Warning: Permanently added '[localhost]:17557' (ECDSA) to the list of known hosts.
2025/01/24 05:18:27 fuzzer started
2025/01/24 05:18:28 dialing manager at localhost:45511
syzkaller login: [   63.199750] cgroup: Unknown subsys name 'net'
[   63.306868] cgroup: Unknown subsys name 'cpuset'
[   63.338485] cgroup: Unknown subsys name 'rlimit'
[   70.110290] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/24 05:18:45 syscalls: 2217
2025/01/24 05:18:45 code coverage: enabled
2025/01/24 05:18:45 comparison tracing: enabled
2025/01/24 05:18:45 extra coverage: enabled
2025/01/24 05:18:45 setuid sandbox: enabled
2025/01/24 05:18:45 namespace sandbox: enabled
2025/01/24 05:18:45 Android sandbox: enabled
2025/01/24 05:18:45 fault injection: enabled
2025/01/24 05:18:45 leak checking: enabled
2025/01/24 05:18:45 net packet injection: enabled
2025/01/24 05:18:45 net device setup: enabled
2025/01/24 05:18:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/24 05:18:45 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/24 05:18:45 USB emulation: enabled
2025/01/24 05:18:45 hci packet injection: enabled
2025/01/24 05:18:45 wifi device emulation: enabled
2025/01/24 05:18:45 802.15.4 emulation: enabled
2025/01/24 05:18:45 fetching corpus: 0, signal 0/2000 (executing program)
2025/01/24 05:18:45 fetching corpus: 0, signal 0/4000 (executing program)
2025/01/24 05:18:45 fetching corpus: 0, signal 0/6000 (executing program)
2025/01/24 05:18:45 fetching corpus: 0, signal 0/8000 (executing program)
2025/01/24 05:18:45 fetching corpus: 0, signal 0/8823 (executing program)
2025/01/24 05:18:45 fetching corpus: 0, signal 0/8823 (executing program)
2025/01/24 05:18:47 starting 8 fuzzer processes
05:18:47 executing program 0:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x100000001]}, 0x8)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000080)={'gre0\x00', <r1=>0x0, 0x7, 0x10, 0x200, 0x20, {{0x8, 0x4, 0x3, 0x5, 0x20, 0x64, 0x0, 0x54, 0x4, 0x0, @multicast1, @multicast1, {[@generic={0x94, 0x9, "96f1a9ee0e9869"}]}}}}})
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)=r1)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @xdp={0x2c, 0x1, <r2=>r1, 0x26}, @qipcrtr={0x2a, 0x0, 0x7ffe}, @generic={0x11, "143ef97bdc089a4dffc2fd581b02"}, 0xfff, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000140)='vcan0\x00', 0x32, 0x78f, 0x1})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, r2}, 0x14)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000240)={0x8000, "e4ce15"}, 0x6)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000280))
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0x400, 0x1, 0x1, 0x6, 0x83ca, 0x9})
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf8, r3, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x85}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfd65}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9f72}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20040000}, 0x20010)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000500)={0x8, 'wg1\x00', {'veth0_to_hsr\x00'}, 0x2})
r4 = creat(&(0x7f0000000540)='./file0\x00', 0x20)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd75}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x54}}, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$FICLONE(r5, 0x40049409, r0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0xb00, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000a00)=""/25, 0x19}, {&(0x7f0000000a40)=""/131, 0x83}, {&(0x7f0000000b00)=""/36, 0x24}, {&(0x7f0000000b40)=""/113, 0x71}, {&(0x7f0000000bc0)=""/136, 0x88}, {&(0x7f0000000c80)=""/10, 0xa}, {&(0x7f0000000cc0)=""/143, 0x8f}], 0x7)
write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000e00)={0x7, 0x33, 0x2}, 0x7)

05:18:47 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x593342e9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004400)
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000200))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008081}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {<r3=>r0}}, './file0\x00'})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000500)=0x4)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x20010, 0xffffffffffffffff, 0xb9ac1000)
r4 = openat(r3, &(0x7f0000000540)='./file0\x00', 0x400, 0x112)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3)
sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x30}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "15ecf7f3f3b103b8fe471f84cb11f804"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xffff}]}, 0x3c}}, 0x4001)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r0)
sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1e8, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff839}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x21}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa2244cb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d8}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x24044005}, 0x4000000)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000009c0), 0x440100, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r7, 0xc058534b, &(0x7f0000000a00)={0x61c3c25b, 0x1000, 0xffffffff, 0xced1, 0x4, 0x3})
sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8)
sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40)
clock_gettime(0x0, &(0x7f00000046c0))
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000004840)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004800)={&(0x7f0000004780)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xff}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x6}]}, 0x44}}, 0xff55ebed9e9c1a7f)

05:18:48 executing program 7:
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x0, 0x711, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x83}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14)
connect(r0, &(0x7f0000000240)=@in6={0xa, 0x4e21, 0x3, @mcast1, 0x8}, 0x80)
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x13, 0x2, {0x4, 0x4, 0x6}}, 0x14)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000540))
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000580))
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000005c0))
fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$tmpfs(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x202000, &(0x7f0000000700)={[{@huge_always}, {@huge_never}, {@mode={'mode', 0x3d, 0xff}}, {@nr_inodes={'nr_inodes', 0x3d, [0x35, 0x6b, 0x2d, 0x6b]}}, {@huge_always}, {@huge_never}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x66, 0x39, 0x0, 0x34, 0x37, 0x36, 0x63], 0x2d, [0x66, 0x37, 0x38, 0x37], 0x2d, [0x63, 0x66, 0x33, 0x68], 0x2d, [0x38, 0x39, 0x39, 0x34], 0x2d, [0x34, 0x35, 0x63, 0x34, 0x39, 0x64, 0x35, 0x63]}}}, {@uid_gt={'uid>', r1}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '-['}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsuuid={'fsuuid', 0x3d, {[0x6c, 0x31, 0x35, 0x3f, 0x64, 0x33, 0x33, 0x32], 0x2d, [0x33, 0x38, 0x31, 0x37], 0x2d, [0x37, 0x32, 0x38, 0x5], 0x2d, [0x63, 0x31, 0x31, 0x39], 0x2d, [0x37, 0x36, 0x65, 0x37, 0x34, 0x31, 0x31, 0x62]}}}]})
r2 = syz_open_dev$evdev(&(0x7f0000000840), 0xfff, 0x1)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r3=>r2, {<r4=>r0}}, './file1\x00'})
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040045}, 0x4801)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000009c0)={<r5=>0x0}, &(0x7f0000000a00)=0xc)
ptrace$getenv(0x4201, r5, 0x2, &(0x7f0000000a40))
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000a80)={0x8, 0x35, 0x1, 0x4}, 0x8)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000bc0)={0x3, 0x100, 0xeb, &(0x7f0000000ac0)=""/235})
shutdown(r3, 0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4228}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c0)

05:18:47 executing program 3:
r0 = syz_io_uring_complete(0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000000)={{0x0, 0x1, 0x4, 0x8, 0x2, 0x8, 0x8, 0x9, 0xfffffff8, 0x2, 0x1, 0x1, 0xacc8, 0x20, 0xffffffffffff6a46}})
prctl$PR_GET_TIMERSLACK(0x1e)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001000)={{0x1, 0x1, 0x18, <r1=>r0, {0x6f9}}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000001040)={{0x3, 0x8}, 'port1\x00', 0x20, 0x0, 0x9, 0x7, 0x215, 0x35, 0xffffffff, 0x0, 0x1, 0xf2})
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000001100), 0x20400, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0xb0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3ce}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x31}, {0x8, 0xb, 0x7000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x7fff}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x4040800)
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000012c0))
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x64, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x8840}, 0x40004)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000001440)={{0x5, 0x9}, {0x2, 0x5}, 0x7, 0x0, 0xe0})
rmdir(&(0x7f00000014c0)='./file0\x00')
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r3 = accept$unix(r1, &(0x7f0000001500), &(0x7f0000001580)=0x6e)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000015c0)={<r4=>0x0, 0x8d, 0x0, [0x1, 0x1, 0xa0000000, 0x7f, 0x7f], [0x10001, 0x6, 0x800, 0xf0a8, 0xffffffff80000001, 0xffffffff, 0x2, 0x3, 0x4, 0x400, 0x5, 0x10001, 0x2800000000000000, 0x1f, 0x8, 0x100, 0x9, 0x100000001, 0x20, 0x6, 0x7, 0xff, 0x1f, 0x0, 0x4, 0x7, 0x7fff, 0x7fffffff, 0xfffffffffffffff7, 0xffffffffffffffff, 0x8, 0x20, 0x9, 0x6, 0x1edb, 0x7, 0x0, 0x0, 0x6d3, 0x4, 0x1, 0x80000000, 0x100000001, 0xfffffffffffff800, 0xd9f9, 0xffffffffffffffe0, 0x2, 0x6, 0x1f, 0x10000, 0x0, 0x200, 0x4, 0x4, 0x9, 0x10000, 0x2, 0xffffffffffff7cb7, 0x6, 0x6, 0x100000000, 0x8, 0x3, 0x8000, 0x8, 0x1, 0x20, 0x100000001, 0xbaf8, 0x100000001, 0x1000, 0x0, 0x7, 0x1, 0x2, 0x9, 0xffff, 0x400, 0x1ff, 0x40, 0x5, 0x3, 0xfffffffffffff000, 0x4, 0x7, 0x1, 0x1, 0x2, 0x4, 0x80000001, 0x7, 0xc57f, 0x3, 0x8000000, 0x4, 0x7, 0x7, 0x4a, 0x3e3a30, 0x5c, 0x4, 0x40, 0xfffffffffffffffb, 0x3, 0x8677, 0x0, 0x3f, 0x6, 0x8, 0x400, 0x4, 0x0, 0x1, 0x5, 0x9, 0x3, 0x7, 0x0, 0x81, 0x7, 0x7759b55c]})
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000001a00)={{r3}, 0x0, 0x12, @unused=[0x3, 0x1, 0x6, 0x401], @devid=r4})
llistxattr(&(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40)=""/234, 0xea)
r5 = accept$inet(r2, 0x0, &(0x7f0000002b40))
ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0), &(0x7f0000002c00)={0x0, 0xfb, 0x46, 0x0, 0x5c, "49088ba397fbdf55c20885e444f73ce7", "f546ef0eb15077a4f439341ebaf0b3253a693c4f4f0ba1db67b71abf5ce25c25822e0fb6c20066530c81390ae9a317a25c"}, 0x46, 0x3)

[   82.885924] audit: type=1400 audit(1737695928.030:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:18:47 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00')
getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$FIOCLEX(r0, 0x5451)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in=@loopback, 0x4e21, 0x9, 0x4e22, 0xab, 0x2, 0x0, 0x20, 0x67, 0x0, 0xffffffffffffffff}, {0x1, 0x2b183ee, 0x0, 0x100000001, 0x1, 0x7, 0xc63, 0x9}, {0x20, 0xfff, 0x18000000, 0x3}, 0x2, 0x6e6bbb, 0x0, 0x1}, {{@in6=@mcast2, 0x690c, 0x6c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3505, 0x1, 0x3, 0x2, 0x4, 0x800}}, 0xe8)
getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0xf1, "a19ad1dce999a2a444917b03ea11678cee42e26c02eed6ebc1866cee1276ff9b8ce2791f7517a6e078f8aaafb1be672a1895702bd6b0473ed21686324a9b654c3eeebd9ce36b0aa53d4ab95ee7686f4173f9613f59cd3bb0cfb2497da69bd6226aa2fb49d9088637ed6fd00575b4674087f0c05c4bc561403e73494e9a252f3dba2bccdfa217931a87bb59710347b7ed1b49e363125cb4002c879620727d2782989b5a845bff78fb5e71f517e736ed4035c984f282c45bfc13527f0b4e567d6661b8a57bad703b9858a046b77d0a6c5fb5bdc8546a59e117a4160da7f1ef228fb84b0ae41dabebf5a9c046697ad60c00db"}, &(0x7f0000000300)=0x115)
r1 = openat2(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0xc000, 0xa, 0xa}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x40, 0xd0, 0x2, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x8000, 0x35, 0x5}})
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3fb, 0x1, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x22058080)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x4, 0x5a8, [0x0, 0x200005c0, 0x200005f0, 0x2000093c], 0x0, &(0x7f0000000580), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0x3}, {0x0, '\x00', 0x0, 0x42dcbeb13a578cc7, 0x2, [{0x9, 0x48, 0x886c, 'bridge_slave_1\x00', 'wg0\x00', 'gretap0\x00', 'veth0_vlan\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff], 0xfe, 0xfe, 0x22e, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@mcast2, [0xffffffff, 0xffffffff, 0xffffff00, 0xff], 0x4e24, 0x17, 0x0, 0x4e23, 0x20, 0x8}}}, @connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x1ff}, {0x4}]}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8001, 'system_u:object_r:mount_tmp_t:s0\x00'}}}}, {0x9, 0x0, 0x8848, 'veth1_to_team\x00', 'bridge_slave_1\x00', 'team_slave_0\x00', 'wlan1\x00', @local, [0xff, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0x0, 0xdae8045c67a5fbdb], 0x6e, 0xbe, 0xee, [], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x1, {0xffffffff80000000}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x7}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x9, 0x11, 0x1a, 'caif0\x00', 'ip6erspan0\x00', 'ipvlan1\x00', 'team_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, [0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, [0x0, 0xff, 0xff, 0xff], 0xae, 0xde, 0x12e, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x2, 0x100000001, 0x2, 0x1}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}], @common=@log={'log\x00', 0x28, {{0x80, "4d3f478fd0bda8ac408e4ea7e882f2851e7449d83851945702a94b1500f2", 0x9}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{0x0, 0x12, 0x5, 'bond0\x00', 'veth0_vlan\x00', 'veth1_to_team\x00', 'batadv0\x00', @broadcast, [0x0, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}]}, 0x620)
r2 = fsmount(r0, 0x1, 0x82)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000c00)={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x9, [@rand_addr=0x64010101, @broadcast, @multicast1, @local, @private=0xa010100, @empty, @remote, @remote, @remote]}, 0x34)
pipe(&(0x7f0000000c40)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000c80))
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000e80), 0xabb00916df3dc377, 0x0)
recvfrom$inet(r5, &(0x7f0000000ec0)=""/183, 0xb7, 0x10000, &(0x7f0000000f80)={0x2, 0x4e22, @broadcast}, 0x10)
ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000fc0)=""/25)
setxattr$trusted_overlay_nlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040), &(0x7f0000001080)={'U+', 0x7}, 0x16, 0x1)
getsockname$unix(0xffffffffffffffff, &(0x7f00000010c0), &(0x7f0000001140)=0x6e)
r6 = fcntl$dupfd(r1, 0x406, r3)
setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000001180)={0x2c, @local, 0x4e20, 0x4, 'none\x00', 0x31, 0x7, 0x13}, 0x2c)

05:18:47 executing program 4:
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x6, @multicast2, 0x4e23, 0x1, 'fo\x00', 0x2c, 0x7, 0x51}, {@broadcast, 0x4e22, 0x10000, 0x101, 0x9, 0x7fffffff}}, 0x44)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x400800, 0x0)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8)
openat$cgroup_pressure(r0, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0)
r1 = accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10, 0x400)
getsockopt(r1, 0x2, 0xffff, &(0x7f0000000200)=""/192, &(0x7f00000002c0)=0xc0)
write$P9_RXATTRCREATE(r0, &(0x7f0000000300)={0x7, 0x21, 0x2}, 0x7)
r2 = accept(r0, &(0x7f0000000340)=@tipc=@name, &(0x7f00000003c0)=0x80)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @loopback}, 0xc)
getpeername$unix(r1, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000500), &(0x7f0000000540)=0x30)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000980)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={0x34c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x55103bff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8ac7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa2c6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86a4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x607b}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8c96}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3040}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x143}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x8000}, 0x91)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000009c0)=0x4)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, @in_args={0x4}}, './file0\x00'})
getsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f0000000a40)=""/110, &(0x7f0000000ac0)=0x6e)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/class/drm', 0x80080, 0xc1)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000bc0)=@buf={0x65, &(0x7f0000000b40)="23bf7d8fb18a0dc18d388e85feed3d55d447ea0ed87093a97635ade7cb898e19b357194123d890989377bf8c4d8e420703bfd78978c70bb39452796a992d11455579bb6950f7be17c0a09769c17fa08740d1f0e042704eddfcc686cd1e2f72b62840393d0f"})
fcntl$lock(r3, 0x22, &(0x7f0000000c00)={0x2, 0x0, 0x8, 0x40})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000d00)={'ip6_vti0\x00', &(0x7f0000000c80)={'sit0\x00', <r5=>0x0, 0x4, 0x1, 0x36, 0x5, 0x2, @empty, @private1, 0x8000, 0x7, 0x7, 0x3}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)

05:18:47 executing program 5:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x102)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24040000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x1005)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000010)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x44000)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x9e6b00e35ba37d3a}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xb164}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4855)
pipe(&(0x7f00000005c0)={<r1=>0xffffffffffffffff})
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xac, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0xff}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x3}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000041}, 0x10)
pivot_root(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00')
r2 = pidfd_getfd(r1, r1, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8020}, 0x55)
r3 = openat$cgroup_ro(r1, &(0x7f0000000940)='cpuacct.stat\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, 0x0, 0x98714fee2c03a5d0, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4cf}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa6ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffe}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9b}]}]}, 0x48}}, 0x4004001)
r4 = openat2(r2, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x80000, 0x8, 0x1}, 0x18)
r5 = syz_io_uring_complete(0x0)
ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000b40)=0x1)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000d00)={&(0x7f0000000c80), &(0x7f0000000cc0)=""/5, 0x5})
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000d40))
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x108600}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x90c5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40002)

05:18:48 executing program 1:
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2d8000, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='nomand\x00', 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x3, 0x6})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c380, 0x0)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r1)
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6151cd4f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x20}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000010)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x54}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r3 = socket(0x26, 0x1, 0x7)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f00000003c0)={'ah\x00'}, &(0x7f0000000400)=0x1e)
r4 = openat(r0, &(0x7f0000000440)='./file0\x00', 0x1000, 0x100)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r6 = fspick(r0, &(0x7f00000005c0)='./file0\x00', 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000600)={{<r7=>0x0, 0x9, 0x80, 0x200, 0x1, 0x38, 0x2, 0xae0, 0x3, 0x8, 0x8001, 0x4, 0xffffffffffff3583, 0x0, 0x9}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000001600)={0x698ba7fb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}], 0x0, "5c95b6859b3021"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002600)={<r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000002800)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r10=>0x0}], 0xbf, "fda08a734d8f95"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f000006d880)={0x1ff, [{}, {}, {}, {r7, r8}, {r9, r10}], 0x4, "2379892d910c08"})

[   84.401454] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.408411] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.410934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.425120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.433304] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   84.435929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.477393] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.483168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.485452] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.489417] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.491110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.527357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.530230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.532323] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   84.534248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   84.539327] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.540886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   84.542445] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   84.544930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.547005] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.548555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.550524] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   84.553382] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.563692] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   84.568036] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   84.570360] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.580381] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   84.584914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   84.591290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.593995] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   84.595957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.598153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.601330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   84.607057] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   84.620153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   84.623140] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   84.625210] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   84.627098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   84.629347] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   84.646816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.675256] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   84.678177] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   84.715804] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   84.718912] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   84.724187] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   84.740867] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   84.749003] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   84.752236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   86.477473] Bluetooth: hci0: command tx timeout
[   86.669697] Bluetooth: hci5: command tx timeout
[   86.733212] Bluetooth: hci1: command tx timeout
[   86.733255] Bluetooth: hci4: command tx timeout
[   86.734054] Bluetooth: hci3: command tx timeout
[   86.734168] Bluetooth: hci2: command tx timeout
[   86.796688] Bluetooth: hci7: command tx timeout
[   86.797554] Bluetooth: hci6: command tx timeout
[   88.525683] Bluetooth: hci0: command tx timeout
[   88.717709] Bluetooth: hci5: command tx timeout
[   88.782698] Bluetooth: hci2: command tx timeout
[   88.783742] Bluetooth: hci1: command tx timeout
[   88.784535] Bluetooth: hci4: command tx timeout
[   88.785944] Bluetooth: hci3: command tx timeout
[   88.844690] Bluetooth: hci6: command tx timeout
[   88.845158] Bluetooth: hci7: command tx timeout
[   90.574686] Bluetooth: hci0: command tx timeout
[   90.765060] Bluetooth: hci5: command tx timeout
[   90.829041] Bluetooth: hci2: command tx timeout
[   90.830280] Bluetooth: hci4: command tx timeout
[   90.831499] Bluetooth: hci3: command tx timeout
[   90.832832] Bluetooth: hci1: command tx timeout
[   90.892726] Bluetooth: hci6: command tx timeout
[   90.892760] Bluetooth: hci7: command tx timeout
[   92.620903] Bluetooth: hci0: command tx timeout
[   92.812775] Bluetooth: hci5: command tx timeout
[   92.876863] Bluetooth: hci4: command tx timeout
[   92.876936] Bluetooth: hci3: command tx timeout
[   92.877974] Bluetooth: hci1: command tx timeout
[   92.878778] Bluetooth: hci2: command tx timeout
[   92.941238] Bluetooth: hci6: command tx timeout
[   92.942467] Bluetooth: hci7: command tx timeout
[  146.775709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  146.777874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  146.779192] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  146.782202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  146.785125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  146.786767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  146.900319] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  146.911495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  146.913862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  146.927363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  146.930890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  146.934075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  146.935918] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  146.937392] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  146.938740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  146.941901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  146.942973] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  146.943956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  146.946251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  146.948012] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  146.954531] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  146.956195] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  146.957085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  146.966856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  146.968524] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  146.969721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  146.975799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  146.991972] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  146.993947] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  146.995644] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  146.997147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  147.016894] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  147.024923] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  147.035824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  147.039351] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  147.040837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  147.052324] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  147.072066] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  147.073932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  147.087746] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  147.098013] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  147.099066] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  147.118900] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  147.124893] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  147.126205] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  147.146273] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  147.157972] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  147.163754] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  148.814246] Bluetooth: hci0: command tx timeout
[  149.004696] Bluetooth: hci1: command tx timeout
[  149.068712] Bluetooth: hci4: command tx timeout
[  149.069400] Bluetooth: hci3: command tx timeout
[  149.069997] Bluetooth: hci2: command tx timeout
[  149.132688] Bluetooth: hci5: command tx timeout
[  149.261693] Bluetooth: hci6: command tx timeout
[  149.326600] Bluetooth: hci7: command tx timeout
[  150.860864] Bluetooth: hci0: command tx timeout
[  151.053653] Bluetooth: hci1: command tx timeout
[  151.118615] Bluetooth: hci4: command tx timeout
[  151.119117] Bluetooth: hci2: command tx timeout
[  151.120066] Bluetooth: hci3: command tx timeout
[  151.181873] Bluetooth: hci5: command tx timeout
[  151.309831] Bluetooth: hci6: command tx timeout
[  151.372691] Bluetooth: hci7: command tx timeout
[  152.911630] Bluetooth: hci0: command tx timeout
[  153.101685] Bluetooth: hci1: command tx timeout
[  153.165822] Bluetooth: hci3: command tx timeout
[  153.166266] Bluetooth: hci2: command tx timeout
[  153.166764] Bluetooth: hci4: command tx timeout
[  153.229614] Bluetooth: hci5: command tx timeout
[  153.357636] Bluetooth: hci6: command tx timeout
[  153.421683] Bluetooth: hci7: command tx timeout
[  154.956782] Bluetooth: hci0: command tx timeout
[  155.149679] Bluetooth: hci1: command tx timeout
[  155.214659] Bluetooth: hci4: command tx timeout
[  155.215628] Bluetooth: hci2: command tx timeout
[  155.216446] Bluetooth: hci3: command tx timeout
[  155.277703] Bluetooth: hci5: command tx timeout
[  155.405685] Bluetooth: hci6: command tx timeout
[  155.470325] Bluetooth: hci7: command tx timeout
[  209.123067] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  209.127246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  209.130984] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  209.138179] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  209.148942] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  209.151946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  209.194512] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  209.203101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  209.211476] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  209.216163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  209.218958] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  209.221127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  209.371005] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  209.392123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  209.395615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  209.423285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  209.445396] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  209.447960] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  209.451287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  209.471470] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  209.498358] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  209.534267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  209.549262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  209.555187] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  209.686264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  209.702880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  209.757203] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  209.783043] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  209.787738] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  209.789692] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  209.825793] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  209.838902] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  209.856822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  209.877003] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  209.880177] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  209.881509] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  209.887927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  209.896308] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  209.907866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  209.910913] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  209.915998] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  209.930334] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  209.932344] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  209.942521] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  209.947057] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  209.950159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  209.957105] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  209.995372] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  211.213929] Bluetooth: hci0: command tx timeout
[  211.279055] Bluetooth: hci1: command tx timeout
[  211.533959] Bluetooth: hci2: command tx timeout
[  211.597680] Bluetooth: hci3: command tx timeout
[  211.853282] Bluetooth: hci4: command tx timeout
[  211.980783] Bluetooth: hci7: command tx timeout
[  212.044693] Bluetooth: hci6: command tx timeout
[  212.172710] Bluetooth: hci5: command tx timeout
[  213.260875] Bluetooth: hci0: command tx timeout
[  213.325615] Bluetooth: hci1: command tx timeout
[  213.580595] Bluetooth: hci2: command tx timeout
[  213.644642] Bluetooth: hci3: command tx timeout
[  213.901135] Bluetooth: hci4: command tx timeout
[  214.028659] Bluetooth: hci7: command tx timeout
[  214.093788] Bluetooth: hci6: command tx timeout
[  214.221787] Bluetooth: hci5: command tx timeout
[  215.309609] Bluetooth: hci0: command tx timeout
[  215.374680] Bluetooth: hci1: command tx timeout
[  215.630280] Bluetooth: hci2: command tx timeout
[  215.693665] Bluetooth: hci3: command tx timeout
[  215.949609] Bluetooth: hci4: command tx timeout
[  216.077640] Bluetooth: hci7: command tx timeout
[  216.140617] Bluetooth: hci6: command tx timeout
[  216.268610] Bluetooth: hci5: command tx timeout
[  217.356690] Bluetooth: hci0: command tx timeout
[  217.420775] Bluetooth: hci1: command tx timeout
[  217.677610] Bluetooth: hci2: command tx timeout
[  217.742682] Bluetooth: hci3: command tx timeout
[  217.996701] Bluetooth: hci4: command tx timeout
[  218.125656] Bluetooth: hci7: command tx timeout
[  218.188683] Bluetooth: hci6: command tx timeout
[  218.318590] Bluetooth: hci5: command tx timeout
[  271.712257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  271.715129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  271.718079] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  271.719706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  271.721492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  271.724958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  271.728148] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  271.731008] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  271.731572] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  271.757784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  271.760969] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  271.763092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  271.885639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  271.891762] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  271.893391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  271.904791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  271.908036] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  271.910426] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  272.042054] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  272.046006] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  272.057744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  272.072113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  272.076206] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  272.081751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  272.084769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  272.090150] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  272.095788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  272.103114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  272.117072] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  272.138773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  272.140000] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  272.165671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  272.167284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  272.170242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  272.173261] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  272.174738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  272.176144] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  272.184878] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  272.187663] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  272.228918] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  272.231906] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  272.232924] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  272.284417] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  272.300925] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  272.360646] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  272.389132] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  272.391683] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  272.397981] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  273.805799] Bluetooth: hci1: command tx timeout
[  273.805822] Bluetooth: hci0: command tx timeout
[  273.932647] Bluetooth: hci2: command tx timeout
[  274.188671] Bluetooth: hci3: command tx timeout
[  274.253054] Bluetooth: hci5: command tx timeout
[  274.253127] Bluetooth: hci4: command tx timeout
[  274.380750] Bluetooth: hci6: command tx timeout
[  274.510663] Bluetooth: hci7: command tx timeout
[  275.852587] Bluetooth: hci0: command tx timeout
[  275.855573] Bluetooth: hci1: command tx timeout
[  275.981796] Bluetooth: hci2: command tx timeout
[  276.237660] Bluetooth: hci3: command tx timeout
[  276.300693] Bluetooth: hci4: command tx timeout
[  276.301612] Bluetooth: hci5: command tx timeout
[  276.428599] Bluetooth: hci6: command tx timeout
[  276.556700] Bluetooth: hci7: command tx timeout
[  277.900649] Bluetooth: hci1: command tx timeout
[  277.900876] Bluetooth: hci0: command tx timeout
[  278.030571] Bluetooth: hci2: command tx timeout
[  278.284701] Bluetooth: hci3: command tx timeout
[  278.348704] Bluetooth: hci5: command tx timeout
[  278.348754] Bluetooth: hci4: command tx timeout
[  278.476612] Bluetooth: hci6: command tx timeout
[  278.604684] Bluetooth: hci7: command tx timeout
[  279.948662] Bluetooth: hci0: command tx timeout
[  279.948688] Bluetooth: hci1: command tx timeout
[  280.079555] Bluetooth: hci2: command tx timeout
[  280.333583] Bluetooth: hci3: command tx timeout
[  280.397685] Bluetooth: hci4: command tx timeout
[  280.397779] Bluetooth: hci5: command tx timeout
[  280.526722] Bluetooth: hci6: command tx timeout
[  280.652910] Bluetooth: hci7: command tx timeout
[  333.857001] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  333.864034] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  333.868813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  333.876999] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  333.881861] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  333.887179] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  334.005144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  334.009432] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  334.013029] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  334.023735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  334.027328] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  334.031049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  334.058039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  334.067930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  334.072915] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  334.076921] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  334.081192] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  334.085564] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  334.087694] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  334.091134] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  334.095447] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  334.127873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  334.133407] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  334.139143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  334.142263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  334.148898] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  334.163187] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  334.190914] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  334.203012] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  334.206116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  334.209978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  334.224626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  334.230036] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  334.238185] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  334.243032] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  334.271954] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  334.272769] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  334.294829] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  334.304969] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  334.314296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  334.317460] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  334.319754] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  334.340440] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  334.351721] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  334.354217] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  334.490330] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  334.516907] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  334.550966] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  335.948684] Bluetooth: hci0: command tx timeout
[  336.076630] Bluetooth: hci1: command tx timeout
[  336.141627] Bluetooth: hci3: command tx timeout
[  336.204701] Bluetooth: hci2: command tx timeout
[  336.268617] Bluetooth: hci4: command tx timeout
[  336.460666] Bluetooth: hci5: command tx timeout
[  336.460867] Bluetooth: hci6: command tx timeout
[  336.719548] Bluetooth: hci7: command tx timeout
[  337.998549] Bluetooth: hci0: command tx timeout
[  338.124657] Bluetooth: hci1: command tx timeout
[  338.188680] Bluetooth: hci3: command tx timeout
[  338.252618] Bluetooth: hci2: command tx timeout
[  338.316575] Bluetooth: hci4: command tx timeout
[  338.508574] Bluetooth: hci5: command tx timeout
[  338.509619] Bluetooth: hci6: command tx timeout
[  338.764577] Bluetooth: hci7: command tx timeout
[  340.044718] Bluetooth: hci0: command tx timeout
[  340.173581] Bluetooth: hci1: command tx timeout
[  340.237594] Bluetooth: hci3: command tx timeout
[  340.301584] Bluetooth: hci2: command tx timeout
[  340.365599] Bluetooth: hci4: command tx timeout
[  340.556611] Bluetooth: hci6: command tx timeout
[  340.556630] Bluetooth: hci5: command tx timeout
[  340.813635] Bluetooth: hci7: command tx timeout
[  342.093651] Bluetooth: hci0: command tx timeout
[  342.223924] Bluetooth: hci1: command tx timeout
[  342.285861] Bluetooth: hci3: command tx timeout
[  342.348633] Bluetooth: hci2: command tx timeout
[  342.413573] Bluetooth: hci4: command tx timeout
[  342.604636] Bluetooth: hci5: command tx timeout
[  342.605767] Bluetooth: hci6: command tx timeout
[  342.860611] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
05:23:56  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff818e8106 RDX=ffff888015883780
RSI=0000000000000008 RDI=0000000000000001 RBP=ffffea0001ae8900 RSP=ffff888025ae7838
R8 =0000000000000000 R9 =fffff9400035d120 R10=0000000000000001 R11=0000000000000001
R12=000000006ba24025 R13=00007fd73bd57000 R14=ffff888025ae7ce8 R15=0000000000000000
RIP=ffffffff818e813a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd73c13e6f4 CR3=0000000028cf8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fd73c14d47000007fd73c14cf20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=0000000000000000 RCX=1ffff1100722ded9 RDX=1ffff11006c9d4c1
RSI=0000000000000001 RDI=ffffffff85d067a0 RBP=ffffffff85d067a0 RSP=ffff88803916f868
R8 =0000000000000000 R9 =fffffbfff0fe15e4 R10=ffffffff87f0af27 R11=0000000000000001
R12=0000000000000286 R13=0000000000000040 R14=0000000000000001 R15=ffffffff81dc3fd6
RIP=ffffffff81508ef0 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f516c534540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe4e00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055cc3ff114c8 CR3=0000000037bdc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000