Warning: Permanently added '[localhost]:4460' (ECDSA) to the list of known hosts.
2024/10/28 19:15:22 fuzzer started
2024/10/28 19:15:23 dialing manager at localhost:45639
syzkaller login: [   63.594982] cgroup: Unknown subsys name 'net'
[   63.674697] cgroup: Unknown subsys name 'cpuset'
[   63.705116] cgroup: Unknown subsys name 'rlimit'
2024/10/28 19:15:41 syscalls: 200
2024/10/28 19:15:41 code coverage: enabled
2024/10/28 19:15:41 comparison tracing: enabled
2024/10/28 19:15:41 extra coverage: enabled
2024/10/28 19:15:41 setuid sandbox: enabled
2024/10/28 19:15:41 namespace sandbox: enabled
2024/10/28 19:15:41 Android sandbox: enabled
2024/10/28 19:15:41 fault injection: enabled
2024/10/28 19:15:41 leak checking: enabled
2024/10/28 19:15:41 net packet injection: enabled
2024/10/28 19:15:41 net device setup: enabled
2024/10/28 19:15:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/10/28 19:15:41 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/10/28 19:15:41 USB emulation: enabled
2024/10/28 19:15:41 hci packet injection: enabled
2024/10/28 19:15:41 wifi device emulation: enabled
2024/10/28 19:15:41 802.15.4 emulation: enabled
2024/10/28 19:15:41 fetching corpus: 0, signal 0/0 (executing program)
2024/10/28 19:15:43 starting 8 fuzzer processes
19:15:43 executing program 0:
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x304, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xd4, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x1, 0x1, 0x80, 0x7}, {0x4, 0x0, 0x1, 0x26e3}, {0x0, 0x2, 0x54, 0xf8000000}, {0x20, 0x0, 0x5, 0x2}, {0x1, 0x0, 0x7, 0x9}, {0x9226, 0xfb, 0x80, 0x7ff}, {0x6, 0x40, 0x20, 0x7}, {0xd11, 0x4, 0xff, 0x4}, {0x1, 0x51, 0xe, 0x20}, {0xfc00, 0x4, 0x9, 0x8}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc87}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xbfb, 0x8, 0x1, 0xcd1a}, {0x80, 0x0, 0x0, 0xa85}, {0x1ff, 0x9, 0x4, 0x9}, {0x8, 0x7, 0x39, 0x6}, {0x9, 0x80, 0x7, 0x3}, {0x1, 0x5, 0x6, 0x6}, {0x2, 0x80, 0x5, 0x1}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x81, 0xff, 0x8}, {0x1000, 0x3, 0x0, 0xffff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcf}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x304}, 0x1, 0x0, 0x0, 0x4c000}, 0x804)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x6}}, './file0\x00'})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r1=>r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x200048c5)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r1)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'sit0\x00', <r3=>0x0, 0x29, 0x1, 0xcb, 0x7, 0x18, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8007, 0x5, 0x1}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x6c}}, 0x20011)
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x0, 0x420, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x20000000)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000a, 0x110, r0, 0x10000000)
syz_io_uring_submit(0x0, r4, &(0x7f0000000a40)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r0, 0x80, &(0x7f00000009c0)=@llc={0x1a, 0x335, 0x1, 0x1, 0x0, 0x5, @local}, 0x0, 0x0, 0x1}, 0x5)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair(0x8, 0x1, 0x7, &(0x7f0000000a80)={<r6=>0xffffffffffffffff})
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000004)
r7 = io_uring_setup(0x5087, &(0x7f0000000c00)={0x0, 0x6549, 0x2c, 0x2, 0x15d})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000003, 0x50, r7, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000c80)={{0x1, 0x1, 0x18, <r8=>r5}, './file0\x00'})
r9 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r9)
syz_genetlink_get_family_id$team(&(0x7f0000000cc0), 0xffffffffffffffff)

19:15:43 executing program 2:
fstat(0xffffffffffffffff, &(0x7f0000000000))
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x5, 0x8c, 0x6, 0x5, 0x0, 0x39e, 0x200, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x4, @perf_config_ext={0xfffffffffffffffa, 0x5}, 0x40000, 0x2, 0x8d0, 0x3, 0x10000, 0x8, 0x1, 0x0, 0xffffff00, 0x0, 0x401}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {0x9}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0, {0x1}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>r2, {0x81}}, './file0\x00'})
io_uring_setup(0x4c9d, &(0x7f0000000200)={0x0, 0xeaa3, 0x2, 0x3, 0x34d, 0x0, r4})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x4004)
io_uring_setup(0x21f5, &(0x7f00000003c0)={0x0, 0x3911, 0x10, 0x2, 0x80000000})
fstat(r4, &(0x7f0000000440))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r5=>r3, {0xb2d}}, './file0\x00'})
fstat(r5, &(0x7f0000000500))
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r5)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, r6, 0x40c, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x41}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x60}}, 0x8000)
r8 = io_uring_setup(0x392f, &(0x7f0000000740)={0x0, 0xaeda, 0x20, 0x1, 0x17e})
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x10010, r8, 0x10000000)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)

19:15:43 executing program 1:
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x8, &(0x7f0000000040)={[0x8]}, 0x8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '*.+\x87'}}, {@afid={'afid', 0x3d, 0x4}}], [{@uid_lt}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, '^!'}}, {@appraise_type}, {@fowner_gt={'fowner>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '\'[\'\\'}}, {@smackfsdef={'smackfsdef', 0x3d, '&:'}}]}})
r0 = syz_io_uring_complete(0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r2 = epoll_create1(0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r1, {0xee01, 0xee01}}, './file0\x00'})
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x200001, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r5=>r3, {0x72}}, './file0\x00'})
epoll_wait(r5, &(0x7f0000000300)=[{}, {}, {}, {}], 0x4, 0x2d05)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x60800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r7=>r3}, './file0\x00'})
msgget$private(0x0, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'})
r8 = syz_open_dev$hidraw(&(0x7f0000000400), 0x101, 0x111001)
write$tcp_mem(r1, &(0x7f0000000440)={0xe1c, 0x20, 0x0, 0x20, 0xfffffffffffffffb}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r9=>r2}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r10=>r4, {0x4}}, './file0\x00'})
ioctl$LOOP_SET_FD(r6, 0x4c00, r8)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r11=>r7, {0x3}}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, r11, @out_args}, './file0/file0\x00'})

[   82.606521] audit: type=1400 audit(1730142943.087:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
19:15:43 executing program 3:
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000080)={0x8, 0x6, 0x8, 0xaf})
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0)=0x9)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000100))
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000140))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x939a}}, './file0\x00'})
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000001c0))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, {0x5}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', <r5=>0x0, 0x4, 0x2, 0xff, 0x80000000, 0x4, @private1, @empty, 0x7, 0x700, 0x6, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1fc, r2, 0x208, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3c}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20008831}, 0x4000084)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'})

19:15:43 executing program 4:
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1ff)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x1, 0x80, 0xff, 0x1, 0x3, 0x0, 0x0, 0x8, 0xba8, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x401, 0x100000000}, 0x107b0, 0x0, 0xffff, 0x6, 0x5, 0x2, 0xcbaa, 0x0, 0x10001, 0x0, 0x101})
r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0x6, 0x5, 0x80, 0x0, 0x0, 0x101, 0x1a200, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x8800, 0x5, 0xbd7e, 0x5, 0x5, 0x2, 0x6, 0x0, 0x4ed, 0x0, 0x1000}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='\x00')
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000180)=""/153)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r1=>r0, @in_args={0x1}}, './file0\x00'})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r1)
chroot(&(0x7f00000002c0)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r2=>r1, {0x6}}, './file0\x00'})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x0, 0xff, 0x7, 0x0, 0x0, 0x7, 0x2, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000340), 0xc}, 0x8, 0x5, 0x800, 0x8, 0x3, 0x714, 0x8001, 0x0, 0x9, 0x0, 0x8})
r3 = syz_io_uring_complete(0x0)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000580), r3)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'ip6_vti0\x00', <r6=>0x0, 0x4, 0x35, 0x2, 0x80000000, 0xd, @loopback, @dev={0xfe, 0x80, '\x00', 0x41}, 0x8, 0x7, 0x5, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x5, 0x4, 0x8, 0x1b, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x10, 0xffff8e54, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'ip6tnl0\x00', <r8=>0x0, 0x4, 0x81, 0xd1, 0x6, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x700, 0x10, 0xa1c, 0xfffffffb}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000d40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000840)={0x494, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x1cc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x71e}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xd2e2, 0x5, 0x7, 0x8}, {0xf801, 0x9, 0x8, 0x3}, {0x75, 0x6, 0x4, 0x6b}, {0x81, 0x2, 0x14, 0x7}, {0xfff7, 0xca, 0x81, 0x8000}, {0x8001, 0x8, 0x81, 0x9}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x494}, 0x1, 0x0, 0x0, 0x24000000}, 0x8800)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x20004005)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000f00)={0x4, 0x80, 0x0, 0xff, 0x0, 0x6, 0x0, 0x7, 0x2000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000ec0), 0x1}, 0x842, 0x7, 0x7, 0x6, 0x4, 0x2, 0xfffa, 0x0, 0x5, 0x0, 0x401})

19:15:43 executing program 6:
r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/227)
shmctl$IPC_RMID(r0, 0x0)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/194)
r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_UNLOCK(r1, 0xc)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x4, 0x42}}, './file0\x00'})
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0xc401, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
msgctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=""/133)
shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000380)=""/247)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r5=>r3, @out_args}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r6=>r4}, './file0\x00'})
shmctl$SHM_UNLOCK(r0, 0xc)
ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000500)={0xffffffffffff0000, 0xceb5, 0x7, 0x3ff})
shmctl$SHM_UNLOCK(r1, 0xc)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000540), 0x440200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, r7}, './file0\x00'})
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f00000005c0)=0x3f)
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)

19:15:43 executing program 5:
r0 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff)
r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x3e0, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x308, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x800, 0x4b, 0x79, 0x1}, {0xc13, 0x7, 0x4, 0x8000}, {0x101, 0x81, 0x9, 0x3}, {0x542f, 0x0, 0x6f, 0x7ff}, {0xfff, 0x5, 0xfe, 0x1}, {0xab4, 0x2, 0x5, 0x2}, {0x6, 0x81, 0x1, 0x7fff}, {0x9, 0x3, 0x8, 0x9}, {0x20, 0x5, 0xff, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xeb8e, 0x3, 0x40, 0x7f}, {0x0, 0x4, 0x80, 0x100}, {0x8, 0x1f, 0x8, 0xfffffffd}, {0xf4b2, 0x4, 0x7f, 0x2f8}, {0x9, 0x20, 0x20}, {0xc, 0x4, 0x80, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x73}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xd3, 0x7f, 0x80, 0x5f6f}, {0x5, 0x20, 0x5, 0x2}, {0xdd0, 0x4, 0x6, 0x7f}, {0x1, 0x2, 0x6}, {0x8000, 0x7f, 0x7, 0x8001}, {0x5, 0xe, 0x3, 0x1}, {0x1, 0x2, 0x4, 0x2}, {0x4, 0x7, 0x3f, 0x1c0a5d4b}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6gre0\x00', <r5=>0x0, 0x29, 0x5, 0x2, 0x136, 0x2, @loopback, @empty, 0xa0, 0x0, 0x80, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', <r6=>r4, 0x29, 0x2, 0x2, 0x8, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x20, 0x700, 0xffffff00, 0x63ba}})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000780)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'sit0\x00', <r8=>r4, 0x2f, 0x7f, 0x7f, 0xc81a, 0x35, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x8, 0x7800, 0x0, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl2\x00', <r9=>r4, 0x4, 0xe, 0x80, 0x6e0d9960, 0x0, @private0, @mcast1, 0x8, 0x80, 0x0, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000940)={'team0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', <r12=>r3, 0x29, 0x6, 0x6, 0x0, 0x8, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x1, 0x2, 0x401}})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a80)={'team0\x00', <r13=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000ac0)={'team0\x00', <r14=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000017c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001780)={&(0x7f0000000b00)={0xc48, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffeff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x18a, 0x4, 0x3, 0x800}, {0x3, 0x1, 0x1, 0x4}]}}}]}}, {{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1b52c45d}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r6}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x22}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3ff, 0x40, 0x7d, 0x8}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa3c0}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa6b}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x26f}}}]}}, {{0x8, 0x1, r3}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r14}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0xc48}, 0x1, 0x0, 0x0, 0x21}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000001800)={{0x1, 0x1, 0x18, <r15=>r2, {0x200}}, './file0\x00'})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r15, 0x40042409, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)

19:15:43 executing program 7:
ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x5}}, './file0\x00'})
r1 = syz_open_dev$vcsu(&(0x7f0000000280), 0x9, 0x200c0)
r2 = getuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r3=>r0, {r2, <r4=>0x0}}, './file0\x00'})
ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000440)={0x25, 0x5, 0x1})
getresuid(&(0x7f0000000480)=<r5=>0x0, &(0x7f00000004c0), &(0x7f0000000500))
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r6=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r7=>r1, {r2, <r8=>r4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {r5, r8}}, './file0\x00'})
open$dir(&(0x7f0000000600)='./file0\x00', 0x200000, 0x106)
getuid()
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x57)
ioctl$BLKRESETZONE(r7, 0x40101283, &(0x7f0000000640)={0x6})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0/file0\x00'})
r9 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x2, 0x100)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000000, 0x100010, r9, 0x0)
ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000700)={0x5, 0xfa13})
ioctl$IOC_PR_PREEMPT_ABORT(r7, 0x401870cc, &(0x7f0000000740)={0x3, 0x5, 0x3bd, 0xfff})

[   83.983916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.988827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.991210] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.995377] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.998257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   84.000510] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.037499] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.041011] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.044614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.047443] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.050000] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.052707] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.059716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.061320] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   84.063539] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.070333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.079798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   84.082047] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.099125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.103199] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   84.112713] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   84.114030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   84.119064] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.124117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.126943] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   84.129732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   84.132099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.136474] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   84.137269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   84.138823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.143872] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   84.148403] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.160483] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   84.162835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   84.163928] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   84.166433] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   84.168030] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   84.169176] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   84.171008] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   84.172237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   84.173791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.175212] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   84.189869] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   84.192967] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   84.193936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.221844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   84.233785] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   84.235025] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   86.073686] Bluetooth: hci0: command tx timeout
[   86.135082] Bluetooth: hci1: command tx timeout
[   86.136640] Bluetooth: hci2: command tx timeout
[   86.198679] Bluetooth: hci7: command tx timeout
[   86.263302] Bluetooth: hci4: command tx timeout
[   86.263540] Bluetooth: hci5: command tx timeout
[   86.265199] Bluetooth: hci3: command tx timeout
[   86.326749] Bluetooth: hci6: command tx timeout
[   88.119831] Bluetooth: hci0: command tx timeout
[   88.182676] Bluetooth: hci1: command tx timeout
[   88.183172] Bluetooth: hci2: command tx timeout
[   88.246685] Bluetooth: hci7: command tx timeout
[   88.310976] Bluetooth: hci5: command tx timeout
[   88.311452] Bluetooth: hci3: command tx timeout
[   88.311980] Bluetooth: hci4: command tx timeout
[   88.374694] Bluetooth: hci6: command tx timeout
[   90.166739] Bluetooth: hci0: command tx timeout
[   90.231654] Bluetooth: hci1: command tx timeout
[   90.232141] Bluetooth: hci2: command tx timeout
[   90.294691] Bluetooth: hci7: command tx timeout
[   90.358710] Bluetooth: hci4: command tx timeout
[   90.359198] Bluetooth: hci3: command tx timeout
[   90.360126] Bluetooth: hci5: command tx timeout
[   90.424616] Bluetooth: hci6: command tx timeout
[   92.214811] Bluetooth: hci0: command tx timeout
[   92.278758] Bluetooth: hci2: command tx timeout
[   92.279251] Bluetooth: hci1: command tx timeout
[   92.342721] Bluetooth: hci7: command tx timeout
[   92.406721] Bluetooth: hci5: command tx timeout
[   92.407225] Bluetooth: hci3: command tx timeout
[   92.407420] Bluetooth: hci4: command tx timeout
[   92.470718] Bluetooth: hci6: command tx timeout
[  146.314219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  146.318463] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  146.321394] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  146.324379] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  146.326079] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  146.327215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  146.371847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  146.378829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  146.379997] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  146.383475] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  146.386181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  146.387992] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  146.389503] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  146.404258] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  146.406162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  146.419180] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  146.420987] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  146.425884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  146.517872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  146.523759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  146.525896] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  146.527942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  146.530879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  146.532991] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  146.537038] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  146.541720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  146.542467] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  146.548987] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  146.551796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  146.554933] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  146.556993] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  146.569170] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  146.570636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  146.575531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  146.579232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  146.581523] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  146.587213] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  146.593234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  146.594481] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  146.599241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  146.601331] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  146.603760] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.678922] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  146.682713] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  146.686408] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  146.689329] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  146.690988] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  146.692421] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  148.343655] Bluetooth: hci0: command tx timeout
[  148.406769] Bluetooth: hci1: command tx timeout
[  148.472734] Bluetooth: hci2: command tx timeout
[  148.598847] Bluetooth: hci3: command tx timeout
[  148.663684] Bluetooth: hci5: command tx timeout
[  148.664382] Bluetooth: hci4: command tx timeout
[  148.726736] Bluetooth: hci6: command tx timeout
[  148.727740] Bluetooth: hci7: command tx timeout
[  150.390989] Bluetooth: hci0: command tx timeout
[  150.454648] Bluetooth: hci1: command tx timeout
[  150.519645] Bluetooth: hci2: command tx timeout
[  150.646881] Bluetooth: hci3: command tx timeout
[  150.710654] Bluetooth: hci4: command tx timeout
[  150.710685] Bluetooth: hci5: command tx timeout
[  150.775817] Bluetooth: hci7: command tx timeout
[  150.775863] Bluetooth: hci6: command tx timeout
[  152.439672] Bluetooth: hci0: command tx timeout
[  152.502631] Bluetooth: hci1: command tx timeout
[  152.566936] Bluetooth: hci2: command tx timeout
[  152.695693] Bluetooth: hci3: command tx timeout
[  152.760733] Bluetooth: hci5: command tx timeout
[  152.760824] Bluetooth: hci4: command tx timeout
[  152.823615] Bluetooth: hci6: command tx timeout
[  152.824095] Bluetooth: hci7: command tx timeout
[  154.523188] Bluetooth: hci0: command tx timeout
[  154.551698] Bluetooth: hci1: command tx timeout
[  154.615631] Bluetooth: hci2: command tx timeout
[  154.742627] Bluetooth: hci3: command tx timeout
[  154.806690] Bluetooth: hci5: command tx timeout
[  154.808012] Bluetooth: hci4: command tx timeout
[  154.870634] Bluetooth: hci6: command tx timeout
[  154.871943] Bluetooth: hci7: command tx timeout
[  208.537883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  208.542815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  208.546191] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  208.558446] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  208.560882] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  208.565206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  208.580729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  208.588907] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  208.590214] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  208.594105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  208.602407] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  208.604743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  208.711964] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  208.715835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  208.716877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  208.719205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  208.721732] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  208.723236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  208.785165] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  208.796121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  208.797674] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  208.799792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  208.801504] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  208.802464] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  208.804099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  208.819991] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  208.825889] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  208.836096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  208.854733] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  208.856448] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  208.857496] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  208.860205] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  208.861241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  208.862967] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  208.864277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  208.865327] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  208.873133] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  208.893424] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  208.894967] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  208.900221] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  208.906189] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  208.911615] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  208.912306] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  208.931762] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  208.945697] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  209.001197] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  209.016010] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  209.018830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  210.615739] Bluetooth: hci0: command tx timeout
[  210.678810] Bluetooth: hci1: command tx timeout
[  210.742836] Bluetooth: hci2: command tx timeout
[  210.871910] Bluetooth: hci3: command tx timeout
[  210.934703] Bluetooth: hci6: command tx timeout
[  210.937729] Bluetooth: hci4: command tx timeout
[  211.062677] Bluetooth: hci5: command tx timeout
[  211.126661] Bluetooth: hci7: command tx timeout
[  212.663094] Bluetooth: hci0: command tx timeout
[  212.727701] Bluetooth: hci1: command tx timeout
[  212.791801] Bluetooth: hci2: command tx timeout
[  212.919955] Bluetooth: hci3: command tx timeout
[  212.982648] Bluetooth: hci4: command tx timeout
[  212.983746] Bluetooth: hci6: command tx timeout
[  213.111709] Bluetooth: hci5: command tx timeout
[  213.175841] Bluetooth: hci7: command tx timeout
[  214.712818] Bluetooth: hci0: command tx timeout
[  214.776727] Bluetooth: hci1: command tx timeout
[  214.838738] Bluetooth: hci2: command tx timeout
[  214.985618] Bluetooth: hci3: command tx timeout
[  215.030679] Bluetooth: hci4: command tx timeout
[  215.031728] Bluetooth: hci6: command tx timeout
[  215.159621] Bluetooth: hci5: command tx timeout
[  215.224694] Bluetooth: hci7: command tx timeout
[  216.759726] Bluetooth: hci0: command tx timeout
[  216.823671] Bluetooth: hci1: command tx timeout
[  216.887850] Bluetooth: hci2: command tx timeout
[  217.014665] Bluetooth: hci3: command tx timeout
[  217.078649] Bluetooth: hci6: command tx timeout
[  217.078693] Bluetooth: hci4: command tx timeout
[  217.206658] Bluetooth: hci5: command tx timeout
[  217.270657] Bluetooth: hci7: command tx timeout
[  270.974280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  270.978026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  270.979477] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  270.990395] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  270.992797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  270.995811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  270.996867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  270.998616] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  270.999872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  271.002711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  271.006677] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  271.008135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  271.169868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  271.175556] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  271.177367] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  271.182844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  271.186629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  271.193383] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  271.198564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  271.200474] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  271.203233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  271.205989] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  271.207909] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  271.210284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  271.243057] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  271.247071] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  271.252913] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  271.257456] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  271.260939] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  271.263264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  271.350239] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  271.365249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  271.370498] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  271.378159] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  271.383888] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  271.397979] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  271.400405] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  271.423975] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  271.424070] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  271.436240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  271.447952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  271.450009] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  271.452427] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  271.459448] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  271.474118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  271.484847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  271.487800] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  271.490017] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  273.015504] Bluetooth: hci1: command tx timeout
[  273.078830] Bluetooth: hci0: command tx timeout
[  273.270703] Bluetooth: hci2: command tx timeout
[  273.270711] Bluetooth: hci3: command tx timeout
[  273.334640] Bluetooth: hci4: command tx timeout
[  273.527618] Bluetooth: hci7: command tx timeout
[  273.590701] Bluetooth: hci5: command tx timeout
[  273.590834] Bluetooth: hci6: command tx timeout
[  275.062654] Bluetooth: hci1: command tx timeout
[  275.126770] Bluetooth: hci0: command tx timeout
[  275.319742] Bluetooth: hci3: command tx timeout
[  275.321267] Bluetooth: hci2: command tx timeout
[  275.382641] Bluetooth: hci4: command tx timeout
[  275.574647] Bluetooth: hci7: command tx timeout
[  275.638684] Bluetooth: hci5: command tx timeout
[  275.641565] Bluetooth: hci6: command tx timeout
[  277.111668] Bluetooth: hci1: command tx timeout
[  277.175597] Bluetooth: hci0: command tx timeout
[  277.366909] Bluetooth: hci3: command tx timeout
[  277.368339] Bluetooth: hci2: command tx timeout
[  277.430624] Bluetooth: hci4: command tx timeout
[  277.622949] Bluetooth: hci7: command tx timeout
[  277.686889] Bluetooth: hci6: command tx timeout
[  277.686910] Bluetooth: hci5: command tx timeout
[  279.159023] Bluetooth: hci1: command tx timeout
[  279.222792] Bluetooth: hci0: command tx timeout
[  279.414618] Bluetooth: hci3: command tx timeout
[  279.416076] Bluetooth: hci2: command tx timeout
[  279.478713] Bluetooth: hci4: command tx timeout
[  279.672608] Bluetooth: hci7: command tx timeout
[  279.734849] Bluetooth: hci5: command tx timeout
[  279.734884] Bluetooth: hci6: command tx timeout
[  333.194742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  333.197205] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  333.202953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  333.209391] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  333.218110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  333.220929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  333.245962] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  333.251092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  333.255730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  333.260445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  333.262815] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  333.265090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  333.311180] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  333.313614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  333.315848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  333.319706] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  333.322647] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  333.325057] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  333.389311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  333.396958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  333.401931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  333.429583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  333.459235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  333.461955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  333.488219] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  333.512899] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  333.515343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  333.518870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  333.522684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  333.523797] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  333.526421] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  333.526995] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  333.531771] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  333.534293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  333.536270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  333.544006] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  333.546460] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  333.547998] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  333.553153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  333.556101] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  333.557800] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  333.560850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  333.626109] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  333.632912] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  333.637694] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  333.694735] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  333.698336] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  333.717729] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  335.287127] Bluetooth: hci0: command tx timeout
[  335.288256] Bluetooth: hci1: command tx timeout
[  335.350648] Bluetooth: hci2: command tx timeout
[  335.478636] Bluetooth: hci3: command tx timeout
[  335.606653] Bluetooth: hci5: command tx timeout
[  335.607661] Bluetooth: hci4: command tx timeout
[  335.671814] Bluetooth: hci6: command tx timeout
[  335.862766] Bluetooth: hci7: command tx timeout
[  337.334796] Bluetooth: hci1: command tx timeout
[  337.335255] Bluetooth: hci0: command tx timeout
[  337.399639] Bluetooth: hci2: command tx timeout
[  337.526752] Bluetooth: hci3: command tx timeout
[  337.662682] Bluetooth: hci4: command tx timeout
[  337.663193] Bluetooth: hci5: command tx timeout
[  337.718594] Bluetooth: hci6: command tx timeout
[  337.911672] Bluetooth: hci7: command tx timeout
[  339.382662] Bluetooth: hci0: command tx timeout
[  339.383643] Bluetooth: hci1: command tx timeout
[  339.446655] Bluetooth: hci2: command tx timeout
[  339.574921] Bluetooth: hci3: command tx timeout
[  339.703647] Bluetooth: hci5: command tx timeout
[  339.704144] Bluetooth: hci4: command tx timeout
[  339.767692] Bluetooth: hci6: command tx timeout
[  339.960556] Bluetooth: hci7: command tx timeout
[  341.431723] Bluetooth: hci1: command tx timeout
[  341.432229] Bluetooth: hci0: command tx timeout
[  341.495620] Bluetooth: hci2: command tx timeout
[  341.622566] Bluetooth: hci3: command tx timeout
[  341.751805] Bluetooth: hci5: command tx timeout
[  341.752398] Bluetooth: hci4: command tx timeout
[  341.815614] Bluetooth: hci6: command tx timeout
[  342.007625] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
19:20:52  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff8115d65d RDX=ffff888016245280
RSI=ffffffff8115d66b RDI=0000000000000006 RBP=0000000012f229c0 RSP=ffff8880310d7990
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000800 R11=00000000000c2f81
R12=0000000000000000 R13=0000000000000800 R14=0000000000000000 R15=ffff888015aa36c0
RIP=ffffffff848470c0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f588ab84540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff81082ff8 CR3=000000002f9a4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=1ffff11004aaef14 RCX=ffffffff8198be50 RDX=ffff888034283700
RSI=ffffffff81a1d4d9 RDI=ffff8880255778c0 RBP=dffffc0000000000 RSP=ffff8880255778a0
R8 =0000000000000000 R9 =ffffed1001e61070 R10=0000000000000000 R11=0000000000000001
R12=ffffffff85d16040 R13=ffffffff85af5c20 R14=ffff8880097d68e0 R15=ffffffff85d16040
RIP=ffffffff81a1d4de RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe4000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f489d07c8e0 CR3=00000000259a0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000