cbf3a21556f1b37fddf7a4c4f0e8830b36e3da93f75b296071f517c5f691029a0f9c2af437ea61aba29e697bd46ac3b84c3a8bdb446b1a21435381193c7712c5ff5351019a41d106752736b5691fa07337634ef206dd384b91b67ba3554663c657de330dd1cd2a9aa22ba694edb4821130f44921c6060ba1b61b5b6c0486b215b396cb97ee9f8607862fbf4c9844e50834b6c74b32f08c59896bda10933"}}, &(0x7f0000000b40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x1c, &(0x7f0000000bc0)={0x20, 0x0, 0xd9, "311f535ff426b6507fd00f28becc0083074005e3c234921ed38366ef06f4761809d337155cd66aaeaf287a68141b7060a639e3d29cf0fd630b9c3792105ab8e736483389df79f16a13ae6edf601607e27c1719c93835e9a342779eae3afc7965eac99a433c97f25247a340fa0fbcfb8f8701561f1131c6bcac444a64e9c397e3fafa644dac1cf99513a84712ad7109c527ca2d3577ab7acb5d55f5aabb5433742e54caa39202e07631f0dff38d8b6ac2d26a8b718a3f55691f5c9ef55c8f53b3da6c5899c09f78a2594b1b3fa102ed8ca47a4963197f1443b8"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0xff}})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004740)='/proc/cgroups\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000047c0), r1)
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000004940)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004900)={&(0x7f0000004800)={0xdc, r4, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff9}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4008006)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000004a80)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004a40)={&(0x7f00000049c0)={0x54, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000004d40)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004b00)={0x1f8, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe08}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x120, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x14a, @local, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7a7, @local, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x48001}, 0x44010)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000004ec0)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004e80)={&(0x7f0000004dc0)={0xa4, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd09}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb38}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000001)
recvmsg$unix(r3, &(0x7f0000005100)={&(0x7f0000004f00), 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000004f80)=""/41, 0x29}], 0x1, &(0x7f0000005000)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}, 0x40002001)
r8 = syz_genetlink_get_family_id$tipc2(0xfffffffffffffffd, r3)
sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000005340)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005300)={&(0x7f0000005180)={0x15c, r8, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6523}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x400, @private2, 0x22080}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r9, &(0x7f00000054c0)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005480)={&(0x7f0000005400)={0x70, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000)

10:37:01 executing program 1:
r0 = semget$private(0x0, 0x3, 0x40a)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x3f, 0x8])
r1 = semget(0x0, 0x3, 0xc)
semctl$SEM_STAT(r1, 0x4, 0x12, &(0x7f0000000040)=""/170)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7741d196}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72f4bce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x96c1fbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb04adb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a74429e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x717131c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = semget(0x0, 0x0, 0x400)
semctl$GETPID(r2, 0x4, 0xb, &(0x7f0000000280)=""/165)
r3 = semget(0x0, 0x0, 0x130)
clock_gettime(0x0, &(0x7f0000000380)={<r4=>0x0, <r5=>0x0})
semtimedop(r3, &(0x7f0000000340)=[{0x4, 0x114f, 0x1000}, {0x5, 0xff, 0x1800}, {0x3, 0x200, 0x1000}, {0x1, 0x8}], 0x4, &(0x7f00000003c0)={r4, r5+60000000})
clock_getres(0x5, &(0x7f0000000400))
clock_getres(0x3, &(0x7f0000000440))
prctl$PR_GET_DUMPABLE(0x3)
semctl$SETVAL(r2, 0x2, 0x10, &(0x7f0000000480)=0xfffffff7)
semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000004c0)=""/83)
semctl$GETNCNT(r0, 0x3, 0xe, &(0x7f0000000540)=""/65)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000600))
semctl$SEM_STAT_ANY(r3, 0x2, 0x14, &(0x7f0000000800))
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f0000000940)=""/4, 0x4}, {&(0x7f0000000980)=""/254, 0xfe}, {&(0x7f0000000a80)=""/156, 0x9c}, {&(0x7f0000000b40)=""/9, 0x9}, {&(0x7f0000000b80)=""/51, 0x33}], 0x6}, 0x12001)

10:37:01 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x14)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xfc, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4018010}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {<r2=>0xee01, <r3=>0x0}}, './file0\x00'})
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0xc010)
recvmsg$unix(r1, &(0x7f00000006c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000500)=""/80, 0x50}, {&(0x7f0000000580)=""/131, 0x83}], 0x2, &(0x7f0000000680)=[@rights={{0x38, 0x1, 0x1, [<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40000166)
inotify_add_watch(r10, &(0x7f0000000700)='./file0\x00', 0x440008d0)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r4)
sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, r12, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfc59}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x22}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44001}, 0x4000001)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r13=>r9, {r2, r3}}, './file0\x00'})
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r13, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1f4, 0x0, 0x400, 0xfffff000, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x7ff}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xfffe}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xa934}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6, 0x16, 0x200}, {0x5}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x1ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5ad}, {0x6, 0x16, 0xfffb}, {0x5}, {0x6, 0x11, 0xd2}, {0x8, 0xb, 0xb8c4}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x400c004}, 0x11)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r11, &(0x7f0000000c00)={0x2})
recvmsg$unix(r5, &(0x7f0000002340)={&(0x7f0000000c40), 0x6e, &(0x7f0000002280)=[{&(0x7f0000000cc0)=""/11, 0xb}, {&(0x7f0000000d00)=""/162, 0xa2}, {&(0x7f0000000dc0)=""/4, 0x4}, {&(0x7f0000000e00)=""/95, 0x5f}, {&(0x7f0000000e80)=""/17, 0x11}, {&(0x7f0000000ec0)=""/193, 0xc1}, {&(0x7f0000000fc0)=""/191, 0xbf}, {&(0x7f0000001080)=""/221, 0xdd}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/199, 0xc7}], 0xa}, 0x40000120)
r14 = syz_genetlink_get_family_id$nbd(&(0x7f00000023c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x6c, r14, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x82}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x35}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd047}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24040014}, 0x48082)
timer_create(0x1, &(0x7f0000002600)={0x0, 0x3d, 0x1, @thr={&(0x7f0000002500)="10b60c7785bd3cd1de1eadfd5e5c2f754a8e19835192a074ad996566b1550b9cad46ca644194f94bf03a46d565cd94eabd315dd21f4d0599f134b3953a4e33c92b95b03e9b7812e61f57de3c37789e0c61ef854c27cb2a35e87e9adb8cc36ecddd60c4918720753f0ffc8624f2355c97a4fef804319126ab73827ee8ec81e36ff3f6d5de287bc7f9ace74c986fa4777f33ea017f8028215d76e301bf314092524ba8b5a49ada5fb385e79fdf0dd74bab", &(0x7f00000025c0)="d8b86b8559e40f2a45"}}, &(0x7f0000002640)=<r15=>0x0)
timer_delete(r15)
recvmsg$unix(r7, &(0x7f0000003dc0)={&(0x7f0000002680)=@abs, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002700)=""/215, 0xd7}, {&(0x7f0000002800)=""/114, 0x72}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/19, 0x13}, {&(0x7f0000002940)=""/89, 0x59}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/156, 0x9c}, {&(0x7f0000003a80)=""/206, 0xce}, {&(0x7f0000003b80)=""/64, 0x40}, {&(0x7f0000003bc0)=""/242, 0xf2}], 0xa, &(0x7f0000003d80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r16=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r17=>0x0}}}], 0x40}, 0x2003)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r13, 0xc018937b, &(0x7f0000003e00)={{0x1, 0x1, 0x18, <r18=>r16, {r17, 0xee01}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r18, 0xc018937b, &(0x7f0000003e40)={{0x1, 0x1, 0x18, r8, {r2, r3}}, './file0\x00'})

10:37:01 executing program 3:
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x10000005})
getresuid(&(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {<r4=>r1, <r5=>0xffffffffffffffff}}, './file0\x00'})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000180)={{0x2, r4, r5, r2, r5, 0x22, 0x2}, 0x7, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x3})
io_setup(0x40, &(0x7f0000000200))
epoll_pwait(r3, &(0x7f0000000240)=[{}, {}], 0x2, 0x7, &(0x7f0000000280)={[0x400]}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r6=>r3, {r0, 0xffffffffffffffff}}, './file0\x00'})
inotify_add_watch(r6, &(0x7f0000000300)='./file0\x00', 0x8b)
io_setup(0xce, &(0x7f0000000340)=<r7=>0x0)
io_destroy(r7)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff, {r2, r5}}, './file0\x00'})
epoll_pwait(r8, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xb72, &(0x7f0000000440)={[0x8]}, 0x8)
recvmsg$unix(r3, &(0x7f0000001980)={&(0x7f0000000480), 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000500)=""/70, 0x46}, {&(0x7f0000000580)=""/178, 0xb2}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000700)=""/91, 0x5b}, {&(0x7f0000000780)=""/149, 0x95}, {&(0x7f0000000840)=""/120, 0x78}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001940)=[@cred={{0x1c}}], 0x20}, 0x12042)
inotify_add_watch(r8, &(0x7f00000019c0)='./file0\x00', 0x44000604)
openat$procfs(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/keys\x00', 0x0, 0x0)
r9 = epoll_create(0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000002d00))
io_pgetevents(r7, 0xffffffffffffffff, 0x3, &(0x7f0000002f00)=[{}, {}, {}], &(0x7f0000002f80)={0x0, 0x989680}, &(0x7f0000003000)={&(0x7f0000002fc0)={[0x5]}, 0x8})
write$selinux_attr(0xffffffffffffffff, &(0x7f0000003080)='system_u:object_r:ksm_device_t:s0\x00', 0x22)

10:37:01 executing program 4:
r0 = semget$private(0x0, 0x2, 0x80)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/235)
semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000100)=0x8)
semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000140)=0x8)
semctl$SEM_STAT(r0, 0x4, 0x12, &(0x7f0000000180)=""/86)
r1 = semget(0x0, 0x3, 0x8)
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000200)=""/252)
semctl$IPC_RMID(r0, 0x0, 0x0)
r2 = getegid()
stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresgid(&(0x7f0000000680), &(0x7f00000006c0)=<r4=>0x0, &(0x7f0000000700))
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000740)={{0x2, 0x0, r2, r3, r4, 0x0, 0x81}, 0x68d, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x5})
r5 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r6=>r5, {r3, r2}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r7=>r5, {r3, r4}}, '.\x00'})
sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x906, @local, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}]}]}, 0x6c}}, 0x8000000)
semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)=[0x8000])
semtimedop(0xffffffffffffffff, &(0x7f0000000a00)=[{0x2, 0x8, 0x1000}, {0x4, 0x8, 0x800}, {0x1, 0x7f}, {0x3, 0x2}, {0x4, 0x9, 0x800}, {0x0, 0x5928, 0x800}], 0x6, &(0x7f0000000a40)={0x77359400})
sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "1f44027802d3f5c55f7552734c6598e0f1ca768d271dd9c251c492b4fc454ec6fa4b72aa"}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0)
semctl$IPC_INFO(r1, 0x2, 0x3, &(0x7f0000000bc0)=""/176)

[  129.632314] audit: type=1400 audit(1750847821.682:7): avc:  denied  { execmem } for  pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:37:01 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x20400d0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r3, 0x10746f826e3ca794, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c041}, 0x4000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000480)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x80}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x852}, 0x2000e004)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, r3, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x84}}, 0x24004081)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x6}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20008005)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r9, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x74}, 0x1, 0x0, 0x0, 0x8804}, 0x8090)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x80004)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, <r10=>0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'})
sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbac}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x4000000)

10:37:01 executing program 6:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000040), 0x6e, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/235, 0xeb}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/173, 0xad}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000480)=""/221, 0xdd}], 0x7, &(0x7f0000000600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r3=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r4=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r5=>0x0}}}], 0xf0}, 0x20)
recvmsg$unix(r2, &(0x7f0000002e00)={&(0x7f0000000740), 0x6e, &(0x7f0000002c80)=[{&(0x7f00000007c0)=""/193, 0xc1}, {&(0x7f00000008c0)=""/226, 0xe2}, {&(0x7f00000009c0)=""/170, 0xaa}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/197, 0xc5}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/205, 0xcd}], 0x7, &(0x7f0000002d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r7=>0x0}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, <r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r14=>0xffffffffffffffff]}}], 0xf0}, 0x40010101)
ioprio_set$uid(0x0, r7, 0x6000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r14, 0xc018937b, &(0x7f0000002e40)={{0x1, 0x1, 0x18, <r15=>r10, {r4, <r16=>r5}}, './file0\x00'})
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r15, &(0x7f0000002e80)={0x20000004})
syz_genetlink_get_family_id$devlink(&(0x7f0000002ec0), r10)
io_setup(0x9, &(0x7f0000002f00))
syz_genetlink_get_family_id$l2tp(&(0x7f0000002f40), r9)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000003200)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000031c0)={&(0x7f0000002fc0)={0x1cc, 0x0, 0x180, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa72}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc68}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x66d893a6}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffc4f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa32}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x225c000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x57}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x251}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb21d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97f7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20060000}, 0x84)
getresuid(&(0x7f0000003240), &(0x7f0000003280), &(0x7f00000032c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003300)={<r17=>0xffffffffffffffff})
recvmsg$unix(r13, &(0x7f0000003800)={&(0x7f0000003340), 0x6e, &(0x7f0000003680)=[{&(0x7f00000033c0)=""/162, 0xa2}, {&(0x7f0000003480)=""/140, 0x8c}, {&(0x7f0000003540)=""/40, 0x28}, {&(0x7f0000003580)=""/132, 0x84}, {&(0x7f0000003640)=""/28, 0x1c}], 0x5, &(0x7f0000003700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r18=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r19=>0x0}}}, @cred={{0x1c}}], 0xf8}, 0x42)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f0000003840)={{0x1, 0x1, 0x18, r17, {r19, r16}}, './file0\x00'})
gettid()
stat(&(0x7f0000003880)='./file0\x00', &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, <r20=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f0000003940)={{0x1, 0x1, 0x18, r0, {r20, r3}}, './file0/file0\x00'})
getresgid(&(0x7f0000003980), &(0x7f00000039c0)=<r21=>0x0, &(0x7f0000003a00))
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000003a40)={{0x1, r20, r21, r19, r18, 0x40, 0x5}, 0x7fff, 0x20fad96d, 0x0, 0x0, 0x0, 0x0, 0x4})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003b00)=""/181, 0xb5}, {&(0x7f0000003bc0)=""/179, 0xb3}], 0x2, &(0x7f0000003cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x0)

10:37:01 executing program 7:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x82200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40000010)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x300}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa4e}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffff00}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000001)
syz_usb_connect$cdc_ecm(0x0, 0x80, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x1, 0x0, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x7f, 0x3, 0x2, 0x6, 0x0, 0x38, {{0x9, 0x24, 0x6, 0x0, 0x0, "3be2470d"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x1, 0x0, 0x38}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}, @dmm={0x7, 0x24, 0x14, 0x42, 0x8fa}, @ncm={0x6, 0x24, 0x1a, 0x7bd0, 0xe}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x1f, 0x8000}, @call_mgmt={0x5, 0x24, 0x1, 0x4, 0x2e}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0xff, 0x1d}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xf8, 0x1f, 0x4d}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x20, 0x9}}}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x200, 0xff, 0x0, 0x20, 0x20, 0x3f}, 0x19, &(0x7f0000000940)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xdf, "614d979e96f51724b3d138f4225d330b"}]}, 0xa, [{0x24, &(0x7f0000000980)=@string={0x24, 0x3, "08fb12cdb1eb3c65752de9d937b2148c494a444a5b25160442fb0e860d3369a7d588"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x40b}}, {0xe2, &(0x7f0000000a00)=@string={0xe2, 0x3, "a7ae05222d4d3af03986b08b97f442d9ab1554fdff81d5ff940d613f90e08e25b6a17522109fda7fd4aa4a61a9d13162a53dfb87244ec0ec6980f6953a0be13d905d49002f90fcaa9d79cd20f406ba70bfdaa09f725bd664346f121e4d89bee17a7196806ecb0802a2d5750357991d7f233dd9d60e559e498b4eea04338a76de4d93b3c9befe212410c5c7176a6c85abce6c537095ef1f9ad2a39148bcd755ecd7376dbf80fab1aa243fd88dd51a692fdd503a7f4d604e1d71685ff74ddef02257cf3ad135f25e3514a8282663a8f1711ec82a935d9988abe121637d391ff1ab"}}, {0x48, &(0x7f0000000b00)=@string={0x48, 0x3, "bef9dc0c5eaab49c216d2c5d2020a1461b0bf97e76f2a9de8ec311a2d5a3800dff26ad6c6eb060913e8692f02bac37f3d8a5bc16c141c34d953ffe20b5e1cb1bd3e88b936819"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x8b3}}, {0x75, &(0x7f0000000bc0)=@string={0x75, 0x3, "ee131fcee1702420459ed8b3bfbe6744b2196824384d4b744b3bdb3f4612a3e9879b8aca4d565b247979d0bbe2ffe07a0cab521584de9f3d0b5c2f69cec3c7d5995afe3faf8d4b01104b10a88d64cb25643fa5ffbe5a43dee36578baa87788cf375f8cf9f621204981a18165d5594f0d0cd8f4"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x459}}, {0x30, &(0x7f0000000d00)=@string={0x30, 0x3, "41fa92ea292dd2ca05878bd234ae702ea19ba9136a896e2e1d88754d09b0bbd17a9c577e4619e4a3b77c1db16ee1"}}]})
sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x38, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4054)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0xc002040}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xa4, r7, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x41}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x200000d0}, 0x80c4)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001100), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001380)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000001140)={0x1f0, r8, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49a2a533}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fe2fd64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7622d75a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e9c572c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44fb4cab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a7f7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b91fafa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6aa3dab6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67e3684d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7692f2a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ab74c7c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe8, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x449ff236}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d78088c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9996a4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f1a74bf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dc82d49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2902bfca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe6567f3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77fdac34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a40054a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75453181}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2053c945}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75192fc1}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c7a5942}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38ff3a82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3aeff8c8}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x81}, 0x24262c09f39877d8)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000001980)={0x14, &(0x7f0000001840)={0x40, 0x21, 0xea, {0xea, 0x21, "5dd6b9d2d76d2e5435ba7d51e0ce23db27ba3ffa22b7b3b8d2d05e36f4f71e43c5238fb4770ee8a58391ee57ffdbf7543af2d41ebd26f1737826f283f0022bc849c1408755c8b161b6c24526fc4861ed935b98c8e3575b3fa00782d7f0ded7fbba0edac3f511421a8b86c648115105acbadc932f5a0d3c2b1797f5d46e56905b035a94e74ef0760fbd2f44e7681ea91e0658629e6b237cdbc5ac4d25f17dad45dcb561cd637169afffe7bd2d315b476bf7797fe16ffc972f0df6ed078415992584a0a611a2bc497fd0efef18ade00d2d34249fa5753020ed2508113925a96a45cc026348f0c1ea5e"}}, &(0x7f0000001940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001ac0)={0x1c, &(0x7f00000019c0)={0x20, 0x10, 0x78, "2613ec2aafec125570f54cb407478849ab390d780ef891b9636bce8adc861ec5fd1a466cfd1d255ccc50a1f8da3ad45cce13b83db76824f04be088f394aa5ebebaa0f6ea3b4e32d39ec75b12fde1325cd3ae2b30c175bb5cb4490e13ad4872e3a2d03b8993887270c062874795dcd3b3885f780cc8faa1d3"}, &(0x7f0000001a40)={0x0, 0xa, 0x1, 0x4f}, &(0x7f0000001a80)={0x0, 0x8, 0x1, 0x94}})

[  131.133455] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  131.138971] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  131.147411] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  131.162991] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.166759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.169499] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.174488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.181690] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  131.184253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.186312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.191452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  131.192284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  131.198300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.199419] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  131.199653] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.202779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  131.219982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.223110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  131.228134] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  131.229058] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.231344] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  131.232375] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  131.235702] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  131.236623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  131.246199] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  131.248703] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  131.262304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  131.264293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  131.269811] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  131.274298] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  131.276271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  131.280229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  131.292814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  131.296157] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  131.314023] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  131.316092] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  131.322477] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  131.323548] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  131.324895] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  131.348215] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  133.283406] Bluetooth: hci0: command tx timeout
[  133.347417] Bluetooth: hci5: command tx timeout
[  133.349287] Bluetooth: hci2: command tx timeout
[  133.351090] Bluetooth: hci6: command tx timeout
[  133.351133] Bluetooth: hci1: command tx timeout
[  133.410955] Bluetooth: hci3: command tx timeout
[  133.410980] Bluetooth: hci4: command tx timeout
[  133.412324] Bluetooth: hci7: command tx timeout
[  135.331086] Bluetooth: hci0: command tx timeout
[  135.396141] Bluetooth: hci5: command tx timeout
[  135.396385] Bluetooth: hci6: command tx timeout
[  135.397219] Bluetooth: hci2: command tx timeout
[  135.397262] Bluetooth: hci1: command tx timeout
[  135.459175] Bluetooth: hci4: command tx timeout
[  135.460629] Bluetooth: hci3: command tx timeout
[  135.460658] Bluetooth: hci7: command tx timeout
[  137.381948] Bluetooth: hci0: command tx timeout
[  137.443864] Bluetooth: hci1: command tx timeout
[  137.444347] Bluetooth: hci6: command tx timeout
[  137.444792] Bluetooth: hci2: command tx timeout
[  137.445270] Bluetooth: hci5: command tx timeout
[  137.507878] Bluetooth: hci4: command tx timeout
[  137.508383] Bluetooth: hci3: command tx timeout
[  137.508403] Bluetooth: hci7: command tx timeout
[  139.427898] Bluetooth: hci0: command tx timeout
[  139.492868] Bluetooth: hci5: command tx timeout
[  139.493341] Bluetooth: hci2: command tx timeout
[  139.493508] Bluetooth: hci6: command tx timeout
[  139.493776] Bluetooth: hci1: command tx timeout
[  139.554880] Bluetooth: hci7: command tx timeout
[  139.555142] Bluetooth: hci4: command tx timeout
[  139.555347] Bluetooth: hci3: command tx timeout
[  191.638886] syz-executor.7 (296) used greatest stack depth: 24816 bytes left
[  193.973380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.977985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.980614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.985365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.989387] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.046573] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  194.050659] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  194.055403] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  194.061360] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.066440] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  194.072679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  194.086202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.092131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.102766] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  194.107878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.121025] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  194.132153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.146271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  194.182742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  194.200609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  194.207367] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  194.218919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  194.222723] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  194.227001] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  194.233539] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  194.236196] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  194.240311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  194.246579] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  194.252091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  194.253921] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  194.257425] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  194.259676] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  194.275172] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  194.287130] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  194.291128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  194.300257] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  194.320008] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  194.342303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.347524] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  194.361134] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  196.005034] Bluetooth: hci0: command tx timeout
[  196.132185] Bluetooth: hci1: command tx timeout
[  196.194917] Bluetooth: hci2: command tx timeout
[  196.323579] Bluetooth: hci3: command tx timeout
[  196.387057] Bluetooth: hci6: command tx timeout
[  196.388922] Bluetooth: hci5: command tx timeout
[  196.450969] Bluetooth: hci4: command tx timeout
[  196.451008] Bluetooth: hci7: command tx timeout
[  198.051373] Bluetooth: hci0: command tx timeout
[  198.178974] Bluetooth: hci1: command tx timeout
[  198.243258] Bluetooth: hci2: command tx timeout
[  198.372871] Bluetooth: hci3: command tx timeout
[  198.434980] Bluetooth: hci6: command tx timeout
[  198.435483] Bluetooth: hci5: command tx timeout
[  198.499048] Bluetooth: hci4: command tx timeout
[  198.499186] Bluetooth: hci7: command tx timeout
[  200.100479] Bluetooth: hci0: command tx timeout
[  200.227273] Bluetooth: hci1: command tx timeout
[  200.291853] Bluetooth: hci2: command tx timeout
[  200.418921] Bluetooth: hci3: command tx timeout
[  200.483932] Bluetooth: hci5: command tx timeout
[  200.484101] Bluetooth: hci6: command tx timeout
[  200.546913] Bluetooth: hci7: command tx timeout
[  200.547138] Bluetooth: hci4: command tx timeout
[  202.146897] Bluetooth: hci0: command tx timeout
[  202.274930] Bluetooth: hci1: command tx timeout
[  202.339175] Bluetooth: hci2: command tx timeout
[  202.467385] Bluetooth: hci3: command tx timeout
[  202.531901] Bluetooth: hci6: command tx timeout
[  202.532393] Bluetooth: hci5: command tx timeout
[  202.595954] Bluetooth: hci7: command tx timeout
[  202.596437] Bluetooth: hci4: command tx timeout
[  254.720581] syz-executor.6 (2534) used greatest stack depth: 24752 bytes left
[  256.567258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  256.571610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  256.574620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  256.581155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  256.587067] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  256.696554] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  256.702204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  256.707328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  256.716140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  256.721238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  256.831883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  256.839378] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  256.844611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  256.845122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  256.859702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  256.860672] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  256.878576] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  256.886484] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  256.889884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  256.894468] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  256.900780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  256.914242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  256.919500] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  256.938157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  256.947007] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  256.955801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  256.975194] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  256.982137] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  256.990206] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  257.014430] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  257.027350] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  257.030163] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  257.034627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  257.035594] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  257.039666] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  257.041136] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  257.077641] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  257.095028] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  257.106874] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  257.124311] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  258.658979] Bluetooth: hci0: command tx timeout
[  258.786966] Bluetooth: hci1: command tx timeout
[  258.915748] Bluetooth: hci3: command tx timeout
[  258.978933] Bluetooth: hci2: command tx timeout
[  259.042992] Bluetooth: hci4: command tx timeout
[  259.110020] Bluetooth: hci5: command tx timeout
[  259.237670] Bluetooth: hci6: command tx timeout
[  259.238042] Bluetooth: hci7: command tx timeout
[  260.706992] Bluetooth: hci0: command tx timeout
[  260.836046] Bluetooth: hci1: command tx timeout
[  260.963028] Bluetooth: hci3: command tx timeout
[  261.027093] Bluetooth: hci2: command tx timeout
[  261.091993] Bluetooth: hci4: command tx timeout
[  261.154999] Bluetooth: hci5: command tx timeout
[  261.282985] Bluetooth: hci7: command tx timeout
[  261.284352] Bluetooth: hci6: command tx timeout
[  262.755061] Bluetooth: hci0: command tx timeout
[  262.882956] Bluetooth: hci1: command tx timeout
[  263.012074] Bluetooth: hci3: command tx timeout
[  263.075009] Bluetooth: hci2: command tx timeout
[  263.139129] Bluetooth: hci4: command tx timeout
[  263.203018] Bluetooth: hci5: command tx timeout
[  263.331428] Bluetooth: hci6: command tx timeout
[  263.332624] Bluetooth: hci7: command tx timeout
[  264.803027] Bluetooth: hci0: command tx timeout
[  264.931168] Bluetooth: hci1: command tx timeout
[  265.059246] Bluetooth: hci3: command tx timeout
[  265.123256] Bluetooth: hci2: command tx timeout
[  265.187009] Bluetooth: hci4: command tx timeout
[  265.252072] Bluetooth: hci5: command tx timeout
[  265.379041] Bluetooth: hci7: command tx timeout
[  265.380520] Bluetooth: hci6: command tx timeout
[  319.542785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  319.552605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  319.554623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  319.567209] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  319.576124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  319.622653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  319.625532] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  319.627120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  319.629850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  319.632474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  319.636161] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  319.648110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  319.649290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  319.653754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  319.661873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  319.732681] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  319.747246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  319.766268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  319.777743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  319.787023] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  319.816687] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  319.822673] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  319.825356] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  319.833152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  319.854066] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  319.856600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  319.871630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  319.876253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  319.879427] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  319.883564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  319.957249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  319.962321] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  319.975214] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  319.986445] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  320.013415] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  320.066465] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  320.074052] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  320.080481] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  320.090337] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  320.098670] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  321.635074] Bluetooth: hci0: command tx timeout
[  321.699007] Bluetooth: hci2: command tx timeout
[  321.699656] Bluetooth: hci1: command tx timeout
[  321.891030] Bluetooth: hci3: command tx timeout
[  321.954935] Bluetooth: hci4: command tx timeout
[  322.082931] Bluetooth: hci7: command tx timeout
[  322.275158] Bluetooth: hci5: command tx timeout
[  322.531090] Bluetooth: hci6: command tx timeout
[  323.683772] Bluetooth: hci0: command tx timeout
[  323.747130] Bluetooth: hci2: command tx timeout
[  323.748747] Bluetooth: hci1: command tx timeout
[  323.942000] Bluetooth: hci3: command tx timeout
[  324.002933] Bluetooth: hci4: command tx timeout
[  324.133199] Bluetooth: hci7: command tx timeout
[  324.322899] Bluetooth: hci5: command tx timeout
[  324.578956] Bluetooth: hci6: command tx timeout
[  325.731015] Bluetooth: hci0: command tx timeout
[  325.795112] Bluetooth: hci2: command tx timeout
[  325.797065] Bluetooth: hci1: command tx timeout
[  325.986912] Bluetooth: hci3: command tx timeout
[  326.051199] Bluetooth: hci4: command tx timeout
[  326.179457] Bluetooth: hci7: command tx timeout
[  326.370953] Bluetooth: hci5: command tx timeout
[  326.628560] Bluetooth: hci6: command tx timeout
[  327.778925] Bluetooth: hci0: command tx timeout
[  327.842932] Bluetooth: hci1: command tx timeout
[  327.844441] Bluetooth: hci2: command tx timeout
[  328.035999] Bluetooth: hci3: command tx timeout
[  328.099166] Bluetooth: hci4: command tx timeout
[  328.226945] Bluetooth: hci7: command tx timeout
[  328.418904] Bluetooth: hci5: command tx timeout
[  328.674920] Bluetooth: hci6: command tx timeout
[  382.201609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  382.207189] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  382.210204] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  382.220250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  382.225790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  382.275321] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  382.278125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.280729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.287114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.292616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.358397] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  382.368113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  382.373261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  382.393498] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  382.399598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  382.406072] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  382.408665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  382.411414] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  382.415555] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  382.421555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  382.431336] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  382.440218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  382.443409] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  382.452524] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  382.469318] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  382.547416] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  382.555137] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  382.558267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  382.566185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  382.579128] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  382.581453] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  382.602167] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  382.604590] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  382.610790] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  382.613640] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  382.619659] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  382.631042] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  382.643141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  382.663052] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  382.673427] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  384.290937] Bluetooth: hci0: command tx timeout
[  384.354967] Bluetooth: hci1: command tx timeout
[  384.484037] Bluetooth: hci2: command tx timeout
[  384.546915] Bluetooth: hci3: command tx timeout
[  384.546967] Bluetooth: hci4: command tx timeout
[  384.675097] Bluetooth: hci6: command tx timeout
[  384.739051] Bluetooth: hci7: command tx timeout
[  384.739953] Bluetooth: hci5: command tx timeout
[  386.338972] Bluetooth: hci0: command tx timeout
[  386.404241] Bluetooth: hci1: command tx timeout
[  386.530980] Bluetooth: hci2: command tx timeout
[  386.595356] Bluetooth: hci3: command tx timeout
[  386.595623] Bluetooth: hci4: command tx timeout
[  386.722920] Bluetooth: hci6: command tx timeout
[  386.786928] Bluetooth: hci5: command tx timeout
[  386.787369] Bluetooth: hci7: command tx timeout
[  388.387106] Bluetooth: hci0: command tx timeout
[  388.453140] Bluetooth: hci1: command tx timeout
[  388.579212] Bluetooth: hci2: command tx timeout
[  388.643360] Bluetooth: hci4: command tx timeout
[  388.644884] Bluetooth: hci3: command tx timeout
[  388.772360] Bluetooth: hci6: command tx timeout
[  388.835067] Bluetooth: hci7: command tx timeout
[  388.837899] Bluetooth: hci5: command tx timeout
[  390.435314] Bluetooth: hci0: command tx timeout
[  390.499859] Bluetooth: hci1: command tx timeout
[  390.626899] Bluetooth: hci2: command tx timeout
[  390.691231] Bluetooth: hci4: command tx timeout
[  390.691697] Bluetooth: hci3: command tx timeout
[  390.818904] Bluetooth: hci6: command tx timeout
[  390.883186] Bluetooth: hci5: command tx timeout
[  390.883254] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
10:42:12  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000246 RCX=0000000000000004 RDX=0000000000000002
RSI=0000000000000006 RDI=ffff88802b923700 RBP=ffff88802b923700 RSP=ffff88802dc57b38
R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff86414657 R11=0000000000000001
R12=0000000000000000 R13=ffff88802b924158 R14=0000000000000000 R15=ffff88802d2ac280
RIP=ffffffff815189a5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f050b2948e0 CR3=000000002df0b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000202 RCX=0000000000000001 RDX=0000000000000000
RSI=ffff88806cf3bb50 RDI=ffff8880161ec180 RBP=ffff88800a62fa20 RSP=ffff88800a62f950
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff88806cf3bb30 R13=ffffea0000369f00 R14=ffff888008c4b780 R15=ffff88800da7c6f0
RIP=ffffffff81a79049 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa20466a27c CR3=0000000036192000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e
XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249
XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000