Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:59609' (ECDSA) to the list of known hosts.
2025/04/24 09:34:19 fuzzer started
2025/04/24 09:34:20 dialing manager at localhost:37747
syzkaller login: [  111.278828] cgroup: Unknown subsys name 'net'
[  111.430267] cgroup: Unknown subsys name 'cpuset'
[  111.475789] cgroup: Unknown subsys name 'rlimit'
2025/04/24 09:34:37 syscalls: 2214
2025/04/24 09:34:37 code coverage: enabled
2025/04/24 09:34:37 comparison tracing: enabled
2025/04/24 09:34:37 extra coverage: enabled
2025/04/24 09:34:37 setuid sandbox: enabled
2025/04/24 09:34:37 namespace sandbox: enabled
2025/04/24 09:34:37 Android sandbox: enabled
2025/04/24 09:34:37 fault injection: enabled
2025/04/24 09:34:37 leak checking: enabled
2025/04/24 09:34:37 net packet injection: enabled
2025/04/24 09:34:37 net device setup: enabled
2025/04/24 09:34:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/24 09:34:37 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/24 09:34:37 USB emulation: enabled
2025/04/24 09:34:37 hci packet injection: enabled
2025/04/24 09:34:37 wifi device emulation: enabled
2025/04/24 09:34:37 802.15.4 emulation: enabled
2025/04/24 09:34:37 fetching corpus: 0, signal 0/0 (executing program)
2025/04/24 09:34:39 starting 8 fuzzer processes
09:34:39 executing program 1:
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x3, '\x00', {0x331f}})
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc)
poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2502}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x3054}, {0xffffffffffffffff, 0xa0}], 0x4, 0x1)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x408040, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0x84, @empty, 0x4e20, 0x3, 'wrr\x00', 0x2, 0x2, 0x10}, 0x2c)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x8, {{0xa, 0x4e24, 0x7f, @loopback, 0x7}}}, 0x88)
r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x7, 0x2, &(0x7f0000000440)=[{&(0x7f00000002c0)="7d43606e725e3e72feb7d913e9329cede8dbd8e59c298e2625e3538d5950ab220cec62d93e67716c2e9f9722a5571ef719a2b2413082c4704d18e22621a71cbacfcfa0a54d40e78a1d1e0aadc2a10bf5a71a09fd6c25644e2719fbd05f9c66c2e505bf08ca2f22baaf947f907305a3ba9fe567a569899dd60f5ba7d611559ce3fe6479ef650c315e750330438ad3679c78f1c8f58fb1e5f4c845efc52ca24ebd992bbb5bd072bd36d7c6b36195cfb757bc03fe95e1362221a9b286d7e256fda149089e062b50cf5e3b5520d2", 0xcc, 0x8}, {&(0x7f00000003c0)="bf5c80dcfc3cc32792161fbbd889319b6ca7be8bfdd9530f9b38bbe4b0df2fa15d38ed40266c34fddab6a8709abcfbfdb388990ba1634bf8383329981da02342cff4c6157f5a8c3ea29f3c015d56db680639391c2940df2f1e6091cf910a17e069ee8cf9c9", 0x65, 0x80}], 0x20, &(0x7f0000000480)={[{@numtail}, {@uni_xlate}, {@shortname_lower}, {@fat=@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, ')'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]})
ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0x80)
r2 = syz_open_dev$mouse(&(0x7f0000000540), 0xefe, 0x40)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000580)={0x1000, 0x8001, 0xfff, 0x5, 0x20, 0x1, 0x2}, 0xc)
pivot_root(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00')
lsetxattr$security_capability(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680), &(0x7f00000006c0)=@v1={0x1000000, [{0x9, 0x247a}]}, 0xc, 0x3)
r3 = pidfd_getfd(r2, r1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11)
move_mount(r1, &(0x7f0000000880)='./file0\x00', r2, &(0x7f00000008c0)='./file0\x00', 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000900)={'caif0\x00', {0x2, 0x0, @dev}})

09:34:39 executing program 0:
ptrace$peekuser(0x3, 0xffffffffffffffff, 0x3f)
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x102, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20, 0x2, @perf_config_ext={0x5, 0x9}, 0xc104, 0x3f, 0x4, 0x8, 0x406, 0xc70a, 0x6, 0x0, 0x1ff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x8, 0xa9, 0x41, 0xff, 0x0, 0x3, 0x2, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x9e, 0x7f}, 0x10004, 0x10001, 0x1, 0x5, 0x8, 0x3, 0xfff, 0x0, 0x16c2, 0x0, 0xbc0})
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000100)=0x1c)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x6981, 0xa)
perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x2e, 0x9, 0x81, 0xf7, 0x0, 0x401, 0x1000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_config_ext={0x5, 0x2c}, 0x8100, 0x9, 0xc50, 0x2, 0x21, 0x5, 0x3f, 0x0, 0x217f, 0x0, 0x5}, r1, 0x10, r0, 0x3)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x10780, 0x0)
recvmmsg$unix(r1, &(0x7f0000002800)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000002600)=[{&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/107, 0x6b}, {&(0x7f0000001440)}, {&(0x7f0000001480)=""/132, 0x84}, {&(0x7f0000001540)=""/106, 0x6a}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)}], 0x9, &(0x7f00000026c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002700)=""/40, 0x28}, {&(0x7f0000002740)=""/27, 0x1b}], 0x2, &(0x7f00000027c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x2, 0x60, &(0x7f0000002880)={0x0, 0x989680})
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000028c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'})
r7 = fcntl$dupfd(r4, 0x0, r2)
ftruncate(r7, 0x0)
clock_gettime(0x0, &(0x7f0000002940)={<r8=>0x0, <r9=>0x0})
semtimedop(0x0, &(0x7f0000002900)=[{0x1, 0x0, 0x2000}, {0x3, 0xffff, 0x800}], 0x2, &(0x7f0000002980)={r8, r9+60000000})
syz_open_dev$char_usb(0xc, 0xb4, 0x1)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f00000029c0)=0x1)
sendmsg$OSF_MSG_ADD(r4, &(0x7f0000003d40)={&(0x7f0000002a00), 0xc, &(0x7f0000003d00)={&(0x7f0000002a40)={0x12b4, 0x0, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0xffff}, 0xe8, 0x0, 0x2, 0x442, 0x11, 'syz1\x00', "ac4c0cbb60383db5ae588d8f7d779b16a1aa1733081cccda7a471af05262ac84", "158e457c238419b336a586be6adcb05297c8987fdd63a9f52522e6dfedbb4357", [{0x5, 0x800, {0x1, 0x2}}, {0x4, 0xf1ac, {0x0, 0x7ff}}, {0x2, 0xea5, {0x3}}, {0xfff8, 0x9, {0x3, 0x2}}, {0x2, 0x0, {0x1, 0xfff}}, {0x5, 0x4, {0x2, 0x1}}, {0xd3, 0x7, {0x1, 0xa}}, {0xf8bf, 0x75, {0x1, 0x8}}, {0x1ff, 0x0, {0x3, 0x3}}, {0x3, 0x7ff, {0x0, 0xfc}}, {0x8, 0x6, {0x0, 0x1}}, {0xfd36, 0x48, {0x1, 0x8001}}, {0xc29, 0x6, {0x1, 0x4}}, {0x0, 0x87d, {0x2, 0x7fffffff}}, {0x0, 0x2, {0x3, 0x5}}, {0x29, 0x6, {0x1, 0x5}}, {0x3331, 0x0, {0x2, 0x7fffffff}}, {0x8, 0x0, {0x1, 0xfffffdff}}, {0x2, 0x7fff, {0x0, 0x4}}, {0x6, 0x7, {0x3, 0x8000}}, {0x401, 0xfffd, {0x2, 0x2}}, {0x0, 0x850, {0x3}}, {0x1, 0x400, {0x0, 0x6}}, {0x9, 0x1ff, {0x3, 0x2a4}}, {0x800, 0xbf5, {0x2, 0x9}}, {0x8, 0x5, {0x2, 0x47}}, {0x8, 0xfffe, {0x2, 0x1}}, {0x8000, 0x5, {0x0, 0xffffffff}}, {0x5, 0x6, {0x0, 0x3}}, {0x4, 0xb44a, {0x0, 0x3}}, {0x3, 0x2, {0x3, 0x6}}, {0x5, 0x8001, {0x3, 0xff}}, {0x5, 0xd6, {0x0, 0x2}}, {0x5, 0x6, {0x2, 0x40}}, {0x6, 0x318f, {0x0, 0x1}}, {0x3, 0x67bf, {0x3, 0x6}}, {0x30, 0xa2, {0x0, 0x3}}, {0x9, 0x2, {0x3, 0x5}}, {0x1, 0xac, {0x2}}, {0x9, 0x2, {0x2, 0x28}}]}}}, {{0x254, 0x1, {{0x0, 0x660}, 0x1, 0x9b, 0x4, 0x7, 0x4, 'syz0\x00', "7b870a62d55c59135fb20ba698b51efd1957f22b4548dea91bb847f7a384707d", "043fa7c85c417186b004d5ad70d45bfb5292f2a72f83121baa1e071c7da477fc", [{0x616f, 0x7005, {0x0, 0x2008000}}, {0x2, 0x0, {0x1, 0x3}}, {0x8, 0x9, {0x3, 0x4}}, {0xfff7, 0x3, {0x2, 0x5}}, {0x400, 0x4, {0x1, 0x6}}, {0xfff7, 0x8f, {0x2, 0x8001}}, {0xe697, 0x48e, {0x3, 0x1}}, {0xaf, 0x2, {0x3, 0x5}}, {0x2b6, 0x80, {0x0, 0x7fff}}, {0x4, 0x9, {0x1, 0x16}}, {0x9, 0x7, {0x3, 0x7ff}}, {0x1, 0x6, {0x1, 0x8}}, {0x2a1c, 0x615, {0x0, 0xffffffff}}, {0x9, 0x81, {0x0, 0x80000000}}, {0xeca5, 0x2d9, {0x0, 0x1}}, {0xff01, 0xde, {0x2, 0xc0000000}}, {0x3, 0x4, {0x3, 0x22f}}, {0x1000, 0x7ff, {0x0, 0x9}}, {0x8, 0x6, {0x0, 0x2}}, {0x51, 0xc33, {0x2, 0x5}}, {0x9, 0x7, {0x2, 0x400}}, {0x3f, 0x8cb, {0x0, 0xffffffff}}, {0x1f, 0x5, {0x3, 0x6}}, {0xffff, 0x9, {0x2, 0x3}}, {0x7f, 0x400, {0x3, 0x1}}, {0x1, 0x5, {0x0, 0x7}}, {0x9dc2, 0x0, {0x1, 0x6}}, {0x3, 0xc4, {0x2, 0x9}}, {0x3, 0x2, {0x3, 0x4}}, {0x816d, 0x4, {0x2, 0x8001}}, {0x6, 0x6a, {0x0, 0xffff}}, {0x3f, 0x7fff, {0x3, 0x2}}, {0x6, 0x5, {0x3, 0x2}}, {0x1ff, 0x401, {0x0, 0x101}}, {0x4, 0x5, {0x0, 0x8001}}, {0xd7e0, 0xffff, {0x2, 0xffffffc0}}, {0xb5a, 0x100, {0x2, 0x8}}, {0xffff, 0xfff, {0x0, 0x7}}, {0x29b2, 0x0, {0x1, 0x1}}, {0xac, 0x4, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x1}, 0x1f, 0xaf, 0x3, 0x4, 0xc, 'syz1\x00', "e8e992594808841007457a3ff27f8f3bc19d43f265b637865c9bbe684428fdf9", "4bc783d26cf18aa7f9fc09de1a9b70cb3c6caab004b818d16ed29020ff914399", [{0x9000, 0x8, {0x1, 0x101}}, {0x1000, 0x800, {0x2, 0x8}}, {0x0, 0xd386, {0x3, 0x6}}, {0xfffb, 0x2, {0x2, 0xdccc}}, {0x81, 0x9, {0x3, 0x3ff}}, {0x2, 0xd28, {0x2, 0x81}}, {0x6, 0x0, {0x1, 0x1}}, {0x8b42, 0x5, {0x1, 0x1}}, {0x9, 0x9be, {0x3, 0x56}}, {0x0, 0x58b1, {0x0, 0x2}}, {0xffff, 0x9, {0x2, 0x5}}, {0x101, 0x4, {0x1, 0x5}}, {0x80, 0x9, {0x755e43aa48892a71, 0x1f}}, {0x9877, 0xffff, {0x1, 0x2}}, {0x7fff, 0x3ff, {0x3, 0x7fff}}, {0xfd, 0x1, {0x1, 0x4}}, {0x8, 0x7, {0x2, 0x2}}, {0x81, 0x8001, {0x2, 0xffffff80}}, {0xfff, 0x0, {0x1, 0x2}}, {0x41d, 0xcebb, {0x2, 0x120000}}, {0x1, 0x0, {0x3, 0x2b8e1c7e}}, {0x9, 0x5, {0x2}}, {0x8, 0x2, {0x0, 0x42}}, {0x8, 0x1, {0x0, 0x7fd8}}, {0x2, 0x0, {0x1, 0xbfcc}}, {0x400, 0x3, {0x3, 0x3}}, {0x2, 0x7, {0x2}}, {0x7f, 0x9, {0x0, 0x67b}}, {0x5, 0x5, {0x3, 0xd22}}, {0x800, 0x3, {0x0, 0x3ff}}, {0x7fff, 0xffff, {0x3, 0x8}}, {0x3ff, 0x3, {0x2, 0x3}}, {0x200, 0x3, {0x0, 0x3d}}, {0x80, 0x5, {0x0, 0x1}}, {0x7f, 0xfffc, {0x3, 0x3}}, {0x8, 0x0, {0x2, 0x7}}, {0x8, 0xb05, {0x1, 0xffffffff}}, {0x20, 0xfff8, {0x3, 0x12000000}}, {0x6, 0x40, {0x2}}, {0x9, 0x1, {0x0, 0x100}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0xff, 0x81, 0xfffe, 0x200, 0x1a, 'syz1\x00', "2788b6100a4f38407f233b82ad6390b989e9af557c53067632c5967c30bd8556", "f16a69e040010860c63cdfe96a7f074c1376fc462ab27958966e6e39034419f3", [{0x0, 0x4f7, {0x1, 0x7f}}, {0x0, 0x8, {0x2, 0x7fffffff}}, {0x6, 0x88ae, {0x0, 0x6}}, {0x6, 0x400, {0x1, 0x80000000}}, {0x5, 0x519, {0x1, 0xffffffea}}, {0x6, 0x7fff, {0x3, 0x10000}}, {0xfc00, 0x0, {0x3, 0x7}}, {0x860c, 0x400, {0x3, 0x7}}, {0x303c, 0x7, {0x0, 0xc26}}, {0x243, 0x4, {0x0, 0x4}}, {0x2, 0x2, {0x1, 0xfffffffb}}, {0x2, 0x3f, {0x3, 0x80000000}}, {0xf84b, 0x2000, {0x1, 0x8}}, {0xf4, 0x3, {0x3, 0x3}}, {0x81, 0x8, {0x2, 0x101}}, {0x3, 0x6, {0x3, 0xd6a}}, {0x4, 0x9, {0x2, 0x9}}, {0x3, 0x6, {0x0, 0x1ff}}, {0xf5, 0xffff, {0x1, 0x7}}, {0x81, 0xf001, {0x1, 0x400}}, {0x6, 0x7, {0x1, 0x6}}, {0x4, 0x101, {0x1, 0x6}}, {0x1, 0x2, {0x2, 0x83}}, {0x6d, 0xd1, {0x1, 0x4}}, {0xea8, 0x400, {0x2, 0x1f1}}, {0x3, 0x0, {0x1, 0x300}}, {0xfff, 0x4, {0x3, 0x8}}, {0x7ff, 0x1, {0x1, 0x4}}, {0x2, 0x3, {0x1, 0x8cf0}}, {0x7ff, 0x1ff, {0x1, 0x7fffffff}}, {0x2, 0x4}, {0x7, 0x3, {0x3, 0x1}}, {0xccac, 0x401, {0x3}}, {0xd2, 0x800, {0x2, 0x8000}}, {0x2, 0x1, {0x2, 0x55f9}}, {0x86, 0x8, {0x0, 0x7}}, {0x3ff, 0x20c4, {0x2, 0x1}}, {0x200, 0x9, {0x1, 0xfffffff9}}, {0x4ee6, 0x8000, {0x1, 0x18}}, {0x9, 0x8, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x1, 0x9, 0x100, 0xd3, 0x0, 'syz1\x00', "925eb0996936bbe27541e32fc458bed910bab100ceaf3db45a51981d69769538", "71abfcf9f905eedb6c0d45a04425de870f4b9b0ce991b6fced394e41932a440b", [{0x800, 0x2, {0x1, 0x80000000}}, {0x9, 0x20, {0x1, 0x101}}, {0x4, 0x3b, {0x1, 0x8001}}, {0x4, 0x0, {0x0, 0x7}}, {0xff, 0xa544, {0x3, 0x8000}}, {0x81, 0xff00, {0x1, 0x2db}}, {0x1, 0x200, {0x2, 0x8}}, {0x8, 0x2, {0x2, 0x8}}, {0x2, 0x1, {0x0, 0x4}}, {0x7, 0xc1, {0x1, 0x2}}, {0x82, 0x6, {0x6}}, {0x5, 0x6b7, {0x1, 0x3}}, {0xfff7, 0x8, {0x0, 0x5}}, {0x1, 0x5, {0x3, 0x7}}, {0x5, 0x40, {0x2}}, {0x6, 0xc8, {0x0, 0x80000001}}, {0x1, 0x8, {0x0, 0x2}}, {0x7, 0x4, {0x0, 0x4}}, {0x7fff, 0x7ff, {0x1, 0x80}}, {0x1, 0x1, {0x1, 0x3}}, {0x0, 0x3b, {0x0, 0x4}}, {0x8001, 0x100, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x2}}, {0x7, 0xfffb, {0x1, 0x3}}, {0x0, 0x4, {0x0, 0x3}}, {0xfbea, 0x3}, {0x800, 0x5, {0x3, 0x5}}, {0x0, 0x40, {0x0, 0x401}}, {0x2, 0x5, {0x1}}, {0x200, 0x4, {0x2, 0x3}}, {0x7, 0x81a, {0x3, 0x100}}, {0x3, 0x1, {0x0, 0x3f85}}, {0x100, 0x0, {0xf9170660f7014261, 0x9}}, {0x2, 0x3cf, {0x3, 0x8}}, {0x3, 0xf960, {0x0, 0x4}}, {0x7c87, 0x8, {0x1, 0x5}}, {0x2, 0x1ff, {0x1, 0x8}}, {0x80, 0x8, {0x3, 0x1000}}, {0xed47, 0x400, {0x2, 0x2}}, {0x100, 0x1, {0x0, 0xe414}}]}}}, {{0x254, 0x1, {{0x0, 0x400}, 0x2, 0x4, 0x0, 0x1, 0xb, 'syz0\x00', "e5371f8b7943fd00e1056befef28af8a6f2e8051c172956ddcb4282539c234c0", "b1edb41f9754929fe07846cc00e7a357b1b32ea260596ca029f74596a630a0a8", [{0x0, 0x1, {0x0, 0x4f4}}, {0x20, 0x2, {0x3, 0x7fff}}, {0x949, 0x3e0, {0x3, 0x80000001}}, {0x8, 0x3, {0x0, 0x1000}}, {0x6, 0x1, {0x2, 0x4}}, {0x1000, 0x9}, {0x3ff, 0x1, {0x2, 0x1}}, {0x4, 0x2, {0x2, 0xfffff001}}, {0xffff, 0x4, {0x1, 0x8001}}, {0x6, 0x2, {0x2, 0x9}}, {0xfffb, 0x5, {0x2, 0x5}}, {0x8, 0x9ec8, {0x0, 0x6}}, {0x2, 0xffff, {0x0, 0x6}}, {0x200, 0x43d, {0x2, 0xf}}, {0x8, 0x1000, {0x3, 0xfff}}, {0x8000, 0xd93, {0x2}}, {0x7fff, 0x5, {0x2, 0x7fffffff}}, {0x1000, 0x2, {0x2, 0x1000}}, {0xff80, 0x0, {0x1, 0x2}}, {0xffff, 0x4, {0x1, 0xc0000000}}, {0x1000, 0x7fff, {0x1, 0x20}}, {0xdbe4, 0x2, {0x3, 0x1f}}, {0x1, 0x1000, {0x3}}, {0x5, 0x1, {0x0, 0x400}}, {0x5, 0x20, {0x1, 0xffff}}, {0x1000, 0x26, {0x1, 0x5}}, {0x3f, 0xffff, {0x1, 0x3}}, {0x3f, 0x800, {0x1, 0x1}}, {0x3, 0x8001, {0x2, 0x3ff}}, {0x5, 0x8, {0x3, 0x6}}, {0x1f, 0x3ff, {0x3, 0x5}}, {0x2, 0x9, {0x1}}, {0x7fff, 0xd1, {0x1}}, {0x1000, 0x1f, {0x1, 0x8}}, {0x2a48, 0x8, {0x1, 0xcac}}, {0x101, 0xa58, {0x0, 0x9}}, {0x1, 0x400, {0x2, 0x3}}, {0x400, 0x5, {0x1, 0x6}}, {0x7, 0x5, {0x0, 0x101}}, {0x7fff, 0x3, {0x0, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x80000001}, 0x4, 0xad, 0x20, 0x0, 0xe, 'syz0\x00', "fb55e54f6096710e1d1c77938c94cfac779792c41c0032259320acc9a44aabab", "b947497c354651d3e6af699b21df53389c66655498403a338f4b89db0d486eed", [{0x9c3, 0x101, {0x3, 0x6}}, {0xf21e, 0x9, {0x1, 0x20}}, {0x200, 0x7fff, {0x0, 0x7}}, {0x6, 0x5, {0x0, 0x546}}, {0x8000, 0x9, {0x2, 0x6}}, {0x1, 0x9, {0x3, 0x1000}}, {0xfff, 0x80, {0x1, 0x9cf7}}, {0x5, 0x2, {0x2, 0xfffffffb}}, {0x40, 0x6, {0x1, 0x9}}, {0x3e, 0x2a, {0x3, 0x2}}, {0x1f66, 0x6, {0x0, 0x936b}}, {0x7ff, 0x8, {0x2}}, {0x3, 0x4, {0x1, 0x3}}, {0x3, 0x100, {0x0, 0xcf9e}}, {0x1, 0x7, {0x1, 0x7}}, {0xcb98, 0xffff, {0x3}}, {0x2, 0x1, {0x3, 0x80000000}}, {0x1, 0x0, {0x3, 0x2}}, {0xbba, 0x81, {0x2, 0x3}}, {0x1, 0x2, {0x2, 0x101}}, {0x5, 0x5, {0x0, 0x20}}, {0x7f26, 0x80, {0x1, 0x1}}, {0x80, 0x9970, {0x0, 0x80000000}}, {0x3, 0xff, {0x0, 0x1}}, {0x7f, 0x2, {0x3, 0x400}}, {0xfffd, 0x1f9, {0x2, 0x9}}, {0x3, 0x100, {0x1, 0x2}}, {0x401, 0xfcae}, {0x0, 0x2331, {0x2, 0x7}}, {0x3, 0x7, {0x3, 0x7}}, {0x80, 0x38, {0x0, 0x3}}, {0x5, 0xffff, {0x1, 0x5}}, {0x63c8, 0x7ff, {0x2, 0x8}}, {0x9, 0x0, {0x3, 0xffffffff}}, {0x5, 0x3, {0x1, 0xffffff1a}}, {0x4, 0x20, {0x3, 0x1ff}}, {0x40, 0x8, {0x1, 0x512}}, {0x7, 0x4, {0x2, 0xa9}}, {0x64e, 0x1, {0x3, 0x9}}, {0x3, 0x1000, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x9c}, 0x10, 0x9, 0x8, 0x0, 0x10, 'syz0\x00', "3371ab10ac7c6f54bbb8458e61c213fae141773073a723a46cbaa17990ee19c1", "3ccb133b67bec0b5c103e4af549dc28c9a7fa3915b3c93f7bd4c5a1a2dbf1b8f", [{0x8, 0x32c7, {0x0, 0x7fffffff}}, {0x3, 0x2234, {0x0, 0x1}}, {0x1, 0x9, {0x1, 0x7}}, {0xff, 0x200, {0x0, 0xf2}}, {0x9, 0x0, {0x0, 0x3}}, {0x4eb5, 0xef}, {0x2, 0x97d2, {0x0, 0x9}}, {0x100, 0x0, {0x2, 0x6ce0}}, {0x8, 0x7, {0x2, 0xffffffff}}, {0x1000, 0x800, {0x1, 0x20}}, {0x1ff, 0x1, {0x2}}, {0xfff9, 0x1275, {0x1, 0x9}}, {0xaa3, 0x3, {0x1, 0x6}}, {0x2, 0x1ff, {0x0, 0x8}}, {0x1200, 0x7, {0x3, 0xffffffe0}}, {0x8, 0xff, {0x2, 0x80}}, {0xcb7, 0x14e, {0x2, 0xffffffcb}}, {0x2, 0x0, {0x1, 0xfffffffa}}, {0x3, 0x8, {0x7, 0x1}}, {0x6, 0x1, {0x2, 0xf26}}, {0x6, 0x1000, {0x2, 0x2}}, {0x9, 0x8, {0x3}}, {0x8, 0xff80, {0x1, 0x8}}, {0x3f, 0x2, {0x0, 0x3}}, {0x7f, 0x7, {0x1, 0x2}}, {0x5, 0x4, {0x2}}, {0x1f, 0x17c, {0x0, 0x81}}, {0x101, 0x8000, {0x2, 0x9}}, {0x1, 0x0, {0x2, 0x200000}}, {0xdd5, 0xf800, {0x3, 0x8}}, {0xfffc, 0x4, {0x3, 0x81}}, {0xff, 0xffe0, {0x3, 0x85}}, {0x7, 0x9, {0x0, 0x2}}, {0xf75, 0x7fff, {0x2, 0xffffffd0}}, {0x3, 0xfffb, {0x3}}, {0x800, 0x4, {0x1, 0x5}}, {0xca3b, 0x2c8d, {0x2, 0x2}}, {0x5, 0xfffa, {0x0, 0x6}}, {0x40, 0x7, {0x2, 0x2}}, {0x8, 0x1ff, {0x2, 0x8}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20000040}, 0x1)
ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000003d80)=0x3)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309)
r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000003e80), 0x3000, 0x0)
perf_event_open(&(0x7f0000003e00)={0x4, 0x80, 0x8, 0x7f, 0x6, 0x6, 0x0, 0x0, 0x25000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x4, @perf_bp={&(0x7f0000003dc0), 0xd}, 0x8, 0xfff, 0x47, 0x0, 0x5, 0x6, 0x4, 0x0, 0x2, 0x0, 0x1f}, 0x0, 0x7, r10, 0x9)

09:34:39 executing program 2:
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000))
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x200000)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)=""/121)
r1 = syz_io_uring_complete(0x0)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/112)
sendmsg$AUDIT_USER_TTY(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, 0x464, 0x100, 0x70bd27, 0x25dfdbfe, "77ed79968997524bb6d74649715bb417a5bce6a7e6604b2d5e1b7e18a04b785c549de6e86b10ffb25b25d39e938ec5f912f759ef3deb8c63a14fdf99196ef2d7fe7b10a8e0c23d17a4a0ca221d0e74260f5665f72ddbefb333b143409f8a77de065fb867943c6326a542c128faba0a6f5d6d0f93c28c417b3aab04445afd4a3c8bc2fd8b122ae4df5bd74cdfb20cc0ebf77aed1064", ["", "", "", "", "", "", ""]}, 0xa8}, 0x1, 0x0, 0x0, 0x20008810}, 0x4000000)
r2 = eventfd(0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000380)={0x7, 0x48, '\x00', 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r3 = dup2(r2, r1)
ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f00000003c0)={0x2, 0x3, 0x76})
r4 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x0, 0x420, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x52}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000081}, 0x4004000)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x80100)
ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000680)=""/45)
r6 = memfd_secret(0x0)
ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f00000006c0)=""/57)
ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000700)=""/168)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x144, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x37}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ff}, @NL80211_ATTR_VENDOR_DATA={0x96, 0xc5, "84fdac478ca8c9b35e3d6057ad9ead9d4d222ca67edcf7b764ed2d021c608d6cb85cebe6ff475e7f37577414b52ce297671a10e40f9ad49ddd6020073b1c9216ebc870aa7ffafff4dbab8e6c59921c284615e600cd6e9e4e3b43a96f0aaac6ed4511c144062cac81a60842e6e4d6dca7d8f58eacb1298e5cbfbf68af9eac7d63f1dc483143fd1e18dea72f269d4146a6bdcf"}, @NL80211_ATTR_VENDOR_DATA={0x2f, 0xc5, "cee598ce34d86eec4d2aecb434ed6e5baf422d5b4da07e9288a48574a38090bd3f6d1e520a9aead84d93ff"}, @NL80211_ATTR_VENDOR_DATA={0x51, 0xc5, "012967743f9b70bbdfe95e94a4ff7eb713b062b1fbafd303f619d4ef96ce5ab7141507b768dff71398bf9a2d2ba23ec6998971752298bf3248c2c568a2fd9276ea48f185b6ff5b1dea6763d879"}]}, 0x144}, 0x1, 0x0, 0x0, 0x404009c}, 0x20000000)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x728f6ba90ab61644, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44051}, 0x40)

09:34:39 executing program 3:
r0 = mq_open(&(0x7f0000000000)='&!*[}#\\-\x00', 0x2, 0x105, &(0x7f0000000040)={0x200, 0x9, 0x6, 0x400})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ipv6', 0x68141, 0x3)
mq_timedsend(r1, &(0x7f00000000c0)="32edb748de3d8376a27a38d1a17ddb8c80bda648150d17fc9f183c7aee4135d590ac25320778fbbca9441c25a2c86d8ae7297eea85b10fc3803f4b18f960575bea8d874f85a9c32f4fff2d9057925802c70615c25f3946a0d52516920e13083280f28ece25acb0670b850d013bbca18c0f962ae109189eab61d1eb6385f665b191e034f447b08012727e71c58b0f6fa1d64105f6b03032cfb897236ae2c69f585eeee3387564b1d535fbeee66f047b0ec5b0568969", 0xb5, 0x10000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0, {0xd1}}, './file0\x00'})
sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x68}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x142c0000}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xda8d, @remote, 0x44d}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xdd, @private1, 0x5}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000)
r3 = syz_open_dev$sg(&(0x7f0000000440), 0x5, 0x488301)
preadv2(r3, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000000500)=""/167, 0xa7}], 0x2, 0x2, 0x101, 0x16)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r1)
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000680)={@local, @empty, <r5=>0x0}, &(0x7f00000006c0)=0xc)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x410}, 0x40000d4)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r6=>r0, {0x4}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', <r7=>r5, 0x2f, 0x36, 0x53, 0xffffffff, 0x4, @remote, @private2, 0x8000, 0x1, 0x3f, 0x5}})
sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
accept4$packet(r1, &(0x7f0000000b40)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b80)=0x14, 0x80800)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, r8, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x20040094)
syz_genetlink_get_family_id$gtp(&(0x7f0000000cc0), r6)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}}, 0x80)
mq_notify(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x3c, 0x4, @thr={&(0x7f0000000e40)="4537d03c2ceb56d52d7e3ae9f10d24b4cb1e3fcbd6a1c35c3667beaf1c5da1d5c9ad409d04394e81c219552d1bd00a5a359d98b5c34765af74960580fac5367dabfedcb4b6f11fc8564abee396ef4983bb4a733fbf574044a62ceb9834142d469d7aa96b8d064c060f7be324f48d135cdb7eec69af1b", &(0x7f0000000ec0)="a7b1ab07786007d85639dd902ac63a9c"}})

09:34:39 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @private=0xa010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x46, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}, 'geneve1\x00'})
getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000000c0)={@multicast1, @loopback, @loopback}, &(0x7f0000000100)=0xc)
r1 = fsmount(r0, 0x1, 0x8)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0x0, 0x1, 0xe0, 0x1, 0x2a}, 0x6, 0x4, 'id1\x00', 'timer1\x00', 0x0, 0x3, 0xb47, 0x2, 0x7fffffff})
ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_wakeup_irq', 0x101000, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x3, 0x6ba, [0x0, 0x200002c0, 0x20000666, 0x200007ac], 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x0, 0x0, 0x18, 'vcan0\x00', 'bond_slave_1\x00', 'wg1\x00', 'batadv0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x1c6, 0x326, 0x376, [@comment={{'comment\x00', 0x0, 0x100}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x0, 0x1}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3cd1, 'system_u:object_r:var_t:s0\x00'}}}, @common=@AUDIT={'AUDIT\x00', 0x8}], @common=@log={'log\x00', 0x28, {{0x4, "b61f7c9aba451cb55ec8bda9d756c1ed844b40027a94fd97c64e2e24d8b8", 0x2}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x0, 0x10, 0x11, 'syzkaller1\x00', 'syzkaller1\x00', 'wg2\x00', 'ipvlan1\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x81, 0x9, 0x8, 0x1, 0x0, "5018aec771bcad41e92070144424025a128b0f9aa35d91e4ed56a26ad098b24db8538e9d72a448f9378540dadbe34834e73b9e4a2cb94a34c73fd199016e6ebe"}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x1b, 0x38, 0x88e5, 'veth0_virt_wifi\x00', 'team0\x00', 'ip_vti0\x00', 'wlan1\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @remote, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x11e, 0x156, 0x19e, [@realm={{'realm\x00', 0x0, 0x10}, {{0x8000, 0x4}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0xffffffff, 0xffffff00, 0xffffff00], [0xff000000, 0xffffff00, 0xffffffff], 0x5, 0x18, 0x8, 0x0, 0x4e20, 0x4e20, 0x4e21, 0x4e23}}}], [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffe}}}], @common=@ERROR={'ERROR\x00', 0x20, {"dcb8ab2767d94ecdba9af88b50495bc7a205123662a2c90c78fea51ad34f"}}}]}]}, 0x732)
syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r1)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000a40)=@req={0xfc7a, 0x1ff, 0x9, 0x401}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000a80)={{0x1, 0x1, 0x18, <r3=>r0, {r2}}, './file0/file0\x00'})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20040000)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r4 = dup3(r1, r1, 0x80000)
sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9a7b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x184}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x126}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4c040)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000001400)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f0000000f80)={0x42c, 0x3f4, 0x100, 0x70bd26, 0x25dfdbfd, {0x2, 0x1, 0x11, [0x8001, 0x2bb8, 0x6, 0x8001, 0xc7, 0x81, 0x81, 0x7f, 0xfffffff9, 0x8, 0x1, 0x4, 0x0, 0x1, 0x9, 0x3, 0xffffffff, 0x100, 0x2c8000, 0xff, 0x20, 0x8, 0x2, 0x3, 0x5, 0x0, 0x1ff, 0x2, 0x9, 0x4, 0x7, 0x9, 0x9, 0x8000, 0x4, 0x7fff, 0x8, 0x80000001, 0x6, 0x6, 0xc4e, 0x1, 0x7, 0x1, 0x6, 0x2, 0x3, 0x9, 0x5, 0x8, 0x7fffffff, 0x8, 0x1000, 0x7fff, 0xe236, 0x6, 0xc5, 0xffff, 0xc563, 0x7f, 0x521, 0x4, 0x10000, 0x3], [0x5, 0x3, 0x4, 0x3, 0x7, 0xffffffff, 0xffffffff, 0x3, 0x9, 0x1, 0x7fffffff, 0x2, 0x460b, 0x7f, 0x9, 0x80000000, 0x7, 0x1, 0x8, 0x8000, 0x81, 0x1ff, 0xcbbc, 0x0, 0x2, 0x374a, 0x7, 0x2, 0x7, 0x6, 0x3fe1, 0x220, 0xf1, 0x9, 0x8, 0x9, 0x84, 0x4, 0xe4fa, 0x101, 0x3, 0x80000000, 0x3, 0x800, 0x0, 0x200, 0x2, 0x1, 0x7, 0x5, 0x1, 0x3, 0x7, 0xf242, 0x926df13d, 0x8001, 0xfffff1b6, 0xfffffbff, 0x2, 0x7, 0x40, 0x8fe, 0x9, 0x3], [0x1, 0x100, 0x5, 0x6, 0x1f, 0x5, 0x20, 0x2, 0x5, 0x10001, 0x1000, 0x4, 0x4, 0xff, 0x8000, 0x584, 0x603bb6f4, 0x1, 0x402, 0x1, 0x5, 0xfff, 0x8, 0x1ff, 0x7, 0x7, 0x6, 0x7, 0x1, 0xf7, 0x4, 0xffffffff, 0x7, 0x200, 0xfe, 0x41, 0x7fffffff, 0xbc68, 0x8, 0x20, 0x1, 0x7, 0x5, 0x7, 0x2c74, 0x42b, 0x6, 0xae0, 0x3, 0x7ff, 0x9, 0xfffffffb, 0x98, 0x4, 0x7fff, 0x7, 0x3, 0xd86, 0xb6d, 0x7, 0x4, 0x2, 0x1, 0x4], [0x90, 0x7, 0x5, 0xbb15, 0x8, 0x5, 0x7, 0x5, 0x4, 0x2008, 0x6, 0x7fffffff, 0x0, 0x400, 0x8, 0x8, 0x488e4e0d, 0x0, 0x8, 0x2, 0x3f, 0xffff, 0x10, 0x36c, 0x5, 0xaec, 0x4, 0x1, 0x7, 0x1, 0x5, 0xfffff6f1, 0x3, 0x3, 0x81, 0x1, 0x4, 0x9, 0x7fff, 0x3, 0x93, 0x1, 0x0, 0x54, 0x0, 0x80, 0x3, 0x7fffffff, 0x2, 0x7ff, 0x8001, 0x81, 0x28, 0x10001, 0x8001, 0x1, 0x9, 0x7, 0x6, 0x8001, 0x8, 0x6, 0x8000, 0x6], 0xa, ['*-}\x00', '-%-(\xe3\x00']}, ["", "", "", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000001440)=0x40, 0x4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000001480)={0x1, 'syzkaller0\x00', 0x4}, 0x18)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000001500)={@loopback, @dev={0xac, 0x14, 0x14, 0xd}, @empty}, 0xc)

[  130.067645] audit: type=1400 audit(1745487279.242:7): avc:  denied  { execmem } for  pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:34:39 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x80, 0x8}}, './file0\x00'})
mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r0, 0x8)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000100))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000001c0)={{r1}, 0x7, &(0x7f0000000180)=[0x1, 0x33d, 0x2, 0x1, 0x9463, 0xffffffff, 0x1], 0xc0b, 0x6, [0x1, 0x3f, 0x9bb3, 0x2]})
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000240)={0x3, 0x1, 0x5, 0x7, 0x1, 0x10000})
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x7cb92fdd2552ffe5}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfff}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x81}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_COMMENT={0x12, 0x1a, '/proc/meminfo\x00'}, @IPSET_ATTR_SKBQUEUE={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x40)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000003c0)={0x0, {0x6, 0x5, 0x2, 0x9, 0x5}})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf4, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_KEYS={0x58, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xe, 0x4, "8a56182fa56e56d853bf"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0ce9c25a9d"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x7, 0x4, "0c8268"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_SSID={0x10, 0x34, @random="18cf42d90922897ac01e7f39"}, @NL80211_ATTR_PREV_BSSID={0xa}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac04, 0xfac08, 0xfac13, 0xfac05, 0xfac04, 0xfac13]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x22, 0x115, "93c1366916fad1f829fc833761912eabf58ca244f1f24dd548da5512747b"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0b}], @NL80211_ATTR_DISABLE_HT={0x4}]}, 0xf4}}, 0x4)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000005c0)=0x658, 0x4)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
poll(&(0x7f0000000640)=[{r1, 0x10}, {r1, 0x1300}, {r2}, {r3, 0x8}, {r0, 0x122}, {r2}], 0x6, 0x393984fe)
r4 = accept$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14)
getsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000700), &(0x7f0000000740)=0x4)
getsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000780)=""/34, &(0x7f00000007c0)=0x22)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r5=>r4, {0x9}}, './file0\x00'})
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000b40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x270, 0x0, 0x488, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @remote, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x180}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1e7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x846c}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4915}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf37b}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x20008081}, 0x40000)

09:34:39 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x3}}, './file0\x00'})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_virt_wifi\x00', {0x1}, 0xf6d8})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x6a}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x80, {0x7, 0x3ff, 0xfcb8, 0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000001c0)={0x7b, 0xf9}, 0x2)
r2 = socket(0x2b, 0x80000, 0x7)
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000200)=0x6, 0x4)
r3 = socket$inet(0x2, 0x4, 0x6)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
r5 = io_uring_setup(0x70f1, &(0x7f0000000340)={0x0, 0x24f1, 0x8, 0x3, 0xa9})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0, <r6=>0x0})
fcntl$lock(r5, 0x7, &(0x7f0000000440)={0x1, 0x2, 0x3, 0x3, r6})
fstat(r5, &(0x7f0000000480))
ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000500)={'geneve0\x00', 0x5})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/drivers\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r8, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3d9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4008040)

09:34:39 executing program 7:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040))
r1 = syz_open_dev$vcsn(&(0x7f00000030c0), 0xe1e, 0x105002)
ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000003100)={{0x1, 0x1}, 0x100, './file0\x00'})
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000003240))
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000003280)={0x0, 0x7})
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000004280)=0xff)
r3 = memfd_secret(0x80000)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1657)
r4 = signalfd4(r1, &(0x7f00000042c0)={[0xff]}, 0x8, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f00000043c0)={&(0x7f0000004300), 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0xf}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x60}, 0x8000)
ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000004400)={0x0, 0xfff})
ioctl$FIOCLEX(r3, 0x5451)
ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000004440))
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
close_range(r2, r5, 0x2)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
r6 = accept4$unix(r4, &(0x7f0000004480)=@abs, &(0x7f0000004500)=0x6e, 0x80000)
getpeername$unix(r6, &(0x7f0000004540), &(0x7f00000045c0)=0x6e)

[  131.516201] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.518222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  131.521437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  131.522938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  131.524546] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.528370] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  131.529556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.533859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.536478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  131.557410] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.578583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.579791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  131.582386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.585835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.587062] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  131.592525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  131.596623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.598151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  131.602524] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  131.603797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.634899] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  131.642389] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  131.647975] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  131.649267] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  131.656674] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  131.667401] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  131.671383] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  131.673114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  131.674306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  131.678171] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  131.686540] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  131.687496] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  131.687734] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  131.690720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  131.694963] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  131.708796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  131.722339] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  131.745246] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  131.756933] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  131.759174] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  133.591147] Bluetooth: hci0: command tx timeout
[  133.654274] Bluetooth: hci1: command tx timeout
[  133.717115] Bluetooth: hci3: command tx timeout
[  133.717817] Bluetooth: hci2: command tx timeout
[  133.781264] Bluetooth: hci5: command tx timeout
[  133.781949] Bluetooth: hci6: command tx timeout
[  133.845196] Bluetooth: hci7: command tx timeout
[  133.845933] Bluetooth: hci4: command tx timeout
[  135.637124] Bluetooth: hci0: command tx timeout
[  135.702216] Bluetooth: hci1: command tx timeout
[  135.765419] Bluetooth: hci2: command tx timeout
[  135.765977] Bluetooth: hci3: command tx timeout
[  135.829221] Bluetooth: hci6: command tx timeout
[  135.829764] Bluetooth: hci5: command tx timeout
[  135.894698] Bluetooth: hci4: command tx timeout
[  135.895304] Bluetooth: hci7: command tx timeout
[  137.685140] Bluetooth: hci0: command tx timeout
[  137.750363] Bluetooth: hci1: command tx timeout
[  137.813385] Bluetooth: hci3: command tx timeout
[  137.813928] Bluetooth: hci2: command tx timeout
[  137.877183] Bluetooth: hci5: command tx timeout
[  137.877743] Bluetooth: hci6: command tx timeout
[  137.941408] Bluetooth: hci7: command tx timeout
[  137.941967] Bluetooth: hci4: command tx timeout
[  139.735111] Bluetooth: hci0: command tx timeout
[  139.799196] Bluetooth: hci1: command tx timeout
[  139.861133] Bluetooth: hci2: command tx timeout
[  139.861682] Bluetooth: hci3: command tx timeout
[  139.925124] Bluetooth: hci5: command tx timeout
[  139.925681] Bluetooth: hci6: command tx timeout
[  139.989167] Bluetooth: hci4: command tx timeout
[  139.989720] Bluetooth: hci7: command tx timeout
[  191.935848] syz-executor.3 (291) used greatest stack depth: 24384 bytes left
[  194.416675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  194.420846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  194.422360] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  194.429817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  194.439288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.599610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  194.603645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  194.606761] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  194.607742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  194.609490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  194.610794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  194.614651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  194.617034] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  194.617087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  194.630397] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  194.653869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  194.657777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  194.662486] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  194.665891] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.669503] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.670858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  194.671795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.688454] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.694291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.698291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.761908] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  194.767349] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  194.772395] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  194.773474] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  194.774334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  194.780473] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  194.784908] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  194.792650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  194.798741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  194.807633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  194.809279] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  194.818401] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  194.820886] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  194.835263] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  194.837393] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  196.501180] Bluetooth: hci0: command tx timeout
[  196.693153] Bluetooth: hci1: command tx timeout
[  196.693176] Bluetooth: hci3: command tx timeout
[  196.757105] Bluetooth: hci4: command tx timeout
[  196.757121] Bluetooth: hci2: command tx timeout
[  196.885122] Bluetooth: hci5: command tx timeout
[  196.949123] Bluetooth: hci6: command tx timeout
[  196.965227] Bluetooth: hci7: command tx timeout
[  198.549096] Bluetooth: hci0: command tx timeout
[  198.741352] Bluetooth: hci3: command tx timeout
[  198.741445] Bluetooth: hci1: command tx timeout
[  198.805097] Bluetooth: hci2: command tx timeout
[  198.805166] Bluetooth: hci4: command tx timeout
[  198.934059] Bluetooth: hci5: command tx timeout
[  198.998208] Bluetooth: hci7: command tx timeout
[  198.998274] Bluetooth: hci6: command tx timeout
[  200.597219] Bluetooth: hci0: command tx timeout
[  200.789508] Bluetooth: hci1: command tx timeout
[  200.791109] Bluetooth: hci3: command tx timeout
[  200.853067] Bluetooth: hci2: command tx timeout
[  200.853608] Bluetooth: hci4: command tx timeout
[  200.981132] Bluetooth: hci5: command tx timeout
[  201.045092] Bluetooth: hci6: command tx timeout
[  201.045121] Bluetooth: hci7: command tx timeout
[  202.645104] Bluetooth: hci0: command tx timeout
[  202.837137] Bluetooth: hci1: command tx timeout
[  202.837682] Bluetooth: hci3: command tx timeout
[  202.901085] Bluetooth: hci2: command tx timeout
[  202.902089] Bluetooth: hci4: command tx timeout
[  203.029709] Bluetooth: hci5: command tx timeout
[  203.093263] Bluetooth: hci6: command tx timeout
[  203.093814] Bluetooth: hci7: command tx timeout
[  256.887604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  256.895466] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  256.905757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  256.916300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  256.918292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  257.001617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  257.004028] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  257.007551] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  257.015576] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  257.017541] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  257.201606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.217318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  257.220213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  257.230315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  257.235361] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  257.274959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  257.279419] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  257.290757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  257.319326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  257.328708] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  257.344663] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  257.348150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  257.349162] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  257.351747] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  257.353198] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  257.355280] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  257.360571] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  257.364769] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  257.373152] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  257.374667] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  257.376616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  257.378786] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  257.386358] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  257.388426] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  257.417624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  257.419883] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  257.423017] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  257.430255] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  257.538817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  257.546864] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  258.965575] Bluetooth: hci0: command tx timeout
[  259.093104] Bluetooth: hci1: command tx timeout
[  259.285111] Bluetooth: hci2: command tx timeout
[  259.413127] Bluetooth: hci3: command tx timeout
[  259.481237] Bluetooth: hci6: command tx timeout
[  259.481955] Bluetooth: hci4: command tx timeout
[  259.482044] Bluetooth: hci5: command tx timeout
[  259.605456] Bluetooth: hci7: command tx timeout
[  261.013130] Bluetooth: hci0: command tx timeout
[  261.143067] Bluetooth: hci1: command tx timeout
[  261.333380] Bluetooth: hci2: command tx timeout
[  261.461358] Bluetooth: hci3: command tx timeout
[  261.525156] Bluetooth: hci6: command tx timeout
[  261.525294] Bluetooth: hci5: command tx timeout
[  261.525688] Bluetooth: hci4: command tx timeout
[  261.653082] Bluetooth: hci7: command tx timeout
[  263.062111] Bluetooth: hci0: command tx timeout
[  263.190123] Bluetooth: hci1: command tx timeout
[  263.381467] Bluetooth: hci2: command tx timeout
[  263.510056] Bluetooth: hci3: command tx timeout
[  263.573653] Bluetooth: hci5: command tx timeout
[  263.574382] Bluetooth: hci6: command tx timeout
[  263.574455] Bluetooth: hci4: command tx timeout
[  263.702087] Bluetooth: hci7: command tx timeout
[  265.110024] Bluetooth: hci0: command tx timeout
[  265.238482] Bluetooth: hci1: command tx timeout
[  265.430100] Bluetooth: hci2: command tx timeout
[  265.557293] Bluetooth: hci3: command tx timeout
[  265.621136] Bluetooth: hci4: command tx timeout
[  265.621376] Bluetooth: hci5: command tx timeout
[  265.622552] Bluetooth: hci6: command tx timeout
[  265.750063] Bluetooth: hci7: command tx timeout
[  319.529851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  319.534863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  319.536891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  319.563448] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  319.567897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  319.786879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  319.792550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  319.795869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  319.804541] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  319.808713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  319.865265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  319.872151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  319.879378] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  319.890348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  319.903830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  319.909414] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  319.931214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  319.941561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  319.945338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  319.954309] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  320.060838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  320.065905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  320.067896] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  320.069886] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  320.078439] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  320.094937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  320.098192] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  320.100760] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  320.113226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  320.116486] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  320.126458] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  320.154713] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  320.156325] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  320.189630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  320.202858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  320.207688] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  320.217509] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  320.234334] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  320.329395] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  320.368777] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  321.621242] Bluetooth: hci0: command tx timeout
[  321.877829] Bluetooth: hci1: command tx timeout
[  321.943058] Bluetooth: hci2: command tx timeout
[  322.005173] Bluetooth: hci3: command tx timeout
[  322.197257] Bluetooth: hci5: command tx timeout
[  322.265840] Bluetooth: hci4: command tx timeout
[  322.325125] Bluetooth: hci6: command tx timeout
[  322.517189] Bluetooth: hci7: command tx timeout
[  323.670015] Bluetooth: hci0: command tx timeout
[  323.925457] Bluetooth: hci1: command tx timeout
[  323.990283] Bluetooth: hci2: command tx timeout
[  324.053373] Bluetooth: hci3: command tx timeout
[  324.245478] Bluetooth: hci5: command tx timeout
[  324.310049] Bluetooth: hci4: command tx timeout
[  324.375039] Bluetooth: hci6: command tx timeout
[  324.566030] Bluetooth: hci7: command tx timeout
[  325.717509] Bluetooth: hci0: command tx timeout
[  325.973266] Bluetooth: hci1: command tx timeout
[  326.037103] Bluetooth: hci2: command tx timeout
[  326.101355] Bluetooth: hci3: command tx timeout
[  326.293087] Bluetooth: hci5: command tx timeout
[  326.357260] Bluetooth: hci4: command tx timeout
[  326.423139] Bluetooth: hci6: command tx timeout
[  326.613182] Bluetooth: hci7: command tx timeout
[  327.765385] Bluetooth: hci0: command tx timeout
[  328.021085] Bluetooth: hci1: command tx timeout
[  328.085558] Bluetooth: hci2: command tx timeout
[  328.149459] Bluetooth: hci3: command tx timeout
[  328.341105] Bluetooth: hci5: command tx timeout
[  328.405074] Bluetooth: hci4: command tx timeout
[  328.469129] Bluetooth: hci6: command tx timeout
[  328.661161] Bluetooth: hci7: command tx timeout
[  382.127860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  382.135825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  382.138645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  382.146346] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  382.151331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  382.304382] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  382.307795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.311712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.316644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.321352] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.507677] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  382.514109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  382.516803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  382.525497] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  382.530316] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  382.568533] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  382.576721] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  382.582847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  382.601399] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  382.608250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  382.665851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  382.668672] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  382.671750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  382.684518] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  382.688280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  382.689490] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  382.700459] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  382.721624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  382.724764] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  382.730414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  382.741327] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  382.748518] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  382.749602] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  382.756575] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  382.759576] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  382.782420] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  382.789853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  382.793066] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  382.800691] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  382.811265] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  384.213165] Bluetooth: hci0: command tx timeout
[  384.342085] Bluetooth: hci1: command tx timeout
[  384.598097] Bluetooth: hci2: command tx timeout
[  384.726071] Bluetooth: hci3: command tx timeout
[  384.789133] Bluetooth: hci4: command tx timeout
[  384.853097] Bluetooth: hci5: command tx timeout
[  384.917137] Bluetooth: hci7: command tx timeout
[  384.918809] Bluetooth: hci6: command tx timeout
[  386.262795] Bluetooth: hci0: command tx timeout
[  386.389061] Bluetooth: hci1: command tx timeout
[  386.645078] Bluetooth: hci2: command tx timeout
[  386.775069] Bluetooth: hci3: command tx timeout
[  386.838112] Bluetooth: hci4: command tx timeout
[  386.903231] Bluetooth: hci5: command tx timeout
[  386.965170] Bluetooth: hci7: command tx timeout
[  386.966967] Bluetooth: hci6: command tx timeout
[  388.309110] Bluetooth: hci0: command tx timeout
[  388.437074] Bluetooth: hci1: command tx timeout
[  388.693171] Bluetooth: hci2: command tx timeout
[  388.823103] Bluetooth: hci3: command tx timeout
[  388.885329] Bluetooth: hci4: command tx timeout
[  388.949385] Bluetooth: hci5: command tx timeout
[  389.013619] Bluetooth: hci6: command tx timeout
[  389.015816] Bluetooth: hci7: command tx timeout
[  390.357101] Bluetooth: hci0: command tx timeout
[  390.485095] Bluetooth: hci1: command tx timeout
[  390.741409] Bluetooth: hci2: command tx timeout
[  390.869098] Bluetooth: hci3: command tx timeout
[  390.933252] Bluetooth: hci4: command tx timeout
[  390.998315] Bluetooth: hci5: command tx timeout
[  391.061269] Bluetooth: hci7: command tx timeout
[  391.061852] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
09:39:49  Registers:
info registers vcpu 0
RAX=00000000000083de RBX=0000000000000001 RCX=ffffffff813aff22 RDX=00000000000083df
RSI=0000000000003aff RDI=ffffffff867b4eda RBP=ffff88806ce08ad0 RSP=ffff88806ce08a08
R8 =ffffffff867b4ed4 R9 =0000000000000001 R10=000000000003b074 R11=00000000000083de
R12=ffff88806ce08ad8 R13=ffff88806ce08ac0 R14=ffff88806ce08ab9 R15=ffff88806ce08a78
RIP=ffffffff81350af6 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564e000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fef46213260 CR3=0000000015dd2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88800a1359c0 RCX=ffffffff81365aa0 RDX=ffff888035abb780
RSI=ffffffff813658a0 RDI=0000000000000001 RBP=ffff88806cf08e10 RSP=ffff88806cf08d40
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000
R12=ffff888008c41780 R13=0000000000000000 R14=ffffea000035fa00 R15=ffff88800d7e8f80
RIP=ffffffff81adc7c2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb40e4da540 00000000 00000000
GS =0000 ffff8880e574e000 00000000 00000000
LDT=0000 fffffe0e00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556fd3d164c8 CR3=000000003568a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000