Warning: Permanently added '[localhost]:30660' (ECDSA) to the list of known hosts.
2025/06/27 03:38:14 fuzzer started
2025/06/27 03:38:14 dialing manager at localhost:45637
syzkaller login: [   94.060466] cgroup: Unknown subsys name 'net'
[   94.214565] cgroup: Unknown subsys name 'cpuset'
[   94.260929] cgroup: Unknown subsys name 'rlimit'
2025/06/27 03:38:31 syscalls: 2214
2025/06/27 03:38:31 code coverage: enabled
2025/06/27 03:38:31 comparison tracing: enabled
2025/06/27 03:38:31 extra coverage: enabled
2025/06/27 03:38:31 setuid sandbox: enabled
2025/06/27 03:38:31 namespace sandbox: enabled
2025/06/27 03:38:31 Android sandbox: enabled
2025/06/27 03:38:31 fault injection: enabled
2025/06/27 03:38:31 leak checking: enabled
2025/06/27 03:38:31 net packet injection: enabled
2025/06/27 03:38:31 net device setup: enabled
2025/06/27 03:38:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/27 03:38:31 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/27 03:38:31 USB emulation: enabled
2025/06/27 03:38:31 hci packet injection: enabled
2025/06/27 03:38:31 wifi device emulation: enabled
2025/06/27 03:38:31 802.15.4 emulation: enabled
2025/06/27 03:38:31 fetching corpus: 0, signal 0/0 (executing program)
2025/06/27 03:38:33 starting 8 fuzzer processes
03:38:33 executing program 0:
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
r1 = syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="6036fe57071e23a9ff05662756867ca5fb33d4a88f610aea3d", 0x19, 0x88}], 0x980020, &(0x7f0000000240)={[{@huge_within_size}, {@size={'size', 0x3d, [0x33, 0x31, 0x25, 0x6d, 0x36, 0x6d]}}, {@size={'size', 0x3d, [0x65, 0x35, 0x25, 0x33]}}, {@huge_never}, {@huge_always}, {@huge_always}], [{@subj_role={'subj_role', 0x3d, ']-!#'}}, {@euid_eq}]})
ftruncate(r1, 0x6)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20008000)
ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000500)={0xfa, 0x2, 0x5, 0x0, @msf={0x0, 0x2, 0x1}})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r3=>r1, {0x8}}, './file0\x00'})
getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f00000005c0)={'IDLETIMER\x00'}, &(0x7f0000000600)=0x1e)
r4 = syz_io_uring_complete(0x0)
ioctl$CDROMMULTISESSION(r4, 0x5310, &(0x7f0000000640)={@lba=0xf1, 0x0, 0x2})
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000680)=0xffff)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, 0x1, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x1)
r5 = syz_open_dev$vcsu(&(0x7f0000000800), 0x81, 0x802)
ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000840))
bind(r3, &(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x80000000, @mcast2, 0x4, 0x1}, 0x80)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000940)={'#! ', './file0', [{0x20, '.^--'}, {0x20, 'size'}, {0x20, 'size'}, {0x20, '\x8d[}]\t*\\*'}, {0x20, 'wpan1\x00'}, {0x20, '^'}], 0xa, "7a857049670401485aa514b407fadfa1b62f23ac3e50909e5eec9c1ccd9dd09a597852889dd0e4ad7bdd52b18a8523c7e87f75146b3af46ec3fc9ecb98a165899a4f0fea8bbec371658f9a933c3f3667c9f531df195856e48a045ae54ee7b9c8eac3d78ef19a06d6f0185c"}, 0x97)

03:38:33 executing program 1:
r0 = eventfd2(0x6, 0x80001)
r1 = dup2(r0, 0xffffffffffffffff)
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/236)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x6002, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000140)=0x9)
r3 = msgget$private(0x0, 0x208)
msgctl$IPC_RMID(r3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f00000001c0)={r2})
fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f0000000240)=@v2={0x2000000, [{0x0, 0x9}, {0x3, 0x7}]}, 0x14, 0x1)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000280)=""/3)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000002c0)=0x4, 0x4)
msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000300)=""/95)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x24}}, 0x10)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x27}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r5 = open(&(0x7f00000005c0)='./file0\x00', 0x40500, 0xb0)
ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, &(0x7f0000000600)={0x7fffffff, 0x1})
r6 = socket(0x8, 0x2, 0x200)
fcntl$setstatus(r6, 0x4, 0x800)
setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000640)={0x0, 0xee00, 0xffffffffffffffff}, 0xc)

03:38:33 executing program 2:
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0xc00)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'veth1_vlan\x00', {0x7}, 0xd775})
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0))
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000100))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'ipvlan1\x00', {0x2, 0x0, @remote}})
r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x7f, 0x5c040)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000240))
r3 = accept4$inet(r2, 0x0, &(0x7f0000000280), 0x80000)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000002c0))
epoll_pwait(r2, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x7, &(0x7f0000000340)={[0x7fff]}, 0x8)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={<r4=>r2, 0x80000001, 0x45, 0x5})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f00000003c0)='/dev/sg#\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff)
open$dir(&(0x7f0000000440)='\x00', 0x400000, 0xc6)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000005c0))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'})

03:38:33 executing program 3:
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x20, 0x0, 0x5}}, 0x14)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x6, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @local, @local, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="6579a095d185"]})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@remote, @local, <r0=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=<r1=>0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@broadcast, 0x4e23, 0x6, 0x4e23, 0x0, 0x2, 0x80, 0x20, 0x3c, r0, r1}, {0x5, 0x100000001, 0x3f, 0x6b, 0x8, 0x3, 0x8, 0x3}, {0x6, 0x80, 0xff, 0xf36d}, 0x0, 0x6e6bba, 0x1, 0x1, 0x2, 0x1}, {{@in6=@remote, 0x4d3, 0x2b}, 0xa, @in6=@empty, 0x3502, 0x2, 0x2, 0x3f, 0xffff, 0xaa11, 0x20}}, 0xe8)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr\x00')
getsockname$netlink(r2, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000300)={0x7, 0x8})
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000340))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x2c}}}}, [@NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x20}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e)
r5 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x8, 0x2000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5d50, 0x19}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x41}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x3c}}, 0x20008000)
sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r3, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "40e0e3344ac3e6859b9552c3122a1a9c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "1608f11acd308417a11b5ed465c248f7"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x5692bd6954fe3661)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000e00)=@filter={'filter\x00', 0xe, 0x3, 0x56a, [0x0, 0x20000880, 0x20000be4, 0x20000c14], 0x0, &(0x7f0000000840), &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x74, 0x22f0, 'ip6tnl0\x00', 'lo\x00', 'syzkaller1\x00', 'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, [0xff, 0xff, 0xff, 0xff], 0xee, 0xee, 0x166, [@mac={{'mac\x00', 0x0, 0x10}, {{@random="faebb4d14a29"}}}, @ip={{'ip\x00', 0x0, 0x20}, {{@empty, @multicast1, 0xffffffff, 0xffffffff, 0xf8, 0x0, 0x0, 0x18, 0x4e20, 0x4e24, 0x1ff, 0x4e21}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x1000, 0x5, 0x0, 0x0, "c877d3a9cb5f61c77add259128789a7210c627602f1da3df065874dc27dc1103f7d58da796dc20be8d345c90baa4b5fb2b1501942dfabff9e45a4a15e4480fb8"}}}}, {0x9, 0x2, 0x6002, 'wg0\x00', 'rose0\x00', 'macvlan0\x00', 'gre0\x00', @local, [0xff, 0x0, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0x0, 0x0, 0xff], 0xde, 0x19e, 0x1ce, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x2, 0x3ff, 0x3, {0x3}}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x7, 0x3}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x57, 0x3, 0xa74f, 0x0, 0x0, "22a326e2ac2dc7dc2e09ad714560a47365d4620f3eee582e9229ab7f9e2f2d9af5c8942bc36a4df33a0815b922dbff6a51d5147ed8a9dd0857b6dd1522484d16"}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3, 0x2, {0x9b9}}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x5, 0x10, 0xa01, 'veth1_to_team\x00', 'vcan0\x00', 'veth1_virt_wifi\x00', 'nr0\x00', @broadcast, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], 0xae, 0x16e, 0x1a6, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x1, 0x8, 0x4, 0x7, {0x17a2}}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0xa1, 0x678, 0x5, 0x1, 0x0, "ea2d88a5cd25a0ef5f18fdbec14276fbb3d5934baca9970a29a32a79bc0b5f15467ab6c2872f92b9162ad0c9ec06182893d3de8d71e0d94b88ae85c7fae496e3"}}}, @common=@ERROR={'ERROR\x00', 0x20, {"a13abca2001a385e667e528fcc32badb4a4702d1529c202635bbaee27865"}}], @common=@dnat={'dnat\x00', 0x10, {{@random="c3025211ca61", 0xfffffffffffffffc}}}}]}]}, 0x5e2)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0)
sendto$inet(r5, &(0x7f0000000ec0)="b9e88ca4e59205eacbb3823cd78a6d1fb22371fa547f2c4dca044e8a", 0x1c, 0x4, &(0x7f0000000f00)={0x2, 0x4e23, @multicast2}, 0x10)

[  112.322016] audit: type=1400 audit(1750995513.268:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:38:33 executing program 4:
ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000000)={0x40, 0x81, 0xb, 0xaf, 0xf0, 0x3f})
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, 0x464, 0x8, 0x70bd28, 0x25dfdbfd, "97b7815d0ccf579428a4d2529d709b2910357b03ef7efb07eee380c328003d95abde0564bfaa502ef0161d5614b6c3b8ad72a691db7210e9ae58b22ecbf91def5c12a6ecbccaffdc5c385c9a067f030aa206179adfb65ace6502e6195dcba3a2ef48bf4b9fcdfaabe015ba7b8e77b1efbda1a599758bc084d7f62d5a984636d8d5a28cd797e6f06207b74080e5ba6d5446739dfedf9e3adf8360f1dea79d54fcc2226e4e603adf4f0ac52e3ca7f5c88c0165ce8dcd2b51717dffec84095d6d15", ["", "", "", "", "", ""]}, 0xd0}}, 0x24048000)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x1, 0x4, 0x0, 0x0, 0x0, {0xc}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfff}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000041)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x40b00, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000440)={"069b5a45e6ceeee7d881eda1", &(0x7f0000000380)="18c7f5420ebc9c0e04feed0eaffea923cc2c2de1d8723ed69462a0c94b420a8e0c19f877325b51c59812611e29", 0x2d, 0x0, &(0x7f00000003c0)={0x40, 0x0, 0x3, 0x5, 0x0, 0x1, 0x0, "f01a9acb", 0x8, "245e5fd5", 0x6, 0x80, 0x9f, "e189ed", "3a9078127986f51e5f618b23321f918b12a342cd7e291d9cac81d532b89ee3f7289b9fc3a32a2c0627637270d8e8"}, 0x0, 0x6, 0x1, &(0x7f0000000400)})
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000480))
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000885)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0xc}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000005)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x11100080}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r1, 0xa00, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x4040014)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000800))
r2 = syz_open_dev$vcsa(&(0x7f0000000840), 0x4c, 0x8180)
sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x18, 0x3f9, 0x1, 0x70bd28, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4040044}, 0x1)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000980)={0x709, 0x40, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f000000b840)={&(0x7f000000b280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f000000b800)={&(0x7f000000b2c0)={0x52c, 0x0, 0x700, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x19}}}}, [@NL80211_ATTR_PROBE_RESP={0x4fe, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0xa, 0xf, [@chsw_timing={0x68, 0x4, {0x1, 0x1}}]}]}, 0x52c}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
r3 = syz_open_pts(r2, 0x10242)
write$binfmt_misc(r3, &(0x7f000000b880)={'syz1', "82418005261e5b3bb18c26b1b12fb2cf6eea65e5ba1bc774b9a39a2220d599a24756c2c0aadf8956ea2e00cbfdba4630480cd41202c54eb417eb96ad9b19046fb89b5c26c49db782952c91ea4903252564d61f30d03d3d5d8d3e0191abf9328ba829ea5c64ac8cf5c65260283fa294c1a9932cd42d349d5315ebaf371da3"}, 0x82)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f000000b940)={0x1, 'lo\x00', {}, 0xfff})
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f000000b980)=<r4=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f000000b9c0)={"06fc6b4f7df133ce93da8bfa6e551875", r4, 0x0, {0x5e8, 0x1}, {0x2, 0x4}, 0x4, [0x80000001, 0x7, 0x0, 0x1, 0xfffffffffffff800, 0xe4, 0x5, 0x6, 0x8, 0x4, 0x5, 0x6, 0x12, 0x2, 0x2, 0x7fff]})

03:38:33 executing program 5:
prctl$PR_CAPBSET_READ(0x17, 0xd)
socketpair(0x2f, 0x5, 0xffff, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_CAPBSET_READ(0x17, 0x1c)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x3b}}}}, [""]}, 0x28}}, 0x40084)
r4 = signalfd4(r0, &(0x7f00000001c0)={[0x1]}, 0x8, 0x80800)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x85)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x20040, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r4)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000040)
r9 = syz_open_dev$mouse(&(0x7f0000000680), 0x80000000, 0x404000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r7)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r10, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r11 = syz_open_dev$mouse(&(0x7f0000000800), 0x6, 0x608101)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000880)={0x1, &(0x7f0000000840)=[{0xd7ba, 0xf8, 0xf6}]}, 0x10)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)

03:38:33 executing program 6:
ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f0000000000)={0x2})
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x17c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xf, 0x2a, [@challenge={0x10, 0x1, 0xc0}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE={0x13c, 0x2a, [@tim={0x5, 0x1a, {0x3, 0x44, 0x61, "4a60a9a04b433cf9d8db524db662b397e32b71e4bb9087"}}, @random={0x3, 0x71, "d52284da146f2b3cb0cf30232aa34856cffdade709bd20a3488a24afe69f192dc1e0223a863ca5af95acd275e7468bac51ffc224616f7caca693b4bdfb9c5cc1146012d608a53d61b72151e502fa9e496f19f489d0b6ffd102b9fb126c5f2ef670e77b48bf9f74946a1c15bc8f6282eac7"}, @preq={0x82, 0x5c, @not_ext={{0x0, 0x1, 0x1}, 0x20, 0x80, 0xafde, @device_a, 0x10001, "", 0x1f, 0x1, 0x6, [{{0x1}, @broadcast, 0x4}, {{0x1, 0x0, 0x1}, @device_b, 0x81}, {{}, @device_a, 0xb9f0}, {{}, @broadcast, 0xc92e}, {{0x1, 0x0, 0x1}, @broadcast, 0x716f}, {{0x0, 0x0, 0x1}, @device_a, 0x394}]}}, @perr={0x84, 0x49, {0x2, 0x5, [@not_ext={{}, @device_a, 0x7, "", 0x2c}, @not_ext={{}, @broadcast, 0x3, "", 0x3e}, @ext={{}, @device_b, 0x1a30a19b, @device_a, 0x2a}, @not_ext={{}, @device_a, 0x10000, "", 0x1f}, @not_ext={{}, @broadcast, 0xffffffff, "", 0x3}]}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x5}, 0x45)
ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000340)=0x8000)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x8094)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xbc, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x7f}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c8f5101d4da3636d2e56521b8fcc28649387db3456e33086"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a31d7904b170a599d98b02ec4c1da50c777b67150ff37365"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x40040)
r3 = creat(&(0x7f0000000780)='./file0\x00', 0x8)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff}, './file0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{r4}, 0x0, 0xc, @unused=[0x80000000, 0x2, 0x8, 0x5], @subvolid=0x5})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000001800)={0x0, 'bridge0\x00', {0x3}, 0x100})
fcntl$setsig(r4, 0xa, 0x1a)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001840)='/sys/kernel/mm', 0x10800, 0x2)
io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000001880)=r5, 0x1)
r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000018c0)='./binderfs2/binder-control\x00', 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000001900)={0x0, @aes128, 0x0, @desc3})
sendmmsg$unix(r4, &(0x7f0000007b80)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001940)="dda13563588d22c183b3492163c880b67fca54e3fabdc2566f58dca31bd1a194159e5cdbe5", 0x25}, {&(0x7f0000001980)="2f2d49750dc9f5c7", 0x8}, {&(0x7f00000019c0)="417be087e5efe2ed603b2403c9912b8272aa44037a6493fe194370ff2b4f8455ef157b74135139dad95b54206a0291e6d9122d7bc39a39e058a4272afc39c917770bc0ceecf04665cad07a6d62fd599212883eb2fefe10b2e09f92de48f3740ac5fdcf4d2ba058a63b5d1bbd7d56c21392ec2e417facc5d5a7d264257cb85142c02ca13361c8639bc84db8ee9b80cf2e77c9bf6847bbdcdde8a2de53c94efe6a20fcdfdbaf5292d3f61704bcf5", 0xad}, {&(0x7f0000001a80)="16bacf8e116f0dcbaaad867731a07085d2ecf53ac1342bb63847523ee27a9d03d59f4fe9c0012d778c4670b8ee7bc0d1bcc3c76930966017c9e5d973596a061f169a7b1d7930790f5bf95f9d707c385e01e12e0d9ac34605e3c893b3e68049084f8c72d4c17f17e72b46c240c65f980fd2cf050448cd91371b92482170d1e85ee1f202c791b95db15640716313de6790689b2623ab7c614ae256bd8bc5735fbabb254e9b116377990305eee06b12cf752d8c623492686315034b62d2060ce89c1f644ed3f344125d7b60ec8869d2a94902db391429f04b32daaff51a0a5b129e8d24", 0xe2}, {&(0x7f0000001b80)="1885c7c5c024483e77cd08bcea9d6ef2fb390291f5fbe4043aa6c4", 0x1b}], 0x5, &(0x7f0000007a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x100, 0x2400c010}}], 0x1, 0x8000)

03:38:33 executing program 7:
socketpair(0xb, 0x3, 0x1, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0xf596, &(0x7f0000000080)=0x2)
r2 = accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0x80000)
setsockopt(r2, 0x9d, 0xae1, &(0x7f0000000140)="6a82ab10d0d252f97526ca672c0f08a4c1e9ebb803e4f2e91e31cc2820f45312e17db6522590ceeb16671f541b2040703ca6ca71e96d91ded8e149306f69a25b442c36e1e5ee7ac96fbb82594bd555608096f57983", 0x55)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0)
r4 = getpgid(0x0)
fcntl$lock(r2, 0x25, &(0x7f0000000200)={0x2, 0x1, 0x8, 0x2, r4})
ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000240)=""/241)
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000340)=0x7)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000400)={0x0, 0x7, 0x2})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x7ff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x1000)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000580)=[0x6, 0x80000000])
ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f00000005c0)={0x0, 0x3})
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000600))
bind$802154_raw(r0, &(0x7f0000000640)={0x24, @none={0x0, 0x3}}, 0x14)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000680)=[0x7, 0x3])
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000006c0))
sync_file_range(r3, 0x0, 0x8, 0x5)

[  113.779007] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.780602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  113.782983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.784402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.785838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  113.789123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  113.790678] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.794270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  113.800640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.806379] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.847029] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  113.848496] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  113.850619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  113.857689] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  113.863542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  113.910385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  113.912434] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  113.918254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  113.919767] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  113.924497] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  113.924685] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  113.925439] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  113.927752] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  113.928788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  113.936502] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  113.940661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  113.952603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  113.956605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  113.959754] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  113.968368] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.029962] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  114.057612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  114.062162] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  114.067507] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  114.067557] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  114.083663] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  114.088795] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  114.112447] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.114018] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  114.119392] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  115.860385] Bluetooth: hci1: command tx timeout
[  115.861000] Bluetooth: hci0: command tx timeout
[  115.924930] Bluetooth: hci2: command tx timeout
[  115.988973] Bluetooth: hci3: command tx timeout
[  116.052021] Bluetooth: hci4: command tx timeout
[  116.052600] Bluetooth: hci5: command tx timeout
[  116.179959] Bluetooth: hci7: command tx timeout
[  116.243961] Bluetooth: hci6: command tx timeout
[  117.907929] Bluetooth: hci0: command tx timeout
[  117.908380] Bluetooth: hci1: command tx timeout
[  117.973123] Bluetooth: hci2: command tx timeout
[  118.037223] Bluetooth: hci3: command tx timeout
[  118.100127] Bluetooth: hci5: command tx timeout
[  118.100552] Bluetooth: hci4: command tx timeout
[  118.228914] Bluetooth: hci7: command tx timeout
[  118.292026] Bluetooth: hci6: command tx timeout
[  119.956898] Bluetooth: hci1: command tx timeout
[  119.957391] Bluetooth: hci0: command tx timeout
[  120.019942] Bluetooth: hci2: command tx timeout
[  120.084207] Bluetooth: hci3: command tx timeout
[  120.148037] Bluetooth: hci4: command tx timeout
[  120.148531] Bluetooth: hci5: command tx timeout
[  120.275927] Bluetooth: hci7: command tx timeout
[  120.341131] Bluetooth: hci6: command tx timeout
[  122.004079] Bluetooth: hci0: command tx timeout
[  122.004552] Bluetooth: hci1: command tx timeout
[  122.069641] Bluetooth: hci2: command tx timeout
[  122.131990] Bluetooth: hci3: command tx timeout
[  122.196905] Bluetooth: hci4: command tx timeout
[  122.197329] Bluetooth: hci5: command tx timeout
[  122.323996] Bluetooth: hci7: command tx timeout
[  122.387966] Bluetooth: hci6: command tx timeout
[  173.640871] syz-executor.1 (282) used greatest stack depth: 25072 bytes left
[  173.800066] syz-executor.2 (283) used greatest stack depth: 24912 bytes left
[  176.426989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  176.429587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  176.431620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  176.437824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  176.442524] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  176.571808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.575482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.577393] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.580522] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.590122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.594131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.611179] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.616384] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.629341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.650195] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.658684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.668117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.688222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.713371] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.721653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  176.727311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  176.740132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  176.766524] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  176.791147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  176.798404] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  176.808270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  176.824262] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  176.845782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  176.868118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  176.871787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  176.981190] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  176.994223] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  177.020883] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  177.074655] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  177.138751] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  177.244337] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  177.280338] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  177.302340] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  177.337127] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  177.352667] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  178.517243] Bluetooth: hci0: command tx timeout
[  178.708599] Bluetooth: hci1: command tx timeout
[  178.710402] Bluetooth: hci2: command tx timeout
[  178.900158] Bluetooth: hci3: command tx timeout
[  178.901829] Bluetooth: hci4: command tx timeout
[  178.965397] Bluetooth: hci5: command tx timeout
[  179.221586] Bluetooth: hci7: command tx timeout
[  179.412034] Bluetooth: hci6: command tx timeout
[  180.563953] Bluetooth: hci0: command tx timeout
[  180.756015] Bluetooth: hci2: command tx timeout
[  180.756514] Bluetooth: hci1: command tx timeout
[  180.948229] Bluetooth: hci4: command tx timeout
[  180.948718] Bluetooth: hci3: command tx timeout
[  181.013925] Bluetooth: hci5: command tx timeout
[  181.268086] Bluetooth: hci7: command tx timeout
[  181.459980] Bluetooth: hci6: command tx timeout
[  182.611913] Bluetooth: hci0: command tx timeout
[  182.803954] Bluetooth: hci1: command tx timeout
[  182.804426] Bluetooth: hci2: command tx timeout
[  182.996043] Bluetooth: hci3: command tx timeout
[  182.996507] Bluetooth: hci4: command tx timeout
[  183.059951] Bluetooth: hci5: command tx timeout
[  183.316234] Bluetooth: hci7: command tx timeout
[  183.507995] Bluetooth: hci6: command tx timeout
[  184.662348] Bluetooth: hci0: command tx timeout
[  184.852348] Bluetooth: hci1: command tx timeout
[  184.853968] Bluetooth: hci2: command tx timeout
[  185.046031] Bluetooth: hci4: command tx timeout
[  185.046376] Bluetooth: hci3: command tx timeout
[  185.108075] Bluetooth: hci5: command tx timeout
[  185.364063] Bluetooth: hci7: command tx timeout
[  185.556594] Bluetooth: hci6: command tx timeout
[  238.435988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  238.441930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  238.445337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  238.451189] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  238.457489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  238.577581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  238.584822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  238.587480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.599682] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  238.604835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  238.622907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.637191] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.640084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  238.641836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.647437] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  238.650112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  238.655335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.658766] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  238.663378] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.666619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  238.730797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  238.745064] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  238.753815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  238.767903] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  238.775459] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  238.897829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  238.904455] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.906573] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  238.908235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  238.915296] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  238.921184] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.922830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  238.925168] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.947550] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  238.961508] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  238.979767] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.995769] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  239.000367] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  239.022425] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  239.035257] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  240.533580] Bluetooth: hci0: command tx timeout
[  240.660915] Bluetooth: hci1: command tx timeout
[  240.723942] Bluetooth: hci3: command tx timeout
[  240.787951] Bluetooth: hci2: command tx timeout
[  240.851929] Bluetooth: hci4: command tx timeout
[  241.108952] Bluetooth: hci7: command tx timeout
[  241.172500] Bluetooth: hci5: command tx timeout
[  241.236440] Bluetooth: hci6: command tx timeout
[  242.579983] Bluetooth: hci0: command tx timeout
[  242.709352] Bluetooth: hci1: command tx timeout
[  242.774977] Bluetooth: hci3: command tx timeout
[  242.836933] Bluetooth: hci2: command tx timeout
[  242.901299] Bluetooth: hci4: command tx timeout
[  243.157100] Bluetooth: hci7: command tx timeout
[  243.221949] Bluetooth: hci5: command tx timeout
[  243.283951] Bluetooth: hci6: command tx timeout
[  244.629196] Bluetooth: hci0: command tx timeout
[  244.757130] Bluetooth: hci1: command tx timeout
[  244.819995] Bluetooth: hci3: command tx timeout
[  244.886189] Bluetooth: hci2: command tx timeout
[  244.948045] Bluetooth: hci4: command tx timeout
[  245.204958] Bluetooth: hci7: command tx timeout
[  245.269232] Bluetooth: hci5: command tx timeout
[  245.333998] Bluetooth: hci6: command tx timeout
[  246.678878] Bluetooth: hci0: command tx timeout
[  246.805250] Bluetooth: hci1: command tx timeout
[  246.869138] Bluetooth: hci3: command tx timeout
[  246.931954] Bluetooth: hci2: command tx timeout
[  246.996912] Bluetooth: hci4: command tx timeout
[  247.251937] Bluetooth: hci7: command tx timeout
[  247.317218] Bluetooth: hci5: command tx timeout
[  247.382200] Bluetooth: hci6: command tx timeout
[  300.902624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.909540] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.913579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  300.917992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.920894] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  300.927476] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  300.930902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.938921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  300.942044] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  300.948578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  301.040132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.049739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.052595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.059448] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.065653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  301.110392] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  301.119466] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  301.125507] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  301.127832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  301.134131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  301.140608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  301.151323] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  301.164348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  301.204406] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  301.252499] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  301.309303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  301.316003] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  301.319204] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  301.329879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.340023] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  301.367019] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  301.423376] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.436815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  301.442803] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  301.474618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.500623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  301.502564] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  301.506343] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.508351] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  301.532455] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  302.996024] Bluetooth: hci0: command tx timeout
[  302.997544] Bluetooth: hci1: command tx timeout
[  303.124194] Bluetooth: hci2: command tx timeout
[  303.188397] Bluetooth: hci3: command tx timeout
[  303.380095] Bluetooth: hci4: command tx timeout
[  303.636671] Bluetooth: hci5: command tx timeout
[  303.638325] Bluetooth: hci6: command tx timeout
[  303.764006] Bluetooth: hci7: command tx timeout
[  305.045188] Bluetooth: hci1: command tx timeout
[  305.045767] Bluetooth: hci0: command tx timeout
[  305.172373] Bluetooth: hci2: command tx timeout
[  305.237885] Bluetooth: hci3: command tx timeout
[  305.428927] Bluetooth: hci4: command tx timeout
[  305.684968] Bluetooth: hci5: command tx timeout
[  305.685505] Bluetooth: hci6: command tx timeout
[  305.813009] Bluetooth: hci7: command tx timeout
[  307.092415] Bluetooth: hci0: command tx timeout
[  307.092985] Bluetooth: hci1: command tx timeout
[  307.221005] Bluetooth: hci2: command tx timeout
[  307.284952] Bluetooth: hci3: command tx timeout
[  307.475941] Bluetooth: hci4: command tx timeout
[  307.733619] Bluetooth: hci6: command tx timeout
[  307.734190] Bluetooth: hci5: command tx timeout
[  307.860903] Bluetooth: hci7: command tx timeout
[  309.140944] Bluetooth: hci1: command tx timeout
[  309.141448] Bluetooth: hci0: command tx timeout
[  309.268084] Bluetooth: hci2: command tx timeout
[  309.332062] Bluetooth: hci3: command tx timeout
[  309.525938] Bluetooth: hci4: command tx timeout
[  309.782302] Bluetooth: hci5: command tx timeout
[  309.783319] Bluetooth: hci6: command tx timeout
[  309.910208] Bluetooth: hci7: command tx timeout
[  363.051044] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  363.057289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  363.063214] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  363.075649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  363.081525] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  363.251157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  363.259472] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  363.263787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.265599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  363.269644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  363.272615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.274541] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  363.281020] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  363.286101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  363.293393] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  363.370638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  363.379046] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  363.381655] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  363.392452] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  363.400465] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.453513] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.459171] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.464407] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.473473] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.491237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.525387] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.545213] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.561442] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.566359] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  363.573380] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  363.577388] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  363.606936] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.649128] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.652605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  363.654322] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  363.686329] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  363.709780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  363.743151] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  363.820265] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  363.844365] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  365.140200] Bluetooth: hci0: command tx timeout
[  365.395975] Bluetooth: hci1: command tx timeout
[  365.396002] Bluetooth: hci2: command tx timeout
[  365.460044] Bluetooth: hci3: command tx timeout
[  365.652913] Bluetooth: hci4: command tx timeout
[  365.779963] Bluetooth: hci5: command tx timeout
[  365.845062] Bluetooth: hci6: command tx timeout
[  365.971943] Bluetooth: hci7: command tx timeout
[  367.188066] Bluetooth: hci0: command tx timeout
[  367.444397] Bluetooth: hci1: command tx timeout
[  367.444947] Bluetooth: hci2: command tx timeout
[  367.509569] Bluetooth: hci3: command tx timeout
[  367.700208] Bluetooth: hci4: command tx timeout
[  367.829886] Bluetooth: hci5: command tx timeout
[  367.893070] Bluetooth: hci6: command tx timeout
[  368.019939] Bluetooth: hci7: command tx timeout
[  369.235938] Bluetooth: hci0: command tx timeout
[  369.493999] Bluetooth: hci2: command tx timeout
[  369.494023] Bluetooth: hci1: command tx timeout
[  369.557131] Bluetooth: hci3: command tx timeout
[  369.748917] Bluetooth: hci4: command tx timeout
[  369.876178] Bluetooth: hci5: command tx timeout
[  369.940178] Bluetooth: hci6: command tx timeout
[  370.069014] Bluetooth: hci7: command tx timeout
[  371.285930] Bluetooth: hci0: command tx timeout
[  371.540034] Bluetooth: hci1: command tx timeout
[  371.541399] Bluetooth: hci2: command tx timeout
[  371.603983] Bluetooth: hci3: command tx timeout
[  371.796109] Bluetooth: hci4: command tx timeout
[  371.924185] Bluetooth: hci5: command tx timeout
[  371.987927] Bluetooth: hci6: command tx timeout
[  372.116246] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
03:43:43  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000002 RCX=ffff88806ce089cc RDX=0000000000000003
RSI=ffffffff85c1cbc0 RDI=ffff88803652a628 RBP=ffffffff85c1cbc0 RSP=ffff88806ce08990
R8 =ffffffff867e5810 R9 =ffff88806ce08ab8 R10=000000000003b9fd R11=0000000000008672
R12=ffff88803652a628 R13=ffff88806ce089cc R14=0000000000000003 R15=0000000000000003
RIP=ffffffff8151403d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55f6000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efcbaeb3028 CR3=0000000037b10000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff84b6e2df RBX=0000000000000001 RCX=ffffffff867b511c RDX=dffffc0000000000
RSI=1ffff11006dc3edc RDI=1ffff11006dc3edc RBP=ffff888036e1f6e0 RSP=ffff888036e1f618
R8 =ffffffff867b5120 R9 =ffff888036e1f6c8 R10=000000000003b9fd R11=000000000000054c
R12=ffff888036e1f6e8 R13=ffff888036e1f6d0 R14=ffff888036e1ff30 R15=ffff888036e1f688
RIP=ffffffff81354872 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56f6000 00000000 00000000
LDT=0000 fffffe4300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc377488028 CR3=000000002f305000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000