Warning: Permanently added '[localhost]:36237' (ECDSA) to the list of known hosts.
2024/11/08 18:44:50 fuzzer started
2024/11/08 18:44:50 dialing manager at localhost:46317
syzkaller login: [   71.332199] cgroup: Unknown subsys name 'net'
[   71.422821] cgroup: Unknown subsys name 'cpuset'
[   71.441523] cgroup: Unknown subsys name 'rlimit'
2024/11/08 18:45:07 syscalls: 2217
2024/11/08 18:45:07 code coverage: enabled
2024/11/08 18:45:07 comparison tracing: enabled
2024/11/08 18:45:07 extra coverage: enabled
2024/11/08 18:45:07 setuid sandbox: enabled
2024/11/08 18:45:07 namespace sandbox: enabled
2024/11/08 18:45:07 Android sandbox: enabled
2024/11/08 18:45:07 fault injection: enabled
2024/11/08 18:45:07 leak checking: enabled
2024/11/08 18:45:07 net packet injection: enabled
2024/11/08 18:45:07 net device setup: enabled
2024/11/08 18:45:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/08 18:45:07 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/08 18:45:07 USB emulation: enabled
2024/11/08 18:45:07 hci packet injection: enabled
2024/11/08 18:45:07 wifi device emulation: enabled
2024/11/08 18:45:07 802.15.4 emulation: enabled
2024/11/08 18:45:07 fetching corpus: 50, signal 22045/23821 (executing program)
2024/11/08 18:45:08 fetching corpus: 100, signal 31657/35046 (executing program)
2024/11/08 18:45:08 fetching corpus: 150, signal 39882/44691 (executing program)
2024/11/08 18:45:08 fetching corpus: 200, signal 47093/53247 (executing program)
2024/11/08 18:45:09 fetching corpus: 250, signal 52600/60022 (executing program)
2024/11/08 18:45:09 fetching corpus: 300, signal 56595/65237 (executing program)
2024/11/08 18:45:09 fetching corpus: 350, signal 59651/69463 (executing program)
2024/11/08 18:45:10 fetching corpus: 400, signal 63399/74352 (executing program)
2024/11/08 18:45:10 fetching corpus: 450, signal 67549/79502 (executing program)
2024/11/08 18:45:10 fetching corpus: 500, signal 70079/83132 (executing program)
2024/11/08 18:45:11 fetching corpus: 550, signal 72548/86659 (executing program)
2024/11/08 18:45:11 fetching corpus: 600, signal 75253/90337 (executing program)
2024/11/08 18:45:11 fetching corpus: 650, signal 77662/93669 (executing program)
2024/11/08 18:45:11 fetching corpus: 700, signal 80291/97202 (executing program)
2024/11/08 18:45:11 fetching corpus: 750, signal 81815/99732 (executing program)
2024/11/08 18:45:11 fetching corpus: 800, signal 83322/102181 (executing program)
2024/11/08 18:45:12 fetching corpus: 850, signal 86376/105914 (executing program)
2024/11/08 18:45:12 fetching corpus: 900, signal 88735/109033 (executing program)
2024/11/08 18:45:13 fetching corpus: 950, signal 91180/112128 (executing program)
2024/11/08 18:45:13 fetching corpus: 1000, signal 92183/114069 (executing program)
2024/11/08 18:45:13 fetching corpus: 1050, signal 93228/115972 (executing program)
2024/11/08 18:45:13 fetching corpus: 1100, signal 94290/117899 (executing program)
2024/11/08 18:45:14 fetching corpus: 1150, signal 96120/120374 (executing program)
2024/11/08 18:45:14 fetching corpus: 1200, signal 97056/122124 (executing program)
2024/11/08 18:45:14 fetching corpus: 1250, signal 98325/124105 (executing program)
2024/11/08 18:45:15 fetching corpus: 1300, signal 99391/125934 (executing program)
2024/11/08 18:45:15 fetching corpus: 1350, signal 101137/128218 (executing program)
2024/11/08 18:45:15 fetching corpus: 1400, signal 102080/129919 (executing program)
2024/11/08 18:45:16 fetching corpus: 1450, signal 103372/131857 (executing program)
2024/11/08 18:45:16 fetching corpus: 1500, signal 105092/134028 (executing program)
2024/11/08 18:45:16 fetching corpus: 1550, signal 105925/135543 (executing program)
2024/11/08 18:45:16 fetching corpus: 1600, signal 106943/137225 (executing program)
2024/11/08 18:45:17 fetching corpus: 1650, signal 108587/139313 (executing program)
2024/11/08 18:45:17 fetching corpus: 1700, signal 109745/141014 (executing program)
2024/11/08 18:45:17 fetching corpus: 1750, signal 110959/142710 (executing program)
2024/11/08 18:45:17 fetching corpus: 1800, signal 111657/144071 (executing program)
2024/11/08 18:45:18 fetching corpus: 1850, signal 112706/145632 (executing program)
2024/11/08 18:45:18 fetching corpus: 1900, signal 113510/146996 (executing program)
2024/11/08 18:45:18 fetching corpus: 1950, signal 114799/148669 (executing program)
2024/11/08 18:45:18 fetching corpus: 2000, signal 115948/150229 (executing program)
2024/11/08 18:45:19 fetching corpus: 2050, signal 117204/151852 (executing program)
2024/11/08 18:45:19 fetching corpus: 2100, signal 118083/153196 (executing program)
2024/11/08 18:45:19 fetching corpus: 2150, signal 119022/154576 (executing program)
2024/11/08 18:45:20 fetching corpus: 2200, signal 119872/155909 (executing program)
2024/11/08 18:45:20 fetching corpus: 2250, signal 120480/157077 (executing program)
2024/11/08 18:45:20 fetching corpus: 2300, signal 121444/158387 (executing program)
2024/11/08 18:45:20 fetching corpus: 2350, signal 122153/159547 (executing program)
2024/11/08 18:45:21 fetching corpus: 2400, signal 123671/161122 (executing program)
2024/11/08 18:45:21 fetching corpus: 2450, signal 124245/162210 (executing program)
2024/11/08 18:45:21 fetching corpus: 2500, signal 125758/163736 (executing program)
2024/11/08 18:45:21 fetching corpus: 2550, signal 127477/165390 (executing program)
2024/11/08 18:45:22 fetching corpus: 2600, signal 128183/166482 (executing program)
2024/11/08 18:45:22 fetching corpus: 2650, signal 128903/167587 (executing program)
2024/11/08 18:45:22 fetching corpus: 2700, signal 129583/168650 (executing program)
2024/11/08 18:45:23 fetching corpus: 2750, signal 130448/169777 (executing program)
2024/11/08 18:45:23 fetching corpus: 2800, signal 131302/170889 (executing program)
2024/11/08 18:45:23 fetching corpus: 2850, signal 131987/171919 (executing program)
2024/11/08 18:45:24 fetching corpus: 2900, signal 132452/172809 (executing program)
2024/11/08 18:45:24 fetching corpus: 2950, signal 133231/173838 (executing program)
2024/11/08 18:45:24 fetching corpus: 3000, signal 133721/174738 (executing program)
2024/11/08 18:45:24 fetching corpus: 3050, signal 134351/175667 (executing program)
2024/11/08 18:45:24 fetching corpus: 3100, signal 135996/176992 (executing program)
2024/11/08 18:45:25 fetching corpus: 3150, signal 136527/177840 (executing program)
2024/11/08 18:45:25 fetching corpus: 3200, signal 137013/178707 (executing program)
2024/11/08 18:45:25 fetching corpus: 3250, signal 137499/179562 (executing program)
2024/11/08 18:45:25 fetching corpus: 3300, signal 138008/180380 (executing program)
2024/11/08 18:45:26 fetching corpus: 3350, signal 138618/181220 (executing program)
2024/11/08 18:45:26 fetching corpus: 3400, signal 139511/182139 (executing program)
2024/11/08 18:45:26 fetching corpus: 3450, signal 140206/182935 (executing program)
2024/11/08 18:45:27 fetching corpus: 3500, signal 141007/183765 (executing program)
2024/11/08 18:45:27 fetching corpus: 3550, signal 141541/184562 (executing program)
2024/11/08 18:45:28 fetching corpus: 3600, signal 142287/185389 (executing program)
2024/11/08 18:45:28 fetching corpus: 3650, signal 142684/186130 (executing program)
2024/11/08 18:45:28 fetching corpus: 3700, signal 143373/186966 (executing program)
2024/11/08 18:45:28 fetching corpus: 3750, signal 143913/187669 (executing program)
2024/11/08 18:45:28 fetching corpus: 3800, signal 144765/188485 (executing program)
2024/11/08 18:45:29 fetching corpus: 3850, signal 145719/189339 (executing program)
2024/11/08 18:45:29 fetching corpus: 3900, signal 146133/190002 (executing program)
2024/11/08 18:45:29 fetching corpus: 3950, signal 146570/190691 (executing program)
2024/11/08 18:45:29 fetching corpus: 4000, signal 147089/191345 (executing program)
2024/11/08 18:45:30 fetching corpus: 4050, signal 147509/192005 (executing program)
2024/11/08 18:45:30 fetching corpus: 4100, signal 147847/192622 (executing program)
2024/11/08 18:45:30 fetching corpus: 4150, signal 148408/193286 (executing program)
2024/11/08 18:45:31 fetching corpus: 4200, signal 148907/193884 (executing program)
2024/11/08 18:45:31 fetching corpus: 4250, signal 149332/194466 (executing program)
2024/11/08 18:45:32 fetching corpus: 4300, signal 149935/195107 (executing program)
2024/11/08 18:45:32 fetching corpus: 4350, signal 150428/195715 (executing program)
2024/11/08 18:45:32 fetching corpus: 4400, signal 151364/196349 (executing program)
2024/11/08 18:45:32 fetching corpus: 4450, signal 151737/196895 (executing program)
2024/11/08 18:45:32 fetching corpus: 4500, signal 152241/197435 (executing program)
2024/11/08 18:45:32 fetching corpus: 4550, signal 152613/197967 (executing program)
2024/11/08 18:45:33 fetching corpus: 4600, signal 153374/198528 (executing program)
2024/11/08 18:45:33 fetching corpus: 4650, signal 153809/199047 (executing program)
2024/11/08 18:45:33 fetching corpus: 4700, signal 154183/199538 (executing program)
2024/11/08 18:45:33 fetching corpus: 4750, signal 154579/200042 (executing program)
2024/11/08 18:45:33 fetching corpus: 4800, signal 154867/200610 (executing program)
2024/11/08 18:45:34 fetching corpus: 4850, signal 155220/201082 (executing program)
2024/11/08 18:45:34 fetching corpus: 4900, signal 155588/201578 (executing program)
2024/11/08 18:45:34 fetching corpus: 4950, signal 156088/202061 (executing program)
2024/11/08 18:45:35 fetching corpus: 5000, signal 156371/202494 (executing program)
2024/11/08 18:45:35 fetching corpus: 5050, signal 156717/202964 (executing program)
2024/11/08 18:45:35 fetching corpus: 5100, signal 157322/203222 (executing program)
2024/11/08 18:45:35 fetching corpus: 5150, signal 157798/203222 (executing program)
2024/11/08 18:45:35 fetching corpus: 5200, signal 158403/203222 (executing program)
2024/11/08 18:45:35 fetching corpus: 5250, signal 158747/203222 (executing program)
2024/11/08 18:45:36 fetching corpus: 5300, signal 159401/203222 (executing program)
2024/11/08 18:45:36 fetching corpus: 5350, signal 159818/203222 (executing program)
2024/11/08 18:45:36 fetching corpus: 5400, signal 160117/203222 (executing program)
2024/11/08 18:45:36 fetching corpus: 5450, signal 160647/203222 (executing program)
2024/11/08 18:45:36 fetching corpus: 5500, signal 161065/203222 (executing program)
2024/11/08 18:45:36 fetching corpus: 5550, signal 161414/203222 (executing program)
2024/11/08 18:45:37 fetching corpus: 5600, signal 161605/203222 (executing program)
2024/11/08 18:45:37 fetching corpus: 5650, signal 162010/203222 (executing program)
2024/11/08 18:45:37 fetching corpus: 5700, signal 162281/203222 (executing program)
2024/11/08 18:45:37 fetching corpus: 5750, signal 162799/203222 (executing program)
2024/11/08 18:45:37 fetching corpus: 5800, signal 163098/203222 (executing program)
2024/11/08 18:45:37 fetching corpus: 5850, signal 163429/203222 (executing program)
2024/11/08 18:45:37 fetching corpus: 5900, signal 163837/203222 (executing program)
2024/11/08 18:45:38 fetching corpus: 5950, signal 164197/203222 (executing program)
2024/11/08 18:45:38 fetching corpus: 6000, signal 164626/203222 (executing program)
2024/11/08 18:45:38 fetching corpus: 6050, signal 164989/203222 (executing program)
2024/11/08 18:45:39 fetching corpus: 6100, signal 165417/203222 (executing program)
2024/11/08 18:45:39 fetching corpus: 6150, signal 165702/203222 (executing program)
2024/11/08 18:45:39 fetching corpus: 6200, signal 165983/203222 (executing program)
2024/11/08 18:45:40 fetching corpus: 6250, signal 166718/203222 (executing program)
2024/11/08 18:45:40 fetching corpus: 6300, signal 167137/203222 (executing program)
2024/11/08 18:45:40 fetching corpus: 6350, signal 167419/203222 (executing program)
2024/11/08 18:45:41 fetching corpus: 6400, signal 167821/203222 (executing program)
2024/11/08 18:45:41 fetching corpus: 6450, signal 168112/203222 (executing program)
2024/11/08 18:45:41 fetching corpus: 6500, signal 168308/203222 (executing program)
2024/11/08 18:45:42 fetching corpus: 6550, signal 168577/203223 (executing program)
2024/11/08 18:45:42 fetching corpus: 6600, signal 168823/203223 (executing program)
2024/11/08 18:45:42 fetching corpus: 6650, signal 169132/203223 (executing program)
2024/11/08 18:45:42 fetching corpus: 6700, signal 169479/203223 (executing program)
2024/11/08 18:45:42 fetching corpus: 6750, signal 169768/203223 (executing program)
2024/11/08 18:45:43 fetching corpus: 6800, signal 170069/203223 (executing program)
2024/11/08 18:45:43 fetching corpus: 6850, signal 170367/203223 (executing program)
2024/11/08 18:45:43 fetching corpus: 6900, signal 170972/203223 (executing program)
2024/11/08 18:45:43 fetching corpus: 6950, signal 171240/203223 (executing program)
2024/11/08 18:45:43 fetching corpus: 7000, signal 171436/203223 (executing program)
2024/11/08 18:45:43 fetching corpus: 7050, signal 171649/203223 (executing program)
2024/11/08 18:45:44 fetching corpus: 7100, signal 171958/203223 (executing program)
2024/11/08 18:45:44 fetching corpus: 7150, signal 172188/203223 (executing program)
2024/11/08 18:45:44 fetching corpus: 7200, signal 172470/203223 (executing program)
2024/11/08 18:45:44 fetching corpus: 7250, signal 172821/203223 (executing program)
2024/11/08 18:45:45 fetching corpus: 7300, signal 173154/203223 (executing program)
2024/11/08 18:45:45 fetching corpus: 7350, signal 173449/203223 (executing program)
2024/11/08 18:45:45 fetching corpus: 7400, signal 173746/203223 (executing program)
2024/11/08 18:45:45 fetching corpus: 7450, signal 174269/203223 (executing program)
2024/11/08 18:45:46 fetching corpus: 7500, signal 174494/203223 (executing program)
2024/11/08 18:45:46 fetching corpus: 7550, signal 174812/203227 (executing program)
2024/11/08 18:45:46 fetching corpus: 7600, signal 175119/203227 (executing program)
2024/11/08 18:45:46 fetching corpus: 7650, signal 175347/203227 (executing program)
2024/11/08 18:45:47 fetching corpus: 7700, signal 175611/203227 (executing program)
2024/11/08 18:45:47 fetching corpus: 7750, signal 175893/203227 (executing program)
2024/11/08 18:45:47 fetching corpus: 7800, signal 176081/203227 (executing program)
2024/11/08 18:45:48 fetching corpus: 7850, signal 176381/203227 (executing program)
2024/11/08 18:45:48 fetching corpus: 7900, signal 176600/203227 (executing program)
2024/11/08 18:45:48 fetching corpus: 7950, signal 176799/203227 (executing program)
2024/11/08 18:45:49 fetching corpus: 8000, signal 177004/203227 (executing program)
2024/11/08 18:45:49 fetching corpus: 8050, signal 177308/203227 (executing program)
2024/11/08 18:45:49 fetching corpus: 8100, signal 177633/203227 (executing program)
2024/11/08 18:45:49 fetching corpus: 8150, signal 177885/203227 (executing program)
2024/11/08 18:45:49 fetching corpus: 8200, signal 178147/203227 (executing program)
2024/11/08 18:45:49 fetching corpus: 8250, signal 178507/203227 (executing program)
2024/11/08 18:45:49 fetching corpus: 8300, signal 178649/203227 (executing program)
2024/11/08 18:45:49 fetching corpus: 8350, signal 178927/203227 (executing program)
2024/11/08 18:45:49 fetching corpus: 8400, signal 179160/203227 (executing program)
2024/11/08 18:45:50 fetching corpus: 8450, signal 179328/203230 (executing program)
2024/11/08 18:45:50 fetching corpus: 8500, signal 179567/203230 (executing program)
2024/11/08 18:45:50 fetching corpus: 8550, signal 179779/203230 (executing program)
2024/11/08 18:45:50 fetching corpus: 8600, signal 180040/203230 (executing program)
2024/11/08 18:45:51 fetching corpus: 8650, signal 180233/203230 (executing program)
2024/11/08 18:45:51 fetching corpus: 8700, signal 180666/203230 (executing program)
2024/11/08 18:45:51 fetching corpus: 8750, signal 180945/203230 (executing program)
2024/11/08 18:45:52 fetching corpus: 8800, signal 181134/203230 (executing program)
2024/11/08 18:45:52 fetching corpus: 8850, signal 181491/203230 (executing program)
2024/11/08 18:45:52 fetching corpus: 8900, signal 182043/203232 (executing program)
2024/11/08 18:45:52 fetching corpus: 8950, signal 182299/203232 (executing program)
2024/11/08 18:45:53 fetching corpus: 9000, signal 182559/203232 (executing program)
2024/11/08 18:45:53 fetching corpus: 9050, signal 182775/203232 (executing program)
2024/11/08 18:45:53 fetching corpus: 9100, signal 182943/203232 (executing program)
2024/11/08 18:45:53 fetching corpus: 9150, signal 183116/203235 (executing program)
2024/11/08 18:45:54 fetching corpus: 9200, signal 183360/203235 (executing program)
2024/11/08 18:45:54 fetching corpus: 9250, signal 183671/203235 (executing program)
2024/11/08 18:45:54 fetching corpus: 9300, signal 183844/203235 (executing program)
2024/11/08 18:45:54 fetching corpus: 9350, signal 184030/203235 (executing program)
2024/11/08 18:45:55 fetching corpus: 9400, signal 184319/203235 (executing program)
2024/11/08 18:45:55 fetching corpus: 9450, signal 184560/203235 (executing program)
2024/11/08 18:45:55 fetching corpus: 9500, signal 184772/203235 (executing program)
2024/11/08 18:45:56 fetching corpus: 9550, signal 184988/203235 (executing program)
2024/11/08 18:45:56 fetching corpus: 9600, signal 185183/203235 (executing program)
2024/11/08 18:45:56 fetching corpus: 9650, signal 185374/203235 (executing program)
2024/11/08 18:45:56 fetching corpus: 9700, signal 185624/203235 (executing program)
2024/11/08 18:45:57 fetching corpus: 9750, signal 185789/203235 (executing program)
2024/11/08 18:45:57 fetching corpus: 9800, signal 186016/203235 (executing program)
2024/11/08 18:45:57 fetching corpus: 9850, signal 186302/203235 (executing program)
2024/11/08 18:45:57 fetching corpus: 9900, signal 186399/203235 (executing program)
2024/11/08 18:45:57 fetching corpus: 9950, signal 186579/203243 (executing program)
2024/11/08 18:45:57 fetching corpus: 10000, signal 186852/203243 (executing program)
2024/11/08 18:45:57 fetching corpus: 10050, signal 187010/203243 (executing program)
2024/11/08 18:45:58 fetching corpus: 10100, signal 187274/203243 (executing program)
2024/11/08 18:45:58 fetching corpus: 10150, signal 187441/203243 (executing program)
2024/11/08 18:45:58 fetching corpus: 10200, signal 187605/203243 (executing program)
2024/11/08 18:45:58 fetching corpus: 10250, signal 187743/203243 (executing program)
2024/11/08 18:45:59 fetching corpus: 10300, signal 187869/203243 (executing program)
2024/11/08 18:45:59 fetching corpus: 10350, signal 188026/203243 (executing program)
2024/11/08 18:45:59 fetching corpus: 10400, signal 188244/203243 (executing program)
2024/11/08 18:46:00 fetching corpus: 10450, signal 188467/203243 (executing program)
2024/11/08 18:46:00 fetching corpus: 10500, signal 188679/203243 (executing program)
2024/11/08 18:46:00 fetching corpus: 10550, signal 188868/203243 (executing program)
2024/11/08 18:46:00 fetching corpus: 10600, signal 189154/203243 (executing program)
2024/11/08 18:46:00 fetching corpus: 10650, signal 189331/203243 (executing program)
2024/11/08 18:46:01 fetching corpus: 10700, signal 189660/203243 (executing program)
2024/11/08 18:46:01 fetching corpus: 10750, signal 189817/203243 (executing program)
2024/11/08 18:46:01 fetching corpus: 10800, signal 190033/203243 (executing program)
2024/11/08 18:46:01 fetching corpus: 10850, signal 190430/203243 (executing program)
2024/11/08 18:46:02 fetching corpus: 10900, signal 190831/203243 (executing program)
2024/11/08 18:46:02 fetching corpus: 10930, signal 190964/203243 (executing program)
2024/11/08 18:46:02 fetching corpus: 10930, signal 190964/203243 (executing program)
2024/11/08 18:46:05 starting 8 fuzzer processes
18:46:05 executing program 0:
r0 = fsmount(0xffffffffffffffff, 0x1, 0x1)
write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x80, 0x1, 0x7}, 0xffffff00}}, 0x18)
write$P9_RRENAMEAT(r0, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/bnep\x00')
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000100)={0x80000000, 0x8, '\x00', 0x0, &(0x7f00000000c0)=[0x0]})
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x8180, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={0x0, 0x1, r0, 0x9})
r3 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000200)={0x0, 0x2, 0x9})
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000240))
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000280)={0x9, 0x6, 0x2, 0x0, 0x0, [{{r2}, 0xb1c}, {{r0}, 0x20002000000000}]})
ioctl$CDROMSETSPINDOWN(r3, 0x531e, &(0x7f0000000300)=0xf)
r5 = fcntl$dupfd(r1, 0x0, r0)
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x77}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x22, 0x13, [{0xc, 0x1}, {0x16, 0x1}, {0x12, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x24, 0x1}, {0x16, 0x1}, {0xb, 0x1}, {0xb}, {0xb}, {0x36}, {0xb}, {0x18, 0x1}, {0x24}, {0xb}, {0x60, 0x1}, {0x5, 0x1}, {0x1b, 0x1}, {0x1}, {0x24, 0x1}, {0x48, 0x1}, {0x3}, {0x60, 0x1}, {0x24, 0x1}, {0x6, 0x1}, {0x9}, {0xb, 0x1}, {}, {0x5, 0x1}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xc3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4a1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000011}, 0xc1)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f00000005c0))
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x202444cc}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)

18:46:05 executing program 1:
ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000000))
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040))
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000080)={0x3, 0xb0})
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f00000000c0)={0x4, 0x3f, 0x3})
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000100)={0x2, 0x6, 0x6, 0x0, 0x16, "96d633207939b879ad8e60e2166ff6842145e2"})
ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000140))
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000180))
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000001c0))
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0xc00, 0x0)
ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}]})
r2 = fork()
kcmp(r2, 0x0, 0x2, r1, r0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000002c0)={0xfff, 0x4, 0x3, 0x1, 0x1000, 0x4})
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCNXCL(r3, 0x540d)
r4 = creat(&(0x7f0000000340)='./file0\x00', 0x4d)
pidfd_getfd(r4, 0xffffffffffffffff, 0x0)
ptrace(0x11, r2)

18:46:05 executing program 2:
ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000000)={0x5, {0x0, 0x5, 0x1, 0x3}})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x130, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfe00}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7f}}]}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '-\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x80}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, '],$\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x81}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xaa}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9}]}]}, 0x130}}, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x3)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0x8, 0x8)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000300)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="4d2d067e988ba6417b9ab532ad5decae5b8171126c99881b937a8934011a02edca707cb23fa0a936c5d801df52f8b45bfdb34b9d6e630ba9", 0x38}, {&(0x7f0000000380)="7904d7ef751b998007723ae4d8ad90987fe61c84411efab31449dd60c2d1090bfc146484dd89bb67525cfb1d238565ab1b4cac4a19d84037a45b664244cca417a1030a80fad3833f1a666f637c684f7f4ce607", 0x53}], 0x2}}], 0x1, 0x40000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xc0, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, r1, 0x41c, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7a}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x40000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000007c0), &(0x7f0000000800), 0x2, 0x2)
r4 = dup3(r3, r3, 0x0)
kcmp(0x0, 0x0, 0x6, r2, r4)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000840)=0x80000000)
pipe2(&(0x7f0000000880)={<r5=>0xffffffffffffffff}, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004010}, 0x0)
r6 = syz_open_dev$vcsn(&(0x7f0000000a00), 0x2f, 0x10080)
setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000a40)={@mcast1}, 0x14)
pread64(r6, &(0x7f0000000a80)=""/71, 0x47, 0x7fbd)

18:46:05 executing program 3:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0xace9, 0x1, 0x7})
getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = dup2(r0, r1)
r3 = accept4$inet(r0, 0x0, &(0x7f00000000c0), 0x80000)
setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000100)={0xfffffffb, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}}, {{0x2, 0x4e22, @rand_addr=0x64010101}}}, 0x108)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
write$binfmt_aout(r3, &(0x7f0000000240)={{0x108, 0x32, 0x1, 0x36d, 0x374, 0x7, 0x198}, "a79c6948e41f7801", ['\x00', '\x00', '\x00', '\x00']}, 0x428)
r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0)
r5 = signalfd4(r4, &(0x7f00000006c0)={[0x7]}, 0x8, 0x80000)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000700)={{<r6=>0x0, 0x2, 0x6, 0x8, 0x4, 0x5, 0x7, 0x54, 0x7, 0xad, 0x2, 0x8, 0x100, 0x0, 0xffffffff00000000}, 0x8, [0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000780)={{r6, 0x800, 0x3f, 0x1, 0x7fff, 0x7, 0x20, 0x73, 0x9, 0x7fffffff, 0x1f, 0x1, 0x10000, 0x1, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r7 = epoll_create1(0x0)
close_range(0xffffffffffffffff, r7, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='fd/3\x00')
ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000880)=0xffffffffffffffff)
ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x0)
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
io_submit(0x0, 0x3, &(0x7f0000000b40)=[&(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f00000008c0)="87b2778df30225193a7403daa0cee3bf406dbd480edc3bcc5d5ac7477db0fd6cf9cf7bd6670c06372b1c8e93867d54c9a98a50048299d6b3b0e9d743a69a4422e025f78c2a11e53307b9733c02da98cbaf69f6340b52c02fee653ee2a793d410911111ef49c55d951e4d73b5f6ac5124dd07d94e0cf59bd074038612e6b58ff69f575e69bca5bfb85c3bcab46bfe313e6cb4a91670bb62224934fe516f1c5cc7782b4a075af2cb2af326a0829922d9a13e53693cd943922f7cb6f7c4f329209b4cc02657503e15685eea61f85ccda5827ced9b1f8305", 0xd6, 0x57, 0x0, 0x2, r8}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000a00)="d308040c3b769d", 0x7, 0x1, 0x0, 0x1}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000ac0)="89f693ff9335af53a4bd127f6f1daa6c", 0x10, 0x100000000, 0x0, 0x1, r0}])

[  145.869820] audit: type=1400 audit(1731091565.589:7): avc:  denied  { execmem } for  pid=278 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
18:46:05 executing program 4:
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000000)=0xfad)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x100010, 0xffffffffffffffff, 0xaaca5000)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x250200, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@broadcast, @loopback, @multicast2}, 0xc)
r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x3ea02, 0x30)
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x5, 0xc000)
write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'perf_event'}]}, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x600200, 0x20)
r3 = socket(0x1a, 0x80000, 0x6)
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000200)={0x4d8, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe894}]}, @TIPC_NLA_NODE={0x2a4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "b4db523e51005145ccc72d1da46e90b25bd4d3898acc67f47369ac9a23e6604898ba1a082dfbcafa42f82c3b803ec601887817c70f958cc9c89ac7bc8d7fec38fbb766b310c1700b68edb474054ff77a77182e1f4f0ffdfd6adcf9fbaffc361a31861a4d441bb07ddd011db26b7b1d2042b455eb04e40ed80ebb80ebbc8fae21eaec43909eed10d522e510ec0c02cc005beeeaaa74938806827929a294d440e7655a9ec92c0ab3"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "cbf409330722289b77b13f16f754805c35223a9cfba3627c14"}}, @TIPC_NLA_NODE_ID={0xc2, 0x3, "a4948b2f6a203642c5ee23f9e1fb739dce8ba1bf4645f600772108668419df81d92e761919cdc37ed6f39a3e856f84a9e05074ccd3a854815c0a0a68b2afa4aaeccddc22b90a51666a8ffec18632def0e80d57330c8df24e80f7656c86597388d717447e7b27f6ab43943479b55af4b40f4e44d7aba30301260f71207e858306adf3a3e903af2a1ab343ac348683333f24d09fb02f70e4aa945b3871c9f6448e31605ac000feccc9bb4a65e9ebf20e13596bf166a6fa5f789e065b9a9ae5"}, @TIPC_NLA_NODE_ID={0x63, 0x3, "0cd2562d2776259db8c556d3b47696840868b374409e990c3983fa04b37582afc14493bad6d236f31789b353a4db502cc0327a50790cf464a1f43a121fe53e37c54f83db9a388f23a9ba3913904136e9c8581d83de42818d086431ed29bd31"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "5b2c3e98562e4c64944283f396ac3a9f61bfa84dd1f37f"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "f063188ae77478e647b460df2349b014007071f949cc"}}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x422}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "7f0ada522bf1c4f27fa4733ab93d4b9f07c4e40beddca4d7ca1b"}}, @TIPC_NLA_NODE_ID={0xc7, 0x3, "fe4391256c31d515e1e3092db58feb4267a122572864b5bc1a3e39131c94c6388f63da11bd154e4d2b8ec5a35877b171aa7a9207e97f311ee4fb9cfc05604338b3d354a68305d174e790a518c516882988c8744f5e84e93409d181c7633d94b1bc1ea010b6bd0613ec3020933ceba68961bbaa309d3872d48f18cfa90451161f33bb43b790517c222256979b65ac8e0e5e79b5591428aa0615ba1870cbf37557c656dd9832f9460bf6195b844fccac629bdf28afd47cf2d452d346b667fac0ed5909bc"}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2404}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000780), 0x400000, 0x0)
open_by_handle_at(r4, &(0x7f00000007c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x9, 0x0, 0x4, 0x9}, 0x7, 0x4}}, 0x2000)
r5 = accept4(r2, &(0x7f0000000800)=@in, &(0x7f0000000880)=0x80, 0x80800)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r2)
sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x12c, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa20b}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1810}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e36}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4065}, 0x40015)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000b00), r1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r3)
sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r8, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast1, 0x4e22, 0x6, 0x4e20, 0x7, 0xa, 0x20, 0x20, 0x62, 0x0, 0xee01}, {0x5, 0x1, 0x8d9, 0x1, 0xfff, 0x1, 0x80, 0x8}, {0x10001, 0xffffffff, 0x4, 0x5}, 0x1ff, 0x6e6bb4, 0x0, 0x1, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x80, 0x8, 0x101, 0x1}}, 0xe8)

18:46:05 executing program 5:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, <r0=>0x0}, &(0x7f0000000040)=0xc)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x840c0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000000c0)={{0x2c, @rand_addr=0x64010102, 0x4e24, 0x0, 'none\x00', 0x1c, 0x80000000, 0x77}, {@empty, 0x4e21, 0x0, 0x5, 0x3, 0x8}}, 0x44)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0xc3, "5915c14fc91f049033d34669aced69133c585aa07556ace5de6105378c4335d1c59d6c393cf0d563811cd8fe9ee9116d77ad27f046d6b90447f1cf5d4363d8517229c5c32547e6e4079ecc31677c924dfe9a93f3621dc608fc835c7780ae2a4b9b8c33fc212eed6f3e2f541ff925f7bb4c700e62b0d33f5fd5ae9a000f8f6c38333147070dbe1d61dd69ec6fd4686688d9fd7660ee1ec5660dfd4c5ce83a87c4e66a9c326b7235d0abc212b70e889c76219737c018d8774c43fe2a02fad9e925d427c0"}, &(0x7f0000000240)=0xe7)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000280)={0x7, 'wlan1\x00', {}, 0x2})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x900040}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x73}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "b2fdc05f5b3c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x800)
sendfile(r2, r1, 0x0, 0x7)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x240, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x83, 0x3, "4d985fa103837bdb3b24bd41afd8319de98027f1062e0903961ae04ee98c5e0f86c71ebcdf3b9e8ab4e1dca06a4e5650e33b7d937d41998ff328795912ac522fdbe55ce5225f1b435a4f2a555d937c12a041120f87d5523862eaefb765069fb7160aeb7cd264abbf1b91c2ad0eeaad6ae5e02ea90d6913e389ad853101d95b"}, @TIPC_NLA_NODE_ID={0x96, 0x3, "092548abf19e496b668385419193a7b9430cbbfd49e9c53683490fff726add36270b772427403c01222a04410bcab33cd40521650531a9729d7081e7210c10da00c8746ce90d3a3b3b76c8a06cc23e5895246508dea9388f3bcec97debaa15b05c32e8c9af5fdef4fa78c142d7a906a9d12f73f479c83ac96aac119a1f9ed2450be96fd92600eedd9c30721adacc5bc33271"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @loopback, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x65e}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x58}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x900000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x5}, 0x40)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000700)={0x0, 'veth0_to_hsr\x00', {0x3}, 0xcc7})
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0xc1aea09925540040, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r4 = syz_mount_image$iso9660(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', 0x4, 0x2, &(0x7f00000009c0)=[{&(0x7f0000000900)="fe85499a4c846844c28ac68f0335c4e9ed52965c0d9bb4065c0c5d1306e58f589c6e30b910338f559c5655a92da58e8f2f051ca681436d1eb15f35fb", 0x3c, 0x4}, {&(0x7f0000000940)="7295255d67b8c37bd7b9f76c38237b955a87320c5b686590ddb315b0b8fe95cf1b5e49b748055a84171034a69d166b8b5d4d07ce2bc111658be906676059f91a247572356e25dd5837e945f98f8b7e248ce56a9dce7f", 0x56, 0x7}], 0x800040, &(0x7f0000000a00)={[{}], [{@measure}, {@fowner_eq={'fowner', 0x3d, r0}}, {@uid_lt={'uid<', r0}}]})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000a80)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
pwrite64(r2, &(0x7f0000000ac0)="9dd1c4472b050fead70917d5dd0c7acbbbf2f0518ae3bbe1fbbfad97eddf4543e30e5bd71e283abaebbb991e5430b1", 0x2f, 0x71a269c5)
r6 = signalfd4(r4, &(0x7f0000000b00)={[0x1]}, 0x8, 0x800)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r3, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x3c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040011)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000f40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x220, r7, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x265}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fc000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a3f5ed2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff801}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x210e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff0e}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc15f}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4048000}, 0x5)
write(r1, &(0x7f0000000f80)="5ccc40be965180b4", 0x8)

18:46:05 executing program 6:
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8)
r1 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="f216590d433b9b002f5d2306ce42b90c6c37acac8f3a3db7784798ee1444c7dcfee8b5bc06893889839dd67e6cea1795322c0a5698eed723d0063a6c75ec0564cfbabd2b2c0f7f084f216c1494709ea44baa6f41709b95a4fefb19f015a59a0d532544a6c9dac49ae36ee426b27285d087af514c823d9e1bb550ebdc9a77eddc8fecc157f251b1bba5", 0x89, 0x10000000}], 0x40000, &(0x7f00000002c0)={[{@nodots}, {@fat=@check_strict}, {@dots}, {@dots}, {@dots}], [{@smackfshat}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '\\\xeb!.'}}, {@fowner_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, '$+^Q-\''}}, {@fowner_eq={'fowner', 0x3d, r0}}]})
truncate(&(0x7f0000000380)='./file0/file0\x00', 0x81)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r2=>r1, {0x2}}, './file0/file1\x00'})
linkat(r1, &(0x7f00000003c0)='./file0\x00', r2, &(0x7f0000000440)='./file0/file0\x00', 0x400)
mount$9p_fd(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x2840009, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@uname={'uname', 0x3d, 'check=strict'}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fowner_gt={'fowner>', r0}}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '.)$&S-&\\*'}}, {@fsmagic={'fsmagic', 0x3d, 0x7ff}}, {@hash}]}})
setxattr$trusted_overlay_nlink(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)={'L+', 0x6}, 0x16, 0x2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/zoneinfo\x00', 0x0, 0x0)
r4 = open_tree(r3, &(0x7f0000000700)='./file0/file1\x00', 0x9001)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000007, 0x80010, r2, 0x10000000)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x488000, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000780)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x20}}, 0x4)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f00000007c0)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x1, {0x0, r7}}, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000800)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2000, @fd_index=0x1, 0x1, 0x694f, 0xff, 0x4, 0x1, {0x2, r8}}, 0xa38)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r7)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000840)={{0x1, 0x1, 0x18}, './file0/file0\x00'})
truncate(&(0x7f0000000880)='./file0/file1\x00', 0x4)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0)

18:46:05 executing program 7:
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x4)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0x8, 0x8, 0x4, 0x8, 0x1})
ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0)
ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/155})
r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x8, 0x40)
ioctl$TCSBRK(r0, 0x5409, 0x6)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000001c0)={0x1, 0xb7, 0xea1, 0xf76b, 0x19, "00b6eefd624b06784a542e3edbf65c7f8edc02"})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r1=>r0, @in_args={0x4}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './file0\x00'})
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000280))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x8840, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0x8)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r0, 0x80, &(0x7f0000000340)=@ethernet={0x306, @multicast}, 0x0, 0x0, 0x1}, 0x40)
write(r0, &(0x7f0000000400)="afaf66db74de02ed82d3f2e36ab6be2abc7894844d69fee1a4ae65fb5e91ccd2efe5b8f99edaed368682dbe461b6516873111af258fb7b4d7b7dae4c7bff958f591ba130cde4da007a9d7cb9f33d8927bc1eea5d08e4dff11c66882124cdd492b6a05c354ded57e3bd8d36d7aa0e296c14df3fa99a23b3056a819e960003eea7780be53b5363f7e254d5d68de6a2666a2c32cadc5075c8f3e146a30fd919595d7bb16927dcb58b4bb2263b74586412f851acfb3c379ed5", 0xb7)
r4 = accept4$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, &(0x7f0000000500)=0x10, 0x80800)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8)
r6 = openat2(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x420000, 0x34, 0x8}, 0x18)
ioctl$TIOCCBRK(r6, 0x5428)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000700))
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'sit0\x00', r5, 0x4, 0x4, 0x8, 0xf0f, 0x1, @local, @loopback, 0x1, 0x1, 0x1f, 0x6}})

[  147.153321] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  147.155289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  147.157479] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  147.164374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  147.166927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  147.169163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  147.175923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  147.178507] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  147.183784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  147.197873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  147.207044] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  147.209769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  147.210875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  147.216722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  147.218150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  147.223290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  147.231047] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  147.233767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  147.260810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  147.273778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  147.318800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  147.324236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  147.340821] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  147.342333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  147.349350] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  147.352492] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  147.356987] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  147.361087] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  147.370266] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  147.375406] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  147.376442] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  147.378177] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  147.383164] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  147.384975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  147.390661] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  147.391386] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  147.410368] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  147.413219] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  147.429127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  147.431497] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  147.432878] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  147.433898] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  147.435824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  147.444808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  147.455325] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  147.471788] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  147.515235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  147.517802] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  149.236265] Bluetooth: hci1: command tx timeout
[  149.299673] Bluetooth: hci2: command tx timeout
[  149.300121] Bluetooth: hci0: command tx timeout
[  149.363623] Bluetooth: hci3: command tx timeout
[  149.491641] Bluetooth: hci5: command tx timeout
[  149.491920] Bluetooth: hci6: command tx timeout
[  149.555938] Bluetooth: hci4: command tx timeout
[  149.619623] Bluetooth: hci7: command tx timeout
[  151.283748] Bluetooth: hci1: command tx timeout
[  151.347676] Bluetooth: hci0: command tx timeout
[  151.347705] Bluetooth: hci2: command tx timeout
[  151.412851] Bluetooth: hci3: command tx timeout
[  151.539683] Bluetooth: hci6: command tx timeout
[  151.540987] Bluetooth: hci5: command tx timeout
[  151.604735] Bluetooth: hci4: command tx timeout
[  151.668795] Bluetooth: hci7: command tx timeout
[  153.332768] Bluetooth: hci1: command tx timeout
[  153.395645] Bluetooth: hci2: command tx timeout
[  153.398590] Bluetooth: hci0: command tx timeout
[  153.459635] Bluetooth: hci3: command tx timeout
[  153.587780] Bluetooth: hci5: command tx timeout
[  153.588738] Bluetooth: hci6: command tx timeout
[  153.651661] Bluetooth: hci4: command tx timeout
[  153.715642] Bluetooth: hci7: command tx timeout
[  155.379632] Bluetooth: hci1: command tx timeout
[  155.443678] Bluetooth: hci0: command tx timeout
[  155.443708] Bluetooth: hci2: command tx timeout
[  155.507689] Bluetooth: hci3: command tx timeout
[  155.636685] Bluetooth: hci6: command tx timeout
[  155.637170] Bluetooth: hci5: command tx timeout
[  155.699625] Bluetooth: hci4: command tx timeout
[  155.763641] Bluetooth: hci7: command tx timeout
[  210.117909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  210.120897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  210.124365] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  210.132028] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  210.138375] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  210.141458] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  210.175870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  210.178637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  210.192210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  210.194230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  210.197082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  210.199267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  210.205394] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  210.208330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  210.209820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  210.211631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  210.220309] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  210.221722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  210.242619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  210.247825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  210.261777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  210.266270] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  210.269442] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  210.275727] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  210.276469] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  210.279805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  210.281764] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  210.284228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  210.286489] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  210.297187] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  210.331038] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  210.332760] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  210.336759] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  210.338151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  210.344294] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  210.347913] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  210.349511] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  210.350929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  210.356717] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  210.362105] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  210.382949] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  210.397824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  210.427271] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  210.430411] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  210.432551] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  210.441886] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  210.449183] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  210.465075] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  212.211743] Bluetooth: hci0: command tx timeout
[  212.275676] Bluetooth: hci1: command tx timeout
[  212.275918] Bluetooth: hci2: command tx timeout
[  212.340790] Bluetooth: hci3: command tx timeout
[  212.403731] Bluetooth: hci4: command tx timeout
[  212.467855] Bluetooth: hci5: command tx timeout
[  212.531636] Bluetooth: hci6: command tx timeout
[  212.596627] Bluetooth: hci7: command tx timeout
[  214.259645] Bluetooth: hci0: command tx timeout
[  214.323864] Bluetooth: hci1: command tx timeout
[  214.323899] Bluetooth: hci2: command tx timeout
[  214.388621] Bluetooth: hci3: command tx timeout
[  214.452634] Bluetooth: hci4: command tx timeout
[  214.515668] Bluetooth: hci5: command tx timeout
[  214.580790] Bluetooth: hci6: command tx timeout
[  214.643777] Bluetooth: hci7: command tx timeout
[  216.310621] Bluetooth: hci0: command tx timeout
[  216.371634] Bluetooth: hci1: command tx timeout
[  216.371713] Bluetooth: hci2: command tx timeout
[  216.435621] Bluetooth: hci3: command tx timeout
[  216.499657] Bluetooth: hci4: command tx timeout
[  216.565552] Bluetooth: hci5: command tx timeout
[  216.629654] Bluetooth: hci6: command tx timeout
[  216.691736] Bluetooth: hci7: command tx timeout
[  218.355665] Bluetooth: hci0: command tx timeout
[  218.419667] Bluetooth: hci1: command tx timeout
[  218.419706] Bluetooth: hci2: command tx timeout
[  218.484705] Bluetooth: hci3: command tx timeout
[  218.548828] Bluetooth: hci4: command tx timeout
[  218.611634] Bluetooth: hci5: command tx timeout
[  218.675601] Bluetooth: hci6: command tx timeout
[  218.742588] Bluetooth: hci7: command tx timeout
[  272.590094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  272.594962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  272.599086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  272.602181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  272.603887] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  272.605304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  272.895998] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  272.898391] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  272.902836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  272.912673] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  272.922953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  272.926763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  272.956981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  272.962880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  272.964365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  272.969433] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  272.973797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  272.975039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  272.985971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  272.992058] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  272.993177] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  273.000825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  273.002028] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  273.016769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  273.024457] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  273.025416] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  273.031989] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  273.032791] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  273.034491] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  273.040186] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  273.048800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  273.050831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  273.062786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  273.072459] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  273.076060] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  273.077778] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  273.078620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  273.079478] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  273.080862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  273.084824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  273.098773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  273.100734] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  273.111721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  273.116909] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  273.119557] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  273.122130] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  273.125345] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  273.152930] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  274.676623] Bluetooth: hci0: command tx timeout
[  274.997581] Bluetooth: hci2: command tx timeout
[  274.998610] Bluetooth: hci1: command tx timeout
[  275.123716] Bluetooth: hci4: command tx timeout
[  275.125078] Bluetooth: hci3: command tx timeout
[  275.188627] Bluetooth: hci6: command tx timeout
[  275.189471] Bluetooth: hci5: command tx timeout
[  275.252746] Bluetooth: hci7: command tx timeout
[  276.725569] Bluetooth: hci0: command tx timeout
[  277.044799] Bluetooth: hci1: command tx timeout
[  277.046324] Bluetooth: hci2: command tx timeout
[  277.171777] Bluetooth: hci3: command tx timeout
[  277.173299] Bluetooth: hci4: command tx timeout
[  277.237350] Bluetooth: hci6: command tx timeout
[  277.238832] Bluetooth: hci5: command tx timeout
[  277.300760] Bluetooth: hci7: command tx timeout
[  278.772636] Bluetooth: hci0: command tx timeout
[  279.092630] Bluetooth: hci2: command tx timeout
[  279.094169] Bluetooth: hci1: command tx timeout
[  279.220633] Bluetooth: hci3: command tx timeout
[  279.222060] Bluetooth: hci4: command tx timeout
[  279.283616] Bluetooth: hci5: command tx timeout
[  279.284963] Bluetooth: hci6: command tx timeout
[  279.348584] Bluetooth: hci7: command tx timeout
[  280.820698] Bluetooth: hci0: command tx timeout
[  281.139740] Bluetooth: hci2: command tx timeout
[  281.141201] Bluetooth: hci1: command tx timeout
[  281.267804] Bluetooth: hci4: command tx timeout
[  281.268337] Bluetooth: hci3: command tx timeout
[  281.331616] Bluetooth: hci6: command tx timeout
[  281.332126] Bluetooth: hci5: command tx timeout
[  281.397684] Bluetooth: hci7: command tx timeout
[  335.240458] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  335.243286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  335.245868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  335.257694] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  335.262355] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  335.271726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  335.546375] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  335.549763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  335.552071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  335.556145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  335.559803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  335.563062] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  335.691841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  335.693071] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  335.695365] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  335.699968] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  335.702001] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  335.703168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  335.706055] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  335.711604] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  335.715296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  335.717970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  335.729694] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  335.737852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  335.741885] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  335.751891] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  335.753318] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  335.760615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  335.763174] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  335.764363] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  335.798032] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  335.800443] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  335.800704] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  335.802780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  335.804114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  335.807135] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  335.809039] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  335.809189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  335.811088] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  335.812361] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  335.813867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  335.816467] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  335.817904] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  335.818935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  335.820663] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  335.858184] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  335.861429] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  335.862472] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  337.331593] Bluetooth: hci0: command tx timeout
[  337.587778] Bluetooth: hci1: command tx timeout
[  337.785728] Bluetooth: hci2: command tx timeout
[  337.843740] Bluetooth: hci3: command tx timeout
[  337.843755] Bluetooth: hci4: command tx timeout
[  337.844607] Bluetooth: hci7: command tx timeout
[  337.908698] Bluetooth: hci5: command tx timeout
[  337.972740] Bluetooth: hci6: command tx timeout
[  339.380643] Bluetooth: hci0: command tx timeout
[  339.635925] Bluetooth: hci1: command tx timeout
[  339.828699] Bluetooth: hci2: command tx timeout
[  339.891616] Bluetooth: hci3: command tx timeout
[  339.892706] Bluetooth: hci7: command tx timeout
[  339.892733] Bluetooth: hci4: command tx timeout
[  339.957614] Bluetooth: hci5: command tx timeout
[  340.019639] Bluetooth: hci6: command tx timeout
[  341.428568] Bluetooth: hci0: command tx timeout
[  341.684558] Bluetooth: hci1: command tx timeout
[  341.876569] Bluetooth: hci2: command tx timeout
[  341.939573] Bluetooth: hci4: command tx timeout
[  341.940614] Bluetooth: hci7: command tx timeout
[  341.941072] Bluetooth: hci3: command tx timeout
[  342.003711] Bluetooth: hci5: command tx timeout
[  342.067596] Bluetooth: hci6: command tx timeout
[  343.475588] Bluetooth: hci0: command tx timeout
[  343.731869] Bluetooth: hci1: command tx timeout
[  343.923606] Bluetooth: hci2: command tx timeout
[  343.988318] Bluetooth: hci7: command tx timeout
[  343.988347] Bluetooth: hci3: command tx timeout
[  343.988922] Bluetooth: hci4: command tx timeout
[  344.051605] Bluetooth: hci5: command tx timeout
[  344.115570] Bluetooth: hci6: command tx timeout
[  397.866707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  397.880356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  397.881894] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  397.887687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  397.889161] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  397.890366] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  398.082069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  398.089049] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  398.090241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  398.102078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  398.104729] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  398.108706] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  398.271138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  398.276730] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  398.281173] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  398.285743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  398.292014] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  398.293049] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  398.344938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  398.348432] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  398.351670] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  398.355261] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  398.357849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  398.358971] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  398.418869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  398.418932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  398.425025] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  398.431073] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  398.432000] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  398.436195] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  398.438208] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  398.441699] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  398.459634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  398.469813] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  398.475044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  398.479973] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  398.481173] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  398.487742] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  398.489131] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  398.490289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  398.515814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  398.520312] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  398.536142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  398.538996] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  398.542693] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  398.543669] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  398.563741] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  398.564640] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  399.924561] Bluetooth: hci0: command tx timeout
[  400.180087] Bluetooth: hci1: command tx timeout
[  400.371681] Bluetooth: hci2: command tx timeout
[  400.435882] Bluetooth: hci3: command tx timeout
[  400.563639] Bluetooth: hci4: command tx timeout
[  400.565419] Bluetooth: hci5: command tx timeout
[  400.628826] Bluetooth: hci6: command tx timeout
[  400.629652] Bluetooth: hci7: command tx timeout
[  401.972557] Bluetooth: hci0: command tx timeout
[  402.228688] Bluetooth: hci1: command tx timeout
[  402.420575] Bluetooth: hci2: command tx timeout
[  402.483597] Bluetooth: hci3: command tx timeout
[  402.611771] Bluetooth: hci5: command tx timeout
[  402.612311] Bluetooth: hci4: command tx timeout
[  402.675635] Bluetooth: hci6: command tx timeout
[  402.676153] Bluetooth: hci7: command tx timeout
[  404.021502] Bluetooth: hci0: command tx timeout
[  404.276632] Bluetooth: hci1: command tx timeout
[  404.467566] Bluetooth: hci2: command tx timeout
[  404.531564] Bluetooth: hci3: command tx timeout
[  404.660709] Bluetooth: hci5: command tx timeout
[  404.661332] Bluetooth: hci4: command tx timeout
[  404.723663] Bluetooth: hci7: command tx timeout
[  404.724221] Bluetooth: hci6: command tx timeout
[  406.068548] Bluetooth: hci0: command tx timeout
[  406.324592] Bluetooth: hci1: command tx timeout
[  406.516534] Bluetooth: hci2: command tx timeout
[  406.580537] Bluetooth: hci3: command tx timeout
[  406.707696] Bluetooth: hci4: command tx timeout
[  406.709262] Bluetooth: hci5: command tx timeout
[  406.772619] Bluetooth: hci7: command tx timeout
[  406.774134] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
18:51:10  Registers:
info registers vcpu 0
RAX=000000008bcf4609 RBX=ffffffff87ee4ab0 RCX=0000000034df1e0e RDX=00000000c183e4c7
RSI=000000008bcf4609 RDI=0000000034df1e0e RBP=ffff88803e2b5280 RSP=ffff88800efd7618
R8 =0000000000000000 R9 =fffffbfff0fdc5e4 R10=ffffffff87ee2f27 R11=00000000000c36d9
R12=0000000000000000 R13=ffffffff87ee4ab0 R14=0000000000000000 R15=ffff88803e2b5ce8
RIP=ffffffff812fc7b1 RFL=00000893 [-OS-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7762284170 CR3=000000003714a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffffffff813ef450 RCX=ffffffff86839201 RDX=1ffff11006907ea3
RSI=ffffffff818b8234 RDI=ffff88803483f518 RBP=ffff88803483f5b0 RSP=ffff88803483f4e8
R8 =ffffffff86839270 R9 =ffff88803483f558 R10=000000000003c001 R11=0000000000023c4f
R12=ffff88803483f5e0 R13=0000000000000000 R14=ffff88801ad18000 R15=ffff88803483f518
RIP=ffffffff811490a1 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe6100000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd15918d98 CR3=0000000039952000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00642e65626f7270646f6d2f62696c2f XMM01=00642e65626f7270646f6d2f62696c2f
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000