Warning: Permanently added '[localhost]:11544' (ECDSA) to the list of known hosts.
2025/04/27 22:14:50 fuzzer started
2025/04/27 22:14:50 dialing manager at localhost:46629
syzkaller login: [   93.193645] cgroup: Unknown subsys name 'net'
[   93.335304] cgroup: Unknown subsys name 'cpuset'
[   93.374332] cgroup: Unknown subsys name 'rlimit'
2025/04/27 22:15:04 syscalls: 2214
2025/04/27 22:15:04 code coverage: enabled
2025/04/27 22:15:04 comparison tracing: enabled
2025/04/27 22:15:04 extra coverage: enabled
2025/04/27 22:15:04 setuid sandbox: enabled
2025/04/27 22:15:04 namespace sandbox: enabled
2025/04/27 22:15:04 Android sandbox: enabled
2025/04/27 22:15:04 fault injection: enabled
2025/04/27 22:15:04 leak checking: enabled
2025/04/27 22:15:04 net packet injection: enabled
2025/04/27 22:15:04 net device setup: enabled
2025/04/27 22:15:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/27 22:15:04 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/27 22:15:04 USB emulation: enabled
2025/04/27 22:15:04 hci packet injection: enabled
2025/04/27 22:15:04 wifi device emulation: enabled
2025/04/27 22:15:04 802.15.4 emulation: enabled
2025/04/27 22:15:04 fetching corpus: 0, signal 0/0 (executing program)
2025/04/27 22:15:07 starting 8 fuzzer processes
22:15:07 executing program 0:
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x308, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5e5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5babf06d}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8d4}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4de2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x10001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x67d, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7547}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000500), 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1dc, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x134, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf9a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa09e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeede}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6842ec96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4101}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cbee6f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fc4}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41e54da9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85fd}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf0e03af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4db96712}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cd3a24e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x844b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53509ef3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe056}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bf57a65}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9bb}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cc5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe337acf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9a4018e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa400}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x157fe154}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8446}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d56b07a}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b2832b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x353a1d1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd7f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5690}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbcfb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x519e9fad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x11b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x492c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a4d418d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a976189}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5664c95e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x356c76a1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4764bfa5}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x63b6}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x2000c881}, 0x4040050)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x0, 0x9611a8ad7cfcf245, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000840}, 0x4080)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x4000010)
r0 = syz_io_uring_complete(0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2100}, 0x8)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x74, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x17}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x11}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1f}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000040}, 0x20048800)
r2 = dup3(0xffffffffffffffff, r0, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, r1, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x32, 0x6d}}}}, ["", "", ""]}, 0x20}}, 0x4048001)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000e80)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {<r4=>r2}}, './file0\x00'})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r1, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4044)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x7fff}}, './file0\x00'})
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000001000)=[r5, r3], 0x2)
write$P9_RAUTH(r0, &(0x7f0000001040)={0x14, 0x67, 0x2, {0x20, 0x1, 0x3}}, 0x14)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r1, 0x10, 0x70bd29, 0x0, {{}, {@val={0x8, 0x1, 0x77}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4042000}, 0x41)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001180))
sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000001500)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000014c0)={&(0x7f0000001200)={0x29c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8b}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_MEDIA={0x144, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16243a78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x268}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf79}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb508}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x45cd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x47978b5e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x53c2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4888}, 0x40)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x31)

22:15:07 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x301300, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0xb, 0x6, 0xd01, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000240), 0x2, 0x8000)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000280))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r2 = dup2(r1, r1)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4804}, 0x8040)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c)
ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000440))
r4 = dup3(r1, r1, 0x80000)
sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x81040000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x11, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x80}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x4048800)
openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
io_cancel(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0xfff9, r1, &(0x7f0000000600)="babaee2c9c695c6a3f459d9adc409e9e", 0x10, 0xffff, 0x0, 0x2, r2}, &(0x7f0000000680))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r5=>r1, {0x7, 0xfff}}, './file0\x00'})
ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x70, 0x4, 0x0, 0x2, 0xf, 0x1, "2aa7880dc28b7401b8ec261feaf4d4b60924b690bcd0124fd5fc0c477c83eef8401e0efe30b98b7f68611b5ed88064ab6da3242d7480274c37f469ece62bd7ba", "1403df83afeeeeff767a6c123f32398f6de0bb08fb43968f8845c635a45c11fa5f255c97ba68a7573854184185681e282dd6c0a21ce148bc711ed3af0bb5eb14", "e521a278c198b87c29bbbf1e6d2677ece56bdbff3655aa4523f6f95e77a831fb", [0x3, 0x9]})
getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000800)={@initdev, @multicast1}, &(0x7f0000000840)=0x8)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000880)={0x7, 'wg0\x00', {}, 0x40})

22:15:07 executing program 2:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, @ethernet={0x306, @broadcast}, @qipcrtr={0x2a, 0x0, 0x2}, @xdp={0x2c, 0x3, <r2=>0x0, 0x1d}, 0x4, 0x0, 0x0, 0x0, 0x1ff, &(0x7f00000000c0)='gretap0\x00', 0x10000, 0x0, 0xffff})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x16c, r0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x4}}, './file0\x00'})
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x7}, {0x5}, {0x8}, {0x0, 0x4}, {0x68, 0x6}, {0xb5, 0x1}, {0x20, 0x6}, {0x4, 0x4}, {0x5, 0x5}, {0x40, 0x2}, {0x1f, 0x4}, {0x5, 0x3}, {0x3, 0x2}, {0x7}, {0x97, 0x4}, {0x2f, 0x3}, {0x5, 0x5}, {0x80}], "2ce9f81c62317930"}}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x4044844)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r3)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x30}, 0x4090)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000640)={@local, 0x5, 0x3, 0x0, 0x2, 0xfffa, 0xffff}, &(0x7f0000000680)=0x20)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00'})
mount$cgroup(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x4000, &(0x7f0000000780)={[{}, {@clone_children}, {@xattr}, {@cpuset_v2_mode}], [{@audit}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@smackfshat={'smackfshat', 0x3d, 'TIPC\x00'}}, {@fowner_lt={'fowner<', 0xee01}}, {@fowner_lt={'fowner<', 0xee00}}, {@dont_hash}]})
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x48081)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r5=>r3, {0x12}}, '\x00'})
ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000980)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @multicast1}, 0x2a2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x4, 0x7, 0x200})
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffffc0e, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x4)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x0, 0xa0c, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8803}, 0x40000)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000c00)=0x1000, &(0x7f0000000c40)=0x4)
recvfrom(r3, &(0x7f0000000c80)=""/75, 0x4b, 0x42, 0x0, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000d00), 0x43, 0x0)
recvfrom(r6, &(0x7f0000000d40)=""/233, 0xe9, 0x0, 0x0, 0x0)

22:15:07 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$KIOCSOUND(r0, 0x4b2f, 0x182)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/20)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x3)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000080)=0x4)
r2 = openat$incfs(r0, &(0x7f0000001480)='.log\x00', 0x400000, 0x4)
write$rfkill(r2, &(0x7f00000014c0)={0x401, 0x2, 0x2, 0x0, 0x1}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001500)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x80}}, './file0\x00'})
write$P9_RLERROR(r3, &(0x7f0000001540)={0x13, 0x7, 0x2, {0xa, '/dev/null\x00'}}, 0x13)
ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000001580)={0x8, "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"})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000017c0)={{0x1, 0x1, 0x18, <r4=>r1, @in_args={0x1}}, './file0\x00'})
ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000001800)={0x5, 0x1, 0x20, 0x5, 0xffffffff})
r5 = openat(r2, &(0x7f0000001840)='./file0\x00', 0x400200, 0x52)
write$P9_RSTAT(r5, &(0x7f0000001880)={0x48, 0x7d, 0x1, {0x0, 0x41, 0xff80, 0x8001, {0x8, 0x1, 0x3}, 0x50000000, 0xffff1c1d, 0x0, 0x9b, 0x2, '%/', 0xa, '/dev/null\x00', 0x0, '', 0x2, '\')'}}, 0x48)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000001900))
ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000001940)=""/49)
r6 = pidfd_getfd(0xffffffffffffffff, r5, 0x0)
ioctl$KIOCSOUND(r6, 0x4b2f, 0x5)
fcntl$getownex(r1, 0x10, &(0x7f0000001980))

[  109.452099] audit: type=1400 audit(1745792107.373:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
22:15:07 executing program 4:
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x134, 0x13, 0x800, 0x70bd29, 0x25dfdbfe, {0x11, 0xe0, 0x20, 0x0, {0x4e20, 0x4e20, [0x6, 0xfffffff7, 0xffff, 0x7f], [0x82ae, 0x1, 0x99b, 0x7], 0x0, [0x5, 0x841b]}, 0x2, 0x6ebd}, [@INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "fc692216116910c3f8080a21854960a2597195641cef2186d506d8d928c14671e88d166e3208e6efc5488dd11f8fa89336651252156887cbcd8d3cfcfd7d2caeee70f2957439a8c22a742eed7b414fe80924c70d5099eb379fc230b264de14b29024142a2af4220acc07859110e6b01430098ea67814cf61167de0654755738f7ac5446587cbc10ce69370f435d5548339102c7fbe4602bd64a8c64f8361952601cd9c344b9a616a01100b524f3cd24b006bfe62988ce871ed789ecdce50cdd92333a344da2a19e2db8016eabc78153959208a5ae3a8a8fb7571899b6593f6de"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x134}}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000440)={0x5a, 0x7d, 0x1, {{0x0, 0x43, 0xfb, 0x3, {0x8, 0x4, 0x6}, 0x80200000, 0x2, 0x4, 0x400, 0x7, '[]\',!)\'', 0x2, '*{', 0x5, '@[-!\xb9', 0x2, ',}'}, 0x2, '-#', r1, 0xffffffffffffffff, r2}}, 0x5a)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x1}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl2\x00', <r5=>r0, 0x29, 0x0, 0x3f, 0xe47c, 0x4, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7f09, 0x9, 0x8ea}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x4c}}, 0x4044040)
write$tcp_mem(r4, &(0x7f0000000700)={0x5, 0x20, 0xcb, 0x20, 0x8001}, 0x48)
getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000780), &(0x7f00000007c0)=0x8)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r6=>r3}, './file0\x00'})
setsockopt$inet_tcp_buf(r6, 0x6, 0x1a, &(0x7f0000000840)="b2eed1d68165f1567f459c1690d13607dff730baa870af4a9ce1e235c6d78fa2c3bdf054dd043396583271c310c41bd505d2bf94f61226115b56ee0a0ea593ec5ad611832aed558358e99cc407693351555c8fc437d0f5dba8e583fc5f83ef917dc2ccf3123e0fcf5f2b8f46d5f6effae7237c5f731c4f96634d4c2a661c394d7d630dc2913bf7a702f5130085c63a1d433ff79dd311dfc66f1ff4ff16aea3216d5b818e8508e57964a96a13bb95fc91416089083b2b0f6bf872317ed8ce2550bc04248fdeb5b0f8cbbd3a45dda33dbd2af9db267579f0befc20d32b", 0xdc)
r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000940)='syz1\x00', 0x200002, 0x0)
write$binfmt_aout(r7, &(0x7f0000000980)={{0x10b, 0x3, 0x0, 0x33f, 0x2a7, 0x20000000, 0x253, 0x1}, "be64e550e30f2a07d96308b4b8e7749f7f0e2c4ca60a0e9d423c79efaa2e594a2262686feb6d60131119e6ae712dcb640c2fa4147940639bd420280a57a9d94c2200be04785eefbdfaedafc404947520d34ad66cbee2ed33785bb4f87c9d8264bc17273f60d34cc03f4aa442c06efb2a94fedc72e68034b7107c6822104a0ddc1841bc691289cd39d97ed2fb882999f06fae7fbf200544e3bb55fa4888bc76d610d264051a0e8c14a75393a3962d5e6db246605c96d36e53a02a04f57082072d735b96a6dc65d07df52f42573e1bce93e55a8e4eab05ed628132c8dc18d5603e607a13466b9dbb4dbb", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x609)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004894)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xe}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2}}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xe982b77c7fb55344)
r8 = syz_io_uring_setup(0x6b0b, &(0x7f00000011c0)={0x0, 0x6206, 0x1, 0x2, 0x379}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000001240), &(0x7f0000001280))
fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f00000012c0))
r9 = memfd_secret(0x80000)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000001500)={{r9}, 0x0, 0x12, @unused=[0x7, 0x401, 0x3, 0xaf], @subvolid=0x5})

22:15:07 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0xe4f, 0x2, 0xff, 0x2}, {0x7, 0x4, 0x1e, 0x1}, {0x6, 0x0, 0x0, 0xffff0001}, {0x9, 0x9, 0x3, 0x400}, {0x0, 0x8, 0x4, 0x1}, {0xff, 0x2, 0x6a, 0x9}]})
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x1, 0x6, 0x6, 0x80000001, 0x3, [{0x5, 0x100, 0x8, '\x00', 0x604}, {0x0, 0x80000001, 0x0, '\x00', 0x200}, {0x6, 0x1, 0x10001, '\x00', 0xc02}]})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f00000001c0))
ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000200)={0x7})
r2 = signalfd4(r1, &(0x7f00000006c0)={[0x1f]}, 0x8, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000740), 0x2, 0x0)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000780)={0x400, 0x1, 0x0, 0x0, 0x3, [{0x5, 0x8, 0x3f, '\x00', 0x1008}, {0x10000, 0x8, 0x3, '\x00', 0x1}, {0x9, 0x891, 0x63b, '\x00', 0x50a}]})
r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x4002, 0x40, 0x4737eac189a4ac36}, 0x18)
move_mount(r5, &(0x7f0000000900)='./file0\x00', r2, &(0x7f0000000940)='./file0\x00', 0x10)
r6 = creat(&(0x7f0000000980)='./file0\x00', 0x45)
ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f00000009c0))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x4}}, './file0\x00'})
ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0x7)
r8 = clone3(&(0x7f0000001bc0)={0x204600, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0), {0xc}, &(0x7f0000000b00)=""/111, 0x6f, &(0x7f0000000b80)=""/4096, &(0x7f0000001b80)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9, {r7}}, 0x58)
migrate_pages(r8, 0x6a94, &(0x7f0000001c40)=0x7, &(0x7f0000001c80)=0x24000000000)
accept(r3, &(0x7f0000001cc0)=@in6, &(0x7f0000001d40)=0x80)
r9 = syz_open_dev$vcsn(&(0x7f0000001d80), 0x80000001, 0x104c0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000002480)={0x124, 0x0, &(0x7f0000002300)=[@decrefs, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000001f00)={@ptr={0x70742a85, 0x1, &(0x7f0000001dc0)=""/4, 0x4, 0x1, 0x13}, @fda={0x66646185, 0x0, 0x0, 0x3d}, @ptr={0x70742a85, 0x1, &(0x7f0000001e00)=""/236, 0xec, 0x80, 0x13}}, &(0x7f0000001f80)={0x0, 0x28, 0x48}}}, @decrefs={0x40046307, 0x2}, @clear_death={0x400c630f, 0x3}, @request_death, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002180)={@ptr={0x70742a85, 0x1, &(0x7f0000001fc0)=""/176, 0xb0, 0x1, 0x3a}, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000002080)=""/237, 0xed, 0x0, 0x2}}, &(0x7f0000002200)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002240)={@flat=@weak_handle={0x77682a85, 0x1001}, @fda={0x66646185, 0xa, 0x1, 0x34}, @fd}, &(0x7f00000022c0)={0x0, 0x18, 0x38}}, 0x400}, @increfs_done={0x40106308, 0x1}, @enter_looper], 0x3c, 0x0, &(0x7f0000002440)="061ad46de25d0a598036314359c194e173cc040b76b206330e6f23c11fb612f376b527d8c6e33b1fdac0df0396c5f6b8024449ef8ce14d93dc46ab13"})

22:15:07 executing program 6:
r0 = getpid()
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1, r0})
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x1, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x400}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x50}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_STATUS={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x90}, 0x440)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x22200004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, 0x6, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x20c, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x8851)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x150, r3, 0x208, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x29}}}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x1, 0x1}, {0x80, 0x1}, {0x5, 0x1}, {0xfc}, {0x9, 0x2}, {}], "e29a0ccbc8e38696"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x1, 0x2}, {0x8, 0x5}, {0xa7, 0x5}, {0x7, 0x4}, {0x4, 0x2}, {0xd5, 0x5}, {0xc9}, {0x9, 0x7}, {0xff}, {0x8d, 0x2}, {0xff, 0x1}, {0x3f, 0x4}, {0x40, 0x6}, {0x1, 0x7}, {0x81, 0x2e}, {0x6, 0x2}, {0x13, 0x5}], "0e36696d30b6db58"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xe7, 0x3}, {0x6, 0x2}, {0x4, 0x2}, {0xe1, 0x4}, {0xf0, 0x7}, {0x20}, {0x2, 0x4}], "aadaffd9c7ab49dc"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3, 0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x7f, 0x1}, {0x6, 0x4}, {0x40, 0x1}], "22cf3b15ef34225f"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xfb, 0x7}, {0xda, 0x4}, {0xca, 0x6}, {0x8, 0x4}, {0x8, 0x7}, {0x3, 0x6}, {0x6, 0x2}, {0x10, 0x4}, {0x9, 0x3}, {0x5, 0x2}, {0x40, 0x2}, {0x9, 0x2}, {0x5, 0x7}, {0x7, 0x2}, {0x6, 0x5}, {0xbd, 0x7}, {0x1, 0x5}], "5840e728654f77ad"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xf0, 0x2}, {0x9, 0x6}, {0x1}, {0x35, 0x4}, {0x2, 0x4}, {0x3, 0x1}, {0x81, 0x5}, {0x40}, {0x81}, {0x0, 0x2}, {0x8, 0x4}, {0x9, 0x2}, {0x5, 0x4}, {0x1f, 0x2}, {0x6, 0x4}, {0x5, 0x6}, {0x1, 0x7}, {0x2}, {0x30, 0x2}], "700d00075dd1c167"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x7f, 0x7}, {0x8, 0x1}, {0x2, 0x5}, {0x3, 0x4}, {0x3, 0x3}, {0x1f, 0x1}, {0x82, 0x5}, {0x9, 0x5}, {0xfc, 0x3}, {0x6, 0x6}, {0x0, 0x3}, {0x3, 0x3}, {0x9, 0x6}, {0x81, 0x5}, {0x1}], "14f602fd501e8f37"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x2, 0x6}, {0x81, 0x4}, {0x6, 0x7}, {0x0, 0x6}, {0x97, 0x4}, {0x81, 0x4}, {0xf7, 0x6}, {0x1, 0x7}, {0x3e, 0x4}, {0x7c, 0x1}, {0xa9, 0x1}], "7d32e6fa622c4f1b"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x0)
get_robust_list(r0, &(0x7f0000000840)=&(0x7f0000000800)={&(0x7f0000000740)={&(0x7f0000000700)}, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)}}, &(0x7f0000000880)=0x18)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000008c0)={<r4=>0x0, @rand_addr, @multicast2}, &(0x7f0000000900)=0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x200}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x66}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffff8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1f}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, <r5=>r1, {0x6}}, './file0\x00'})
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000ac0)={{r5}, "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"})
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001ac0), 0x208000, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x20, r3, 0x420, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000040)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001d00)={'gre0\x00', &(0x7f0000001c40)={'gretap0\x00', <r7=>r4, 0x80, 0x8, 0x9, 0x2, {{0x1e, 0x4, 0x0, 0x30, 0x78, 0x67, 0x0, 0x80, 0x2f, 0x0, @local, @empty, {[@timestamp={0x44, 0x28, 0x49, 0x0, 0x1, [0x2, 0x9, 0xfff, 0x3f, 0x7, 0xaf, 0xfffff40c, 0x7, 0xffffff78]}, @lsrr={0x83, 0x2b, 0xc8, [@private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0xd}, @rand_addr=0x64010101, @private=0xa010100, @broadcast, @multicast1, @broadcast, @broadcast, @broadcast]}, @noop, @rr={0x7, 0xf, 0xd9, [@remote, @initdev={0xac, 0x1e, 0x8, 0x0}, @multicast1]}]}}}}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000001e00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x78, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x811}, 0x4040045)
ioctl$CDROM_LAST_WRITTEN(r5, 0x5395, &(0x7f0000001e40))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000001e80)={0x7fffffff, 0x3})

22:15:07 executing program 7:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x10200, 0x81)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/195)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000140)={@empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
fdatasync(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000001c0))
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000200)=""/155)
r3 = signalfd4(r1, &(0x7f0000000380)={[0x7594]}, 0x8, 0x80000)
preadv2(r3, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/211, 0xd3}], 0x1, 0x6, 0x3ff, 0x1)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000500))
r4 = accept$packet(r1, 0x0, &(0x7f0000000540))
ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000580))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000019c0)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {r0}}, './file0\x00'})
setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000001a00)=0x2, 0x4)
r6 = socket$inet(0x2, 0x3, 0x7)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000001a40)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001b80), 0x80403, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000001bc0)={{{@in=@remote, @in=@private}}, {{@in6=@remote}}}, &(0x7f0000001cc0)=0xe8)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000001d00)={0x11, @private=0xa010101, 0x4e20, 0x2, 'wlc\x00', 0x21, 0x80, 0x45}, 0x2c)

[  111.054500] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  111.068712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  111.071688] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  111.080360] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  111.096146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  111.111640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  111.121091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  111.122549] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  111.168327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  111.174252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.192195] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  111.194282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  111.200464] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  111.204615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  111.207048] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  111.228191] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  111.229518] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  111.241735] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  111.246071] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  111.251377] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  111.255519] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.264273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.270258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.272983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  111.276426] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  111.288052] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  111.294656] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  111.298944] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  111.307623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  111.308211] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.312005] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  111.313791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.314103] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  111.346038] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  111.350022] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  111.398948] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  111.408549] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  111.425005] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  111.461086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  111.464455] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  113.196174] Bluetooth: hci0: command tx timeout
[  113.259258] Bluetooth: hci1: command tx timeout
[  113.386976] Bluetooth: hci3: command tx timeout
[  113.387870] Bluetooth: hci7: command tx timeout
[  113.451169] Bluetooth: hci2: command tx timeout
[  113.451790] Bluetooth: hci4: command tx timeout
[  113.515749] Bluetooth: hci6: command tx timeout
[  113.578921] Bluetooth: hci5: command tx timeout
[  115.242957] Bluetooth: hci0: command tx timeout
[  115.306920] Bluetooth: hci1: command tx timeout
[  115.434945] Bluetooth: hci3: command tx timeout
[  115.435438] Bluetooth: hci7: command tx timeout
[  115.499870] Bluetooth: hci2: command tx timeout
[  115.500312] Bluetooth: hci4: command tx timeout
[  115.562968] Bluetooth: hci6: command tx timeout
[  115.627837] Bluetooth: hci5: command tx timeout
[  117.290946] Bluetooth: hci0: command tx timeout
[  117.357093] Bluetooth: hci1: command tx timeout
[  117.483224] Bluetooth: hci7: command tx timeout
[  117.483696] Bluetooth: hci3: command tx timeout
[  117.546904] Bluetooth: hci4: command tx timeout
[  117.547372] Bluetooth: hci2: command tx timeout
[  117.612847] Bluetooth: hci6: command tx timeout
[  117.674902] Bluetooth: hci5: command tx timeout
[  119.339326] Bluetooth: hci0: command tx timeout
[  119.402927] Bluetooth: hci1: command tx timeout
[  119.531241] Bluetooth: hci7: command tx timeout
[  119.532898] Bluetooth: hci3: command tx timeout
[  119.595252] Bluetooth: hci4: command tx timeout
[  119.596151] Bluetooth: hci2: command tx timeout
[  119.659108] Bluetooth: hci6: command tx timeout
[  119.723334] Bluetooth: hci5: command tx timeout
[  173.700300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.705424] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.707345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.715149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.719082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.833062] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.836843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.840775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.845952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.849236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.948671] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  173.974448] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  173.978346] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  174.002995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  174.016342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  174.018565] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  174.021077] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  174.026380] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  174.036544] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  174.038409] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  174.049159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  174.094099] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  174.096684] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  174.118530] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  174.146779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  174.147740] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  174.175153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  174.182010] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  174.204712] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  174.217709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  174.224296] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  174.244698] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  174.270773] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  174.305503] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  174.312136] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  174.507693] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  174.552298] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  174.559231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  174.567550] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  174.572612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  175.788517] Bluetooth: hci0: command tx timeout
[  175.917076] Bluetooth: hci1: command tx timeout
[  176.107914] Bluetooth: hci2: command tx timeout
[  176.107931] Bluetooth: hci3: command tx timeout
[  176.299221] Bluetooth: hci5: command tx timeout
[  176.362932] Bluetooth: hci4: command tx timeout
[  176.363113] Bluetooth: hci6: command tx timeout
[  176.747940] Bluetooth: hci7: command tx timeout
[  177.834891] Bluetooth: hci0: command tx timeout
[  177.964361] Bluetooth: hci1: command tx timeout
[  178.155026] Bluetooth: hci2: command tx timeout
[  178.155904] Bluetooth: hci3: command tx timeout
[  178.346936] Bluetooth: hci5: command tx timeout
[  178.411081] Bluetooth: hci6: command tx timeout
[  178.413848] Bluetooth: hci4: command tx timeout
[  178.795146] Bluetooth: hci7: command tx timeout
[  179.883147] Bluetooth: hci0: command tx timeout
[  180.010913] Bluetooth: hci1: command tx timeout
[  180.202892] Bluetooth: hci3: command tx timeout
[  180.203008] Bluetooth: hci2: command tx timeout
[  180.394912] Bluetooth: hci5: command tx timeout
[  180.459676] Bluetooth: hci4: command tx timeout
[  180.460012] Bluetooth: hci6: command tx timeout
[  180.843835] Bluetooth: hci7: command tx timeout
[  181.930870] Bluetooth: hci0: command tx timeout
[  182.058896] Bluetooth: hci1: command tx timeout
[  182.250917] Bluetooth: hci2: command tx timeout
[  182.250941] Bluetooth: hci3: command tx timeout
[  182.443162] Bluetooth: hci5: command tx timeout
[  182.507842] Bluetooth: hci4: command tx timeout
[  182.507878] Bluetooth: hci6: command tx timeout
[  182.891104] Bluetooth: hci7: command tx timeout
[  233.671367] syz-executor.7 (2857) used greatest stack depth: 24592 bytes left
[  235.843569] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  235.845765] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  235.848522] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  235.851703] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  235.855081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  235.974720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.977841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.981446] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.987315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.988744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.992551] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.998669] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.002354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  236.023388] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  236.035070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  236.042700] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  236.047356] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  236.052097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.069700] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.073612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  236.292587] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  236.301873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  236.318654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  236.330370] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  236.331624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  236.340999] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  236.344404] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  236.346579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  236.349470] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  236.350308] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  236.358251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  236.358583] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  236.364737] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  236.369368] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  236.372446] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  236.378251] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  236.386289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  236.390672] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  236.408115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  236.412190] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  237.931979] Bluetooth: hci0: command tx timeout
[  238.058958] Bluetooth: hci2: command tx timeout
[  238.124236] Bluetooth: hci3: command tx timeout
[  238.125153] Bluetooth: hci1: command tx timeout
[  238.443902] Bluetooth: hci4: command tx timeout
[  238.509257] Bluetooth: hci6: command tx timeout
[  238.511585] Bluetooth: hci5: command tx timeout
[  238.511952] Bluetooth: hci7: command tx timeout
[  239.980868] Bluetooth: hci0: command tx timeout
[  240.106905] Bluetooth: hci2: command tx timeout
[  240.171005] Bluetooth: hci3: command tx timeout
[  240.171155] Bluetooth: hci1: command tx timeout
[  240.491963] Bluetooth: hci4: command tx timeout
[  240.555026] Bluetooth: hci6: command tx timeout
[  240.555056] Bluetooth: hci7: command tx timeout
[  240.555101] Bluetooth: hci5: command tx timeout
[  242.027556] Bluetooth: hci0: command tx timeout
[  242.156859] Bluetooth: hci2: command tx timeout
[  242.218898] Bluetooth: hci3: command tx timeout
[  242.219343] Bluetooth: hci1: command tx timeout
[  242.539930] Bluetooth: hci4: command tx timeout
[  242.603315] Bluetooth: hci5: command tx timeout
[  242.603772] Bluetooth: hci7: command tx timeout
[  242.604345] Bluetooth: hci6: command tx timeout
[  244.074879] Bluetooth: hci0: command tx timeout
[  244.202879] Bluetooth: hci2: command tx timeout
[  244.267209] Bluetooth: hci3: command tx timeout
[  244.267651] Bluetooth: hci1: command tx timeout
[  244.587085] Bluetooth: hci4: command tx timeout
[  244.651248] Bluetooth: hci7: command tx timeout
[  244.652106] Bluetooth: hci6: command tx timeout
[  244.652547] Bluetooth: hci5: command tx timeout
[  298.368924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  298.377058] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  298.379278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  298.383063] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  298.384478] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.390968] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  298.397590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.401766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  298.406284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.408742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  298.465261] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  298.470343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  298.474022] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  298.482053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  298.485626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  298.752151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  298.794907] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  298.804500] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  298.806349] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  298.814325] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  298.857008] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  298.862426] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  298.906094] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  298.910963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  298.912717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  298.914198] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  298.923359] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  298.928698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  298.942140] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  298.945710] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  298.950270] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  298.952570] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  298.974981] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  299.023285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  299.052061] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  299.071443] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  299.076101] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.123197] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  299.128609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  299.145167] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  300.458980] Bluetooth: hci0: command tx timeout
[  300.459009] Bluetooth: hci1: command tx timeout
[  300.522934] Bluetooth: hci2: command tx timeout
[  301.034910] Bluetooth: hci3: command tx timeout
[  301.100862] Bluetooth: hci4: command tx timeout
[  301.164029] Bluetooth: hci5: command tx timeout
[  301.227629] Bluetooth: hci7: command tx timeout
[  301.228268] Bluetooth: hci6: command tx timeout
[  302.507270] Bluetooth: hci0: command tx timeout
[  302.507313] Bluetooth: hci1: command tx timeout
[  302.572421] Bluetooth: hci2: command tx timeout
[  303.083363] Bluetooth: hci3: command tx timeout
[  303.147867] Bluetooth: hci4: command tx timeout
[  303.211010] Bluetooth: hci5: command tx timeout
[  303.274921] Bluetooth: hci6: command tx timeout
[  303.275868] Bluetooth: hci7: command tx timeout
[  304.555731] Bluetooth: hci1: command tx timeout
[  304.556891] Bluetooth: hci0: command tx timeout
[  304.620831] Bluetooth: hci2: command tx timeout
[  305.132838] Bluetooth: hci3: command tx timeout
[  305.195138] Bluetooth: hci4: command tx timeout
[  305.258874] Bluetooth: hci5: command tx timeout
[  305.322922] Bluetooth: hci7: command tx timeout
[  305.323396] Bluetooth: hci6: command tx timeout
[  306.603090] Bluetooth: hci0: command tx timeout
[  306.603552] Bluetooth: hci1: command tx timeout
[  306.668202] Bluetooth: hci2: command tx timeout
[  307.180111] Bluetooth: hci3: command tx timeout
[  307.244116] Bluetooth: hci4: command tx timeout
[  307.307951] Bluetooth: hci5: command tx timeout
[  307.371079] Bluetooth: hci7: command tx timeout
[  307.372032] Bluetooth: hci6: command tx timeout
[  360.836309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  360.844973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  360.849575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  360.860679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  360.867746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  360.906208] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  360.909614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  360.911941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  360.919244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  360.924253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  361.054601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  361.067084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  361.080286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  361.091248] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  361.098424] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  361.237721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.243138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  361.247396] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.256624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.286858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  361.309756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  361.327605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  361.332285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  361.340160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  361.343382] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  361.359315] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  361.370271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  361.372924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  361.381643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  361.385258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  361.534756] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  361.542608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  361.550487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  361.560244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  361.565444] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  361.754427] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  361.785582] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  361.810413] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  361.858330] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  361.877252] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  362.925535] Bluetooth: hci0: command tx timeout
[  362.986884] Bluetooth: hci1: command tx timeout
[  363.178894] Bluetooth: hci2: command tx timeout
[  363.498914] Bluetooth: hci5: command tx timeout
[  363.563948] Bluetooth: hci4: command tx timeout
[  363.564612] Bluetooth: hci3: command tx timeout
[  363.691086] Bluetooth: hci6: command tx timeout
[  364.074924] Bluetooth: hci7: command tx timeout
[  364.972001] Bluetooth: hci0: command tx timeout
[  365.034898] Bluetooth: hci1: command tx timeout
[  365.228036] Bluetooth: hci2: command tx timeout
[  365.548777] Bluetooth: hci5: command tx timeout
[  365.612049] Bluetooth: hci4: command tx timeout
[  365.612525] Bluetooth: hci3: command tx timeout
[  365.738871] Bluetooth: hci6: command tx timeout
[  366.123051] Bluetooth: hci7: command tx timeout
[  367.019434] Bluetooth: hci0: command tx timeout
[  367.084290] Bluetooth: hci1: command tx timeout
[  367.276834] Bluetooth: hci2: command tx timeout
[  367.595988] Bluetooth: hci5: command tx timeout
[  367.658933] Bluetooth: hci3: command tx timeout
[  367.659392] Bluetooth: hci4: command tx timeout
[  367.786856] Bluetooth: hci6: command tx timeout
[  368.171853] Bluetooth: hci7: command tx timeout
[  369.068066] Bluetooth: hci0: command tx timeout
[  369.130883] Bluetooth: hci1: command tx timeout
[  369.323042] Bluetooth: hci2: command tx timeout
[  369.644862] Bluetooth: hci5: command tx timeout
[  369.706872] Bluetooth: hci4: command tx timeout
[  369.707338] Bluetooth: hci3: command tx timeout
[  369.835017] Bluetooth: hci6: command tx timeout
[  370.220116] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
22:20:09  Registers:
info registers vcpu 0
RAX=0000000000000007 RBX=0000000000000007 RCX=ffffffff81b00b8e RDX=0000000000000000
RSI=0000000000000008 RDI=ffff8880094a4054 RBP=ffff88802d507a10 RSP=ffff88802d507730
R8 =0000000000000000 R9 =fffff94000121dc8 R10=ffffea000090ee47 R11=ffff88806ce3c300
R12=ffff88802d5079d0 R13=ffffed1005aa0f3a R14=dffffc0000000000 R15=1ffff11005aa0ee6
RIP=ffffffff81b0a6c0 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb214aba6f4 CR3=0000000005a88000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fb214ac947000007fb214ac8f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffffffff8138aeb0 RCX=ffff88802720f57c RDX=1ffff11004e41ed0
RSI=ffffffff85c1bac0 RDI=ffffffff8138aeb0 RBP=ffff88802720f680 RSP=ffff88802720f600
R8 =0000000000000001 R9 =ffff88802720f668 R10=000000000003b0c2 R11=0000000000023100
R12=ffff88802720f6f0 R13=0000000000000000 R14=ffff888033f48000 R15=0000000000000cc0
RIP=ffffffff8142facf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe7400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8f4d0c48e0 CR3=000000000f47a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000