Warning: Permanently added '[localhost]:61810' (ECDSA) to the list of known hosts.
2025/04/25 03:14:42 fuzzer started
2025/04/25 03:14:42 dialing manager at localhost:46629
syzkaller login: [  102.365159] cgroup: Unknown subsys name 'net'
[  102.500621] cgroup: Unknown subsys name 'cpuset'
[  102.547444] cgroup: Unknown subsys name 'rlimit'
2025/04/25 03:15:05 syscalls: 212
2025/04/25 03:15:05 code coverage: enabled
2025/04/25 03:15:05 comparison tracing: enabled
2025/04/25 03:15:05 extra coverage: enabled
2025/04/25 03:15:05 setuid sandbox: enabled
2025/04/25 03:15:05 namespace sandbox: enabled
2025/04/25 03:15:05 Android sandbox: enabled
2025/04/25 03:15:05 fault injection: enabled
2025/04/25 03:15:05 leak checking: enabled
2025/04/25 03:15:05 net packet injection: enabled
2025/04/25 03:15:05 net device setup: enabled
2025/04/25 03:15:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/25 03:15:05 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/25 03:15:05 USB emulation: enabled
2025/04/25 03:15:05 hci packet injection: enabled
2025/04/25 03:15:05 wifi device emulation: enabled
2025/04/25 03:15:05 802.15.4 emulation: enabled
2025/04/25 03:15:05 fetching corpus: 0, signal 0/0 (executing program)
2025/04/25 03:15:06 starting 8 fuzzer processes
03:15:06 executing program 0:
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', <r0=>0x0, 0x2f, 0x0, 0x0, 0x8, 0x10, @private0, @local, 0x7800, 0x8, 0x4, 0x7}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000)
setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000240)=0x1, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x40}}, './file0\x00'})
getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f00000002c0)=""/72, &(0x7f0000000340)=0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'sit0\x00', r0, 0x29, 0x40, 0x81, 0x401, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x10, 0x7, 0x8, 0x10000}})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r2=>r1, {0x4, 0x3}}, './file0\x00'})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
epoll_create1(0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x1}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000600)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xb)
io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0)
r4 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000042c0)={{0x1, 0x1, 0x18, <r5=>r4, {0x1}}, './file0\x00'})
setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000004300)=0x4, 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000004340)={{0x1, 0x1, 0x18, <r6=>r4, {0x21, 0x1}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000004380)={{0x1, 0x1, 0x18, <r7=>r4, {0x200}}, './file0\x00'})
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000043c0)=0x1, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000004400)={{0x1, 0x1, 0x18, r7}, './file0\x00'})
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000004480)={0x1, 0x2, 0x5, 0x3, 0x3})

03:15:06 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x20010, r0, 0xae849000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000040)="3f00026113cd8fa1758dd578c796c629ebc3f63ee93912e588fc4cf83106d5618a90ebe1492ecc38856b4b01a41938cace414fef7a5e7ff5d2ae09a15016852791c6648719e50e570e50073c0cdf77be091367966b743de4c2aec50709dc46a3da9445e36b9798ce87d627d2d8549ba097e3bbd1dc749616d27daf7a9ca32b1135ad7616ec7c2c48dbbab483c89c92be914928dd6c11f6778c", 0x99, r0}, 0x68)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000180)=0x8, 0x4)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000001c0)=0x3, 0x4)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x7, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000440)=0xffff, 0x4)
add_key$fscrypt_provisioning(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)={0x3, 0x0, @a}, 0x48, 0xfffffffffffffffd)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r3=>r1, {0x62}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1)
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r4, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}]}, 0x30}, 0x1, 0x0, 0x0, 0x28004080}, 0x20000000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x101}}, './file0\x00'})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000740)=0x7, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r6, {0x2}}, './file1\x00'})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x204d00, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000840)={{0x1, 0x1, 0x18, r8, {0xfc49}}, './file0\x00'})

03:15:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x804000, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname={'aname', 0x3d, '+*'}}, {@afid={'afid', 0x3d, 0x10001}}, {@version_L}, {@access_any}, {@loose}, {@cachetag}], [{@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'-'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_measure}]}})
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000180)=0x6, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x32}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x8880)
clock_gettime(0x0, &(0x7f0000002740)={<r3=>0x0, <r4=>0x0})
recvmmsg(r0, &(0x7f0000002700)=[{{&(0x7f0000000300)=@x25, 0x80, &(0x7f0000002580)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f0000001480)=""/64, 0x40}, {&(0x7f00000014c0)=""/178, 0xb2}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x5, &(0x7f0000002600)=""/232, 0xe8}, 0x8000}], 0x1, 0x2000, &(0x7f0000002780)={r3, r4+10000000})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000027c0)={'wlan0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002800)={{0x1, 0x1, 0x18, <r5=>r1}, './file0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002880)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x68, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x6d}}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x8}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x4}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x7}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5f}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1f}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040804}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000002a80)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff}, './file0\x00'})
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000002cc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002b00)={0x158, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x2, {0x5d6c, 0x4, 0x0, 0x40}}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_KEYS={0x5c, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c403137321"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x7, 0x4, "182ccf"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "130b694c004fc4b8b5b2fd7f96"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d091abe98b"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}, @NL80211_ATTR_AKM_SUITES={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x83, 0x115, "13a29760decb33b275f66e009579a5215a1479ce53b18023ba76fc90d591aa18112c3b4731b4fdd7a0bc44a266d249e2311613082505d6e7364c6efde24b4881cabb42db9e3c488b2a226418e99fa97ed8895cb8b3c739fc3e833bf195ce99b3707b107cd4ade4a2c1bee05682a480b6b56f560d48d1d7596b6056e628b6cd"}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x20, 0x1, 0x2, 0x0, {0x1, 0x6fc, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x9, 0x9}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2400c001}, 0x40080)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000002d40)={0x1000, 0x0, &(0x7f0000002d00)=[r5, r5, r1, r7, r5]}, 0x5)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002dc0), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x1c, r8, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002ec0))
r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000003480), 0x1, 0x0)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r9, &(0x7f00000036c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003680)={&(0x7f0000003540)={0x108, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x5b, 0xfc, "f1a80ba58f2a414c4dc9ac6d5e0a02a988e94c41a3564dee9d70dab7e85480d50b142ad2d1375f351759e032837c2de2c1daac57064a7716e99776fe734c3037dc3874834fd20b9dab5c72b8e950864227e313960634e9"}], @NL80211_ATTR_IE={0x96, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x1f, 0x61}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x45, 0xb0}}, @random_vendor={0xdd, 0x58, "9feb39fd505ad7ed0402ede7515320366746b0aa06ffcdd85680a041071bda694f1ee77cbbc50cc56ab03fd8b90eedb8dba01bae0cb3cd2850c4f14cc7a1aa9032e6da519c6ca7611174d92fdb464ded98f395df1ef2be29"}, @mic={0x8c, 0x10, {0x418, "ece213c25de6", @short="f283518e873a9656"}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x63, 0x1, @device_b, 0xfffffffe, 0x10001, 0x3}}]}]}, 0x108}}, 0x20004050)

03:15:06 executing program 3:
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40000000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4014)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, @out_args}, './file0\x00'})
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x150, 0x13, 0x300, 0x70bd28, 0x25dfdbff, {0x5, 0x80, 0x1, 0x18, {0x4e21, 0x4e23, [0xffff, 0x7, 0x3, 0x6], [0x4, 0x1ff, 0xffff, 0x8000], 0x0, [0x7fff]}, 0xffffffff, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x4000040)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004811}, 0x4004080)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x80100, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4040080)
r2 = syz_io_uring_complete(0x0)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x12c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x3e, 0xfa, "5111b968052ad951cb6d674e54af0c9711a7f160a7db1895993449dca04550025cfba42947a0acee554ab405932c3bd63e28d478d8d34a436ed7"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_REALM={0x4d, 0xfa, "521bd9717c0471b5c11e8f083ca28449679e57e35a2d4d27eaaaa9f0421f6de040d4091e0a0b828b1b0b122c646fc218d671e9254fa248daffc3904400becf584515053bb362f3f6dd"}, @NL80211_ATTR_FILS_ERP_REALM={0xb, 0xfa, "fa66e41d79ab85"}, @NL80211_ATTR_FILS_ERP_RRK={0x44, 0xfc, "22d907bfedae07abd34b2e5403a75e4c541bcda9a520c59f94c1316819e44b9fe47de298110a2767e45f611d079f2dea0b3c981e2877a384ce3c5d2750ba958d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x401}], @NL80211_ATTR_IE={0x26, 0x2a, [@ht={0x2d, 0x1a, {0x40, 0x0, 0x1, 0x0, {0x3, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x24}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xd0, 0x9d, 0x1}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x820}, 0x40000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x98, r3, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x20}, @NL80211_ATTR_IE={0x66, 0x2a, [@preq={0x82, 0x5c, @not_ext={{0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, @device_a, 0xdcd9, "", 0x1f, 0x80000000, 0x6, [{{0x1}, @broadcast, 0x5}, {{0x1, 0x0, 0x1}, @device_b, 0x87}, {{0x0, 0x0, 0x1}, @device_b, 0x8}, {{0x1}, @broadcast, 0x4db2}, {{}, @broadcast, 0x7}, {}]}}, @ibss={0x6, 0x2, 0x9}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x80}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x40080)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000}, 0x8004)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000a80)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
clock_gettime(0x0, &(0x7f0000000c00)={<r5=>0x0, <r6=>0x0})
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000c40)={r5, r6+60000000}, 0x1, 0x0, 0x0, {0x0, r7}}, 0x40)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d00), r4)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, r8, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000e40), 0xc2000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'})

[  126.059896] audit: type=1400 audit(1745550906.493:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:15:06 executing program 4:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x22450}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r0, {0x7}}, './file0\x00'})
r3 = io_uring_setup(0x7d0c, &(0x7f0000000240)={0x0, 0x7d9e, 0x0, 0x3, 0x16c})
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r3, 0x8000000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r6=>r0, {0x9}}, './file0/file0\x00'})
r7 = syz_io_uring_complete(r4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x810, r5, 0x8000000)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
getpeername(r8, &(0x7f0000000340)=@l2tp={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x80)
io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0)
getsockname$netlink(r5, &(0x7f0000000400), &(0x7f0000000440)=0xc)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r2)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r9, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1010}, 0x20000800)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r10=>r2, {0x6c, 0x4}}, './file0/file0\x00'})
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r10, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xa4b77c49b1c0fe45}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, r11, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x81)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})

03:15:06 executing program 5:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000000)={0x6, 0x7, 0x2, 0x7f, 0x8, 0x60})
ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f0000000ac0)={@lba=0x5cd, 0x2, 0x2e, &(0x7f0000000a80)=""/46})
ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000bc0)={"72400c6d81c98e794d23dc79", &(0x7f0000000b00)="4221b72eaa24036f31bf93ce962585cc9afdff92e6e4a96a5811e577ee", 0x1d, 0x200, &(0x7f0000000b40)={0x26, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, "54f8620d", 0x7f, '\bk;4', 0x80, 0x3, 0xc4, "391505", "398c6aa1bc0fcdf046a0d5ae98282f5652ec4c44832eddb397be7cdc7c129dc46ee33c8f09d051d98e9d4b9a9741"}, 0x3, 0x80, 0xa6c, &(0x7f0000000b80)})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c40)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000c00)="f87ad14336aea75a2f57d469f7dea8af0bffe137d61f26a73d5307bac05b75628cbf538b97a1", 0x26}, 0x68)
r0 = syz_io_uring_complete(0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
ioctl$CDROMEJECT(r1, 0x5309)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000d00)={{0x1, 0x1, 0x18, <r2=>r1, {0x2}}, './file0\x00'})
ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000d40)=@type=0x2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000dc0)={0xfffffffb, 0x0, &(0x7f0000000d80)=[r1, r0]}, 0x2)
pipe2$9p(&(0x7f0000001280)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), r2)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x800)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x4c, r5, 0xa21a0598419b6caf, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040011}, 0x4000)
socketpair(0x1d, 0x5, 0x3, &(0x7f0000001580)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r1)
sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x3c, r7, 0x2, 0x5, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4c085)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001800)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x8)

03:15:06 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f00000000c0)={@msf={0x54, 0x2a, 0x81}, 0x2, 0x4b, &(0x7f0000000040)=""/75})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000000140))
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x48242, 0x0)
ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f0000000340)={"c05774b282166bdffa3bec2f", &(0x7f00000001c0)="0127cce7140d5288c5ac8b5037abfaee1eb754cea4aa4ce2e64987317f8399274c2fc381d739971ba7c9810b75aa90e218f637b6d707c67a76c76682cacedb0c075e914e207b7a3ddfdc97b760fbd46eeac06f27287e2e4136f03c8d0b9f55d2f784b3dcdaf93f61738ffc8a3d8feef5a39266b33d5a58496af57580b2128046877b1c96ccd504ba51d74b0ebe39cb6fb96bf0be7cad21b1424a1f762ce1b1f0bd9173cd010e195279195e038d53095e5077932b5c65d96191b3637dae201e4c7631bee1a3b2a50817d6a8ac8f7a28af4c36be583296c72b9ad6043c479a133c3d60746ac271c7700742e0", 0xeb, 0xee05, &(0x7f00000002c0)={0x2, 0x1, 0x2, 0x7, 0x0, 0x0, 0x0, "f8125e60", 0x2, "2c1a4a78", 0x5, 0x1b, 0x0, "bfa2e7", "5f952aeb47d9f2f8f5b423abc1f187f4d090f95c7bc5ea772d003cb4f6bb1681bf084f15ba15c5cc167887669f62"}, 0x0, 0x7, 0x4, &(0x7f0000000300)})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r3=>r1, {0x7ff}}, './file0\x00'})
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0)
r5 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000480)={0x1, 0x0, &(0x7f0000000440)=[r4, r0, r2, r5, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2]}, 0x9)
ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f0000000640)={"66057d18e989c0f86dd51a8f", &(0x7f00000004c0)="54b56e6c535b8694348654aeadb74e4a74df9bca9dcdd476342e0de40c459c94c0d63405df7af9a0205eaec7545ee66947137bcade999fd65cc84ae8dc74c0202bb163021eafe1027ed3a0ec6545bbd0a12a5162bb3424a1cfccca64ed8ecab24f6967a5c12dd08130bdbf04b067c61143151449077e80c20d103ffa0fa9337d21e51d32b28248134e0c3749c1a9300eb94556022100a612554c4e3e5326e7ec9082c4f2c1ba66397465cf8d210dbf92c17492babe3e440f872ba8a0f28d8dc84efbec448ae080a9cea35aa569178af44c66109f8208ba0d4367b8bce224efe4b08ae50e23c98529e1553550797b4633b1", 0xf1, 0x20, &(0x7f00000005c0)={0x57, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, "86a5d59f", 0xbe, "01a4ff5f", 0x0, 0x1, 0x5, "48cded", "aa1c279f4511920a3475da990fe4fc19b221959674d5c98eb723e22d2534b9927d85bed69268b6056dfc10987252"}, 0x0, 0x7, 0x2, &(0x7f0000000600)})
ioctl$CDROMRESET(0xffffffffffffffff, 0x5312)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2f}}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48040)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000780), 0x101000, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x1b)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x906}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x4044)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r7=>r1, {0x2e39}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000940)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'})
ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309)

03:15:06 executing program 7:
write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x8)
r0 = syz_io_uring_complete(0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0xc0401)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x8)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002e00), 0x4000, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002e80), r0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x24, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c11}, 0x840)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000002f80))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000002fc0))
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000031c0), 0x101400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000003200)={{0x1, 0x1, 0x18, <r6=>r0, {0x8}}, './file0\x00'})
r7 = syz_io_uring_complete(0x0)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000032c0)=<r8=>0x0)
mount$9p_fd(0x0, &(0x7f0000003240)='./file0\x00', &(0x7f0000003280), 0x1000, &(0x7f0000003300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x1e35}}, {@noextend}, {@version_9p2000}, {@access_any}, {@uname={'uname', 0x3d, '\xb3\\'}}, {@fscache}, {@msize={'msize', 0x3d, 0x8001}}, {@cache_none}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, '.'}}, {@obj_user={'obj_user', 0x3d, '/+)'}}, {@obj_user={'obj_user', 0x3d, 'batadv\x00'}}, {@euid_lt={'euid<', r8}}, {@dont_appraise}]}})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000003440)={{0x1, 0x1, 0x18, r6, {0x9, 0x4}}, './file0\x00'})
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x4000010, r3, 0xe248b000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003740)={'batadv0\x00', <r9=>0x0})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000003880)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003840)={&(0x7f0000003780)={0x90, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4811)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000005480)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000005300)=""/225, 0xe1, 0x1, &(0x7f0000005400)=""/89, 0x59}, &(0x7f00000054c0)=0x40)

[  127.355937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  127.360196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  127.363791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  127.370671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  127.376017] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.380829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  127.398742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.410519] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.427770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.433814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.462212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  127.465344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.466593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.471303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.473299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.557414] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  127.561717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  127.564053] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  127.570052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  127.571211] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  127.573370] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  127.575287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  127.575610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  127.614247] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  127.623069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  127.638910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.639905] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  127.641701] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.644602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  127.645480] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.646835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  127.655359] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  127.659614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  127.666991] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  127.671871] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  127.685936] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  127.700661] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  127.710939] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  127.748602] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  127.760784] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  129.439854] Bluetooth: hci0: command tx timeout
[  129.503202] Bluetooth: hci1: command tx timeout
[  129.504659] Bluetooth: hci2: command tx timeout
[  129.631245] Bluetooth: hci3: command tx timeout
[  129.695175] Bluetooth: hci4: command tx timeout
[  129.760188] Bluetooth: hci5: command tx timeout
[  129.823240] Bluetooth: hci6: command tx timeout
[  129.888363] Bluetooth: hci7: command tx timeout
[  131.487315] Bluetooth: hci0: command tx timeout
[  131.551354] Bluetooth: hci1: command tx timeout
[  131.552316] Bluetooth: hci2: command tx timeout
[  131.679210] Bluetooth: hci3: command tx timeout
[  131.745125] Bluetooth: hci4: command tx timeout
[  131.808457] Bluetooth: hci5: command tx timeout
[  131.872389] Bluetooth: hci6: command tx timeout
[  131.936443] Bluetooth: hci7: command tx timeout
[  133.536147] Bluetooth: hci0: command tx timeout
[  133.601403] Bluetooth: hci2: command tx timeout
[  133.601874] Bluetooth: hci1: command tx timeout
[  133.728171] Bluetooth: hci3: command tx timeout
[  133.792296] Bluetooth: hci4: command tx timeout
[  133.856185] Bluetooth: hci5: command tx timeout
[  133.920200] Bluetooth: hci6: command tx timeout
[  133.984275] Bluetooth: hci7: command tx timeout
[  135.584356] Bluetooth: hci0: command tx timeout
[  135.647168] Bluetooth: hci1: command tx timeout
[  135.647441] Bluetooth: hci2: command tx timeout
[  135.776164] Bluetooth: hci3: command tx timeout
[  135.840460] Bluetooth: hci4: command tx timeout
[  135.904218] Bluetooth: hci5: command tx timeout
[  135.968313] Bluetooth: hci6: command tx timeout
[  136.031293] Bluetooth: hci7: command tx timeout
[  190.133069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  190.136942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  190.146690] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  190.156809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  190.163983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  190.169653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  190.194924] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  190.198566] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  190.201965] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  190.218697] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  190.220074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  190.223276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  190.238505] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  190.260603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  190.260658] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  190.266669] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.279909] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.282766] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  190.296517] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.306956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.311696] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  190.335855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  190.340942] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  190.345166] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  190.353994] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  190.358207] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  190.373285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  190.379693] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  190.383629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  190.387273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  190.392991] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  190.414553] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  190.426443] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  190.428996] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  190.430296] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  190.431446] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  190.434039] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  190.441454] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  190.446886] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  190.450907] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  192.223242] Bluetooth: hci1: command tx timeout
[  192.287346] Bluetooth: hci0: command tx timeout
[  192.415197] Bluetooth: hci2: command tx timeout
[  192.416044] Bluetooth: hci6: command tx timeout
[  192.480154] Bluetooth: hci3: command tx timeout
[  192.543211] Bluetooth: hci4: command tx timeout
[  192.543244] Bluetooth: hci7: command tx timeout
[  192.608219] Bluetooth: hci5: command tx timeout
[  194.271273] Bluetooth: hci1: command tx timeout
[  194.337253] Bluetooth: hci0: command tx timeout
[  194.463161] Bluetooth: hci6: command tx timeout
[  194.464468] Bluetooth: hci2: command tx timeout
[  194.527400] Bluetooth: hci3: command tx timeout
[  194.591546] Bluetooth: hci4: command tx timeout
[  194.593098] Bluetooth: hci7: command tx timeout
[  194.656332] Bluetooth: hci5: command tx timeout
[  196.320377] Bluetooth: hci1: command tx timeout
[  196.383342] Bluetooth: hci0: command tx timeout
[  196.512185] Bluetooth: hci2: command tx timeout
[  196.512211] Bluetooth: hci6: command tx timeout
[  196.576418] Bluetooth: hci3: command tx timeout
[  196.640185] Bluetooth: hci7: command tx timeout
[  196.640218] Bluetooth: hci4: command tx timeout
[  196.703483] Bluetooth: hci5: command tx timeout
[  198.368356] Bluetooth: hci1: command tx timeout
[  198.431224] Bluetooth: hci0: command tx timeout
[  198.559217] Bluetooth: hci2: command tx timeout
[  198.560437] Bluetooth: hci6: command tx timeout
[  198.623386] Bluetooth: hci3: command tx timeout
[  198.687517] Bluetooth: hci4: command tx timeout
[  198.688648] Bluetooth: hci7: command tx timeout
[  198.752003] Bluetooth: hci5: command tx timeout
[  252.084911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  252.087972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  252.095847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  252.103877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  252.112842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  252.171390] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  252.175734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  252.178365] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  252.186740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  252.192395] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  252.341076] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  252.351084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  252.353970] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  252.365795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  252.381652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  252.412270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  252.415445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  252.423418] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  252.436353] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  252.455368] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  252.581066] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  252.591699] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  252.601583] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  252.606686] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  252.630878] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  252.633435] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  252.635871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  252.642500] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  252.644937] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  252.650075] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  252.655878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  252.659016] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  252.663369] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  252.673445] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  252.702778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  252.896916] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  252.899656] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  252.903718] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  252.948782] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  252.969723] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  254.176553] Bluetooth: hci0: command tx timeout
[  254.239479] Bluetooth: hci1: command tx timeout
[  254.559186] Bluetooth: hci2: command tx timeout
[  254.560028] Bluetooth: hci3: command tx timeout
[  254.687248] Bluetooth: hci6: command tx timeout
[  254.751429] Bluetooth: hci5: command tx timeout
[  254.943196] Bluetooth: hci4: command tx timeout
[  255.199161] Bluetooth: hci7: command tx timeout
[  256.224249] Bluetooth: hci0: command tx timeout
[  256.287236] Bluetooth: hci1: command tx timeout
[  256.607200] Bluetooth: hci2: command tx timeout
[  256.607696] Bluetooth: hci3: command tx timeout
[  256.737116] Bluetooth: hci6: command tx timeout
[  256.799444] Bluetooth: hci5: command tx timeout
[  256.992177] Bluetooth: hci4: command tx timeout
[  257.247847] Bluetooth: hci7: command tx timeout
[  258.271356] Bluetooth: hci0: command tx timeout
[  258.335253] Bluetooth: hci1: command tx timeout
[  258.655229] Bluetooth: hci2: command tx timeout
[  258.655717] Bluetooth: hci3: command tx timeout
[  258.783191] Bluetooth: hci6: command tx timeout
[  258.847406] Bluetooth: hci5: command tx timeout
[  259.039657] Bluetooth: hci4: command tx timeout
[  259.296286] Bluetooth: hci7: command tx timeout
[  260.320224] Bluetooth: hci0: command tx timeout
[  260.383445] Bluetooth: hci1: command tx timeout
[  260.704136] Bluetooth: hci3: command tx timeout
[  260.704631] Bluetooth: hci2: command tx timeout
[  260.831163] Bluetooth: hci6: command tx timeout
[  260.895416] Bluetooth: hci5: command tx timeout
[  261.087146] Bluetooth: hci4: command tx timeout
[  261.344121] Bluetooth: hci7: command tx timeout
[  314.355661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  314.360825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  314.365998] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  314.378664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  314.387459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  314.678985] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  314.685804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  314.689841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  314.702852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  314.708999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  314.757585] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.762709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.776173] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.783626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.804737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  314.959375] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  314.969625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  314.975746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.997159] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  314.999918] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  315.005445] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  315.012965] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  315.015558] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  315.027271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  315.028222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  315.031421] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  315.051474] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  315.052457] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  315.054508] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  315.064381] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  315.068648] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  315.075644] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  315.083053] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  315.087702] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  315.089778] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  315.097936] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  315.103340] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  315.115501] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  315.122156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  315.125476] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  316.447390] Bluetooth: hci0: command tx timeout
[  316.768270] Bluetooth: hci1: command tx timeout
[  316.895245] Bluetooth: hci2: command tx timeout
[  317.087553] Bluetooth: hci6: command tx timeout
[  317.151180] Bluetooth: hci4: command tx timeout
[  317.215412] Bluetooth: hci5: command tx timeout
[  317.216004] Bluetooth: hci7: command tx timeout
[  317.216273] Bluetooth: hci3: command tx timeout
[  318.496770] Bluetooth: hci0: command tx timeout
[  318.815188] Bluetooth: hci1: command tx timeout
[  318.943158] Bluetooth: hci2: command tx timeout
[  319.137312] Bluetooth: hci6: command tx timeout
[  319.199226] Bluetooth: hci4: command tx timeout
[  319.263339] Bluetooth: hci7: command tx timeout
[  319.266149] Bluetooth: hci3: command tx timeout
[  319.266559] Bluetooth: hci5: command tx timeout
[  320.543247] Bluetooth: hci0: command tx timeout
[  320.863222] Bluetooth: hci1: command tx timeout
[  320.991393] Bluetooth: hci2: command tx timeout
[  321.183170] Bluetooth: hci6: command tx timeout
[  321.248298] Bluetooth: hci4: command tx timeout
[  321.311546] Bluetooth: hci5: command tx timeout
[  321.311589] Bluetooth: hci3: command tx timeout
[  321.312223] Bluetooth: hci7: command tx timeout
[  322.591332] Bluetooth: hci0: command tx timeout
[  322.913142] Bluetooth: hci1: command tx timeout
[  323.039253] Bluetooth: hci2: command tx timeout
[  323.231283] Bluetooth: hci6: command tx timeout
[  323.295175] Bluetooth: hci4: command tx timeout
[  323.359438] Bluetooth: hci5: command tx timeout
[  323.359870] Bluetooth: hci7: command tx timeout
[  323.361279] Bluetooth: hci3: command tx timeout
[  376.753452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.759827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.764763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.779321] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.785949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.948696] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.951893] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.955044] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.960851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.964754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  377.107474] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  377.114655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  377.117663] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  377.134604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  377.154705] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.180837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  377.199549] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  377.204968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  377.218348] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  377.239109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  377.258551] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  377.275209] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  377.287366] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  377.288927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  377.299401] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  377.309686] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  377.325689] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  377.328008] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  377.344659] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  377.350844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  377.360659] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  377.364986] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  377.422666] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  377.430937] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  377.434603] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  377.443485] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  377.457623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  377.462752] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  377.500302] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  377.517663] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  378.847183] Bluetooth: hci0: command tx timeout
[  379.039342] Bluetooth: hci1: command tx timeout
[  379.295157] Bluetooth: hci2: command tx timeout
[  379.424166] Bluetooth: hci3: command tx timeout
[  379.487259] Bluetooth: hci6: command tx timeout
[  379.487697] Bluetooth: hci4: command tx timeout
[  379.551260] Bluetooth: hci5: command tx timeout
[  379.615173] Bluetooth: hci7: command tx timeout
[  380.895248] Bluetooth: hci0: command tx timeout
[  381.087428] Bluetooth: hci1: command tx timeout
[  381.343293] Bluetooth: hci2: command tx timeout
[  381.471175] Bluetooth: hci3: command tx timeout
[  381.536171] Bluetooth: hci4: command tx timeout
[  381.536619] Bluetooth: hci6: command tx timeout
[  381.599329] Bluetooth: hci5: command tx timeout
[  381.663362] Bluetooth: hci7: command tx timeout
[  382.943562] Bluetooth: hci0: command tx timeout
[  383.136246] Bluetooth: hci1: command tx timeout
[  383.392865] Bluetooth: hci2: command tx timeout
[  383.521266] Bluetooth: hci3: command tx timeout
[  383.583160] Bluetooth: hci6: command tx timeout
[  383.583354] Bluetooth: hci4: command tx timeout
[  383.647286] Bluetooth: hci5: command tx timeout
[  383.712154] Bluetooth: hci7: command tx timeout
[  384.992372] Bluetooth: hci0: command tx timeout
[  385.184389] Bluetooth: hci1: command tx timeout
[  385.440154] Bluetooth: hci2: command tx timeout
[  385.568150] Bluetooth: hci3: command tx timeout
[  385.631197] Bluetooth: hci4: command tx timeout
[  385.632358] Bluetooth: hci6: command tx timeout
[  385.695383] Bluetooth: hci5: command tx timeout
[  385.759190] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
03:20:10  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=ffffffff813508dd RDI=fffffbfff0b83758 RBP=ffffffff85c1bac0 RSP=ffff88800e267750
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b0c2 R11=0000000000012abc
R12=0000000000000001 R13=ffffffff813508dd R14=0000000000000000 R15=ffff88800e267858
RIP=ffffffff81add507 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005595aaf8a080 CR3=0000000026674000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff8880300a7ec8 RCX=ffff88806cf08954 RDX=0000000000000000
RSI=ffffffff85c1bac0 RDI=ffff88802fee9fbc RBP=ffff88802fee9bc0 RSP=ffff88806cf08960
R8 =0000000000000001 R9 =ffff88806cf08a40 R10=000000000003b0c2 R11=000000000003e579
R12=ffff88806cf08a01 R13=ffff88806cf08a48 R14=ffff8880300a7ea0 R15=ffff88806cf08a00
RIP=ffffffff815b6d10 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fae337447a3 CR3=000000000a496000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=4f0066305f315f315f4c53534e45504f XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000