Warning: Permanently added '[localhost]:7645' (ECDSA) to the list of known hosts.
2025/01/26 19:56:33 fuzzer started
2025/01/26 19:56:34 dialing manager at localhost:40883
syzkaller login: [   70.706053] cgroup: Unknown subsys name 'net'
[   70.801696] cgroup: Unknown subsys name 'cpuset'
[   70.816038] cgroup: Unknown subsys name 'rlimit'
[   75.966094] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/26 19:56:50 syscalls: 2217
2025/01/26 19:56:50 code coverage: enabled
2025/01/26 19:56:50 comparison tracing: enabled
2025/01/26 19:56:50 extra coverage: enabled
2025/01/26 19:56:50 setuid sandbox: enabled
2025/01/26 19:56:50 namespace sandbox: enabled
2025/01/26 19:56:50 Android sandbox: enabled
2025/01/26 19:56:50 fault injection: enabled
2025/01/26 19:56:50 leak checking: enabled
2025/01/26 19:56:50 net packet injection: enabled
2025/01/26 19:56:50 net device setup: enabled
2025/01/26 19:56:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/26 19:56:50 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/26 19:56:50 USB emulation: enabled
2025/01/26 19:56:50 hci packet injection: enabled
2025/01/26 19:56:50 wifi device emulation: enabled
2025/01/26 19:56:50 802.15.4 emulation: enabled
2025/01/26 19:56:50 fetching corpus: 50, signal 9595/10959 (executing program)
2025/01/26 19:56:50 fetching corpus: 100, signal 10756/13313 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/14700 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/15957 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/17213 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/18439 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/19669 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/20908 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/22176 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/23439 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/24712 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/25973 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/27234 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/28458 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/29208 (executing program)
2025/01/26 19:56:50 fetching corpus: 112, signal 10897/29208 (executing program)
2025/01/26 19:56:53 starting 8 fuzzer processes
19:56:53 executing program 0:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, 0x2, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_MASK={0xb0, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xbca}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000200)={0x1198, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xa0, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x8b, 0x2, "2ea0dcb7ce5aefb03e13d40e296ad57a150ff09c8082d66c8ed90b95e85063f2ce52b2dd1d5a81e61949e5db892d014af1df4bb4ea5c915625bc30dc9f7101ed9d7338d14040b0bed5a7718b9ec43e94b49ddd16a58cdc2183e2f06fea02963ba4eda62781a2cd93cdc77bff262bc6fd11f7873f451f0ffa37b8166432ce2734803addb1d867a4"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb0, 0x3, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xa7, 0x1, "26362b39b6fa7df143cb49fffe9e112270e768a1f27f41b3dc17e26ab7cd821341d25200040101918d0faefe5c826e7462258c53e6339c0c737b6e64e4666ba355bb1ed7b9fb9883daa1037929462c0d4658cb954074a0d48590af4697aa4dd164e613f5939616cf98552bb25b58c6742c7bd5717cb5ea7bcbd22163ece24390f587480390424522e4b911fdf1e6b794fd859c52699b7590da8c7c887c993fd3f97883"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1018, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x1198}, 0x1, 0x0, 0x0, 0x45}, 0x8850)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001440)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x5, 0x2}}, './file0\x00'})
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000810}, 0x4040040)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040050)
r2 = signalfd(r0, &(0x7f00000016c0)={[0xffff]}, 0x8)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0)
sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x20, r3, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x40000)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001840), 0x2e0a00, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4815}, 0x80)
preadv2(r2, &(0x7f0000002e40)=[{&(0x7f0000001980)=""/76, 0x4c}, {&(0x7f0000001a00)=""/207, 0xcf}, {&(0x7f0000001b00)=""/233, 0xe9}, {&(0x7f0000001c00)=""/236, 0xec}, {&(0x7f0000001d00)=""/125, 0x7d}, {&(0x7f0000001d80)=""/14, 0xe}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/118, 0x76}], 0x8, 0x20, 0x81, 0x8)
ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002ec0), 0x2802, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000003180)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003140)={&(0x7f0000002f40)={0x1dc, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xec, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe38}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe1d5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7227}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x85}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x191}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x39b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb83}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf5ecd91}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x802}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4841}, 0x8000)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48d6}, 0x20000080)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000040)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000003400), r0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000003a80)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003540)={0x4f4, r7, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x117}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x4, 0x88, 0xf7, 0x1}, {0x6, 0x7, 0x5, 0x7}, {0x20, 0x80, 0x7f, 0x3}, {0x1, 0x3, 0x2, 0x4}, {0x4, 0x6, 0x54, 0x2}, {0xf7b2, 0xff, 0x7f, 0x20}, {0x4, 0xf8, 0x58, 0xa2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8}, {0x3, 0x7, 0x6, 0x2e0}, {0x4, 0x2, 0x6, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x60c4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000800)

19:56:53 executing program 2:
keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_update={'update ', 'default', 0x20, 'user:', '$^'}, 0x17, 0xfffffffffffffffa)
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x62, 0x36, 0x30, 0x30, 0x65, 0x39, 0x39, 0x36, 0x61, 0x38, 0x62, 0x38, 0x33, 0x66, 0x62, 0x61]}, &(0x7f00000000c0)={0x0, "fe115ef15ea927891f9cf4d5608d24fbecbea90a9d56063cd4bbb04a5e4a47b8631baf779c096c7d226376cd4c4968b08450e32f51d67a7316e147d39bcca10d", 0x23}, 0x48, 0xfffffffffffffff8)
r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$negate(0xd, r0, 0x7, r1)
keyctl$read(0xb, r1, &(0x7f00000001c0)=""/30, 0x1e)
r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="4f4f35571c5f714a12ec06a32ed5f43fadf47d4e7bb12572c6c98f36e4fc5b7db0b2157ed2de8036c4177ff761259e53c6749f9ab679f52edd6661c3ead8cd8bcbeea513a52db6a3ebffb7f91acb19bd0a7e747a982d7226dbe356b7035d6651d4fd9c9f7cb866857d6a707ff592e3383f9915ed9d37334c18bec076033f20f2af70819ceaf3843941f2e11b5c73bec604ad84b1f1bd068ac0a66647e2674886d2f686c9cf6bfa3145cbf773f008e22d95a8a47fb73a0b21f870f34087f1fdc8c09a08e2386727e63aa6741041b09ecec7705e6c170f4124e7ef3e55db8a2a8aa38563cbda70b3303f8d098576", 0xed, 0xfffffffffffffffa)
keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000380)='\x00', &(0x7f00000003c0))
r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "4eade594ad6f0b5b06a6ca8c1e065a4554a5f706c79bdf04fa70e53b22e65e26550e5d240afcdb03722276cb69c4230f844e84aa10c76fbc00f8a7a30459c5d3", 0x11}, 0x48, r0)
r4 = request_key(&(0x7f0000000500)='blacklist\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)='\x00', r3)
keyctl$unlink(0x9, r0, r4)
r5 = add_key(&(0x7f00000005c0)='asymmetric\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)="a4b40d1464faea7d31bb7860ef35abea47c85b9c3dee7f3073715a10e4d3518a58cc1fc67e41deab23fb91e94ca6781bf9f0fa324062483e9d38943a0ff4a381c4e90aa24e21094ee4cbb7830a6148610959863ac36a1f3bcad229d24bfca94182e3e83df9c36c40ade81033e433cfe2e91973a28cf2aad99b897c022e8b54fa0da705", 0x83, r4)
r6 = add_key$user(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000780)="1ca5aaacbd779bda79b223b2e0f6d8bce0568af9def480cd5c36eccaa1933ced6b54bf17d64432ac6af926caa7728e2b5844a4f5e2a075e26ac68bb037ebf50486dae2c5b1df2173bb934d5b7c1322c8490dc5ee33ad4bb9b8b6fd2a3f8ca1cac0c70f3620421e2ef0aeac638d8cae8b603d74805f761c0337ba69cc8d0bc61f88d1f73017fba5aea119242ebd6028c64dbc3e5f00248a00082e43cbd6bf980df8692d7a0663e5d3eb42d4d451ea43bfae8f723630da8cac090641547b2244b3ed862465cd70a8997bae211847b0c6aa402e7a43ab6f35f02d7bc3d6c95956372a06b29694e4d5f0d56daabfdae9", 0xee, r5)
r7 = add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$reject(0x13, r6, 0x2, 0x11fc, r7)
r8 = add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc1}, &(0x7f0000000980)={0x0, "26f138885aae1efa584a0c900f801ddb09f76ec617f5f8457ba11fa2609a39b3d42ce99a8542d2cec77a3973193e5561b26ca37fffbbfb50f40f367020a027fa", 0x26}, 0x48, 0xffffffffffffffff)
keyctl$read(0xb, r8, &(0x7f0000000a00)=""/188, 0xbc)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0)
keyctl$unlink(0x9, r1, r3)
r9 = add_key$fscrypt_provisioning(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)={0x1, 0x0, @a}, 0x48, r7)
keyctl$unlink(0x9, r9, r0)

19:56:53 executing program 1:
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x3, {{0xa, 0x4e20, 0x5, @remote, 0x100}}}, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', <r0=>0x0, 0x4, 0x1, 0x3f, 0x9, 0x60, @private0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x700, 0x7800, 0xfffffff9, 0x20}})
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="420ae700063b60396e04dbb12acf4ac226f579b911531865b9ba6743e74acc45959938258ae01de5dc89d4fafc72179c9c690bfad8fb3cfab6df1ed1759bb2c95c226c5b0b95cde1d3acbb855b74a0c5f434574dcab0ee40fe0d09dd0dd8e36a", 0x60}, {&(0x7f0000000180)="522166167228cbe4dec26b9a6f283d343cefe1283ca7e892c6f7f380275b0bb04da47004bc81e80a00cf9ef297042ac53b4043796fb9224e8a9279f56fbb5703d80559481bc4a80822c5da2d4ecfcd580151299e5a7af78ba7dc1b2ae863981ec0cc5031facb281178dc61c81433785b84c523774d20dba60431241475f1999c", 0x80}, {&(0x7f0000000200)="e809a531c4a0569d7d588289a9050a39553773096ab8b3377256206b008ce053c148bb53fe8c73afd11f99997358d333dfc44b16b9ab958b0e100cda94604359cf6f93315cd3933d131296ec2c3019b077e1701e46f381f50c83fc8129a95eaebc51ed541ec1eb568d430b9ce85725db552b0a16947b9fead5e58d480778c4d723d0ec66432aec740a9f9b7d60961e55585687367944a72d32b79cf117d315a3b3", 0xa1}, {&(0x7f00000002c0)="eabc343bf79db39410eb7e88a9ba8de44007a13b3a6c3c7feef2ebb7dbd893bcd7fb", 0x22}], 0x4, &(0x7f0000000400)=[@dstopts={{0x50, 0x29, 0x37, {0x3c, 0x6, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0xb8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xc7a}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r0}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0xa8}, 0x44004804)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000005c0)={@mcast1, 0x19d, 0x1, 0x0, 0x4, 0xfffc, 0x4}, 0x20)
recvmmsg(r1, &(0x7f00000047c0)=[{{&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/124, 0x7c}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000000740)=""/205, 0xcd}, {&(0x7f0000000840)=""/217, 0xd9}, {&(0x7f0000000940)=""/229, 0xe5}, {&(0x7f0000000a40)=""/228, 0xe4}], 0x6, &(0x7f0000000bc0)=""/161, 0xa1}, 0x9}, {{&(0x7f0000000c80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000d00)=""/52, 0x34}, {&(0x7f0000000d40)=""/209, 0xd1}, {&(0x7f0000000e40)=""/35, 0x23}, {&(0x7f0000000e80)=""/114, 0x72}, {&(0x7f0000000f00)=""/85, 0x55}, {&(0x7f0000000f80)=""/63, 0x3f}, {&(0x7f0000000fc0)=""/221, 0xdd}, {&(0x7f00000010c0)=""/245, 0xf5}, {&(0x7f00000011c0)=""/238, 0xee}], 0x9, &(0x7f0000001380)=""/4096, 0x1000}, 0x401}, {{&(0x7f0000002380)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000004740)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/164, 0xa4}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/98, 0x62}, {&(0x7f0000003640)=""/194, 0xc2}, {&(0x7f0000003740)=""/4096, 0x1000}], 0x6}, 0x400}], 0x3, 0x40012121, 0x0)
getsockname(r2, &(0x7f0000004880)=@ax25={{0x3, @netrom}, [@default, @netrom, @null, @remote, @null, @netrom, @rose, @bcast]}, &(0x7f0000004900)=0x80)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309)
r3 = accept4$bt_l2cap(r2, &(0x7f0000004940)={0x1f, 0x0, @fixed}, &(0x7f0000004980)=0xe, 0x800)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f00000049c0))
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000004a00)=0x3)
connect$bt_l2cap(r2, &(0x7f0000004a40)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x100}, 0xe)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000004a80)={'TPROXY\x00'}, &(0x7f0000004ac0)=0x1e)
fstat(r2, &(0x7f0000004b00))
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004b80), 0x80, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000004c00)={0x1, 0x7fff, 0x27, &(0x7f0000004bc0)=""/39})
r5 = dup3(r4, r4, 0x80000)
r6 = open$dir(&(0x7f0000004c40)='./file0\x00', 0x10180, 0x3)
r7 = fsopen(&(0x7f0000004c80)='qnx4\x00', 0x1)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000004d00)={0xfff, 0x0, &(0x7f0000004cc0)=[r6, r7]}, 0x2)

[   89.278842] audit: type=1400 audit(1737921413.080:7): avc:  denied  { execmem } for  pid=269 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
19:56:53 executing program 3:
ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, &(0x7f0000000000)="26b6259fb4dd48e6123a28273a7a755c99d1f2e021894a4270ef052544c70e8873a3dd241bdc06113313f26e1df9922a0e736afbac1126167bbdfe7aa5f2f62cdf99506d46e1efce4f0c546c2e91c1b8d76e1e98cb1804a24fa0acb7bd612b1a992102e9bd07cc1de8a73e2db55c162cfbfd5a55ede374884763c5aa8c09d721bb3559b0dde99b5fe1d9db1c5c314a5622bd2c68408b5a73c812656adb6474050d45b183f1c1b7efcf0d9de74708c70d3d8f09722c14bcb2a882652ac631630b86bab8d029fcac015cdc3c9a96917b004acb791114c242cfec88f3170cdcb48f127116c75f1a2d559db6f95120174f5eab23171ae5b4daf2")
bind(0xffffffffffffffff, &(0x7f0000000100)=@nfc_llcp={0x27, 0x1, 0x0, 0x3, 0x2, 0x40, "55712bc27668c3aca8c850572ee2575845243bff1715337f4d0d1b14c2dd6c2dd5d07e2bc71cdef2318d426f57e004221f388d5da6611f80a0b324b3a1b030", 0x16}, 0x80)
r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x7, 0x4c8100)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9a6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x24000041)
r1 = openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x2800, 0x128, 0xd}, 0x18)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000380))
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x26000, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000400)="2fd35d1f102632203b527bed074b6d79", 0x10)
r3 = openat(r2, &(0x7f0000000440)='./file1\x00', 0x44000, 0x40)
pipe(&(0x7f0000000480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000004c0))
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000500)={0x858, 0x4a, 0x9, 0x0, 0x0, [{{}, 0x8}, {{r2}}, {{r2}, 0x8}, {{r3}, 0x40}, {{r4}, 0x2}, {{r2}, 0x1}, {{}, 0x5}, {{r0}, 0x6}, {{r6}, 0xd101}]})
sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000851}, 0x4000)
openat$incfs(r5, &(0x7f0000000740)='.pending_reads\x00', 0x400000, 0x111)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000780)={[0x78ed]}, 0x8, 0x80000)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f00000007c0)=0x5, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff}, './file1\x00'})
write$P9_RREADLINK(r8, &(0x7f0000000840)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000880))
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000940)='./file2\x00', 0x8, 0x1)

19:56:53 executing program 4:
membarrier(0x8, 0x0)
membarrier(0x8, 0x0)
membarrier(0x1, 0x0)
membarrier(0x10, 0x0)
membarrier(0x40, 0x0)
membarrier(0x10, 0x0)
membarrier(0x1, 0x0)
membarrier(0x1, 0x0)
membarrier(0x2, 0x0)
membarrier(0x40, 0x0)
membarrier(0x0, 0x0)
membarrier(0x10, 0x0)
membarrier(0x1, 0x0)
membarrier(0x1, 0x0)
membarrier(0x40, 0x0)
membarrier(0x2, 0x0)
membarrier(0x10, 0x0)
membarrier(0x10, 0x0)
membarrier(0x31, 0x0)
membarrier(0x2, 0x0)

19:56:53 executing program 5:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'gretap0\x00', {0xfffffffe}, 0x9})
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x10010, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x2}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0, @in_args={0x1}}, './file0\x00'})
sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, 0xd, 0x9, 0x301, 0x70bd28, 0x25dfdbfc, {0x1, 0x0, 0x7}, [@generic="b9e3ef3edcee86e314227962cc5f30ce5bcfcd914e21fc39d7fd4900600864f823c7f34c6216ba3f9c65beee4f25fcaf7f71486f878ce2987356c511f7adaa8aab510ffe1132179ad982c39efb215f5862db9cc118aebb024335e81fce4154b5d0aa00778945069ac92fd42f9918105e495d92013b6e59281fa85de714110d7112ca0be3545d60ef3f7e9066c3fb259f4a4a8302add98a3be79e449baf211079ceb6efe0a374b838162abd"]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
pselect6(0x40, &(0x7f0000000280)={0x7, 0xffffffff, 0x2, 0x7, 0x6363, 0x10001, 0x2, 0x8}, &(0x7f00000002c0)={0xb4, 0xe0000, 0x4a8b, 0x1, 0x5, 0x1, 0x7fffffff, 0x2}, &(0x7f0000000300)={0xc9, 0xffffffffffffffff, 0x4, 0x1000, 0x1f8f, 0x5, 0x3, 0x3}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x2]}, 0x8})
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$FICLONE(r4, 0x40049409, r3)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r5=>r0, {<r6=>0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
recvmmsg(r5, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000000480)=""/243, 0xf3}], 0x2, &(0x7f00000005c0)=""/169, 0xa9}, 0x5}, {{&(0x7f0000000680)=@caif=@rfm, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/89, 0x59}, {&(0x7f0000000780)=""/205, 0xcd}, {&(0x7f0000000880)=""/114, 0x72}], 0x3, &(0x7f0000000940)=""/216, 0xd8}, 0x5}, {{&(0x7f0000000a40)=@rc={0x1f, @none}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000ac0)=""/108, 0x6c}, {&(0x7f0000000b40)=""/187, 0xbb}, {&(0x7f0000000c00)=""/227, 0xe3}, {&(0x7f0000000d00)=""/133, 0x85}, {&(0x7f0000000dc0)=""/66, 0x42}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x6, &(0x7f0000001ec0)=""/234, 0xea}, 0xfffffffa}], 0x3, 0x40012120, &(0x7f0000002080)={0x77359400})
io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f00000020c0)=r5, 0x1)
r7 = socket$packet(0x11, 0x2, 0x300)
syz_io_uring_submit(r1, 0x0, &(0x7f00000021c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r7, 0x0, &(0x7f0000002100)="2b565c0c46b854946b73fc960cd05ada06c8b8dd227f248603435f1653e45926c10792d2c4cac4bd8365a27d35570d7e59bc2ab227ec6492adff1dcc186e6249afc17a6fb0fc8744e6fe74341bb4c8ac120db2bb506c389c99f3be1cc4ee768be7f115a5a2cbd65f88986f669080b5f7c50a9dc47d2868f69a3a1c41e2ef6290d5eb4fddf00adef1045f70150149b41dbb826c6a7701bcd7ac155fb513c953c265fcb642a759", 0xa6, 0xc000, 0x1}, 0x80000001)
io_uring_setup(0x7465, &(0x7f0000002200)={0x0, 0x2877, 0x8, 0x3, 0x9e})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000002280)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f00000022c0))
recvmmsg$unix(r2, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000002380)}, {&(0x7f00000023c0)=""/253, 0xfd}, {&(0x7f00000024c0)=""/7, 0x7}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/24, 0x18}, {&(0x7f0000003540)=""/185, 0xb9}], 0x6}}, {{&(0x7f0000003680), 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003700)=""/82, 0x52}, {&(0x7f0000003780)=""/71, 0x47}, {&(0x7f0000003800)=""/195, 0xc3}, {&(0x7f0000003900)=""/194, 0xc2}], 0x4, &(0x7f0000003a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r8=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000003b00)=@abs, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000003b80)=""/4096, 0x1000}], 0x1, &(0x7f0000004bc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004c00), 0x6e, &(0x7f0000005e80)=[{&(0x7f0000004c80)=""/134, 0x86}, {&(0x7f0000004d40)=""/94, 0x5e}, {&(0x7f0000004dc0)=""/61, 0x3d}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000005e00)=""/25, 0x19}, {&(0x7f0000005e40)=""/56, 0x38}], 0x6, &(0x7f0000005f00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000005f80)=@abs, 0x6e, &(0x7f0000006240)=[{&(0x7f0000006000)=""/218, 0xda}, {&(0x7f0000006100)=""/48, 0x30}, {&(0x7f0000006140)=""/211, 0xd3}], 0x3, &(0x7f0000006280)}}, {{&(0x7f00000062c0), 0x6e, &(0x7f00000068c0)=[{&(0x7f0000006340)=""/102, 0x66}, {&(0x7f00000063c0)=""/42, 0x2a}, {&(0x7f0000006400)=""/153, 0x99}, {&(0x7f00000064c0)=""/75, 0x4b}, {&(0x7f0000006540)=""/109, 0x6d}, {&(0x7f00000065c0)=""/74, 0x4a}, {&(0x7f0000006640)=""/97, 0x61}, {&(0x7f00000066c0)=""/122, 0x7a}, {&(0x7f0000006740)=""/66, 0x42}, {&(0x7f00000067c0)=""/204, 0xcc}], 0xa, &(0x7f0000006980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000069c0)=@abs, 0x6e, &(0x7f0000007c80)=[{&(0x7f0000006a40)=""/217, 0xd9}, {&(0x7f0000006b40)}, {&(0x7f0000006b80)=""/234, 0xea}, {&(0x7f0000006c80)=""/4096, 0x1000}], 0x4}}], 0x7, 0x142, 0x0)
fchownat(r5, &(0x7f0000002340)='./file0\x00', r6, r8, 0x400)

19:56:53 executing program 7:
semctl$GETZCNT(0xffffffffffffffff, 0x2, 0xf, &(0x7f0000000000)=""/8)
semctl$SEM_INFO(0xffffffffffffffff, 0x2, 0x13, &(0x7f0000000040)=""/3)
r0 = semget$private(0x0, 0x1, 0x489)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/179)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x0, 0x20, 0x0, 0x1])
r1 = semget$private(0x0, 0x3, 0x207)
semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000180)=""/67)
r2 = semget$private(0x0, 0x4, 0x44)
semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000000200)=""/125)
semctl$SEM_STAT(r2, 0x3, 0x12, &(0x7f0000000280)=""/252)
semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f0000000380)=""/196)
r3 = semget(0x0, 0x4, 0x410)
semtimedop(r3, &(0x7f0000000480)=[{0x3, 0x2, 0x1800}], 0x1, &(0x7f00000004c0)={0x0, 0x3938700})
semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/144)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000005c0)=[0x4, 0x6, 0xf801, 0x1, 0x4, 0x100])
r4 = semget$private(0x0, 0x3, 0x41)
semctl$GETVAL(r4, 0x3, 0xc, &(0x7f0000000600)=""/96)
semctl$GETNCNT(r0, 0x0, 0xe, &(0x7f0000000680))
semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000006c0)=""/138)
semop(0x0, &(0x7f0000000780)=[{0x4, 0x51e3, 0x1000}, {0x3, 0x400, 0x1000}, {0x4, 0x40, 0x1000}, {0x0, 0x6, 0x1800}, {0x0, 0xff, 0x1000}, {0x2, 0x8, 0x1800}], 0x6)

19:56:53 executing program 6:
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in=@initdev}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x4, 0x3, 0x0, 0x1, 0x8, [{0xfff, 0x9, 0x10001, '\x00', 0x880}, {0x10001, 0x9f, 0x1000, '\x00', 0x4}, {0x5, 0x1, 0x400, '\x00', 0x80}, {0x10000000000000, 0x5, 0x6, '\x00', 0x2805}, {0x6, 0x7fffffff, 0x2, '\x00', 0x3000}, {0x5, 0x6, 0x3, '\x00', 0x4}, {0xffff, 0x2, 0xff, '\x00', 0x1000}, {0x5, 0x2, 0xffffffff, '\x00', 0x8}]})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x401}}, './file0\x00'})
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000400)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58)
r2 = fsmount(r1, 0x0, 0x2)
r3 = syz_open_dev$vcsa(&(0x7f0000000480), 0x3036, 0x400000)
sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f00000004c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000500)="75e81b430f80b5562fdf3a4dbcf6a3c8f03003d1898a24dfbdba89f54aa382c04ba07d2556a708adb41f7edc2a2aa295935cdcb80e1d2fffdb507f67f684dfcd4dd7", 0x42}, {&(0x7f0000000580)="f22e332ac42ada3acdb03ee458d5247fa52150e37474653670db639f7018b027caa9930c7af34c5bc2951f62a6cfa4a45a52ea4a4d137055f48633de4e05a55f5351f7bb57f65097f60159e38f02051adc44c9c25a240801d8067a", 0x5b}, {&(0x7f0000000600)="f44fda89e03cea9c2361af067fc8dd0f53d8306cf2a207807c8bf3823d849e3f51c3888a11b96188ec5530fa601afca37adfaf388a", 0x35}, {&(0x7f0000000640)="b88e98b1d2", 0x5}, {&(0x7f0000000680)="18a0e714d74c3db0da7474381ab84a51356cdb07542df8c6e56d20790a3eb67d630af76895c093b30eca522b38a7547dc1e6340addb3ea49106f284900c960f4cf9a0ae3244985982655b88b70bba2548b2240901cb772b4c8620d7d76a363e4bf3af4d77a37e17b9f726c21d8a08b0ef12ab96a8189c0df109c62da8522864bfbededeed9b18189b162761724deaa205662b56a925074ce7bb5f65aa6f27bccceed116d2edf359e6d04897eb95b31a86bfe82411238cd", 0xb7}, {&(0x7f0000000740)="f223c551bb641560661cccec3c12e87c040efeaadc74fd11206af17ffbd856146b", 0x21}, {&(0x7f0000000780)="a55dbb40233cb45259ee", 0xa}], 0x7}, 0x4000000)
r4 = openat2(r3, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x400, 0x28, 0x8}, 0x18)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000900)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
setxattr$incfs_metadata(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980), &(0x7f00000009c0), 0x0, 0x3)
chmod(&(0x7f0000000a00)='./file0\x00', 0x10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r6, 0x29, 0x1c, &(0x7f0000000a40)=""/146, &(0x7f0000000b00)=0x92)
getsockname$inet6(0xffffffffffffffff, &(0x7f0000000b40)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000b80)=0x1c)
r7 = memfd_secret(0x0)
write(r7, &(0x7f0000000bc0)="97c0bbce1e71e00f9960c40e9b063f2bcbb52657d48511ccac933a76d454e53663c55bd076fe6a631eb2cf51f8a6588bed02cf34daeb1d11497f5f9d95f1e457cc904cf7045e2cb66cd763a8f9a1d131081e26e0e4ba81b7ff4161a148595868ad6fc38d9cc7bbb3776c73473419a98a956fda4a0216930e860166ca44588762a15514d6b30ceef5343a8a6fa19e439f75d1943ca9f23ed4afa9c58d7c4bfccb0c5694a0a5ddd7c6e2d2e73bc274", 0xae)
r8 = syz_io_uring_complete(0x0)
sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000001}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x44)

[   90.542458] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   90.544393] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   90.545961] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   90.550309] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   90.552753] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   90.554200] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   90.606942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.611289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.612788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.616987] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.620067] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   90.622952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.811743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.818717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.836941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.842990] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   90.849131] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   90.852504] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.864466] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.871970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.877306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.889020] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.901096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   90.904740] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   90.906690] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.908485] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.916624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   90.919873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.920728] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   90.921540] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   90.925412] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   90.929347] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   90.949215] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   90.951233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   90.963048] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   90.964720] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   90.965823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   90.969809] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   90.970950] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   90.972057] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   90.973913] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.983162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.984833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   90.996309] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   91.000670] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   91.037515] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   91.058079] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   91.066801] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   92.637149] Bluetooth: hci0: command tx timeout
[   92.700761] Bluetooth: hci1: command tx timeout
[   93.020744] Bluetooth: hci3: command tx timeout
[   93.022077] Bluetooth: hci2: command tx timeout
[   93.083934] Bluetooth: hci6: command tx timeout
[   93.085521] Bluetooth: hci5: command tx timeout
[   93.087071] Bluetooth: hci4: command tx timeout
[   93.147805] Bluetooth: hci7: command tx timeout
[   94.684686] Bluetooth: hci0: command tx timeout
[   94.748619] Bluetooth: hci1: command tx timeout
[   95.068818] Bluetooth: hci3: command tx timeout
[   95.069332] Bluetooth: hci2: command tx timeout
[   95.132776] Bluetooth: hci6: command tx timeout
[   95.133292] Bluetooth: hci4: command tx timeout
[   95.133916] Bluetooth: hci5: command tx timeout
[   95.196850] Bluetooth: hci7: command tx timeout
[   96.733627] Bluetooth: hci0: command tx timeout
[   96.796632] Bluetooth: hci1: command tx timeout
[   97.116838] Bluetooth: hci2: command tx timeout
[   97.117298] Bluetooth: hci3: command tx timeout
[   97.181063] Bluetooth: hci5: command tx timeout
[   97.181751] Bluetooth: hci4: command tx timeout
[   97.182308] Bluetooth: hci6: command tx timeout
[   97.244678] Bluetooth: hci7: command tx timeout
[   98.780264] Bluetooth: hci0: command tx timeout
[   98.844420] Bluetooth: hci1: command tx timeout
[   99.164655] Bluetooth: hci3: command tx timeout
[   99.165188] Bluetooth: hci2: command tx timeout
[   99.228684] Bluetooth: hci4: command tx timeout
[   99.229192] Bluetooth: hci5: command tx timeout
[   99.229945] Bluetooth: hci6: command tx timeout
[   99.292624] Bluetooth: hci7: command tx timeout
[  150.201666] syz-executor.2 (277) used greatest stack depth: 23456 bytes left
[  152.606608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  152.612231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  152.614830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  152.627861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  152.630503] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  152.633206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  152.757506] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  152.763847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  152.765959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  152.770387] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  152.774309] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  152.776290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  152.826978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  152.829245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  152.833996] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  152.837887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  152.841229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  152.843860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  152.849443] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  152.861221] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  152.864057] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  152.868618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  152.887053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  152.893243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  152.898058] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  152.902988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  152.908745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  152.910032] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  152.911661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  152.913091] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  152.937856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  152.946863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  152.948445] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  152.955835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  152.957672] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  152.962176] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  152.962645] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  152.968007] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  152.974160] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  152.982879] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  152.984106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  152.986202] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  152.990008] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  152.991376] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  153.000286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  153.006076] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  153.030693] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  153.034316] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  154.715638] Bluetooth: hci0: command tx timeout
[  154.843660] Bluetooth: hci1: command tx timeout
[  154.907831] Bluetooth: hci4: command tx timeout
[  154.972457] Bluetooth: hci2: command tx timeout
[  155.037710] Bluetooth: hci6: command tx timeout
[  155.099890] Bluetooth: hci5: command tx timeout
[  155.101408] Bluetooth: hci7: command tx timeout
[  155.163896] Bluetooth: hci3: command tx timeout
[  156.765628] Bluetooth: hci0: command tx timeout
[  156.891644] Bluetooth: hci1: command tx timeout
[  156.956043] Bluetooth: hci4: command tx timeout
[  157.019684] Bluetooth: hci2: command tx timeout
[  157.083728] Bluetooth: hci6: command tx timeout
[  157.147764] Bluetooth: hci7: command tx timeout
[  157.148751] Bluetooth: hci5: command tx timeout
[  157.211812] Bluetooth: hci3: command tx timeout
[  158.811926] Bluetooth: hci0: command tx timeout
[  158.939882] Bluetooth: hci1: command tx timeout
[  159.003666] Bluetooth: hci4: command tx timeout
[  159.068742] Bluetooth: hci2: command tx timeout
[  159.131993] Bluetooth: hci6: command tx timeout
[  159.196620] Bluetooth: hci7: command tx timeout
[  159.197168] Bluetooth: hci5: command tx timeout
[  159.259848] Bluetooth: hci3: command tx timeout
[  160.860655] Bluetooth: hci0: command tx timeout
[  160.988605] Bluetooth: hci1: command tx timeout
[  161.051847] Bluetooth: hci4: command tx timeout
[  161.116748] Bluetooth: hci2: command tx timeout
[  161.180693] Bluetooth: hci6: command tx timeout
[  161.244747] Bluetooth: hci7: command tx timeout
[  161.245229] Bluetooth: hci5: command tx timeout
[  161.308618] Bluetooth: hci3: command tx timeout
[  214.869172] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  214.873006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  214.874452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  214.879993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  214.883631] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  214.885600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  215.027404] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  215.032196] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  215.034673] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  215.059964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  215.065822] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  215.071101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  215.081058] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  215.087737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  215.092839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  215.107959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  215.116821] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  215.118828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  215.163269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  215.165837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  215.171637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  215.188766] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  215.196125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  215.199150] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  215.200212] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  215.206959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  215.209331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  215.233079] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  215.244866] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  215.247359] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  215.267340] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  215.290216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  215.320068] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  215.338826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  215.349996] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  215.355324] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  215.440151] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  215.461923] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  215.467022] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  215.469081] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  215.547279] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  215.548946] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  215.574076] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  215.577967] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  215.578690] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  215.604844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  215.631276] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  215.649682] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  216.923670] Bluetooth: hci0: command tx timeout
[  217.116720] Bluetooth: hci1: command tx timeout
[  217.180653] Bluetooth: hci2: command tx timeout
[  217.245611] Bluetooth: hci3: command tx timeout
[  217.435734] Bluetooth: hci4: command tx timeout
[  217.436949] Bluetooth: hci5: command tx timeout
[  217.755832] Bluetooth: hci7: command tx timeout
[  217.757017] Bluetooth: hci6: command tx timeout
[  218.972798] Bluetooth: hci0: command tx timeout
[  219.164648] Bluetooth: hci1: command tx timeout
[  219.229579] Bluetooth: hci2: command tx timeout
[  219.292644] Bluetooth: hci3: command tx timeout
[  219.484713] Bluetooth: hci5: command tx timeout
[  219.484854] Bluetooth: hci4: command tx timeout
[  219.803692] Bluetooth: hci6: command tx timeout
[  219.804370] Bluetooth: hci7: command tx timeout
[  221.019610] Bluetooth: hci0: command tx timeout
[  221.212602] Bluetooth: hci1: command tx timeout
[  221.275674] Bluetooth: hci2: command tx timeout
[  221.340777] Bluetooth: hci3: command tx timeout
[  221.533607] Bluetooth: hci5: command tx timeout
[  221.533630] Bluetooth: hci4: command tx timeout
[  221.851681] Bluetooth: hci7: command tx timeout
[  221.854549] Bluetooth: hci6: command tx timeout
[  223.067959] Bluetooth: hci0: command tx timeout
[  223.259718] Bluetooth: hci1: command tx timeout
[  223.325602] Bluetooth: hci2: command tx timeout
[  223.387683] Bluetooth: hci3: command tx timeout
[  223.579921] Bluetooth: hci4: command tx timeout
[  223.579956] Bluetooth: hci5: command tx timeout
[  223.899698] Bluetooth: hci6: command tx timeout
[  223.899738] Bluetooth: hci7: command tx timeout
[  277.108314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  277.110678] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  277.112287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  277.115970] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  277.120808] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  277.122282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  277.173555] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  277.179075] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  277.184911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  277.201013] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  277.214484] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  277.218020] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  277.537738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  277.544672] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  277.546351] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  277.549162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  277.550589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  277.550761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  277.554752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  277.554991] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  277.562453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  277.565033] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  277.566461] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  277.568445] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  277.611245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  277.620629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  277.631013] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  277.657911] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  277.664427] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  277.666888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  277.676811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  277.680867] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  277.682132] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  277.685291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  277.685961] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  277.687664] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  277.688957] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  277.696421] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  277.705023] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  277.717554] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  277.755803] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  277.759195] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  277.766142] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  277.786182] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  277.833806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  277.849985] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  277.865093] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  277.884084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  279.196079] Bluetooth: hci0: command tx timeout
[  279.259617] Bluetooth: hci1: command tx timeout
[  279.643805] Bluetooth: hci2: command tx timeout
[  279.644109] Bluetooth: hci3: command tx timeout
[  279.710582] Bluetooth: hci5: command tx timeout
[  279.771603] Bluetooth: hci4: command tx timeout
[  279.835761] Bluetooth: hci6: command tx timeout
[  280.029660] Bluetooth: hci7: command tx timeout
[  281.245563] Bluetooth: hci0: command tx timeout
[  281.308580] Bluetooth: hci1: command tx timeout
[  281.691631] Bluetooth: hci3: command tx timeout
[  281.691789] Bluetooth: hci2: command tx timeout
[  281.757546] Bluetooth: hci5: command tx timeout
[  281.820591] Bluetooth: hci4: command tx timeout
[  281.884540] Bluetooth: hci6: command tx timeout
[  282.075649] Bluetooth: hci7: command tx timeout
[  283.291620] Bluetooth: hci0: command tx timeout
[  283.357542] Bluetooth: hci1: command tx timeout
[  283.739691] Bluetooth: hci3: command tx timeout
[  283.740614] Bluetooth: hci2: command tx timeout
[  283.803594] Bluetooth: hci5: command tx timeout
[  283.867622] Bluetooth: hci4: command tx timeout
[  283.931570] Bluetooth: hci6: command tx timeout
[  284.123719] Bluetooth: hci7: command tx timeout
[  285.339837] Bluetooth: hci0: command tx timeout
[  285.403620] Bluetooth: hci1: command tx timeout
[  285.787695] Bluetooth: hci2: command tx timeout
[  285.787751] Bluetooth: hci3: command tx timeout
[  285.852670] Bluetooth: hci5: command tx timeout
[  285.915729] Bluetooth: hci4: command tx timeout
[  285.981591] Bluetooth: hci6: command tx timeout
[  286.171884] Bluetooth: hci7: command tx timeout
[  339.305450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  339.310415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  339.319871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  339.329637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  339.334993] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  339.341902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  339.633859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  339.637662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  339.646949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  339.654006] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  339.658196] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  339.663688] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  339.682973] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  339.685444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  339.687757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  339.699021] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  339.709154] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  339.715902] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  339.756001] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  339.770956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  339.780968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  339.788206] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  339.807176] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  339.808947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  339.816881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  339.816907] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  339.824308] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  339.832931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  339.835938] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  339.838801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  339.844834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  339.861810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  339.864419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  339.866473] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  339.869744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  339.875053] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  339.885589] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  339.889862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  339.896966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  339.949983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  339.956858] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  339.960183] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  340.034878] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  340.093971] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  340.096300] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  340.117116] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  340.122035] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  340.124614] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  341.404554] Bluetooth: hci0: command tx timeout
[  341.724586] Bluetooth: hci1: command tx timeout
[  341.787650] Bluetooth: hci2: command tx timeout
[  341.915640] Bluetooth: hci3: command tx timeout
[  341.915691] Bluetooth: hci4: command tx timeout
[  342.108668] Bluetooth: hci6: command tx timeout
[  342.108831] Bluetooth: hci5: command tx timeout
[  342.238716] Bluetooth: hci7: command tx timeout
[  343.453530] Bluetooth: hci0: command tx timeout
[  343.771735] Bluetooth: hci1: command tx timeout
[  343.835631] Bluetooth: hci2: command tx timeout
[  343.965578] Bluetooth: hci4: command tx timeout
[  343.966141] Bluetooth: hci3: command tx timeout
[  344.156610] Bluetooth: hci6: command tx timeout
[  344.157105] Bluetooth: hci5: command tx timeout
[  344.283659] Bluetooth: hci7: command tx timeout
[  345.499983] Bluetooth: hci0: command tx timeout
[  345.820533] Bluetooth: hci1: command tx timeout
[  345.883624] Bluetooth: hci2: command tx timeout
[  346.011701] Bluetooth: hci3: command tx timeout
[  346.012250] Bluetooth: hci4: command tx timeout
[  346.203692] Bluetooth: hci5: command tx timeout
[  346.204258] Bluetooth: hci6: command tx timeout
[  346.331633] Bluetooth: hci7: command tx timeout
[  347.547587] Bluetooth: hci0: command tx timeout
[  347.867599] Bluetooth: hci1: command tx timeout
[  347.931589] Bluetooth: hci2: command tx timeout
[  348.059591] Bluetooth: hci4: command tx timeout
[  348.060048] Bluetooth: hci3: command tx timeout
[  348.251588] Bluetooth: hci6: command tx timeout
[  348.252104] Bluetooth: hci5: command tx timeout
[  348.379565] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
20:02:02  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000002 RCX=ffff88803911f4c0 RDX=0000000000000002
RSI=ffffffff85c18d00 RDI=ffff888032fc2638 RBP=0000000000000001 RSP=ffff88803911f438
R8 =0000000000000001 R9 =ffff888032fc2608 R10=ffffffff864043d7 R11=0000000000000000
R12=ffff888032fc2638 R13=ffffffff85c18d00 R14=ffff88803911f4c0 R15=ffff888032fc1bc0
RIP=ffffffff814f2b3e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1665ad88e0 CR3=0000000015ece000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=00000000000003ea RCX=ffffffff814f3e3e RDX=fffffbfff0fe15f4
RSI=0000000000000008 RDI=ffffffff87f0af98 RBP=ffff8880396d0a50 RSP=ffff88802f4c7a38
R8 =0000000000000000 R9 =fffffbfff0fe15f3 R10=ffffffff87f0af9f R11=0000000000000001
R12=ffff8880396d0000 R13=1342fb54873d1ac0 R14=ffffffff86405170 R15=0000000000000001
RIP=ffffffff814f3e46 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555568b7b400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5a03130000 CR3=000000002e8a0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ff00000000000000000000ff0000
XMM02=000000000000ff000000000000000000 XMM03=0000000000000000000000ff00000000
XMM04=ff00000000000000ff00000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000